Loop · Agentic Access

Loop Agentic Access

x-agentic-access generated

Loop exposes 41 API operations that an AI agent could call, of which 15 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.

By consequence: 26 read, 6 write, and 9 physical.

Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.

CompanyLogisticsSupply ChainFreightFreight AuditPaymentsTransportationArtificial IntelligenceData Platform

Operations: 41 Acting: 15 Human-in-the-loop: 0 Method: generated

By consequence

read 26 write 6 physical 9

Highest-consequence actions

The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.

Method	Path	Consequence	Human-in-loop
POST	/v1/artifacts/payable-invoice-record	physical	conditional
POST	/v1/artifacts/purchase-order-record	physical	conditional
POST	/v1/artifacts/receivable-invoice-record	physical	conditional
POST	/v1/artifacts/shipment-record	physical	conditional
POST	/v1/factoring-relationships	physical	conditional
POST	/v1/invoicing-relationships	physical	conditional
POST	/v1/organizations/create-organization-with-payment-detail	physical	conditional
DELETE	/v1/receivable-invoices/{qid}	physical	conditional
PUT	/v1/receivable-invoices/{qid}/void	physical	conditional

Source

Agentic Access

generated: '2026-07-20'
method: generated
source: openapi/loop-onboarding-openapi-original.json, openapi/loop-openapi-original.json
description: Recommended x-agentic-access execution contracts, classified heuristically from
  the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
  audience per deployment. See research/curity/agentic-governance/.
summary:
  operations: 41
  by_action_class:
    acting: 15
    connected: 26
  by_consequence:
    physical: 9
    read: 26
    write: 6
  human_in_the_loop_required: 0
operations:
- path: /v1/organizations/create-organization-with-payment-detail
  method: post
  operationId: Organizations_create
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/artifact-ingestion-state
  method: get
  operationId: ArtifactIngestionState_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/artifact-ingestion-state/{qid}
  method: get
  operationId: ArtifactIngestionState_get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/artifacts
  method: post
  operationId: Artifacts_create
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/artifacts/cost-coding-table-entry-list
  method: post
  operationId: CostCodingTableEntryListArtifact_create
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/artifacts/organization-factor-assignment-record
  method: post
  operationId: OrganizationFactorAssignmentRecordArtifacts_create
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/artifacts/payable-invoice-record
  method: post
  operationId: CreatePayableInvoiceRecordArtifact_create
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/artifacts/purchase-order-record
  method: post
  operationId: PurchaseOrderRecordArtifact_create
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/artifacts/receivable-invoice-record
  method: post
  operationId: ReceivableInvoiceRecordArtifact_create
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/artifacts/shipment-record
  method: post
  operationId: ShipmentRecordArtifacts_create
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/artifacts/tagged/{tagType}/{tagTypeValue}
  method: get
  operationId: Artifacts_getByTag
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/artifacts/{qid}
  method: get
  operationId: Artifacts_get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/artifacts/{qid}/download
  method: get
  operationId: Artifacts_download
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/business-exceptions/target-entity-qid/{targetEntityQid}
  method: get
  operationId: BusinessExceptions_listForTargetEntityQid
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/business-exceptions/{qid}
  method: get
  operationId: BusinessExceptions_get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/business-exceptions/{qid}/resolve
  method: put
  operationId: BusinessExceptions_resolve
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/factoring-relationships
  method: post
  operationId: FactoringRelationships_upsert
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/factoring-relationships
  method: get
  operationId: FactoringRelationships_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/factoring-relationships/{qid}
  method: get
  operationId: FactoringRelationships_get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/invoicing-relationships
  method: post
  operationId: InvoicingRelationships_upsert
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/invoicing-relationships
  method: get
  operationId: InvoicingRelationships_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/invoicing-relationships/{qid}
  method: get
  operationId: InvoicingRelationships_get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/organizations
  method: post
  operationId: Organizations_create
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/organizations/tagged/{tagType}/{tagTypeValue}
  method: get
  operationId: Organizations_getByTag
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/organizations/{qid}
  method: get
  operationId: Organizations_get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/organizations/{qid}
  method: put
  operationId: Organizations_update
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/payable-allocations
  method: get
  operationId: PayableAllocations_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/payable-allocations/{qid}
  method: get
  operationId: PayableAllocations_get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/payable-invoice-reviews
  method: get
  operationId: PayableInvoiceReview_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/payable-invoices
  method: get
  operationId: PayableInvoices_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/payable-invoices/{qid}
  method: get
  operationId: PayableInvoices_get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/payable-invoices/{qid}/review
  method: get
  operationId: PayableInvoiceReview_get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/payments
  method: get
  operationId: Payments_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/payments/{qid}
  method: get
  operationId: Payments_get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/ping
  method: get
  operationId: Ping_ping
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/receivable-invoices
  method: get
  operationId: ReceivableInvoices_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/receivable-invoices/{qid}
  method: get
  operationId: ReceivableInvoices_get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/receivable-invoices/{qid}
  method: delete
  operationId: ReceivableInvoices_delete
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/receivable-invoices/{qid}/void
  method: put
  operationId: ReceivableInvoices_void
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/shipment-jobs
  method: get
  operationId: ShipmentJobs_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/shipment-jobs/{qid}
  method: get
  operationId: ShipmentJobs_get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none