MedAdvisor Agentic Access
MedAdvisor exposes 112 API operations that an AI agent could call, of which 67 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.
By consequence: 45 read, 49 write, 17 physical, and 1 safety-critical.
1 operation are classed safety-critical and should require human-in-the-loop approval at runtime.
Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.
By consequence
Highest-consequence actions
The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.
| Method | Path | Consequence | Human-in-loop |
|---|---|---|---|
| POST | /api/v1/account/resetpassword | safety-critical | required |
| POST | /api/v1/RefillOrder/AddNote | physical | conditional |
| POST | /api/v1/RefillOrder/Complete | physical | conditional |
| POST | /api/v1/RefillOrder/CompletedOrder/{orderId}/Refund | physical | conditional |
| POST | /api/v1/RefillOrder/CompletedOrder/{orderId}/Reminder | physical | conditional |
| POST | /api/v1/RefillOrder/CompletedOrder/{orderId}/ReturnToStock | physical | conditional |
| PUT | /api/v1/RefillOrder/Delivery/{orderId} | physical | conditional |
| POST | /api/v1/RefillOrder/LineItem/{orderId} | physical | conditional |
| DELETE | /api/v1/RefillOrder/LineItem/{orderId}/{lineItemId} | physical | conditional |
| DELETE | /api/v1/RefillOrder/PendingOrder/{orderId} | physical | conditional |
| POST | /api/v1/RefillOrder/ProcessPIA | physical | conditional |
| POST | /api/v1/RefillOrder/SendEScript | physical | conditional |
| POST | /api/v1/RefillOrder/UpdateLineItemStatus | physical | conditional |
| POST | /api/v1/inbox/addscript | physical | conditional |
| POST | /api/v1/inbox/sendscheduled | physical | conditional |
| POST | /api/v1/pharmacy/SendBroadcastMessage | physical | conditional |
| POST | /api/v1/pharmacy/SendEScriptTokenToMedViewFlow | physical | conditional |
| POST | /api/v1/pharmacy/notify | physical | conditional |
Source
Agentic Access
generated: '2026-07-24'
method: generated
source: openapi/medadvisor-pharmacy-unified-openapi.json
description: Recommended x-agentic-access execution contracts, classified heuristically from
the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
audience per deployment. See research/curity/agentic-governance/.
summary:
operations: 112
by_action_class:
acting: 67
connected: 45
by_consequence:
write: 49
safety-critical: 1
read: 45
physical: 17
human_in_the_loop_required: 1
operations:
- path: /api/v1/account/3rdpartylogin
method: post
operationId: Account_LoginPharmacy
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/account/resetpassword
method: post
operationId: Account_ResetPassword
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /api/v1/bookingservice/pharmacy/gettime
method: get
operationId: BookingService_GetPharmacyTime
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/bookingservice/pharmacy/allservices
method: get
operationId: BookingService_AllServices
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/bookingservice/pharmacy/eventresource
method: get
operationId: BookingService_RetrieveEventResources
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/bookingservice/pharmacy/services/dynamic
method: get
operationId: BookingService_RetrieveDynamicServices
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/bookingservice/pharmacy/services/available
method: get
operationId: BookingService_RetrieveAvailableServices
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/bookingservice/pharmacy/eventresource/{resourceId}
method: get
operationId: BookingService_RetrieveEventResource
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/bookingservice/pharmacy/services/booking/{bookingId}
method: get
operationId: BookingService_RetrieveBooking
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/bookingservice/pharmacy/calendartoken/{resetStaffUrl}
method: get
operationId: BookingService_RetrieveCalendarAccessTokens
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/bookingservice/pharmacy/services/dynamic/{capabilityId}
method: get
operationId: BookingService_RetrieveDynamicServices
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/bookingservice/pharmacy/services/available/{capabilityId}
method: get
operationId: BookingService_RetrieveAvailableServices
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/bookingservice/pharmacy/calendartokendetails/{calendarToken}/{staffToken}
method: get
operationId: BookingService_RetrieveCalendarTokenDetails
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/bookingservice/pharmacy/retrieveavailabletimeslots
method: get
operationId: BookingService_RetrieveAvailableTimeslots
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/bookingservice/pharmacy/availabletimeslotnewbooking
method: get
operationId: BookingService_RetrieveAvailableTimeSlotNewBooking
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/bookingservice/pharmacy/retrieveeventbookings
method: get
operationId: BookingService_RetrieveEventBookings
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/bookingservice/patientsearch
method: post
operationId: BookingService_SearchPatients
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/bookingservice/services/update
method: post
operationId: BookingService_UpdateEventService
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/bookingservice/services/historic
method: post
operationId: BookingService_RetrieveHistoricBookings
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/bookingservice/createeventbooking
method: post
operationId: BookingService_CreateEventBooking
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/bookingservice/services/suggested
method: post
operationId: BookingService_RetrieveSuggestedServices
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/bookingservice/eventbooking/update
method: post
operationId: BookingService_UpdateEventBooking
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/bookingservice/eventresource/update
method: post
operationId: BookingService_UpdateEventResource
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/bookingservice/eventpreferences/update
method: post
operationId: BookingService_UpdateEventPreferences
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/bookingservice/pharmacy/services/generate
method: post
operationId: BookingService_GenerateServiceBooking
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/bookingservice/pharmacy/print/{bookingCode}
method: post
operationId: BookingService_Print
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/bookingservice/pharmacy/services/bookingedit
method: post
operationId: BookingService_EditBookingWithCheck
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/bookingservice/pharmacy/eventresource/create/{name}
method: post
operationId: BookingService_CreateEventResource
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/bookingservice/pharmacy/services/delete/{serviceId}
method: post
operationId: BookingService_DeleteEventService
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/bookingservice/pharmacy/eventbooking/{bookingId}/delete
method: post
operationId: BookingService_DeleteEventBooking
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/bookingservice/pharmacy/eventresource/update/{resourceId}
method: post
operationId: BookingService_UpdateEventResourceAssociateService
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/bookingservice/pharmacy/eventresource/{resourceId}/delete
method: post
operationId: BookingService_DeleteEventResource
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/bookingservice/pharmacy/bookingsearch
method: post
operationId: BookingService_BookingSearch
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/bookingservice/pharmacy/services/availableresource/{capabilityId}
method: post
operationId: BookingService_RetrieveAvailableResourceForCapability
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/bookingservice/pharmacy/services/deletebooking/{bookingId}
method: delete
operationId: BookingService_DeleteServiceBooking
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/bookingservice/deletebookingrequest/{patientId}/{bookingId}
method: delete
operationId: BookingService_DeleteBookingRequest
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/comunication/GetPatientGroups
method: get
operationId: Communication_GetPatientGroups
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/comunication/GetAllPatientGroupMembers
method: get
operationId: Communication_GetAllPatientGroupMembers
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/comunication/AddPatientGroup
method: post
operationId: Communication_AddPatientGroup
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/comunication/EditPatientGroup
method: post
operationId: Communication_EditPatientGroup
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/comunication/UpdatePatientGroupMembers
method: post
operationId: Communication_UpdatePatientGroupMembers
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/comunication/DeletePatientGroup/{id}
method: delete
operationId: Communication_DeletePatientGroup
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/config/demographicRules
method: get
operationId: Config_RetrieveDemographicRules
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/config/precursorInstructions
method: get
operationId: Config_RetrievePrecursorInstructionMappings
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/drug/escript/{token}
method: get
operationId: Drug_RetrieveEPrescription3rdParty
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/hq/services
method: get
operationId: HeadOffice_GetServices
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/hq/services
method: post
operationId: HeadOffice_CreateService
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/hq/pharmacies
method: get
operationId: HeadOffice_GetPharmacies
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/hq/services/{id}
method: get
operationId: HeadOffice_GetService
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/hq/services/{id}
method: put
operationId: HeadOffice_UpdateService
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/hq/pharmacies/{id}
method: get
operationId: HeadOffice_GetPharmacy
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/hq/services/{id}/push/{pharmacyId}/deadline
method: put
operationId: HeadOffice_UpdatePushDeadline
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/hq/services/{id}/push
method: post
operationId: HeadOffice_PushService
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/inbox/main
method: get
operationId: Inbox_GetInboxMessages
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/inbox/sent
method: post
operationId: Inbox_GetSentMessages
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/inbox/addscript
method: post
operationId: Inbox_AddScript
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/inbox/completed
method: post
operationId: Inbox_GetCompletedMessages
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/inbox/scheduled
method: post
operationId: Inbox_GetScheduledMessages
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/inbox/sendscheduled
method: post
operationId: Inbox_SendScheduledMessages
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/inbox/readytocollect
method: post
operationId: Inbox_ReadyToCollectMessage
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/inbox/dismissmultiple
method: post
operationId: Inbox_DismissMultiple
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/logging
method: post
operationId: Logging_Core_Post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/pharmacy
method: get
operationId: Pharmacy_GetPharmacyDetail
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/pharmacy/{id}
method: get
operationId: Pharmacy_PharmacyDetail
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/pharmacy/settings
method: get
operationId: Pharmacy_RetrievePharmacySettings
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/pharmacy/settings
method: put
operationId: Pharmacy_UpdatePharmacySettings
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/pharmacy/GetAuthInfo
method: get
operationId: Pharmacy_GetAuthInfo
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/pharmacy/ho-pending-activations
method: get
operationId: Pharmacy_GetHoPendingActivations
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/pharmacy/PharmacyHasPendingHshSms
method: get
operationId: Pharmacy_PharmacyHasPendingHshSms
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/pharmacy/GetPharmacyModuleSettings
method: get
operationId: Pharmacy_GetPharmacyModuleSettings
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/pharmacy/GetPharmacyActivatingBanner
method: get
operationId: Pharmacy_GetPharmacyActivatingBanner
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/pharmacy/ElectronicPrescribingSettings
method: get
operationId: Pharmacy_GetPharmacyElectronicPrescribingSettings
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/pharmacy/RetrievePharmaciesWithPendingSMSReminders
method: get
operationId: Pharmacy_RetrievePharmaciesWithPendingSMSReminders
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/pharmacy/PendingHshSmsMessage
method: get
operationId: Pharmacy_GetPendingHshSmsMessage
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/pharmacy/RetrieveSMSReminderPending
method: get
operationId: Pharmacy_RetrieveSMSReminderPending
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/pharmacy/RetrievePlusOneQueuedActions
method: get
operationId: Pharmacy_RetrievePlusOneQueuedActions
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/pharmacy/GetPharmacyReleaseNotes
method: get
operationId: Pharmacy_GetPharmacyReleaseNotes
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/pharmacy/GetPharmacyReleaseNotesByType
method: get
operationId: Pharmacy_GetPharmacyReleaseNotesByType
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/pharmacy/logo
method: get
operationId: Pharmacy_GetPhoto
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/pharmacy/logo
method: post
operationId: Pharmacy_UploadLogo
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/pharmacy/GetModuleSettingsByIdentifier
method: get
operationId: Pharmacy_GetModuleSettingsByIdentifier
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/pharmacy/GetPharmacySettingByIdentifier
method: get
operationId: Pharmacy_GetPharmacySettingByIdentifier
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/pharmacy/notify
method: post
operationId: Pharmacy_NotifyPharmacyOfECommerceOrder
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/pharmacy/features
method: post
operationId: Pharmacy_SearchPharmacyFeatures
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/pharmacy/SearchPatients
method: post
operationId: Pharmacy_SearchPatients
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/pharmacy/getpharmacyinfos
method: post
operationId: Pharmacy_GetPharmacyInfos
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/pharmacy/RegisterAccountV4
method: post
operationId: Pharmacy_RegisterAccountV4
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/pharmacy/UpdateActionStatus
method: post
operationId: Pharmacy_UpdateActionStatus
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/pharmacy/UpdateCachePatient
method: post
operationId: Pharmacy_UpdateCachePatient
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/pharmacy/VerifyPharmacyInfo
method: post
operationId: Pharmacy_VerifyPharmacyInfo
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/pharmacy/SearchPatientAdvance
method: post
operationId: Pharmacy_SearchPatientAdvance
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/pharmacy/SendBroadcastMessage
method: post
operationId: Pharmacy_SendBroadcastMessage
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/pharmacy/AcceptTermsConditions
method: post
operationId: Pharmacy_AcceptTermsConditions
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/pharmacy/GenerateActivationCodeV3
method: post
operationId: Pharmacy_GenerateActivationCodeV3
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/pharmacy/UpdateSMSReminderComplete
method: post
operationId: Pharmacy_UpdateSMSReminderComplete
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/pharmacy/GeneratePharmacyChangeRequest
method: post
operationId: Pharmacy_GeneratePharmacyChangeRequest
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/pharmacy/SendEScriptTokenToMedViewFlow
method: post
operationId: Pharmacy_SendEScriptTokenToMedViewFlow
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/RefillOrder/PendingOrder/{orderId}
method: get
operationId: RefillOrder_GetPendingOrder
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/RefillOrder/PendingOrder/{orderId}
method: delete
operationId: RefillOrder_Delete
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/RefillOrder/CompletedOrder/{
# --- truncated at 32 KB (36 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/medadvisor/refs/heads/main/agentic-access/medadvisor-agentic-access.yml