Mend · Agentic Access
Mend Agentic Access

x-agentic-access generated
Mend exposes 291 API operations that an AI agent could call, of which 156 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.
By consequence: 135 read, 153 write, and 3 safety-critical.
3 operations are classed safety-critical and should require human-in-the-loop approval at runtime.
Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.
Application SecuritySoftware Composition AnalysisSASTContainer SecurityAI SecurityDependency ManagementVulnerability ManagementDevSecOpsSBOMOpen Source SecurityCompany
Operations: 291 Acting: 156 Human-in-the-loop: 3 Method: generated
By consequence

read 135 write 153 safety-critical 3
Highest-consequence actions

The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.
Method	Path	Consequence	Human-in-loop
DELETE	/api/v2.0/products/{productIdentifier}/librarySettings/attributionReport	safety-critical	required
PUT	/api/v2.0/projects/{projectIdentifier}/libraries/{libraryUuid}/settings/attributionReport	safety-critical	required
POST	/api/v3.0/logout	safety-critical	required
Source

Agentic Access

generated: '2026-07-20'
method: generated
source: openapi/mend-platform-openapi-original.json, openapi/mend-sca-openapi-original.json
description: Recommended x-agentic-access execution contracts, classified heuristically from
  the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
  audience per deployment. See research/curity/agentic-governance/.
summary:
  operations: 291
  by_action_class:
    acting: 156
    connected: 135
  by_consequence:
    write: 153
    safety-critical: 3
    read: 135
  human_in_the_loop_required: 3
operations:
- path: /api/v3.0/applications/{applicationUuid}/ai/reports/findings
  method: post
  operationId: exportAiFindingsReport_2
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/applications/{applicationUuid}/ai/reports/inventory
  method: post
  operationId: exportAiInventoryReport_2
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/applications/{applicationUuid}/code/reports/compliance
  method: post
  operationId: exportCodeComplianceReport_1
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/applications/{applicationUuid}/code/reports/findings
  method: post
  operationId: exportCodeFindingsReport_1
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/applications/{applicationUuid}/code/reports/resolved
  method: post
  operationId: exportCodeResolvedReport_1
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/applications/{applicationUuid}/code/reports/suppressions
  method: post
  operationId: exportCodeSuppressionsReport_1
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/applications/{applicationUuid}/images/reports/SBOM
  method: post
  operationId: exportImgSbomReport_2
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/applications/{applicationUuid}/images/reports/attribution
  method: post
  operationId: exportImgAttributionReport_2
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/applications/{applicationUuid}/images/reports/dueDiligence
  method: post
  operationId: exportImgFindingsReport_2
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/login
  method: post
  operationId: login
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/login/accessToken
  method: post
  operationId: refreshAccessToken
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/logout
  method: post
  operationId: logout
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /api/v3.0/orgs/{orgUuid}/ai/reports/findings
  method: post
  operationId: exportAiFindingsReport_1
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/orgs/{orgUuid}/ai/reports/inventory
  method: post
  operationId: exportAiInventoryReport_1
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/orgs/{orgUuid}/applications
  method: get
  operationId: getOrganizationApplications
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v3.0/orgs/{orgUuid}/applications
  method: post
  operationId: createApplication
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/orgs/{orgUuid}/applications/summaries
  method: post
  operationId: getApplicationSummaries
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/orgs/{orgUuid}/applications/summaries/totals
  method: get
  operationId: getApplicationsTotals
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v3.0/orgs/{orgUuid}/applications/{applicationUuid}/labels
  method: get
  operationId: getProductLabels
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v3.0/orgs/{orgUuid}/applications/{applicationUuid}/labels
  method: put
  operationId: addApplicationLabel
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/orgs/{orgUuid}/applications/{applicationUuid}/labels/{labelUuid}
  method: delete
  operationId: removeProductLabel
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/orgs/{orgUuid}/applications/{applicationUuid}/projects
  method: post
  operationId: createProjectInApplication
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/orgs/{orgUuid}/applications/{applicationUuid}/scans
  method: get
  operationId: getScanSummaries_1
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v3.0/orgs/{orgUuid}/applications/{applicationUuid}/violations/sla
  method: put
  operationId: updateMultipleProjectViolationSla_1
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/orgs/{orgUuid}/code/reports/compliance
  method: post
  operationId: exportSastAnalyticsReport
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/orgs/{orgUuid}/groups
  method: get
  operationId: getAllOrganizationGroups
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v3.0/orgs/{orgUuid}/groups
  method: post
  operationId: createGroup
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/orgs/{orgUuid}/groups/roleDefinitions
  method: get
  operationId: getAllOrganizationGroupsWithRoleDefinitions
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v3.0/orgs/{orgUuid}/groups/{groupUuid}
  method: get
  operationId: getGroup
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v3.0/orgs/{orgUuid}/groups/{groupUuid}
  method: put
  operationId: updateGroup
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/orgs/{orgUuid}/groups/{groupUuid}
  method: delete
  operationId: deleteGroup
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/orgs/{orgUuid}/groups/{groupUuid}/roles
  method: get
  operationId: getGroupRoles
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v3.0/orgs/{orgUuid}/groups/{groupUuid}/roles
  method: put
  operationId: removeGroupRoles
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/orgs/{orgUuid}/groups/{groupUuid}/roles
  method: post
  operationId: addGroupRoles
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/orgs/{orgUuid}/groups/{groupUuid}/users
  method: get
  operationId: getGroupUsers
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v3.0/orgs/{orgUuid}/groups/{groupUuid}/users
  method: post
  operationId: addUsersToGroup
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/orgs/{orgUuid}/groups/{groupUuid}/users/{userUuid}
  method: delete
  operationId: deleteUserFromGroup
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/orgs/{orgUuid}/images/reports/SBOM
  method: post
  operationId: exportImgSbomReport_1
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/orgs/{orgUuid}/images/reports/attribution
  method: post
  operationId: exportImgAttributionReport_1
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/orgs/{orgUuid}/images/reports/dueDiligence
  method: post
  operationId: exportImgFindingsReport_1
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/orgs/{orgUuid}/integrations
  method: get
  operationId: getOrgIntegrations
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v3.0/orgs/{orgUuid}/labels
  method: get
  operationId: getLabels
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v3.0/orgs/{orgUuid}/labels
  method: post
  operationId: createLabel
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/orgs/{orgUuid}/labels/{labelUuid}
  method: put
  operationId: renameLabel
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/orgs/{orgUuid}/labels/{labelUuid}
  method: delete
  operationId: deleteLabel
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/orgs/{orgUuid}/projects
  method: get
  operationId: getOrganizationProjects
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v3.0/orgs/{orgUuid}/projects
  method: post
  operationId: createProject
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/orgs/{orgUuid}/projects/summaries
  method: post
  operationId: getProjectSummaries
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/orgs/{orgUuid}/projects/summaries/total/date
  method: get
  operationId: getProjectSummariesTotalsByDate
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v3.0/orgs/{orgUuid}/projects/summaries/totals
  method: get
  operationId: getProjectTotals
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v3.0/orgs/{orgUuid}/projects/{projectUuid}/labels
  method: get
  operationId: getProjectLabels
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v3.0/orgs/{orgUuid}/projects/{projectUuid}/labels
  method: put
  operationId: addProjectLabel
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/orgs/{orgUuid}/projects/{projectUuid}/labels/{labelUuid}
  method: delete
  operationId: removeProjectLabel
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/orgs/{orgUuid}/projects/{projectUuid}/scans
  method: get
  operationId: getScanSummaries
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v3.0/orgs/{orgUuid}/projects/{projectUuid}/scans/{scanUuid}
  method: get
  operationId: getScan
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v3.0/orgs/{orgUuid}/projects/{projectUuid}/scans/{scanUuid}/summary
  method: get
  operationId: getSummary
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v3.0/orgs/{orgUuid}/projects/{projectUuid}/scans/{scanUuid}/tags
  method: get
  operationId: getTags
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v3.0/orgs/{orgUuid}/projects/{projectUuid}/violations
  method: get
  operationId: getProjectViolations
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v3.0/orgs/{orgUuid}/projects/{projectUuid}/violations/sla
  method: put
  operationId: updateMultipleProjectViolationSla
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/orgs/{orgUuid}/reports
  method: get
  operationId: getReportStatusesMultiContext
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v3.0/orgs/{orgUuid}/reports/download/{reportUuid}
  method: get
  operationId: downloadReport
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v3.0/orgs/{orgUuid}/reports/users-groups
  method: post
  operationId: exportUsersReport
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/orgs/{orgUuid}/reports/{reportUuid}
  method: get
  operationId: getReportStatus
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v3.0/orgs/{orgUuid}/reports/{reportUuid}
  method: delete
  operationId: deleteReport
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/orgs/{orgUuid}/scans/compare
  method: get
  operationId: compareScans
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v3.0/orgs/{orgUuid}/users
  method: get
  operationId: getUsersPaginated
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v3.0/orgs/{orgUuid}/users/invite
  method: post
  operationId: inviteUser
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/orgs/{orgUuid}/users/{userUuid}
  method: delete
  operationId: removeUser
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/orgs/{orgUuid}/users/{userUuid}/block
  method: put
  operationId: blockUser
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/orgs/{orgUuid}/users/{userUuid}/unblock
  method: put
  operationId: unblockUser
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/projects/{projectUuid}/ai/reports/findings
  method: post
  operationId: exportAiFindingsReport
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/projects/{projectUuid}/ai/reports/inventory
  method: post
  operationId: exportAiInventoryReport
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/projects/{projectUuid}/code/reports/compliance
  method: post
  operationId: exportCodeComplianceReport
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/projects/{projectUuid}/code/reports/findings
  method: post
  operationId: exportCodeFindingsReport
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/projects/{projectUuid}/code/reports/resolved
  method: post
  operationId: exportCodeResolvedReport
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/projects/{projectUuid}/code/reports/suppressions
  method: post
  operationId: exportCodeSuppressionsReport
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/projects/{projectUuid}/images/reports/SBOM
  method: post
  operationId: exportImgSbomReport
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/projects/{projectUuid}/images/reports/attribution
  method: post
  operationId: exportImgAttributionReport
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/projects/{projectUuid}/images/reports/dueDiligence
  method: post
  operationId: exportImgFindingsReport
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/projects/{projectUuid}/dependencies/sourceFiles/inventory
  method: get
  operationId: getSourceFilesInventoryProject
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v3.0/projects/{projectUuid}/dependencies/sourceFiles/matchSuggestions
  method: post
  operationId: getMatchSuggestionsProject
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/projects/{projectUuid}/dependencies/sourceFiles/searchForMatch
  method: get
  operationId: searchForMatchProject
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v3.0/applications/{applicationUuid}/dependencies/sourceFiles/inventory
  method: get
  operationId: getSourceFilesInventoryApplication
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v3.0/applications/{applicationUuid}/dependencies/sourceFiles/matchSuggestions
  method: post
  operationId: getMatchSuggestionsApplication
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/applications/{applicationUuid}/dependencies/sourceFiles/searchForMatch
  method: get
  operationId: searchForMatchApplication
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v3.0/orgs/{orgUuid}/applications/dependencies/sourceFiles/remapping
  method: post
  operationId: remapSourceFilesApplication
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/orgs/{orgUuid}/dependencies/sourceFiles/remapping
  method: post
  operationId: remapSourceFilesOrganization
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/accounts/{accountUuid}/dependencies/reports/inventory
  method: post
  operationId: exportAccountInventoryReport
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/accounts/{accountUuid}/dependencies/reports/securityFindings
  method: post
  operationId: exportAccountDependencySecurityFindingsReport
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/accounts/{accountUuid}/dependencies/reports/securityFindingsByLibrary
  method: post
  operationId: exportAccountDependencySecurityFindingsByLibraryReport
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/applications/{applicationUuid}/dependencies/projects/importSbom
  method: post
  operationId: createProjectWithSbomScan
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/applications/{applicationUuid}/dependencies/reports/SBOM
  method: post
  operationId: exportSbomReport_1
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/applications/{applicationUuid}/dependencies/reports/attribution
  method: post
  operationId: exportProductAttributionReport
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/applications/{applicationUuid}/dependencies/reports/dueDiligence
  method: post
  operationId: exportProductDueDiligenceReport
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v3.0/applications/{applicationUuid}/dependencies/reports/findings
  method: post
  operationId: exportProductFindingsReport
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
   

# --- truncated at 32 KB (91 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/mend/refs/heads/main/agentic-access/mend-agentic-access.yml