Juniper Mist AI · Agentic Access
Juniper Mist AI Agentic Access
x-agentic-access
generated
Juniper Mist AI exposes 1037 API operations that an AI agent could call, of which 521 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.
By consequence: 516 read, 475 write, 31 physical, and 15 safety-critical.
15 operations are classed safety-critical and should require human-in-the-loop approval at runtime.
Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.
AIAIOpsArtificial IntelligenceNetworkingWi-FiWireless LANWANSD-WANWiredLANAccess PointsSwitchesRoutersMarvisNACAccess AssuranceLocation ServicesBluetooth LEIndoor LocationCloud NetworkingMicroservicesEnterprise NetworkingAI Native Networking
Operations: 1037
Acting: 521
Human-in-the-loop: 15
Method: generated
By consequence
read 516
write 475
physical 31
safety-critical 15
Highest-consequence actions
The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.
| Method | Path | Consequence | Human-in-loop |
|---|---|---|---|
| POST | /api/v1/installer/orgs/{org_id}/devices/{device_mac}/unlocate | safety-critical | required |
| DELETE | /api/v1/msps/{msp_id}/admins/{admin_id} | safety-critical | required |
| DELETE | /api/v1/orgs/{org_id}/admins/{admin_id} | safety-critical | required |
| DELETE | /api/v1/orgs/{org_id}/exports/e911_report | safety-critical | required |
| POST | /api/v1/orgs/{org_id}/mxedges/{mxedge_id}/services/{name}/{action} | safety-critical | required |
| POST | /api/v1/orgs/{org_id}/otherdevices/{device_mac}/reboot | safety-critical | required |
| DELETE | /api/v1/orgs/{org_id}/pcaps/capture | safety-critical | required |
| DELETE | /api/v1/orgs/{org_id}/sdkinvites/{sdkinvite_id} | safety-critical | required |
| DELETE | /api/v1/orgs/{org_id}/setting/mist_scep | safety-critical | required |
| POST | /api/v1/orgs/{org_id}/setting/mist_scep/client_certs/revoke | safety-critical | required |
| POST | /api/v1/sites/{site_id}/devices/reset_radio_config | safety-critical | required |
| POST | /api/v1/sites/{site_id}/devices/{device_id}/unlocate | safety-critical | required |
| POST | /api/v1/sites/{site_id}/location/ml/reset/map/{map_id} | safety-critical | required |
| DELETE | /api/v1/sites/{site_id}/pcaps/capture | safety-critical | required |
| POST | /api/v1/sites/{site_id}/rfdiags/{rfdiag_id}/stop | safety-critical | required |
| PUT | /api/v1/installer/orgs/{org_id}/devices/{device_mac} | physical | conditional |
| POST | /api/v1/orgs/{org_id}/clients/{client_mac}/coa | physical | conditional |
| POST | /api/v1/orgs/{org_id}/nac_clients/{client_mac}/coa | physical | conditional |
| POST | /api/v1/orgs/{org_id}/sdkinvites/{sdkinvite_id}/email | physical | conditional |
| POST | /api/v1/orgs/{org_id}/sdkinvites/{sdkinvite_id}/sms | physical | conditional |
| DELETE | /api/v1/orgs/{org_id}/setting/blacklist | physical | conditional |
| POST | /api/v1/orgs/{org_id}/setting/blacklist | physical | conditional |
| POST | /api/v1/orgs/{org_id}/wired_clients/{client_mac}/coa | physical | conditional |
| POST | /api/v1/sites/{site_id}/clients/{client_mac}/coa | physical | conditional |
| POST | /api/v1/sites/{site_id}/clients/{client_mac}/disconnect | physical | conditional |
Source
Agentic Access
generated: '2026-07-15'
method: generated
source: openapi/mist-ai-openapi.yml
description: Recommended x-agentic-access execution contracts, classified heuristically from
the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
audience per deployment. See research/curity/agentic-governance/.
summary:
operations: 1037
by_action_class:
connected: 516
acting: 521
by_consequence:
read: 516
write: 475
physical: 31
safety-critical: 15
human_in_the_loop_required: 15
operations:
- path: /api/v1/const/alarm_defs
method: get
operationId: listAlarmDefinitions
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/const/ap_channels
method: get
operationId: listApChannels
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/const/ap_esl_versions
method: get
operationId: listApLEslVersions
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/const/ap_led_status
method: get
operationId: listApLedDefinition
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/const/app_categories
method: get
operationId: listAppCategoryDefinitions
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/const/app_subcategories
method: get
operationId: listAppSubCategoryDefinitions
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/const/applications
method: get
operationId: listApplications
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/const/client_events
method: get
operationId: listClientEventsDefinitions
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/const/countries
method: get
operationId: listCountryCodes
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/const/default_gateway_config
method: get
operationId: getGatewayDefaultConfig
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/const/device_events
method: get
operationId: listDeviceEventsDefinitions
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/const/device_models
method: get
operationId: listDeviceModels
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/const/fingerprint_types
method: get
operationId: listFingerprintTypes
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/const/gateway_applications
method: get
operationId: listGatewayApplications
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/const/insight_metrics
method: get
operationId: listInsightMetrics
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/const/languages
method: get
operationId: listSiteLanguages
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/const/license_types
method: get
operationId: listLicenseTypes
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/const/marvisclient_versions
method: get
operationId: listMarvisClientVersions
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/const/mxedge_events
method: get
operationId: listMxEdgeEventsDefinitions
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/const/mxedge_models
method: get
operationId: listMxEdgeModels
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/const/nac_events
method: get
operationId: listNacEventsDefinitions
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/const/otherdevice_events
method: get
operationId: listOtherDeviceEventsDefinitions
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/const/otherdevice_models
method: get
operationId: listSupportedOtherDeviceModels
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/const/states
method: get
operationId: listStates
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/const/system_events
method: get
operationId: listSystemEventsDefinitions
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/const/traffic_types
method: get
operationId: listTrafficTypes
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/const/webhook_topics
method: get
operationId: listWebhookTopics
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/installer/orgs/{org_id}/alarmtemplates
method: get
operationId: listInstallerAlarmTemplates
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/installer/orgs/{org_id}/deviceprofiles
method: get
operationId: listInstallerDeviceProfiles
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/installer/orgs/{org_id}/devices
method: get
operationId: listInstallerListOfRecentlyClaimedDevices
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/installer/orgs/{org_id}/devices
method: post
operationId: claimInstallerDevices
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/installer/orgs/{org_id}/devices/{device_mac}
method: delete
operationId: unassignInstallerRecentlyClaimedDevice
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/installer/orgs/{org_id}/devices/{device_mac}
method: put
operationId: provisionInstallerDevices
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/installer/orgs/{org_id}/devices/{device_mac}/locate
method: post
operationId: startInstallerLocateDevice
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/installer/orgs/{org_id}/devices/{device_mac}/unlocate
method: post
operationId: stopInstallerLocateDevice
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /api/v1/installer/orgs/{org_id}/devices/{device_mac}/{image_name}
method: delete
operationId: deleteInstallerDeviceImage
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/installer/orgs/{org_id}/devices/{device_mac}/{image_name}
method: post
operationId: addInstallerDeviceImage
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/installer/orgs/{org_id}/devices/{fpc0_mac}/vc
method: get
operationId: getInstallerDeviceVirtualChassis
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/installer/orgs/{org_id}/devices/{fpc0_mac}/vc
method: post
operationId: createInstallerVirtualChassis
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/installer/orgs/{org_id}/devices/{fpc0_mac}/vc
method: put
operationId: updateInstallerVirtualChassisMember
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/installer/orgs/{org_id}/rftemplates
method: get
operationId: listInstallerRfTemplatesNames
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/installer/orgs/{org_id}/sitegroups
method: get
operationId: listInstallerSiteGroups
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/installer/orgs/{org_id}/sites
method: get
operationId: listInstallerSites
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/installer/orgs/{org_id}/sites/{site_name}
method: put
operationId: createOrUpdateInstallerSites
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/installer/orgs/{org_id}/sites/{site_name}/maps
method: get
operationId: listInstallerMaps
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/installer/orgs/{org_id}/sites/{site_name}/maps/import
method: post
operationId: importInstallerMap
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/installer/orgs/{org_id}/sites/{site_name}/maps/{map_id}
method: delete
operationId: deleteInstallerMap
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/installer/orgs/{org_id}/sites/{site_name}/maps/{map_id}
method: post
operationId: createInstallerMap
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/installer/orgs/{org_id}/sites/{site_name}/maps/{map_id}
method: put
operationId: updateInstallerMap
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/installer/sites/{site_name}/optimize
method: get
operationId: optimizeInstallerRrm
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/invite/verify/{token}
method: post
operationId: verifyAdminInvite
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/login
method: post
operationId: login
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/login/lookup
method: post
operationId: lookup
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/login/oauth/{provider}
method: delete
operationId: unlinkOauth2Provider
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/login/oauth/{provider}
method: get
operationId: getOauth2AuthorizationUrlForLogin
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/login/oauth/{provider}
method: post
operationId: loginOauth2
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/login/two_factor
method: post
operationId: twoFactor
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/logout
method: post
operationId: logout
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/mobile/verify/{secret}
method: post
operationId: activateSdkInvite
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/msps
method: post
operationId: createMsp
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/msps/{msp_id}
method: delete
operationId: deleteMsp
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/msps/{msp_id}
method: get
operationId: getMspDetails
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/msps/{msp_id}
method: put
operationId: updateMsp
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/msps/{msp_id}/admins
method: get
operationId: listMspAdmins
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/msps/{msp_id}/admins/{admin_id}
method: delete
operationId: revokeMspAdmin
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /api/v1/msps/{msp_id}/admins/{admin_id}
method: get
operationId: getMspAdmin
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/msps/{msp_id}/admins/{admin_id}
method: put
operationId: updateMspAdmin
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/msps/{msp_id}/claim
method: post
operationId: claimMspLicense
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/msps/{msp_id}/insights/{metric}
method: get
operationId: getMspSle
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/msps/{msp_id}/inventory/{device_mac}
method: get
operationId: getMspInventoryByMac
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/msps/{msp_id}/invites
method: post
operationId: inviteMspAdmin
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/msps/{msp_id}/invites/{invite_id}
method: delete
operationId: uninviteMspAdmin
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/msps/{msp_id}/invites/{invite_id}
method: put
operationId: updateMspAdminInvite
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/msps/{msp_id}/licenses
method: get
operationId: listMspLicenses
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/msps/{msp_id}/licenses
method: put
operationId: moveOrDeleteMspLicenseToAnotherOrg
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/msps/{msp_id}/logo
method: delete
operationId: deleteMspLogo
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/msps/{msp_id}/logo
method: post
operationId: postMspLogo
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/msps/{msp_id}/logs
method: get
operationId: listMspAuditLogs
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/msps/{msp_id}/logs/count
method: get
operationId: countMspAuditLogs
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/msps/{msp_id}/orggroups
method: get
operationId: listMspOrgGroups
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/msps/{msp_id}/orggroups
method: post
operationId: createMspOrgGroup
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/msps/{msp_id}/orggroups/{orggroup_id}
method: delete
operationId: deleteMspOrgGroup
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/msps/{msp_id}/orggroups/{orggroup_id}
method: get
operationId: getMspOrgGroup
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/msps/{msp_id}/orggroups/{orggroup_id}
method: put
operationId: updateMspOrgGroup
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/msps/{msp_id}/orgs
method: get
operationId: listMspOrgs
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/msps/{msp_id}/orgs
method: post
operationId: createMspOrg
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/msps/{msp_id}/orgs
method: put
operationId: manageMspOrgs
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/msps/{msp_id}/orgs/search
method: get
operationId: searchMspOrgs
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/msps/{msp_id}/orgs/{org_id}
method: delete
operationId: deleteMspOrg
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/msps/{msp_id}/orgs/{org_id}
method: get
operationId: getMspOrg
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/msps/{msp_id}/orgs/{org_id}
method: put
operationId: updateMspOrg
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/msps/{msp_id}/search
method: get
operationId: searchMspOrgGroup
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/msps/{msp_id}/ssoroles
method: get
operationId: listMspSsoRoles
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/msps/{msp_id}/ssoroles
method: post
operationId: createMspSsoRole
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/msps/{msp_id}/ssoroles/{ssorole_id}
method: delete
operationId: deleteMspSsoRole
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/msps/{msp_id}/ssoroles/{ssorole_id}
method: put
operationId: updateMspSsoRole
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/msps/{msp_id}/ssos
method: get
operationId: listMspSsos
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/msps/{msp_id}/ssos
method: post
operationId: createMspSso
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/msps/{msp_id}/ssos/{sso_id}
method: delete
operationId: deleteMspSso
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/msps/{msp_id}/ssos/{sso_id}
method: get
operationId: getMspSso
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/msps/{msp_id}/ssos/{sso_id}
method: put
operationId: updateMspSso
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/msps/{msp_id}/ssos/{sso_id}/delete_admins
method: post
operationId: deleteMspSsoAdmins
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/msps/{msp_id}/ssos/{sso_id}/failures
method: get
operationId: listMspSsoLatestFailures
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/msps/{msp_id}/ssos/{sso_id}/metadata
method: get
operationId: getMspSamlMetadata
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/msps/{msp_id}/ssos/{sso_id}/metadata.xml
method: get
operationId: downloadMspSamlMetadata
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/msps/{msp_id}/stats/licenses
method: get
operationId: listMspOrgLicenses
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/msps/{msp_id}/stats/orgs
method: get
operationId: listMspOrgStats
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/msps/{msp_id}/suggestion/count
method: get
operationId: countMspsMarvisActions
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/msps/{msp_id}/tickets
method: get
operationId: listMspTickets
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/msps/{msp_id}/tickets/count
method: get
operationId: countMspTickets
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/orgs
method: post
operationId: createOrg
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/orgs/{org_id}
method: delete
operationId: deleteOrg
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 9
# --- truncated at 32 KB (310 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/mist-ai/refs/heads/main/agentic-access/mist-ai-agentic-access.yml