MongoDB Agentic Access
MongoDB exposes 468 API operations that an AI agent could call, of which 240 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.
By consequence: 228 read, 227 write, 4 physical, and 9 safety-critical.
9 operations are classed safety-critical and should require human-in-the-loop approval at runtime.
Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.
By consequence
Highest-consequence actions
The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.
| Method | Path | Consequence | Human-in-loop |
|---|---|---|---|
| DELETE | /api/atlas/v2/federationSettings/{federationSettingsId}/identityProviders/{identityProviderId}/jwks | safety-critical | required |
| DELETE | /api/atlas/v2/groups/{groupId}/backupCompliancePolicy | safety-critical | required |
| POST | /api/atlas/v2/groups/{groupId}/clusters/{clusterName}:revokeMongoDBEmployeeAccess | safety-critical | required |
| DELETE | /api/atlas/v2/groups/{groupId}/maintenanceWindow | safety-critical | required |
| DELETE | /api/atlas/v2/groups/{groupId}/managedSlowMs/disable | safety-critical | required |
| PATCH | /api/atlas/v2/groups/{groupId}/privateIpMode | safety-critical | required |
| DELETE | /api/atlas/v2/groups/{groupId}/pushBasedLogExport | safety-critical | required |
| POST | /api/atlas/v2/groups/{groupId}/streams/{tenantName}/processor/{processorName}:stop | safety-critical | required |
| DELETE | /api/atlas/v2/groups/{groupId}/userSecurity/customerX509 | safety-critical | required |
| DELETE | /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/search/deployment | physical | conditional |
| PATCH | /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/search/deployment | physical | conditional |
| POST | /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/search/deployment | physical | conditional |
| POST | /api/atlas/v2/orgs/{orgId}/billing/costExplorer/usage | physical | conditional |
Source
Agentic Access
generated: '2026-07-15'
method: generated
source: openapi/mongodb-atlas-openapi.yaml
description: Recommended x-agentic-access execution contracts, classified heuristically from
the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
audience per deployment. See research/curity/agentic-governance/.
summary:
operations: 468
by_action_class:
connected: 228
acting: 240
by_consequence:
read: 228
write: 227
safety-critical: 9
physical: 4
human_in_the_loop_required: 9
operations:
- path: /api/atlas/v2
method: get
operationId: getSystemStatus
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/alertConfigs/matchers/fieldNames
method: get
operationId: listAlertConfigMatcherFieldNames
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/clusters
method: get
operationId: listClusterDetails
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/eventTypes
method: get
operationId: listEventTypes
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/federationSettings/{federationSettingsId}
method: delete
operationId: deleteFederationSetting
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/federationSettings/{federationSettingsId}/connectedOrgConfigs
method: get
operationId: listFederationSettingConnectedOrgConfigs
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/federationSettings/{federationSettingsId}/connectedOrgConfigs/{orgId}
method: delete
operationId: removeFederationSettingConnectedOrgConfig
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/federationSettings/{federationSettingsId}/connectedOrgConfigs/{orgId}
method: get
operationId: getFederationSettingConnectedOrgConfig
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/federationSettings/{federationSettingsId}/connectedOrgConfigs/{orgId}
method: patch
operationId: updateFederationSettingConnectedOrgConfig
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/federationSettings/{federationSettingsId}/connectedOrgConfigs/{orgId}/roleMappings
method: get
operationId: listFederationSettingConnectedOrgConfigRoleMappings
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/federationSettings/{federationSettingsId}/connectedOrgConfigs/{orgId}/roleMappings
method: post
operationId: createFederationSettingConnectedOrgConfigRoleMapping
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/federationSettings/{federationSettingsId}/connectedOrgConfigs/{orgId}/roleMappings/{id}
method: delete
operationId: deleteFederationSettingConnectedOrgConfigRoleMapping
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/federationSettings/{federationSettingsId}/connectedOrgConfigs/{orgId}/roleMappings/{id}
method: get
operationId: getFederationSettingConnectedOrgConfigRoleMapping
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/federationSettings/{federationSettingsId}/connectedOrgConfigs/{orgId}/roleMappings/{id}
method: put
operationId: updateFederationSettingConnectedOrgConfigRoleMapping
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/federationSettings/{federationSettingsId}/identityProviders
method: get
operationId: listFederationSettingIdentityProviders
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/federationSettings/{federationSettingsId}/identityProviders
method: post
operationId: createFederationSettingIdentityProvider
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/federationSettings/{federationSettingsId}/identityProviders/{identityProviderId}
method: delete
operationId: deleteFederationSettingIdentityProvider
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/federationSettings/{federationSettingsId}/identityProviders/{identityProviderId}
method: get
operationId: getFederationSettingIdentityProvider
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/federationSettings/{federationSettingsId}/identityProviders/{identityProviderId}
method: patch
operationId: updateFederationSettingIdentityProvider
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/federationSettings/{federationSettingsId}/identityProviders/{identityProviderId}/jwks
method: delete
operationId: revokeFederationSettingIdentityProviderJwks
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /api/atlas/v2/federationSettings/{federationSettingsId}/identityProviders/{identityProviderId}/metadata.xml
method: get
operationId: getFederationSettingIdentityProviderMetadata
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/groups
method: get
operationId: listGroups
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/groups
method: post
operationId: createGroup
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/byName/{groupName}
method: get
operationId: getGroupByName
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/groups/{groupId}
method: delete
operationId: deleteGroup
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}
method: get
operationId: getGroup
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/groups/{groupId}
method: patch
operationId: updateGroup
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/access
method: post
operationId: addGroupAccessUser
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/accessList
method: get
operationId: listGroupAccessListEntries
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/groups/{groupId}/accessList
method: post
operationId: createGroupAccessListEntry
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/accessList/{entryValue}
method: delete
operationId: deleteGroupAccessListEntry
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/accessList/{entryValue}
method: get
operationId: getGroupAccessListEntry
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/groups/{groupId}/accessList/{entryValue}/status
method: get
operationId: getGroupAccessListStatus
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/groups/{groupId}/activityFeed
method: get
operationId: getGroupActivityFeed
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/groups/{groupId}/alertConfigs
method: get
operationId: listGroupAlertConfigs
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/groups/{groupId}/alertConfigs
method: post
operationId: createGroupAlertConfig
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/alertConfigs/{alertConfigId}
method: delete
operationId: deleteGroupAlertConfig
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/alertConfigs/{alertConfigId}
method: get
operationId: getGroupAlertConfig
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/groups/{groupId}/alertConfigs/{alertConfigId}
method: patch
operationId: toggleGroupAlertConfig
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/alertConfigs/{alertConfigId}
method: put
operationId: updateGroupAlertConfig
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/alertConfigs/{alertConfigId}/alerts
method: get
operationId: getGroupAlertConfigAlerts
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/groups/{groupId}/alerts
method: get
operationId: listGroupAlerts
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/groups/{groupId}/alerts/{alertId}
method: get
operationId: getGroupAlert
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/groups/{groupId}/alerts/{alertId}
method: patch
operationId: acknowledgeGroupAlert
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/alerts/{alertId}/alertConfigs
method: get
operationId: getGroupAlertAlertConfigs
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/groups/{groupId}/apiKeys
method: get
operationId: listGroupApiKeys
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/groups/{groupId}/apiKeys
method: post
operationId: createGroupApiKey
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/apiKeys/{apiUserId}
method: delete
operationId: removeGroupApiKey
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/apiKeys/{apiUserId}
method: patch
operationId: updateGroupApiKeyRoles
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/apiKeys/{apiUserId}
method: post
operationId: addGroupApiKey
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/auditLog
method: get
operationId: getGroupAuditLog
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/groups/{groupId}/auditLog
method: patch
operationId: updateGroupAuditLog
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/awsCustomDNS
method: get
operationId: getGroupAwsCustomDns
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/groups/{groupId}/awsCustomDNS
method: patch
operationId: toggleGroupAwsCustomDns
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/backup/exportBuckets
method: get
operationId: listGroupBackupExportBuckets
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/groups/{groupId}/backup/exportBuckets
method: post
operationId: createGroupBackupExportBucket
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/backup/exportBuckets/{exportBucketId}
method: delete
operationId: deleteGroupBackupExportBucket
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/backup/exportBuckets/{exportBucketId}
method: get
operationId: getGroupBackupExportBucket
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/groups/{groupId}/backup/exportBuckets/{exportBucketId}
method: patch
operationId: updateGroupBackupExportBucket
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/backup/{cloudProvider}/privateEndpoints
method: get
operationId: listGroupBackupPrivateEndpoints
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/groups/{groupId}/backup/{cloudProvider}/privateEndpoints
method: post
operationId: createGroupBackupPrivateEndpoint
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/backup/{cloudProvider}/privateEndpoints/{endpointId}
method: delete
operationId: deleteGroupBackupPrivateEndpoint
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/backup/{cloudProvider}/privateEndpoints/{endpointId}
method: get
operationId: getGroupBackupPrivateEndpoint
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/groups/{groupId}/backupCompliancePolicy
method: delete
operationId: disableGroupBackupCompliancePolicy
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /api/atlas/v2/groups/{groupId}/backupCompliancePolicy
method: get
operationId: getGroupBackupCompliancePolicy
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/groups/{groupId}/backupCompliancePolicy
method: put
operationId: updateGroupBackupCompliancePolicy
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/cloudProviderAccess
method: get
operationId: listGroupCloudProviderAccess
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/groups/{groupId}/cloudProviderAccess
method: post
operationId: createGroupCloudProviderAccess
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/cloudProviderAccess/{cloudProvider}/{roleId}
method: delete
operationId: deauthorizeGroupCloudProviderAccessRole
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/cloudProviderAccess/{roleId}
method: get
operationId: getGroupCloudProviderAccess
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/groups/{groupId}/cloudProviderAccess/{roleId}
method: patch
operationId: authorizeGroupCloudProviderAccessRole
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/clusters
method: get
operationId: listGroupClusters
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/groups/{groupId}/clusters
method: post
operationId: createGroupCluster
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/clusters/provider/regions
method: get
operationId: listGroupClusterProviderRegions
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/groups/{groupId}/clusters/tenantUpgrade
method: post
operationId: upgradeGroupClusterTenantUpgrade
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/clusters/tenantUpgradeToServerless
method: post
operationId: upgradeGroupClusterTenantUpgradeToServerless
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}
method: delete
operationId: deleteGroupCluster
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}
method: get
operationId: getGroupCluster
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}
method: patch
operationId: updateGroupCluster
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/autoScalingConfiguration
method: get
operationId: autoGroupClusterScalingConfiguration
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/backup/exports
method: get
operationId: listGroupClusterBackupExports
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/backup/exports
method: post
operationId: createGroupClusterBackupExport
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/backup/exports/{exportId}
method: get
operationId: getGroupClusterBackupExport
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/backup/restoreJobs
method: get
operationId: listGroupClusterBackupRestoreJobs
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/backup/restoreJobs
method: post
operationId: createGroupClusterBackupRestoreJob
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/backup/restoreJobs/{restoreJobId}
method: delete
operationId: cancelGroupClusterBackupRestoreJob
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/backup/restoreJobs/{restoreJobId}
method: get
operationId: getGroupClusterBackupRestoreJob
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/backup/schedule
method: delete
operationId: deleteGroupClusterBackupSchedule
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/backup/schedule
method: get
operationId: getGroupClusterBackupSchedule
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/backup/schedule
method: patch
operationId: updateGroupClusterBackupSchedule
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/backup/snapshots
method: get
operationId: listGroupClusterBackupSnapshots
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/backup/snapshots
method: post
operationId: takeGroupClusterBackupSnapshots
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/backup/snapshots/shardedCluster/{snapshotId}
method: delete
operationId: deleteGroupClusterBackupSnapshotShardedCluster
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/backup/snapshots/shardedCluster/{snapshotId}
method: get
operationId: getGroupClusterBackupSnapshotShardedCluster
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/backup/snapshots/shardedClusters
method: get
operationId: listGroupClusterBackupSnapshotShardedClusters
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/backup/snapshots/{snapshotId}
method: delete
operationId: deleteGroupClusterBackupSnapshot
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/backup/snapshots/{snapshotId}
method: get
operationId:
# --- truncated at 32 KB (152 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/mongodb/refs/heads/main/agentic-access/mongodb-agentic-access.yml