MongoDB · Agentic Access

MongoDB Agentic Access

x-agentic-access generated

MongoDB exposes 468 API operations that an AI agent could call, of which 240 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.

By consequence: 228 read, 227 write, 4 physical, and 9 safety-critical.

9 operations are classed safety-critical and should require human-in-the-loop approval at runtime.

Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.

Cloud DatabaseDatabaseDocument DatabaseNoSQL
Operations: 468 Acting: 240 Human-in-the-loop: 9 Method: generated

By consequence

read 228 write 227 physical 4 safety-critical 9

Highest-consequence actions

The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.

MethodPathConsequenceHuman-in-loop
DELETE /api/atlas/v2/federationSettings/{federationSettingsId}/identityProviders/{identityProviderId}/jwks safety-critical required
DELETE /api/atlas/v2/groups/{groupId}/backupCompliancePolicy safety-critical required
POST /api/atlas/v2/groups/{groupId}/clusters/{clusterName}:revokeMongoDBEmployeeAccess safety-critical required
DELETE /api/atlas/v2/groups/{groupId}/maintenanceWindow safety-critical required
DELETE /api/atlas/v2/groups/{groupId}/managedSlowMs/disable safety-critical required
PATCH /api/atlas/v2/groups/{groupId}/privateIpMode safety-critical required
DELETE /api/atlas/v2/groups/{groupId}/pushBasedLogExport safety-critical required
POST /api/atlas/v2/groups/{groupId}/streams/{tenantName}/processor/{processorName}:stop safety-critical required
DELETE /api/atlas/v2/groups/{groupId}/userSecurity/customerX509 safety-critical required
DELETE /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/search/deployment physical conditional
PATCH /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/search/deployment physical conditional
POST /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/search/deployment physical conditional
POST /api/atlas/v2/orgs/{orgId}/billing/costExplorer/usage physical conditional

Source

Agentic Access

Raw ↑
generated: '2026-07-15'
method: generated
source: openapi/mongodb-atlas-openapi.yaml
description: Recommended x-agentic-access execution contracts, classified heuristically from
  the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
  audience per deployment. See research/curity/agentic-governance/.
summary:
  operations: 468
  by_action_class:
    connected: 228
    acting: 240
  by_consequence:
    read: 228
    write: 227
    safety-critical: 9
    physical: 4
  human_in_the_loop_required: 9
operations:
- path: /api/atlas/v2
  method: get
  operationId: getSystemStatus
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/alertConfigs/matchers/fieldNames
  method: get
  operationId: listAlertConfigMatcherFieldNames
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/clusters
  method: get
  operationId: listClusterDetails
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/eventTypes
  method: get
  operationId: listEventTypes
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/federationSettings/{federationSettingsId}
  method: delete
  operationId: deleteFederationSetting
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/federationSettings/{federationSettingsId}/connectedOrgConfigs
  method: get
  operationId: listFederationSettingConnectedOrgConfigs
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/federationSettings/{federationSettingsId}/connectedOrgConfigs/{orgId}
  method: delete
  operationId: removeFederationSettingConnectedOrgConfig
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/federationSettings/{federationSettingsId}/connectedOrgConfigs/{orgId}
  method: get
  operationId: getFederationSettingConnectedOrgConfig
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/federationSettings/{federationSettingsId}/connectedOrgConfigs/{orgId}
  method: patch
  operationId: updateFederationSettingConnectedOrgConfig
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/federationSettings/{federationSettingsId}/connectedOrgConfigs/{orgId}/roleMappings
  method: get
  operationId: listFederationSettingConnectedOrgConfigRoleMappings
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/federationSettings/{federationSettingsId}/connectedOrgConfigs/{orgId}/roleMappings
  method: post
  operationId: createFederationSettingConnectedOrgConfigRoleMapping
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/federationSettings/{federationSettingsId}/connectedOrgConfigs/{orgId}/roleMappings/{id}
  method: delete
  operationId: deleteFederationSettingConnectedOrgConfigRoleMapping
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/federationSettings/{federationSettingsId}/connectedOrgConfigs/{orgId}/roleMappings/{id}
  method: get
  operationId: getFederationSettingConnectedOrgConfigRoleMapping
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/federationSettings/{federationSettingsId}/connectedOrgConfigs/{orgId}/roleMappings/{id}
  method: put
  operationId: updateFederationSettingConnectedOrgConfigRoleMapping
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/federationSettings/{federationSettingsId}/identityProviders
  method: get
  operationId: listFederationSettingIdentityProviders
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/federationSettings/{federationSettingsId}/identityProviders
  method: post
  operationId: createFederationSettingIdentityProvider
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/federationSettings/{federationSettingsId}/identityProviders/{identityProviderId}
  method: delete
  operationId: deleteFederationSettingIdentityProvider
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/federationSettings/{federationSettingsId}/identityProviders/{identityProviderId}
  method: get
  operationId: getFederationSettingIdentityProvider
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/federationSettings/{federationSettingsId}/identityProviders/{identityProviderId}
  method: patch
  operationId: updateFederationSettingIdentityProvider
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/federationSettings/{federationSettingsId}/identityProviders/{identityProviderId}/jwks
  method: delete
  operationId: revokeFederationSettingIdentityProviderJwks
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /api/atlas/v2/federationSettings/{federationSettingsId}/identityProviders/{identityProviderId}/metadata.xml
  method: get
  operationId: getFederationSettingIdentityProviderMetadata
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/groups
  method: get
  operationId: listGroups
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/groups
  method: post
  operationId: createGroup
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/byName/{groupName}
  method: get
  operationId: getGroupByName
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/groups/{groupId}
  method: delete
  operationId: deleteGroup
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}
  method: get
  operationId: getGroup
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/groups/{groupId}
  method: patch
  operationId: updateGroup
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/access
  method: post
  operationId: addGroupAccessUser
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/accessList
  method: get
  operationId: listGroupAccessListEntries
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/groups/{groupId}/accessList
  method: post
  operationId: createGroupAccessListEntry
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/accessList/{entryValue}
  method: delete
  operationId: deleteGroupAccessListEntry
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/accessList/{entryValue}
  method: get
  operationId: getGroupAccessListEntry
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/groups/{groupId}/accessList/{entryValue}/status
  method: get
  operationId: getGroupAccessListStatus
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/groups/{groupId}/activityFeed
  method: get
  operationId: getGroupActivityFeed
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/groups/{groupId}/alertConfigs
  method: get
  operationId: listGroupAlertConfigs
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/groups/{groupId}/alertConfigs
  method: post
  operationId: createGroupAlertConfig
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/alertConfigs/{alertConfigId}
  method: delete
  operationId: deleteGroupAlertConfig
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/alertConfigs/{alertConfigId}
  method: get
  operationId: getGroupAlertConfig
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/groups/{groupId}/alertConfigs/{alertConfigId}
  method: patch
  operationId: toggleGroupAlertConfig
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/alertConfigs/{alertConfigId}
  method: put
  operationId: updateGroupAlertConfig
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/alertConfigs/{alertConfigId}/alerts
  method: get
  operationId: getGroupAlertConfigAlerts
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/groups/{groupId}/alerts
  method: get
  operationId: listGroupAlerts
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/groups/{groupId}/alerts/{alertId}
  method: get
  operationId: getGroupAlert
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/groups/{groupId}/alerts/{alertId}
  method: patch
  operationId: acknowledgeGroupAlert
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/alerts/{alertId}/alertConfigs
  method: get
  operationId: getGroupAlertAlertConfigs
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/groups/{groupId}/apiKeys
  method: get
  operationId: listGroupApiKeys
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/groups/{groupId}/apiKeys
  method: post
  operationId: createGroupApiKey
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/apiKeys/{apiUserId}
  method: delete
  operationId: removeGroupApiKey
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/apiKeys/{apiUserId}
  method: patch
  operationId: updateGroupApiKeyRoles
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/apiKeys/{apiUserId}
  method: post
  operationId: addGroupApiKey
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/auditLog
  method: get
  operationId: getGroupAuditLog
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/groups/{groupId}/auditLog
  method: patch
  operationId: updateGroupAuditLog
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/awsCustomDNS
  method: get
  operationId: getGroupAwsCustomDns
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/groups/{groupId}/awsCustomDNS
  method: patch
  operationId: toggleGroupAwsCustomDns
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/backup/exportBuckets
  method: get
  operationId: listGroupBackupExportBuckets
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/groups/{groupId}/backup/exportBuckets
  method: post
  operationId: createGroupBackupExportBucket
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/backup/exportBuckets/{exportBucketId}
  method: delete
  operationId: deleteGroupBackupExportBucket
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/backup/exportBuckets/{exportBucketId}
  method: get
  operationId: getGroupBackupExportBucket
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/groups/{groupId}/backup/exportBuckets/{exportBucketId}
  method: patch
  operationId: updateGroupBackupExportBucket
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/backup/{cloudProvider}/privateEndpoints
  method: get
  operationId: listGroupBackupPrivateEndpoints
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/groups/{groupId}/backup/{cloudProvider}/privateEndpoints
  method: post
  operationId: createGroupBackupPrivateEndpoint
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/backup/{cloudProvider}/privateEndpoints/{endpointId}
  method: delete
  operationId: deleteGroupBackupPrivateEndpoint
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/backup/{cloudProvider}/privateEndpoints/{endpointId}
  method: get
  operationId: getGroupBackupPrivateEndpoint
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/groups/{groupId}/backupCompliancePolicy
  method: delete
  operationId: disableGroupBackupCompliancePolicy
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /api/atlas/v2/groups/{groupId}/backupCompliancePolicy
  method: get
  operationId: getGroupBackupCompliancePolicy
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/groups/{groupId}/backupCompliancePolicy
  method: put
  operationId: updateGroupBackupCompliancePolicy
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/cloudProviderAccess
  method: get
  operationId: listGroupCloudProviderAccess
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/groups/{groupId}/cloudProviderAccess
  method: post
  operationId: createGroupCloudProviderAccess
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/cloudProviderAccess/{cloudProvider}/{roleId}
  method: delete
  operationId: deauthorizeGroupCloudProviderAccessRole
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/cloudProviderAccess/{roleId}
  method: get
  operationId: getGroupCloudProviderAccess
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/groups/{groupId}/cloudProviderAccess/{roleId}
  method: patch
  operationId: authorizeGroupCloudProviderAccessRole
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/clusters
  method: get
  operationId: listGroupClusters
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/groups/{groupId}/clusters
  method: post
  operationId: createGroupCluster
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/clusters/provider/regions
  method: get
  operationId: listGroupClusterProviderRegions
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/groups/{groupId}/clusters/tenantUpgrade
  method: post
  operationId: upgradeGroupClusterTenantUpgrade
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/clusters/tenantUpgradeToServerless
  method: post
  operationId: upgradeGroupClusterTenantUpgradeToServerless
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}
  method: delete
  operationId: deleteGroupCluster
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}
  method: get
  operationId: getGroupCluster
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}
  method: patch
  operationId: updateGroupCluster
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/autoScalingConfiguration
  method: get
  operationId: autoGroupClusterScalingConfiguration
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/backup/exports
  method: get
  operationId: listGroupClusterBackupExports
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/backup/exports
  method: post
  operationId: createGroupClusterBackupExport
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/backup/exports/{exportId}
  method: get
  operationId: getGroupClusterBackupExport
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/backup/restoreJobs
  method: get
  operationId: listGroupClusterBackupRestoreJobs
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/backup/restoreJobs
  method: post
  operationId: createGroupClusterBackupRestoreJob
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/backup/restoreJobs/{restoreJobId}
  method: delete
  operationId: cancelGroupClusterBackupRestoreJob
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/backup/restoreJobs/{restoreJobId}
  method: get
  operationId: getGroupClusterBackupRestoreJob
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/backup/schedule
  method: delete
  operationId: deleteGroupClusterBackupSchedule
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/backup/schedule
  method: get
  operationId: getGroupClusterBackupSchedule
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/backup/schedule
  method: patch
  operationId: updateGroupClusterBackupSchedule
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/backup/snapshots
  method: get
  operationId: listGroupClusterBackupSnapshots
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/backup/snapshots
  method: post
  operationId: takeGroupClusterBackupSnapshots
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/backup/snapshots/shardedCluster/{snapshotId}
  method: delete
  operationId: deleteGroupClusterBackupSnapshotShardedCluster
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/backup/snapshots/shardedCluster/{snapshotId}
  method: get
  operationId: getGroupClusterBackupSnapshotShardedCluster
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/backup/snapshots/shardedClusters
  method: get
  operationId: listGroupClusterBackupSnapshotShardedClusters
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/backup/snapshots/{snapshotId}
  method: delete
  operationId: deleteGroupClusterBackupSnapshot
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/atlas/v2/groups/{groupId}/clusters/{clusterName}/backup/snapshots/{snapshotId}
  method: get
  operationId:

# --- truncated at 32 KB (152 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/mongodb/refs/heads/main/agentic-access/mongodb-agentic-access.yml