Netography Agentic Access
Netography exposes 173 API operations that an AI agent could call, of which 101 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.
By consequence: 72 read, 87 write, and 14 safety-critical.
14 operations are classed safety-critical and should require human-in-the-loop approval at runtime.
Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.
By consequence
Highest-consequence actions
The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.
| Method | Path | Consequence | Human-in-loop |
|---|---|---|---|
| PUT | /api/v1/bgp/neighbor/{neighborid}/disable | safety-critical | required |
| PUT | /api/v1/dns-devices/{id}/disable | safety-critical | required |
| PUT | /api/v1/labels/ports/{port}/{protocol}/reset | safety-critical | required |
| PUT | /api/v1/rule-engine/algorithm/{id}/disable | safety-critical | required |
| PUT | /api/v1/rule-engine/algorithm/{id}/reset | safety-critical | required |
| PUT | /api/v1/rule-engine/ccm/{id}/disable | safety-critical | required |
| PUT | /api/v1/rule-engine/ccm/{id}/reset | safety-critical | required |
| PUT | /api/v1/rule-engine/rule/{id}/disable | safety-critical | required |
| PUT | /api/v1/rule-engine/triggers | safety-critical | required |
| DELETE | /api/v1/rule-engine/triggers | safety-critical | required |
| DELETE | /api/v1/rule-engine/triggers/algorithms/{algorithm} | safety-critical | required |
| DELETE | /api/v1/rule-engine/triggers/algorithms/{algorithm}/objects/{object} | safety-critical | required |
| DELETE | /api/v1/rule-engine/triggers/objects/{object} | safety-critical | required |
| PUT | /api/v1/vpc/{id}/disable | safety-critical | required |
Source
Agentic Access
generated: '2026-07-20'
method: generated
source: openapi/netography-openapi.yml
description: Recommended x-agentic-access execution contracts, classified heuristically from
the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
audience per deployment. See research/curity/agentic-governance/.
summary:
operations: 173
by_action_class:
acting: 101
connected: 72
by_consequence:
write: 87
read: 72
safety-critical: 14
human_in_the_loop_required: 14
operations:
- path: /api/v1/auth/token
method: post
operationId: v1_auth_token_post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/auth/bearer/token
method: post
operationId: auth_bearer_token_post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/auth/bearer/refresh
method: post
operationId: auth_bearer_refresh_post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/stats/{context}/fields
method: get
operationId: v1_stats_context_fields_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/stats/{context}/aliases
method: get
operationId: v1_stats_context_aliases_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/stats/{context}/metrics
method: get
operationId: v1_stats_context_metrics_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/stats/{context}/ts
method: post
operationId: v1_stats_context_ts_post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/stats/{context}/agg
method: post
operationId: v1_stats_context_agg_post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/search/{context}/fields
method: get
operationId: v1_search_context_fields_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/search/{context}
method: post
operationId: v1_search_context_post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/fetch/{context}/{id}
method: get
operationId: v1_fetch_context_id_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/blocks
method: delete
operationId: v1_blocks_delete
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/intel/lookup/asns
method: post
operationId: v1_intel_lookup_asns_post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/cve/{cveid}
method: get
operationId: v1_cve_cveid_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/intel/lookup/ips
method: post
operationId: v1_intel_lookup_ips_post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/labels/ips
method: get
operationId: v1_labels_ips_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/labels/ips
method: post
operationId: v1_labels_ips_post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/labels/ips
method: put
operationId: v1_labels_ips_put
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/labels/ips/all/{context}
method: get
operationId: v1_labels_ips_all_context_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/labels/ips/{ip}
method: get
operationId: v1_labels_ips_ip_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/labels/ips/{ip}/{context}
method: get
operationId: v1_labels_ips_ip_context_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/labels/ips/{ip}/{context}
method: delete
operationId: v1_labels_ips_ip_context_delete
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/labels/ips/bulk
method: put
operationId: v1_labels_ips_bulk_put
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/labels/ips/bulk
method: delete
operationId: v1_labels_ips_bulk_delete
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/labels/ips/upload
method: put
operationId: v1_labels_ips_upload_put
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/labels/ports
method: get
operationId: v1_labels_ports_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/labels/ports
method: post
operationId: v1_labels_ports_post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/labels/ports
method: put
operationId: v1_labels_ports_put
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/labels/ports/protocols
method: get
operationId: v1_labels_ports_protocols_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/labels/ports/all/{protocol}
method: get
operationId: v1_labels_ports_all_protocol_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/labels/ports/{port}
method: get
operationId: v1_labels_ports_port_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/labels/{port}/{protocol}
method: get
operationId: v1_labels_port_protocol_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/labels/{port}/{protocol}
method: delete
operationId: v1_labels_port_protocol_delete
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/labels/ports/{port}/{protocol}/show
method: put
operationId: v1_labels_ports_port_protocol_show
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/labels/ports/{port}/{protocol}/hide
method: put
operationId: v1_labels_ports_protocol_hide_put
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/labels/ports/{port}/{protocol}/reset
method: put
operationId: v1_labels_ports_port_protocol_reset_put
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /api/v1/labels/ports/bulk
method: put
operationId: v1_labels_ports_bulk_put
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/labels/ports/bulk
method: delete
operationId: v1_labels_ports_bulk_delete
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/labels/ports/upload
method: put
operationId: v1_labels_ports_upload_put
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/integrations/aws/role
method: get
operationId: v1_integrations_aws_role_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/rule-engine/categories
method: get
operationId: v1_detection_categories_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/rule-engine/categories
method: delete
operationId: v1_detection_categories_delete
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/rule-engine/category/{name}
method: get
operationId: v1_detection_category_name_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/rule-engine/category/{name}
method: put
operationId: v1_detection_category_name_put
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/rule-engine/category/{name}
method: delete
operationId: v1_detection_category_name_delete
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/rule-engine/algorithms
method: get
operationId: v1_traffic_detection_models_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/rule-engine/algorithm
method: post
operationId: v1_traffic_detection_model_post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/rule-engine/algorithm/{id}
method: get
operationId: v1_traffic_detection_model_id_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/rule-engine/algorithm/{id}
method: put
operationId: v1_traffic_detection_model_id_put
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/rule-engine/algorithm/{id}
method: delete
operationId: v1_traffic_detection_model_id_delete
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/rule-engine/algorithm/{id}/enable
method: put
operationId: v1_traffic_detection_model_id_enable_put
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/rule-engine/algorithm/{id}/disable
method: put
operationId: v1_traffic_detection_model_id_disable_put
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /api/v1/rule-engine/algorithm/{id}/reset
method: put
operationId: v1_traffic_detection_model_id_reset_put
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /api/v1/rule-engine/ccms
method: get
operationId: v1_context_creation_models_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/rule-engine/ccm
method: post
operationId: v1_context_creation_model_post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/rule-engine/ccm/{id}
method: get
operationId: v1_context_creation_model_id_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/rule-engine/ccm/{id}
method: put
operationId: v1_context_creation_model_id_put
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/rule-engine/ccm/{id}
method: delete
operationId: v1_context_creation_model_id_delete
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/rule-engine/ccm/{id}/enable
method: put
operationId: v1_context_creation_model_id_enable_put
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/rule-engine/ccm/{id}/disable
method: put
operationId: v1_context_creation_model_id_disable_put
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /api/v1/rule-engine/ccm/{id}/reset
method: put
operationId: v1_context_creation_model_id_reset_put
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /api/v1/rule-engine/rules
method: get
operationId: v1_response_policies_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/rule-engine/rule
method: post
operationId: v1_response_policy_post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/rule-engine/rule/{id}
method: get
operationId: v1_response_policy_id_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/rule-engine/rule/{id}
method: put
operationId: v1_response_policy_id_put
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/rule-engine/rule/{id}
method: delete
operationId: v1_response_policy_id_delete
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/rule-engine/rule/{id}/enable
method: put
operationId: v1_response_policy_id_enable_put
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/rule-engine/rule/{id}/disable
method: put
operationId: v1_response_policy_id_disable_put
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /api/v1/rule-engine/triggers
method: get
operationId: v1_threshold_overrides_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/rule-engine/triggers
method: put
operationId: v1_threshold_overrides_put
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /api/v1/rule-engine/triggers
method: delete
operationId: v1_threshold_overrides_delete
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /api/v1/rule-engine/triggers/algorithms/{algorithm}
method: get
operationId: v1_threshold_overrides_algorithm_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/rule-engine/triggers/algorithms/{algorithm}
method: delete
operationId: v1_threshold_overrides_algorithm_delete
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /api/v1/rule-engine/triggers/objects/{object}
method: get
operationId: v1_threshold_overrides_object_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/rule-engine/triggers/objects/{object}
method: delete
operationId: v1_threshold_overrides_object_delete
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /api/v1/rule-engine/triggers/algorithms/{algorithm}/objects/{object}
method: get
operationId: v1_threshold_overrides_algorithm_object_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/rule-engine/triggers/algorithms/{algorithm}/objects/{object}
method: delete
operationId: v1_threshold_overrides_algorithm_object_delete
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /api/v1/devices
method: get
operationId: v1_devices_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/device
method: post
operationId: v1_device_post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/device/{id}
method: get
operationId: v1_device_id_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/device/{id}
method: put
operationId: v1_devoce_id_put
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/device/{id}
method: delete
operationId: v1_device_id_delete
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/devices/status
method: get
operationId: v1_devices_status_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/device/status/{id}
method: get
operationId: v1_device_status_id_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/bgp/neighbors
method: get
operationId: v1_bgp_neighbors_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/bgp/neighbors/devices/{deviceid}
method: get
operationId: v1_bgp_neighbors_devices_deviceid_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/bgp/neighbor
method: post
operationId: v1_bgp_neighbor_post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/bgp/neighbor/{neighborid}
method: get
operationId: v1_bgp_neighbors_neighborid_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/bgp/neighbor/{neighborid}
method: put
operationId: v1_bgp_neighbors_neighborid_put
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/bgp/neighbor/{neighborid}
method: delete
operationId: v1_bgp_neighbors_neighborid_delete
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/bgp/neighbor/{neighborid}/enable
method: put
operationId: v1_bgp_neighbors_neighborid_enable_put
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/bgp/neighbor/{neighborid}/disable
method: put
operationId: v1_bgp_neighbors_neighborid_disable_put
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /api/v1/dns-devices
method: get
operationId: v1_dns_devices_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/dns-devices
method: post
operationId: v1_dns_devices_post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/dns-devices/{id}
method: get
operationId: v1_dns_device_id_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/dns-devices/{id}
method: put
operationId: v1_dns_device_id_put
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/dns-devices/{id}
method: delete
operationId: v1_dns_device_id_delete
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/dns-devices/bulkdelete
method: put
operationId: v1_dns_devices_bulkdelete_put
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/dns-devices/{id}/enable
method: put
operationId: v1_dns_device_id_enable_put
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/dns-devices/{id}/disable
method: put
operationId: v1_dns_device_id_disable_put
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /api/v1/vpc
method: get
operationId: v1_vpc_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/vpc
method: post
operationId: v1_vpc_post
x-agentic
# --- truncated at 32 KB (52 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/netography/refs/heads/main/agentic-access/netography-agentic-access.yml