Ntropy Agentic Access
Ntropy exposes 77 API operations that an AI agent could call, of which 42 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.
By consequence: 35 read, 39 write, 2 physical, and 1 safety-critical.
1 operation are classed safety-critical and should require human-in-the-loop approval at runtime.
Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.
By consequence
Highest-consequence actions
The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.
| Method | Path | Consequence | Human-in-loop |
|---|---|---|---|
| POST | /v3/categories/{id}/reset | safety-critical | required |
| POST | /v2/account-holder/{account_holder_id}/recurring-payments | physical | conditional |
| POST | /v3/account_holders/{id}/recurring_groups | physical | conditional |
Source
Agentic Access
generated: '2026-07-20'
method: generated
source: openapi/ntropy-api-v3-openapi-original.json, openapi/ntropy-transaction-api-openapi-original.json
description: Recommended x-agentic-access execution contracts, classified heuristically from
the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
audience per deployment. See research/curity/agentic-governance/.
summary:
operations: 77
by_action_class:
acting: 42
connected: 35
by_consequence:
write: 39
read: 35
physical: 2
safety-critical: 1
human_in_the_loop_required: 1
operations:
- path: /v3/transactions
method: post
operationId: post-transaction-v-3-transactions-post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/transactions
method: get
operationId: list-transactions-v-3-transactions-get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v3/transactions/{id}
method: get
operationId: get-transaction-v-3-transactions-id-get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v3/transactions/{id}
method: delete
operationId: delete-transaction-v-3-transactions-id-delete
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/transactions/{id}/assign
method: post
operationId: set-transaction-ah-v-3-transactions-id-assign-post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/batches
method: post
operationId: post-batch-v-3-batches-post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/batches
method: get
operationId: get-batches-v-3-batches-get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v3/batches/{id}
method: get
operationId: get-single-batch-v-3-batches-id-get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v3/batches/{id}/results
method: get
operationId: get-batch-results-v-3-batches-id-results-get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v3/bank_statements
method: post
operationId: post-bank-statement-v-3-bank-statements-post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/bank_statements
method: get
operationId: get-bank-statements-v-3-bank-statements-get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v3/bank_statements/{id}
method: get
operationId: get-bank-statement-v-3-bank-statements-id-get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v3/bank_statements/{id}
method: delete
operationId: delete-bank-statement-v-3-bank-statements-id-delete
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/bank_statements/{id}/results
method: get
operationId: get-bank-statement-result-v-3-bank-statements-id-results-get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v3/bank_statements/{id}/verify
method: post
operationId: get-bank-statement-statement-info-v-3-bank-statements-id-verify-post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/entities/{id}
method: get
operationId: get-entity-by-id-v-3-entities-id-get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v3/entities/resolve
method: post
operationId: search-entity-v-3-entities-resolve-post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/account_holders/{id}/recurring_groups
method: post
operationId: get-account-holder-recurring-payments-v-3-account-holders-id-recurring-groups-post
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/categories/{id}
method: post
operationId: custom-categories-post-v-3-categories-id-post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/categories/{id}
method: get
operationId: get-category-set-v-3-categories-id-get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v3/categories/{id}/reset
method: post
operationId: delete-custom-category-set-v-3-categories-id-reset-post
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /v3/account_holders
method: post
operationId: create-account-holder-v-3-account-holders-post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/account_holders
method: get
operationId: get-account-holders-v-3-account-holders-get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v3/account_holders/{id}
method: get
operationId: get-account-holder-v-3-account-holders-id-get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v3/account_holders/{id}
method: delete
operationId: delete-account-holder-v-3-account-holders-id-delete
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/rules
method: post
operationId: filter-post-v-3-rules-post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/rules
method: get
operationId: filter-get-v-3-rules-get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v3/rules/replace
method: post
operationId: filter-replace-v-3-rules-replace-post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/rules/{id}
method: patch
operationId: filter-patch-v-3-rules-id-patch
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/rules/{id}
method: delete
operationId: filter-delete-v-3-rules-id-delete
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/webhooks
method: post
operationId: post-webhook-v-3-webhooks-post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/webhooks
method: get
operationId: get-webhooks-v-3-webhooks-get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v3/webhooks/{id}
method: get
operationId: get-webhook-v-3-webhooks-id-get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v3/webhooks/{id}
method: patch
operationId: patch-webhook-v-3-webhooks-id-patch
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/webhooks/{id}
method: delete
operationId: delete-webhook-v-3-webhooks-id-delete
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/reports
method: post
operationId: post-report-v-3-reports-post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/reports
method: get
operationId: get-reports-v-3-reports-get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v3/reports/{id}
method: get
operationId: get-report-v-3-reports-id-get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v3/reports/{id}
method: delete
operationId: delete-report-v-3-reports-id-delete
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v2/labels/hierarchy/{account_holder_type}
method: get
operationId: get_labels_hierarchy_v2_labels_hierarchy__account_holder_type__get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/labels/hierarchy/custom/{account_holder_type}
method: post
operationId: custom_hierarchy_post_v2_labels_hierarchy_custom__account_holder_type__post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v2/labels/hierarchy/custom/{account_holder_type}
method: get
operationId: custom_hierarchy_get_v2_labels_hierarchy_custom__account_holder_type__get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/labels/hierarchy/custom/{account_holder_type}
method: delete
operationId: delete_custom_hierarchy_v2_labels_hierarchy_custom__account_holder_type__delete
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v2/account-holder
method: post
operationId: create_account_holder_v2_account_holder_post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v2/account-holder
method: get
operationId: get_account_holders_v2_account_holder_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/account-holder/{account_holder_id}
method: put
operationId: replace_account_holder_v2_account_holder__account_holder_id__put
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v2/account-holder/{account_holder_id}
method: get
operationId: get_account_holder_v2_account_holder__account_holder_id__get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/account-holder/{account_holder_id}
method: patch
operationId: patch_account_holder_v2_account_holder__account_holder_id__patch
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v2/account-holder/{account_holder_id}
method: delete
operationId: delete_account_holder_v2_account_holder__account_holder_id__delete
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v2/account-holder/{account_holder_id}/transactions
method: get
operationId: get_account_holder_transactions_v2_account_holder__account_holder_id__transactions_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/account-holder/{account_holder_id}/transactions
method: post
operationId: get_account_holder_transactions_by_id_v2_account_holder__account_holder_id__transactions_post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v2/account-holder/{account_holder_id}/transactions
method: put
operationId: correct_transactions_v2_account_holder__account_holder_id__transactions_put
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v2/account-holder/{account_holder_id}/transactions/{transaction_id}
method: put
operationId: correct_transaction_v2_account_holder__account_holder_id__transactions__transaction_id__put
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v2/account-holder/{account_holder_id}/recurring-payments
method: post
operationId: get_account_holder_recurring_payments_v2_account_holder__account_holder_id__recurring_payments_post
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v2/transactions/sync
method: post
operationId: enrich_transactions_sync_v2_transactions_sync_post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v2/transactions/async
method: post
operationId: enrich_transactions_async_v2_transactions_async_post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v2/transactions/async/{id}
method: get
operationId: get_async_enrichment_result_v2_transactions_async__id__get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/report
method: post
operationId: report_post_v2_v2_report_post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v2/report
method: get
operationId: report_list_v2_report_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/report/{id}
method: get
operationId: report_get_specific_v2_report__id__get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/rules/
method: get
operationId: filter_get_v2_rules__get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/rules/
method: post
operationId: filter_post_v2_rules__post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v2/rules/append
method: post
operationId: filter_append_v2_rules_append_post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v2/rules/{index}
method: delete
operationId: filter_delete_v2_rules__index__delete
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v2/rules/{index}
method: patch
operationId: filter_patch_v2_rules__index__patch
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v2/entities
method: get
operationId: search_entity_v2_entities_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/entities/{id}
method: get
operationId: get_entity_by_id_v2_entities__id__get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/mcc
method: get
operationId: get_mccs_v2_mcc_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /datasources/bank_statements
method: post
operationId: _post_bank_statement_datasources_bank_statements_post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /datasources/bank_statements
method: get
operationId: _get_bank_statements_datasources_bank_statements_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /datasources/bank_statements/{uuid}
method: get
operationId: _get_bank_statement_datasources_bank_statements__uuid__get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /datasources/bank_statements/{uuid}
method: delete
operationId: _delete_bank_statement_datasources_bank_statements__uuid__delete
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /datasources/bank_statements/{uuid}
method: patch
operationId: patch_statement_datasources_bank_statements__uuid__patch
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /datasources/bank_statements/{uuid}/transactions
method: get
operationId: get_bank_statement_transactions_datasources_bank_statements__uuid__transactions_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /datasources/bank_statements/{uuid}/statement-info
method: get
operationId: get_bank_statement_statement_info_datasources_bank_statements__uuid__statement_info_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /datasources/bank_statements/{uuid}/results
method: get
operationId: _get_bank_statement_results_datasources_bank_statements__uuid__results_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /health
method: get
operationId: health_get_health_get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none