Opply · Agentic Access

Opply Agentic Access

x-agentic-access generated

Opply exposes 910 API operations that an AI agent could call, of which 512 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.

By consequence: 398 read, 367 write, 127 physical, and 18 safety-critical.

18 operations are classed safety-critical and should require human-in-the-loop approval at runtime.

Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.

CompanyFood and BeverageSupply ChainProcurementOrderingPaymentsSourcingLogisticsAI AgentsMCP
Operations: 910 Acting: 512 Human-in-the-loop: 18 Method: generated

By consequence

read 398 write 367 physical 127 safety-critical 18

Highest-consequence actions

The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.

MethodPathConsequenceHuman-in-loop
POST /api/v1/app-orders/merchant-of-record/{uuid}/mark-dispatch-scheduled/ safety-critical required
PATCH /api/v1/app-orders/merchant-of-record/{uuid}/mark-order-dispatched/ safety-critical required
PATCH /api/v1/app-orders/supplier/{uuid}/mark-order-dispatched/ safety-critical required
POST /api/v1/buyer-onboarding/merchant-of-record/supplier-submissions/{id}/reset/ safety-critical required
POST /api/v1/files/attachments/{uuid}/confirm/ safety-critical required
POST /api/v1/files/message-attachments/{uuid}/confirm/ safety-critical required
PUT /api/v1/inquiries/dispatch_address/{id}/ safety-critical required
PATCH /api/v1/inquiries/dispatch_address/{id}/ safety-critical required
POST /api/v1/orders/supplier/{order_uuid}/confirm-dispatch/ safety-critical required
POST /api/v1/task-recurrences/{uuid}/disable/ safety-critical required
POST /api/v1/users/admin_panel/users/{uuid}/reset_password/ safety-critical required
POST /api/v1/users/reset-password/commit/ safety-critical required
POST /api/v1/users/reset-password/init/ safety-critical required
POST /api/v1/users/users/set-admin/ safety-critical required
POST /api/v2/notifications/company-overrides/ safety-critical required
PATCH /api/v2/notifications/company-overrides/{id}/ safety-critical required
DELETE /api/v2/notifications/company-overrides/{id}/ safety-critical required
POST /api/v2/notifications/debug-dispatch/ safety-critical required
POST /api/v1/agents/unleashed-invoice-assistant/invocations/ physical conditional
POST /api/v1/agents/xero-invoice-assistant/invocations/ physical conditional
POST /api/v1/agreements/brand/{uuid}/place-order/ physical conditional
POST /api/v1/agreements/merchant-of-record/{uuid}/place-order/ physical conditional
POST /api/v1/app-orders/admin/{uuid}/create-order-event/ physical conditional
DELETE /api/v1/app-orders/admin/{uuid}/documents/{document_uuid}/ physical conditional
PUT /api/v1/app-orders/admin/{uuid}/edit/ physical conditional

Source

Agentic Access

Raw ↑ 
generated: '2026-07-20'
method: generated
source: openapi/opply-openapi-original.yml
description: Recommended x-agentic-access execution contracts, classified heuristically from
  the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
  audience per deployment. See research/curity/agentic-governance/.
summary:
  operations: 910
  by_action_class:
    connected: 398
    acting: 512
  by_consequence:
    read: 398
    write: 367
    physical: 127
    safety-critical: 18
  human_in_the_loop_required: 18
operations:
- path: /.well-known/oauth-authorization-server
  method: get
  operationId: .well_known_oauth_authorization_server_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /.well-known/oauth-protected-resource
  method: get
  operationId: .well_known_oauth_protected_resource_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /.well-known/oauth-protected-resource/api/v1/mcp/zendesk
  method: get
  operationId: .well_known_oauth_protected_resource_api_v1_mcp_zendesk_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/schema/
  method: get
  operationId: api_schema_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/activity-feed/
  method: get
  operationId: api_v1_activity_feed_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/activity-feed/{uuid}/
  method: get
  operationId: api_v1_activity_feed_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/activity-feed/mark-read/
  method: post
  operationId: api_v1_activity_feed_mark_read_create
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/activity-feed/unread-count/
  method: get
  operationId: api_v1_activity_feed_unread_count_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/agents/admin/installations/
  method: get
  operationId: api_v1_agents_admin_installations_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/agents/admin/installations/{agent_uuid}/
  method: patch
  operationId: api_v1_agents_admin_installations_partial_update
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/agents/agent-task-runs/{run_uuid}/claim/
  method: post
  operationId: api_v1_agents_agent_task_runs_claim_create
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/agents/agent-task-runs/{run_uuid}/complete/
  method: post
  operationId: api_v1_agents_agent_task_runs_complete_create
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/agents/agent-task-runs/{run_uuid}/heartbeat/
  method: post
  operationId: api_v1_agents_agent_task_runs_heartbeat_create
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/agents/buyer-onboarding/invocations/
  method: post
  operationId: api_v1_agents_buyer_onboarding_invocations_create
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/agents/debug/system-tasks/
  method: get
  operationId: api_v1_agents_debug_system_tasks_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/agents/feedback/
  method: post
  operationId: api_v1_agents_feedback_create
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/agents/fleet/
  method: get
  operationId: api_v1_agents_fleet_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/agents/fleet/{slug}/
  method: get
  operationId: api_v1_agents_fleet_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/agents/installations/me/
  method: get
  operationId: api_v1_agents_installations_me_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/agents/mor-router/me/
  method: get
  operationId: api_v1_agents_mor_router_me_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/agents/opply-assistant/invocations/
  method: post
  operationId: api_v1_agents_opply_assistant_invocations_create
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/agents/opply-assistant/sessions/me/
  method: get
  operationId: api_v1_agents_opply_assistant_sessions_me_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/agents/opply-assistant/sessions/me/
  method: delete
  operationId: api_v1_agents_opply_assistant_sessions_me_destroy
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/agents/opply-assistant/sessions/me/events/
  method: get
  operationId: api_v1_agents_opply_assistant_sessions_me_events_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/agents/unleashed-invoice-assistant/invocations/
  method: post
  operationId: api_v1_agents_unleashed_invoice_assistant_invocations_create
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/agents/xero-invoice-assistant/invocations/
  method: post
  operationId: api_v1_agents_xero_invoice_assistant_invocations_create
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/agreements/brand/
  method: get
  operationId: api_v1_agreements_brand_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/agreements/brand/{uuid}/
  method: get
  operationId: api_v1_agreements_brand_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/agreements/brand/{uuid}/place-order/
  method: post
  operationId: api_v1_agreements_brand_place_order_create
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/agreements/brand/aggregate/
  method: get
  operationId: api_v1_agreements_brand_aggregate_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/agreements/lead-generation-jobs/
  method: get
  operationId: api_v1_agreements_lead_generation_jobs_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/agreements/lead-generation-jobs/
  method: post
  operationId: api_v1_agreements_lead_generation_jobs_create
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/agreements/merchant-of-record/
  method: get
  operationId: api_v1_agreements_merchant_of_record_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/agreements/merchant-of-record/
  method: post
  operationId: api_v1_agreements_merchant_of_record_create
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/agreements/merchant-of-record/{uuid}/
  method: get
  operationId: api_v1_agreements_merchant_of_record_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/agreements/merchant-of-record/{uuid}/
  method: put
  operationId: api_v1_agreements_merchant_of_record_update
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/agreements/merchant-of-record/{uuid}/
  method: patch
  operationId: api_v1_agreements_merchant_of_record_partial_update
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/agreements/merchant-of-record/{uuid}/
  method: delete
  operationId: api_v1_agreements_merchant_of_record_destroy
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/agreements/merchant-of-record/{uuid}/line-item/{line_item_uuid}/documents/
  method: post
  operationId: api_v1_agreements_merchant_of_record_line_item_documents_create
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/agreements/merchant-of-record/{uuid}/line-item/{line_item_uuid}/documents/{document_uuid}/
  method: delete
  operationId: api_v1_agreements_merchant_of_record_line_item_documents_destroy
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/agreements/merchant-of-record/{uuid}/orders/
  method: get
  operationId: api_v1_agreements_merchant_of_record_orders_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/agreements/merchant-of-record/{uuid}/place-order/
  method: post
  operationId: api_v1_agreements_merchant_of_record_place_order_create
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/app-orders/admin/
  method: get
  operationId: api_v1_app_orders_admin_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/admin/{uuid}/
  method: get
  operationId: api_v1_app_orders_admin_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/admin/{uuid}/create-order-event/
  method: post
  operationId: api_v1_app_orders_admin_create_order_event_create
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/app-orders/admin/{uuid}/documents/
  method: get
  operationId: api_v1_app_orders_admin_documents_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/admin/{uuid}/documents/{document_uuid}/
  method: delete
  operationId: api_v1_app_orders_admin_documents_destroy
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/app-orders/admin/{uuid}/edit/
  method: put
  operationId: api_v1_app_orders_admin_edit_update
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/app-orders/admin/{uuid}/mark-order-as-paid/
  method: post
  operationId: api_v1_app_orders_admin_mark_order_as_paid_create
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/app-orders/admin/{uuid}/mark-order-as-paid-out-to-supplier/
  method: post
  operationId: api_v1_app_orders_admin_mark_order_as_paid_out_to_supplier_create
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/app-orders/admin/{uuid}/order-events/
  method: get
  operationId: api_v1_app_orders_admin_order_events_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/admin/{uuid}/pricing/
  method: get
  operationId: api_v1_app_orders_admin_pricing_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/admin/{uuid}/upload-document/
  method: post
  operationId: api_v1_app_orders_admin_upload_document_create
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/app-orders/alerts/
  method: get
  operationId: api_v1_app_orders_alerts_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/brand/
  method: get
  operationId: api_v1_app_orders_brand_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/brand/{uuid}/
  method: get
  operationId: api_v1_app_orders_brand_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/brand/{uuid}/client-notified-as-paid/
  method: post
  operationId: api_v1_app_orders_brand_client_notified_as_paid_create
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/app-orders/brand/{uuid}/invoice-url/
  method: get
  operationId: api_v1_app_orders_brand_invoice_url_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/brand/{uuid}/mark-as-delivered/
  method: post
  operationId: api_v1_app_orders_brand_mark_as_delivered_create
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/app-orders/brand/{uuid}/mark-as-picked-up/
  method: post
  operationId: api_v1_app_orders_brand_mark_as_picked_up_create
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/app-orders/brand/{uuid}/order-activities/
  method: get
  operationId: api_v1_app_orders_brand_order_activities_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/brand/{uuid}/purchase-order/pdf/
  method: get
  operationId: api_v1_app_orders_brand_purchase_order_pdf_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/brand/{uuid}/repeat-spot-order/
  method: post
  operationId: api_v1_app_orders_brand_repeat_spot_order_create
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/app-orders/brand/activity-statement/
  method: get
  operationId: api_v1_app_orders_brand_activity_statement_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/brand/aggregate/
  method: get
  operationId: api_v1_app_orders_brand_aggregate_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/brand/all-order-activities/
  method: get
  operationId: api_v1_app_orders_brand_all_order_activities_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/brand/grouped-statements/
  method: get
  operationId: api_v1_app_orders_brand_grouped_statements_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/brand/grouped-statements/{uuid}/
  method: get
  operationId: api_v1_app_orders_brand_grouped_statements_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/brand/grouped-statements/{uuid}/csv/
  method: get
  operationId: api_v1_app_orders_brand_grouped_statements_csv_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/brand/grouped-statements/{uuid}/invoices/
  method: get
  operationId: api_v1_app_orders_brand_grouped_statements_invoices_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/brand/grouped-statements/{uuid}/mark-transfer-sent/
  method: post
  operationId: api_v1_app_orders_brand_grouped_statements_mark_transfer_sent_create
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/app-orders/brand/order-adjustments/
  method: get
  operationId: api_v1_app_orders_brand_order_adjustments_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/brand/order-adjustments/{uuid}/
  method: get
  operationId: api_v1_app_orders_brand_order_adjustments_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/brand/outstanding-payments-summary/
  method: get
  operationId: api_v1_app_orders_brand_outstanding_payments_summary_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/brand/payment-analytics/
  method: get
  operationId: api_v1_app_orders_brand_payment_analytics_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/brand/payments/
  method: get
  operationId: api_v1_app_orders_brand_payments_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/brand/payments/available-sections/
  method: get
  operationId: api_v1_app_orders_brand_payments_available_sections_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/brand/payments/merchant-of-record/
  method: get
  operationId: api_v1_app_orders_brand_payments_merchant_of_record_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/brand/payments/service-fees/
  method: get
  operationId: api_v1_app_orders_brand_payments_service_fees_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/brand/spot-buy-request/
  method: post
  operationId: api_v1_app_orders_brand_spot_buy_request_create
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/app-orders/brand/spot-buy-requests/
  method: get
  operationId: api_v1_app_orders_brand_spot_buy_requests_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/brand/spot-buy-requests/{spot_buy_request_uuid}/cancel/
  method: patch
  operationId: api_v1_app_orders_brand_spot_buy_requests_cancel_partial_update
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/app-orders/brand/statements/{uuid}/
  method: get
  operationId: api_v1_app_orders_brand_statements_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/brand/statements/{uuid}/client-notified-as-paid/
  method: post
  operationId: api_v1_app_orders_brand_statements_client_notified_as_paid_create
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/app-orders/brand/statements/{uuid}/invoice-pdf/
  method: get
  operationId: api_v1_app_orders_brand_statements_invoice_pdf_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/brand/statements/{uuid}/invoice-url/
  method: get
  operationId: api_v1_app_orders_brand_statements_invoice_url_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/brand/suppliers/
  method: get
  operationId: api_v1_app_orders_brand_suppliers_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/brand/two-credit-information/
  method: get
  operationId: api_v1_app_orders_brand_two_credit_information_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/forecasts/
  method: get
  operationId: api_v1_app_orders_forecasts_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/merchant-of-record/
  method: get
  operationId: api_v1_app_orders_merchant_of_record_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/merchant-of-record/{uuid}/
  method: get
  operationId: api_v1_app_orders_merchant_of_record_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/merchant-of-record/{uuid}/approve/
  method: post
  operationId: api_v1_app_orders_merchant_of_record_approve_create
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/app-orders/merchant-of-record/{uuid}/buyer-purchase-order/pdf/
  method: get
  operationId: api_v1_app_orders_merchant_of_record_buyer_purchase_order_pdf_retrieve
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/merchant-of-record/{uuid}/change-payment-terms/
  method: post
  operationId: api_v1_app_orders_merchant_of_record_change_payment_terms_create
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/app-orders/merchant-of-record/{uuid}/confirm-shipping-responsibility/
  method: post
  operationId: api_v1_app_orders_merchant_of_record_confirm_shipping_responsibility_create
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/app-orders/merchant-of-record/{uuid}/create-order-event/
  method: post
  operationId: api_v1_app_orders_merchant_of_record_create_order_event_create
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/app-orders/merchant-of-record/{uuid}/documents/
  method: get
  operationId: api_v1_app_orders_merchant_of_record_documents_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/app-orders/merchant-of-record/

# --- truncated at 32 KB (311 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/opply/refs/heads/main/agentic-access/opply-agentic-access.yml