Outdoorsy Agentic Access
Outdoorsy exposes 312 API operations that an AI agent could call, of which 150 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.
By consequence: 162 read, 137 write, 11 physical, and 2 safety-critical.
2 operations are classed safety-critical and should require human-in-the-loop approval at runtime.
Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.
By consequence
Highest-consequence actions
The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.
| Method | Path | Consequence | Human-in-loop |
|---|---|---|---|
| POST | /quotes | safety-critical | required |
| PATCH | /user-notice-events/{event_id} | safety-critical | required |
| POST | /2fa/send | physical | conditional |
| POST | /admin/users/{user_id}/resend-confirmation | physical | conditional |
| POST | /admin/validations/{id}/duplicate | physical | conditional |
| POST | /auth/creds/resend | physical | conditional |
| POST | /bookings/{booking_id}/collect-post-trip-charges | physical | conditional |
| DELETE | /bookings/{booking_id}/payout/{transaction_id} | physical | conditional |
| POST | /bookings/{booking_id}/system-emails/resend | physical | conditional |
| PATCH | /checkout_steps/{booking_id} | physical | conditional |
| POST | /gift_cards/{gift_card_id}/fund | physical | conditional |
| POST | /referrals/refer | physical | conditional |
| PATCH | /rentals/{rental_id}/image-order | physical | conditional |
Source
Agentic Access
generated: '2026-08-02'
method: generated
source: openapi/outdoorsy-openapi-original.json, openapi/outdoorsy-search-openapi-original.json
description: Recommended x-agentic-access execution contracts, classified heuristically from
the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
audience per deployment. See research/curity/agentic-governance/.
summary:
operations: 312
by_action_class:
acting: 150
connected: 162
by_consequence:
physical: 11
write: 137
read: 162
safety-critical: 2
human_in_the_loop_required: 2
operations:
- path: /2fa/send
method: post
operationId: sendCode
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /2fa/setup-method
method: post
operationId: setupPreferredMethod
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /2fa/verify
method: patch
operationId: verifyCode
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /admin/ai-reply-suggestions
method: get
operationId: listAiReplySuggestions
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /admin/announcement-groups
method: get
operationId: readManyAnnouncementGroups
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /admin/announcement-groups
method: post
operationId: createAnnouncementGroup
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /admin/announcement-groups/{announcement_group_id}
method: get
operationId: readOneAnnouncementGroup
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /admin/announcement-groups/{announcement_group_id}
method: delete
operationId: deleteAnnouncementGroup
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /admin/announcement-groups/{announcement_group_id}
method: patch
operationId: updateAnnouncementGroup
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /admin/announcements
method: get
operationId: readManyAnnouncements
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /admin/announcements
method: post
operationId: createAnnouncement
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /admin/announcements/{announcement_id}
method: get
operationId: readOneAnnouncement
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /admin/announcements/{announcement_id}
method: delete
operationId: deleteAnnouncement
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /admin/announcements/{announcement_id}
method: patch
operationId: updateAnnouncement
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /admin/users/banks/payouts-triggered
method: get
operationId: getBanksWithPayoutsTriggered
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /admin/users/banks/update
method: post
operationId: updateBankAccount
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /admin/users/{user_id}/resend-confirmation
method: post
operationId: adminAuthCredsResendForUser
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /admin/validations
method: get
operationId: adminListValidations
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /admin/validations/{id}
method: get
operationId: adminGetValidation
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /admin/validations/{id}
method: delete
operationId: adminDeleteValidation
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /admin/validations/{id}/duplicate
method: post
operationId: adminDuplicateValidation
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /admin/validations/{id}/force
method: post
operationId: adminForceValidationApproval
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /admin/validations/{id}/history
method: get
operationId: adminGetValidationHistoryByID
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /admin/validations/{id}/retry
method: post
operationId: adminRetryValidation
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /aggregate-reviews-for-locality
method: get
operationId: aggregateLocalityReviews
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /amenities
method: get
operationId: listAmenitiesGroups
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /announcements
method: get
operationId: getAnnouncementsForUser
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /announcements/{announcement_id}
method: get
operationId: getAnnouncementForID
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /announcements/{announcement_id}/read
method: post
operationId: markAnnouncementAsRead
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /auth/creds/create
method: post
operationId: authCredsCreate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /auth/creds/forgot
method: post
operationId: authCredsForget
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /auth/creds/login
method: post
operationId: authCredsLogin
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /auth/creds/resend
method: post
operationId: authCredsResend
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /auth/dealers/create
method: post
operationId: authDealersSelfServeCreate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /auth/{provider}/callback
method: get
operationId: oauthCallback
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /auth/{provider}/login
method: get
operationId: oauthLogin
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /autosuggestions
method: get
operationId: getAutosuggestions
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /availability
method: get
operationId: listAvailability
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /bids
method: get
operationId: listBids
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /bids
method: post
operationId: createBid
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bids/available
method: get
operationId: bidsAvailable
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /bids/{bid_id}/bid-matches/{bid_match_id}/renter-decline
method: post
operationId: renterDeclineBidMatch
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bids/{id}
method: get
operationId: getBidById
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /bids/{id}
method: delete
operationId: deleteBid
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bids/{id}
method: patch
operationId: updateBidById
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bids/{id}/decline
method: post
operationId: declineBid
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bookings
method: get
operationId: listBookings
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /bookings
method: post
operationId: createBooking
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bookings/soonest
method: get
operationId: bookings
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /bookings/stage
method: get
operationId: readManyByStageRequest
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /bookings/{booking_id}/bundles
method: get
operationId: listBookingBundles
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /bookings/{booking_id}/bundles
method: post
operationId: assignBookingBundle
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bookings/{booking_id}/bundles/{bundle_id}
method: get
operationId: getBookingBundleById
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /bookings/{booking_id}/calculate-delivery
method: post
operationId: estimatedDeliveryRequest
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bookings/{booking_id}/collect-post-trip-charges
method: post
operationId: collectBookingPostTripCharges
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bookings/{booking_id}/items
method: post
operationId: createBookingItem
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bookings/{booking_id}/items/batch
method: post
operationId: bookingItemsBatchUpdateLegacy
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bookings/{booking_id}/items/batch-items
method: post
operationId: bookingItemsBatchUpdate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bookings/{booking_id}/items/copy
method: post
operationId: copyRentalItemToBooking
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bookings/{booking_id}/items/{id}
method: get
operationId: getBookingItemById
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /bookings/{booking_id}/items/{id}
method: delete
operationId: deleteBookingItem
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bookings/{booking_id}/items/{id}
method: patch
operationId: updateBookingItem
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bookings/{booking_id}/items/{id}/update-consigned
method: patch
operationId: updateConsignedBookingItem
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bookings/{booking_id}/payout/{transaction_id}
method: delete
operationId: deleteScheduledPayout
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bookings/{booking_id}/proposals
method: get
operationId: getProposals
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /bookings/{booking_id}/proposals
method: post
operationId: createProposal
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bookings/{booking_id}/proposals/batch-delete
method: delete
operationId: batchDeleteProposals
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bookings/{booking_id}/proposals/batch-update
method: patch
operationId: batchUpdateProposals
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bookings/{booking_id}/proposals/{id}
method: get
operationId: getProposalById
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /bookings/{booking_id}/proposals/{id}
method: delete
operationId: deleteProposal
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bookings/{booking_id}/proposals/{id}
method: patch
operationId: updateProposal
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bookings/{booking_id}/proposals/{id}/act
method: get
operationId: actOnProposal
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /bookings/{booking_id}/scheduled-emails
method: get
operationId: readManyScheduledEmails
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /bookings/{booking_id}/services
method: get
operationId: listBookingServices
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /bookings/{booking_id}/services/{id}
method: delete
operationId: deleteBookingService
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bookings/{booking_id}/services/{service_id}
method: get
operationId: getBookingServiceById
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /bookings/{booking_id}/services/{service_id}
method: post
operationId: createBookingService
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bookings/{booking_id}/services/{service_id}
method: patch
operationId: updateBookingService
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bookings/{booking_id}/system-emails
method: get
operationId: readSystemEmailsRequest
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /bookings/{booking_id}/system-emails/resend
method: post
operationId: resendSystemEmail
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bookings/{booking_id}/transactions
method: get
operationId: listBookingTransactions
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /bookings/{booking_id}/transactions
method: post
operationId: createTransaction
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bookings/{booking_id}/transactions/{transaction_id}
method: get
operationId: getBookingTransaction
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /bookings/{booking_id}/transactions/{transaction_id}
method: delete
operationId: deletePendingTransaction
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bookings/{booking_id}/transactions/{transaction_id}
method: patch
operationId: updateBookingTransaction
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bookings/{booking_id}/weather
method: post
operationId: getBookingWeather
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bookings/{id}
method: get
operationId: getBookingById
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /bookings/{id}
method: delete
operationId: deleteBookingById
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bookings/{id}
method: patch
operationId: updateBooking
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bookings/{id}/cancellation-details
method: get
operationId: getBookingCancellationDetails
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /bookings/{id}/collect-overage-fee
method: post
operationId: collectBookingOverageFee
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bookings/{id}/status
method: patch
operationId: bookingChangeStatus
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bundles
method: get
operationId: listBundles
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /bundles
method: post
operationId: createBundle
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bundles/{bundle_id}/features
method: post
operationId: createBundleFeature
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bundles/{bundle_id}/features/{id}
method: get
operationId: getBundleFeatureById
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
scope:
- '[]'
- path: /bundles/{bundle_id}/features/{id}
method: delete
operationId: deleteBundleFeature
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bundles/{bundle_id}/features/{id}
method: patch
operationId: updateBundleFeature
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
scope:
- '[]'
- path: /bundles/{bundle_id}
# --- truncated at 32 KB (93 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/outdoorsy/refs/heads/main/agentic-access/outdoorsy-agentic-access.yml