Scaleway Agentic Access
Scaleway exposes 419 API operations that an AI agent could call, of which 257 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.
By consequence: 162 read, 244 write, 3 physical, and 10 safety-critical.
10 operations are classed safety-critical and should require human-in-the-loop approval at runtime.
Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.
By consequence
Highest-consequence actions
The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.
| Method | Path | Consequence | Human-in-loop |
|---|---|---|---|
| DELETE | /iam/v1alpha1/saml/{saml_id} | safety-critical | required |
| DELETE | /k8s/v1/regions/{region}/acls/{acl_id} | safety-critical | required |
| POST | /k8s/v1/regions/{region}/clusters/{cluster_id}/acls | safety-critical | required |
| PUT | /k8s/v1/regions/{region}/clusters/{cluster_id}/acls | safety-critical | required |
| POST | /k8s/v1/regions/{region}/clusters/{cluster_id}/reset-admin-token | safety-critical | required |
| POST | /k8s/v1/regions/{region}/nodes/{node_id}/reboot | safety-critical | required |
| POST | /rdb/v1/regions/{region}/read-replicas/{read_replica_id}/reset | safety-critical | required |
| POST | /secret-manager/v1beta1/regions/{region}/secrets/{secret_id}/unprotect | safety-critical | required |
| POST | /secret-manager/v1beta1/regions/{region}/secrets/{secret_id}/versions/{revision}/disable | safety-critical | required |
| POST | /transactional-email/v1alpha1/regions/{region}/domains/{domain_id}/revoke | safety-critical | required |
| POST | /containers/v1/regions/{region}/containers/{container_id}/redeploy | physical | conditional |
| POST | /functions/v1beta1/regions/{region}/functions/{function_id}/deploy | physical | conditional |
| POST | /transactional-email/v1alpha1/regions/{region}/emails | physical | conditional |
Source
Agentic Access
generated: '2026-07-15'
method: generated
source: openapi/scaleway-database-openapi.yml, openapi/scaleway-iam-openapi.yml, openapi/scaleway-instance-openapi.yml,
openapi/scaleway-kubernetes-openapi.yml, openapi/scaleway-load-balancer-openapi.yml, openapi/scaleway-secret-manager-openapi.yml,
openapi/scaleway-serverless-containers-openapi.yml, openapi/scaleway-serverless-functions-openapi.yml,
openapi/scaleway-transactional-email-openapi.yml, openapi/scaleway-vpc-openapi.yml
description: Recommended x-agentic-access execution contracts, classified heuristically from
the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
audience per deployment. See research/curity/agentic-governance/.
summary:
operations: 419
by_action_class:
connected: 162
acting: 257
by_consequence:
read: 162
write: 244
safety-critical: 10
physical: 3
human_in_the_loop_required: 10
operations:
- path: /rdb/v1/regions/{region}/backups
method: get
operationId: ListDatabaseBackups
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /rdb/v1/regions/{region}/backups
method: post
operationId: CreateDatabaseBackup
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/backups/{database_backup_id}
method: get
operationId: GetDatabaseBackup
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /rdb/v1/regions/{region}/backups/{database_backup_id}
method: patch
operationId: UpdateDatabaseBackup
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/backups/{database_backup_id}
method: delete
operationId: DeleteDatabaseBackup
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/backups/{database_backup_id}/export
method: post
operationId: ExportDatabaseBackup
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/backups/{database_backup_id}/restore
method: post
operationId: RestoreDatabaseBackup
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/database-engines
method: get
operationId: ListDatabaseEngines
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /rdb/v1/regions/{region}/endpoints/{endpoint_id}
method: get
operationId: GetEndpoint
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /rdb/v1/regions/{region}/endpoints/{endpoint_id}
method: delete
operationId: DeleteEndpoint
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/endpoints/{endpoint_id}/migrate
method: post
operationId: MigrateEndpoint
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/instances
method: get
operationId: ListInstances
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /rdb/v1/regions/{region}/instances
method: post
operationId: CreateInstance
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/instances/{instance_id}
method: get
operationId: GetInstance
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /rdb/v1/regions/{region}/instances/{instance_id}
method: patch
operationId: UpdateInstance
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/instances/{instance_id}
method: delete
operationId: DeleteInstance
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/instances/{instance_id}/acls
method: get
operationId: ListInstanceACLRules
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /rdb/v1/regions/{region}/instances/{instance_id}/acls
method: post
operationId: AddInstanceACLRules
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/instances/{instance_id}/acls
method: put
operationId: SetInstanceACLRules
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/instances/{instance_id}/acls
method: delete
operationId: DeleteInstanceACLRules
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/instances/{instance_id}/apply-maintenance
method: post
operationId: ApplyInstanceMaintenance
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/instances/{instance_id}/certificate
method: get
operationId: GetInstanceCertificate
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /rdb/v1/regions/{region}/instances/{instance_id}/clone
method: post
operationId: CloneInstance
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/instances/{instance_id}/databases
method: get
operationId: ListDatabases
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /rdb/v1/regions/{region}/instances/{instance_id}/databases
method: post
operationId: CreateDatabase
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/instances/{instance_id}/databases/{name}
method: delete
operationId: DeleteDatabase
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/instances/{instance_id}/endpoints
method: post
operationId: CreateEndpoint
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/instances/{instance_id}/logs
method: get
operationId: ListInstanceLogs
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /rdb/v1/regions/{region}/instances/{instance_id}/logs-details
method: get
operationId: ListInstanceLogsDetails
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /rdb/v1/regions/{region}/instances/{instance_id}/metrics
method: get
operationId: GetInstanceMetrics
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /rdb/v1/regions/{region}/instances/{instance_id}/prepare-logs
method: post
operationId: PrepareInstanceLogs
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/instances/{instance_id}/privileges
method: get
operationId: ListPrivileges
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /rdb/v1/regions/{region}/instances/{instance_id}/privileges
method: put
operationId: SetPrivilege
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/instances/{instance_id}/purge-logs
method: post
operationId: PurgeInstanceLogs
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/instances/{instance_id}/renew-certificate
method: post
operationId: RenewInstanceCertificate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/instances/{instance_id}/restart
method: post
operationId: RestartInstance
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/instances/{instance_id}/settings
method: post
operationId: AddInstanceSettings
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/instances/{instance_id}/settings
method: put
operationId: SetInstanceSettings
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/instances/{instance_id}/settings
method: delete
operationId: DeleteInstanceSettings
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/instances/{instance_id}/snapshots
method: post
operationId: CreateSnapshot
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/instances/{instance_id}/upgrade
method: post
operationId: UpgradeInstance
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/instances/{instance_id}/users
method: get
operationId: ListUsers
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /rdb/v1/regions/{region}/instances/{instance_id}/users
method: post
operationId: CreateUser
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/instances/{instance_id}/users/{name}
method: patch
operationId: UpdateUser
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/instances/{instance_id}/users/{name}
method: delete
operationId: DeleteUser
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/logs/{instance_log_id}
method: get
operationId: GetInstanceLog
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /rdb/v1/regions/{region}/node-types
method: get
operationId: ListNodeTypes
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /rdb/v1/regions/{region}/read-replicas
method: post
operationId: CreateReadReplica
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/read-replicas/{read_replica_id}
method: get
operationId: GetReadReplica
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /rdb/v1/regions/{region}/read-replicas/{read_replica_id}
method: delete
operationId: DeleteReadReplica
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/read-replicas/{read_replica_id}/endpoints
method: post
operationId: CreateReadReplicaEndpoint
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/read-replicas/{read_replica_id}/promote
method: post
operationId: PromoteReadReplica
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/read-replicas/{read_replica_id}/reset
method: post
operationId: ResetReadReplica
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /rdb/v1/regions/{region}/snapshots
method: get
operationId: ListSnapshots
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /rdb/v1/regions/{region}/snapshots/{snapshot_id}
method: get
operationId: GetSnapshot
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /rdb/v1/regions/{region}/snapshots/{snapshot_id}
method: patch
operationId: UpdateSnapshot
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/snapshots/{snapshot_id}
method: delete
operationId: DeleteSnapshot
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /rdb/v1/regions/{region}/snapshots/{snapshot_id}/create-instance
method: post
operationId: CreateInstanceFromSnapshot
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /iam/v1alpha1/api-keys
method: get
operationId: ListAPIKeys
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /iam/v1alpha1/api-keys
method: post
operationId: CreateAPIKey
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /iam/v1alpha1/api-keys/{access_key}
method: get
operationId: GetAPIKey
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /iam/v1alpha1/api-keys/{access_key}
method: patch
operationId: UpdateAPIKey
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /iam/v1alpha1/api-keys/{access_key}
method: delete
operationId: DeleteAPIKey
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /iam/v1alpha1/applications
method: get
operationId: ListApplications
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /iam/v1alpha1/applications
method: post
operationId: CreateApplication
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /iam/v1alpha1/applications/{application_id}
method: get
operationId: GetApplication
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /iam/v1alpha1/applications/{application_id}
method: patch
operationId: UpdateApplication
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /iam/v1alpha1/applications/{application_id}
method: delete
operationId: DeleteApplication
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /iam/v1alpha1/check-permissions
method: post
operationId: CheckPermissions
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /iam/v1alpha1/grace-periods
method: get
operationId: ListGracePeriods
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /iam/v1alpha1/groups
method: get
operationId: ListGroups
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /iam/v1alpha1/groups
method: post
operationId: CreateGroup
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /iam/v1alpha1/groups/{group_id}
method: get
operationId: GetGroup
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /iam/v1alpha1/groups/{group_id}
method: patch
operationId: UpdateGroup
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /iam/v1alpha1/groups/{group_id}
method: delete
operationId: DeleteGroup
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /iam/v1alpha1/groups/{group_id}/add-member
method: post
operationId: AddGroupMember
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /iam/v1alpha1/groups/{group_id}/add-members
method: post
operationId: AddGroupMembers
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /iam/v1alpha1/groups/{group_id}/members
method: put
operationId: SetGroupMembers
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /iam/v1alpha1/groups/{group_id}/remove-member
method: post
operationId: RemoveGroupMember
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /iam/v1alpha1/jwts
method: get
operationId: ListJWTs
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /iam/v1alpha1/jwts/{jti}
method: get
operationId: GetJWT
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /iam/v1alpha1/jwts/{jti}
method: delete
operationId: DeleteJWT
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /iam/v1alpha1/logs
method: get
operationId: ListLogs
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /iam/v1alpha1/logs/{log_id}
method: get
operationId: GetLog
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /iam/v1alpha1/organizations/{organization_id}
method: get
operationId: GetOrganization
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /iam/v1alpha1/organizations/{organization_id}/alias
method: put
operationId: SetOrganizationAlias
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /iam/v1alpha1/organizations/{organization_id}/login-methods
method: patch
operationId: UpdateOrganizationLoginMethods
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /iam/v1alpha1/organizations/{organization_id}/saml
method: get
operationId: GetOrganizationSaml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /iam/v1alpha1/organizations/{organization_id}/saml
method: post
operationId: EnableOrganizationSaml
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /iam/v1alpha1/organizations/{organization_id}/security-settings
method: get
operationId: GetOrganizationSecuritySettings
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /iam/v1alpha1/organizations/{organization_id}/security-settings
method: patch
operationId: UpdateOrganizationSecuritySettings
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /iam/v1alpha1/permission-sets
method: get
operationId: ListPermissionSets
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /iam/v1alpha1/policies
method: get
operationId: ListPolicies
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /iam/v1alpha1/policies
method: post
operationId: CreatePolicy
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /iam/v1alpha1/policies/{policy_id}
method: get
operationId: GetPolicy
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /iam/v1alpha1/policies/{policy_id}
method: patch
operationId: UpdatePolicy
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /iam/v1alpha1/policies/{policy_id}
method: delete
operationId: DeletePolicy
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /iam/v1alpha1/policies/{policy_id}/clone
method: post
operationId: ClonePolicy
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /iam/v1alpha1/quota
method: get
operationId: ListQuota
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /iam/v1alpha1/quota/{quotum_name}
method: get
operationId: GetQuotum
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /iam/v1alpha1/rules
method: get
# --- truncated at 32 KB (131 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/scaleway/refs/heads/main/agentic-access/scaleway-agentic-access.yml