Shoplazza Agentic Access
Shoplazza exposes 197 API operations that an AI agent could call, of which 96 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.
By consequence: 101 read, 71 write, 24 physical, and 1 safety-critical.
1 operation are classed safety-critical and should require human-in-the-loop approval at runtime.
Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.
By consequence
Highest-consequence actions
The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.
| Method | Path | Consequence | Human-in-loop |
|---|---|---|---|
| POST | /openapi/2022-01/gift_cards/{id}/disable | safety-critical | required |
| POST | /openapi/2022-01/application_charges | physical | conditional |
| POST | /openapi/2022-01/orders | physical | conditional |
| DELETE | /openapi/2022-01/orders/{id} | physical | conditional |
| PUT | /openapi/2022-01/orders/{id} | physical | conditional |
| POST | /openapi/2022-01/orders/{id}/cancel | physical | conditional |
| POST | /openapi/2022-01/orders/{id}/close | physical | conditional |
| POST | /openapi/2022-01/orders/{id}/open | physical | conditional |
| POST | /openapi/2022-01/orders/{id}/partial_refund | physical | conditional |
| POST | /openapi/2022-01/orders/{id}/payment/success | physical | conditional |
| POST | /openapi/2022-01/orders/{id}/refund | physical | conditional |
| POST | /openapi/2022-01/orders/{id}/transactions | physical | conditional |
| POST | /openapi/2022-01/orders/{order_id}/fulfillments | physical | conditional |
| PUT | /openapi/2022-01/orders/{order_id}/fulfillments/{fulfillment_id} | physical | conditional |
| POST | /openapi/2022-01/orders/{order_id}/fulfillments/{fulfillment_id}/cancel | physical | conditional |
| POST | /openapi/2022-01/orders/{order_id}/fulfillments/{fulfillment_id}/complete | physical | conditional |
| POST | /openapi/2022-01/orders/{order_id}/risks | physical | conditional |
| PUT | /openapi/2022-01/orders/{order_id}/risks/{id} | physical | conditional |
| DELETE | /openapi/2022-01/orders/{order_id}/risks/{id} | physical | conditional |
| POST | /openapi/2022-01/payments_apps/complete_callbacks | physical | conditional |
| POST | /openapi/2022-01/payments_apps/notify_callbacks | physical | conditional |
| POST | /openapi/2022-01/recurring_application_charges | physical | conditional |
| DELETE | /openapi/2022-01/recurring_application_charges/{charge_id} | physical | conditional |
| PUT | /openapi/2022-01/recurring_application_charges/{recurring_charge_id}/customize | physical | conditional |
| POST | /openapi/2022-01/recurring_application_charges/{recurring_charge_id}/usage_charge | physical | conditional |
Source
Agentic Access
generated: '2026-07-21'
method: generated
source: openapi/shoplazza-admin-openapi-original.json
description: Recommended x-agentic-access execution contracts, classified heuristically from
the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
audience per deployment. See research/curity/agentic-governance/.
summary:
operations: 197
by_action_class:
connected: 101
acting: 96
by_consequence:
read: 101
write: 71
physical: 24
safety-critical: 1
human_in_the_loop_required: 1
operations:
- path: /openapi/2022-01/products
method: get
operationId: product_list
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/products
method: post
operationId: create_product
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/products/count
method: get
operationId: product_count
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/products/{product_id}
method: get
operationId: product_show
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/products/{product_id}
method: put
operationId: update_product
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/products/{product_id}
method: delete
operationId: delete_product
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/variants/{variant_id}
method: get
operationId: variant_show
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/variants/{variant_id}
method: put
operationId: update_variant
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/products/{product_id}/variants/count
method: get
operationId: variant_count
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/products/{product_id}/variants
method: get
operationId: variant_list
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/products/{product_id}/variants
method: post
operationId: create_variant
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/products/{product_id}/images
method: get
operationId: product_image_list
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/products/{product_id}/images
method: post
operationId: create_product_image
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/products/{product_id}/variants/{variant_id}
method: delete
operationId: delete_variant
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/products/{product_id}/images/count
method: get
operationId: product_image_count
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/products/{product_id}/images/{image_id}
method: get
operationId: product_image_show
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/products/{product_id}/images/{image_id}
method: delete
operationId: delete_product_image
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/products/{product_id}/images/{image_id}
method: put
operationId: update_product_image
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/products/{product_id}/metafields
method: get
operationId: metafield_list
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/products/{product_id}/metafields
method: post
operationId: create-metafield
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/products/{product_id}/metafields/count
method: get
operationId: metafield_count
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/products/{product_id}/metafields/{metafield_id}
method: get
operationId: metafield_show
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/products/{product_id}/metafields/{metafield_id}
method: delete
operationId: delate-metafield
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/products/{product_id}/metafields/{metafield_id}
method: put
operationId: update-metafield
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/variants/sku/{sku}
method: put
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/products/sku/{sku}/variants
method: get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/collections
method: get
operationId: collection_list
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/collections
method: post
operationId: create_collection
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/collections/count
method: get
operationId: collection_count
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/collections/{id}
method: get
operationId: collection_show
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/collections/{id}
method: put
operationId: update_collection
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/collections/{id}
method: delete
operationId: delete_collection
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/collects
method: post
operationId: create_collect
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/collects
method: get
operationId: collect_list
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2020-07/collects/count
method: get
operationId: collect_count
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/collects/{id}
method: delete
operationId: delete_collect
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/collects/{id}
method: get
operationId: collect_show
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/payments_apps/complete_callbacks
method: post
operationId: payment-session
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/payments_apps/notify_callbacks
method: post
operationId: notify-payment
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/oauth/access_scopes
method: get
operationId: get-access-scopes
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/orders/{order_id}/fulfillments
method: get
operationId: fulfillment-list
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/orders/{order_id}/fulfillments
method: post
operationId: create_fulfillment
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/orders/{order_id}/fulfillments/count
method: get
operationId: fulfillment_count
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/orders/{order_id}/fulfillments/{fulfillment_id}
method: get
operationId: fulfillment_show
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/orders/{order_id}/fulfillments/{fulfillment_id}
method: put
operationId: update_fulfillment
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/orders/{order_id}/fulfillments/{fulfillment_id}/complete
method: post
operationId: complete_fulfillment
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/orders/{order_id}/fulfillments/{fulfillment_id}/cancel
method: post
operationId: cancel_fulfillment
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/shop
method: get
operationId: shop-details
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/shop/{shop_id}
method: patch
operationId: update-shop
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/orders
method: get
operationId: order-list
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/orders
method: post
operationId: create-order
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/orders/{id}
method: get
operationId: order-details
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/orders/{id}
method: delete
operationId: delete-order
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/orders/{id}
method: put
operationId: update-order
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/orders/number/{number}
method: get
operationId: order-details-by-number
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/orders/count
method: get
operationId: order-count
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/orders/{id}/cancel
method: post
operationId: cancel-order
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/orders/{id}/refund
method: post
operationId: order-refund
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/orders/{id}/refund
method: get
operationId: refund-list
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/orders/{id}/partial_refund
method: post
operationId: partial-order-refund
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/orders/after_sales_list
method: get
operationId: after-sales-list
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/price_rules
method: get
operationId: price-rule-list
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/price_rules
method: post
operationId: create-price-rule
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/price_rules/count
method: get
operationId: price-rule-count
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/price_rules/{price_rule_id}
method: get
operationId: price-rule-detail
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/price_rules/{price_rule_id}
method: put
operationId: update-price-rule
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/price_rules/{price_rule_id}
method: delete
operationId: delete-price-rule
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/price_rules/{price_rule_id}/discount_codes
method: post
operationId: create-discount-code
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/price_rules/{price_rule_id}/discount_codes
method: get
operationId: get-discount-code-list
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/price_rules/{price_rule_id}/discount_codes
method: delete
operationId: delete-discount-code
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/price_rules/{price_rule_id}/discount_codes/{discount_code_id}
method: put
operationId: update-discount-code
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/price_rules/{price_rule_id}/discount_codes/{discount_code_id}
method: get
operationId: get-discount-code
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/discount_codes/lookup
method: get
operationId: search-discount-code
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/redirects
method: post
operationId: create-redirect
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/redirects
method: get
operationId: redirect-list
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/redirects/{id}
method: get
operationId: redirect-detail
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/redirects/{id}
method: put
operationId: update-redirect
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/redirects/{id}
method: delete
operationId: delete-redirect
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/redirects/detail
method: post
operationId: search-redirect
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/themes/{theme_id}
method: get
operationId: get-theme
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/themes/{theme_id}
method: delete
operationId: delete-theme
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/themes/default-theme
method: get
operationId: get-default-theme
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/themes
method: get
operationId: get-theme-list
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/themes/{theme_id}/publish
method: patch
operationId: publish-theme
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/themes/upload
method: post
operationId: upload-theme
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/themes/{theme_id}/download
method: get
operationId: download-theme
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/themes/{theme_id}/doctree
method: get
operationId: get-theme-doctree
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/themes/{theme_id}/doc
method: get
operationId: get-theme-file
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/themes/{theme_id}/doc
method: delete
operationId: delete-theme-file
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/themes/{theme_id}/doc
method: post
operationId: create-theme-file
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/themes/{theme_id}/doc
method: patch
operationId: update-theme-file
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/themes/{theme_id}/doc-asset
method: post
operationId: create-theme-assets
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/customers
method: get
operationId: customer-list
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/customers
method: post
operationId: create-customer
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/customers/{id}
method: get
operationId: customer-details
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/customers/{id}
method: put
operationId: update-customer
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/customers/count
method: get
operationId: customer-count
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/customers/{customer_id}/addresses
method: get
operationId: get-address-list
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/customers/{customer_id}/addresses
method: post
operationId: create-address
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/customers/{customer_id}/addresses/{address_id}
method: get
operationId: get-address-details
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/customers/{customer_id}/addresses/{address_id}
method: put
operationId: update-address
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/customers/{customer_id}/addresses/{address_id}
method: delete
operationId: delete-address
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/customers/{customer_id}/addresses/{address_id}/default
method: put
operationId: set-default-address
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/webhooks
method: get
operationId: webhook-list
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /openapi/2022-01/webhooks
method: post
operationId: create-webhook
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /openapi/2022-01/webhooks/count
method: g
# --- truncated at 32 KB (58 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/shoplazza/refs/heads/main/agentic-access/shoplazza-agentic-access.yml