SigNoz Agentic Access
SigNoz exposes 161 API operations that an AI agent could call, of which 88 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.
By consequence: 73 read, 83 write, 2 physical, and 3 safety-critical.
3 operations are classed safety-critical and should require human-in-the-loop approval at runtime.
Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.
By consequence
Highest-consequence actions
The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.
| Method | Path | Consequence | Human-in-loop |
|---|---|---|---|
| POST | /api/v1/resetPassword | safety-critical | required |
| DELETE | /api/v1/service_accounts/{id}/keys/{fid} | safety-critical | required |
| PUT | /api/v2/users/{id}/reset_password_tokens | safety-critical | required |
| PUT | /api/v2/zeus/hosts | physical | conditional |
| PUT | /api/v2/zeus/profiles | physical | conditional |
Source
Agentic Access
generated: '2026-07-15'
method: generated
source: openapi/signoz-openapi.yml
description: Recommended x-agentic-access execution contracts, classified heuristically from
the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
audience per deployment. See research/curity/agentic-governance/.
summary:
operations: 161
by_action_class:
connected: 73
acting: 88
by_consequence:
read: 73
write: 83
safety-critical: 3
physical: 2
human_in_the_loop_required: 3
operations:
- path: /api/v1/alerts
method: get
operationId: GetAlerts
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- VIEWER
token:
max-ttl: 3600
audit: none
- path: /api/v1/authz/check
method: post
operationId: AuthzCheck
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/authz/resources
method: get
operationId: AuthzResources
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/channels
method: get
operationId: ListChannels
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- VIEWER
token:
max-ttl: 3600
audit: none
- path: /api/v1/channels
method: post
operationId: CreateChannel
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/channels/{id}
method: delete
operationId: DeleteChannelByID
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/channels/{id}
method: get
operationId: GetChannelByID
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- VIEWER
token:
max-ttl: 3600
audit: none
- path: /api/v1/channels/{id}
method: put
operationId: UpdateChannelByID
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/channels/test
method: post
operationId: TestChannel
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- EDITOR
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/cloud-integrations/{cloud_provider}/agent-check-in
method: post
operationId: AgentCheckInDeprecated
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- VIEWER
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/cloud_integrations/{cloud_provider}/accounts
method: get
operationId: ListAccounts
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- ADMIN
token:
max-ttl: 3600
audit: none
- path: /api/v1/cloud_integrations/{cloud_provider}/accounts
method: post
operationId: CreateAccount
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/cloud_integrations/{cloud_provider}/accounts/{id}
method: delete
operationId: DisconnectAccount
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/cloud_integrations/{cloud_provider}/accounts/{id}
method: get
operationId: GetAccount
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- ADMIN
token:
max-ttl: 3600
audit: none
- path: /api/v1/cloud_integrations/{cloud_provider}/accounts/{id}
method: put
operationId: UpdateAccount
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/cloud_integrations/{cloud_provider}/accounts/{id}/services/{service_id}
method: put
operationId: UpdateService
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/cloud_integrations/{cloud_provider}/accounts/check_in
method: post
operationId: AgentCheckIn
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- VIEWER
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/cloud_integrations/{cloud_provider}/credentials
method: get
operationId: GetConnectionCredentials
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- ADMIN
token:
max-ttl: 3600
audit: none
- path: /api/v1/cloud_integrations/{cloud_provider}/services
method: get
operationId: ListServicesMetadata
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- ADMIN
token:
max-ttl: 3600
audit: none
- path: /api/v1/cloud_integrations/{cloud_provider}/services/{service_id}
method: get
operationId: GetService
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- ADMIN
token:
max-ttl: 3600
audit: none
- path: /api/v1/complete/google
method: get
operationId: CreateSessionByGoogleCallback
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/complete/oidc
method: get
operationId: CreateSessionByOIDCCallback
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/complete/saml
method: post
operationId: CreateSessionBySAMLCallback
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/dashboards/{id}/public
method: delete
operationId: DeletePublicDashboard
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/dashboards/{id}/public
method: get
operationId: GetPublicDashboard
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- ADMIN
token:
max-ttl: 3600
audit: none
- path: /api/v1/dashboards/{id}/public
method: post
operationId: CreatePublicDashboard
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/dashboards/{id}/public
method: put
operationId: UpdatePublicDashboard
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/domains
method: get
operationId: ListAuthDomains
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- ADMIN
token:
max-ttl: 3600
audit: none
- path: /api/v1/domains
method: post
operationId: CreateAuthDomain
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/domains/{id}
method: delete
operationId: DeleteAuthDomain
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/domains/{id}
method: put
operationId: UpdateAuthDomain
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/downtime_schedules
method: get
operationId: ListDowntimeSchedules
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- VIEWER
token:
max-ttl: 3600
audit: none
- path: /api/v1/downtime_schedules
method: post
operationId: CreateDowntimeSchedule
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- EDITOR
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/downtime_schedules/{id}
method: delete
operationId: DeleteDowntimeScheduleByID
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- EDITOR
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/downtime_schedules/{id}
method: get
operationId: GetDowntimeScheduleByID
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- VIEWER
token:
max-ttl: 3600
audit: none
- path: /api/v1/downtime_schedules/{id}
method: put
operationId: UpdateDowntimeScheduleByID
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- EDITOR
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/export_raw_data
method: post
operationId: HandleExportRawDataPOST
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- VIEWER
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/fields/keys
method: get
operationId: GetFieldsKeys
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- VIEWER
token:
max-ttl: 3600
audit: none
- path: /api/v1/fields/values
method: get
operationId: GetFieldsValues
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- VIEWER
token:
max-ttl: 3600
audit: none
- path: /api/v1/getResetPasswordToken/{id}
method: get
operationId: GetResetPasswordTokenDeprecated
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- ADMIN
token:
max-ttl: 3600
audit: none
- path: /api/v1/global/config
method: get
operationId: GetGlobalConfig
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/invite
method: post
operationId: CreateInvite
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/invite/bulk
method: post
operationId: CreateBulkInvite
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/llm_pricing_rules
method: get
operationId: ListLLMPricingRules
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- VIEWER
token:
max-ttl: 3600
audit: none
- path: /api/v1/llm_pricing_rules
method: put
operationId: CreateOrUpdateLLMPricingRules
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/llm_pricing_rules/{id}
method: delete
operationId: DeleteLLMPricingRule
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/llm_pricing_rules/{id}
method: get
operationId: GetLLMPricingRule
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- VIEWER
token:
max-ttl: 3600
audit: none
- path: /api/v1/logs/promote_paths
method: get
operationId: ListPromotedAndIndexedPaths
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- VIEWER
token:
max-ttl: 3600
audit: none
- path: /api/v1/logs/promote_paths
method: post
operationId: HandlePromoteAndIndexPaths
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- EDITOR
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/org/preferences
method: get
operationId: ListOrgPreferences
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- ADMIN
token:
max-ttl: 3600
audit: none
- path: /api/v1/org/preferences/{name}
method: get
operationId: GetOrgPreference
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- ADMIN
token:
max-ttl: 3600
audit: none
- path: /api/v1/org/preferences/{name}
method: put
operationId: UpdateOrgPreference
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/public/dashboards/{id}
method: get
operationId: GetPublicDashboardData
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- public-dashboard:read
token:
max-ttl: 3600
audit: none
- path: /api/v1/public/dashboards/{id}/widgets/{idx}/query_range
method: get
operationId: GetPublicDashboardWidgetQueryRange
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- public-dashboard:read
token:
max-ttl: 3600
audit: none
- path: /api/v1/resetPassword
method: post
operationId: ResetPassword
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /api/v1/roles
method: get
operationId: ListRoles
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- ADMIN
token:
max-ttl: 3600
audit: none
- path: /api/v1/roles
method: post
operationId: CreateRole
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/roles/{id}
method: delete
operationId: DeleteRole
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/roles/{id}
method: get
operationId: GetRole
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- ADMIN
token:
max-ttl: 3600
audit: none
- path: /api/v1/roles/{id}
method: patch
operationId: PatchRole
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/roles/{id}/relations/{relation}/objects
method: get
operationId: GetObjects
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- ADMIN
token:
max-ttl: 3600
audit: none
- path: /api/v1/roles/{id}/relations/{relation}/objects
method: patch
operationId: PatchObjects
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/route_policies
method: get
operationId: GetAllRoutePolicies
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- VIEWER
token:
max-ttl: 3600
audit: none
- path: /api/v1/route_policies
method: post
operationId: CreateRoutePolicy
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/route_policies/{id}
method: delete
operationId: DeleteRoutePolicyByID
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/route_policies/{id}
method: get
operationId: GetRoutePolicyByID
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- VIEWER
token:
max-ttl: 3600
audit: none
- path: /api/v1/route_policies/{id}
method: put
operationId: UpdateRoutePolicy
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/service_accounts
method: get
operationId: ListServiceAccounts
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- ADMIN
token:
max-ttl: 3600
audit: none
- path: /api/v1/service_accounts
method: post
operationId: CreateServiceAccount
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/service_accounts/{id}
method: delete
operationId: DeleteServiceAccount
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/service_accounts/{id}
method: get
operationId: GetServiceAccount
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- ADMIN
token:
max-ttl: 3600
audit: none
- path: /api/v1/service_accounts/{id}
method: put
operationId: UpdateServiceAccount
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/service_accounts/{id}/keys
method: get
operationId: ListServiceAccountKeys
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- ADMIN
token:
max-ttl: 3600
audit: none
- path: /api/v1/service_accounts/{id}/keys
method: post
operationId: CreateServiceAccountKey
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/service_accounts/{id}/keys/{fid}
method: delete
operationId: RevokeServiceAccountKey
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /api/v1/service_accounts/{id}/keys/{fid}
method: put
operationId: UpdateServiceAccountKey
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/service_accounts/{id}/roles
method: get
operationId: GetServiceAccountRoles
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- ADMIN
token:
max-ttl: 3600
audit: none
- path: /api/v1/service_accounts/{id}/roles
method: post
operationId: CreateServiceAccountRole
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/service_accounts/{id}/roles/{rid}
method: delete
operationId: DeleteServiceAccountRole
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/service_accounts/me
method: get
operationId: GetMyServiceAccount
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/service_accounts/me
method: put
operationId: UpdateMyServiceAccount
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/span_mapper_groups
method: get
operationId: ListSpanMapperGroups
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- VIEWER
token:
max-ttl: 3600
audit: none
- path: /api/v1/span_mapper_groups
method: post
operationId: CreateSpanMapperGroup
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/span_mapper_groups/{groupId}
method: delete
operationId: DeleteSpanMapperGroup
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/span_mapper_groups/{groupId}
method: patch
operationId: UpdateSpanMapperGroup
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/span_mapper_groups/{groupId}/span_mappers
method: get
operationId: ListSpanMappers
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- VIEWER
token:
max-ttl: 3600
audit: none
- path: /api/v1/span_mapper_groups/{groupId}/span_mappers
method: post
operationId: CreateSpanMapper
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/span_mapper_groups/{groupId}/span_mappers/{mapperId}
method: delete
operationId: DeleteSpanMapper
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/span_mapper_groups/{groupId}/span_mappers/{mapperId}
method: patch
operationId: UpdateSpanMapper
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/testChannel
method: post
operationId: TestChannelDeprecated
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- EDITOR
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/user
method: get
operationId: ListUsersDeprecated
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- ADMIN
token:
max-ttl: 3600
audit: none
- path: /api/v1/user/{id}
method: delete
operationId: DeleteUser
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/user/{id}
method: get
operationId: GetUserDeprecated
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- ADMIN
token:
max-ttl: 3600
audit: none
- path: /api/v1/user/{id}
method: put
operationId: UpdateUserDeprecated
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- ADMIN
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v1/user/me
method: get
operationId: GetMyUserDeprecated
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v1/user/preferences
method: get
operationId: ListUserPreferences
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- VIEWER
token:
max-ttl: 3600
audit: none
- path: /api/v1/user/preferences/{name}
method: get
operationId: GetUserPreference
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- VIEWER
token:
max-ttl: 3600
audit: none
- path: /api/v1/user/preferences/{name}
method: put
operationId: UpdateUserPreference
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- VIEWER
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v2/factor_password/forgot
method: post
operationId: ForgotPassword
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v2/features
method: get
operationId: GetFeatures
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- VIEWER
token:
max-ttl: 3600
audit: none
- path: /api/v2/gateway/ingestion_keys
method: get
operationId: GetIngestionKeys
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- EDITOR
token:
max-ttl: 3600
audit: none
- path: /api/v2/gateway/ingestion_keys
method: post
operationId: CreateIngesti
# --- truncated at 32 KB (50 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/signoz/refs/heads/main/agentic-access/signoz-agentic-access.yml