SigNoz · Agentic Access

SigNoz Agentic Access

x-agentic-access generated

SigNoz exposes 161 API operations that an AI agent could call, of which 88 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.

By consequence: 73 read, 83 write, 2 physical, and 3 safety-critical.

3 operations are classed safety-critical and should require human-in-the-loop approval at runtime.

Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.

APMAlertingCloud MonitoringDashboardsDistributed TracingInfrastructure MonitoringLogsMetricsObservabilityOpenTelemetryOpen Source
Operations: 161 Acting: 88 Human-in-the-loop: 3 Method: generated

By consequence

read 73 write 83 physical 2 safety-critical 3

Highest-consequence actions

The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.

MethodPathConsequenceHuman-in-loop
POST /api/v1/resetPassword safety-critical required
DELETE /api/v1/service_accounts/{id}/keys/{fid} safety-critical required
PUT /api/v2/users/{id}/reset_password_tokens safety-critical required
PUT /api/v2/zeus/hosts physical conditional
PUT /api/v2/zeus/profiles physical conditional

Source

Agentic Access

Raw ↑
generated: '2026-07-15'
method: generated
source: openapi/signoz-openapi.yml
description: Recommended x-agentic-access execution contracts, classified heuristically from
  the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
  audience per deployment. See research/curity/agentic-governance/.
summary:
  operations: 161
  by_action_class:
    connected: 73
    acting: 88
  by_consequence:
    read: 73
    write: 83
    safety-critical: 3
    physical: 2
  human_in_the_loop_required: 3
operations:
- path: /api/v1/alerts
  method: get
  operationId: GetAlerts
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - VIEWER
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/authz/check
  method: post
  operationId: AuthzCheck
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/authz/resources
  method: get
  operationId: AuthzResources
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/channels
  method: get
  operationId: ListChannels
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - VIEWER
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/channels
  method: post
  operationId: CreateChannel
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/channels/{id}
  method: delete
  operationId: DeleteChannelByID
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/channels/{id}
  method: get
  operationId: GetChannelByID
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - VIEWER
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/channels/{id}
  method: put
  operationId: UpdateChannelByID
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/channels/test
  method: post
  operationId: TestChannel
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - EDITOR
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/cloud-integrations/{cloud_provider}/agent-check-in
  method: post
  operationId: AgentCheckInDeprecated
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - VIEWER
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/cloud_integrations/{cloud_provider}/accounts
  method: get
  operationId: ListAccounts
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - ADMIN
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/cloud_integrations/{cloud_provider}/accounts
  method: post
  operationId: CreateAccount
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/cloud_integrations/{cloud_provider}/accounts/{id}
  method: delete
  operationId: DisconnectAccount
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/cloud_integrations/{cloud_provider}/accounts/{id}
  method: get
  operationId: GetAccount
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - ADMIN
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/cloud_integrations/{cloud_provider}/accounts/{id}
  method: put
  operationId: UpdateAccount
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/cloud_integrations/{cloud_provider}/accounts/{id}/services/{service_id}
  method: put
  operationId: UpdateService
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/cloud_integrations/{cloud_provider}/accounts/check_in
  method: post
  operationId: AgentCheckIn
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - VIEWER
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/cloud_integrations/{cloud_provider}/credentials
  method: get
  operationId: GetConnectionCredentials
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - ADMIN
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/cloud_integrations/{cloud_provider}/services
  method: get
  operationId: ListServicesMetadata
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - ADMIN
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/cloud_integrations/{cloud_provider}/services/{service_id}
  method: get
  operationId: GetService
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - ADMIN
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/complete/google
  method: get
  operationId: CreateSessionByGoogleCallback
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/complete/oidc
  method: get
  operationId: CreateSessionByOIDCCallback
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/complete/saml
  method: post
  operationId: CreateSessionBySAMLCallback
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/dashboards/{id}/public
  method: delete
  operationId: DeletePublicDashboard
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/dashboards/{id}/public
  method: get
  operationId: GetPublicDashboard
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - ADMIN
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/dashboards/{id}/public
  method: post
  operationId: CreatePublicDashboard
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/dashboards/{id}/public
  method: put
  operationId: UpdatePublicDashboard
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/domains
  method: get
  operationId: ListAuthDomains
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - ADMIN
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/domains
  method: post
  operationId: CreateAuthDomain
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/domains/{id}
  method: delete
  operationId: DeleteAuthDomain
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/domains/{id}
  method: put
  operationId: UpdateAuthDomain
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/downtime_schedules
  method: get
  operationId: ListDowntimeSchedules
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - VIEWER
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/downtime_schedules
  method: post
  operationId: CreateDowntimeSchedule
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - EDITOR
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/downtime_schedules/{id}
  method: delete
  operationId: DeleteDowntimeScheduleByID
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - EDITOR
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/downtime_schedules/{id}
  method: get
  operationId: GetDowntimeScheduleByID
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - VIEWER
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/downtime_schedules/{id}
  method: put
  operationId: UpdateDowntimeScheduleByID
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - EDITOR
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/export_raw_data
  method: post
  operationId: HandleExportRawDataPOST
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - VIEWER
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/fields/keys
  method: get
  operationId: GetFieldsKeys
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - VIEWER
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/fields/values
  method: get
  operationId: GetFieldsValues
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - VIEWER
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/getResetPasswordToken/{id}
  method: get
  operationId: GetResetPasswordTokenDeprecated
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - ADMIN
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/global/config
  method: get
  operationId: GetGlobalConfig
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/invite
  method: post
  operationId: CreateInvite
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/invite/bulk
  method: post
  operationId: CreateBulkInvite
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/llm_pricing_rules
  method: get
  operationId: ListLLMPricingRules
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - VIEWER
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/llm_pricing_rules
  method: put
  operationId: CreateOrUpdateLLMPricingRules
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/llm_pricing_rules/{id}
  method: delete
  operationId: DeleteLLMPricingRule
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/llm_pricing_rules/{id}
  method: get
  operationId: GetLLMPricingRule
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - VIEWER
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/logs/promote_paths
  method: get
  operationId: ListPromotedAndIndexedPaths
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - VIEWER
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/logs/promote_paths
  method: post
  operationId: HandlePromoteAndIndexPaths
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - EDITOR
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/org/preferences
  method: get
  operationId: ListOrgPreferences
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - ADMIN
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/org/preferences/{name}
  method: get
  operationId: GetOrgPreference
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - ADMIN
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/org/preferences/{name}
  method: put
  operationId: UpdateOrgPreference
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/public/dashboards/{id}
  method: get
  operationId: GetPublicDashboardData
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - public-dashboard:read
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/public/dashboards/{id}/widgets/{idx}/query_range
  method: get
  operationId: GetPublicDashboardWidgetQueryRange
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - public-dashboard:read
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/resetPassword
  method: post
  operationId: ResetPassword
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /api/v1/roles
  method: get
  operationId: ListRoles
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - ADMIN
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/roles
  method: post
  operationId: CreateRole
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/roles/{id}
  method: delete
  operationId: DeleteRole
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/roles/{id}
  method: get
  operationId: GetRole
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - ADMIN
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/roles/{id}
  method: patch
  operationId: PatchRole
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/roles/{id}/relations/{relation}/objects
  method: get
  operationId: GetObjects
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - ADMIN
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/roles/{id}/relations/{relation}/objects
  method: patch
  operationId: PatchObjects
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/route_policies
  method: get
  operationId: GetAllRoutePolicies
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - VIEWER
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/route_policies
  method: post
  operationId: CreateRoutePolicy
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/route_policies/{id}
  method: delete
  operationId: DeleteRoutePolicyByID
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/route_policies/{id}
  method: get
  operationId: GetRoutePolicyByID
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - VIEWER
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/route_policies/{id}
  method: put
  operationId: UpdateRoutePolicy
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/service_accounts
  method: get
  operationId: ListServiceAccounts
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - ADMIN
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/service_accounts
  method: post
  operationId: CreateServiceAccount
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/service_accounts/{id}
  method: delete
  operationId: DeleteServiceAccount
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/service_accounts/{id}
  method: get
  operationId: GetServiceAccount
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - ADMIN
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/service_accounts/{id}
  method: put
  operationId: UpdateServiceAccount
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/service_accounts/{id}/keys
  method: get
  operationId: ListServiceAccountKeys
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - ADMIN
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/service_accounts/{id}/keys
  method: post
  operationId: CreateServiceAccountKey
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/service_accounts/{id}/keys/{fid}
  method: delete
  operationId: RevokeServiceAccountKey
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /api/v1/service_accounts/{id}/keys/{fid}
  method: put
  operationId: UpdateServiceAccountKey
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/service_accounts/{id}/roles
  method: get
  operationId: GetServiceAccountRoles
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - ADMIN
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/service_accounts/{id}/roles
  method: post
  operationId: CreateServiceAccountRole
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/service_accounts/{id}/roles/{rid}
  method: delete
  operationId: DeleteServiceAccountRole
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/service_accounts/me
  method: get
  operationId: GetMyServiceAccount
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/service_accounts/me
  method: put
  operationId: UpdateMyServiceAccount
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/span_mapper_groups
  method: get
  operationId: ListSpanMapperGroups
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - VIEWER
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/span_mapper_groups
  method: post
  operationId: CreateSpanMapperGroup
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/span_mapper_groups/{groupId}
  method: delete
  operationId: DeleteSpanMapperGroup
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/span_mapper_groups/{groupId}
  method: patch
  operationId: UpdateSpanMapperGroup
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/span_mapper_groups/{groupId}/span_mappers
  method: get
  operationId: ListSpanMappers
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - VIEWER
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/span_mapper_groups/{groupId}/span_mappers
  method: post
  operationId: CreateSpanMapper
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/span_mapper_groups/{groupId}/span_mappers/{mapperId}
  method: delete
  operationId: DeleteSpanMapper
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/span_mapper_groups/{groupId}/span_mappers/{mapperId}
  method: patch
  operationId: UpdateSpanMapper
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/testChannel
  method: post
  operationId: TestChannelDeprecated
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - EDITOR
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/user
  method: get
  operationId: ListUsersDeprecated
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - ADMIN
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/user/{id}
  method: delete
  operationId: DeleteUser
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/user/{id}
  method: get
  operationId: GetUserDeprecated
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - ADMIN
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/user/{id}
  method: put
  operationId: UpdateUserDeprecated
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ADMIN
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/user/me
  method: get
  operationId: GetMyUserDeprecated
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/user/preferences
  method: get
  operationId: ListUserPreferences
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - VIEWER
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/user/preferences/{name}
  method: get
  operationId: GetUserPreference
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - VIEWER
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/user/preferences/{name}
  method: put
  operationId: UpdateUserPreference
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - VIEWER
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v2/factor_password/forgot
  method: post
  operationId: ForgotPassword
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v2/features
  method: get
  operationId: GetFeatures
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - VIEWER
    token:
      max-ttl: 3600
    audit: none
- path: /api/v2/gateway/ingestion_keys
  method: get
  operationId: GetIngestionKeys
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - EDITOR
    token:
      max-ttl: 3600
    audit: none
- path: /api/v2/gateway/ingestion_keys
  method: post
  operationId: CreateIngesti

# --- truncated at 32 KB (50 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/signoz/refs/heads/main/agentic-access/signoz-agentic-access.yml