Smart Pension · Agentic Access

Smart Pension Agentic Access

x-agentic-access generated

Smart Pension exposes 383 API operations that an AI agent could call, of which 180 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.

By consequence: 203 read, 169 write, and 11 physical.

Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.

pensionsretirementworkplace-pensionauto-enrolmentpayrollfintechfinancial-servicesunited-kingdommaster-trustemployee-benefitscontributionspapdis
Operations: 383 Acting: 180 Human-in-the-loop: 0 Method: generated

By consequence

read 203 write 169 physical 11

Highest-consequence actions

The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.

MethodPathConsequenceHuman-in-loop
POST /companies/{company_id}/employees/{employee_id}/single_contribution_payments physical conditional
POST /companies/{company_id}/employees/{employee_id}/transfer_money_review physical conditional
POST /companies/{company_id}/mandate_charge_schedule physical conditional
PATCH /companies/{company_id}/mandate_charge_schedule physical conditional
POST /companies/{company_id}/payment_approvals physical conditional
DELETE /companies/{company_id}/third_party_payment_providers/{id} physical conditional
POST /partners/employees/{employee_id}/transfer_out physical conditional
POST /payments_service/companies/{company_uuid}/mandates physical conditional
DELETE /payments_service/companies/{company_uuid}/mandates/{mandate_uuid} physical conditional
POST /payments_service/companies/{company_uuid}/mandates/{mandate_uuid}/complete physical conditional
POST /payments_service/companies/{company_uuid}/mandates/{mandate_uuid}/select physical conditional

Source

Agentic Access

Raw ↑ 
generated: '2026-08-05'
method: generated
source: openapi/smart-pension-keystone-openapi.yml
description: Recommended x-agentic-access execution contracts, classified heuristically from
  the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
  audience per deployment. See research/curity/agentic-governance/.
summary:
  operations: 383
  by_action_class:
    acting: 180
    connected: 203
  by_consequence:
    write: 169
    read: 203
    physical: 11
  human_in_the_loop_required: 0
operations:
- path: /account-claiming/confirm-personal-data
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /account-claiming/current-attempt
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /account-claiming/attempts/{uuid}/
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /account-claiming/password-validations
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /account-claiming/attempts/{uuid}/additional-data
  method: patch
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /account-claiming/attempts/{uuid}/email
  method: patch
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /account-claiming/attempts/{uuid}/password
  method: patch
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /account-claiming/attempts
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /accounts
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - individual
    token:
      max-ttl: 3600
    audit: none
- path: /adviser_companies
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - user
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /adviser_companies/adviser/{adviser_id}/company/{company_id}
  method: patch
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - user
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /advisers
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /advisers
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - customer
    token:
      max-ttl: 3600
    audit: none
- path: /advisers/{adviser_id}/exports
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - user
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /advisers/{adviser_id}/exports
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - user
    token:
      max-ttl: 3600
    audit: none
- path: /advisers/{adviser_id}/exports/{id}
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - user
    token:
      max-ttl: 3600
    audit: none
- path: /advisers/by_token
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /advisers/{id}
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - user
    token:
      max-ttl: 3600
    audit: none
- path: /advisers/{id}
  method: put
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - user
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /advisers/{id}
  method: patch
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - user
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /advisers/{id}/managed-employees
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - user
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /advisers/{adviser_id}/users
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - user
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /advisers/{adviser_id}/users
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - user
    token:
      max-ttl: 3600
    audit: none
- path: /advisers/{adviser_id}/users/{id}
  method: delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - user
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /advisers/{adviser_id}/users/{id}
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - user
    token:
      max-ttl: 3600
    audit: none
- path: /advisers/{adviser_id}/users/{id}
  method: put
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - user
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /advisers/{adviser_id}/users/{id}
  method: patch
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - user
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /batch
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - customer
    - user
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /employee/callbacks/smartpension
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /cities/{country_code}/autocomplete
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/adviser_invitations/{id}/cancel
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - customer
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/adviser_invitations
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - customer
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/adviser_invitations
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - customer
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/advisers/{id}
  method: delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - user customer
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/advisers
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - customer
    - user
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/available_funds
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - employee
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/bank_account_details
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - customer
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/bank_account_details
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - customer
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/bank_account_details/{id}
  method: delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - customer
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/bank_account_details/{id}
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - customer
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/bank_account_details/{id}
  method: put
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - customer
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/bank_account_details/{id}
  method: patch
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - customer
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/bank_account_details/managable
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - customer
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/bank_account_details/{bank_account_detail_id}/sensitive_data
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - customer
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/benefit_group_auto_allocator_results/{id}
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - customer
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/benefit_group_auto_allocator_results
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - customer
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/benefit_groups/{id}
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - customer
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/benefit_groups
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - customer
    - user
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/benefit_statements/
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - customer
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/company_automation
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - customer
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/company_automation
  method: put
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - customer
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/company_automation
  method: patch
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - customer
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/company_branding
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - customer
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/company_branding
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - customer
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/company_branding
  method: put
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - customer
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/company_branding
  method: patch
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - customer
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/company_fees/{company_fee_id}/invoice
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - customer
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/company_fees
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - customer
    - user
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/company_rules
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - customer
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/contributions
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - customer
    - user
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/contributions/summary/payable
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - customer
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/contributions/summary
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - customer
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/contributions/summary/totals
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - customer
    token:
      max-ttl: 3600
    audit: none
- path: /companies
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - user
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/style
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - customer
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/customers
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - customer
    - user
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/customers
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - customer
    - user
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/customers/{id}
  method: delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - customer
    - user
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/customers/{id}
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - customer
    - user
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/customers/{id}
  method: put
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - customer
    - user
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/customers/{id}
  method: patch
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - customer
    - user
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/payment_approvals
  method: post
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    scope:
    - customer
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/payment_approvals/permitted
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - customer
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/customers/{customer_id}/role
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - user
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/customers/{customer_id}/role
  method: delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - user
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/customers/{customer_id}/role
  method: patch
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - user
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/declaration_of_compliance_employee_totals
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - customer
    - user
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/documents
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - customer
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/employees/{employee_id}/active_payroll_configuration
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - customer
    - user
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/employees/{employee_id}/add_money_forms/{type}
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - employee
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/employees/{employee_id}/add_money_forms/{type}
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - employee
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/employees/{employee_id}/add_money_forms/{type}/submit_ras_consent
  method: patch
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - employee
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/employees/{employee_id}/assessments/{id}
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - customer
    - user
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/employees/{employee_id}/assessments
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - customer
    - user
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/employees/{employee_id}/available_glidepaths
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - user
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/employees/{employee_id}/available_withdrawal_options
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - employee
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/employees/{employee_id}/bank_account_detail
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - employee
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/employees/{employee_id}/bank_account_detail
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - employee
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/employees/{employee_id}/bank_account_detail
  method: put
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - employee
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/employees/{employee_id}/bank_account_detail
  method: patch
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - employee
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/employees/{employee_id}/bank_account_detail/validate
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - employee
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/employees/{employee_id}/benefit_categories/{benefit_rule_set_id}
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - employee
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/employees/{employee_id}/benefit_categories
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - employee
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/employees/{employee_id}/benefits/{id}/benefit_check_results
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - customer
    - user
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/employees/{employee_id}/benefits/{benefit_id}/benefit_check_results/{id}
  method: put
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - customer
    - user
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/employees/{employee_id}/benefits/{benefit_id}/benefit_check_results/{id}
  method: patch
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - customer
    - user
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/employees/{employee_id}/benefit_form/benefit_evidences
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - employee
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/employees/{employee_id}/benefit_form/benefit_evidence_uploads/confirm_all
  method: patch
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - employee
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/employees/{employee_id}/benefit_form/benefit_evidence_uploads
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - employee
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/employees/{employee_id}/benefit_form/benefit_evidence_uploads
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - employee
    token:
      max-ttl: 3600
    audit: none
- path: /companies/{company_id}/employees/{employee_id}/benefit_form/benefit_evidence_uploads/{benefit_evidence_upload_id}
  method: delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - employee
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/employees/{employee_id}/benefit_form/benefit_evidence_uploads/{benefit_evidence_upload_id}
  method: put
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - employee
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/employees/{employee_id}/benefit_form/benefit_evidence_uploads/{benefit_evidence_upload_id}
  method: patch
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - employee
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/employees/{employee_id}/benefit_form/benefit_question_responses/
  method: patch
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - employee
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/employees/{employee_id}/benefit_form/cancel
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - employee
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/employees/{employee_id}/benefit_categories/{benefit_category_id}/benefit_form
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - employee
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /companies/{company_id}/employee

# --- truncated at 32 KB (112 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/smart-pension/refs/heads/main/agentic-access/smart-pension-agentic-access.yml