Spectro Cloud · Agentic Access

Spectro Cloud Agentic Access

x-agentic-access generated

Spectro Cloud exposes 1302 API operations that an AI agent could call, of which 759 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.

By consequence: 543 read, 716 write, 14 physical, and 29 safety-critical.

29 operations are classed safety-critical and should require human-in-the-loop approval at runtime.

Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.

CompanyInfrastructureKubernetesCloud NativeCluster ManagementEdge ComputingMulti-CloudDevOpsAI Infrastructure
Operations: 1302 Acting: 759 Human-in-the-loop: 29 Method: generated

By consequence

read 543 write 716 physical 14 safety-critical 29

Highest-consequence actions

The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.

MethodPathConsequenceHuman-in-loop
PUT /v1/apiKeys/{uid}/state safety-critical required
PATCH /v1/auth/password/{passwordToken}/reset safety-critical required
POST /v1/auth/user/password/reset safety-critical required
DELETE /v1/clouds/cloudTypes/{cloudType}/content/controlPlane safety-critical required
PUT /v1/clouds/cloudTypes/{cloudType}/content/controlPlane safety-critical required
DELETE /v1/clouds/cloudTypes/{cloudType}/content/templates/controlPlanePoolTemplate safety-critical required
PUT /v1/clouds/cloudTypes/{cloudType}/content/templates/controlPlanePoolTemplate safety-critical required
POST /v1/edge-mgmt/edgehosts/current/actions/reboot safety-critical required
POST /v1/edge-mgmt/edgehosts/current/actions/reset safety-critical required
POST /v1/edge-mgmt/edgehosts/current/actions/shutdown safety-critical required
PUT /v1/edgehosts/tokens/{uid}/state safety-critical required
PUT /v1/edgehosts/{uid}/reset safety-critical required
PUT /v1/overlords/{uid}/reset safety-critical required
PATCH /v1/spectroclusters/{uid}/clusterConfig/controlPlaneHealthCheckTimeout safety-critical required
POST /v1/spectroclusters/{uid}/edge/reset safety-critical required
DELETE /v1/spectroclusters/{uid}/features/backup safety-critical required
PATCH /v1/spectroclusters/{uid}/k8certificates/renew safety-critical required
PUT /v1/spectroclusters/{uid}/reset safety-critical required
PUT /v1/spectroclusters/{uid}/vms/{vmName}/stop safety-critical required
PATCH /v1/system/admin/email safety-critical required
PATCH /v1/system/admin/password/reset safety-critical required
PUT /v1/system/admins/{uid}/passwordResetLink safety-critical required
POST /v1/system/users/password/reset safety-critical required
PATCH /v1/system/users/password/{passwordToken}/reset safety-critical required
PUT /v1/tenants/{tenantUid}/preferences/clusterGroup safety-critical required

Source

Agentic Access

Raw ↑ 
generated: '2026-07-21'
method: generated
source: openapi/spectro-cloud-edge-management-openapi.json, openapi/spectro-cloud-palette-openapi.json
description: Recommended x-agentic-access execution contracts, classified heuristically from
  the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
  audience per deployment. See research/curity/agentic-governance/.
summary:
  operations: 1302
  by_action_class:
    connected: 543
    acting: 759
  by_consequence:
    read: 543
    write: 716
    safety-critical: 29
    physical: 14
  human_in_the_loop_required: 29
operations:
- path: /v1/edge-mgmt/cluster
  method: get
  operationId: v1ClusterConfig
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/cluster
  method: post
  operationId: v1CreateCluster
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/cluster
  method: delete
  operationId: v1DeleteCluster
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/cluster
  method: patch
  operationId: v1PatchCluster
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/cluster/applications
  method: get
  operationId: v1ClusterApplications
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/cluster/certificates
  method: get
  operationId: v1CertificateDetails
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/cluster/details
  method: get
  operationId: v1ClusterGet
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/cluster/events
  method: get
  operationId: v1GetClusterEvents
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/cluster/pair
  method: post
  operationId: v1ClusterPair
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/cluster/pair/details
  method: get
  operationId: v1ClusterPairDetails
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/cluster/pair/reject
  method: post
  operationId: v1ClusterPairReject
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/cluster/pair/verify-connection
  method: post
  operationId: v1ClusterPairVerifyConnection
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/cluster/profiles
  method: put
  operationId: v1UpdateClusterProfiles
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/cluster/profiles/variables/validate
  method: post
  operationId: v1ValidateClusterProfileVariables
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/cluster/registry/content/details
  method: get
  operationId: v1HarborContentsDetails
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/cluster/registry/content/sync-status/details
  method: get
  operationId: v1HarborContentsSyncStatusDetails
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/cluster/registry/health
  method: get
  operationId: V1HarborHealth
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/cluster/renew-certificates
  method: post
  operationId: v1RenewCerts
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/cluster/settings
  method: put
  operationId: v1EdgeNativeClusterSettings
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/cluster/{clusterName}
  method: put
  operationId: v1UpdateClusterConfig
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/cluster/{clusterName}
  method: patch
  operationId: v1PatchClusterConfig
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/clusters/archive/embedded/details
  method: get
  operationId: V1ClusterConfigArchiveEmbedded
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/clusters/archive/overridden/details
  method: get
  operationId: v1ClusterConfigArchiveOverriden
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/clusters/archive/update
  method: delete
  operationId: v1DeleteClusterUpdateArchive
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/clusters/archive/update/details
  method: get
  operationId: v1ClusterConfigArchiveUpdate
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/clusters/current/machinepools
  method: get
  operationId: v1MachinePoolDetail
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/clusters/current/machinepools
  method: post
  operationId: v1ClusterMachinePoolCreate
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/clusters/current/machinepools/{poolName}
  method: put
  operationId: v1ClusterMachinePoolUpdate
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/clusters/current/machinepools/{poolName}
  method: delete
  operationId: v1ClusterMachinePoolDelete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/clusters/current/machinepools/{poolName}
  method: patch
  operationId: v1ClusterMachinePoolPatch
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/clusters/current/machinepools/{poolName}/nodes/{nodeName}
  method: delete
  operationId: v1ClusterMachinePoolNodeDelete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/clusters/current/nodes
  method: get
  operationId: v1ClusterNodes
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/edgehosts/connectivity/ping
  method: get
  operationId: v1PingHost
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/edgehosts/connectivity/traceroute
  method: get
  operationId: v1TraceRouteHost
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/edgehosts/current
  method: get
  operationId: v1EdgeHostInfo
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/edgehosts/current/actions/content/signing-public-key
  method: get
  operationId: V1GetContentSigningPublicKey
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/edgehosts/current/actions/reboot
  method: post
  operationId: v1EdgeHostActionReboot
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /v1/edge-mgmt/edgehosts/current/actions/reset
  method: post
  operationId: v1EdgeHostActionReset
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /v1/edge-mgmt/edgehosts/current/actions/shutdown
  method: post
  operationId: v1EdgeHostActionShutdown
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /v1/edge-mgmt/edgehosts/current/actions/upload-clusterconfig
  method: post
  operationId: V1ClusterConfigUpload
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/edgehosts/current/actions/upload-content
  method: post
  operationId: V1ContentUpload
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/edgehosts/current/audits
  method: get
  operationId: v1Audits
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/edgehosts/current/audits/download
  method: get
  operationId: v1AuditDownload
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/edgehosts/current/audits/filters
  method: get
  operationId: v1AuditFilter
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/edgehosts/current/configurations
  method: get
  operationId: V1EdgeHostConfigurationsGet
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/edgehosts/current/configurations
  method: put
  operationId: V1EdgeHostConfigurationsUpdate
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/edgehosts/current/configurations/status
  method: get
  operationId: v1EdgeHostConfigurationStatus
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/edgehosts/current/download-logs
  method: get
  operationId: v1EdgeHostDownloadLogs
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/edgehosts/current/error-logs
  method: get
  operationId: V1EdgeHostErrorLogs
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/edgehosts/current/file-download/files
  method: get
  operationId: v1EdgeHostListCustomFiles
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/edgehosts/current/file-download/{filePath}
  method: get
  operationId: v1EdgeHostCustomFileDownload
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/edgehosts/current/generate-logs
  method: post
  operationId: v1EdgeHostGenerateLogs
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/edgehosts/current/generate-logs-status
  method: get
  operationId: v1EdgeHostGenerateLogsStatus
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/edgehosts/current/link
  method: post
  operationId: v1EdgeHostLink
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/edgehosts/current/link/generate-token
  method: post
  operationId: v1EdgeHostLinkGenerateToken
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/edgehosts/current/link/status
  method: get
  operationId: v1EdgeHostLinkStatus
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/edgehosts/current/unlink
  method: post
  operationId: v1EdgeHostUnlink
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/edgehosts/current/uploaded-content/details
  method: get
  operationId: v1UploadedContentDetails
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/edgehosts/current/userdata
  method: get
  operationId: v1GetEdgeHostUserdata
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/edgehosts/current/userdata
  method: put
  operationId: v1PutEdgeHostUserdata
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/edgehosts/current/userdata
  method: post
  operationId: v1PostEdgeHostUserdata
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/events/lifecycle
  method: get
  operationId: v1GetLifecycleEvents
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/network/bonds
  method: get
  operationId: V1NetworkBonds
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/network/bonds/{name}
  method: get
  operationId: V1NetworkBond
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/network/bonds/{name}
  method: put
  operationId: V1NetworkBondUpdate
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/network/bonds/{name}
  method: post
  operationId: V1NetworkBondCreate
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/network/bonds/{name}
  method: delete
  operationId: V1NetworkBondDelete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/network/bridges
  method: get
  operationId: V1NetworkBridges
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/network/bridges/{name}
  method: get
  operationId: V1NetworkBridge
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/network/bridges/{name}
  method: put
  operationId: V1NetworkBridgeUpdate
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/network/bridges/{name}
  method: post
  operationId: V1NetworkBridgeCreate
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/network/bridges/{name}
  method: delete
  operationId: V1NetworkBridgeDelete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/network/config-options
  method: get
  operationId: V1NetworkConfigOptions
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/network/interfaces
  method: get
  operationId: V1NetworkInterfaces
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/network/interfaces/{name}
  method: get
  operationId: V1NetworkInterface
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/network/interfaces/{name}/config
  method: put
  operationId: V1NetworkInterfaceUpdate
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/network/management-interface
  method: get
  operationId: V1ManagementInterface
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/network/management-interface
  method: put
  operationId: V1ManagementInterfaceUpdate
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/network/vlans
  method: get
  operationId: V1NetworkVLANs
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/network/vlans/{name}
  method: get
  operationId: V1NetworkVLAN
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/edge-mgmt/network/vlans/{name}
  method: put
  operationId: V1NetworkVLANUpdate
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/network/vlans/{name}
  method: post
  operationId: V1NetworkVLANCreate
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/network/vlans/{name}
  method: delete
  operationId: V1NetworkVLANDelete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/edge-mgmt/settings
  method: get
  operationId: v1Settings
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/ping
  method: get
  operationId: V1Ping
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/users/current
  method: get
  operationId: V1CurrentUser
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/users/current
  method: patch
  operationId: v1PatchCurrentUser
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/users/default/login
  method: post
  operationId: V1UserLogin
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/users/default/logout
  method: post
  operationId: V1UserLogout
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/users/default/password/reset
  method: post
  operationId: V1UserPasswordReset
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /v1/users/default/token/renewal
  method: post
  operationId: V1UserTokenRenewal
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/activations/system
  method: get
  operationId: v1ActivationsSystemGet
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/apiKeys
  method: get
  operationId: v1ApiKeysList
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/apiKeys
  method: post
  operationId: v1ApiKeysCreate
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/apiKeys/{uid}
  method: delete
  operationId: v1ApiKeysUidDelete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/apiKeys/{uid}
  method: get
  operationId: v1ApiKeysUidGet
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/apiKeys/{uid}
  method: patch
  operationId: v1ApiKeysUidActiveState
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/apiKeys/{uid}
  method: put
  operationId: v1ApiKeysUidUpdate
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/apiKeys/{uid}/state
  method: put
  operationId: v1ApiKeysUidState
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /v1/appDeployments
  method: post
  operationId: v1AppDeploymentsVirtualClusterCreate
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/appDeployments/clusterGroup
  method: post
  operationId: v1AppDeploymentsClusterGroupCreate
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/appDeployments/{uid}
  method: delete
  operationId: v1AppDeploymentsUidDelete
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/appDeployments/{uid}
  method: get
  operationId: v1AppDeploymentsUidGet
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/appDeployments/{uid}/profile
  method: get
  operationId: v1AppDeploymentsUidProfileGet
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/appDeployments/{uid}/profile
  method: put
  operationId: v1AppDeploymentsUidProfileUpdate
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/appDeployments/{uid}/profile/apply
  method: patch
  operationId: v1AppDeploymentsUidProfileApply
  x-agentic-access:
    action-class: acting
   

# --- truncated at 32 KB (407 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/spectro-cloud/refs/heads/main/agentic-access/spectro-cloud-agentic-access.yml