Spektr · Agentic Access

Spektr Agentic Access

x-agentic-access generated

Spektr exposes 35 API operations that an AI agent could call, of which 25 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.

By consequence: 10 read and 25 safety-critical.

25 operations are classed safety-critical and should require human-in-the-loop approval at runtime.

Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.

CompanyComplianceRegTechKYBKYCOnboardingTransaction MonitoringFinancial ServicesArtificial IntelligenceEnterprise

Operations: 35 Acting: 25 Human-in-the-loop: 25 Method: generated

By consequence

read 10 safety-critical 25

Highest-consequence actions

The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.

Method	Path	Consequence	Human-in-loop
POST	/v1/data	safety-critical	required
PUT	/v1/data/{datasetId}	safety-critical	required
DELETE	/v1/data/{datasetId}	safety-critical	required
POST	/v1/events	safety-critical	required
POST	/v1/execution	safety-critical	required
POST	/v1/fields	safety-critical	required
PATCH	/v1/fields/{id}	safety-critical	required
DELETE	/v1/fields/{id}	safety-critical	required
POST	/v1/public/actions/processId/{processId}/workspaceId/{workspaceId}	safety-critical	required
POST	/v1/record/listOpenLoops	safety-critical	required
POST	/v1/record/relations	safety-critical	required
PATCH	/v1/record/relations	safety-critical	required
PATCH	/v1/record/{spektrId}	safety-critical	required
POST	/v1/transaction-definitions	safety-critical	required
DELETE	/v1/transaction-definitions/{id}	safety-critical	required
POST	/v1/transactions/batch	safety-critical	required
POST	/v2/execution	safety-critical	required
POST	/v2/public/actions/processId/{processId}/workspaceId/{workspaceId}	safety-critical	required
POST	/v2/public/actions/{token}	safety-critical	required
POST	/v2/public/actions/{token}/go-back	safety-critical	required
POST	/v2/public/actions/{token}/submit-files	safety-critical	required
PATCH	/v2/record/{spektrId}	safety-critical	required
POST	/v3/execution	safety-critical	required
POST	/v3/public/actions/{token}	safety-critical	required
POST	/v3/public/actions/{token}/confirm	safety-critical	required

Source

Agentic Access

generated: '2026-07-21'
method: generated
source: openapi/spektr-openapi.yml
description: Recommended x-agentic-access execution contracts, classified heuristically from
  the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
  audience per deployment. See research/curity/agentic-governance/.
summary:
  operations: 35
  by_action_class:
    acting: 25
    connected: 10
  by_consequence:
    safety-critical: 25
    read: 10
  human_in_the_loop_required: 25
operations:
- path: /v1/data
  method: post
  operationId: DataImportController_create_v1
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /v1/data/{datasetId}
  method: put
  operationId: DataImportController_update_v1
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /v1/data/{datasetId}
  method: delete
  operationId: DataImportController_delete_v1
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /v1/record/listOpenLoops
  method: post
  operationId: RecordController_listOpenLoops_v1
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /v1/record/{spektrId}
  method: get
  operationId: RecordController_fetchRecord_v1
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/record/{spektrId}
  method: patch
  operationId: RecordController_updateRecord_v1
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /v2/record/{spektrId}
  method: patch
  operationId: RecordController_updateRecordV2_v2
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /v1/record/reference/{reference}
  method: get
  operationId: RecordController_fetchRecordByReference_v1
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/record/{spektrId}/timeline
  method: get
  operationId: RecordController_getClientRecordFormSubmits_v1
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/record/bulk/fetch/api
  method: get
  operationId: RecordController_fetchRecordsApi_v1
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/record/bulk/fetch/s3
  method: get
  operationId: RecordController_fetchRecordsS3_v1
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/record/relations
  method: post
  operationId: RecordController_createClientRecordRelations_v1
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /v1/record/relations
  method: patch
  operationId: RecordController_updateClientRecordRelations_v1
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /v1/record/vendor-searches/{vendorSearchId}
  method: get
  operationId: RecordController_getVendorSearch_v1
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/execution
  method: post
  operationId: ExecutionController_triggerProcess_v1
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /v2/execution
  method: post
  operationId: ExecutionController_executionV2_v2
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /v3/execution
  method: post
  operationId: ExecutionController_executionV3_v3
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /v1/public/actions/processId/{processId}/workspaceId/{workspaceId}
  method: post
  operationId: ActionTicketController_createOnboarding_v1
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /v1/events
  method: get
  operationId: EventsController_list_v1
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/events
  method: post
  operationId: EventsController_import_v1
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /v2/public/actions/processId/{processId}/workspaceId/{workspaceId}
  method: post
  operationId: OrchestrationController_createOnboarding_v2
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /v2/public/actions/{token}
  method: get
  operationId: OrchestrationController_get_v2
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/public/actions/{token}
  method: post
  operationId: OrchestrationController_submit_v2
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /v2/public/actions/{token}/go-back
  method: post
  operationId: OrchestrationController_goBack_v2
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /v2/public/actions/{token}/submit-files
  method: post
  operationId: OrchestrationController_submitFiles_v2
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /v3/public/actions/{token}
  method: post
  operationId: OrchestrationController_submitV3_v3
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /v3/public/actions/{token}/confirm
  method: post
  operationId: OrchestrationController_confirmSubmission_v3
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /v1/fields
  method: post
  operationId: WorkspaceFieldsController_create_v1
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /v1/fields
  method: get
  operationId: WorkspaceFieldsController_getAll_v1
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/fields/{id}
  method: get
  operationId: WorkspaceFieldsController_getById_v1
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/fields/{id}
  method: patch
  operationId: WorkspaceFieldsController_update_v1
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /v1/fields/{id}
  method: delete
  operationId: WorkspaceFieldsController_delete_v1
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /v1/transaction-definitions
  method: post
  operationId: TransactionDefinitionController_create_v1
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /v1/transaction-definitions/{id}
  method: delete
  operationId: TransactionDefinitionController_delete_v1
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /v1/transactions/batch
  method: post
  operationId: TransactionsController_ingestBatch_v1
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required