Square · Agentic Access
Square Agentic Access

x-agentic-access generated
Square exposes 305 API operations that an AI agent could call, of which 189 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.
By consequence: 116 read, 143 write, 43 physical, and 3 safety-critical.
3 operations are classed safety-critical and should require human-in-the-loop approval at runtime.
Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.
RestaurantBookingsCatalogCheckoutCustomersDisputesEcommerceFinancial TechnologyGift CardsInventoryInvoicingLaborLocationsLoyaltyMerchantsOrdersPaymentsPoint of SaleRefundsRetailSubscriptionsTeamTerminalWebhooks
Operations: 305 Acting: 189 Human-in-the-loop: 3 Method: generated
By consequence

read 116 write 143 physical 43 safety-critical 3
Highest-consequence actions

The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.
Method	Path	Consequence	Human-in-loop
POST	/oauth2/revoke	safety-critical	required
POST	/v2/cards/{card_id}/disable	safety-critical	required
PUT	/v2/events/disable	safety-critical	required
PUT	/v1/{location_id}/orders/{order_id}	physical	conditional
POST	/v2/invoices	physical	conditional
POST	/v2/invoices/search	physical	conditional
DELETE	/v2/invoices/{invoice_id}	physical	conditional
PUT	/v2/invoices/{invoice_id}	physical	conditional
POST	/v2/invoices/{invoice_id}/attachments	physical	conditional
DELETE	/v2/invoices/{invoice_id}/attachments/{attachment_id}	physical	conditional
POST	/v2/invoices/{invoice_id}/cancel	physical	conditional
POST	/v2/invoices/{invoice_id}/publish	physical	conditional
POST	/v2/locations/{location_id}/checkouts	physical	conditional
PUT	/v2/online-checkout/location-settings/{location_id}	physical	conditional
PUT	/v2/online-checkout/merchant-settings	physical	conditional
POST	/v2/online-checkout/payment-links	physical	conditional
DELETE	/v2/online-checkout/payment-links/{id}	physical	conditional
PUT	/v2/online-checkout/payment-links/{id}	physical	conditional
POST	/v2/orders	physical	conditional
POST	/v2/orders/batch-retrieve	physical	conditional
POST	/v2/orders/calculate	physical	conditional
POST	/v2/orders/clone	physical	conditional
POST	/v2/orders/custom-attribute-definitions	physical	conditional
DELETE	/v2/orders/custom-attribute-definitions/{key}	physical	conditional
PUT	/v2/orders/custom-attribute-definitions/{key}	physical	conditional
Source

Agentic Access

generated: '2026-07-15'
method: generated
source: openapi/square-openapi.yml
description: Recommended x-agentic-access execution contracts, classified heuristically from
  the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
  audience per deployment. See research/curity/agentic-governance/.
summary:
  operations: 305
  by_action_class:
    acting: 189
    connected: 116
  by_consequence:
    write: 143
    safety-critical: 3
    read: 116
    physical: 43
  human_in_the_loop_required: 3
operations:
- path: /mobile/authorization-code
  method: post
  operationId: CreateMobileAuthorizationCode
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - PAYMENTS_WRITE_IN_PERSON
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /oauth2/revoke
  method: post
  operationId: RevokeToken
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /oauth2/token
  method: post
  operationId: ObtainToken
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /oauth2/token/status
  method: post
  operationId: RetrieveTokenStatus
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/{location_id}/orders
  method: get
  operationId: V1ListOrders
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - ORDERS_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v1/{location_id}/orders/{order_id}
  method: get
  operationId: V1RetrieveOrder
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - ORDERS_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v1/{location_id}/orders/{order_id}
  method: put
  operationId: V1UpdateOrder
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    scope:
    - ORDERS_WRITE
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/apple-pay/domains
  method: post
  operationId: RegisterDomain
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/bank-accounts
  method: get
  operationId: ListBankAccounts
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - BANK_ACCOUNTS_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v2/bank-accounts/by-v1-id/{v1_bank_account_id}
  method: get
  operationId: GetBankAccountByV1Id
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - BANK_ACCOUNTS_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v2/bank-accounts/{bank_account_id}
  method: get
  operationId: GetBankAccount
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - BANK_ACCOUNTS_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v2/bookings
  method: get
  operationId: ListBookings
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - APPOINTMENTS_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v2/bookings
  method: post
  operationId: CreateBooking
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - APPOINTMENTS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/bookings/availability/search
  method: post
  operationId: SearchAvailability
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - APPOINTMENTS_READ
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/bookings/bulk-retrieve
  method: post
  operationId: BulkRetrieveBookings
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - APPOINTMENTS_READ
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/bookings/business-booking-profile
  method: get
  operationId: RetrieveBusinessBookingProfile
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - APPOINTMENTS_BUSINESS_SETTINGS_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v2/bookings/custom-attribute-definitions
  method: get
  operationId: ListBookingCustomAttributeDefinitions
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - APPOINTMENTS_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v2/bookings/custom-attribute-definitions
  method: post
  operationId: CreateBookingCustomAttributeDefinition
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - APPOINTMENTS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/bookings/custom-attribute-definitions/{key}
  method: delete
  operationId: DeleteBookingCustomAttributeDefinition
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - APPOINTMENTS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/bookings/custom-attribute-definitions/{key}
  method: get
  operationId: RetrieveBookingCustomAttributeDefinition
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - APPOINTMENTS_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v2/bookings/custom-attribute-definitions/{key}
  method: put
  operationId: UpdateBookingCustomAttributeDefinition
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - APPOINTMENTS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/bookings/custom-attributes/bulk-delete
  method: post
  operationId: BulkDeleteBookingCustomAttributes
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - APPOINTMENTS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/bookings/custom-attributes/bulk-upsert
  method: post
  operationId: BulkUpsertBookingCustomAttributes
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - APPOINTMENTS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/bookings/location-booking-profiles
  method: get
  operationId: ListLocationBookingProfiles
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - APPOINTMENTS_BUSINESS_SETTINGS_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v2/bookings/location-booking-profiles/{location_id}
  method: get
  operationId: RetrieveLocationBookingProfile
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - APPOINTMENTS_BUSINESS_SETTINGS_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v2/bookings/team-member-booking-profiles
  method: get
  operationId: ListTeamMemberBookingProfiles
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - APPOINTMENTS_BUSINESS_SETTINGS_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v2/bookings/team-member-booking-profiles/bulk-retrieve
  method: post
  operationId: BulkRetrieveTeamMemberBookingProfiles
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - APPOINTMENTS_BUSINESS_SETTINGS_READ
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/bookings/team-member-booking-profiles/{team_member_id}
  method: get
  operationId: RetrieveTeamMemberBookingProfile
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - APPOINTMENTS_BUSINESS_SETTINGS_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v2/bookings/{booking_id}
  method: get
  operationId: RetrieveBooking
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - APPOINTMENTS_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v2/bookings/{booking_id}
  method: put
  operationId: UpdateBooking
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - APPOINTMENTS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/bookings/{booking_id}/cancel
  method: post
  operationId: CancelBooking
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - APPOINTMENTS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/bookings/{booking_id}/custom-attributes
  method: get
  operationId: ListBookingCustomAttributes
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - APPOINTMENTS_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v2/bookings/{booking_id}/custom-attributes/{key}
  method: delete
  operationId: DeleteBookingCustomAttribute
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - APPOINTMENTS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/bookings/{booking_id}/custom-attributes/{key}
  method: get
  operationId: RetrieveBookingCustomAttribute
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - APPOINTMENTS_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v2/bookings/{booking_id}/custom-attributes/{key}
  method: put
  operationId: UpsertBookingCustomAttribute
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - APPOINTMENTS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/cards
  method: get
  operationId: ListCards
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - PAYMENTS_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v2/cards
  method: post
  operationId: CreateCard
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - PAYMENTS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/cards/{card_id}
  method: get
  operationId: RetrieveCard
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - PAYMENTS_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v2/cards/{card_id}/disable
  method: post
  operationId: DisableCard
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    scope:
    - PAYMENTS_WRITE
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /v2/cash-drawers/shifts
  method: get
  operationId: ListCashDrawerShifts
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - CASH_DRAWER_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v2/cash-drawers/shifts/{shift_id}
  method: get
  operationId: RetrieveCashDrawerShift
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - CASH_DRAWER_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v2/cash-drawers/shifts/{shift_id}/events
  method: get
  operationId: ListCashDrawerShiftEvents
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - CASH_DRAWER_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v2/catalog/batch-delete
  method: post
  operationId: BatchDeleteCatalogObjects
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ITEMS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/catalog/batch-retrieve
  method: post
  operationId: BatchRetrieveCatalogObjects
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ITEMS_READ
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/catalog/batch-upsert
  method: post
  operationId: BatchUpsertCatalogObjects
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ITEMS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/catalog/images
  method: post
  operationId: CreateCatalogImage
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ITEMS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/catalog/images/{image_id}
  method: put
  operationId: UpdateCatalogImage
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ITEMS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/catalog/info
  method: get
  operationId: CatalogInfo
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - ITEMS_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v2/catalog/list
  method: get
  operationId: ListCatalog
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - ITEMS_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v2/catalog/object
  method: post
  operationId: UpsertCatalogObject
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ITEMS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/catalog/object/{object_id}
  method: delete
  operationId: DeleteCatalogObject
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ITEMS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/catalog/object/{object_id}
  method: get
  operationId: RetrieveCatalogObject
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - ITEMS_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v2/catalog/search
  method: post
  operationId: SearchCatalogObjects
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ITEMS_READ
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/catalog/search-catalog-items
  method: post
  operationId: SearchCatalogItems
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ITEMS_READ
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/catalog/update-item-modifier-lists
  method: post
  operationId: UpdateItemModifierLists
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ITEMS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/catalog/update-item-taxes
  method: post
  operationId: UpdateItemTaxes
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - ITEMS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/customers
  method: get
  operationId: ListCustomers
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - CUSTOMERS_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v2/customers
  method: post
  operationId: CreateCustomer
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - CUSTOMERS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/customers/bulk-create
  method: post
  operationId: BulkCreateCustomers
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - CUSTOMERS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/customers/bulk-delete
  method: post
  operationId: BulkDeleteCustomers
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - CUSTOMERS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/customers/bulk-retrieve
  method: post
  operationId: BulkRetrieveCustomers
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - CUSTOMERS_READ
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/customers/bulk-update
  method: post
  operationId: BulkUpdateCustomers
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - CUSTOMERS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/customers/custom-attribute-definitions
  method: get
  operationId: ListCustomerCustomAttributeDefinitions
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - CUSTOMERS_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v2/customers/custom-attribute-definitions
  method: post
  operationId: CreateCustomerCustomAttributeDefinition
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - CUSTOMERS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/customers/custom-attribute-definitions/{key}
  method: delete
  operationId: DeleteCustomerCustomAttributeDefinition
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - CUSTOMERS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/customers/custom-attribute-definitions/{key}
  method: get
  operationId: RetrieveCustomerCustomAttributeDefinition
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - CUSTOMERS_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v2/customers/custom-attribute-definitions/{key}
  method: put
  operationId: UpdateCustomerCustomAttributeDefinition
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - CUSTOMERS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/customers/custom-attributes/bulk-upsert
  method: post
  operationId: BulkUpsertCustomerCustomAttributes
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - CUSTOMERS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/customers/groups
  method: get
  operationId: ListCustomerGroups
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - CUSTOMERS_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v2/customers/groups
  method: post
  operationId: CreateCustomerGroup
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - CUSTOMERS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/customers/groups/{group_id}
  method: delete
  operationId: DeleteCustomerGroup
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - CUSTOMERS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/customers/groups/{group_id}
  method: get
  operationId: RetrieveCustomerGroup
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - CUSTOMERS_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v2/customers/groups/{group_id}
  method: put
  operationId: UpdateCustomerGroup
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - CUSTOMERS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/customers/search
  method: post
  operationId: SearchCustomers
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - CUSTOMERS_READ
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/customers/segments
  method: get
  operationId: ListCustomerSegments
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - CUSTOMERS_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v2/customers/segments/{segment_id}
  method: get
  operationId: RetrieveCustomerSegment
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - CUSTOMERS_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v2/customers/{customer_id}
  method: delete
  operationId: DeleteCustomer
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - CUSTOMERS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/customers/{customer_id}
  method: get
  operationId: RetrieveCustomer
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - CUSTOMERS_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v2/customers/{customer_id}
  method: put
  operationId: UpdateCustomer
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - CUSTOMERS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/customers/{customer_id}/cards
  method: post
  operationId: CreateCustomerCard
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - CUSTOMERS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/customers/{customer_id}/cards/{card_id}
  method: delete
  operationId: DeleteCustomerCard
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - CUSTOMERS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/customers/{customer_id}/custom-attributes
  method: get
  operationId: ListCustomerCustomAttributes
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - CUSTOMERS_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v2/customers/{customer_id}/custom-attributes/{key}
  method: delete
  operationId: DeleteCustomerCustomAttribute
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - CUSTOMERS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/customers/{customer_id}/custom-attributes/{key}
  method: get
  operationId: RetrieveCustomerCustomAttribute
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - CUSTOMERS_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v2/customers/{customer_id}/custom-attributes/{key}
  method: post
  operationId: UpsertCustomerCustomAttribute
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - CUSTOMERS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/customers/{customer_id}/groups/{group_id}
  method: delete
  operationId: RemoveGroupFromCustomer
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - CUSTOMERS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/customers/{customer_id}/groups/{group_id}
  method: put
  operationId: AddGroupToCustomer
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - CUSTOMERS_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/devices
  method: get
  operationId: ListDevices
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - DEVICES_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v2/devices/codes
  method: get
  operationId: ListDeviceCodes
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - DEVICE_CREDENTIAL_MANAGEMENT
    token:
      max-ttl: 3600
    audit: none
- path: /v2/devices/codes
  method: post
  operationId: CreateDeviceCode
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - DEVICE_CREDENTIAL_MANAGEMENT
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/devices/codes/{id}
  method: get
  operationId: GetDeviceCode
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - DEVICE_CREDENTIAL_MANAGEMENT
    token:
      max-ttl: 3600
    audit: none
- path: /v2/devices/{device_id}
  method: get
  operationId: GetDevice
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - DEVICES_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v2/disputes
  method: get
  operationId: ListDisputes
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - DISPUTES_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v2/disputes/{dispute_id}
  method: get
  operationId: RetrieveDispute
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - DISPUTES_READ
    token:
      max-ttl: 3600
    audit: none
- path: /v2/disputes/{dispute_id}/accept
  method: post
  operationId: AcceptDispute
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - DISPUTES_WRITE
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/disputes/{dispute_id}/evidence
  method: get
  operationId: ListDisputeEvidence
  x-agentic-access:
    actio

# --- truncated at 32 KB (105 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/square/refs/heads/main/agentic-access/square-agentic-access.yml