Stytch Agentic Access
Stytch exposes 244 API operations that an AI agent could call, of which 188 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.
By consequence: 56 read, 163 write, 7 physical, and 18 safety-critical.
18 operations are classed safety-critical and should require human-in-the-loop approval at runtime.
Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.
By consequence
Highest-consequence actions
The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.
| Method | Path | Consequence | Human-in-loop |
|---|---|---|---|
| POST | /pwa/v3/projects/:project_slug/environments/:environment_slug/event_log_streaming/:destination_type/disable | safety-critical | required |
| POST | /v1/b2b/organizations/{organization_id}/members/{member_id}/connected_apps/{connected_app_id}/revoke | safety-critical | required |
| POST | /v1/b2b/passwords/discovery/email/reset | safety-critical | required |
| POST | /v1/b2b/passwords/discovery/email/reset/start | safety-critical | required |
| POST | /v1/b2b/passwords/email/require_reset | safety-critical | required |
| POST | /v1/b2b/passwords/email/reset | safety-critical | required |
| POST | /v1/b2b/passwords/email/reset/start | safety-critical | required |
| POST | /v1/b2b/passwords/existing_password/reset | safety-critical | required |
| POST | /v1/b2b/passwords/session/reset | safety-critical | required |
| POST | /v1/b2b/sessions/revoke | safety-critical | required |
| POST | /v1/magic_links/email/revoke_invite | safety-critical | required |
| POST | /v1/passwords/email/reset | safety-critical | required |
| POST | /v1/passwords/email/reset/start | safety-critical | required |
| POST | /v1/passwords/existing_password/reset | safety-critical | required |
| POST | /v1/passwords/session/reset | safety-critical | required |
| POST | /v1/sessions/revoke | safety-critical | required |
| POST | /v1/users/{user_id}/connected_apps/{connected_app_id}/revoke | safety-critical | required |
| POST | /v1/verdict_reasons/override | safety-critical | required |
| POST | /v1/b2b/magic_links/email/discovery/send | physical | conditional |
| POST | /v1/b2b/otps/email/discovery/send | physical | conditional |
| POST | /v1/b2b/otps/sms/send | physical | conditional |
| POST | /v1/magic_links/email/send | physical | conditional |
| POST | /v1/otps/email/send | physical | conditional |
| POST | /v1/otps/sms/send | physical | conditional |
| POST | /v1/otps/whatsapp/send | physical | conditional |
Source
Agentic Access
generated: '2026-07-15'
method: generated
source: openapi/stytch-b2b-openapi.yml, openapi/stytch-consumer-openapi.yml, openapi/stytch-management-openapi.yml
description: Recommended x-agentic-access execution contracts, classified heuristically from
the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
audience per deployment. See research/curity/agentic-governance/.
summary:
operations: 244
by_action_class:
acting: 188
connected: 56
by_consequence:
write: 163
read: 56
safety-critical: 18
physical: 7
human_in_the_loop_required: 18
operations:
- path: /v1/b2b/scim/{organization_id}/connection/{connection_id}
method: put
operationId: api_b2b_scim_v1_b2b_scim_connection_Update
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/scim/{organization_id}/connection/{connection_id}
method: delete
operationId: api_b2b_scim_v1_b2b_scim_connection_Delete
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/scim/{organization_id}/connection/{connection_id}
method: get
operationId: api_b2b_scim_v1_b2b_scim_connection_GetGroups
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/b2b/scim/{organization_id}/connection/{connection_id}/rotate/start
method: post
operationId: api_b2b_scim_v1_b2b_scim_connection_RotateStart
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/scim/{organization_id}/connection/{connection_id}/rotate/complete
method: post
operationId: api_b2b_scim_v1_b2b_scim_connection_RotateComplete
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/scim/{organization_id}/connection/{connection_id}/rotate/cancel
method: post
operationId: api_b2b_scim_v1_b2b_scim_connection_RotateCancel
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/scim/{organization_id}/connection
method: post
operationId: api_b2b_scim_v1_b2b_scim_connection_Create
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/scim/{organization_id}/connection
method: get
operationId: api_b2b_scim_v1_b2b_scim_connection_Get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/b2b/organizations
method: post
operationId: api_organization_v1_Create
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/organizations/{organization_id}
method: get
operationId: api_organization_v1_Get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/b2b/organizations/{organization_id}
method: put
operationId: api_organization_v1_Update
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/organizations/{organization_id}
method: delete
operationId: api_organization_v1_Delete
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/organizations/search
method: post
operationId: api_organization_v1_Search
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/organizations/{organization_id}/metrics
method: get
operationId: api_organization_v1_Metrics
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/b2b/organizations/{organization_id}/connected_apps
method: get
operationId: api_organization_v1_ConnectedApps
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/b2b/organizations/{organization_id}/connected_apps/{connected_app_id}
method: get
operationId: api_organization_v1_GetConnectedApp
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/b2b/organizations/{organization_id}/external_id
method: delete
operationId: api_organization_v1_DeleteExternalId
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/organizations/{organization_id}/members/{member_id}
method: put
operationId: api_organization_v1_organizations_members_Update
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/organizations/{organization_id}/members/{member_id}
method: delete
operationId: api_organization_v1_organizations_members_Delete
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/organizations/{organization_id}/members/{member_id}/reactivate
method: put
operationId: api_organization_v1_organizations_members_Reactivate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/organizations/{organization_id}/members/mfa_phone_numbers/{member_id}
method: delete
operationId: api_organization_v1_organizations_members_DeleteMFAPhoneNumber
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/organizations/{organization_id}/members/{member_id}/totp
method: delete
operationId: api_organization_v1_organizations_members_DeleteTOTP
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/organizations/members/search
method: post
operationId: api_organization_v1_organizations_members_Search
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/organizations/{organization_id}/members/passwords/{member_password_id}
method: delete
operationId: api_organization_v1_organizations_members_DeletePassword
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/organizations/members/dangerously_get/{member_id}
method: get
operationId: api_organization_v1_organizations_members_DangerouslyGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/b2b/organizations/{organization_id}/members/{member_id}/oidc_providers
method: get
operationId: api_organization_v1_organizations_members_OIDCProviders
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/b2b/organizations/{organization_id}/members/{member_id}/unlink_retired_email
method: post
operationId: api_organization_v1_organizations_members_UnlinkRetiredEmail
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/organizations/{organization_id}/members/{member_id}/start_email_update
method: post
operationId: api_organization_v1_organizations_members_StartEmailUpdate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/organizations/{organization_id}/members/{member_id}/connected_apps
method: get
operationId: api_organization_v1_organizations_members_GetConnectedApps
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/b2b/organizations/{organization_id}/members/{member_id}/external_id
method: delete
operationId: api_organization_v1_organizations_members_DeleteExternalId
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/organizations/{organization_id}/members
method: post
operationId: api_organization_v1_organizations_members_Create
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/organizations/{organization_id}/member
method: get
operationId: api_organization_v1_organizations_members_Get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/b2b/organizations/{organization_id}/members/{member_id}/oauth_providers/google
method: get
operationId: api_organization_v1_organizations_members_oauth_providers_Google
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/b2b/organizations/{organization_id}/members/{member_id}/oauth_providers/microsoft
method: get
operationId: api_organization_v1_organizations_members_oauth_providers_Microsoft
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/b2b/organizations/{organization_id}/members/{member_id}/oauth_providers/slack
method: get
operationId: api_organization_v1_organizations_members_oauth_providers_Slack
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/b2b/organizations/{organization_id}/members/{member_id}/oauth_providers/hubspot
method: get
operationId: api_organization_v1_organizations_members_oauth_providers_Hubspot
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/b2b/organizations/{organization_id}/members/{member_id}/oauth_providers/github
method: get
operationId: api_organization_v1_organizations_members_oauth_providers_Github
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/b2b/organizations/{organization_id}/members/{member_id}/connected_apps/{connected_app_id}/revoke
method: post
operationId: api_organization_v1_organizations_members_connected_apps_Revoke
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /v1/b2b/idp/oauth/authorize/start
method: post
operationId: api_b2b_idp_v1_b2b_idp_oauth_AuthorizeStart
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/idp/oauth/authorize
method: post
operationId: api_b2b_idp_v1_b2b_idp_oauth_Authorize
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/sessions
method: get
operationId: api_b2b_session_v1_Get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/b2b/sessions/authenticate
method: post
operationId: api_b2b_session_v1_Authenticate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/sessions/revoke
method: post
operationId: api_b2b_session_v1_Revoke
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /v1/b2b/sessions/exchange
method: post
operationId: api_b2b_session_v1_Exchange
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/sessions/exchange_access_token
method: post
operationId: api_b2b_session_v1_ExchangeAccessToken
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/sessions/attest
method: post
operationId: api_b2b_session_v1_Attest
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/sessions/migrate
method: post
operationId: api_b2b_session_v1_Migrate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/sessions/jwks/{project_id}
method: get
operationId: api_b2b_session_v1_GetJWKS
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/b2b/impersonation/authenticate
method: post
operationId: api_b2b_impersonation_v1_Authenticate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/rbac/policy
method: get
operationId: api_b2b_rbac_v1_Policy
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/b2b/rbac/organizations/{organization_id}
method: get
operationId: api_b2b_rbac_v1_b2b_rbac_organizations_GetOrgPolicy
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/b2b/rbac/organizations/{organization_id}
method: put
operationId: api_b2b_rbac_v1_b2b_rbac_organizations_SetOrgPolicy
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/recovery_codes/recover
method: post
operationId: api_b2b_recovery_codes_v1_Recover
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/recovery_codes/{organization_id}/{member_id}
method: get
operationId: api_b2b_recovery_codes_v1_Get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/b2b/recovery_codes/rotate
method: post
operationId: api_b2b_recovery_codes_v1_Rotate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/totp
method: post
operationId: api_b2b_totp_v1_Create
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/totp/authenticate
method: post
operationId: api_b2b_totp_v1_Authenticate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/totp/migrate
method: post
operationId: api_b2b_totp_v1_Migrate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/discovery/intermediate_sessions/exchange
method: post
operationId: api_discovery_v1_discovery_intermediate_sessions_Exchange
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/discovery/organizations/create
method: post
operationId: api_discovery_v1_discovery_organizations_Create
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/discovery/organizations
method: post
operationId: api_discovery_v1_discovery_organizations_List
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/magic_links/authenticate
method: post
operationId: api_b2b_magic_v1_Authenticate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/magic_links/email/login_or_signup
method: post
operationId: api_b2b_magic_v1_b2b_magic_links_email_LoginOrSignup
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/magic_links/email/invite
method: post
operationId: api_b2b_magic_v1_b2b_magic_links_email_Invite
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/magic_links/email/discovery/send
method: post
operationId: api_b2b_magic_v1_b2b_magic_links_email_discovery_Send
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/magic_links/discovery/authenticate
method: post
operationId: api_b2b_magic_v1_b2b_magic_links_discovery_Authenticate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/oauth/authenticate
method: post
operationId: api_b2b_oauth_v1_Authenticate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/oauth/discovery/authenticate
method: post
operationId: api_b2b_oauth_v1_b2b_oauth_discovery_Authenticate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/otps/sms/send
method: post
operationId: api_b2b_otp_v1_b2b_otp_sms_Send
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/otps/sms/authenticate
method: post
operationId: api_b2b_otp_v1_b2b_otp_sms_Authenticate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/otps/email/login_or_signup
method: post
operationId: api_b2b_otp_v1_b2b_otp_email_LoginOrSignup
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/otps/email/authenticate
method: post
operationId: api_b2b_otp_v1_b2b_otp_email_Authenticate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/otps/email/discovery/send
method: post
operationId: api_b2b_otp_v1_b2b_otp_email_discovery_Send
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/otps/email/discovery/authenticate
method: post
operationId: api_b2b_otp_v1_b2b_otp_email_discovery_Authenticate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/passwords/strength_check
method: post
operationId: api_b2b_password_v1_StrengthCheck
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/passwords/migrate
method: post
operationId: api_b2b_password_v1_Migrate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/passwords/authenticate
method: post
operationId: api_b2b_password_v1_Authenticate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/passwords/email/reset/start
method: post
operationId: api_b2b_password_v1_b2b_passwords_email_ResetStart
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /v1/b2b/passwords/email/reset
method: post
operationId: api_b2b_password_v1_b2b_passwords_email_Reset
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /v1/b2b/passwords/email/require_reset
method: post
operationId: api_b2b_password_v1_b2b_passwords_email_RequireReset
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /v1/b2b/passwords/session/reset
method: post
operationId: api_b2b_password_v1_b2b_passwords_session_Reset
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /v1/b2b/passwords/existing_password/reset
method: post
operationId: api_b2b_password_v1_b2b_passwords_existing_password_Reset
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /v1/b2b/passwords/discovery/authenticate
method: post
operationId: api_b2b_password_v1_b2b_passwords_discovery_Authenticate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/passwords/discovery/email/reset/start
method: post
operationId: api_b2b_password_v1_b2b_passwords_discovery_email_ResetStart
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /v1/b2b/passwords/discovery/email/reset
method: post
operationId: api_b2b_password_v1_b2b_passwords_discovery_email_Reset
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /v1/b2b/sso/{organization_id}
method: get
operationId: api_sso_v1_GetConnections
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/b2b/sso/{organization_id}/connections/{connection_id}
method: delete
operationId: api_sso_v1_DeleteConnection
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/b2b/sso/authenticate
method: post
operationId: api_sso_v1_Authenticate
x-agentic-access:
action-class: acting
consequence: write
subject: required
# --- truncated at 32 KB (86 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/stytch/refs/heads/main/agentic-access/stytch-agentic-access.yml