Sweep · Agentic Access
Sweep Agentic Access

x-agentic-access generated
Sweep exposes 698 API operations that an AI agent could call, of which 358 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.
By consequence: 340 read and 358 safety-critical.
358 operations are classed safety-critical and should require human-in-the-loop approval at runtime.
Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.
CompanyCloudSalesforceRevOpsMetadataGovernanceAI AgentsModel Context ProtocolAutomationDocumentationAPIREST APIOpenAPIEnterprise SystemsSnowflakeServiceNowData Governance
Operations: 698 Acting: 358 Human-in-the-loop: 358 Method: generated
By consequence

read 340 safety-critical 358
Highest-consequence actions

The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.
Method	Path	Consequence	Human-in-loop
POST	/account-selection/accounts	safety-critical	required
DELETE	/account-selection/accounts/{accountId}	safety-critical	required
PATCH	/agentic-features	safety-critical	required
PATCH	/agentic-features/data-access-settings	safety-critical	required
POST	/ai-agents	safety-critical	required
PATCH	/ai-agents/artifacts/{id}/public	safety-critical	required
PATCH	/ai-agents/artifacts/{id}/share	safety-critical	required
PATCH	/ai-agents/chats/{chatId}	safety-critical	required
DELETE	/ai-agents/chats/{chatId}	safety-critical	required
PATCH	/ai-agents/chats/{chatId}/favorite	safety-critical	required
POST	/ai-agents/chats/{chatId}/feedback/{runId}	safety-critical	required
DELETE	/ai-agents/chats/{chatId}/messages/{messageIndex}	safety-critical	required
PATCH	/ai-agents/chats/{chatId}/name	safety-critical	required
PATCH	/ai-agents/monitoring/{agentId}/issues/{issueId}	safety-critical	required
POST	/ai-agents/process-mining/{funnelMapId}	safety-critical	required
DELETE	/ai-agents/stream/{id}	safety-critical	required
DELETE	/ai-agents/{agentId}	safety-critical	required
POST	/ai-agents/{agentId}/best-practices	safety-critical	required
DELETE	/ai-agents/{agentId}/best-practices	safety-critical	required
POST	/ai-agents/{agentId}/chats	safety-critical	required
POST	/ai-agents/{agentId}/chats/{chatId}/add-to-agent	safety-critical	required
PATCH	/ai-agents/{agentId}/chats/{chatId}/folder	safety-critical	required
POST	/ai-agents/{agentId}/chats/{chatId}/mcp-tool-approval	safety-critical	required
PATCH	/ai-agents/{agentId}/configurations	safety-critical	required
POST	/ai-agents/{agentId}/files/confirm-upload	safety-critical	required
Source

Agentic Access

generated: '2026-08-14'
method: generated
source: openapi/sweep-api-openapi.yml
description: Recommended x-agentic-access execution contracts, classified heuristically from
  the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
  audience per deployment. See research/curity/agentic-governance/.
summary:
  operations: 698
  by_action_class:
    connected: 340
    acting: 358
  by_consequence:
    read: 340
    safety-critical: 358
  human_in_the_loop_required: 358
operations:
- path: /health
  method: get
  operationId: HealthController_health
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /snowflake-orgs
  method: post
  operationId: SnowflakeOrgController_create
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /snowflake-orgs/databases
  method: post
  operationId: SnowflakeOrgController_listDatabasesWithCredentials
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /snowflake-orgs/{orgId}
  method: delete
  operationId: SnowflakeOrgController_delete
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /servicenow-orgs
  method: post
  operationId: ServiceNowOrgController_create
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /servicenow-orgs/{orgId}
  method: patch
  operationId: ServiceNowOrgController_reconnect
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /servicenow-orgs/{orgId}
  method: delete
  operationId: ServiceNowOrgController_delete
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /servicenow-orgs/{orgId}/fetch
  method: post
  operationId: ServiceNowOrgController_triggerFetch
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /workato-orgs
  method: post
  operationId: WorkatoOrgController_create
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /documentation-platform/snowflake/search
  method: get
  operationId: DocumentationPlatformController_searchElements
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/snowflake/search-by-metadata
  method: get
  operationId: DocumentationPlatformController_findElementByName
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/snowflake/{metadataId}/dependencies
  method: get
  operationId: DocumentationPlatformController_getElementDependencies
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/snowflake/{metadataId}/dependents
  method: get
  operationId: DocumentationPlatformController_getElementDependents
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/snowflake/{metadataId}/summary
  method: get
  operationId: DocumentationPlatformController_getElementSummary
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/snowflake/{metadataId}/source
  method: get
  operationId: DocumentationPlatformController_getElementSource
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/snowflake/{metadataId}/chat
  method: post
  operationId: DocumentationPlatformController_chatWithElement
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /documentation-platform/snowflake/{elementType}
  method: get
  operationId: DocumentationPlatformController_listElements
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/data360/search
  method: get
  operationId: DocumentationPlatformController_searchData360Elements
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/data360/search-by-metadata
  method: get
  operationId: DocumentationPlatformController_findData360ElementByName
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/data360/{metadataId}/dependencies
  method: get
  operationId: DocumentationPlatformController_getData360ElementDependencies
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/data360/{metadataId}/dependents
  method: get
  operationId: DocumentationPlatformController_getData360ElementDependents
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/data360/{metadataId}/children
  method: get
  operationId: DocumentationPlatformController_getData360ElementChildren
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/data360/{metadataId}/summary
  method: get
  operationId: DocumentationPlatformController_getData360ElementSummary
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/data360/{metadataId}/source
  method: get
  operationId: DocumentationPlatformController_getData360ElementSource
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/data360/{metadataId}/chat
  method: post
  operationId: DocumentationPlatformController_chatWithData360Element
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /documentation-platform/data360/{elementType}
  method: get
  operationId: DocumentationPlatformController_listData360Elements
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/workato/search
  method: get
  operationId: DocumentationPlatformController_searchWorkatoElements
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/workato/search-by-metadata
  method: get
  operationId: DocumentationPlatformController_findWorkatoElementByName
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/workato/{metadataId}/dependencies
  method: get
  operationId: DocumentationPlatformController_getWorkatoElementDependencies
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/workato/{metadataId}/dependents
  method: get
  operationId: DocumentationPlatformController_getWorkatoElementDependents
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/workato/{metadataId}/children
  method: get
  operationId: DocumentationPlatformController_getWorkatoElementChildren
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/workato/{metadataId}/source
  method: get
  operationId: DocumentationPlatformController_getWorkatoElementSource
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/workato/{metadataId}/summary
  method: get
  operationId: DocumentationPlatformController_getWorkatoElementSummary
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/workato/{elementType}
  method: get
  operationId: DocumentationPlatformController_listWorkatoElements
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/hubspot/search
  method: get
  operationId: DocumentationPlatformController_searchHubspotElements
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/hubspot/search-by-metadata
  method: get
  operationId: DocumentationPlatformController_findHubspotElementByName
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/hubspot/{metadataId}/dependencies
  method: get
  operationId: DocumentationPlatformController_getHubspotElementDependencies
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/hubspot/{metadataId}/dependents
  method: get
  operationId: DocumentationPlatformController_getHubspotElementDependents
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/hubspot/{metadataId}/children
  method: get
  operationId: DocumentationPlatformController_getHubspotElementChildren
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/hubspot/{metadataId}/summary
  method: get
  operationId: DocumentationPlatformController_getHubspotElementSummary
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/hubspot/{metadataId}/source
  method: get
  operationId: DocumentationPlatformController_getHubspotElementSource
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/hubspot/{metadataId}/chat
  method: post
  operationId: DocumentationPlatformController_chatWithHubspotElement
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /documentation-platform/hubspot/{elementType}
  method: get
  operationId: DocumentationPlatformController_listHubspotElements
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/servicenow/search
  method: get
  operationId: DocumentationPlatformController_searchServiceNowElements
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/servicenow/search-by-metadata
  method: get
  operationId: DocumentationPlatformController_findServiceNowElementByName
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/servicenow/tables/{tableName}/fields
  method: get
  operationId: DocumentationPlatformController_getServiceNowTableFields
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/servicenow/{metadataId}/summary
  method: get
  operationId: DocumentationPlatformController_getServiceNowElementSummary
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/servicenow/{metadataId}/chat
  method: post
  operationId: DocumentationPlatformController_chatWithServiceNowElement
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /documentation-platform/servicenow/{metadataId}/source
  method: get
  operationId: DocumentationPlatformController_getServiceNowElementSource
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/servicenow/{metadataId}/choices
  method: get
  operationId: DocumentationPlatformController_getServiceNowFieldChoices
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/servicenow/{elementType}
  method: get
  operationId: DocumentationPlatformController_listServiceNowElements
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/salesforce/objects
  method: get
  operationId: DocumentationPlatformController_listSalesforceObjects
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/salesforce/element-types
  method: get
  operationId: DocumentationPlatformController_listSalesforceElementTypes
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/salesforce/objects/{objectName}/elements
  method: get
  operationId: DocumentationPlatformController_getSalesforceObjectDetailElements
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/salesforce/objects/{objectName}/counters
  method: get
  operationId: DocumentationPlatformController_getSalesforceObjectCounters
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/salesforce/{elementType}
  method: get
  operationId: DocumentationPlatformController_listSalesforceElements
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/salesforce/{metadataId}/dependencies
  method: get
  operationId: DocumentationPlatformController_getSalesforceElementDependencies
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documentation-platform/salesforce/{metadataId}/dependents
  method: get
  operationId: DocumentationPlatformController_getSalesforceElementDependents
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /homepage
  method: get
  operationId: HomepageController_loadHomepageStuff
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /webapp/config/opportunity-stage-options
  method: get
  operationId: WebappController_getOpportunityStageOptions
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /crm-orgs
  method: get
  operationId: CrmOrgsController_getOrgs
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /crm-orgs/new
  method: post
  operationId: CrmOrgsController_createOrgs
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /crm-orgs/org/{orgId}/salesforce-oauth
  method: get
  operationId: CrmOrgsController_getSFDCOAuthPath
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /crm-orgs/org/{orgId}
  method: get
  operationId: CrmOrgsController_getOrg
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /crm-orgs/org/{orgId}
  method: patch
  operationId: CrmOrgsController_updateOrg
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /crm-orgs/org/{orgId}/emailTemplates
  method: get
  operationId: CrmOrgsController_getEmailTemplates
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /crm-orgs/org/{orgId}/object-types/{objectName}/child-relationship-names
  method: get
  operationId: CrmOrgsController_getChildRelationshipNames
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /crm-orgs/org/{orgId}/apex-classes
  method: get
  operationId: CrmOrgsController_getApexClasses
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /crm-orgs/salesforce-oauth2-code
  method: post
  operationId: CrmOrgsController_handleSFDCOAuthAuthorizationCode
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /crm-orgs/org/{orgId}/connect-anyway
  method: post
  operationId: CrmOrgsController_connectAnyway
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /crm-orgs/org/{orgId}/object-types
  method: get
  operationId: CrmOrgsController_getObjectTypes
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /crm-orgs/org/{orgId}/object-types-2
  method: get
  operationId: CrmOrgsController_getObjectTypes2
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /crm-orgs/org/{orgId}/users/member-properties
  method: get
  operationId: CrmOrgsController_listUsersWithMemberProperties
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /crm-orgs/org/{orgId}/users
  method: get
  operationId: CrmOrgsController_listUsers
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /crm-orgs/org/{orgId}/users/{userId}/timeOff
  method: post
  operationId: CrmOrgsController_createUserTimeOff
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /crm-orgs/org/{orgId}/users/{userId}/timeOff/{timeOffId}
  method: put
  operationId: CrmOrgsController_updateUserTimeOff
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /crm-orgs/org/{orgId}/users/{userId}/timeOff/{timeOffId}
  method: delete
  operationId: CrmOrgsController_deleteUserTimeOff
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /crm-orgs/org/{orgId}/queues
  method: get
  operationId: CrmOrgsController_listQueues
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /crm-orgs/org/{orgId}/funnels-and-record-types
  method: get
  operationId: CrmOrgsController_getAllFunnelsAndRecordTypes
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /crm-orgs/org/{orgId}/objects
  method: get
  operationId: CrmOrgsController_getSalesforceObjectTypes
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /crm-orgs/org/{orgId}/objects/{objectName}/funnels-and-record-types
  method: get
  operationId: CrmOrgsController_getObjectFunnelsAndRecordTypes
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /crm-orgs/org/{orgId}/objects/{objectName}/record-types/{recordTypeName}
  method: get
  operationId: CrmOrgsController_getLeadingFieldCandidatesForRecordType
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /crm-orgs/org/{orgId}/sweep-permission-set-group-assignment
  method: post
  operationId: CrmOrgsController_assignPermissionSetGroup
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /orgs
  method: get
  operationId: OrgsController_getAllOrgs
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orgs/{orgId}
  method: delete
  operationId: OrgsController_deleteOrg
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /orgs/{orgId}
  method: get
  operationId: OrgsController_getOrg
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orgs/{orgId}
  method: patch
  operationId: OrgsController_renameOrg
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /orgs/{orgId}/fetch
  method: post
  operationId: OrgsController_fetchWorkspace
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /assignment_groups
  method: get
  operationId: AssignmentGroupsController_getAssignmentGroups
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /assignment_groups
  method: post
  operationId: AssignmentGroupsController_insertGroup
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /assignment_groups/credit-queue
  method: get
  operationId: AssignmentGroupsController_getCreditQueue
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /assignment_groups/credit-queue
  method: post
  operationId: AssignmentGroupsController_createCreditQueue
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /assignment_groups/credit-queue
  method: put
  operationId: AssignmentGroupsController_updateCreditQueue
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /assignment_groups/{groupId}
  method: get
  operationId: AssignmentGroupsController_getAssignmentGroup
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /assignment_groups/{groupId}
  method: delete
  operationId: AssignmentGroupsController_deleteGroup
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /assignment_groups/{groupId}
  method: put
  operationId: AssignmentGroupsController_updateGroup
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /funnels/funnel-name-availability
  method: get
  operationId: FunnelsController_checkFunnelNameAvailability
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /funnels
  method: post
  operationId: FunnelsController_createFunnel
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /funnels/convert-record-type
  method: post
  operationId: FunnelsController_convertRecordTypeToFunnel
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /funnels/funnel-from-record-type
  method: get
  operationId: FunnelsController_getFunnelAndSnapshotIdFromRecordType
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /funnels/{funnelId}/snapshots
  method: get
  operationId: FunnelsController_getFunnelSnapshots
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /funnels/{funnelId}/snapshots
  method: post
  operationId: FunnelsController_createFunnelSnapshot
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /funnels/{funnelId}/snapshots/{snapshotId}
  method: get
  operationId: FunnelsController_getFunnelSnapshot
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /funnels/{funnelId}/snapshots/{snapshotId}
  method: patch


# --- truncated at 32 KB (232 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/sweep/refs/heads/main/agentic-access/sweep-agentic-access.yml