TUI Group · Agentic Access
TUI Group Agentic Access

x-agentic-access generated
TUI Group exposes 1261 API operations that an AI agent could call, of which 653 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.
By consequence: 608 read, 548 write, 87 physical, and 18 safety-critical.
18 operations are classed safety-critical and should require human-in-the-loop approval at runtime.
Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.
TravelUnited KingdomAviationAirlineTour OperatorDistributionNDCHospitalityHotelsCruiseBookingPackagesMetasearch
Operations: 1261 Acting: 653 Human-in-the-loop: 18 Method: generated
By consequence

read 608 write 548 physical 87 safety-critical 18
Highest-consequence actions

The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.
Method	Path	Consequence	Human-in-loop
POST	/api/nsk/v1/account/password/challenge	safety-critical	required
PUT	/api/nsk/v1/account/password/challenge/reset	safety-critical	required
POST	/api/nsk/v1/account/password/challenge/verify	safety-critical	required
POST	/api/nsk/v1/account/password/reset	safety-critical	required
POST	/api/nsk/v1/booking/fareOverride/journey/{journeyKey}	safety-critical	required
PUT	/api/nsk/v1/booking/fee/{feeKey}	safety-critical	required
PUT	/api/nsk/v1/booking/fees	safety-critical	required
DELETE	/api/nsk/v1/booking/reset	safety-critical	required
PUT	/api/nsk/v1/booking/salesChannel	safety-critical	required
POST	/api/nsk/v1/bookings/{recordLocator}/fareOverride/journey/{journeyKey}	safety-critical	required
DELETE	/api/nsk/v1/persons/{personKey}	safety-critical	required
DELETE	/api/nsk/v1/user/impersonate	safety-critical	required
POST	/api/nsk/v1/users/{userKey}/password/reset	safety-critical	required
POST	/api/nsk/v2/availability/search/ssr	safety-critical	required
POST	/api/nsk/v3/availability/lowfare	safety-critical	required
POST	/api/nsk/v3/trip/move/availability	safety-critical	required
POST	/api/nsk/v4/availability/search	safety-critical	required
POST	/search-holiday-offers/search/package/v1/offers	safety-critical	required
POST	/api/dcs/v1/printers/receipts/payment/print	physical	conditional
POST	/api/dcs/v1/printers/receipts/payment/printStreams	physical	conditional
POST	/api/dcs/v1/printers/reports/paymentReceiptReport/printStreams	physical	conditional
POST	/api/dcs/v1/printers/reports/transferBagTagReport/printStreams	physical	conditional
POST	/api/nsk/v1/apisMessage	physical	conditional
POST	/api/nsk/v1/booking/addons/{addOnKey}/payments	physical	conditional
POST	/api/nsk/v1/booking/itinerary/print	physical	conditional
Source

Agentic Access

generated: '2026-07-28'
method: generated
source: openapi/tui-group-tui-b2bota-g7-travelmessage-openapi.yml, openapi/tui-group-tui-checkinhandler-service-api-openapi.yml,
  openapi/tui-group-tui-cruise-booking-apis-openapi.yml, openapi/tui-group-tui-cruise-cabin-availability-openapi.yml,
  openapi/tui-group-tui-cruise-price-and-availability-openapi.yml, openapi/tui-group-tui-flight-availability-search-api-openapi.yml,
  openapi/tui-group-tui-flight-ndc-gateway-openapi.yml, openapi/tui-group-tui-flight-ota-api-openapi.yml,
  openapi/tui-group-tui-holiday-offers-controller-api-openapi.yml, openapi/tui-group-tui-meta-partner-package-live-search-openapi.yml,
  openapi/tui-group-tui-meta-partner-packages-flights-openapi.yml, openapi/tui-group-tui-meta-search-generic-api-openapi.yml,
  openapi/tui-group-tui-newskies-digital-api-openapi.yml, openapi/tui-group-tui-newskies-gonow-api-openapi.yml,
  openapi/tui-group-tui-newskies-payment-api-openapi.yml, openapi/tui-group-tui-newskies-pricefile-api-openapi.yml,
  openapi/tui-group-tui-ota-content-api-openapi.yml, openapi/tui-group-tui-partner-content-api-openapi.yml,
  openapi/tui-group-tui-search-walldy-api-openapi.yml, openapi/tui-group-tui-ship-content-api-openapi.yml,
  openapi/tui-group-tui-supply-openapi.yml
description: Recommended x-agentic-access execution contracts, classified heuristically from
  the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
  audience per deployment. See research/curity/agentic-governance/.
summary:
  operations: 1261
  by_action_class:
    acting: 653
    connected: 608
  by_consequence:
    write: 548
    read: 608
    physical: 87
    safety-critical: 18
  human_in_the_loop_required: 18
operations:
- path: /travelmessage/v3.1/availabilityrequest
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /travelmessage/v3.1/receiptrequest
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /travelmessage/v3.1/sellrequest
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /travelmessage/v3.1/assignrequest
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /travelmessage/v3.1/bookrequest
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /travelmessage/v3.1/breakrequest
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /travelmessage/v3.1/addproavailabilityrequest
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /travelmessage/v3.1/addprodetailsrequest
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /travelmessage/v3.1/recaprequest
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /travelmessage/v3.1/cancellationrequest
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /recordlocator
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /checkinavailability
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /validate-holiday
  method: post
  operationId: validateHoliday
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /confirm-holiday
  method: post
  operationId: confirmHoliday
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/cruises/cabinsavailability
  method: post
  operationId: getCabinSelection
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/cruises/offers
  method: post
  operationId: getCruisePackagePrices
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/cruises/unique/offer
  method: post
  operationId: getUniqueCruisePackagePrices
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/cruises/cabin-board-variants
  method: post
  operationId: getAlternateCabinAndBoards
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/cruises/flight-variants
  method: post
  operationId: getAlternateFlightVariants
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/cruises/stay-variants
  method: post
  operationId: getAlternateStayVariants
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/cruises/stay-upsell-options
  method: post
  operationId: addAStay
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /search
  method: get
  operationId: SearchAvailability
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /x3/ndc/api/Selling/r3.x/Auth
  method: post
  operationId: Auth
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /x3/ndc/api/Selling/r3.x/v2/Auth
  method: post
  operationId: DAPI Auth
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /x3/ndc/api/Selling/r3.x/v21.3/OfferPrice
  method: post
  operationId: POST OfferPriceRQ v21.3
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /x3/ndc/api/Selling/r3.x/v2/OfferPrice
  method: post
  operationId: POST OfferPriceRQ v21.3 DAPI
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /x3/ndc/api/Selling/r3.x/v21.3/OrderCreate
  method: post
  operationId: POST OrderCreateRQ v21.3
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /x3/ndc/api/Selling/r3.x/v2/OrderCreate
  method: post
  operationId: POST OrderCreateRQ v21.3 DAPI
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /x3/ndc/api/Selling/r3.x/v21.3/SeatAvailability
  method: post
  operationId: POST SeatAvailabilityRQ v21.3
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /x3/ndc/api/Selling/r3.x/v2/SeatAvailability
  method: post
  operationId: POST SeatAvailabilityRQ v21.3 DAPI
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /x3/ndc/api/Selling/r3.x/v21.3/ServiceList
  method: post
  operationId: POST ServiceListRQ v21.3
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /x3/ndc/api/Selling/r3.x/v2/ServiceList
  method: post
  operationId: POST ServiceListRQ v21.3 DAPI
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /x3/ndc/api/Servicing/r3.x/v21.3/OrderChange
  method: post
  operationId: OrderChangeRQ
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /x3/ndc/api/Servicing/r3.x/v2/OrderChange
  method: post
  operationId: POST OrderChangeRQ v21.3 DAPI
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /x3/ndc/api/Servicing/r3.x/v21.3/OrderQuote
  method: post
  operationId: OrderQuoteRQ
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /x3/ndc/api/Servicing/r3.x/v2/OrderQuote
  method: post
  operationId: POST OrderQuoteRQ v21.3 DAPI
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /x3/ndc/api/Servicing/r3.x/v21.3/OrderReshop
  method: post
  operationId: OrderReshopRQ
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /x3/ndc/api/Servicing/r3.x/v2/OrderReshop
  method: post
  operationId: POST OrderReshopRQ v21.3 DAPI
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /x3/ndc/api/Servicing/r3.x/v21.3/OrderRetrieve
  method: post
  operationId: OrderRetrieveRQ
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /x3/ndc/api/Servicing/r3.x/v2/OrderRetrieve
  method: post
  operationId: POST OrderRetrieveRQ v21.3 DAPI
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /x3/ndc/api/Servicing/r3.x/v21.3/SeatAvailability
  method: post
  operationId: seatAvailabilityRQ
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /x3/ndc/api/Servicing/r3.x/v2/SeatAvailability
  method: post
  operationId: POST SeatAvailabilityRQ v21.3 DAPI1
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /x3/ndc/api/Servicing/r3.x/v21.3/ServiceList
  method: post
  operationId: ServiceListRQ
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /x3/ndc/api/Servicing/r3.x/v2/ServiceList
  method: post
  operationId: POST ServiceListRQ v21.3 DAPI1
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /x3/ndc/api/Shopping/r3.x/v21.3/AirlineProfile
  method: get
  operationId: GET AirlineProfileRQ v21.3
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /x3/ndc/api/Shopping/r3.x/v21.3/AirlineProfile
  method: post
  operationId: POST AirlineProfileRQ v21.3
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /x3/ndc/api/Shopping/r3.x/v2/AirlineProfile
  method: get
  operationId: GET AirlineProfileRQ v21.3 DAPI
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /x3/ndc/api/Shopping/r3.x/v2/AirlineProfile
  method: post
  operationId: POST AirlineProfileRQ v21.3 DAPI
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /x3/ndc/api/Shopping/r3.x/v21.3/AirShopping
  method: get
  operationId: GET AirShoppingRQ v21.3
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /x3/ndc/api/Shopping/r3.x/v21.3/AirShopping
  method: post
  operationId: POST AirShoppingRQ v21.3
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /x3/ndc/api/Shopping/r3.x/v2/AirShopping
  method: get
  operationId: GET AirShoppingRQ v21.3 DAPI
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /x3/ndc/api/Shopping/r3.x/v2/AirShopping
  method: post
  operationId: POST AirShoppingRQ v21.3 DAPI
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /ota/getflights
  method: get
  operationId: getflights
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /ota/flightavailability
  method: get
  operationId: flightavailablity
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /ota/includedluggage
  method: get
  operationId: includdedluggage
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /ota/luggage
  method: get
  operationId: luggage
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /ota/pricecalculation
  method: get
  operationId: pricecalculcation
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /ota/pay
  method: get
  operationId: pay
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /ota/pay
  method: post
  operationId: post_pay
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /ota/bookinfo
  method: get
  operationId: bookinfo
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /ota/servicebundle
  method: get
  operationId: servicebundle
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /ota/handluggage
  method: get
  operationId: handluggage
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /ota/sports
  method: get
  operationId: sports
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /ota/assistance
  method: get
  operationId: assistance
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /ota/pets
  method: get
  operationId: pets
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /search-holiday-offers/search/package/v1/offers
  method: post
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /search-holiday-offers/search/package/v1/unique-offer
  method: post
  operationId: getPriceOffer
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /search-holiday-offers/search/package/v1/price-calendar
  method: post
  operationId: getPriceCalendarUSL
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /{market}/packages/{agent}/locations
  method: get
  operationId: GetLocations
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /{market}/packages/{agent}
  method: get
  operationId: GetLiveSearch
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /{market}/packages/{agent}/accommodations
  method: get
  operationId: GetAccommodations
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /{market}/flights/{agent}/route-feed
  method: get
  operationId: GetFlightsRouteFeed
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /{market}/packages/{pax}
  method: get
  operationId: GetPackages
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /{market}/flights/search/{agent}
  method: get
  operationId: GetFlights
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /{market}/live-search/packages/{agent}/locations
  method: get
  operationId: GetLocations
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /{market}/live-search/packages/{agent}
  method: get
  operationId: GetLiveSearch
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /hotel_inventory
  method: get
  operationId: getHotelInventory
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /hotel_inventory/send/{fileName}
  method: post
  operationId: sendHotelInventory
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /hotel_availability
  method: post
  operationId: getHotelAvailability
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/nsk/v1/account/password/challenge
  method: post
  operationId: nsk_v1_account_password_challenge_post
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /api/nsk/v1/account/password/challenge/reset
  method: put
  operationId: nsk_v1_account_password_challenge_reset_put
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /api/nsk/v1/account/password/challenge/verify
  method: post
  operationId: nsk_v1_account_password_challenge_verify_post
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /api/nsk/v3/account/password/change
  method: post
  operationId: nsk_v3_account_password_change_post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/nsk/v1/account/password/reset
  method: post
  operationId: nsk_v1_account_password_reset_post
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /api/nsk/v1/apisMessage
  method: post
  operationId: nsk_v1_apisMessage_post
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/nsk/v1/apo
  method: get
  operationId: nsk_v1_apo_get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/nsk/v1/apo
  method: post
  operationId: nsk_v1_apo_post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/nsk/v1/apo
  method: put
  operationId: nsk_v1_apo_put
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/nsk/v1/apo
  method: delete
  operationId: nsk_v1_apo_delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/nsk/v1/apo/{inputParameterKey}
  method: put
  operationId: nsk_v1_apo_inputParameterKey_put
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/nsk/v1/apo/{inputParameterKey}
  method: delete
  operationId: nsk_v1_apo_inputParameterKey_delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/nsk/v3/availability/lowfare
  method: post
  operationId: nsk_v3_availability_lowfare_post
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /api/nsk/v1/availability/lowfare/estimate
  method: get
  operationId: nsk_v1_availability_lowfare_estimate_get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/nsk/v3/availability/lowfare/simple
  method: post
  operationId: nsk_v3_availability_lowfare_simple_post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/nsk/v4/availability/search
  method: post
  operationId: nsk_v4_availability_search_post
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /api/nsk/v4/availability/search/simple
  method: post
  operationId: nsk_v4_availability_search_simple_post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/nsk/v2/availability/search/ssr
  method: post
  op

# --- truncated at 32 KB (419 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/tui-group/refs/heads/main/agentic-access/tui-group-agentic-access.yml