Virto Commerce · Agentic Access

Virto Commerce Agentic Access

x-agentic-access generated

Virto Commerce exposes 426 API operations that an AI agent could call, of which 283 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.

By consequence: 143 read, 237 write, 37 physical, and 9 safety-critical.

9 operations are classed safety-critical and should require human-in-the-loop approval at runtime.

Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.

B2B E-CommerceCatalog ManagementOrder ManagementPricingInventoryShopping CartCustomer ManagementMarketingPaymentsShippingSubscriptionsHeadless CommerceOpen Source.NET
Operations: 426 Acting: 283 Human-in-the-loop: 9 Method: generated

By consequence

read 143 write 237 physical 37 safety-critical 9

Highest-consequence actions

The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.

MethodPathConsequenceHuman-in-loop
POST /api/changes/changed-entities/reset safety-critical required
POST /api/platform-cache/reset safety-critical required
POST /api/platform/security/users/{loginOrEmail}/requestpasswordreset safety-critical required
POST /api/platform/security/users/{userId}/resetpasswordconfirm safety-critical required
DELETE /api/platform/security/users/{userId}/sessions safety-critical required
DELETE /api/platform/security/users/{userId}/sessions/{id} safety-critical required
POST /api/platform/security/users/{userId}/validatepasswordresettoken safety-critical required
POST /api/platform/security/users/{userName}/resetpassword safety-critical required
POST /revoke/token safety-critical required
POST /api/carts/availshippingrates physical conditional
PATCH /api/carts/patch/{cartId}/payments/{paymentId} physical conditional
PATCH /api/carts/patch/{cartId}/shipments/{shipmentId} physical conditional
POST /api/carts/{cartId}/payments physical conditional
POST /api/carts/{cartId}/shipments physical conditional
PUT /api/inventory/fulfillmentcenters physical conditional
DELETE /api/inventory/fulfillmentcenters physical conditional
POST /api/inventory/fulfillmentcenters/batch physical conditional
POST /api/inventory/fulfillmentcenters/plenty physical conditional
POST /api/inventory/fulfillmentcenters/search physical conditional
PATCH /api/inventory/fulfillmentcenters/{id} physical conditional
POST /api/order/customerOrders physical conditional
PUT /api/order/customerOrders physical conditional
DELETE /api/order/customerOrders physical conditional
POST /api/order/customerOrders/indexed/search physical conditional
PUT /api/order/customerOrders/recalculate physical conditional

Source

Agentic Access

Raw ↑ 
generated: '2026-07-15'
method: generated
source: openapi/virto-commerce-cart-openapi.json, openapi/virto-commerce-catalog-openapi.json,
  openapi/virto-commerce-customer-openapi.json, openapi/virto-commerce-inventory-openapi.json,
  openapi/virto-commerce-marketing-openapi.json, openapi/virto-commerce-orders-openapi.json,
  openapi/virto-commerce-platform-openapi.json, openapi/virto-commerce-pricing-openapi.json,
  openapi/virto-commerce-quote-openapi.json, openapi/virto-commerce-store-openapi.json
description: Recommended x-agentic-access execution contracts, classified heuristically from
  the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
  audience per deployment. See research/curity/agentic-governance/.
summary:
  operations: 426
  by_action_class:
    connected: 143
    acting: 283
  by_consequence:
    read: 143
    write: 237
    physical: 37
    safety-critical: 9
  human_in_the_loop_required: 9
operations:
- path: /api/carts/{storeId}/{customerId}/{cartName}/{currency}/{cultureName}/current
  method: get
  operationId: CartModule_GetCart
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/carts/{cartId}/itemscount
  method: get
  operationId: CartModule_GetCartItemsCount
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/carts/{cartId}/items
  method: post
  operationId: CartModule_AddItemToCart
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/carts/{cartId}/items
  method: put
  operationId: CartModule_ChangeCartItem
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/carts/{cartId}/items
  method: delete
  operationId: CartModule_ClearCart
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/carts/{cartId}/items/{lineItemId}
  method: delete
  operationId: CartModule_RemoveCartItem
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/carts/{cartId}
  method: patch
  operationId: CartModule_MergeWithCart
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/carts/{cartId}
  method: get
  operationId: CartModule_GetCartById
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/carts/{cartId}/availshippingrates
  method: get
  operationId: CartModule_GetAvailableShippingRates
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/carts/availshippingrates
  method: post
  operationId: CartModule_GetAvailableShippingRatesByContext
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/carts/{cartId}/availpaymentmethods
  method: get
  operationId: CartModule_GetAvailablePaymentMethods
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/carts/{cartId}/coupons/{couponCode}
  method: post
  operationId: CartModule_AddCartCoupon
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/carts/{cartId}/coupons/{couponCode}
  method: delete
  operationId: CartModule_RemoveCartCoupon
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/carts/{cartId}/shipments
  method: post
  operationId: CartModule_AddOrUpdateCartShipment
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/carts/{cartId}/payments
  method: post
  operationId: CartModule_AddOrUpdateCartPayment
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/carts/search
  method: post
  operationId: CartModule_SearchShoppingCart
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - cart:read
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/carts
  method: post
  operationId: CartModule_Create
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - cart:create
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/carts
  method: put
  operationId: CartModule_UpdateShoppingCart
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - cart:update
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/carts
  method: delete
  operationId: CartModule_DeleteCarts
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - cart:delete
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/carts/recalculate
  method: post
  operationId: CartModule_RecalculateTotals
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/carts/patch/{id}
  method: patch
  operationId: CartModule_PatchCart
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - cart:update
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/carts/patch/{cartId}/items/{lineItemId}
  method: patch
  operationId: CartModule_PatchCartItem
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - cart:update
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/carts/patch/{cartId}/shipments/{shipmentId}
  method: patch
  operationId: CartModule_PatchCartShipment
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    scope:
    - cart:update
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/carts/patch/{cartId}/payments/{paymentId}
  method: patch
  operationId: CartModule_PatchCartPayment
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    scope:
    - cart:update
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/automatic-link-queries/search
  method: post
  operationId: AutomaticLinkQuery_Search
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - catalog:read
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/automatic-link-queries
  method: post
  operationId: AutomaticLinkQuery_Create
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - catalog:create
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/automatic-link-queries
  method: put
  operationId: AutomaticLinkQuery_Update
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - catalog:update
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/automatic-link-queries
  method: delete
  operationId: AutomaticLinkQuery_Delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - catalog:delete
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/automatic-link-queries/{id}
  method: get
  operationId: AutomaticLinkQuery_Get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - catalog:read
    token:
      max-ttl: 3600
    audit: none
- path: /api/catalog/products/associations/{productId}
  method: get
  operationId: CatalogModuleAssociations_GetProductAssociations
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - catalog:read
    token:
      max-ttl: 3600
    audit: none
- path: /api/catalog/products/associations/get/multiple
  method: post
  operationId: CatalogModuleAssociations_GetProductsAssociations
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - catalog:read
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/products/associations
  method: post
  operationId: CatalogModuleAssociations_UpdateAssociations
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - catalog:update
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/products/associations
  method: delete
  operationId: CatalogModuleAssociations_Delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - catalog:delete
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/products/associations/search
  method: post
  operationId: CatalogModuleAssociations_Search
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - catalog:read
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/products/associations/{id}
  method: patch
  operationId: CatalogModuleAssociations_PatchAssociation
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - catalog:update
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/brand-settings/store/{storeId}
  method: get
  operationId: CatalogModuleBrandSetting_GetByStoreId
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - catalog:read
    token:
      max-ttl: 3600
    audit: none
- path: /api/brand-settings
  method: put
  operationId: CatalogModuleBrandSetting_Update
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - catalog:update
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/catalogs/search
  method: post
  operationId: CatalogModuleCatalogs_SearchCatalogs
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/catalogs/{id}
  method: get
  operationId: CatalogModuleCatalogs_GetCatalog
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/catalog/catalogs/{id}
  method: delete
  operationId: CatalogModuleCatalogs_DeleteCatalog
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - catalog:delete
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/catalogs/{id}
  method: patch
  operationId: CatalogModuleCatalogs_PatchCatalog
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/catalogs/outer/{outerId}
  method: get
  operationId: CatalogModuleCatalogs_GetCatalogByOuterId
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/catalog/catalogs/getnew
  method: get
  operationId: CatalogModuleCatalogs_GetNewCatalog
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - catalog:create
    token:
      max-ttl: 3600
    audit: none
- path: /api/catalog/catalogs/getnewvirtual
  method: get
  operationId: CatalogModuleCatalogs_GetNewVirtualCatalog
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - catalog:create
    token:
      max-ttl: 3600
    audit: none
- path: /api/catalog/catalogs
  method: post
  operationId: CatalogModuleCatalogs_CreateCatalog
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - catalog:create
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/catalogs
  method: put
  operationId: CatalogModuleCatalogs_UpdateCatalog
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - catalog:update
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/categories/{id}
  method: get
  operationId: CatalogModuleCategories_GetCategory
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/catalog/categories/{id}
  method: patch
  operationId: CatalogModuleCategories_PatchCategory
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/categories/outer/{outerId}
  method: get
  operationId: CatalogModuleCategories_GetCategoryByOuterId
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/catalog/categories
  method: get
  operationId: CatalogModuleCategories_GetCategoriesByIdsAsync
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/catalog/categories
  method: post
  operationId: CatalogModuleCategories_CreateOrUpdateCategory
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/categories
  method: delete
  operationId: CatalogModuleCategories_DeleteCategory
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/categories/plenty
  method: post
  operationId: CatalogModuleCategories_GetCategoriesByPlentyIds
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/{catalogId}/categories-by-codes
  method: post
  operationId: CatalogModuleCategories_GetCategoriesByCodes
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/{catalogId}/categories/newcategory
  method: get
  operationId: CatalogModuleCategories_GetNewCategory
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/catalog/categories/batch
  method: post
  operationId: CatalogModuleCategories_SaveCategories
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/categories/{id}/automatic-links
  method: post
  operationId: CatalogModuleCategories_UpdateAutomaticLinks
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/categories/{id}/automatic-links
  method: delete
  operationId: CatalogModuleCategories_DeleteAutomaticLinks
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/products/configurations/{id}
  method: get
  operationId: CatalogModuleConfigurations_GetConfiguration
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - catalog:configurations:read
    token:
      max-ttl: 3600
    audit: none
- path: /api/catalog/products/configurations/{id}
  method: patch
  operationId: CatalogModuleConfigurations_PatchConfiguration
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - catalog:configurations:update
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/products/configurations/search
  method: post
  operationId: CatalogModuleConfigurations_SearchConfigurations
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - catalog:configurations:read
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/products/configurations
  method: post
  operationId: CatalogModuleConfigurations_CreateOrUpdateConfiguration
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - catalog:configurations:update
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/search/products
  method: post
  operationId: CatalogModuleIndexedSearch_SearchProducts
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/search/products/suggestions
  method: post
  operationId: CatalogModuleIndexedSearch_GetProductSuggestions
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/search/categories
  method: post
  operationId: CatalogModuleIndexedSearch_SearchCategories
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/listentries
  method: post
  operationId: CatalogModuleListEntry_ListItemsSearchAsync
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/listentrylinks
  method: post
  operationId: CatalogModuleListEntry_CreateLinks
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/listentrylinks/bulkcreate
  method: post
  operationId: CatalogModuleListEntry_BulkCreateLinks
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/listentrylinks/search
  method: post
  operationId: CatalogModuleListEntry_SearchLinks
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/listentrylinks/delete
  method: post
  operationId: CatalogModuleListEntry_DeleteLinks
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/listentries/move
  method: post
  operationId: CatalogModuleListEntry_Move
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/listentries/delete
  method: post
  operationId: CatalogModuleListEntry_Delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/measures/{id}
  method: get
  operationId: CatalogModuleMeasures_GetMeasureById
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - measures:access
    token:
      max-ttl: 3600
    audit: none
- path: /api/catalog/measures/{id}
  method: patch
  operationId: CatalogModuleMeasures_PatchMeasure
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - measures:update
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/measures/search
  method: post
  operationId: CatalogModuleMeasures_SearchMeasures
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - measures:read
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/measures
  method: post
  operationId: CatalogModuleMeasures_CreateMeasure
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - measures:create
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/measures
  method: put
  operationId: CatalogModuleMeasures_UpdateMeasure
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - measures:update
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/measures
  method: delete
  operationId: CatalogModuleMeasures_DeleteMeasures
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - measures:delete
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/measures/default
  method: get
  operationId: CatalogModuleMeasures_GetDefaultMeasures
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - measures:read
    token:
      max-ttl: 3600
    audit: none
- path: /api/catalog/products/{id}
  method: get
  operationId: CatalogModuleProducts_GetProductById
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/catalog/products/{id}
  method: patch
  operationId: CatalogModuleProducts_PatchProduct
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/products/outer/{outerId}
  method: get
  operationId: CatalogModuleProducts_GetProductByOuterId
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/catalog/{catalogId}/products-by-codes
  method: post
  operationId: CatalogModuleProducts_GetByCodes
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/products
  method: get
  operationId: CatalogModuleProducts_GetProductByIds
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/catalog/products
  method: post
  operationId: CatalogModuleProducts_SaveProduct
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/products
  method: delete
  operationId: CatalogModuleProducts_DeleteProduct
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/products
  method: patch
  operationId: CatalogModuleProducts_BulkPatchProducts
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/products/plenty
  method: post
  operationId: CatalogModuleProducts_GetProductByPlentyIds
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/catalog/{catalogId}/products/getnew
  method: get
  operationId: CatalogModuleProducts_GetNewProductByCatalog
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/catalog/{catalogId}/categories/{categoryId}/products/getnew
  method: get
  operationId: CatalogModuleProducts_GetNewProductByCatalogAndCategory
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: 

# --- truncated at 32 KB (148 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/virto-commerce/refs/heads/main/agentic-access/virto-commerce-agentic-access.yml