WinCL · Agentic Access
WinCL Agentic Access

x-agentic-access generated
WinCL exposes 271 API operations that an AI agent could call, of which 127 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.
By consequence: 144 read, 97 write, 29 physical, and 1 safety-critical.
1 operation are classed safety-critical and should require human-in-the-loop approval at runtime.
Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.
CompanyCarbon ManagementSustainabilityGreenhouse GasCarbon CreditsCarbon OffsetESGClimateMarketplacePaymentsBlockchainHedera
Operations: 271 Acting: 127 Human-in-the-loop: 1 Method: generated
By consequence

read 144 write 97 physical 29 safety-critical 1
Highest-consequence actions

The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.
Method	Path	Consequence	Human-in-loop
POST	/bapi/v1/auth/clear-firebase-claim	safety-critical	required
POST	/api/v1/order	physical	conditional
POST	/api/v1/order/one-dollar-product	physical	conditional
POST	/api/v1/order/stripe/confirm	physical	conditional
POST	/api/v1/order/stripe/create-payment-intent	physical	conditional
POST	/api/v1/order/stripe/reserve	physical	conditional
POST	/api/v1/utils/sms/message	physical	conditional
POST	/api/v1/wallet/credit/transfer	physical	conditional
POST	/api/v1/wallet/credit/transfer/test	physical	conditional
POST	/api/v2/order/cancel	physical	conditional
POST	/api/v2/payment/kcp/approve	physical	conditional
POST	/api/v2/payment/kcp/reserve	physical	conditional
POST	/api/v2/payment/payco/approve	physical	conditional
POST	/api/v2/payment/payco/reserve	physical	conditional
POST	/api/v2/payment/stripe/approve	physical	conditional
POST	/api/v2/payment/stripe/reserve	physical	conditional
POST	/api/v2/payment/stripe/test/reserve	physical	conditional
POST	/api/v2/payment/stripe/webhook	physical	conditional
DELETE	/api/v3/rewards/internal/programs/{programId}/orders/{orderId}	physical	conditional
POST	/api/v3/rewards/orders	physical	conditional
PUT	/api/v3/rewards/orders/{id}	physical	conditional
DELETE	/api/v3/rewards/orders/{id}	physical	conditional
POST	/bapi/v1/hedera/contracts/paymaster/deposit	physical	conditional
POST	/bapi/v1/hedera/contracts/paymaster/withdraw	physical	conditional
POST	/bapi/v1/hedera/contracts/registry/transfer-record	physical	conditional
Source

Agentic Access

generated: '2026-07-21'
method: generated
source: openapi/wincl-openapi-original.json
description: Recommended x-agentic-access execution contracts, classified heuristically from
  the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
  audience per deployment. See research/curity/agentic-governance/.
summary:
  operations: 271
  by_action_class:
    acting: 127
    connected: 144
  by_consequence:
    safety-critical: 1
    write: 97
    read: 144
    physical: 29
  human_in_the_loop_required: 1
operations:
- path: /bapi/v1/auth/clear-firebase-claim
  method: post
  operationId: passwordResetUsingPOST
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /bapi/v1/auth/forgot-password
  method: post
  operationId: requestForgotPasswordUsingPOST
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/auth/signin
  method: post
  operationId: signInUsingPOST
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/admin
  method: get
  operationId: getAdminListUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v1/admin
  method: post
  operationId: createAdminUsingPOST
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/admin/authority
  method: get
  operationId: getAuthoritiesUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v1/admin/profile
  method: get
  operationId: getAdminProfileUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v1/admin/tab
  method: get
  operationId: getTabListUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v1/admin/{id}
  method: get
  operationId: getAdminDetailUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v1/admin/{id}
  method: put
  operationId: updateAdminUsingPUT
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/admin/{id}
  method: delete
  operationId: deleteAdminUsingDELETE
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v2/coupons/events/{eventId}
  method: delete
  operationId: deleteEventUsingDELETE
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v2/coupons/magic/issue
  method: post
  operationId: issueIndividualCouponsUsingPOST
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v2/coupons/magic/register
  method: post
  operationId: registerMagicCouponsUsingPOST
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/faq
  method: get
  operationId: getFaqByCategoryUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v1/faq
  method: post
  operationId: createFaqUsingPOST
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/faq/category
  method: get
  operationId: getFaqCategoryUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v1/faq/{id}
  method: get
  operationId: getFaqUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v1/faq/{id}
  method: put
  operationId: updateFaqUsingPUT
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/faq/{id}
  method: delete
  operationId: deleteFaqUsingDELETE
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/hedera/info
  method: get
  operationId: getHederaInfoUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v1/hedera/migrate-operator
  method: post
  operationId: migrateOperatorUsingPOST
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/hedera/transfer
  method: post
  operationId: transferHbarUsingPOST
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/info/banner
  method: get
  operationId: bannerListUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v1/info/banner
  method: post
  operationId: insertBannerUsingPOST
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/info/banner/hide
  method: delete
  operationId: hideBannerUsingDELETE
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/info/banner/show/{id}
  method: get
  operationId: showBannerUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v1/info/banner/{id}
  method: get
  operationId: getBannerUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v1/info/banner/{id}
  method: put
  operationId: modifyBannerUsingPUT
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/info/banner/{id}
  method: delete
  operationId: deleteBannerUsingDELETE
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/info/popup
  method: get
  operationId: popupListUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v1/info/popup
  method: post
  operationId: insertPopupUsingPOST
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/info/popup/hide
  method: delete
  operationId: hidePopupsUsingDELETE
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/info/popup/show/{id}
  method: put
  operationId: showPopupUsingPUT
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/info/popup/{id}
  method: get
  operationId: getPopupUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v1/info/popup/{id}
  method: put
  operationId: modifyPopupUsingPUT
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/info/popup/{id}
  method: delete
  operationId: deletePopupUsingDELETE
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/news
  method: get
  operationId: getNewsUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v1/news
  method: post
  operationId: insertNewsUsingPOST
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/news/category
  method: get
  operationId: getNewsCategoryListUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v1/news/category
  method: post
  operationId: addNewsCategoryUsingPOST
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/news/category
  method: delete
  operationId: removeNewsCategoryUsingDELETE
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/news/{no}
  method: get
  operationId: getNewsDetailUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v1/news/{no}
  method: put
  operationId: updateNewsUsingPUT
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/news/{no}
  method: delete
  operationId: deleteNewsUsingDELETE
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/notice
  method: get
  operationId: noticeListUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v1/notice
  method: post
  operationId: insertNoticeUsingPOST
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/notice/active
  method: get
  operationId: activeNoticeListUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v1/notice/{id}
  method: get
  operationId: noticeInfoUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v1/notice/{id}
  method: put
  operationId: modifyNoticeUsingPUT
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/notice/{id}
  method: delete
  operationId: deleteNoticeUsingDELETE
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/order/list
  method: get
  operationId: orderListUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v1/order/{id}
  method: get
  operationId: orderInfoUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v2/payment/{purchaseId}/cancel
  method: post
  operationId: refundPaymentUsingPOST
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/product
  method: get
  operationId: productListUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v1/product
  method: post
  operationId: insertProductUsingPOST
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/product/home
  method: get
  operationId: homeProductsUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v1/product/home/{id}
  method: put
  operationId: updateHomeProductUsingPUT
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/product/home/{id}
  method: post
  operationId: addHomeProductUsingPOST
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/product/home/{id}
  method: delete
  operationId: removeHomeProductUsingDELETE
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/product/{id}
  method: get
  operationId: productInfoUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v1/product/{id}
  method: put
  operationId: modifyProductUsingPUT
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/product/{id}
  method: delete
  operationId: deleteProductUsingDELETE
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/product/{id}/history
  method: get
  operationId: productBalanceHistoryListUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v1/product/{id}/increment
  method: put
  operationId: updateVolumeUsingPUT
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/project
  method: get
  operationId: projectListUsingGET_1
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v1/project
  method: post
  operationId: insertProjectUsingPOST
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/project/agency
  method: get
  operationId: getCertificationAgencyUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v1/project/effect/list
  method: get
  operationId: projectEffectListUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v1/project/type/list
  method: get
  operationId: projectTypeListUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v1/project/{id}
  method: get
  operationId: projectInfoUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v1/project/{id}
  method: put
  operationId: modifyProjectUsingPUT
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/project/{id}/history
  method: get
  operationId: projectListUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v1/project/{id}/increment
  method: put
  operationId: updateVolumeUsingPUT_1
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/qna
  method: get
  operationId: qnaListUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v1/qna/{id}
  method: get
  operationId: qnaInfoUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v1/qna/{id}/answer
  method: put
  operationId: updateQnaAnswerUsingPUT
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/qna/{id}/answer
  method: post
  operationId: insertQnaAnswerUsingPOST
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/qna/{id}/answer
  method: delete
  operationId: deleteQnaAnswerUsingDELETE
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v3/rewards/companies
  method: get
  operationId: listUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v3/rewards/companies
  method: post
  operationId: createUsingPOST
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v3/rewards/companies/{id}
  method: get
  operationId: getUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v3/rewards/companies/{id}
  method: put
  operationId: updateUsingPUT
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v3/rewards/companies/{id}
  method: delete
  operationId: deleteUsingDELETE
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v3/rewards/issuances
  method: get
  operationId: listUsingGET_1
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v3/rewards/issuances/{id}
  method: get
  operationId: getUsingGET_1
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v3/rewards/issuances/{id}
  method: delete
  operationId: deleteUsingDELETE_1
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v3/rewards/orders
  method: get
  operationId: listAllUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v3/rewards/orders/{id}
  method: get
  operationId: getUsingGET_2
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v3/rewards/orders/{id}
  method: delete
  operationId: deleteUsingDELETE_2
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v3/rewards/orders/{id}/cancel/approve
  method: post
  operationId: approveCancelUsingPOST
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v3/rewards/programs/{programId}/orders
  method: get
  operationId: listByProgramUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v3/rewards/payments
  method: get
  operationId: listUsingGET_2
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v3/rewards/payments/{id}
  method: get
  operationId: getUsingGET_3
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v3/rewards/companies/{companyId}/programs
  method: get
  operationId: listByCompanyUsingGET
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v3/rewards/programs
  method: get
  operationId: listUsingGET_3
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v3/rewards/programs
  method: post
  operationId: createUsingPOST_1
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v3/rewards/programs/{id}
  method: get
  operationId: getUsingGET_4
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - global
    token:
      max-ttl: 3600
    audit: none
- path: /bapi/v3/rewards/programs/{id}
  method: put
  operationId: updateUsingPUT_1
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v3/rewards/programs/{id}
  method: delete
  operationId: deleteUsingDELETE_3
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/hedera/contracts/carbon-token/balance
  method: post
  operationId: getTokenBalanceUsingPOST
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - global
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bapi/v1/hedera/contracts/carbon-token/metadata
  method: post
  operationId: getTokenMetadataUsingPOS

# --- truncated at 32 KB (84 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/wincl/refs/heads/main/agentic-access/wincl-agentic-access.yml