Wish Agentic Access
Wish exposes 102 API operations that an AI agent could call, of which 42 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.
By consequence: 60 read, 34 write, 7 physical, and 1 safety-critical.
1 operation are classed safety-critical and should require human-in-the-loop approval at runtime.
Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.
By consequence
Highest-consequence actions
The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.
| Method | Path | Consequence | Human-in-loop |
|---|---|---|---|
| PUT | /api/v3/products/{id}/calculated_shipping | safety-critical | required |
| PUT | /api/v3/merchant/shipping_settings | physical | conditional |
| POST | /api/v3/orders/bulk_get | physical | conditional |
| PUT | /api/v3/orders/{id} | physical | conditional |
| PUT | /api/v3/orders/{id}/address | physical | conditional |
| PUT | /api/v3/orders/{id}/refund | physical | conditional |
| PUT | /api/v3/orders/{id}/tracking | physical | conditional |
| POST | /api/v3/payments/invoices/bulk_get | physical | conditional |
Source
Agentic Access
generated: '2026-07-21'
method: generated
source: openapi/wish-marketplace-v3-openapi.json
description: Recommended x-agentic-access execution contracts, classified heuristically from
the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
audience per deployment. See research/curity/agentic-governance/.
summary:
operations: 102
by_action_class:
connected: 60
acting: 42
by_consequence:
read: 60
write: 34
physical: 7
safety-critical: 1
human_in_the_loop_required: 1
operations:
- path: /api/v3/orders/shipping_carriers
method: get
operationId: GetShippingCarriers
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- orders:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/promotions/eligible_products
method: get
operationId: getPromotionsEligibleProducts
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- promotions:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/oauth/access_token
method: post
operationId: oauthAccessTokenPost
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/oauth/access_token
method: get
operationId: oauthAccessToken
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v3/products/categories/{id}
method: get
operationId: getCategoryByID
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- products:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/orders/bulk_get
method: post
operationId: downloadOrders
x-agentic-access:
action-class: acting
consequence: physical
subject: required
scope:
- orders:read
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/eu_product_compliance/responsible_person/{id}
method: put
operationId: updateEUResponsiblePerson
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- compliance:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/eu_product_compliance/responsible_person/{id}
method: get
operationId: getEUResponsiblePerson
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- compliance:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/eu_product_compliance/responsible_person/{id}
method: delete
operationId: deleteEUResponsiblePerson
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- compliance:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/orders/bulk_get/{id}
method: get
operationId: getOrderDownloadJob
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- orders:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/products/requests
method: get
operationId: listProductUpdateRequests
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- products:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/oauth/test
method: get
operationId: oauthTest
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v3/products/bulk_get
method: post
operationId: getProducts
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- products:read
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/penalties/{id}
method: get
operationId: GetPenalty
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- penalties:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/webhook/subscriptions
method: post
operationId: createSubscription
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- webhook:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/webhook/subscriptions
method: get
operationId: listSubscriptions
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- webhook:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/product_boost/keywords
method: get
operationId: getKeywords
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- product_boost:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/eu_product_compliance/products/bulk_update
method: post
operationId: BulkUpdateProducts
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- compliance:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/oauth/refresh_token
method: get
operationId: oauthRefreshToken
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v3/tickets/{id}
method: put
operationId: updateTicket
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- tickets:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/tickets/{id}
method: get
operationId: getTicket
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- tickets:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/orders/{id}/tracking
method: put
operationId: ShipOrder
x-agentic-access:
action-class: acting
consequence: physical
subject: required
scope:
- orders:write
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/product_boost/campaigns
method: post
operationId: createCampaign
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- product_boost:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/product_boost/campaigns
method: get
operationId: listCampaigns
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- product_boost:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/france_epr_compliance/compliance_status
method: put
operationId: updateFranceEPRProductComplianceStatus
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- compliance:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/france_epr_compliance/compliance_status
method: get
operationId: getFranceEPRProductComplianceStatus
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- compliance:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/promotions/campaigns/{id}/cancel
method: put
operationId: cancelPromotionsCampaign
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- promotions:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/promotions/campaigns
method: post
operationId: createPromotionsCampaign
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- promotions:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/promotions/campaigns
method: get
operationId: listPromotionsCampaigns
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- promotions:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/products/{id}/calculated_shipping
method: put
operationId: enableDisableCalculatedShipping
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
scope:
- products:write
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /api/v3/webhook/subscriptions/{id}
method: put
operationId: updateSubscription
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- webhook:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/webhook/subscriptions/{id}
method: get
operationId: getSubscription
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- webhook:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/webhook/subscriptions/{id}
method: delete
operationId: deleteSubscription
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- webhook:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/promotions/campaigns/{id}
method: put
operationId: updatePromotionsCampaign
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- promotions:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/promotions/campaigns/{id}
method: get
operationId: getPromotionsCampaign
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- promotions:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/merchant/currency_settings
method: get
operationId: getCurrencySettings
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- merchant:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/penalties/count
method: get
operationId: CountPenalties
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- penalties:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/eu_product_compliance/products/bulk_update/{id}
method: get
operationId: GetBulkUpdateStatus
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- compliance:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/payments/invoices/bulk_get
method: post
operationId: downloadPaymentInvoices
x-agentic-access:
action-class: acting
consequence: physical
subject: required
scope:
- payments:read
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/ratings/products
method: get
operationId: FetchProductRatings
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- ratings:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/unification_initiative/countries
method: get
operationId: getUnificationInitiativeCountries
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v3/orders/{id}/refund_reasons
method: get
operationId: GetValidRefundReasons
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- orders:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/penalties
method: get
operationId: ListPenalties
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- penalties:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/payments/invoices/bulk_get/{id}
method: get
operationId: getPaymentInvoicesDownloadJob
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- payments:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/products/requests/{id}
method: get
operationId: getProductUpdateRequest
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- products:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/products/requests/{id}
method: delete
operationId: deleteProductUpdateRequest
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- products:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/tickets/{id}/replies
method: post
operationId: replyTicket
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- tickets:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/france_epr_compliance/unique_identification_number
method: post
operationId: createFranceProductUniqueIdentificationNumber
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- compliance:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/france_epr_compliance/unique_identification_number
method: get
operationId: listFranceProductUniqueIdentificationNumber
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- compliance:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/merchant/warehouses/{id}
method: put
operationId: updateWarehouse
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- merchant:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/orders/{id}
method: put
operationId: UpdateOrder
x-agentic-access:
action-class: acting
consequence: physical
subject: required
scope:
- orders:write
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/orders/{id}
method: get
operationId: GetOrder
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- orders:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/currencies
method: get
operationId: getCurrencies
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v3/products/bulk_update/{id}
method: get
operationId: getUpdateProductsStatus
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- products:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/eu_product_compliance/products
method: put
operationId: updateEUProductComplianceStatus
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- compliance:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/eu_product_compliance/products
method: get
operationId: getEUProductComplianceStatus
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- compliance:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/products/attributes
method: get
operationId: getCategoryAttributes
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- products:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/germany_epr_compliance/epr_registration_number
method: post
operationId: createGermanyProductEprRegistrationNumber
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- compliance:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/germany_epr_compliance/epr_registration_number
method: get
operationId: listGermanyProductEprRegistrationNumbers
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- compliance:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/product_boost/campaigns/{id}/product_feedback
method: get
operationId: ListProductFeedback
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- product_boost:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/product_boost/budget
method: get
operationId: getBudget
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- product_boost:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/payments/early_payment
method: get
operationId: getEarlyPayment
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- payments:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/product_boost/campaigns/{id}
method: put
operationId: updateCampaign
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- product_boost:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/product_boost/campaigns/{id}
method: get
operationId: getCampaign
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- product_boost:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/ratings/products/{id}
method: get
operationId: FetchOverallProductRatings
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- ratings:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/orders/{id}/address
method: put
operationId: ModifyAddress
x-agentic-access:
action-class: acting
consequence: physical
subject: required
scope:
- orders:write
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/products
method: post
operationId: createProduct
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- products:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/products
method: get
operationId: listProductsSync
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- products:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/germany_epr_compliance/compliance_status
method: put
operationId: updateGermanyEPRProductComplianceStatus
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- compliance:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/germany_epr_compliance/compliance_status
method: get
operationId: getGermanyEPRProductComplianceStatus
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- compliance:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/products/{id}/variations
method: post
operationId: createVariation
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- products:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/products/variations/colors
method: get
operationId: getColors
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v3/france_epr_compliance/unique_identification_number/{id}
method: put
operationId: updateFranceProductUniqueIdentificationNumber
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- compliance:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/france_epr_compliance/unique_identification_number/{id}
method: get
operationId: getFranceProductUniqueIdentificationNumber
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- compliance:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/france_epr_compliance/unique_identification_number/{id}
method: delete
operationId: deleteFranceProductUniqueIdentificationNumber
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- compliance:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/products/categories
method: get
operationId: getCategories
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- products:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/merchant/settings
method: get
operationId: getSettings
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- merchant:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/videos/product
method: post
operationId: upsertProductVideo
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- videos:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/orders/{id}/refund
method: put
operationId: RefundOrder
x-agentic-access:
action-class: acting
consequence: physical
subject: required
scope:
- orders:write
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/germany_epr_compliance/epr_registration_number/{id}
method: put
operationId: updateGermanyProductEprRegistrationNumber
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- compliance:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/germany_epr_compliance/epr_registration_number/{id}
method: get
operationId: getGermanyProductEprRegistrationNumber
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- compliance:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/germany_epr_compliance/epr_registration_number/{id}
method: delete
operationId: deleteGermanyProductEprRegistrationNumber
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- compliance:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/products/bulk_update
method: post
operationId: updateProducts
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- products:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/product_boost/campaigns/{id}/metrics
method: get
operationId: listCampaignMetrics
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- product_boost:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/products/{id}
method: put
operationId: updateProduct
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- products:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/products/{id}
method: get
operationId: getProduct
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- products:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/products/{id}
method: delete
operationId: deleteProduct
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- products:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/promotions/events
method: get
operationId: listPromotionEvents
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- promotions:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/merchant/warehouses
method: post
operationId: createWarehouse
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- merchant:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/merchant/warehouses
method: get
operationId: listWarehouses
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- merchant:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/orders
method: get
operationId: GetMultipleOrders
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- orders:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/promotions/eligible_products/count
method: get
operationId: getPromotionsEligibleProductsCount
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- promotions:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/brands
method: get
operationId: listBrands
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /api/v3/merchant/shipping_settings
method: put
operationId: updateShippingSettings
x-agentic-access:
action-class: acting
consequence: physical
subject: required
scope:
- merchant:write
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/merchant/shipping_settings
method: get
operationId: listShippingSettings
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- merchant:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/merchant/account_details
method: get
operationId: getMerchantAccountDetail
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- merchant:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/webhook/topics
method: get
operationId: getTopics
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- webhook:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/products/bulk_get/{id}
method: get
operationId: getGetProductsStatus
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- products:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/eu_product_compliance/responsible_person
method: put
operationId: createEUResponsiblePerson
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- compliance:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /api/v3/eu_product_compliance/responsible_person
method: get
operationId: listEUResponsiblePerson
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- compliance:read
token:
max-ttl: 3600
audit: none
- path: /api/v3/tickets
method: get
operationId: listTickets
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- tickets:read
token:
max-ttl: 3600
audit: none
- path: /api
# --- truncated at 32 KB (32 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/wish/refs/heads/main/agentic-access/wish-agentic-access.yml