Withings · Agentic Access

Withings Agentic Access

x-agentic-access generated

Withings exposes 62 API operations that an AI agent could call, of which 61 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.

By consequence: 1 read, 52 write, 6 physical, and 3 safety-critical.

3 operations are classed safety-critical and should require human-in-the-loop approval at runtime.

Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.

HealthWearablesConnected DevicesBody CompositionSleep TrackingBlood PressureActivity TrackingRemote Patient MonitoringOAuth2Webhooks
Operations: 62 Acting: 61 Human-in-the-loop: 3 Method: generated

By consequence

read 1 write 52 physical 6 safety-critical 3

Highest-consequence actions

The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.

MethodPathConsequenceHuman-in-loop
POST https://wbsapi.withings.net/v2/oauth2 safety-critical required
POST https://wbsapi.withings.net/notify safety-critical required
POST https://wbsapi.withings.net/v2/device safety-critical required
POST https://wbsapi.withings.net/v2/dropshipment physical conditional
POST https://wbsapi.withings.net/v2/dropshipment physical conditional
POST https://wbsapi.withings.net/v2/dropshipment physical conditional
POST https://wbsapi.withings.net/v2/dropshipment physical conditional
POST https://wbsapi.withings.net/v2/dropshipment physical conditional
POST https://wbsapi.withings.net/v2/order physical conditional

Source

Agentic Access

Raw ↑ 
generated: '2026-07-15'
method: generated
source: openapi/withings-data-api-openapi.yml
description: Recommended x-agentic-access execution contracts, classified heuristically from
  the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
  audience per deployment. See research/curity/agentic-governance/.
summary:
  operations: 62
  by_action_class:
    connected: 1
    acting: 61
  by_consequence:
    read: 1
    write: 52
    safety-critical: 3
    physical: 6
  human_in_the_loop_required: 3
operations:
- path: https://account.withings.com/oauth2_user/authorize2
  method: get
  operationId: oauth2-authorize
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: https://wbsapi.withings.net/v2/oauth2
  method: post
  operationId: oauth2-getaccesstoken
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: '  https://wbsapi.withings.net/v2/oauth2'
  method: post
  operationId: oauth2-recoverauthorizationcode
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: '   https://wbsapi.withings.net/v2/oauth2'
  method: post
  operationId: oauth2-listusers
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: '    https://wbsapi.withings.net/v2/oauth2'
  method: post
  operationId: oauth2-revoke
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: '     https://wbsapi.withings.net/v2/oauth2'
  method: post
  operationId: oauth2-getdemoaccess
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: '      https://wbsapi.withings.net/v2/oauth2'
  method: post
  operationId: oauth2-createclient
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: https://wbsapi.withings.net/measure
  method: post
  operationId: measure-getmeas
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/notify '
  method: post
  operationId: notify-get
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/notify  '
  method: post
  operationId: notify-list
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/notify    '
  method: post
  operationId: notify-revoke
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: https://wbsapi.withings.net/notify
  method: post
  operationId: notify-subscribe
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/notify   '
  method: post
  operationId: notify-update
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: https://wbsapi.withings.net/v2/answers
  method: post
  operationId: answersv2-get
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/v2/device  '
  method: post
  operationId: devicev2-disablefeature
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: 'https://wbsapi.withings.net/v2/device '
  method: post
  operationId: devicev2-enablefeature
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: https://wbsapi.withings.net/v2/device
  method: post
  operationId: devicev2-endpartnerprogram
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: https://wbsapi.withings.net/v2/dropshipment
  method: post
  operationId: dropshipmentv2-createorder
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/v2/dropshipment '
  method: post
  operationId: dropshipmentv2-createuserorder
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/v2/dropshipment   '
  method: post
  operationId: dropshipmentv2-delete
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/v2/dropshipment  '
  method: post
  operationId: dropshipmentv2-getorderstatus
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/v2/dropshipment    '
  method: post
  operationId: dropshipmentv2-update
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/v2/heart '
  method: post
  operationId: heartv2-get
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: https://wbsapi.withings.net/v2/heart
  method: post
  operationId: heartv2-list
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/v2/measure   '
  method: post
  operationId: measurev2-confirmuser
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: https://wbsapi.withings.net/v2/measure
  method: post
  operationId: measurev2-getactivity
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/v2/measure  '
  method: post
  operationId: measurev2-getintradayactivity
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/v2/measure '
  method: post
  operationId: measurev2-getworkouts
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/v2/nudge  '
  method: post
  operationId: nudgev2-create
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/v2/nudge    '
  method: post
  operationId: nudgev2-delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/v2/nudge '
  method: post
  operationId: nudgev2-get
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: https://wbsapi.withings.net/v2/nudge
  method: post
  operationId: nudgev2-list
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/v2/nudge   '
  method: post
  operationId: nudgev2-update
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/v2/nudgecampaign     '
  method: post
  operationId: nudgecampaignv2-addusers
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/v2/nudgecampaign  '
  method: post
  operationId: nudgecampaignv2-create
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/v2/nudgecampaign    '
  method: post
  operationId: nudgecampaignv2-delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/v2/nudgecampaign '
  method: post
  operationId: nudgecampaignv2-get
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: https://wbsapi.withings.net/v2/nudgecampaign
  method: post
  operationId: nudgecampaignv2-list
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/v2/nudgecampaign       '
  method: post
  operationId: nudgecampaignv2-listusers
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/v2/nudgecampaign      '
  method: post
  operationId: nudgecampaignv2-removeusers
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/v2/nudgecampaign   '
  method: post
  operationId: nudgecampaignv2-update
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: https://wbsapi.withings.net/v2/order
  method: post
  operationId: orderv2-getdetail
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/v2/rawdata '
  method: post
  operationId: rawdatav2-activate
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/v2/rawdata  '
  method: post
  operationId: rawdatav2-deactivate
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: https://wbsapi.withings.net/v2/rawdata
  method: post
  operationId: rawdatav2-get
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: https://wbsapi.withings.net/v2/signature
  method: post
  operationId: signaturev2-getnonce
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: https://wbsapi.withings.net/v2/sleep
  method: post
  operationId: sleepv2-get
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/v2/sleep '
  method: post
  operationId: sleepv2-getsummary
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: https://wbsapi.withings.net/v2/stetho
  method: post
  operationId: stethov2-get
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/v2/stetho '
  method: post
  operationId: stethov2-list
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/v2/survey '
  method: post
  operationId: surveyv2-activate
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/v2/survey  '
  method: post
  operationId: surveyv2-deactivate
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: https://wbsapi.withings.net/v2/survey
  method: post
  operationId: surveyv2-get
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/v2/survey   '
  method: post
  operationId: surveyv2-list
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/v2/survey    '
  method: post
  operationId: surveyv2-listusers
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/v2/user '
  method: post
  operationId: userv2-activate
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/v2/user      '
  method: post
  operationId: userv2-addtorpm
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: https://wbsapi.withings.net/v2/user
  method: post
  operationId: userv2-get
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/v2/user   '
  method: post
  operationId: userv2-getdevice
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/v2/user     '
  method: post
  operationId: userv2-getgoals
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/v2/user  '
  method: post
  operationId: userv2-link
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: 'https://wbsapi.withings.net/v2/user    '
  method: post
  operationId: userv2-unlink
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required