WSO2 · Agentic Access
WSO2 Agentic Access

x-agentic-access generated
WSO2 exposes 274 API operations that an AI agent could call, of which 124 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.
By consequence: 150 read, 116 write, 2 physical, and 6 safety-critical.
6 operations are classed safety-critical and should require human-in-the-loop approval at runtime.
Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.
API ManagementGatewaysOpen SourceAPI LifecycleGraphQLSOAPREST
Operations: 274 Acting: 124 Human-in-the-loop: 6 Method: generated
By consequence

read 150 write 116 physical 2 safety-critical 6
Highest-consequence actions

The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.
Method	Path	Consequence	Human-in-loop
POST	/api-keys/revoke	safety-critical	required
POST	/apis/{apiId}/api-keys/revoke	safety-critical	required
POST	/applications/{applicationId}/api-keys/{keyType}/revoke	safety-critical	required
POST	/applications/{applicationId}/oauth-keys/{keyMappingId}/revoke-secret	safety-critical	required
POST	/applications/{applicationId}/reset-throttle-policy	safety-critical	required
PUT	/config/correlation/	safety-critical	required
POST	/redeploy-api	physical	conditional
POST	/undeploy-api	physical	conditional
Source

Agentic Access

generated: '2026-07-15'
method: generated
source: openapi/wso2-admin-api.yaml, openapi/wso2-dcr-api.yaml, openapi/wso2-devops-api.yaml,
  openapi/wso2-devportal-api.yaml, openapi/wso2-gateway-api.yaml, openapi/wso2-governance-api.yaml,
  openapi/wso2-service-catalog-api.yaml
description: Recommended x-agentic-access execution contracts, classified heuristically from
  the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
  audience per deployment. See research/curity/agentic-governance/.
summary:
  operations: 274
  by_action_class:
    connected: 150
    acting: 124
  by_consequence:
    read: 150
    write: 116
    safety-critical: 6
    physical: 2
  human_in_the_loop_required: 6
operations:
- path: /throttling/policies/search
  method: get
  operationId: throttlingPolicySearch
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:admin_tier_view
    - apim:policies_import_export
    - apim:tier_view
    token:
      max-ttl: 3600
    audit: none
- path: /throttling/policies/application
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:admin_tier_view
    - apim:tier_view
    token:
      max-ttl: 3600
    audit: none
- path: /throttling/policies/application
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:admin_tier_manage
    - apim:tier_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /throttling/policies/application/{policyId}
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:admin_tier_view
    - apim:tier_view
    token:
      max-ttl: 3600
    audit: none
- path: /throttling/policies/application/{policyId}
  method: put
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:admin_tier_manage
    - apim:tier_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /throttling/policies/application/{policyId}
  method: delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:admin_tier_manage
    - apim:policies_import_export
    - apim:tier_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /throttling/policies/subscription
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:admin_tier_view
    - apim:tier_view
    token:
      max-ttl: 3600
    audit: none
- path: /throttling/policies/subscription
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:admin_tier_manage
    - apim:tier_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /throttling/policies/subscription/{policyId}
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:admin_tier_view
    - apim:tier_view
    token:
      max-ttl: 3600
    audit: none
- path: /throttling/policies/subscription/{policyId}
  method: put
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:admin_tier_manage
    - apim:tier_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /throttling/policies/subscription/{policyId}
  method: delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:admin_tier_manage
    - apim:policies_import_export
    - apim:tier_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /throttling/policies/custom
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:admin_tier_view
    - apim:tier_view
    token:
      max-ttl: 3600
    audit: none
- path: /throttling/policies/custom
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:admin_tier_manage
    - apim:tier_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /throttling/policies/custom/{ruleId}
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:admin_tier_view
    - apim:tier_view
    token:
      max-ttl: 3600
    audit: none
- path: /throttling/policies/custom/{ruleId}
  method: put
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:admin_tier_manage
    - apim:tier_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /throttling/policies/custom/{ruleId}
  method: delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:admin_tier_manage
    - apim:policies_import_export
    - apim:tier_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /throttling/policies/advanced
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:admin_tier_view
    - apim:tier_view
    token:
      max-ttl: 3600
    audit: none
- path: /throttling/policies/advanced
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:admin_tier_manage
    - apim:tier_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /throttling/policies/advanced/{policyId}
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:admin_tier_view
    - apim:tier_view
    token:
      max-ttl: 3600
    audit: none
- path: /throttling/policies/advanced/{policyId}
  method: put
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:admin_tier_manage
    - apim:tier_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /throttling/policies/advanced/{policyId}
  method: delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:admin_tier_manage
    - apim:policies_import_export
    - apim:tier_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /throttling/policies/export
  method: get
  operationId: exportThrottlingPolicy
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:admin_tier_manage
    - apim:policies_import_export
    - apim:tier_manage
    token:
      max-ttl: 3600
    audit: none
- path: /throttling/policies/import
  method: post
  operationId: importThrottlingPolicy
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:admin_tier_manage
    - apim:policies_import_export
    - apim:tier_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /throttling/deny-policies
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:bl_view
    token:
      max-ttl: 3600
    audit: none
- path: /throttling/deny-policies
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:bl_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /throttling/deny-policy/{conditionId}
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:bl_view
    token:
      max-ttl: 3600
    audit: none
- path: /throttling/deny-policy/{conditionId}
  method: delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:bl_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /throttling/deny-policy/{conditionId}
  method: patch
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:bl_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /applications
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:admin_application_view
    - apim:app_import_export
    - apim:app_owner_change
    - apim:app_settings_change
    token:
      max-ttl: 3600
    audit: none
- path: /applications/{applicationId}
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:admin_application_view
    - apim:app_import_export
    token:
      max-ttl: 3600
    audit: none
- path: /applications/{applicationId}
  method: delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:app_import_export
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /applications/{applicationId}/change-settings
  method: post
  operationId: updateApplicationSettings
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:app_settings_change
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /applications/{applicationId}/change-owner
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:app_owner_change
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /ai-service-providers
  method: get
  operationId: getAIServiceProviders
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    token:
      max-ttl: 3600
    audit: none
- path: /ai-service-providers
  method: post
  operationId: addAIServiceProvider
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:llm_provider_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /ai-service-providers/{aiServiceProviderId}
  method: put
  operationId: updateAIServiceProvider
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:llm_provider_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /ai-service-providers/{aiServiceProviderId}
  method: delete
  operationId: deleteAIServiceProvider
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:llm_provider_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /ai-service-providers/{aiServiceProviderId}
  method: get
  operationId: getAIServiceProvider
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    token:
      max-ttl: 3600
    audit: none
- path: /llm-providers
  method: get
  operationId: getLLMProviders
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    token:
      max-ttl: 3600
    audit: none
- path: /llm-providers
  method: post
  operationId: addLLMProvider
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:llm_provider_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /llm-providers/{llmProviderId}
  method: put
  operationId: updateLLMProvider
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:llm_provider_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /llm-providers/{llmProviderId}
  method: delete
  operationId: deleteLLMProvider
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:llm_provider_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /llm-providers/{llmProviderId}
  method: get
  operationId: getLLMProvider
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    token:
      max-ttl: 3600
    audit: none
- path: /environments
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:environment_read
    token:
      max-ttl: 3600
    audit: none
- path: /environments
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:environment_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /environments/{environmentId}
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:environment_manage
    token:
      max-ttl: 3600
    audit: none
- path: /environments/{environmentId}
  method: put
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:environment_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /environments/{environmentId}
  method: delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:environment_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /environments/{environmentId}/gateways
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:environment_read
    token:
      max-ttl: 3600
    audit: none
- path: /gateways
  method: get
  operationId: getPlatformGateways
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    token:
      max-ttl: 3600
    audit: none
- path: /gateways
  method: post
  operationId: createPlatformGateway
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /gateways/{gatewayId}/regenerate-token
  method: post
  operationId: regeneratePlatformGatewayToken
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /gateways/{gatewayId}
  method: put
  operationId: updatePlatformGateway
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /gateways/{gatewayId}
  method: delete
  operationId: deletePlatformGateway
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /organizations
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:organization_read
    token:
      max-ttl: 3600
    audit: none
- path: /organizations
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:organization_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /organizations/{organizationId}
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:organization_read
    token:
      max-ttl: 3600
    audit: none
- path: /organizations/{organizationId}
  method: put
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:organization_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /organizations/{organizationId}
  method: delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:organization_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /me/organization-information
  method: get
  operationId: organizationInformation
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:admin_settings
    token:
      max-ttl: 3600
    audit: none
- path: /bot-detection-data
  method: get
  operationId: getBotDetectionData
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:bot_data
    token:
      max-ttl: 3600
    audit: none
- path: /monetization/publish-usage
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:monetization_usage_publish
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /monetization/publish-usage/status
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:monetization_usage_publish
    token:
      max-ttl: 3600
    audit: none
- path: /workflows
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:api_workflow_view
    token:
      max-ttl: 3600
    audit: none
- path: /workflows/{externalWorkflowRef}
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:api_workflow_view
    token:
      max-ttl: 3600
    audit: none
- path: /workflows/update-workflow-status
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:api_workflow_approve
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /tenant-info/{username}
  method: get
  operationId: getTenantInfoByUsername
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:tenantInfo
    token:
      max-ttl: 3600
    audit: none
- path: /custom-urls/{tenantDomain}
  method: get
  operationId: getCustomUrlInfoByTenantDomain
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:tenantInfo
    token:
      max-ttl: 3600
    audit: none
- path: /api-categories
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:admin_operations
    - apim:api_category
    token:
      max-ttl: 3600
    audit: none
- path: /api-categories
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:admin_operations
    - apim:api_category
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api-categories/{apiCategoryId}
  method: put
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:admin_operations
    - apim:api_category
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api-categories/{apiCategoryId}
  method: delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:admin_operations
    - apim:api_category
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /settings
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:admin_settings
    token:
      max-ttl: 3600
    audit: none
- path: /alert-types
  method: get
  operationId: getAdminAlertTypes
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:admin_alert_manage
    token:
      max-ttl: 3600
    audit: none
- path: /alert-subscriptions
  method: get
  operationId: getSubscribedAlertTypes
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:admin_alert_manage
    token:
      max-ttl: 3600
    audit: none
- path: /alert-subscriptions
  method: put
  operationId: subscribeToAlerts
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:admin_alert_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /alert-subscriptions
  method: delete
  operationId: unsubscribeAllAlerts
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:admin_alert_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /alert-subscriptions/bot-detection
  method: get
  operationId: getBotDetectionAlertSubscriptions
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:admin_alert_manage
    token:
      max-ttl: 3600
    audit: none
- path: /alert-subscriptions/bot-detection
  method: post
  operationId: subscribeForBotDetectionAlerts
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:admin_alert_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /alert-subscriptions/bot-detection/{uuid}
  method: delete
  operationId: unsubscribeFromBotDetectionAlerts
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:admin_alert_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /system-scopes/{scopeName}
  method: get
  operationId: systemScopesScopeNameGet
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:scope_manage
    token:
      max-ttl: 3600
    audit: none
- path: /system-scopes
  method: get
  operationId: systemScopesGet
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:scope_manage
    token:
      max-ttl: 3600
    audit: none
- path: /system-scopes
  method: put
  operationId: updateRolesForScope
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:scope_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /system-scopes/role-aliases
  method: get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:scope_manage
    token:
      max-ttl: 3600
    audit: none
- path: /system-scopes/role-aliases
  method: put
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:scope_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /roles/{roleId}
  method: head
  operationId: validateSystemRole
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:role_manage
    token:
      max-ttl: 3600
    audit: none
- path: /tenant-theme
  method: get
  operationId: exportTenantTheme
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:tenant_theme_manage
    token:
      max-ttl: 3600
    audit: none
- path: /tenant-theme
  method: put
  operationId: importTenantTheme
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:tenant_theme_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /org-themes
  method: get
  operationId: getOrgThemes
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:tenant_theme_manage
    token:
      max-ttl: 3600
    audit: none
- path: /org-themes
  method: post
  operationId: importOrgTheme
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:tenant_theme_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /org-themes/{id}/content
  method: get
  operationId: getOrgThemeContent
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    - apim:tenant_theme_manage
    token:
      max-ttl: 3600
    audit: none
- path: /org-themes/{id}
  method: delete
  operationId: deleteOrgTheme
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:tenant_theme_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /org-themes/{id}/status
  method: post
  operationId: updateOrgThemeStatus
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    - apim:tenant_theme_manage
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /tenant-config
  method: get
  operationId: exportTenantConfig
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - apim:admin
    token:
      max-ttl: 3600
    audit: none
- path: /tenant-config
  method: put
  operationId: updateTenantConfig
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - apim:admin
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /tenant-config-schema
  method: get
  ope

# --- truncated at 32 KB (84 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/wso2/refs/heads/main/agentic-access/wso2-agentic-access.yml