mirror of
https://github.com/paperclipai/paperclip.git
synced 2026-10-29 04:25:52 +01:00
docs(maps): keep capability labels at the contracted section level
Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
DottaandPaperclip committed
1 parent
57522de03e
commit
6a5d540c11
5 files changed
-448
No files matched your search
@@ -21,8 +21,6 @@ Review: `operation-reviewed`.
|
||||
|
||||
### `get-tool-connections-grants`
|
||||
|
||||
Capability ID: `app-permissions/get-tool-connections-grants`.
|
||||
|
||||
API: `present` — `GET /api/tool-connections/{connectionId}/grants`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -32,8 +30,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `put-tool-connections-grants-members`
|
||||
|
||||
Capability ID: `app-permissions/put-tool-connections-grants-members`.
|
||||
|
||||
API: `present` — `PUT /api/tool-connections/{connectionId}/grants/{grantId}/members`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_profiles` and `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -43,8 +39,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-tool-connections-grants-installations`
|
||||
|
||||
Capability ID: `app-permissions/post-tool-connections-grants-installations`.
|
||||
|
||||
API: `present` — `POST /api/tool-connections/{connectionId}/grants/installations`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_profiles` and `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -54,8 +48,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `delete-tool-connections-grants`
|
||||
|
||||
Capability ID: `app-permissions/delete-tool-connections-grants`.
|
||||
|
||||
API: `present` — `DELETE /api/tool-connections/{connectionId}/grants/{grantId}`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -65,8 +57,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-tool-connections-grants-delegations`
|
||||
|
||||
Capability ID: `app-permissions/post-tool-connections-grants-delegations`.
|
||||
|
||||
API: `present` — `POST /api/tool-connections/{connectionId}/grants/{grantId}/delegations`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_profiles` and `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -76,8 +66,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability.
|
||||
|
||||
### `delete-tool-connections-grants-delegations`
|
||||
|
||||
Capability ID: `app-permissions/delete-tool-connections-grants-delegations`.
|
||||
|
||||
API: `present` — `DELETE /api/tool-connections/{connectionId}/grants/{grantId}/delegations/{delegationId}`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_profiles` and `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -87,8 +75,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability.
|
||||
|
||||
### `get-tool-connections-installs`
|
||||
|
||||
Capability ID: `app-permissions/get-tool-connections-installs`.
|
||||
|
||||
API: `present` — `GET /api/tool-connections/{connectionId}/installs`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -98,8 +84,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `put-tool-connections-installs`
|
||||
|
||||
Capability ID: `app-permissions/put-tool-connections-installs`.
|
||||
|
||||
API: `present` — `PUT /api/tool-connections/{connectionId}/installs`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_profiles` and `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -114,8 +98,6 @@ Review: `operation-reviewed`.
|
||||
|
||||
### `get-companies-tools-trust-rules`
|
||||
|
||||
Capability ID: `app-permissions/get-companies-tools-trust-rules`.
|
||||
|
||||
API: `present` — `GET /api/companies/{companyId}/tools/trust-rules`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -125,8 +107,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-companies-tools-policies`
|
||||
|
||||
Capability ID: `app-permissions/get-companies-tools-policies`.
|
||||
|
||||
API: `present` — `GET /api/companies/{companyId}/tools/policies`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -136,8 +116,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-companies-tools-policies-reorder`
|
||||
|
||||
Capability ID: `app-permissions/post-companies-tools-policies-reorder`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/tools/policies/reorder`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -147,8 +125,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-companies-tools-policies`
|
||||
|
||||
Capability ID: `app-permissions/post-companies-tools-policies`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/tools/policies`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -158,8 +134,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-companies-tools-policies-duplicate`
|
||||
|
||||
Capability ID: `app-permissions/post-companies-tools-policies-duplicate`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/tools/policies/{policyId}/duplicate`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -169,8 +143,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `patch-companies-tools-policies`
|
||||
|
||||
Capability ID: `app-permissions/patch-companies-tools-policies`.
|
||||
|
||||
API: `present` — `PATCH /api/companies/{companyId}/tools/policies/{policyId}`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -180,8 +152,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `delete-companies-tools-policies`
|
||||
|
||||
Capability ID: `app-permissions/delete-companies-tools-policies`.
|
||||
|
||||
API: `present` — `DELETE /api/companies/{companyId}/tools/policies/{policyId}`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -191,8 +161,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-companies-tools-trust-rules-revoke`
|
||||
|
||||
Capability ID: `app-permissions/post-companies-tools-trust-rules-revoke`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/tools/trust-rules/{policyId}/revoke`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -202,8 +170,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-companies-tools-policy-test`
|
||||
|
||||
Capability ID: `app-permissions/post-companies-tools-policy-test`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/tools/policy/test`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -218,8 +184,6 @@ Review: `operation-reviewed`.
|
||||
|
||||
### `post-tool-connections-catalog-refresh`
|
||||
|
||||
Capability ID: `app-permissions/post-tool-connections-catalog-refresh`.
|
||||
|
||||
API: `present` — `POST /api/tool-connections/{connectionId}/catalog/refresh`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -229,8 +193,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-tool-connections-catalog`
|
||||
|
||||
Capability ID: `app-permissions/get-tool-connections-catalog`.
|
||||
|
||||
API: `present` — `GET /api/tool-connections/{connectionId}/catalog`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -240,8 +202,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-tool-profiles-new-tools`
|
||||
|
||||
Capability ID: `app-permissions/get-tool-profiles-new-tools`.
|
||||
|
||||
API: `present` — `GET /api/tool-profiles/{profileId}/new-tools`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -251,8 +211,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-tool-profiles-new-tools-review`
|
||||
|
||||
Capability ID: `app-permissions/post-tool-profiles-new-tools-review`.
|
||||
|
||||
API: `present` — `POST /api/tool-profiles/{profileId}/new-tools/review`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -267,8 +225,6 @@ Review: `operation-reviewed`.
|
||||
|
||||
### `get-companies-tools-action-requests`
|
||||
|
||||
Capability ID: `app-permissions/get-companies-tools-action-requests`.
|
||||
|
||||
API: `present` — `GET /api/companies/{companyId}/tools/action-requests`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -278,8 +234,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-tool-connections-test-agents`
|
||||
|
||||
Capability ID: `app-permissions/get-tool-connections-test-agents`.
|
||||
|
||||
API: `present` — `GET /api/tool-connections/{connectionId}/test-agents`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -289,8 +243,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-tool-connections-test-agents-access`
|
||||
|
||||
Capability ID: `app-permissions/get-tool-connections-test-agents-access`.
|
||||
|
||||
API: `present` — `GET /api/tool-connections/{connectionId}/test-agents/{agentId}/access`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -300,8 +252,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-tool-connections-test-calls`
|
||||
|
||||
Capability ID: `app-permissions/post-tool-connections-test-calls`.
|
||||
|
||||
API: `present` — `POST /api/tool-connections/{connectionId}/test-calls`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:use`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -311,8 +261,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-tool-connections-test-calls`
|
||||
|
||||
Capability ID: `app-permissions/get-tool-connections-test-calls`.
|
||||
|
||||
API: `present` — `GET /api/tool-connections/{connectionId}/test-calls/{actionRequestId}`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:use`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -322,8 +270,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-companies-tools-action-requests-trust-rule`
|
||||
|
||||
Capability ID: `app-permissions/post-companies-tools-action-requests-trust-rule`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/tools/action-requests/{actionRequestId}/trust-rule`; JSON REST.
|
||||
Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result.
|
||||
Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent.
|
||||
@@ -333,8 +279,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o
|
||||
|
||||
### `post-tool-gateway-action-requests-approve`
|
||||
|
||||
Capability ID: `app-permissions/post-tool-gateway-action-requests-approve`.
|
||||
|
||||
API: `present` — `POST /api/tool-gateway/action-requests/{id}/approve`; JSON REST.
|
||||
Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result.
|
||||
Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent.
|
||||
@@ -344,8 +288,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o
|
||||
|
||||
### `post-tool-gateway-action-requests-decline`
|
||||
|
||||
Capability ID: `app-permissions/post-tool-gateway-action-requests-decline`.
|
||||
|
||||
API: `present` — `POST /api/tool-gateway/action-requests/{id}/decline`; JSON REST.
|
||||
Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result.
|
||||
Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent.
|
||||
@@ -360,8 +302,6 @@ Review: `operation-reviewed`.
|
||||
|
||||
### `get-companies-tools-apps-attention`
|
||||
|
||||
Capability ID: `app-permissions/get-companies-tools-apps-attention`.
|
||||
|
||||
API: `present` — `GET /api/companies/{companyId}/tools/apps/attention`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -371,8 +311,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-companies-tools-applications`
|
||||
|
||||
Capability ID: `app-permissions/get-companies-tools-applications`.
|
||||
|
||||
API: `present` — `GET /api/companies/{companyId}/tools/applications`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -382,8 +320,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-companies-tools-applications`
|
||||
|
||||
Capability ID: `app-permissions/post-companies-tools-applications`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/tools/applications`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -393,8 +329,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `patch-tool-applications`
|
||||
|
||||
Capability ID: `app-permissions/patch-tool-applications`.
|
||||
|
||||
API: `present` — `PATCH /api/tool-applications/{applicationId}`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -404,8 +338,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `delete-tool-applications`
|
||||
|
||||
Capability ID: `app-permissions/delete-tool-applications`.
|
||||
|
||||
API: `present` — `DELETE /api/tool-applications/{applicationId}`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -415,8 +347,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-companies-tools-connections`
|
||||
|
||||
Capability ID: `app-permissions/get-companies-tools-connections`.
|
||||
|
||||
API: `present` — `GET /api/companies/{companyId}/tools/connections`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -426,8 +356,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability.
|
||||
|
||||
### `get-tool-connections`
|
||||
|
||||
Capability ID: `app-permissions/get-tool-connections`.
|
||||
|
||||
API: `present` — `GET /api/tool-connections/{connectionId}`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -437,8 +365,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability.
|
||||
|
||||
### `post-tool-connections-railway-ssh`
|
||||
|
||||
Capability ID: `app-permissions/post-tool-connections-railway-ssh`.
|
||||
|
||||
API: `present` — `POST /api/tool-connections/{connectionId}/railway/ssh`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -448,8 +374,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-tool-connections-usage`
|
||||
|
||||
Capability ID: `app-permissions/get-tool-connections-usage`.
|
||||
|
||||
API: `present` — `GET /api/tool-connections/{connectionId}/usage`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -459,8 +383,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-tool-connections-aggregator-apps`
|
||||
|
||||
Capability ID: `app-permissions/get-tool-connections-aggregator-apps`.
|
||||
|
||||
API: `present` — `GET /api/tool-connections/{connectionId}/aggregator/apps`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -470,8 +392,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-tool-connections-aggregator-apps-sync`
|
||||
|
||||
Capability ID: `app-permissions/post-tool-connections-aggregator-apps-sync`.
|
||||
|
||||
API: `present` — `POST /api/tool-connections/{connectionId}/aggregator/apps/sync`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -481,8 +401,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-tool-connections-aggregator-apps-refresh`
|
||||
|
||||
Capability ID: `app-permissions/post-tool-connections-aggregator-apps-refresh`.
|
||||
|
||||
API: `present` — `POST /api/tool-connections/{connectionId}/aggregator/apps/refresh`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -492,8 +410,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `put-tool-connections-aggregator-discovery`
|
||||
|
||||
Capability ID: `app-permissions/put-tool-connections-aggregator-discovery`.
|
||||
|
||||
API: `present` — `PUT /api/tool-connections/{connectionId}/aggregator/discovery`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -503,8 +419,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-tool-connections-composio-apps`
|
||||
|
||||
Capability ID: `app-permissions/get-tool-connections-composio-apps`.
|
||||
|
||||
API: `present` — `GET /api/tool-connections/{connectionId}/composio/apps`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -514,8 +428,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-tool-connections-composio-apps-sync`
|
||||
|
||||
Capability ID: `app-permissions/post-tool-connections-composio-apps-sync`.
|
||||
|
||||
API: `present` — `POST /api/tool-connections/{connectionId}/composio/apps/sync`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -525,8 +437,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-tool-connections-composio-apps-refresh`
|
||||
|
||||
Capability ID: `app-permissions/post-tool-connections-composio-apps-refresh`.
|
||||
|
||||
API: `present` — `POST /api/tool-connections/{connectionId}/composio/apps/refresh`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -536,8 +446,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-tool-connections-composio-apps-accounts`
|
||||
|
||||
Capability ID: `app-permissions/post-tool-connections-composio-apps-accounts`.
|
||||
|
||||
API: `present` — `POST /api/tool-connections/{connectionId}/composio/apps/{toolkit}/accounts`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -547,8 +455,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-tool-connections-composio-apps-setup`
|
||||
|
||||
Capability ID: `app-permissions/post-tool-connections-composio-apps-setup`.
|
||||
|
||||
API: `present` — `POST /api/tool-connections/{connectionId}/composio/apps/{toolkit}/setup`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -558,8 +464,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `patch-tool-connections`
|
||||
|
||||
Capability ID: `app-permissions/patch-tool-connections`.
|
||||
|
||||
API: `present` — `PATCH /api/tool-connections/{connectionId}`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -569,8 +473,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability.
|
||||
|
||||
### `delete-tool-connections`
|
||||
|
||||
Capability ID: `app-permissions/delete-tool-connections`.
|
||||
|
||||
API: `present` — `DELETE /api/tool-connections/{connectionId}`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -580,8 +482,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-tool-connections-health-check`
|
||||
|
||||
Capability ID: `app-permissions/post-tool-connections-health-check`.
|
||||
|
||||
API: `present` — `POST /api/tool-connections/{connectionId}/health-check`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -591,8 +491,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-tool-connections-activity`
|
||||
|
||||
Capability ID: `app-permissions/get-tool-connections-activity`.
|
||||
|
||||
API: `present` — `GET /api/tool-connections/{connectionId}/activity`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:view_audit`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
|
||||
@@ -21,8 +21,6 @@ Review: `operation-reviewed`.
|
||||
|
||||
### `get-companies-chat-endpoints`
|
||||
|
||||
Capability ID: `chat-channels/get-companies-chat-endpoints`.
|
||||
|
||||
API: `present` — `GET /api/companies/{companyId}/chat-endpoints`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -32,8 +30,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-companies-chat-endpoints`
|
||||
|
||||
Capability ID: `chat-channels/post-companies-chat-endpoints`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/chat-endpoints`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -43,8 +39,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability.
|
||||
|
||||
### `get-chat-endpoints`
|
||||
|
||||
Capability ID: `chat-channels/get-chat-endpoints`.
|
||||
|
||||
API: `present` — `GET /api/chat-endpoints/{endpointId}`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -54,8 +48,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability.
|
||||
|
||||
### `get-companies-chat-slack-setup-options`
|
||||
|
||||
Capability ID: `chat-channels/get-companies-chat-slack-setup-options`.
|
||||
|
||||
API: `present` — `GET /api/companies/{companyId}/chat-slack/setup-options`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -65,8 +57,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-chat-endpoints-slack-managed-authorize`
|
||||
|
||||
Capability ID: `chat-channels/post-chat-endpoints-slack-managed-authorize`.
|
||||
|
||||
API: `present` — `POST /api/chat-endpoints/{endpointId}/slack/managed/authorize`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -76,8 +66,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-chat-endpoints-slack-managed-provision`
|
||||
|
||||
Capability ID: `chat-channels/post-chat-endpoints-slack-managed-provision`.
|
||||
|
||||
API: `present` — `POST /api/chat-endpoints/{endpointId}/slack/managed/provision`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -87,8 +75,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `delete-companies-chat-slack-manager-grants`
|
||||
|
||||
Capability ID: `chat-channels/delete-companies-chat-slack-manager-grants`.
|
||||
|
||||
API: `present` — `DELETE /api/companies/{companyId}/chat-slack/manager-grants/{grantId}`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -98,8 +84,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-chat-slack-managed-oauth-callback`
|
||||
|
||||
Capability ID: `chat-channels/get-chat-slack-managed-oauth-callback`.
|
||||
|
||||
API: `present` — `GET /api/chat-slack/managed/oauth/callback`; browser/provider/MCP protocol.
|
||||
Agent access: `restricted` — browser authentication return.
|
||||
Policy: Provider state/signature or gateway-token verification, company and resource binding; browser returns require the configuring human. Agent-issued durable gateway tokens retain both issuer and responsible-user authority.
|
||||
@@ -109,8 +93,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o
|
||||
|
||||
### `post-chat-endpoints-slack-registration`
|
||||
|
||||
Capability ID: `chat-channels/post-chat-endpoints-slack-registration`.
|
||||
|
||||
API: `present` — `POST /api/chat-endpoints/{endpointId}/slack/registration`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -120,8 +102,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-chat-endpoints-slack-install`
|
||||
|
||||
Capability ID: `chat-channels/post-chat-endpoints-slack-install`.
|
||||
|
||||
API: `present` — `POST /api/chat-endpoints/{endpointId}/slack/install`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -131,8 +111,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-chat-slack-oauth-callback`
|
||||
|
||||
Capability ID: `chat-channels/get-chat-slack-oauth-callback`.
|
||||
|
||||
API: `present` — `GET /api/chat-slack/oauth/callback`; browser/provider/MCP protocol.
|
||||
Agent access: `restricted` — browser authentication return.
|
||||
Policy: Provider state/signature or gateway-token verification, company and resource binding; browser returns require the configuring human. Agent-issued durable gateway tokens retain both issuer and responsible-user authority.
|
||||
@@ -142,8 +120,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o
|
||||
|
||||
### `get-chat-endpoints-github-configuration`
|
||||
|
||||
Capability ID: `chat-channels/get-chat-endpoints-github-configuration`.
|
||||
|
||||
API: `present` — `GET /api/chat-endpoints/{endpointId}/github/configuration`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -153,8 +129,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability.
|
||||
|
||||
### `put-chat-endpoints-github-configuration`
|
||||
|
||||
Capability ID: `chat-channels/put-chat-endpoints-github-configuration`.
|
||||
|
||||
API: `present` — `PUT /api/chat-endpoints/{endpointId}/github/configuration`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -164,8 +138,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability.
|
||||
|
||||
### `post-chat-endpoints-github-verify`
|
||||
|
||||
Capability ID: `chat-channels/post-chat-endpoints-github-verify`.
|
||||
|
||||
API: `present` — `POST /api/chat-endpoints/{endpointId}/github/verify`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -175,8 +147,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability.
|
||||
|
||||
### `put-chat-endpoints-github-progress`
|
||||
|
||||
Capability ID: `chat-channels/put-chat-endpoints-github-progress`.
|
||||
|
||||
API: `present` — `PUT /api/chat-endpoints/{endpointId}/github/progress`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -186,8 +156,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-chat-endpoints-github-personal-connections`
|
||||
|
||||
Capability ID: `chat-channels/get-chat-endpoints-github-personal-connections`.
|
||||
|
||||
API: `present` — `GET /api/chat-endpoints/{endpointId}/github/personal-connections`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -197,8 +165,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-chat-endpoints-github-people-lookup`
|
||||
|
||||
Capability ID: `chat-channels/post-chat-endpoints-github-people-lookup`.
|
||||
|
||||
API: `present` — `POST /api/chat-endpoints/{endpointId}/github/people/lookup`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -208,8 +174,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-chat-endpoints-github-registration`
|
||||
|
||||
Capability ID: `chat-channels/post-chat-endpoints-github-registration`.
|
||||
|
||||
API: `present` — `POST /api/chat-endpoints/{endpointId}/github/registration`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -219,8 +183,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability.
|
||||
|
||||
### `post-chat-endpoints-github-registration-restart`
|
||||
|
||||
Capability ID: `chat-channels/post-chat-endpoints-github-registration-restart`.
|
||||
|
||||
API: `present` — `POST /api/chat-endpoints/{endpointId}/github/registration/restart`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -230,8 +192,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `put-chat-endpoints-github-draft`
|
||||
|
||||
Capability ID: `chat-channels/put-chat-endpoints-github-draft`.
|
||||
|
||||
API: `present` — `PUT /api/chat-endpoints/{endpointId}/github/draft`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -241,8 +201,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-chat-endpoints-github-setup`
|
||||
|
||||
Capability ID: `chat-channels/post-chat-endpoints-github-setup`.
|
||||
|
||||
API: `present` — `POST /api/chat-endpoints/{endpointId}/github/setup`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -252,8 +210,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-chat-endpoints-github-app`
|
||||
|
||||
Capability ID: `chat-channels/post-chat-endpoints-github-app`.
|
||||
|
||||
API: `present` — `POST /api/chat-endpoints/{endpointId}/github/app`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -263,8 +219,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability.
|
||||
|
||||
### `post-chat-endpoints-github-repositories-refresh`
|
||||
|
||||
Capability ID: `chat-channels/post-chat-endpoints-github-repositories-refresh`.
|
||||
|
||||
API: `present` — `POST /api/chat-endpoints/{endpointId}/github/repositories/refresh`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -274,8 +228,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability.
|
||||
|
||||
### `get-chat-endpoints-github-repositories`
|
||||
|
||||
Capability ID: `chat-channels/get-chat-endpoints-github-repositories`.
|
||||
|
||||
API: `present` — `GET /api/chat-endpoints/{endpointId}/github/repositories`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -285,8 +237,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `put-chat-endpoints-github-repositories-access`
|
||||
|
||||
Capability ID: `chat-channels/put-chat-endpoints-github-repositories-access`.
|
||||
|
||||
API: `present` — `PUT /api/chat-endpoints/{endpointId}/github/repositories/access`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -296,8 +246,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `patch-chat-endpoints`
|
||||
|
||||
Capability ID: `chat-channels/patch-chat-endpoints`.
|
||||
|
||||
API: `present` — `PATCH /api/chat-endpoints/{endpointId}`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -307,8 +255,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability.
|
||||
|
||||
### `post-chat-endpoints-photon-inspect`
|
||||
|
||||
Capability ID: `chat-channels/post-chat-endpoints-photon-inspect`.
|
||||
|
||||
API: `present` — `POST /api/chat-endpoints/{endpointId}/photon/inspect`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -318,8 +264,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-chat-endpoints-setup`
|
||||
|
||||
Capability ID: `chat-channels/post-chat-endpoints-setup`.
|
||||
|
||||
API: `present` — `POST /api/chat-endpoints/{endpointId}/setup`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -329,8 +273,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability.
|
||||
|
||||
### `post-chat-endpoints-setup-secret`
|
||||
|
||||
Capability ID: `chat-channels/post-chat-endpoints-setup-secret`.
|
||||
|
||||
API: `present` — `POST /api/chat-endpoints/{endpointId}/setup-secret`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -340,8 +282,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-chat-endpoints-resources`
|
||||
|
||||
Capability ID: `chat-channels/get-chat-endpoints-resources`.
|
||||
|
||||
API: `present` — `GET /api/chat-endpoints/{endpointId}/resources`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -351,8 +291,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `put-chat-endpoints-resources`
|
||||
|
||||
Capability ID: `chat-channels/put-chat-endpoints-resources`.
|
||||
|
||||
API: `present` — `PUT /api/chat-endpoints/{endpointId}/resources`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -362,8 +300,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-companies-email-connections`
|
||||
|
||||
Capability ID: `chat-channels/get-companies-email-connections`.
|
||||
|
||||
API: `present` — `GET /api/companies/{companyId}/email/connections`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -373,8 +309,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability.
|
||||
|
||||
### `post-companies-email-connections`
|
||||
|
||||
Capability ID: `chat-channels/post-companies-email-connections`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/email/connections`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -384,8 +318,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability.
|
||||
|
||||
### `post-companies-email-connections-inspect`
|
||||
|
||||
Capability ID: `chat-channels/post-companies-email-connections-inspect`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/email/connections/{connectionId}/inspect`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -395,8 +327,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-companies-email-connections-check-address`
|
||||
|
||||
Capability ID: `chat-channels/post-companies-email-connections-check-address`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/email/connections/{connectionId}/check-address`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -406,8 +336,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-companies-email-inboxes`
|
||||
|
||||
Capability ID: `chat-channels/get-companies-email-inboxes`.
|
||||
|
||||
API: `present` — `GET /api/companies/{companyId}/email/inboxes`; JSON REST.
|
||||
Agent access: `available` — existing REST/native runtime tool or scoped gateway client, as documented by the linked route.
|
||||
Policy: Existing run-bound tool, scoped credential lease, execution policy, or assigned-email-agent checks; connection-management grants do not bypass these controls.
|
||||
@@ -417,8 +345,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-companies-email-inspect`
|
||||
|
||||
Capability ID: `chat-channels/post-companies-email-inspect`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/email/inspect`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -428,8 +354,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-companies-email-inboxes`
|
||||
|
||||
Capability ID: `chat-channels/post-companies-email-inboxes`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/email/inboxes`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -439,8 +363,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-companies-email-deliveries`
|
||||
|
||||
Capability ID: `chat-channels/get-companies-email-deliveries`.
|
||||
|
||||
API: `present` — `GET /api/companies/{companyId}/email/deliveries/{publicationId}`; JSON REST.
|
||||
Agent access: `available` — existing REST/native runtime tool or scoped gateway client, as documented by the linked route.
|
||||
Policy: Existing run-bound tool, scoped credential lease, execution policy, or assigned-email-agent checks; connection-management grants do not bypass these controls.
|
||||
@@ -455,8 +377,6 @@ Review: `operation-reviewed`.
|
||||
|
||||
### `post-chat-endpoints-github-identity`
|
||||
|
||||
Capability ID: `chat-channels/post-chat-endpoints-github-identity`.
|
||||
|
||||
API: `present` — `POST /api/chat-endpoints/{endpointId}/github/identity`; JSON REST.
|
||||
Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result.
|
||||
Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent.
|
||||
@@ -466,8 +386,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o
|
||||
|
||||
### `post-chat-endpoints-github-identity-start`
|
||||
|
||||
Capability ID: `chat-channels/post-chat-endpoints-github-identity-start`.
|
||||
|
||||
API: `present` — `POST /api/chat-endpoints/{endpointId}/github/identity/start`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -477,8 +395,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability.
|
||||
|
||||
### `post-chat-endpoints-github-identity-confirm`
|
||||
|
||||
Capability ID: `chat-channels/post-chat-endpoints-github-identity-confirm`.
|
||||
|
||||
API: `present` — `POST /api/chat-endpoints/{endpointId}/github/identity/confirm`; JSON REST.
|
||||
Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result.
|
||||
Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent.
|
||||
@@ -488,8 +404,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o
|
||||
|
||||
### `get-chat-endpoints-principals`
|
||||
|
||||
Capability ID: `chat-channels/get-chat-endpoints-principals`.
|
||||
|
||||
API: `present` — `GET /api/chat-endpoints/{endpointId}/principals`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -499,8 +413,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-chat-endpoints-principals-link-intent`
|
||||
|
||||
Capability ID: `chat-channels/post-chat-endpoints-principals-link-intent`.
|
||||
|
||||
API: `present` — `POST /api/chat-endpoints/{endpointId}/principals/{principalId}/link-intent`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -510,8 +422,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `delete-chat-endpoints-principals-link`
|
||||
|
||||
Capability ID: `chat-channels/delete-chat-endpoints-principals-link`.
|
||||
|
||||
API: `present` — `DELETE /api/chat-endpoints/{endpointId}/principals/{principalId}/link`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -521,8 +431,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-chat-identity-links-confirm`
|
||||
|
||||
Capability ID: `chat-channels/post-chat-identity-links-confirm`.
|
||||
|
||||
API: `present` — `POST /api/chat-identity-links/confirm`; JSON REST.
|
||||
Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result.
|
||||
Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent.
|
||||
@@ -532,8 +440,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o
|
||||
|
||||
### `post-chat-identity-links-request-access`
|
||||
|
||||
Capability ID: `chat-channels/post-chat-identity-links-request-access`.
|
||||
|
||||
API: `present` — `POST /api/chat-identity-links/request-access`; JSON REST.
|
||||
Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result.
|
||||
Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent.
|
||||
@@ -543,8 +449,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o
|
||||
|
||||
### `get-chat-identity-links-preview`
|
||||
|
||||
Capability ID: `chat-channels/get-chat-identity-links-preview`.
|
||||
|
||||
API: `present` — `GET /api/chat-identity-links/preview`; JSON REST.
|
||||
Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result.
|
||||
Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent.
|
||||
@@ -554,8 +458,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o
|
||||
|
||||
### `get-api-chat-github-manifest-callback`
|
||||
|
||||
Capability ID: `chat-channels/get-api-chat-github-manifest-callback`.
|
||||
|
||||
API: `present` — `GET /api/chat-github/manifest/callback`; browser/provider/MCP protocol.
|
||||
Agent access: `restricted` — browser authentication return.
|
||||
Policy: Provider state/signature or gateway-token verification, company and resource binding; browser returns require the configuring human. Agent-issued durable gateway tokens retain both issuer and responsible-user authority.
|
||||
@@ -565,8 +467,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o
|
||||
|
||||
### `get-api-chat-github-cloud-callback`
|
||||
|
||||
Capability ID: `chat-channels/get-api-chat-github-cloud-callback`.
|
||||
|
||||
API: `present` — `GET /api/chat-github/cloud/callback`; browser/provider/MCP protocol.
|
||||
Agent access: `restricted` — browser authentication return.
|
||||
Policy: Provider state/signature or gateway-token verification, company and resource binding; browser returns require the configuring human. Agent-issued durable gateway tokens retain both issuer and responsible-user authority.
|
||||
@@ -576,8 +476,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o
|
||||
|
||||
### `get-api-chat-github-identity-callback`
|
||||
|
||||
Capability ID: `chat-channels/get-api-chat-github-identity-callback`.
|
||||
|
||||
API: `present` — `GET /api/chat-github/identity/callback`; browser/provider/MCP protocol.
|
||||
Agent access: `restricted` — browser authentication return.
|
||||
Policy: Provider state/signature or gateway-token verification, company and resource binding; browser returns require the configuring human. Agent-issued durable gateway tokens retain both issuer and responsible-user authority.
|
||||
@@ -592,8 +490,6 @@ Review: `operation-reviewed`.
|
||||
|
||||
### `get-chat-endpoints-github-review-detail`
|
||||
|
||||
Capability ID: `chat-channels/get-chat-endpoints-github-review-detail`.
|
||||
|
||||
API: `present` — `GET /api/chat-endpoints/{endpointId}/github/reviews/{reviewId}`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -603,8 +499,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-chat-endpoints-github-reviews`
|
||||
|
||||
Capability ID: `chat-channels/get-chat-endpoints-github-reviews`.
|
||||
|
||||
API: `present` — `GET /api/chat-endpoints/{endpointId}/github/reviews`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -614,8 +508,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-chat-endpoints-conversations`
|
||||
|
||||
Capability ID: `chat-channels/get-chat-endpoints-conversations`.
|
||||
|
||||
API: `present` — `GET /api/chat-endpoints/{endpointId}/conversations`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -625,8 +517,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-chat-endpoints-conversations-publications`
|
||||
|
||||
Capability ID: `chat-channels/post-chat-endpoints-conversations-publications`.
|
||||
|
||||
API: `present` — `POST /api/chat-endpoints/{endpointId}/conversations/{conversationId}/publications`; JSON REST.
|
||||
Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result.
|
||||
Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent.
|
||||
@@ -636,8 +526,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o
|
||||
|
||||
### `get-chat-endpoints-conversations-publications-status`
|
||||
|
||||
Capability ID: `chat-channels/get-chat-endpoints-conversations-publications-status`.
|
||||
|
||||
API: `present` — `GET /api/chat-endpoints/{endpointId}/conversations/{conversationId}/publications/{publicationId}/status`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:use`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -647,8 +535,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-issues-chat-binding`
|
||||
|
||||
Capability ID: `chat-channels/get-issues-chat-binding`.
|
||||
|
||||
API: `present` — `GET /api/issues/{issueId}/chat-binding`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`, responsible-user ceiling, task privacy, endpoint resource scope and target-agent visibility.
|
||||
@@ -658,8 +544,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-api-chat-webhooks`
|
||||
|
||||
Capability ID: `chat-channels/post-api-chat-webhooks`.
|
||||
|
||||
API: `present` — `POST /api/chat-webhooks/{publicId}/{provider}`; provider webhook ingress.
|
||||
Agent access: `not-applicable` — provider-signed inbound events; agent keys and gateway tokens cannot authenticate this route.
|
||||
Policy: The provider verifies the payload signature and binds the endpoint/company. The request has no agent principal.
|
||||
@@ -669,8 +553,6 @@ Gaps: Provider ingress has no agent invocation path. Provider signature validati
|
||||
|
||||
### `post-companies-email-send`
|
||||
|
||||
Capability ID: `chat-channels/post-companies-email-send`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/email/send`; JSON REST.
|
||||
Agent access: `available` — existing REST/native runtime tool or scoped gateway client, as documented by the linked route.
|
||||
Policy: Existing run-bound tool, scoped credential lease, execution policy, or assigned-email-agent checks; connection-management grants do not bypass these controls.
|
||||
@@ -680,8 +562,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-companies-email-tasks`
|
||||
|
||||
Capability ID: `chat-channels/get-companies-email-tasks`.
|
||||
|
||||
API: `present` — `GET /api/companies/{companyId}/email/tasks/{issueId}`; JSON REST.
|
||||
Agent access: `available` — existing REST/native runtime tool or scoped gateway client, as documented by the linked route.
|
||||
Policy: Existing run-bound tool, scoped credential lease, execution policy, or assigned-email-agent checks; connection-management grants do not bypass these controls.
|
||||
@@ -691,8 +571,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-api-chat-webhooks-agentmail`
|
||||
|
||||
Capability ID: `chat-channels/post-api-chat-webhooks-agentmail`.
|
||||
|
||||
API: `present` — `POST /api/chat-webhooks/agentmail/{publicId}`; provider webhook ingress.
|
||||
Agent access: `not-applicable` — provider-signed inbound events; agent keys and gateway tokens cannot authenticate this route.
|
||||
Policy: The provider verifies the payload signature and binds the endpoint/company. The request has no agent principal.
|
||||
@@ -725,8 +603,6 @@ Gaps: Multipart upload is not a JSON native API call. Live chat file delivery re
|
||||
|
||||
### `post-chat-endpoints-publications-replay`
|
||||
|
||||
Capability ID: `chat-channels/post-chat-endpoints-publications-replay`.
|
||||
|
||||
API: `present` — `POST /api/chat-endpoints/{endpointId}/publications/{publicationId}/replay`; JSON REST.
|
||||
Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result.
|
||||
Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent.
|
||||
@@ -736,8 +612,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o
|
||||
|
||||
### `post-chat-endpoints-publications-resolve`
|
||||
|
||||
Capability ID: `chat-channels/post-chat-endpoints-publications-resolve`.
|
||||
|
||||
API: `present` — `POST /api/chat-endpoints/{endpointId}/publications/{publicationId}/resolve`; JSON REST.
|
||||
Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result.
|
||||
Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent.
|
||||
@@ -747,8 +621,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o
|
||||
|
||||
### `post-chat-endpoints-actions-resolve`
|
||||
|
||||
Capability ID: `chat-channels/post-chat-endpoints-actions-resolve`.
|
||||
|
||||
API: `present` — `POST /api/chat-endpoints/{endpointId}/actions/{actionId}/resolve`; JSON REST.
|
||||
Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result.
|
||||
Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent.
|
||||
@@ -758,8 +630,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o
|
||||
|
||||
### `post-companies-email-deliveries-resolve`
|
||||
|
||||
Capability ID: `chat-channels/post-companies-email-deliveries-resolve`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/email/deliveries/{publicationId}/resolve`; JSON REST.
|
||||
Agent access: `restricted` — human connection manager records the outcome of an uncertain external delivery. Agents use normal governed send/status operations.
|
||||
Policy: Existing run-bound tool, scoped credential lease, execution policy, or assigned-email-agent checks; connection-management grants do not bypass these controls.
|
||||
@@ -774,8 +644,6 @@ Review: `operation-reviewed`.
|
||||
|
||||
### `post-chat-endpoints-slack-test-message`
|
||||
|
||||
Capability ID: `chat-channels/post-chat-endpoints-slack-test-message`.
|
||||
|
||||
API: `present` — `POST /api/chat-endpoints/{endpointId}/slack/test-message`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:use`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -785,8 +653,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability.
|
||||
|
||||
### `post-chat-endpoints-slack-resume`
|
||||
|
||||
Capability ID: `chat-channels/post-chat-endpoints-slack-resume`.
|
||||
|
||||
API: `present` — `POST /api/chat-endpoints/{endpointId}/slack/resume`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -796,8 +662,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-chat-endpoints-test`
|
||||
|
||||
Capability ID: `chat-channels/post-chat-endpoints-test`.
|
||||
|
||||
API: `present` — `POST /api/chat-endpoints/{endpointId}/test`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -807,8 +671,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-chat-endpoints-finish`
|
||||
|
||||
Capability ID: `chat-channels/post-chat-endpoints-finish`.
|
||||
|
||||
API: `present` — `POST /api/chat-endpoints/{endpointId}/finish`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -818,8 +680,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-chat-endpoints-test-status`
|
||||
|
||||
Capability ID: `chat-channels/get-chat-endpoints-test-status`.
|
||||
|
||||
API: `present` — `GET /api/chat-endpoints/{endpointId}/test-status`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -829,8 +689,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-chat-endpoints-activity`
|
||||
|
||||
Capability ID: `chat-channels/get-chat-endpoints-activity`.
|
||||
|
||||
API: `present` — `GET /api/chat-endpoints/{endpointId}/activity`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:view_audit`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -840,8 +698,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-chat-endpoints-deliveries-replay`
|
||||
|
||||
Capability ID: `chat-channels/post-chat-endpoints-deliveries-replay`.
|
||||
|
||||
API: `present` — `POST /api/chat-endpoints/{endpointId}/deliveries/{deliveryId}/replay`; JSON REST.
|
||||
Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result.
|
||||
Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent.
|
||||
@@ -851,8 +707,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o
|
||||
|
||||
### `post-email-inboxes-control`
|
||||
|
||||
Capability ID: `chat-channels/post-email-inboxes-control`.
|
||||
|
||||
API: `present` — `POST /api/email/inboxes/{endpointId}/control`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -862,8 +716,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-email-inboxes-reconnect`
|
||||
|
||||
Capability ID: `chat-channels/post-email-inboxes-reconnect`.
|
||||
|
||||
API: `present` — `POST /api/email/inboxes/{endpointId}/reconnect`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
|
||||
@@ -32,8 +32,6 @@ Review: `operation-reviewed`.
|
||||
|
||||
### `get-companies-tools-gallery`
|
||||
|
||||
Capability ID: `connection-setup/get-companies-tools-gallery`.
|
||||
|
||||
API: `present` — `GET /api/companies/{companyId}/tools/gallery`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -43,8 +41,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-companies-tools-apps-preflight`
|
||||
|
||||
Capability ID: `connection-setup/get-companies-tools-apps-preflight`.
|
||||
|
||||
API: `present` — `GET /api/companies/{companyId}/tools/apps/{galleryKey}/preflight`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -54,8 +50,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-companies-tools-examples`
|
||||
|
||||
Capability ID: `connection-setup/get-companies-tools-examples`.
|
||||
|
||||
API: `present` — `GET /api/companies/{companyId}/tools/examples`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -65,8 +59,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-companies-tools-examples-install`
|
||||
|
||||
Capability ID: `connection-setup/post-companies-tools-examples-install`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/tools/examples/{id}/install`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -76,8 +68,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-companies-tools-examples-smoke`
|
||||
|
||||
Capability ID: `connection-setup/post-companies-tools-examples-smoke`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/tools/examples/{id}/smoke`; JSON REST.
|
||||
Agent access: `operator-only` — existing human setup or approval surface; agent can identify the saved setup and inspect the result.
|
||||
Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent.
|
||||
@@ -87,8 +77,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o
|
||||
|
||||
### `get-companies-tools-stdio-templates`
|
||||
|
||||
Capability ID: `connection-setup/get-companies-tools-stdio-templates`.
|
||||
|
||||
API: `present` — `GET /api/companies/{companyId}/tools/stdio-templates`; JSON REST.
|
||||
Agent access: `operator-only` — a board user reads host command templates. Agents select approved provider templates through the catalog.
|
||||
Policy: board actor and `tools:admin`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -98,8 +86,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o
|
||||
|
||||
### `post-companies-tools-stdio-templates`
|
||||
|
||||
Capability ID: `connection-setup/post-companies-tools-stdio-templates`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/tools/stdio-templates`; JSON REST.
|
||||
Agent access: `operator-only` — existing human setup or approval surface; agent can identify the saved setup and inspect the result.
|
||||
Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent.
|
||||
@@ -109,8 +95,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o
|
||||
|
||||
### `post-companies-tools-stdio-templates-disable`
|
||||
|
||||
Capability ID: `connection-setup/post-companies-tools-stdio-templates-disable`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/tools/stdio-templates/{templateId}/disable`; JSON REST.
|
||||
Agent access: `operator-only` — existing human setup or approval surface; agent can identify the saved setup and inspect the result.
|
||||
Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent.
|
||||
@@ -120,8 +104,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o
|
||||
|
||||
### `post-companies-tools-mcp-import-json`
|
||||
|
||||
Capability ID: `connection-setup/post-companies-tools-mcp-import-json`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/tools/mcp/import-json`; JSON REST.
|
||||
Agent access: `operator-only` — existing human setup or approval surface; agent can identify the saved setup and inspect the result.
|
||||
Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent.
|
||||
@@ -131,8 +113,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o
|
||||
|
||||
### `post-runtime-tools-connections-search`
|
||||
|
||||
Capability ID: `connection-setup/post-runtime-tools-connections-search`.
|
||||
|
||||
API: `present` — `POST /runtime-tools/connections/search`; JSON REST.
|
||||
Agent access: `available` — existing REST/native runtime tool or scoped gateway client, as documented by the linked route.
|
||||
Policy: Existing run-bound tool, scoped credential lease, execution policy, or assigned-email-agent checks; connection-management grants do not bypass these controls.
|
||||
@@ -147,8 +127,6 @@ Review: `operation-reviewed`.
|
||||
|
||||
### `post-companies-tools-apps-connect`
|
||||
|
||||
Capability ID: `connection-setup/post-companies-tools-apps-connect`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/tools/apps/connect`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -158,8 +136,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-companies-tools-connections`
|
||||
|
||||
Capability ID: `connection-setup/post-companies-tools-connections`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/tools/connections`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -174,8 +150,6 @@ Review: `operation-reviewed`.
|
||||
|
||||
### `post-agents-me-connections-start-authorization`
|
||||
|
||||
Capability ID: `connection-setup/post-agents-me-connections-start-authorization`.
|
||||
|
||||
API: `present` — `POST /api/agents/me/connections/{connectionId}/start-authorization`; JSON REST.
|
||||
Agent access: `available` — existing REST/native runtime tool or scoped gateway client, as documented by the linked route.
|
||||
Policy: `tools:manage_connections`, an active run, and the server-derived responsible user matching the authorization subject; shared scope/trust/user checks apply. Human authentication remains a handoff, with the actual agent retained for audit. JSON authorization initiation is explicitly REST-callable.
|
||||
@@ -185,8 +159,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-agents-me-connections-token`
|
||||
|
||||
Capability ID: `connection-setup/post-agents-me-connections-token`.
|
||||
|
||||
API: `present` — `POST /api/agents/me/connections/{connectionId}/token`; JSON REST.
|
||||
Agent access: `available` — existing REST/native runtime tool or scoped gateway client, as documented by the linked route.
|
||||
Policy: Existing run-bound tool, scoped credential lease, execution policy, or assigned-email-agent checks; connection-management grants do not bypass these controls.
|
||||
@@ -196,8 +168,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-companies-tools-connections-start-authorization`
|
||||
|
||||
Capability ID: `connection-setup/post-companies-tools-connections-start-authorization`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/tools/connections/{connectionId}/start-authorization`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -207,8 +177,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-tools-oauth-start`
|
||||
|
||||
Capability ID: `connection-setup/post-tools-oauth-start`.
|
||||
|
||||
API: `present` — `POST /api/tools/oauth/{connectionId}/start`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. Returns the saved setup without issuing agent-bound OAuth state; the human browser initiates provider consent.
|
||||
@@ -218,8 +186,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability.
|
||||
|
||||
### `post-runtime-tools-github-credentials`
|
||||
|
||||
Capability ID: `connection-setup/post-runtime-tools-github-credentials`.
|
||||
|
||||
API: `present` — `POST /runtime-tools/github/credentials`; JSON REST.
|
||||
Agent access: `available` — existing REST/native runtime tool or scoped gateway client, as documented by the linked route.
|
||||
Policy: Existing run-bound tool, scoped credential lease, execution policy, or assigned-email-agent checks; connection-management grants do not bypass these controls.
|
||||
@@ -234,8 +200,6 @@ Review: `operation-reviewed`.
|
||||
|
||||
### `get-tools-oauth-cloud-connector-enrollment`
|
||||
|
||||
Capability ID: `connection-setup/get-tools-oauth-cloud-connector-enrollment`.
|
||||
|
||||
API: `present` — `GET /api/tools/oauth/cloud-connector/enrollment`; JSON REST.
|
||||
Agent access: `operator-only` — existing human setup or approval surface; agent can identify the saved setup and inspect the result.
|
||||
Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent.
|
||||
@@ -245,8 +209,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o
|
||||
|
||||
### `post-tools-oauth-cloud-connector-enrollment`
|
||||
|
||||
Capability ID: `connection-setup/post-tools-oauth-cloud-connector-enrollment`.
|
||||
|
||||
API: `present` — `POST /api/tools/oauth/cloud-connector/enrollment`; JSON REST.
|
||||
Agent access: `operator-only` — existing human setup or approval surface; agent can identify the saved setup and inspect the result.
|
||||
Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent.
|
||||
@@ -256,8 +218,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o
|
||||
|
||||
### `get-tools-oauth-cloud-connector-enrollment-callback`
|
||||
|
||||
Capability ID: `connection-setup/get-tools-oauth-cloud-connector-enrollment-callback`.
|
||||
|
||||
API: `present` — `GET /api/tools/oauth/cloud-connector/enrollment-callback`; JSON REST.
|
||||
Agent access: `operator-only` — existing human setup or approval surface; agent can identify the saved setup and inspect the result.
|
||||
Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent.
|
||||
@@ -267,8 +227,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o
|
||||
|
||||
### `get-tools-oauth-cloud-connector-callback`
|
||||
|
||||
Capability ID: `connection-setup/get-tools-oauth-cloud-connector-callback`.
|
||||
|
||||
API: `present` — `GET /api/tools/oauth/cloud-connector/callback`; browser/provider/MCP protocol.
|
||||
Agent access: `restricted` — browser authentication return.
|
||||
Policy: Provider state/signature or gateway-token verification, company and resource binding; browser returns require the configuring human. Agent-issued durable gateway tokens retain both issuer and responsible-user authority.
|
||||
@@ -278,8 +236,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o
|
||||
|
||||
### `get-tools-oauth-paperclip-id-callback`
|
||||
|
||||
Capability ID: `connection-setup/get-tools-oauth-paperclip-id-callback`.
|
||||
|
||||
API: `present` — `GET /api/tools/oauth/paperclip-id/callback`; browser/provider/MCP protocol.
|
||||
Agent access: `restricted` — browser authentication return.
|
||||
Policy: Provider state/signature or gateway-token verification, company and resource binding; browser returns require the configuring human. Agent-issued durable gateway tokens retain both issuer and responsible-user authority.
|
||||
@@ -289,8 +245,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o
|
||||
|
||||
### `get-tools-vercel-connect-callback`
|
||||
|
||||
Capability ID: `connection-setup/get-tools-vercel-connect-callback`.
|
||||
|
||||
API: `present` — `GET /api/tools/vercel-connect/callback`; browser/provider/MCP protocol.
|
||||
Agent access: `restricted` — browser authentication return.
|
||||
Policy: Provider state/signature or gateway-token verification, company and resource binding; browser returns require the configuring human. Agent-issued durable gateway tokens retain both issuer and responsible-user authority.
|
||||
@@ -300,8 +254,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o
|
||||
|
||||
### `get-tools-oauth-callback`
|
||||
|
||||
Capability ID: `connection-setup/get-tools-oauth-callback`.
|
||||
|
||||
API: `present` — `GET /api/tools/oauth/callback`; browser/provider/MCP protocol.
|
||||
Agent access: `restricted` — browser authentication return.
|
||||
Policy: Provider state/signature or gateway-token verification, company and resource binding; browser returns require the configuring human. Agent-issued durable gateway tokens retain both issuer and responsible-user authority.
|
||||
@@ -311,8 +263,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o
|
||||
|
||||
### `get-mcp-runtime-tools`
|
||||
|
||||
Capability ID: `connection-setup/get-mcp-runtime-tools`.
|
||||
|
||||
API: `present` — `GET /mcp/runtime-tools`; browser/provider/MCP protocol.
|
||||
Agent access: `available` — existing authenticated MCP/provider protocol; not callable as JSON REST.
|
||||
Policy: Provider state/signature or gateway-token verification, company and resource binding; browser returns require the configuring human. Agent-issued durable gateway tokens retain both issuer and responsible-user authority.
|
||||
@@ -322,8 +272,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-mcp-runtime-tools`
|
||||
|
||||
Capability ID: `connection-setup/post-mcp-runtime-tools`.
|
||||
|
||||
API: `present` — `POST /mcp/runtime-tools`; browser/provider/MCP protocol.
|
||||
Agent access: `available` — existing authenticated MCP/provider protocol; not callable as JSON REST.
|
||||
Policy: Provider state/signature or gateway-token verification, company and resource binding; browser returns require the configuring human. Agent-issued durable gateway tokens retain both issuer and responsible-user authority.
|
||||
@@ -333,8 +281,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-connection-intents-setup-options`
|
||||
|
||||
Capability ID: `connection-setup/get-connection-intents-setup-options`.
|
||||
|
||||
API: `present` — `GET /api/connection-intents/{interactionId}/setup-options`; JSON REST.
|
||||
Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result.
|
||||
Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent.
|
||||
@@ -344,8 +290,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o
|
||||
|
||||
### `post-connection-intents-phase`
|
||||
|
||||
Capability ID: `connection-setup/post-connection-intents-phase`.
|
||||
|
||||
API: `present` — `POST /api/connection-intents/{interactionId}/phase`; JSON REST.
|
||||
Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result.
|
||||
Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent.
|
||||
@@ -355,8 +299,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o
|
||||
|
||||
### `post-connection-intents-complete`
|
||||
|
||||
Capability ID: `connection-setup/post-connection-intents-complete`.
|
||||
|
||||
API: `present` — `POST /api/connection-intents/{interactionId}/complete`; JSON REST.
|
||||
Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result.
|
||||
Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent.
|
||||
@@ -371,8 +313,6 @@ Review: `operation-reviewed`.
|
||||
|
||||
### `post-companies-tools-apps-finalize-oauth-access`
|
||||
|
||||
Capability ID: `connection-setup/post-companies-tools-apps-finalize-oauth-access`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/tools/apps/{connectionId}/finalize-oauth-access`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -382,8 +322,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-companies-tools-apps-finish`
|
||||
|
||||
Capability ID: `connection-setup/post-companies-tools-apps-finish`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/tools/apps/{connectionId}/finish`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -393,8 +331,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-tool-connections-reconnect`
|
||||
|
||||
Capability ID: `connection-setup/post-tool-connections-reconnect`.
|
||||
|
||||
API: `present` — `POST /api/tool-connections/{connectionId}/reconnect`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -409,8 +345,6 @@ Review: `operation-reviewed`.
|
||||
|
||||
### `post-runtime-tools-connections-request`
|
||||
|
||||
Capability ID: `connection-setup/post-runtime-tools-connections-request`.
|
||||
|
||||
API: `present` — `POST /runtime-tools/connections/request`; JSON REST.
|
||||
Agent access: `available` — existing REST/native runtime tool or scoped gateway client, as documented by the linked route.
|
||||
Policy: Existing run-bound tool, scoped credential lease, execution policy, or assigned-email-agent checks; connection-management grants do not bypass these controls.
|
||||
@@ -420,8 +354,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-connection-intents-decline`
|
||||
|
||||
Capability ID: `connection-setup/post-connection-intents-decline`.
|
||||
|
||||
API: `present` — `POST /api/connection-intents/{interactionId}/decline`; JSON REST.
|
||||
Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result.
|
||||
Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent.
|
||||
@@ -436,8 +368,6 @@ Review: `operation-reviewed`.
|
||||
|
||||
### `post-companies-chat-endpoints`
|
||||
|
||||
Capability ID: `connection-setup/post-companies-chat-endpoints`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/chat-endpoints`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -452,8 +382,6 @@ Review: `operation-reviewed`.
|
||||
|
||||
### `post-tool-connections-health-check`
|
||||
|
||||
Capability ID: `connection-setup/post-tool-connections-health-check`.
|
||||
|
||||
API: `present` — `POST /api/tool-connections/{connectionId}/health-check`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
|
||||
@@ -21,8 +21,6 @@ Review: `operation-reviewed`.
|
||||
|
||||
### `get-companies-tools-gateways`
|
||||
|
||||
Capability ID: `gateways-profiles/get-companies-tools-gateways`.
|
||||
|
||||
API: `present` — `GET /api/companies/{companyId}/tools/gateways`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections (responsible user: tools:admin)`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -32,8 +30,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability.
|
||||
|
||||
### `post-companies-tools-gateways`
|
||||
|
||||
Capability ID: `gateways-profiles/post-companies-tools-gateways`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/tools/gateways`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections (responsible user: tools:admin)`; bindings also require `tools:manage_profiles`. [Shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -43,8 +39,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability.
|
||||
|
||||
### `patch-tool-gateway-gateways`
|
||||
|
||||
Capability ID: `gateways-profiles/patch-tool-gateway-gateways`.
|
||||
|
||||
API: `present` — `PATCH /api/tool-gateway/gateways/{gatewayId}`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections (responsible user: tools:admin)`; setting or clearing bindings also requires `tools:manage_profiles`. [Shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -59,8 +53,6 @@ Review: `operation-reviewed`.
|
||||
|
||||
### `get-companies-tools-profiles`
|
||||
|
||||
Capability ID: `gateways-profiles/get-companies-tools-profiles`.
|
||||
|
||||
API: `present` — `GET /api/companies/{companyId}/tools/profiles`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -70,8 +62,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-companies-tools-profiles`
|
||||
|
||||
Capability ID: `gateways-profiles/post-companies-tools-profiles`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/tools/profiles`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -81,8 +71,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability.
|
||||
|
||||
### `get-companies-tools-profiles-effective-agents`
|
||||
|
||||
Capability ID: `gateways-profiles/get-companies-tools-profiles-effective-agents`.
|
||||
|
||||
API: `present` — `GET /api/companies/{companyId}/tools/profiles/effective/agents/{agentId}`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -92,8 +80,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `patch-tool-profiles`
|
||||
|
||||
Capability ID: `gateways-profiles/patch-tool-profiles`.
|
||||
|
||||
API: `present` — `PATCH /api/tool-profiles/{profileId}`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -103,8 +89,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-tool-profiles-duplicate`
|
||||
|
||||
Capability ID: `gateways-profiles/post-tool-profiles-duplicate`.
|
||||
|
||||
API: `present` — `POST /api/tool-profiles/{profileId}/duplicate`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -114,8 +98,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `delete-tool-profiles`
|
||||
|
||||
Capability ID: `gateways-profiles/delete-tool-profiles`.
|
||||
|
||||
API: `present` — `DELETE /api/tool-profiles/{profileId}`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -125,8 +107,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-tool-profiles-entries`
|
||||
|
||||
Capability ID: `gateways-profiles/post-tool-profiles-entries`.
|
||||
|
||||
API: `present` — `POST /api/tool-profiles/{profileId}/entries`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -136,8 +116,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `patch-tool-profile-entries`
|
||||
|
||||
Capability ID: `gateways-profiles/patch-tool-profile-entries`.
|
||||
|
||||
API: `present` — `PATCH /api/tool-profile-entries/{entryId}`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -147,8 +125,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `delete-tool-profile-entries`
|
||||
|
||||
Capability ID: `gateways-profiles/delete-tool-profile-entries`.
|
||||
|
||||
API: `present` — `DELETE /api/tool-profile-entries/{entryId}`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -158,8 +134,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-companies-tools-profiles-bind`
|
||||
|
||||
Capability ID: `gateways-profiles/post-companies-tools-profiles-bind`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/tools/profiles/{profileId}/bind`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -169,8 +143,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability.
|
||||
|
||||
### `post-companies-tools-profiles-unbind`
|
||||
|
||||
Capability ID: `gateways-profiles/post-companies-tools-profiles-unbind`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/tools/profiles/{profileId}/unbind`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -185,8 +157,6 @@ Review: `operation-reviewed`.
|
||||
|
||||
### `get-mcp-gateways`
|
||||
|
||||
Capability ID: `gateways-profiles/get-mcp-gateways`.
|
||||
|
||||
API: `present` — `GET /mcp/gateways/{gatewayPublicId}`; browser/provider/MCP protocol.
|
||||
Agent access: `available` — existing authenticated MCP/provider protocol; not callable as JSON REST.
|
||||
Policy: Provider state/signature or gateway-token verification, company and resource binding; browser returns require the configuring human. Agent-issued durable gateway tokens retain both issuer and responsible-user authority.
|
||||
@@ -196,8 +166,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-mcp-gateways`
|
||||
|
||||
Capability ID: `gateways-profiles/post-mcp-gateways`.
|
||||
|
||||
API: `present` — `POST /mcp/gateways/{gatewayPublicId}`; browser/provider/MCP protocol.
|
||||
Agent access: `available` — existing authenticated MCP/provider protocol; not callable as JSON REST.
|
||||
Policy: Provider state/signature or gateway-token verification, company and resource binding; browser returns require the configuring human. Agent-issued durable gateway tokens retain both issuer and responsible-user authority.
|
||||
@@ -207,8 +175,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability.
|
||||
|
||||
### `get-tool-gateway-gateways-mcp`
|
||||
|
||||
Capability ID: `gateways-profiles/get-tool-gateway-gateways-mcp`.
|
||||
|
||||
API: `present` — `GET /api/tool-gateway/gateways/{gatewayId}/mcp`; browser/provider/MCP protocol.
|
||||
Agent access: `available` — existing authenticated MCP/provider protocol; not callable as JSON REST.
|
||||
Policy: Provider state/signature or gateway-token verification, company and resource binding; browser returns require the configuring human. Agent-issued durable gateway tokens retain both issuer and responsible-user authority.
|
||||
@@ -218,8 +184,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-tool-gateway-gateways-mcp`
|
||||
|
||||
Capability ID: `gateways-profiles/post-tool-gateway-gateways-mcp`.
|
||||
|
||||
API: `present` — `POST /api/tool-gateway/gateways/{gatewayId}/mcp`; browser/provider/MCP protocol.
|
||||
Agent access: `available` — existing authenticated MCP/provider protocol; not callable as JSON REST.
|
||||
Policy: Provider state/signature or gateway-token verification, company and resource binding; browser returns require the configuring human. Agent-issued durable gateway tokens retain both issuer and responsible-user authority.
|
||||
@@ -229,8 +193,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-tool-gateway-tools`
|
||||
|
||||
Capability ID: `gateways-profiles/get-tool-gateway-tools`.
|
||||
|
||||
API: `present` — `GET /api/tool-gateway/tools`; JSON REST.
|
||||
Agent access: `available` — existing REST/native runtime tool or scoped gateway client, as documented by the linked route.
|
||||
Policy: Existing run-bound tool, scoped credential lease, execution policy, or assigned-email-agent checks; connection-management grants do not bypass these controls.
|
||||
@@ -240,8 +202,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-tool-gateway-tools-call`
|
||||
|
||||
Capability ID: `gateways-profiles/post-tool-gateway-tools-call`.
|
||||
|
||||
API: `present` — `POST /api/tool-gateway/tools/call`; JSON REST.
|
||||
Agent access: `available` — existing REST/native runtime tool or scoped gateway client, as documented by the linked route.
|
||||
Policy: Existing run-bound tool, scoped credential lease, execution policy, or assigned-email-agent checks; connection-management grants do not bypass these controls.
|
||||
@@ -256,8 +216,6 @@ Review: `operation-reviewed`.
|
||||
|
||||
### `post-tool-gateway-gateways-tokens`
|
||||
|
||||
Capability ID: `gateways-profiles/post-tool-gateway-gateways-tokens`.
|
||||
|
||||
API: `present` — `POST /api/tool-gateway/gateways/{gatewayId}/tokens`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections (responsible user: tools:admin)`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -267,8 +225,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability.
|
||||
|
||||
### `post-tool-gateway-gateway-tokens-revoke`
|
||||
|
||||
Capability ID: `gateways-profiles/post-tool-gateway-gateway-tokens-revoke`.
|
||||
|
||||
API: `present` — `POST /api/tool-gateway/gateway-tokens/{tokenId}/revoke`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections (responsible user: tools:admin)`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -278,8 +234,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-tool-gateway-sessions`
|
||||
|
||||
Capability ID: `gateways-profiles/post-tool-gateway-sessions`.
|
||||
|
||||
API: `present` — `POST /api/tool-gateway/sessions`; JSON REST.
|
||||
Agent access: `available` — existing REST/native runtime tool or scoped gateway client, as documented by the linked route.
|
||||
Policy: Existing run-bound tool, scoped credential lease, execution policy, or assigned-email-agent checks; connection-management grants do not bypass these controls.
|
||||
@@ -289,8 +243,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-tool-gateway-sessions-revoke`
|
||||
|
||||
Capability ID: `gateways-profiles/post-tool-gateway-sessions-revoke`.
|
||||
|
||||
API: `present` — `POST /api/tool-gateway/sessions/{sessionId}/revoke`; JSON REST.
|
||||
Agent access: `available` — existing REST/native runtime tool or scoped gateway client, as documented by the linked route.
|
||||
Policy: Existing run-bound tool, scoped credential lease, execution policy, or assigned-email-agent checks; connection-management grants do not bypass these controls.
|
||||
@@ -305,8 +257,6 @@ Review: `operation-reviewed`.
|
||||
|
||||
### `get-companies-tools-runtime-slots`
|
||||
|
||||
Capability ID: `gateways-profiles/get-companies-tools-runtime-slots`.
|
||||
|
||||
API: `present` — `GET /api/companies/{companyId}/tools/runtime-slots`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_runtime`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -316,8 +266,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-companies-tools-runtime-slots-stop`
|
||||
|
||||
Capability ID: `gateways-profiles/post-companies-tools-runtime-slots-stop`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/tools/runtime-slots/{id}/stop`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_runtime`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -327,8 +275,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-companies-tools-runtime-slots-restart`
|
||||
|
||||
Capability ID: `gateways-profiles/post-companies-tools-runtime-slots-restart`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/tools/runtime-slots/{id}/restart`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_runtime`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -338,8 +284,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-companies-tools-runtime-health`
|
||||
|
||||
Capability ID: `gateways-profiles/get-companies-tools-runtime-health`.
|
||||
|
||||
API: `present` — `GET /api/companies/{companyId}/tools/runtime-health`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_runtime`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -349,8 +293,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-companies-tools-runs-decisions`
|
||||
|
||||
Capability ID: `gateways-profiles/get-companies-tools-runs-decisions`.
|
||||
|
||||
API: `present` — `GET /api/companies/{companyId}/tools/runs/{runId}/decisions`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:view_audit`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -360,8 +302,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-tool-gateway-runtime-slots`
|
||||
|
||||
Capability ID: `gateways-profiles/get-tool-gateway-runtime-slots`.
|
||||
|
||||
API: `present` — `GET /api/tool-gateway/runtime-slots`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_runtime`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -371,8 +311,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-tool-gateway-runtime-slots-stop`
|
||||
|
||||
Capability ID: `gateways-profiles/post-tool-gateway-runtime-slots-stop`.
|
||||
|
||||
API: `present` — `POST /api/tool-gateway/runtime-slots/{slotId}/stop`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_runtime`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -382,8 +320,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-tool-gateway-runtime-slots-restart`
|
||||
|
||||
Capability ID: `gateways-profiles/post-tool-gateway-runtime-slots-restart`.
|
||||
|
||||
API: `present` — `POST /api/tool-gateway/runtime-slots/{slotId}/restart`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_runtime`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -393,8 +329,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-tool-gateway-audit`
|
||||
|
||||
Capability ID: `gateways-profiles/get-tool-gateway-audit`.
|
||||
|
||||
API: `present` — `GET /api/tool-gateway/audit`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:view_audit`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
|
||||
@@ -342,8 +342,6 @@ Review: `operation-reviewed`.
|
||||
|
||||
### `get-companies-ai-connection-pools`
|
||||
|
||||
Capability ID: `runs-adapters/get-companies-ai-connection-pools`.
|
||||
|
||||
API: `present` — `GET /api/companies/{companyId}/ai-connection-pools`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -353,8 +351,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-companies-ai-connection-pools-inspection`
|
||||
|
||||
Capability ID: `runs-adapters/get-companies-ai-connection-pools-inspection`.
|
||||
|
||||
API: `present` — `GET /api/companies/{companyId}/ai-connection-pools/{poolId}/inspection`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -364,8 +360,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-companies-ai-connection-pools`
|
||||
|
||||
Capability ID: `runs-adapters/post-companies-ai-connection-pools`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/ai-connection-pools`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -375,8 +369,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability.
|
||||
|
||||
### `delete-companies-ai-connection-pools`
|
||||
|
||||
Capability ID: `runs-adapters/delete-companies-ai-connection-pools`.
|
||||
|
||||
API: `present` — `DELETE /api/companies/{companyId}/ai-connection-pools/{poolId}`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -386,8 +378,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability.
|
||||
|
||||
### `post-companies-ai-connections-local-attempts`
|
||||
|
||||
Capability ID: `runs-adapters/post-companies-ai-connections-local-attempts`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/ai-connections/local/attempts`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -397,8 +387,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-companies-ai-connections-local-check`
|
||||
|
||||
Capability ID: `runs-adapters/post-companies-ai-connections-local-check`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/ai-connections/local/check`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -408,8 +396,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `delete-companies-ai-connections-local-attempts`
|
||||
|
||||
Capability ID: `runs-adapters/delete-companies-ai-connections-local-attempts`.
|
||||
|
||||
API: `present` — `DELETE /api/companies/{companyId}/ai-connections/local/attempts/{sessionId}`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -419,8 +405,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-companies-ai-connections-local-attempts-code`
|
||||
|
||||
Capability ID: `runs-adapters/post-companies-ai-connections-local-attempts-code`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/ai-connections/local/attempts/{sessionId}/code`; JSON REST.
|
||||
Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result.
|
||||
Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent.
|
||||
@@ -430,8 +414,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o
|
||||
|
||||
### `get-companies-ai-connections`
|
||||
|
||||
Capability ID: `runs-adapters/get-companies-ai-connections`.
|
||||
|
||||
API: `present` — `GET /api/companies/{companyId}/ai-connections`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -441,8 +423,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability.
|
||||
|
||||
### `get-companies-ai-connections-usage`
|
||||
|
||||
Capability ID: `runs-adapters/get-companies-ai-connections-usage`.
|
||||
|
||||
API: `present` — `GET /api/companies/{companyId}/ai-connections/{connectionId}/usage`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -452,8 +432,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-companies-ai-connections-active-runs`
|
||||
|
||||
Capability ID: `runs-adapters/get-companies-ai-connections-active-runs`.
|
||||
|
||||
API: `present` — `GET /api/companies/{companyId}/ai-connections/{connectionId}/active-runs`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -463,8 +441,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-companies-ai-connections`
|
||||
|
||||
Capability ID: `runs-adapters/post-companies-ai-connections`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/ai-connections`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -474,8 +450,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability.
|
||||
|
||||
### `post-companies-ai-connections-local`
|
||||
|
||||
Capability ID: `runs-adapters/post-companies-ai-connections-local`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/ai-connections/local`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -485,8 +459,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `put-companies-ai-connections-default`
|
||||
|
||||
Capability ID: `runs-adapters/put-companies-ai-connections-default`.
|
||||
|
||||
API: `present` — `PUT /api/companies/{companyId}/ai-connections/default`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -496,8 +468,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-companies-ai-connections-login-setup`
|
||||
|
||||
Capability ID: `runs-adapters/get-companies-ai-connections-login-setup`.
|
||||
|
||||
API: `present` — `GET /api/companies/{companyId}/ai-connections/login/{sessionId}/setup`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -507,8 +477,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-companies-ai-connections-login`
|
||||
|
||||
Capability ID: `runs-adapters/get-companies-ai-connections-login`.
|
||||
|
||||
API: `present` — `GET /api/companies/{companyId}/ai-connections/login/{sessionId}`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -518,8 +486,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-companies-adapters-models`
|
||||
|
||||
Capability ID: `runs-adapters/get-companies-adapters-models`.
|
||||
|
||||
API: `present` — `GET /api/companies/{companyId}/adapters/{type}/models`; JSON REST.
|
||||
Agent access: `available` — existing REST/native runtime tool or scoped gateway client, as documented by the linked route.
|
||||
Policy: Existing run-bound tool, scoped credential lease, execution policy, or assigned-email-agent checks; connection-management grants do not bypass these controls.
|
||||
@@ -529,8 +495,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-companies-adapters-login-sessions`
|
||||
|
||||
Capability ID: `runs-adapters/post-companies-adapters-login-sessions`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/adapters/{type}/login-sessions`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -540,8 +504,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-companies-adapters-login-sessions-active`
|
||||
|
||||
Capability ID: `runs-adapters/get-companies-adapters-login-sessions-active`.
|
||||
|
||||
API: `present` — `GET /api/companies/{companyId}/adapters/{type}/login-sessions/active`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -551,8 +513,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-companies-adapters-login-sessions`
|
||||
|
||||
Capability ID: `runs-adapters/get-companies-adapters-login-sessions`.
|
||||
|
||||
API: `present` — `GET /api/companies/{companyId}/adapters/{type}/login-sessions/{sessionId}`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -562,8 +522,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-companies-adapters-login-sessions-cancel`
|
||||
|
||||
Capability ID: `runs-adapters/post-companies-adapters-login-sessions-cancel`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/adapters/{type}/login-sessions/{sessionId}/cancel`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -573,8 +531,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-agents-claude-login`
|
||||
|
||||
Capability ID: `runs-adapters/post-agents-claude-login`.
|
||||
|
||||
API: `present` — `POST /api/agents/{id}/claude-login`; JSON REST.
|
||||
Agent access: `operator-only` — existing human setup or approval surface; agent can identify the saved setup and inspect the result.
|
||||
Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent.
|
||||
@@ -584,8 +540,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o
|
||||
|
||||
### `post-companies-setup-token-login-sessions`
|
||||
|
||||
Capability ID: `runs-adapters/post-companies-setup-token-login-sessions`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/setup-token-login-sessions`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -595,8 +549,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-companies-setup-token-login-sessions-active`
|
||||
|
||||
Capability ID: `runs-adapters/get-companies-setup-token-login-sessions-active`.
|
||||
|
||||
API: `present` — `GET /api/companies/{companyId}/setup-token-login-sessions/active`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -606,8 +558,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-companies-setup-token-login-sessions`
|
||||
|
||||
Capability ID: `runs-adapters/get-companies-setup-token-login-sessions`.
|
||||
|
||||
API: `present` — `GET /api/companies/{companyId}/setup-token-login-sessions/{sessionId}`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -617,8 +567,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `get-companies-setup-token-login-sessions-prompt`
|
||||
|
||||
Capability ID: `runs-adapters/get-companies-setup-token-login-sessions-prompt`.
|
||||
|
||||
API: `present` — `GET /api/companies/{companyId}/setup-token-login-sessions/{sessionId}/prompt`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -628,8 +576,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-companies-setup-token-login-sessions-code`
|
||||
|
||||
Capability ID: `runs-adapters/post-companies-setup-token-login-sessions-code`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/setup-token-login-sessions/{sessionId}/code`; JSON REST.
|
||||
Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result.
|
||||
Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent.
|
||||
@@ -639,8 +585,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o
|
||||
|
||||
### `post-companies-setup-token-login-sessions-completion`
|
||||
|
||||
Capability ID: `runs-adapters/post-companies-setup-token-login-sessions-completion`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/setup-token-login-sessions/{sessionId}/completion`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -650,8 +594,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `post-companies-setup-token-login-sessions-cancel`
|
||||
|
||||
Capability ID: `runs-adapters/post-companies-setup-token-login-sessions-cancel`.
|
||||
|
||||
API: `present` — `POST /api/companies/{companyId}/setup-token-login-sessions/{sessionId}/cancel`; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user.
|
||||
@@ -661,8 +603,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat
|
||||
|
||||
### `update-agent-ai-binding`
|
||||
|
||||
Capability ID: `runs-adapters/update-agent-ai-binding`.
|
||||
|
||||
API: `present` — `PATCH /api/agents/{id}` with a managed AI binding in runtime configuration; JSON REST.
|
||||
Agent access: `available` — agent REST and default native `search_api` / `call_api`.
|
||||
Policy: existing agent configuration permission plus `tools:manage_profiles`, current responsible-user authority, resolved account/pool access and target-agent authority. Pool members retain their credential audience.
|
||||
|
||||
Reference in new issue
Block a user