diff --git a/maps/agent-access-map/app-permissions.md b/maps/agent-access-map/app-permissions.md index 251dfd4b631..b38d5156cec 100644 --- a/maps/agent-access-map/app-permissions.md +++ b/maps/agent-access-map/app-permissions.md @@ -21,8 +21,6 @@ Review: `operation-reviewed`. ### `get-tool-connections-grants` -Capability ID: `app-permissions/get-tool-connections-grants`. - API: `present` — `GET /api/tool-connections/{connectionId}/grants`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -32,8 +30,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `put-tool-connections-grants-members` -Capability ID: `app-permissions/put-tool-connections-grants-members`. - API: `present` — `PUT /api/tool-connections/{connectionId}/grants/{grantId}/members`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_profiles` and `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -43,8 +39,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-tool-connections-grants-installations` -Capability ID: `app-permissions/post-tool-connections-grants-installations`. - API: `present` — `POST /api/tool-connections/{connectionId}/grants/installations`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_profiles` and `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -54,8 +48,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `delete-tool-connections-grants` -Capability ID: `app-permissions/delete-tool-connections-grants`. - API: `present` — `DELETE /api/tool-connections/{connectionId}/grants/{grantId}`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -65,8 +57,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-tool-connections-grants-delegations` -Capability ID: `app-permissions/post-tool-connections-grants-delegations`. - API: `present` — `POST /api/tool-connections/{connectionId}/grants/{grantId}/delegations`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_profiles` and `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -76,8 +66,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability. ### `delete-tool-connections-grants-delegations` -Capability ID: `app-permissions/delete-tool-connections-grants-delegations`. - API: `present` — `DELETE /api/tool-connections/{connectionId}/grants/{grantId}/delegations/{delegationId}`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_profiles` and `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -87,8 +75,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability. ### `get-tool-connections-installs` -Capability ID: `app-permissions/get-tool-connections-installs`. - API: `present` — `GET /api/tool-connections/{connectionId}/installs`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -98,8 +84,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `put-tool-connections-installs` -Capability ID: `app-permissions/put-tool-connections-installs`. - API: `present` — `PUT /api/tool-connections/{connectionId}/installs`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_profiles` and `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -114,8 +98,6 @@ Review: `operation-reviewed`. ### `get-companies-tools-trust-rules` -Capability ID: `app-permissions/get-companies-tools-trust-rules`. - API: `present` — `GET /api/companies/{companyId}/tools/trust-rules`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -125,8 +107,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-companies-tools-policies` -Capability ID: `app-permissions/get-companies-tools-policies`. - API: `present` — `GET /api/companies/{companyId}/tools/policies`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -136,8 +116,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-companies-tools-policies-reorder` -Capability ID: `app-permissions/post-companies-tools-policies-reorder`. - API: `present` — `POST /api/companies/{companyId}/tools/policies/reorder`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -147,8 +125,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-companies-tools-policies` -Capability ID: `app-permissions/post-companies-tools-policies`. - API: `present` — `POST /api/companies/{companyId}/tools/policies`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -158,8 +134,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-companies-tools-policies-duplicate` -Capability ID: `app-permissions/post-companies-tools-policies-duplicate`. - API: `present` — `POST /api/companies/{companyId}/tools/policies/{policyId}/duplicate`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -169,8 +143,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `patch-companies-tools-policies` -Capability ID: `app-permissions/patch-companies-tools-policies`. - API: `present` — `PATCH /api/companies/{companyId}/tools/policies/{policyId}`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -180,8 +152,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `delete-companies-tools-policies` -Capability ID: `app-permissions/delete-companies-tools-policies`. - API: `present` — `DELETE /api/companies/{companyId}/tools/policies/{policyId}`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -191,8 +161,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-companies-tools-trust-rules-revoke` -Capability ID: `app-permissions/post-companies-tools-trust-rules-revoke`. - API: `present` — `POST /api/companies/{companyId}/tools/trust-rules/{policyId}/revoke`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -202,8 +170,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-companies-tools-policy-test` -Capability ID: `app-permissions/post-companies-tools-policy-test`. - API: `present` — `POST /api/companies/{companyId}/tools/policy/test`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -218,8 +184,6 @@ Review: `operation-reviewed`. ### `post-tool-connections-catalog-refresh` -Capability ID: `app-permissions/post-tool-connections-catalog-refresh`. - API: `present` — `POST /api/tool-connections/{connectionId}/catalog/refresh`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -229,8 +193,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-tool-connections-catalog` -Capability ID: `app-permissions/get-tool-connections-catalog`. - API: `present` — `GET /api/tool-connections/{connectionId}/catalog`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -240,8 +202,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-tool-profiles-new-tools` -Capability ID: `app-permissions/get-tool-profiles-new-tools`. - API: `present` — `GET /api/tool-profiles/{profileId}/new-tools`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -251,8 +211,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-tool-profiles-new-tools-review` -Capability ID: `app-permissions/post-tool-profiles-new-tools-review`. - API: `present` — `POST /api/tool-profiles/{profileId}/new-tools/review`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -267,8 +225,6 @@ Review: `operation-reviewed`. ### `get-companies-tools-action-requests` -Capability ID: `app-permissions/get-companies-tools-action-requests`. - API: `present` — `GET /api/companies/{companyId}/tools/action-requests`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -278,8 +234,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-tool-connections-test-agents` -Capability ID: `app-permissions/get-tool-connections-test-agents`. - API: `present` — `GET /api/tool-connections/{connectionId}/test-agents`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -289,8 +243,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-tool-connections-test-agents-access` -Capability ID: `app-permissions/get-tool-connections-test-agents-access`. - API: `present` — `GET /api/tool-connections/{connectionId}/test-agents/{agentId}/access`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -300,8 +252,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-tool-connections-test-calls` -Capability ID: `app-permissions/post-tool-connections-test-calls`. - API: `present` — `POST /api/tool-connections/{connectionId}/test-calls`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:use`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -311,8 +261,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-tool-connections-test-calls` -Capability ID: `app-permissions/get-tool-connections-test-calls`. - API: `present` — `GET /api/tool-connections/{connectionId}/test-calls/{actionRequestId}`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:use`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -322,8 +270,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-companies-tools-action-requests-trust-rule` -Capability ID: `app-permissions/post-companies-tools-action-requests-trust-rule`. - API: `present` — `POST /api/companies/{companyId}/tools/action-requests/{actionRequestId}/trust-rule`; JSON REST. Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result. Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent. @@ -333,8 +279,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o ### `post-tool-gateway-action-requests-approve` -Capability ID: `app-permissions/post-tool-gateway-action-requests-approve`. - API: `present` — `POST /api/tool-gateway/action-requests/{id}/approve`; JSON REST. Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result. Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent. @@ -344,8 +288,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o ### `post-tool-gateway-action-requests-decline` -Capability ID: `app-permissions/post-tool-gateway-action-requests-decline`. - API: `present` — `POST /api/tool-gateway/action-requests/{id}/decline`; JSON REST. Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result. Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent. @@ -360,8 +302,6 @@ Review: `operation-reviewed`. ### `get-companies-tools-apps-attention` -Capability ID: `app-permissions/get-companies-tools-apps-attention`. - API: `present` — `GET /api/companies/{companyId}/tools/apps/attention`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -371,8 +311,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-companies-tools-applications` -Capability ID: `app-permissions/get-companies-tools-applications`. - API: `present` — `GET /api/companies/{companyId}/tools/applications`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -382,8 +320,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-companies-tools-applications` -Capability ID: `app-permissions/post-companies-tools-applications`. - API: `present` — `POST /api/companies/{companyId}/tools/applications`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -393,8 +329,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `patch-tool-applications` -Capability ID: `app-permissions/patch-tool-applications`. - API: `present` — `PATCH /api/tool-applications/{applicationId}`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -404,8 +338,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `delete-tool-applications` -Capability ID: `app-permissions/delete-tool-applications`. - API: `present` — `DELETE /api/tool-applications/{applicationId}`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -415,8 +347,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-companies-tools-connections` -Capability ID: `app-permissions/get-companies-tools-connections`. - API: `present` — `GET /api/companies/{companyId}/tools/connections`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -426,8 +356,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability. ### `get-tool-connections` -Capability ID: `app-permissions/get-tool-connections`. - API: `present` — `GET /api/tool-connections/{connectionId}`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -437,8 +365,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability. ### `post-tool-connections-railway-ssh` -Capability ID: `app-permissions/post-tool-connections-railway-ssh`. - API: `present` — `POST /api/tool-connections/{connectionId}/railway/ssh`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -448,8 +374,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-tool-connections-usage` -Capability ID: `app-permissions/get-tool-connections-usage`. - API: `present` — `GET /api/tool-connections/{connectionId}/usage`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -459,8 +383,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-tool-connections-aggregator-apps` -Capability ID: `app-permissions/get-tool-connections-aggregator-apps`. - API: `present` — `GET /api/tool-connections/{connectionId}/aggregator/apps`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -470,8 +392,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-tool-connections-aggregator-apps-sync` -Capability ID: `app-permissions/post-tool-connections-aggregator-apps-sync`. - API: `present` — `POST /api/tool-connections/{connectionId}/aggregator/apps/sync`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -481,8 +401,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-tool-connections-aggregator-apps-refresh` -Capability ID: `app-permissions/post-tool-connections-aggregator-apps-refresh`. - API: `present` — `POST /api/tool-connections/{connectionId}/aggregator/apps/refresh`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -492,8 +410,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `put-tool-connections-aggregator-discovery` -Capability ID: `app-permissions/put-tool-connections-aggregator-discovery`. - API: `present` — `PUT /api/tool-connections/{connectionId}/aggregator/discovery`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -503,8 +419,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-tool-connections-composio-apps` -Capability ID: `app-permissions/get-tool-connections-composio-apps`. - API: `present` — `GET /api/tool-connections/{connectionId}/composio/apps`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -514,8 +428,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-tool-connections-composio-apps-sync` -Capability ID: `app-permissions/post-tool-connections-composio-apps-sync`. - API: `present` — `POST /api/tool-connections/{connectionId}/composio/apps/sync`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -525,8 +437,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-tool-connections-composio-apps-refresh` -Capability ID: `app-permissions/post-tool-connections-composio-apps-refresh`. - API: `present` — `POST /api/tool-connections/{connectionId}/composio/apps/refresh`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -536,8 +446,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-tool-connections-composio-apps-accounts` -Capability ID: `app-permissions/post-tool-connections-composio-apps-accounts`. - API: `present` — `POST /api/tool-connections/{connectionId}/composio/apps/{toolkit}/accounts`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -547,8 +455,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-tool-connections-composio-apps-setup` -Capability ID: `app-permissions/post-tool-connections-composio-apps-setup`. - API: `present` — `POST /api/tool-connections/{connectionId}/composio/apps/{toolkit}/setup`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -558,8 +464,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `patch-tool-connections` -Capability ID: `app-permissions/patch-tool-connections`. - API: `present` — `PATCH /api/tool-connections/{connectionId}`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -569,8 +473,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability. ### `delete-tool-connections` -Capability ID: `app-permissions/delete-tool-connections`. - API: `present` — `DELETE /api/tool-connections/{connectionId}`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -580,8 +482,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-tool-connections-health-check` -Capability ID: `app-permissions/post-tool-connections-health-check`. - API: `present` — `POST /api/tool-connections/{connectionId}/health-check`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -591,8 +491,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-tool-connections-activity` -Capability ID: `app-permissions/get-tool-connections-activity`. - API: `present` — `GET /api/tool-connections/{connectionId}/activity`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:view_audit`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. diff --git a/maps/agent-access-map/chat-channels.md b/maps/agent-access-map/chat-channels.md index 19bb93628f7..a4bd3b47b7a 100644 --- a/maps/agent-access-map/chat-channels.md +++ b/maps/agent-access-map/chat-channels.md @@ -21,8 +21,6 @@ Review: `operation-reviewed`. ### `get-companies-chat-endpoints` -Capability ID: `chat-channels/get-companies-chat-endpoints`. - API: `present` — `GET /api/companies/{companyId}/chat-endpoints`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -32,8 +30,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-companies-chat-endpoints` -Capability ID: `chat-channels/post-companies-chat-endpoints`. - API: `present` — `POST /api/companies/{companyId}/chat-endpoints`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -43,8 +39,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability. ### `get-chat-endpoints` -Capability ID: `chat-channels/get-chat-endpoints`. - API: `present` — `GET /api/chat-endpoints/{endpointId}`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -54,8 +48,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability. ### `get-companies-chat-slack-setup-options` -Capability ID: `chat-channels/get-companies-chat-slack-setup-options`. - API: `present` — `GET /api/companies/{companyId}/chat-slack/setup-options`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -65,8 +57,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-chat-endpoints-slack-managed-authorize` -Capability ID: `chat-channels/post-chat-endpoints-slack-managed-authorize`. - API: `present` — `POST /api/chat-endpoints/{endpointId}/slack/managed/authorize`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -76,8 +66,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-chat-endpoints-slack-managed-provision` -Capability ID: `chat-channels/post-chat-endpoints-slack-managed-provision`. - API: `present` — `POST /api/chat-endpoints/{endpointId}/slack/managed/provision`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -87,8 +75,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `delete-companies-chat-slack-manager-grants` -Capability ID: `chat-channels/delete-companies-chat-slack-manager-grants`. - API: `present` — `DELETE /api/companies/{companyId}/chat-slack/manager-grants/{grantId}`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -98,8 +84,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-chat-slack-managed-oauth-callback` -Capability ID: `chat-channels/get-chat-slack-managed-oauth-callback`. - API: `present` — `GET /api/chat-slack/managed/oauth/callback`; browser/provider/MCP protocol. Agent access: `restricted` — browser authentication return. Policy: Provider state/signature or gateway-token verification, company and resource binding; browser returns require the configuring human. Agent-issued durable gateway tokens retain both issuer and responsible-user authority. @@ -109,8 +93,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o ### `post-chat-endpoints-slack-registration` -Capability ID: `chat-channels/post-chat-endpoints-slack-registration`. - API: `present` — `POST /api/chat-endpoints/{endpointId}/slack/registration`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -120,8 +102,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-chat-endpoints-slack-install` -Capability ID: `chat-channels/post-chat-endpoints-slack-install`. - API: `present` — `POST /api/chat-endpoints/{endpointId}/slack/install`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -131,8 +111,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-chat-slack-oauth-callback` -Capability ID: `chat-channels/get-chat-slack-oauth-callback`. - API: `present` — `GET /api/chat-slack/oauth/callback`; browser/provider/MCP protocol. Agent access: `restricted` — browser authentication return. Policy: Provider state/signature or gateway-token verification, company and resource binding; browser returns require the configuring human. Agent-issued durable gateway tokens retain both issuer and responsible-user authority. @@ -142,8 +120,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o ### `get-chat-endpoints-github-configuration` -Capability ID: `chat-channels/get-chat-endpoints-github-configuration`. - API: `present` — `GET /api/chat-endpoints/{endpointId}/github/configuration`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -153,8 +129,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability. ### `put-chat-endpoints-github-configuration` -Capability ID: `chat-channels/put-chat-endpoints-github-configuration`. - API: `present` — `PUT /api/chat-endpoints/{endpointId}/github/configuration`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -164,8 +138,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability. ### `post-chat-endpoints-github-verify` -Capability ID: `chat-channels/post-chat-endpoints-github-verify`. - API: `present` — `POST /api/chat-endpoints/{endpointId}/github/verify`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -175,8 +147,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability. ### `put-chat-endpoints-github-progress` -Capability ID: `chat-channels/put-chat-endpoints-github-progress`. - API: `present` — `PUT /api/chat-endpoints/{endpointId}/github/progress`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -186,8 +156,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-chat-endpoints-github-personal-connections` -Capability ID: `chat-channels/get-chat-endpoints-github-personal-connections`. - API: `present` — `GET /api/chat-endpoints/{endpointId}/github/personal-connections`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -197,8 +165,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-chat-endpoints-github-people-lookup` -Capability ID: `chat-channels/post-chat-endpoints-github-people-lookup`. - API: `present` — `POST /api/chat-endpoints/{endpointId}/github/people/lookup`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -208,8 +174,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-chat-endpoints-github-registration` -Capability ID: `chat-channels/post-chat-endpoints-github-registration`. - API: `present` — `POST /api/chat-endpoints/{endpointId}/github/registration`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -219,8 +183,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability. ### `post-chat-endpoints-github-registration-restart` -Capability ID: `chat-channels/post-chat-endpoints-github-registration-restart`. - API: `present` — `POST /api/chat-endpoints/{endpointId}/github/registration/restart`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -230,8 +192,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `put-chat-endpoints-github-draft` -Capability ID: `chat-channels/put-chat-endpoints-github-draft`. - API: `present` — `PUT /api/chat-endpoints/{endpointId}/github/draft`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -241,8 +201,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-chat-endpoints-github-setup` -Capability ID: `chat-channels/post-chat-endpoints-github-setup`. - API: `present` — `POST /api/chat-endpoints/{endpointId}/github/setup`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -252,8 +210,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-chat-endpoints-github-app` -Capability ID: `chat-channels/post-chat-endpoints-github-app`. - API: `present` — `POST /api/chat-endpoints/{endpointId}/github/app`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -263,8 +219,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability. ### `post-chat-endpoints-github-repositories-refresh` -Capability ID: `chat-channels/post-chat-endpoints-github-repositories-refresh`. - API: `present` — `POST /api/chat-endpoints/{endpointId}/github/repositories/refresh`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -274,8 +228,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability. ### `get-chat-endpoints-github-repositories` -Capability ID: `chat-channels/get-chat-endpoints-github-repositories`. - API: `present` — `GET /api/chat-endpoints/{endpointId}/github/repositories`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -285,8 +237,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `put-chat-endpoints-github-repositories-access` -Capability ID: `chat-channels/put-chat-endpoints-github-repositories-access`. - API: `present` — `PUT /api/chat-endpoints/{endpointId}/github/repositories/access`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -296,8 +246,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `patch-chat-endpoints` -Capability ID: `chat-channels/patch-chat-endpoints`. - API: `present` — `PATCH /api/chat-endpoints/{endpointId}`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -307,8 +255,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability. ### `post-chat-endpoints-photon-inspect` -Capability ID: `chat-channels/post-chat-endpoints-photon-inspect`. - API: `present` — `POST /api/chat-endpoints/{endpointId}/photon/inspect`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -318,8 +264,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-chat-endpoints-setup` -Capability ID: `chat-channels/post-chat-endpoints-setup`. - API: `present` — `POST /api/chat-endpoints/{endpointId}/setup`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -329,8 +273,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability. ### `post-chat-endpoints-setup-secret` -Capability ID: `chat-channels/post-chat-endpoints-setup-secret`. - API: `present` — `POST /api/chat-endpoints/{endpointId}/setup-secret`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -340,8 +282,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-chat-endpoints-resources` -Capability ID: `chat-channels/get-chat-endpoints-resources`. - API: `present` — `GET /api/chat-endpoints/{endpointId}/resources`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -351,8 +291,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `put-chat-endpoints-resources` -Capability ID: `chat-channels/put-chat-endpoints-resources`. - API: `present` — `PUT /api/chat-endpoints/{endpointId}/resources`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -362,8 +300,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-companies-email-connections` -Capability ID: `chat-channels/get-companies-email-connections`. - API: `present` — `GET /api/companies/{companyId}/email/connections`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -373,8 +309,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability. ### `post-companies-email-connections` -Capability ID: `chat-channels/post-companies-email-connections`. - API: `present` — `POST /api/companies/{companyId}/email/connections`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -384,8 +318,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability. ### `post-companies-email-connections-inspect` -Capability ID: `chat-channels/post-companies-email-connections-inspect`. - API: `present` — `POST /api/companies/{companyId}/email/connections/{connectionId}/inspect`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -395,8 +327,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-companies-email-connections-check-address` -Capability ID: `chat-channels/post-companies-email-connections-check-address`. - API: `present` — `POST /api/companies/{companyId}/email/connections/{connectionId}/check-address`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -406,8 +336,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-companies-email-inboxes` -Capability ID: `chat-channels/get-companies-email-inboxes`. - API: `present` — `GET /api/companies/{companyId}/email/inboxes`; JSON REST. Agent access: `available` — existing REST/native runtime tool or scoped gateway client, as documented by the linked route. Policy: Existing run-bound tool, scoped credential lease, execution policy, or assigned-email-agent checks; connection-management grants do not bypass these controls. @@ -417,8 +345,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-companies-email-inspect` -Capability ID: `chat-channels/post-companies-email-inspect`. - API: `present` — `POST /api/companies/{companyId}/email/inspect`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -428,8 +354,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-companies-email-inboxes` -Capability ID: `chat-channels/post-companies-email-inboxes`. - API: `present` — `POST /api/companies/{companyId}/email/inboxes`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -439,8 +363,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-companies-email-deliveries` -Capability ID: `chat-channels/get-companies-email-deliveries`. - API: `present` — `GET /api/companies/{companyId}/email/deliveries/{publicationId}`; JSON REST. Agent access: `available` — existing REST/native runtime tool or scoped gateway client, as documented by the linked route. Policy: Existing run-bound tool, scoped credential lease, execution policy, or assigned-email-agent checks; connection-management grants do not bypass these controls. @@ -455,8 +377,6 @@ Review: `operation-reviewed`. ### `post-chat-endpoints-github-identity` -Capability ID: `chat-channels/post-chat-endpoints-github-identity`. - API: `present` — `POST /api/chat-endpoints/{endpointId}/github/identity`; JSON REST. Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result. Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent. @@ -466,8 +386,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o ### `post-chat-endpoints-github-identity-start` -Capability ID: `chat-channels/post-chat-endpoints-github-identity-start`. - API: `present` — `POST /api/chat-endpoints/{endpointId}/github/identity/start`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -477,8 +395,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability. ### `post-chat-endpoints-github-identity-confirm` -Capability ID: `chat-channels/post-chat-endpoints-github-identity-confirm`. - API: `present` — `POST /api/chat-endpoints/{endpointId}/github/identity/confirm`; JSON REST. Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result. Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent. @@ -488,8 +404,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o ### `get-chat-endpoints-principals` -Capability ID: `chat-channels/get-chat-endpoints-principals`. - API: `present` — `GET /api/chat-endpoints/{endpointId}/principals`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -499,8 +413,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-chat-endpoints-principals-link-intent` -Capability ID: `chat-channels/post-chat-endpoints-principals-link-intent`. - API: `present` — `POST /api/chat-endpoints/{endpointId}/principals/{principalId}/link-intent`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -510,8 +422,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `delete-chat-endpoints-principals-link` -Capability ID: `chat-channels/delete-chat-endpoints-principals-link`. - API: `present` — `DELETE /api/chat-endpoints/{endpointId}/principals/{principalId}/link`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -521,8 +431,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-chat-identity-links-confirm` -Capability ID: `chat-channels/post-chat-identity-links-confirm`. - API: `present` — `POST /api/chat-identity-links/confirm`; JSON REST. Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result. Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent. @@ -532,8 +440,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o ### `post-chat-identity-links-request-access` -Capability ID: `chat-channels/post-chat-identity-links-request-access`. - API: `present` — `POST /api/chat-identity-links/request-access`; JSON REST. Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result. Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent. @@ -543,8 +449,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o ### `get-chat-identity-links-preview` -Capability ID: `chat-channels/get-chat-identity-links-preview`. - API: `present` — `GET /api/chat-identity-links/preview`; JSON REST. Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result. Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent. @@ -554,8 +458,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o ### `get-api-chat-github-manifest-callback` -Capability ID: `chat-channels/get-api-chat-github-manifest-callback`. - API: `present` — `GET /api/chat-github/manifest/callback`; browser/provider/MCP protocol. Agent access: `restricted` — browser authentication return. Policy: Provider state/signature or gateway-token verification, company and resource binding; browser returns require the configuring human. Agent-issued durable gateway tokens retain both issuer and responsible-user authority. @@ -565,8 +467,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o ### `get-api-chat-github-cloud-callback` -Capability ID: `chat-channels/get-api-chat-github-cloud-callback`. - API: `present` — `GET /api/chat-github/cloud/callback`; browser/provider/MCP protocol. Agent access: `restricted` — browser authentication return. Policy: Provider state/signature or gateway-token verification, company and resource binding; browser returns require the configuring human. Agent-issued durable gateway tokens retain both issuer and responsible-user authority. @@ -576,8 +476,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o ### `get-api-chat-github-identity-callback` -Capability ID: `chat-channels/get-api-chat-github-identity-callback`. - API: `present` — `GET /api/chat-github/identity/callback`; browser/provider/MCP protocol. Agent access: `restricted` — browser authentication return. Policy: Provider state/signature or gateway-token verification, company and resource binding; browser returns require the configuring human. Agent-issued durable gateway tokens retain both issuer and responsible-user authority. @@ -592,8 +490,6 @@ Review: `operation-reviewed`. ### `get-chat-endpoints-github-review-detail` -Capability ID: `chat-channels/get-chat-endpoints-github-review-detail`. - API: `present` — `GET /api/chat-endpoints/{endpointId}/github/reviews/{reviewId}`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -603,8 +499,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-chat-endpoints-github-reviews` -Capability ID: `chat-channels/get-chat-endpoints-github-reviews`. - API: `present` — `GET /api/chat-endpoints/{endpointId}/github/reviews`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -614,8 +508,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-chat-endpoints-conversations` -Capability ID: `chat-channels/get-chat-endpoints-conversations`. - API: `present` — `GET /api/chat-endpoints/{endpointId}/conversations`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -625,8 +517,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-chat-endpoints-conversations-publications` -Capability ID: `chat-channels/post-chat-endpoints-conversations-publications`. - API: `present` — `POST /api/chat-endpoints/{endpointId}/conversations/{conversationId}/publications`; JSON REST. Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result. Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent. @@ -636,8 +526,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o ### `get-chat-endpoints-conversations-publications-status` -Capability ID: `chat-channels/get-chat-endpoints-conversations-publications-status`. - API: `present` — `GET /api/chat-endpoints/{endpointId}/conversations/{conversationId}/publications/{publicationId}/status`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:use`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -647,8 +535,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-issues-chat-binding` -Capability ID: `chat-channels/get-issues-chat-binding`. - API: `present` — `GET /api/issues/{issueId}/chat-binding`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`, responsible-user ceiling, task privacy, endpoint resource scope and target-agent visibility. @@ -658,8 +544,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-api-chat-webhooks` -Capability ID: `chat-channels/post-api-chat-webhooks`. - API: `present` — `POST /api/chat-webhooks/{publicId}/{provider}`; provider webhook ingress. Agent access: `not-applicable` — provider-signed inbound events; agent keys and gateway tokens cannot authenticate this route. Policy: The provider verifies the payload signature and binds the endpoint/company. The request has no agent principal. @@ -669,8 +553,6 @@ Gaps: Provider ingress has no agent invocation path. Provider signature validati ### `post-companies-email-send` -Capability ID: `chat-channels/post-companies-email-send`. - API: `present` — `POST /api/companies/{companyId}/email/send`; JSON REST. Agent access: `available` — existing REST/native runtime tool or scoped gateway client, as documented by the linked route. Policy: Existing run-bound tool, scoped credential lease, execution policy, or assigned-email-agent checks; connection-management grants do not bypass these controls. @@ -680,8 +562,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-companies-email-tasks` -Capability ID: `chat-channels/get-companies-email-tasks`. - API: `present` — `GET /api/companies/{companyId}/email/tasks/{issueId}`; JSON REST. Agent access: `available` — existing REST/native runtime tool or scoped gateway client, as documented by the linked route. Policy: Existing run-bound tool, scoped credential lease, execution policy, or assigned-email-agent checks; connection-management grants do not bypass these controls. @@ -691,8 +571,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-api-chat-webhooks-agentmail` -Capability ID: `chat-channels/post-api-chat-webhooks-agentmail`. - API: `present` — `POST /api/chat-webhooks/agentmail/{publicId}`; provider webhook ingress. Agent access: `not-applicable` — provider-signed inbound events; agent keys and gateway tokens cannot authenticate this route. Policy: The provider verifies the payload signature and binds the endpoint/company. The request has no agent principal. @@ -725,8 +603,6 @@ Gaps: Multipart upload is not a JSON native API call. Live chat file delivery re ### `post-chat-endpoints-publications-replay` -Capability ID: `chat-channels/post-chat-endpoints-publications-replay`. - API: `present` — `POST /api/chat-endpoints/{endpointId}/publications/{publicationId}/replay`; JSON REST. Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result. Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent. @@ -736,8 +612,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o ### `post-chat-endpoints-publications-resolve` -Capability ID: `chat-channels/post-chat-endpoints-publications-resolve`. - API: `present` — `POST /api/chat-endpoints/{endpointId}/publications/{publicationId}/resolve`; JSON REST. Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result. Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent. @@ -747,8 +621,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o ### `post-chat-endpoints-actions-resolve` -Capability ID: `chat-channels/post-chat-endpoints-actions-resolve`. - API: `present` — `POST /api/chat-endpoints/{endpointId}/actions/{actionId}/resolve`; JSON REST. Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result. Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent. @@ -758,8 +630,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o ### `post-companies-email-deliveries-resolve` -Capability ID: `chat-channels/post-companies-email-deliveries-resolve`. - API: `present` — `POST /api/companies/{companyId}/email/deliveries/{publicationId}/resolve`; JSON REST. Agent access: `restricted` — human connection manager records the outcome of an uncertain external delivery. Agents use normal governed send/status operations. Policy: Existing run-bound tool, scoped credential lease, execution policy, or assigned-email-agent checks; connection-management grants do not bypass these controls. @@ -774,8 +644,6 @@ Review: `operation-reviewed`. ### `post-chat-endpoints-slack-test-message` -Capability ID: `chat-channels/post-chat-endpoints-slack-test-message`. - API: `present` — `POST /api/chat-endpoints/{endpointId}/slack/test-message`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:use`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -785,8 +653,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability. ### `post-chat-endpoints-slack-resume` -Capability ID: `chat-channels/post-chat-endpoints-slack-resume`. - API: `present` — `POST /api/chat-endpoints/{endpointId}/slack/resume`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -796,8 +662,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-chat-endpoints-test` -Capability ID: `chat-channels/post-chat-endpoints-test`. - API: `present` — `POST /api/chat-endpoints/{endpointId}/test`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -807,8 +671,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-chat-endpoints-finish` -Capability ID: `chat-channels/post-chat-endpoints-finish`. - API: `present` — `POST /api/chat-endpoints/{endpointId}/finish`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -818,8 +680,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-chat-endpoints-test-status` -Capability ID: `chat-channels/get-chat-endpoints-test-status`. - API: `present` — `GET /api/chat-endpoints/{endpointId}/test-status`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -829,8 +689,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-chat-endpoints-activity` -Capability ID: `chat-channels/get-chat-endpoints-activity`. - API: `present` — `GET /api/chat-endpoints/{endpointId}/activity`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:view_audit`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -840,8 +698,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-chat-endpoints-deliveries-replay` -Capability ID: `chat-channels/post-chat-endpoints-deliveries-replay`. - API: `present` — `POST /api/chat-endpoints/{endpointId}/deliveries/{deliveryId}/replay`; JSON REST. Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result. Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent. @@ -851,8 +707,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o ### `post-email-inboxes-control` -Capability ID: `chat-channels/post-email-inboxes-control`. - API: `present` — `POST /api/email/inboxes/{endpointId}/control`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -862,8 +716,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-email-inboxes-reconnect` -Capability ID: `chat-channels/post-email-inboxes-reconnect`. - API: `present` — `POST /api/email/inboxes/{endpointId}/reconnect`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. diff --git a/maps/agent-access-map/connection-setup.md b/maps/agent-access-map/connection-setup.md index 422a0e334c3..6d3ee9ec7c2 100644 --- a/maps/agent-access-map/connection-setup.md +++ b/maps/agent-access-map/connection-setup.md @@ -32,8 +32,6 @@ Review: `operation-reviewed`. ### `get-companies-tools-gallery` -Capability ID: `connection-setup/get-companies-tools-gallery`. - API: `present` — `GET /api/companies/{companyId}/tools/gallery`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -43,8 +41,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-companies-tools-apps-preflight` -Capability ID: `connection-setup/get-companies-tools-apps-preflight`. - API: `present` — `GET /api/companies/{companyId}/tools/apps/{galleryKey}/preflight`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -54,8 +50,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-companies-tools-examples` -Capability ID: `connection-setup/get-companies-tools-examples`. - API: `present` — `GET /api/companies/{companyId}/tools/examples`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -65,8 +59,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-companies-tools-examples-install` -Capability ID: `connection-setup/post-companies-tools-examples-install`. - API: `present` — `POST /api/companies/{companyId}/tools/examples/{id}/install`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -76,8 +68,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-companies-tools-examples-smoke` -Capability ID: `connection-setup/post-companies-tools-examples-smoke`. - API: `present` — `POST /api/companies/{companyId}/tools/examples/{id}/smoke`; JSON REST. Agent access: `operator-only` — existing human setup or approval surface; agent can identify the saved setup and inspect the result. Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent. @@ -87,8 +77,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o ### `get-companies-tools-stdio-templates` -Capability ID: `connection-setup/get-companies-tools-stdio-templates`. - API: `present` — `GET /api/companies/{companyId}/tools/stdio-templates`; JSON REST. Agent access: `operator-only` — a board user reads host command templates. Agents select approved provider templates through the catalog. Policy: board actor and `tools:admin`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -98,8 +86,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o ### `post-companies-tools-stdio-templates` -Capability ID: `connection-setup/post-companies-tools-stdio-templates`. - API: `present` — `POST /api/companies/{companyId}/tools/stdio-templates`; JSON REST. Agent access: `operator-only` — existing human setup or approval surface; agent can identify the saved setup and inspect the result. Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent. @@ -109,8 +95,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o ### `post-companies-tools-stdio-templates-disable` -Capability ID: `connection-setup/post-companies-tools-stdio-templates-disable`. - API: `present` — `POST /api/companies/{companyId}/tools/stdio-templates/{templateId}/disable`; JSON REST. Agent access: `operator-only` — existing human setup or approval surface; agent can identify the saved setup and inspect the result. Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent. @@ -120,8 +104,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o ### `post-companies-tools-mcp-import-json` -Capability ID: `connection-setup/post-companies-tools-mcp-import-json`. - API: `present` — `POST /api/companies/{companyId}/tools/mcp/import-json`; JSON REST. Agent access: `operator-only` — existing human setup or approval surface; agent can identify the saved setup and inspect the result. Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent. @@ -131,8 +113,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o ### `post-runtime-tools-connections-search` -Capability ID: `connection-setup/post-runtime-tools-connections-search`. - API: `present` — `POST /runtime-tools/connections/search`; JSON REST. Agent access: `available` — existing REST/native runtime tool or scoped gateway client, as documented by the linked route. Policy: Existing run-bound tool, scoped credential lease, execution policy, or assigned-email-agent checks; connection-management grants do not bypass these controls. @@ -147,8 +127,6 @@ Review: `operation-reviewed`. ### `post-companies-tools-apps-connect` -Capability ID: `connection-setup/post-companies-tools-apps-connect`. - API: `present` — `POST /api/companies/{companyId}/tools/apps/connect`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -158,8 +136,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-companies-tools-connections` -Capability ID: `connection-setup/post-companies-tools-connections`. - API: `present` — `POST /api/companies/{companyId}/tools/connections`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -174,8 +150,6 @@ Review: `operation-reviewed`. ### `post-agents-me-connections-start-authorization` -Capability ID: `connection-setup/post-agents-me-connections-start-authorization`. - API: `present` — `POST /api/agents/me/connections/{connectionId}/start-authorization`; JSON REST. Agent access: `available` — existing REST/native runtime tool or scoped gateway client, as documented by the linked route. Policy: `tools:manage_connections`, an active run, and the server-derived responsible user matching the authorization subject; shared scope/trust/user checks apply. Human authentication remains a handoff, with the actual agent retained for audit. JSON authorization initiation is explicitly REST-callable. @@ -185,8 +159,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-agents-me-connections-token` -Capability ID: `connection-setup/post-agents-me-connections-token`. - API: `present` — `POST /api/agents/me/connections/{connectionId}/token`; JSON REST. Agent access: `available` — existing REST/native runtime tool or scoped gateway client, as documented by the linked route. Policy: Existing run-bound tool, scoped credential lease, execution policy, or assigned-email-agent checks; connection-management grants do not bypass these controls. @@ -196,8 +168,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-companies-tools-connections-start-authorization` -Capability ID: `connection-setup/post-companies-tools-connections-start-authorization`. - API: `present` — `POST /api/companies/{companyId}/tools/connections/{connectionId}/start-authorization`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -207,8 +177,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-tools-oauth-start` -Capability ID: `connection-setup/post-tools-oauth-start`. - API: `present` — `POST /api/tools/oauth/{connectionId}/start`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. Returns the saved setup without issuing agent-bound OAuth state; the human browser initiates provider consent. @@ -218,8 +186,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability. ### `post-runtime-tools-github-credentials` -Capability ID: `connection-setup/post-runtime-tools-github-credentials`. - API: `present` — `POST /runtime-tools/github/credentials`; JSON REST. Agent access: `available` — existing REST/native runtime tool or scoped gateway client, as documented by the linked route. Policy: Existing run-bound tool, scoped credential lease, execution policy, or assigned-email-agent checks; connection-management grants do not bypass these controls. @@ -234,8 +200,6 @@ Review: `operation-reviewed`. ### `get-tools-oauth-cloud-connector-enrollment` -Capability ID: `connection-setup/get-tools-oauth-cloud-connector-enrollment`. - API: `present` — `GET /api/tools/oauth/cloud-connector/enrollment`; JSON REST. Agent access: `operator-only` — existing human setup or approval surface; agent can identify the saved setup and inspect the result. Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent. @@ -245,8 +209,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o ### `post-tools-oauth-cloud-connector-enrollment` -Capability ID: `connection-setup/post-tools-oauth-cloud-connector-enrollment`. - API: `present` — `POST /api/tools/oauth/cloud-connector/enrollment`; JSON REST. Agent access: `operator-only` — existing human setup or approval surface; agent can identify the saved setup and inspect the result. Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent. @@ -256,8 +218,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o ### `get-tools-oauth-cloud-connector-enrollment-callback` -Capability ID: `connection-setup/get-tools-oauth-cloud-connector-enrollment-callback`. - API: `present` — `GET /api/tools/oauth/cloud-connector/enrollment-callback`; JSON REST. Agent access: `operator-only` — existing human setup or approval surface; agent can identify the saved setup and inspect the result. Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent. @@ -267,8 +227,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o ### `get-tools-oauth-cloud-connector-callback` -Capability ID: `connection-setup/get-tools-oauth-cloud-connector-callback`. - API: `present` — `GET /api/tools/oauth/cloud-connector/callback`; browser/provider/MCP protocol. Agent access: `restricted` — browser authentication return. Policy: Provider state/signature or gateway-token verification, company and resource binding; browser returns require the configuring human. Agent-issued durable gateway tokens retain both issuer and responsible-user authority. @@ -278,8 +236,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o ### `get-tools-oauth-paperclip-id-callback` -Capability ID: `connection-setup/get-tools-oauth-paperclip-id-callback`. - API: `present` — `GET /api/tools/oauth/paperclip-id/callback`; browser/provider/MCP protocol. Agent access: `restricted` — browser authentication return. Policy: Provider state/signature or gateway-token verification, company and resource binding; browser returns require the configuring human. Agent-issued durable gateway tokens retain both issuer and responsible-user authority. @@ -289,8 +245,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o ### `get-tools-vercel-connect-callback` -Capability ID: `connection-setup/get-tools-vercel-connect-callback`. - API: `present` — `GET /api/tools/vercel-connect/callback`; browser/provider/MCP protocol. Agent access: `restricted` — browser authentication return. Policy: Provider state/signature or gateway-token verification, company and resource binding; browser returns require the configuring human. Agent-issued durable gateway tokens retain both issuer and responsible-user authority. @@ -300,8 +254,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o ### `get-tools-oauth-callback` -Capability ID: `connection-setup/get-tools-oauth-callback`. - API: `present` — `GET /api/tools/oauth/callback`; browser/provider/MCP protocol. Agent access: `restricted` — browser authentication return. Policy: Provider state/signature or gateway-token verification, company and resource binding; browser returns require the configuring human. Agent-issued durable gateway tokens retain both issuer and responsible-user authority. @@ -311,8 +263,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o ### `get-mcp-runtime-tools` -Capability ID: `connection-setup/get-mcp-runtime-tools`. - API: `present` — `GET /mcp/runtime-tools`; browser/provider/MCP protocol. Agent access: `available` — existing authenticated MCP/provider protocol; not callable as JSON REST. Policy: Provider state/signature or gateway-token verification, company and resource binding; browser returns require the configuring human. Agent-issued durable gateway tokens retain both issuer and responsible-user authority. @@ -322,8 +272,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-mcp-runtime-tools` -Capability ID: `connection-setup/post-mcp-runtime-tools`. - API: `present` — `POST /mcp/runtime-tools`; browser/provider/MCP protocol. Agent access: `available` — existing authenticated MCP/provider protocol; not callable as JSON REST. Policy: Provider state/signature or gateway-token verification, company and resource binding; browser returns require the configuring human. Agent-issued durable gateway tokens retain both issuer and responsible-user authority. @@ -333,8 +281,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-connection-intents-setup-options` -Capability ID: `connection-setup/get-connection-intents-setup-options`. - API: `present` — `GET /api/connection-intents/{interactionId}/setup-options`; JSON REST. Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result. Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent. @@ -344,8 +290,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o ### `post-connection-intents-phase` -Capability ID: `connection-setup/post-connection-intents-phase`. - API: `present` — `POST /api/connection-intents/{interactionId}/phase`; JSON REST. Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result. Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent. @@ -355,8 +299,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o ### `post-connection-intents-complete` -Capability ID: `connection-setup/post-connection-intents-complete`. - API: `present` — `POST /api/connection-intents/{interactionId}/complete`; JSON REST. Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result. Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent. @@ -371,8 +313,6 @@ Review: `operation-reviewed`. ### `post-companies-tools-apps-finalize-oauth-access` -Capability ID: `connection-setup/post-companies-tools-apps-finalize-oauth-access`. - API: `present` — `POST /api/companies/{companyId}/tools/apps/{connectionId}/finalize-oauth-access`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -382,8 +322,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-companies-tools-apps-finish` -Capability ID: `connection-setup/post-companies-tools-apps-finish`. - API: `present` — `POST /api/companies/{companyId}/tools/apps/{connectionId}/finish`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -393,8 +331,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-tool-connections-reconnect` -Capability ID: `connection-setup/post-tool-connections-reconnect`. - API: `present` — `POST /api/tool-connections/{connectionId}/reconnect`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -409,8 +345,6 @@ Review: `operation-reviewed`. ### `post-runtime-tools-connections-request` -Capability ID: `connection-setup/post-runtime-tools-connections-request`. - API: `present` — `POST /runtime-tools/connections/request`; JSON REST. Agent access: `available` — existing REST/native runtime tool or scoped gateway client, as documented by the linked route. Policy: Existing run-bound tool, scoped credential lease, execution policy, or assigned-email-agent checks; connection-management grants do not bypass these controls. @@ -420,8 +354,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-connection-intents-decline` -Capability ID: `connection-setup/post-connection-intents-decline`. - API: `present` — `POST /api/connection-intents/{interactionId}/decline`; JSON REST. Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result. Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent. @@ -436,8 +368,6 @@ Review: `operation-reviewed`. ### `post-companies-chat-endpoints` -Capability ID: `connection-setup/post-companies-chat-endpoints`. - API: `present` — `POST /api/companies/{companyId}/chat-endpoints`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -452,8 +382,6 @@ Review: `operation-reviewed`. ### `post-tool-connections-health-check` -Capability ID: `connection-setup/post-tool-connections-health-check`. - API: `present` — `POST /api/tool-connections/{connectionId}/health-check`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. diff --git a/maps/agent-access-map/gateways-profiles.md b/maps/agent-access-map/gateways-profiles.md index 6746c5f55c7..782a6e122ca 100644 --- a/maps/agent-access-map/gateways-profiles.md +++ b/maps/agent-access-map/gateways-profiles.md @@ -21,8 +21,6 @@ Review: `operation-reviewed`. ### `get-companies-tools-gateways` -Capability ID: `gateways-profiles/get-companies-tools-gateways`. - API: `present` — `GET /api/companies/{companyId}/tools/gateways`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections (responsible user: tools:admin)`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -32,8 +30,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability. ### `post-companies-tools-gateways` -Capability ID: `gateways-profiles/post-companies-tools-gateways`. - API: `present` — `POST /api/companies/{companyId}/tools/gateways`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections (responsible user: tools:admin)`; bindings also require `tools:manage_profiles`. [Shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -43,8 +39,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability. ### `patch-tool-gateway-gateways` -Capability ID: `gateways-profiles/patch-tool-gateway-gateways`. - API: `present` — `PATCH /api/tool-gateway/gateways/{gatewayId}`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections (responsible user: tools:admin)`; setting or clearing bindings also requires `tools:manage_profiles`. [Shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -59,8 +53,6 @@ Review: `operation-reviewed`. ### `get-companies-tools-profiles` -Capability ID: `gateways-profiles/get-companies-tools-profiles`. - API: `present` — `GET /api/companies/{companyId}/tools/profiles`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -70,8 +62,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-companies-tools-profiles` -Capability ID: `gateways-profiles/post-companies-tools-profiles`. - API: `present` — `POST /api/companies/{companyId}/tools/profiles`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -81,8 +71,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability. ### `get-companies-tools-profiles-effective-agents` -Capability ID: `gateways-profiles/get-companies-tools-profiles-effective-agents`. - API: `present` — `GET /api/companies/{companyId}/tools/profiles/effective/agents/{agentId}`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -92,8 +80,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `patch-tool-profiles` -Capability ID: `gateways-profiles/patch-tool-profiles`. - API: `present` — `PATCH /api/tool-profiles/{profileId}`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -103,8 +89,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-tool-profiles-duplicate` -Capability ID: `gateways-profiles/post-tool-profiles-duplicate`. - API: `present` — `POST /api/tool-profiles/{profileId}/duplicate`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -114,8 +98,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `delete-tool-profiles` -Capability ID: `gateways-profiles/delete-tool-profiles`. - API: `present` — `DELETE /api/tool-profiles/{profileId}`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -125,8 +107,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-tool-profiles-entries` -Capability ID: `gateways-profiles/post-tool-profiles-entries`. - API: `present` — `POST /api/tool-profiles/{profileId}/entries`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -136,8 +116,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `patch-tool-profile-entries` -Capability ID: `gateways-profiles/patch-tool-profile-entries`. - API: `present` — `PATCH /api/tool-profile-entries/{entryId}`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -147,8 +125,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `delete-tool-profile-entries` -Capability ID: `gateways-profiles/delete-tool-profile-entries`. - API: `present` — `DELETE /api/tool-profile-entries/{entryId}`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -158,8 +134,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-companies-tools-profiles-bind` -Capability ID: `gateways-profiles/post-companies-tools-profiles-bind`. - API: `present` — `POST /api/companies/{companyId}/tools/profiles/{profileId}/bind`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -169,8 +143,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability. ### `post-companies-tools-profiles-unbind` -Capability ID: `gateways-profiles/post-companies-tools-profiles-unbind`. - API: `present` — `POST /api/companies/{companyId}/tools/profiles/{profileId}/unbind`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_profiles`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -185,8 +157,6 @@ Review: `operation-reviewed`. ### `get-mcp-gateways` -Capability ID: `gateways-profiles/get-mcp-gateways`. - API: `present` — `GET /mcp/gateways/{gatewayPublicId}`; browser/provider/MCP protocol. Agent access: `available` — existing authenticated MCP/provider protocol; not callable as JSON REST. Policy: Provider state/signature or gateway-token verification, company and resource binding; browser returns require the configuring human. Agent-issued durable gateway tokens retain both issuer and responsible-user authority. @@ -196,8 +166,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-mcp-gateways` -Capability ID: `gateways-profiles/post-mcp-gateways`. - API: `present` — `POST /mcp/gateways/{gatewayPublicId}`; browser/provider/MCP protocol. Agent access: `available` — existing authenticated MCP/provider protocol; not callable as JSON REST. Policy: Provider state/signature or gateway-token verification, company and resource binding; browser returns require the configuring human. Agent-issued durable gateway tokens retain both issuer and responsible-user authority. @@ -207,8 +175,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability. ### `get-tool-gateway-gateways-mcp` -Capability ID: `gateways-profiles/get-tool-gateway-gateways-mcp`. - API: `present` — `GET /api/tool-gateway/gateways/{gatewayId}/mcp`; browser/provider/MCP protocol. Agent access: `available` — existing authenticated MCP/provider protocol; not callable as JSON REST. Policy: Provider state/signature or gateway-token verification, company and resource binding; browser returns require the configuring human. Agent-issued durable gateway tokens retain both issuer and responsible-user authority. @@ -218,8 +184,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-tool-gateway-gateways-mcp` -Capability ID: `gateways-profiles/post-tool-gateway-gateways-mcp`. - API: `present` — `POST /api/tool-gateway/gateways/{gatewayId}/mcp`; browser/provider/MCP protocol. Agent access: `available` — existing authenticated MCP/provider protocol; not callable as JSON REST. Policy: Provider state/signature or gateway-token verification, company and resource binding; browser returns require the configuring human. Agent-issued durable gateway tokens retain both issuer and responsible-user authority. @@ -229,8 +193,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-tool-gateway-tools` -Capability ID: `gateways-profiles/get-tool-gateway-tools`. - API: `present` — `GET /api/tool-gateway/tools`; JSON REST. Agent access: `available` — existing REST/native runtime tool or scoped gateway client, as documented by the linked route. Policy: Existing run-bound tool, scoped credential lease, execution policy, or assigned-email-agent checks; connection-management grants do not bypass these controls. @@ -240,8 +202,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-tool-gateway-tools-call` -Capability ID: `gateways-profiles/post-tool-gateway-tools-call`. - API: `present` — `POST /api/tool-gateway/tools/call`; JSON REST. Agent access: `available` — existing REST/native runtime tool or scoped gateway client, as documented by the linked route. Policy: Existing run-bound tool, scoped credential lease, execution policy, or assigned-email-agent checks; connection-management grants do not bypass these controls. @@ -256,8 +216,6 @@ Review: `operation-reviewed`. ### `post-tool-gateway-gateways-tokens` -Capability ID: `gateways-profiles/post-tool-gateway-gateways-tokens`. - API: `present` — `POST /api/tool-gateway/gateways/{gatewayId}/tokens`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections (responsible user: tools:admin)`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -267,8 +225,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability. ### `post-tool-gateway-gateway-tokens-revoke` -Capability ID: `gateways-profiles/post-tool-gateway-gateway-tokens-revoke`. - API: `present` — `POST /api/tool-gateway/gateway-tokens/{tokenId}/revoke`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections (responsible user: tools:admin)`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -278,8 +234,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-tool-gateway-sessions` -Capability ID: `gateways-profiles/post-tool-gateway-sessions`. - API: `present` — `POST /api/tool-gateway/sessions`; JSON REST. Agent access: `available` — existing REST/native runtime tool or scoped gateway client, as documented by the linked route. Policy: Existing run-bound tool, scoped credential lease, execution policy, or assigned-email-agent checks; connection-management grants do not bypass these controls. @@ -289,8 +243,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-tool-gateway-sessions-revoke` -Capability ID: `gateways-profiles/post-tool-gateway-sessions-revoke`. - API: `present` — `POST /api/tool-gateway/sessions/{sessionId}/revoke`; JSON REST. Agent access: `available` — existing REST/native runtime tool or scoped gateway client, as documented by the linked route. Policy: Existing run-bound tool, scoped credential lease, execution policy, or assigned-email-agent checks; connection-management grants do not bypass these controls. @@ -305,8 +257,6 @@ Review: `operation-reviewed`. ### `get-companies-tools-runtime-slots` -Capability ID: `gateways-profiles/get-companies-tools-runtime-slots`. - API: `present` — `GET /api/companies/{companyId}/tools/runtime-slots`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_runtime`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -316,8 +266,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-companies-tools-runtime-slots-stop` -Capability ID: `gateways-profiles/post-companies-tools-runtime-slots-stop`. - API: `present` — `POST /api/companies/{companyId}/tools/runtime-slots/{id}/stop`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_runtime`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -327,8 +275,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-companies-tools-runtime-slots-restart` -Capability ID: `gateways-profiles/post-companies-tools-runtime-slots-restart`. - API: `present` — `POST /api/companies/{companyId}/tools/runtime-slots/{id}/restart`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_runtime`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -338,8 +284,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-companies-tools-runtime-health` -Capability ID: `gateways-profiles/get-companies-tools-runtime-health`. - API: `present` — `GET /api/companies/{companyId}/tools/runtime-health`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_runtime`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -349,8 +293,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-companies-tools-runs-decisions` -Capability ID: `gateways-profiles/get-companies-tools-runs-decisions`. - API: `present` — `GET /api/companies/{companyId}/tools/runs/{runId}/decisions`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:view_audit`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -360,8 +302,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-tool-gateway-runtime-slots` -Capability ID: `gateways-profiles/get-tool-gateway-runtime-slots`. - API: `present` — `GET /api/tool-gateway/runtime-slots`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_runtime`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -371,8 +311,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-tool-gateway-runtime-slots-stop` -Capability ID: `gateways-profiles/post-tool-gateway-runtime-slots-stop`. - API: `present` — `POST /api/tool-gateway/runtime-slots/{slotId}/stop`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_runtime`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -382,8 +320,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-tool-gateway-runtime-slots-restart` -Capability ID: `gateways-profiles/post-tool-gateway-runtime-slots-restart`. - API: `present` — `POST /api/tool-gateway/runtime-slots/{slotId}/restart`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_runtime`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -393,8 +329,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-tool-gateway-audit` -Capability ID: `gateways-profiles/get-tool-gateway-audit`. - API: `present` — `GET /api/tool-gateway/audit`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:view_audit`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. diff --git a/maps/agent-access-map/runs-adapters.md b/maps/agent-access-map/runs-adapters.md index 84b08ffa53a..905145f8825 100644 --- a/maps/agent-access-map/runs-adapters.md +++ b/maps/agent-access-map/runs-adapters.md @@ -342,8 +342,6 @@ Review: `operation-reviewed`. ### `get-companies-ai-connection-pools` -Capability ID: `runs-adapters/get-companies-ai-connection-pools`. - API: `present` — `GET /api/companies/{companyId}/ai-connection-pools`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -353,8 +351,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-companies-ai-connection-pools-inspection` -Capability ID: `runs-adapters/get-companies-ai-connection-pools-inspection`. - API: `present` — `GET /api/companies/{companyId}/ai-connection-pools/{poolId}/inspection`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -364,8 +360,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-companies-ai-connection-pools` -Capability ID: `runs-adapters/post-companies-ai-connection-pools`. - API: `present` — `POST /api/companies/{companyId}/ai-connection-pools`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -375,8 +369,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability. ### `delete-companies-ai-connection-pools` -Capability ID: `runs-adapters/delete-companies-ai-connection-pools`. - API: `present` — `DELETE /api/companies/{companyId}/ai-connection-pools/{poolId}`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -386,8 +378,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability. ### `post-companies-ai-connections-local-attempts` -Capability ID: `runs-adapters/post-companies-ai-connections-local-attempts`. - API: `present` — `POST /api/companies/{companyId}/ai-connections/local/attempts`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -397,8 +387,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-companies-ai-connections-local-check` -Capability ID: `runs-adapters/post-companies-ai-connections-local-check`. - API: `present` — `POST /api/companies/{companyId}/ai-connections/local/check`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -408,8 +396,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `delete-companies-ai-connections-local-attempts` -Capability ID: `runs-adapters/delete-companies-ai-connections-local-attempts`. - API: `present` — `DELETE /api/companies/{companyId}/ai-connections/local/attempts/{sessionId}`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -419,8 +405,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-companies-ai-connections-local-attempts-code` -Capability ID: `runs-adapters/post-companies-ai-connections-local-attempts-code`. - API: `present` — `POST /api/companies/{companyId}/ai-connections/local/attempts/{sessionId}/code`; JSON REST. Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result. Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent. @@ -430,8 +414,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o ### `get-companies-ai-connections` -Capability ID: `runs-adapters/get-companies-ai-connections`. - API: `present` — `GET /api/companies/{companyId}/ai-connections`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -441,8 +423,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability. ### `get-companies-ai-connections-usage` -Capability ID: `runs-adapters/get-companies-ai-connections-usage`. - API: `present` — `GET /api/companies/{companyId}/ai-connections/{connectionId}/usage`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -452,8 +432,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-companies-ai-connections-active-runs` -Capability ID: `runs-adapters/get-companies-ai-connections-active-runs`. - API: `present` — `GET /api/companies/{companyId}/ai-connections/{connectionId}/active-runs`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -463,8 +441,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-companies-ai-connections` -Capability ID: `runs-adapters/post-companies-ai-connections`. - API: `present` — `POST /api/companies/{companyId}/ai-connections`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -474,8 +450,6 @@ Gaps: Provider fixtures do not qualify live provider setup or availability. ### `post-companies-ai-connections-local` -Capability ID: `runs-adapters/post-companies-ai-connections-local`. - API: `present` — `POST /api/companies/{companyId}/ai-connections/local`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -485,8 +459,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `put-companies-ai-connections-default` -Capability ID: `runs-adapters/put-companies-ai-connections-default`. - API: `present` — `PUT /api/companies/{companyId}/ai-connections/default`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -496,8 +468,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-companies-ai-connections-login-setup` -Capability ID: `runs-adapters/get-companies-ai-connections-login-setup`. - API: `present` — `GET /api/companies/{companyId}/ai-connections/login/{sessionId}/setup`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -507,8 +477,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-companies-ai-connections-login` -Capability ID: `runs-adapters/get-companies-ai-connections-login`. - API: `present` — `GET /api/companies/{companyId}/ai-connections/login/{sessionId}`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -518,8 +486,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-companies-adapters-models` -Capability ID: `runs-adapters/get-companies-adapters-models`. - API: `present` — `GET /api/companies/{companyId}/adapters/{type}/models`; JSON REST. Agent access: `available` — existing REST/native runtime tool or scoped gateway client, as documented by the linked route. Policy: Existing run-bound tool, scoped credential lease, execution policy, or assigned-email-agent checks; connection-management grants do not bypass these controls. @@ -529,8 +495,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-companies-adapters-login-sessions` -Capability ID: `runs-adapters/post-companies-adapters-login-sessions`. - API: `present` — `POST /api/companies/{companyId}/adapters/{type}/login-sessions`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -540,8 +504,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-companies-adapters-login-sessions-active` -Capability ID: `runs-adapters/get-companies-adapters-login-sessions-active`. - API: `present` — `GET /api/companies/{companyId}/adapters/{type}/login-sessions/active`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -551,8 +513,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-companies-adapters-login-sessions` -Capability ID: `runs-adapters/get-companies-adapters-login-sessions`. - API: `present` — `GET /api/companies/{companyId}/adapters/{type}/login-sessions/{sessionId}`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -562,8 +522,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-companies-adapters-login-sessions-cancel` -Capability ID: `runs-adapters/post-companies-adapters-login-sessions-cancel`. - API: `present` — `POST /api/companies/{companyId}/adapters/{type}/login-sessions/{sessionId}/cancel`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -573,8 +531,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-agents-claude-login` -Capability ID: `runs-adapters/post-agents-claude-login`. - API: `present` — `POST /api/agents/{id}/claude-login`; JSON REST. Agent access: `operator-only` — existing human setup or approval surface; agent can identify the saved setup and inspect the result. Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent. @@ -584,8 +540,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o ### `post-companies-setup-token-login-sessions` -Capability ID: `runs-adapters/post-companies-setup-token-login-sessions`. - API: `present` — `POST /api/companies/{companyId}/setup-token-login-sessions`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -595,8 +549,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-companies-setup-token-login-sessions-active` -Capability ID: `runs-adapters/get-companies-setup-token-login-sessions-active`. - API: `present` — `GET /api/companies/{companyId}/setup-token-login-sessions/active`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -606,8 +558,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-companies-setup-token-login-sessions` -Capability ID: `runs-adapters/get-companies-setup-token-login-sessions`. - API: `present` — `GET /api/companies/{companyId}/setup-token-login-sessions/{sessionId}`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -617,8 +567,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `get-companies-setup-token-login-sessions-prompt` -Capability ID: `runs-adapters/get-companies-setup-token-login-sessions-prompt`. - API: `present` — `GET /api/companies/{companyId}/setup-token-login-sessions/{sessionId}/prompt`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -628,8 +576,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-companies-setup-token-login-sessions-code` -Capability ID: `runs-adapters/post-companies-setup-token-login-sessions-code`. - API: `present` — `POST /api/companies/{companyId}/setup-token-login-sessions/{sessionId}/code`; JSON REST. Agent access: `restricted` — existing human setup or approval surface; agent can identify the saved setup and inspect the result. Policy: Human consent, identity confirmation, action approval, or trusted-host administration. This endpoint does not delegate human identity or self-approval to an agent. @@ -639,8 +585,6 @@ Gaps: Agent invocation is denied by the stated policy. The authorized human or o ### `post-companies-setup-token-login-sessions-completion` -Capability ID: `runs-adapters/post-companies-setup-token-login-sessions-completion`. - API: `present` — `POST /api/companies/{companyId}/setup-token-login-sessions/{sessionId}/completion`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -650,8 +594,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `post-companies-setup-token-login-sessions-cancel` -Capability ID: `runs-adapters/post-companies-setup-token-login-sessions-cancel`. - API: `present` — `POST /api/companies/{companyId}/setup-token-login-sessions/{sessionId}/cancel`; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: `tools:manage_connections`; [shared management policy](../../doc/plans/2026-10-13-connection-api-parity.md#authorization-contract). Resolved resources and every affected target are checked; personal ownership remains the responsible user. @@ -661,8 +603,6 @@ Gaps: This individual operation has source review but no recorded HTTP verificat ### `update-agent-ai-binding` -Capability ID: `runs-adapters/update-agent-ai-binding`. - API: `present` — `PATCH /api/agents/{id}` with a managed AI binding in runtime configuration; JSON REST. Agent access: `available` — agent REST and default native `search_api` / `call_api`. Policy: existing agent configuration permission plus `tools:manage_profiles`, current responsible-user authority, resolved account/pool access and target-agent authority. Pool members retain their credential audience.