docs/agent-parity/coverage-matrix.json
Rama main · réplica de lectura del repositorio original.
{
"contract_sha256": "2b7e8201c86ba68c315131ce2ae683950a0650110e22a19c72819e74c625ea54",
"contract_operation_count": 329,
"literal_dashboard_call_count": 368,
"dashboard_contract_gaps": [],
"limitations": [
"Literal typed client calls are captured with file and line evidence. Dynamic endpoint expressions and alternate auth/upload/stream transports require manual review.",
"Current interface states describe source implementation, not production availability."
],
"operations": [
{
"operation": "acceptHumanInvite",
"method": "POST",
"path": "/auth/invites/accept",
"dashboard_calls": [],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "human",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "acceptManagedPlatform",
"method": "POST",
"path": "/managed-platforms/operations",
"dashboard_calls": [
"web/src/routes/platforms.new.tsx:343",
"web/src/routes/platforms.$platformId.delete.tsx:13"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "deploy",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "acceptManagedPlatformRecovery",
"method": "POST",
"path": "/managed-platform-recovery/operations",
"dashboard_calls": [
"web/src/components/platform-recovery.tsx:197"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "deploy",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "acknowledgeAlarm",
"method": "POST",
"path": "/alarms/{id}/acknowledge",
"dashboard_calls": [],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"scope_requirement": "project_credential",
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "activateLicense",
"method": "PUT",
"path": "/license",
"dashboard_calls": [
"web/src/components/license-settings.tsx:104"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "applicationProvenance",
"method": "GET",
"path": "/applications/{id}/provenance",
"dashboard_calls": [],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "applyLegacyExternalDatabaseBindingReview",
"method": "POST",
"path": "/external-databases/{id}/connect",
"dashboard_calls": [
"web/src/routes/databases.external.$externalDatabaseId.connect.tsx:63"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "approveDeviceAuthorization",
"method": "POST",
"path": "/auth/device/approve",
"dashboard_calls": [
"web/src/routes/login.device.tsx:50"
],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "human",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "attachServiceTLS",
"method": "POST",
"path": "/applications/{id}/services/{service}/tls",
"dashboard_calls": [
"web/src/components/tls-settings.tsx:448"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "attestDatabaseInspection",
"method": "POST",
"path": "/databases/{id}/inspect",
"dashboard_calls": [
"web/src/components/database-inspection.tsx:30"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "beginDomainVerification",
"method": "POST",
"path": "/applications/{id}/domains",
"dashboard_calls": [
"web/src/routes/applications.$applicationId.domains.tsx:513"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "beginPasskeyLogin",
"method": "POST",
"path": "/auth/passkeys/login/start",
"dashboard_calls": [
"web/src/components/auth-screen.tsx:193"
],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "human",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "beginPasskeyRegistration",
"method": "POST",
"path": "/auth/passkeys/register/start",
"dashboard_calls": [
"web/src/components/account-settings.tsx:404"
],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "human",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "beginTOTP",
"method": "POST",
"path": "/auth/mfa/totp/start",
"dashboard_calls": [
"web/src/components/account-settings.tsx:377"
],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "human",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "cancelActionsJob",
"method": "POST",
"path": "/applications/{id}/actions/{service}/jobs/{slot}/cancel",
"dashboard_calls": [
"web/src/lib/actions-cancellation.ts:72"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "cancelBackup",
"method": "POST",
"path": "/backups/{id}/cancel",
"dashboard_calls": [
"web/src/routes/backups.$jobId.tsx:142"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "backup",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"references": {},
"review": "canonical",
"scope_requirement": "project_credential",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "cancelDeployment",
"method": "POST",
"path": "/deployments/{id}/cancel",
"dashboard_calls": [
"web/src/routes/deployments.$deploymentId.tsx:570"
],
"current_interface": "dedicated workflow",
"policy": {
"boundary": "project",
"category": "deploy",
"exposure": "dedicated",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "cancelManagedPlatformRecoveryOperation",
"method": "POST",
"path": "/managed-platform-recovery-operations/{id}/cancel",
"dashboard_calls": [
"web/src/components/platform-recovery.tsx:447"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "deploy",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "cancelSourceBuild",
"method": "POST",
"path": "/builds/{id}/runs/{run}/cancel",
"dashboard_calls": [
"web/src/routes/builds.$buildId.tsx:879"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "checkSecretRequirements",
"method": "POST",
"path": "/deployment-secret-requirements",
"dashboard_calls": [
"web/src/components/deployment-secrets.tsx:74"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "closeHostTerminal",
"method": "DELETE",
"path": "/nodes/{node}/terminal/{session}",
"dashboard_calls": [],
"current_interface": "dedicated workflow",
"policy": {
"boundary": "installation",
"category": "terminal",
"exposure": "dedicated",
"permissions": [
"nodes:terminal"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "closeMCPSession",
"method": "DELETE",
"path": "/mcp",
"dashboard_calls": [],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "transport",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "completeGitHubAppInstallation",
"method": "POST",
"path": "/git/github/install/complete",
"dashboard_calls": [
"web/src/components/git-app-setup.tsx:237"
],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "protocol",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the provider authorization flow with the exact actor session and provider state. Generic invocation cannot supply this proof.",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "completeGitHubAppManifest",
"method": "POST",
"path": "/git/github/complete",
"dashboard_calls": [
"web/src/components/git-app-setup.tsx:248"
],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "protocol",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the provider authorization flow with the exact actor session and provider state. Generic invocation cannot supply this proof.",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "completeGitSourceOAuth",
"method": "POST",
"path": "/git/oauth/complete",
"dashboard_calls": [
"web/src/components/git-oauth.tsx:107"
],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "protocol",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the provider authorization flow with the exact actor session and provider state. Generic invocation cannot supply this proof.",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "completeNamedGitSourceOAuth",
"method": "POST",
"path": "/git/connections/{id}/oauth/complete",
"dashboard_calls": [],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "protocol",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the provider authorization flow with the exact actor session and provider state. Generic invocation cannot supply this proof.",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "completeOnboarding",
"method": "POST",
"path": "/auth/onboarding",
"dashboard_calls": [],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "human",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "completeProviderMFA",
"method": "POST",
"path": "/auth/mfa/complete",
"dashboard_calls": [],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "human",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "configureGitHub",
"method": "PUT",
"path": "/integrations/github",
"dashboard_calls": [],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "credentials",
"credential_required": true,
"exposure": "installation",
"permissions": [
"admin",
"agent:admin",
"agent:credentials"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "configureGitLab",
"method": "PUT",
"path": "/integrations/gitlab",
"dashboard_calls": [],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "credentials",
"credential_required": true,
"exposure": "installation",
"permissions": [
"admin",
"agent:admin",
"agent:credentials"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "confirmTOTP",
"method": "POST",
"path": "/auth/mfa/totp/confirm",
"dashboard_calls": [
"web/src/components/account-settings.tsx:381"
],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "human",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "connectSlack",
"method": "POST",
"path": "/integrations/slack/connect",
"dashboard_calls": [
"web/src/components/slack-settings.tsx:300",
"web/src/components/slack-settings.tsx:906",
"web/src/components/slack-settings.tsx:908"
],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "protocol",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the provider authorization flow with the exact actor session and provider state. Generic invocation cannot supply this proof.",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "convertCompose",
"method": "POST",
"path": "/compose/convert",
"dashboard_calls": [
"web/src/components/compose-import.tsx:61"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"references": {
"application_id": "applications"
},
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "cordonNode",
"method": "POST",
"path": "/nodes/{name}/cordon",
"dashboard_calls": [
"web/src/components/node-controls.tsx:174"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "createApplicationDNSRecords",
"method": "POST",
"path": "/applications/{id}/domains/dns-records",
"dashboard_calls": [
"web/src/routes/applications.$applicationId.domains.tsx:109"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "createApplicationTLSIssuer",
"method": "POST",
"path": "/applications/{id}/tls/issuers",
"dashboard_calls": [
"web/src/components/tls-settings.tsx:660"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "createBackup",
"method": "POST",
"path": "/backups",
"dashboard_calls": [
"web/src/components/backup-run-form.tsx:47"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "backup",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"references": {
"application_id": "applications",
"managed_database_id": "databases"
},
"review": "canonical",
"scope_requirement": "project_credential",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "createBackupDestination",
"method": "POST",
"path": "/backup-destinations",
"dashboard_calls": [
"web/src/components/backup-destination-form.tsx:141"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "credentials",
"credential_required": true,
"exposure": "generic",
"permissions": [
"deployments:write",
"agent:credentials"
],
"prerequisite": "",
"review": "canonical",
"scope_requirement": "project_credential",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "createBackupSchedule",
"method": "POST",
"path": "/backup-schedules",
"dashboard_calls": [
"web/src/components/backup-schedule-form.tsx:81"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "backup",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"references": {
"application_id": "applications",
"managed_database_id": "databases"
},
"review": "canonical",
"scope_requirement": "project_credential",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "createCustomRole",
"method": "POST",
"path": "/roles",
"dashboard_calls": [
"web/src/components/pro-access.tsx:191"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "createDeployment",
"method": "POST",
"path": "/deployments",
"dashboard_calls": [
"web/src/components/backend-certificate-form.tsx:124",
"web/src/components/delete-service-dialog.tsx:71",
"web/src/components/service-environment-form.tsx:139",
"web/src/components/deploy-dialog.tsx:318",
"web/src/components/virtual-network-connect.tsx:130",
"web/src/components/managed-actions-form.tsx:474",
"web/src/routes/applications.$applicationId.domains.tsx:598"
],
"current_interface": "dedicated workflow",
"policy": {
"boundary": "project",
"category": "deploy",
"exposure": "dedicated",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "createDeploymentNotification",
"method": "POST",
"path": "/applications/{id}/notifications",
"dashboard_calls": [
"web/src/routes/applications.$applicationId.notifications.tsx:161"
],
"current_interface": "dedicated workflow",
"policy": {
"boundary": "project",
"category": "deploy",
"exposure": "dedicated",
"permissions": [],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "createEnvironment",
"method": "POST",
"path": "/projects/{project}/environments",
"dashboard_calls": [
"web/src/components/project-environment.tsx:58"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "createGitConnection",
"method": "POST",
"path": "/git/connections",
"dashboard_calls": [
"web/src/components/git-connections.tsx:402"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "credentials",
"credential_required": true,
"exposure": "generic",
"machine_permissions": [
"git:manage"
],
"permissions": [
"deployments:write",
"agent:credentials"
],
"prerequisite": "",
"review": "canonical",
"scope_requirement": "project_credential",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "createKey",
"method": "POST",
"path": "/keys",
"dashboard_calls": [
"web/src/routes/settings.tsx:505"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "credentials",
"credential_required": true,
"exposure": "installation",
"permissions": [
"admin",
"agent:admin",
"agent:credentials"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "createManagedDatabase",
"method": "POST",
"path": "/databases",
"dashboard_calls": [
"web/src/components/database-form.tsx:139",
"web/src/components/database-create.tsx:180"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "createNodeEnrollment",
"method": "POST",
"path": "/nodes/enrollments",
"dashboard_calls": [
"web/src/components/node-controls.tsx:370"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "credentials",
"credential_required": true,
"exposure": "installation",
"permissions": [
"admin",
"agent:admin",
"agent:credentials"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "createPreview",
"method": "POST",
"path": "/applications/{id}/previews",
"dashboard_calls": [
"web/src/routes/applications.$applicationId.previews.new.tsx:125"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "createProject",
"method": "POST",
"path": "/projects",
"dashboard_calls": [
"web/src/components/project-wizard.tsx:110"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "createProjectInvite",
"method": "POST",
"path": "/projects/{project}/invites",
"dashboard_calls": [
"web/src/components/team-settings.tsx:820"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "createRegistry",
"method": "POST",
"path": "/registries",
"dashboard_calls": [
"web/src/components/registry-settings.tsx:255"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "createSourceBuild",
"method": "POST",
"path": "/builds",
"dashboard_calls": [
"web/src/components/build-form.tsx:431"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"references": {
"application_id": "applications"
},
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "createTLSIssuer",
"method": "POST",
"path": "/tls/issuers",
"dashboard_calls": [
"web/src/components/tls-settings.tsx:664"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "createTeam",
"method": "POST",
"path": "/teams",
"dashboard_calls": [
"web/src/components/team-settings.tsx:560"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "createTeamInvite",
"method": "POST",
"path": "/teams/{id}/invites",
"dashboard_calls": [
"web/src/components/team-settings.tsx:814"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "createTerminal",
"method": "POST",
"path": "/applications/{id}/services/{service}/terminal",
"dashboard_calls": [
"web/src/components/pod-terminal.tsx:202"
],
"current_interface": "dedicated workflow",
"policy": {
"boundary": "project",
"category": "terminal",
"exposure": "dedicated",
"permissions": [
"deployments:write",
"pods:exec"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "createVirtualNetwork",
"method": "POST",
"path": "/virtual-networks",
"dashboard_calls": [
"web/src/components/virtual-network-form.tsx:171"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"machine_permissions": [
"networks:write"
],
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "createWorkloadSecret",
"method": "POST",
"path": "/secrets/{name}",
"dashboard_calls": [
"web/src/components/template-secret-field.tsx:85",
"web/src/components/deployment-secrets.tsx:87",
"web/src/lib/database-binding.ts:88"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "deleteBackupArtifact",
"method": "DELETE",
"path": "/backup-artifacts/{id}",
"dashboard_calls": [
"web/src/routes/backups.tsx:347"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "backup",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"references": {},
"review": "canonical",
"scope_requirement": "project_credential",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "deleteBackupDestination",
"method": "DELETE",
"path": "/backup-destinations/{id}",
"dashboard_calls": [
"web/src/routes/backups.tsx:704"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "backup",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"references": {},
"review": "canonical",
"scope_requirement": "project_credential",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "deleteBackupSchedule",
"method": "DELETE",
"path": "/backup-schedules/{id}",
"dashboard_calls": [
"web/src/routes/backups.tsx:711"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "backup",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"references": {},
"review": "canonical",
"scope_requirement": "project_credential",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "deleteCustomRole",
"method": "DELETE",
"path": "/roles/{role}",
"dashboard_calls": [
"web/src/components/pro-access.tsx:120"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "deleteDNSProvider",
"method": "DELETE",
"path": "/dns-providers/{name}",
"dashboard_calls": [
"web/src/routes/settings.dns-providers.tsx:190"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "deleteDeploymentNotification",
"method": "DELETE",
"path": "/applications/{id}/notifications/{target}",
"dashboard_calls": [
"web/src/routes/applications.$applicationId.notifications.tsx:200"
],
"current_interface": "dedicated workflow",
"policy": {
"boundary": "project",
"category": "deploy",
"exposure": "dedicated",
"permissions": [],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "deleteEmptyApplication",
"method": "DELETE",
"path": "/applications/{id}",
"dashboard_calls": [
"web/src/components/delete-resource.tsx:63"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"machine_permissions": [
"applications:manage"
],
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "deleteEmptyEnvironment",
"method": "DELETE",
"path": "/projects/{project}/environments/{environment}",
"dashboard_calls": [
"web/src/components/project-settings.tsx:96"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "The actor must have current project management authority.",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "deleteEmptyProject",
"method": "DELETE",
"path": "/projects/{id}",
"dashboard_calls": [
"web/src/components/delete-resource.tsx:74"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "deleteExternalDatabase",
"method": "DELETE",
"path": "/external-databases/{id}",
"dashboard_calls": [
"web/src/routes/databases.external.$externalDatabaseId.tsx:98"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "deleteGitConnection",
"method": "DELETE",
"path": "/git/connections/{id}",
"dashboard_calls": [
"web/src/components/git-connections.tsx:758"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"machine_permissions": [
"git:manage"
],
"permissions": [
"deployments:write"
],
"prerequisite": "",
"resource": "git/connections",
"resource_parameter": "id",
"review": "canonical",
"scope_requirement": "project_credential",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "deleteManagedDatabase",
"method": "DELETE",
"path": "/databases/{id}",
"dashboard_calls": [
"web/src/routes/databases.$databaseId.tsx:319"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "deletePasskey",
"method": "DELETE",
"path": "/auth/passkeys/{id}",
"dashboard_calls": [
"web/src/components/account-settings.tsx:395"
],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "human",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "deletePreview",
"method": "DELETE",
"path": "/previews/{preview}",
"dashboard_calls": [
"web/src/components/application-previews.tsx:161"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "deploy",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"resource": "previews",
"resource_parameter": "preview",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "deleteRegistry",
"method": "DELETE",
"path": "/registries/{name}",
"dashboard_calls": [
"web/src/components/registry-settings.tsx:177"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "deleteRetainedApplicationData",
"method": "DELETE",
"path": "/storage/retained/{id}",
"dashboard_calls": [
"web/src/components/retained-storage.tsx:48"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"machine_permissions": [
"applications:manage"
],
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"scope_requirement": "project_credential",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "deleteSecretProvider",
"method": "DELETE",
"path": "/secret-providers/{name}",
"dashboard_calls": [
"web/src/components/secret-providers.tsx:156"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "deleteTeam",
"method": "DELETE",
"path": "/teams/{id}",
"dashboard_calls": [
"web/src/components/team-settings.tsx:521"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "deleteTerminal",
"method": "DELETE",
"path": "/applications/{id}/services/{service}/terminal/{session}",
"dashboard_calls": [],
"current_interface": "dedicated workflow",
"policy": {
"boundary": "project",
"category": "terminal",
"exposure": "dedicated",
"permissions": [
"deployments:write",
"pods:exec"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "deleteVirtualNetwork",
"method": "DELETE",
"path": "/virtual-networks/{name}",
"dashboard_calls": [
"web/src/routes/networks.$networkName.tsx:326"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"machine_permissions": [
"networks:write"
],
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "deleteWorkloadSecret",
"method": "DELETE",
"path": "/secrets/{name}",
"dashboard_calls": [
"web/src/components/application-secrets.tsx:165"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "deploySource",
"method": "POST",
"path": "/applications/{id}/source/deploy",
"dashboard_calls": [
"web/src/components/application-source.tsx:232"
],
"current_interface": "dedicated workflow",
"policy": {
"boundary": "project",
"category": "deploy",
"exposure": "dedicated",
"permissions": [],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "deploySourceBuild",
"method": "POST",
"path": "/builds/{id}/runs/{run}/deploy",
"dashboard_calls": [
"web/src/routes/builds.$buildId.tsx:830"
],
"current_interface": "dedicated workflow",
"policy": {
"boundary": "project",
"category": "deploy",
"exposure": "dedicated",
"permissions": [],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "deploySourceImport",
"method": "POST",
"path": "/sources/deploy",
"dashboard_calls": [
"web/src/routes/applications.import.tsx:78"
],
"current_interface": "dedicated workflow",
"policy": {
"boundary": "project",
"category": "deploy",
"exposure": "dedicated",
"permissions": [],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "deployTemplate",
"method": "POST",
"path": "/templates/{id}/deploy",
"dashboard_calls": [
"web/src/components/template-form.tsx:189"
],
"current_interface": "dedicated workflow",
"policy": {
"boundary": "project",
"category": "deploy",
"exposure": "dedicated",
"permissions": [],
"prerequisite": "",
"references": {
"application_id": "applications"
},
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "deploymentNotifications",
"method": "GET",
"path": "/applications/{id}/notifications",
"dashboard_calls": [
"web/src/routes/applications.$applicationId.notifications.tsx:62"
],
"current_interface": "dedicated workflow",
"policy": {
"boundary": "project",
"category": "deploy",
"exposure": "dedicated",
"permissions": [],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "detectBuildFramework",
"method": "POST",
"path": "/builds/detect",
"dashboard_calls": [
"web/src/components/build-form.tsx:175"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"references": {
"application_id": "applications"
},
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "disableTOTP",
"method": "POST",
"path": "/auth/mfa/totp/disable",
"dashboard_calls": [
"web/src/components/account-settings.tsx:390"
],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "human",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "discardDomainVerification",
"method": "DELETE",
"path": "/applications/{id}/domains/{hostname}",
"dashboard_calls": [
"web/src/routes/applications.$applicationId.domains.tsx:465"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "disconnectSlack",
"method": "DELETE",
"path": "/integrations/slack",
"dashboard_calls": [
"web/src/components/slack-settings.tsx:463"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "drainNode",
"method": "POST",
"path": "/nodes/{name}/drain",
"dashboard_calls": [
"web/src/components/node-controls.tsx:168"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "executePodCommand",
"method": "POST",
"path": "/applications/{id}/services/{service}/exec",
"dashboard_calls": [],
"current_interface": "dedicated workflow",
"policy": {
"boundary": "project",
"category": "execution",
"exposure": "dedicated",
"permissions": [],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "exportUserAuditHistory",
"method": "GET",
"path": "/audit/export",
"dashboard_calls": [],
"current_interface": "dedicated workflow",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "dedicated",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "Use audit_export for one bounded CSV page. Use next_cursor to resume the export.",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json",
"text/csv"
]
},
{
"operation": "finishPasskeyLogin",
"method": "POST",
"path": "/auth/passkeys/login/finish",
"dashboard_calls": [
"web/src/components/auth-screen.tsx:196"
],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "human",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "finishPasskeyRegistration",
"method": "POST",
"path": "/auth/passkeys/register/finish",
"dashboard_calls": [
"web/src/components/account-settings.tsx:410"
],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "human",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "finishProviderLogin",
"method": "GET",
"path": "/auth/oauth/{provider}/callback",
"dashboard_calls": [],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "human",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "finishServiceMove",
"method": "POST",
"path": "/applications/{id}/service-moves/{move}/finish",
"dashboard_calls": [
"web/src/components/move-service-dialog.tsx:385"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getAccountSecurity",
"method": "GET",
"path": "/auth/security",
"dashboard_calls": [
"web/src/components/account-settings.tsx:27"
],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "human",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getActionsJobLogs",
"method": "GET",
"path": "/applications/{id}/actions/{service}/jobs/{slot}/logs",
"dashboard_calls": [
"web/src/components/managed-actions-workflows.tsx:347"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"logs:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getActionsProviderHold",
"method": "GET",
"path": "/applications/{id}/actions/{service}/hold",
"dashboard_calls": [
"web/src/components/managed-actions-hold.tsx:145"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getAlarmSettings",
"method": "GET",
"path": "/alarm-settings",
"dashboard_calls": [
"web/src/lib/alarms.ts:44"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getAppearance",
"method": "GET",
"path": "/settings/appearance",
"dashboard_calls": [],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getApplication",
"method": "GET",
"path": "/applications/{id}",
"dashboard_calls": [
"web/src/components/backend-certificate-form.tsx:79",
"web/src/components/shell.tsx:236",
"web/src/components/build-form.tsx:79",
"web/src/components/service-environment-form.tsx:63",
"web/src/components/move-service-dialog.tsx:62",
"web/src/components/virtual-network-connect.tsx:66",
"web/src/components/virtual-network-connect.tsx:86",
"web/src/routes/templates.$templateId.tsx:17",
"web/src/routes/applications.$applicationId.previews.new.tsx:27",
"web/src/routes/applications.$applicationId.previews.new.tsx:238",
"web/src/routes/databases.$databaseId.connect.tsx:75",
"web/src/routes/deployments.$deploymentId.tsx:56",
"web/src/routes/applications.$applicationId.services.new.tsx:27",
"web/src/routes/applications.$applicationId.source.tsx:19",
"web/src/routes/applications.$applicationId.configure.tsx:31",
"web/src/routes/applications.$applicationId.tsx:126",
"web/src/routes/builds.new.tsx:22",
"web/src/routes/applications.$applicationId.notifications.tsx:55",
"web/src/routes/applications.$applicationId.domains.tsx:38",
"web/src/routes/applications.$applicationId.domains.tsx:133",
"web/src/routes/applications.$applicationId.environment.tsx:22",
"web/src/routes/applications.$applicationId.certificates.tsx:21"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getAuthStatus",
"method": "GET",
"path": "/auth/status",
"dashboard_calls": [
"web/src/components/team-settings.tsx:784",
"web/src/components/auth-screen.tsx:67",
"web/src/lib/installation-settings.ts:22"
],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "human",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getBackup",
"method": "GET",
"path": "/backups/{id}",
"dashboard_calls": [
"web/src/routes/backups.$jobId.tsx:21"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "none",
"scope_requirement": "project_credential",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getBackupArtifact",
"method": "GET",
"path": "/backup-artifacts/{id}",
"dashboard_calls": [
"web/src/routes/databases.import.tsx:62",
"web/src/routes/backups.artifacts.$artifactId.restore.tsx:35"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "none",
"scope_requirement": "project_credential",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getCloudCapabilities",
"method": "GET",
"path": "/cloud/capabilities",
"dashboard_calls": [],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getDatabaseImport",
"method": "GET",
"path": "/backup-imports/{id}",
"dashboard_calls": [
"web/src/routes/databases.import.tsx:53"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "none",
"scope_requirement": "project_credential",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getDatabaseMetricHistory",
"method": "GET",
"path": "/databases/{id}/metrics",
"dashboard_calls": [
"web/src/components/database-cockpit.tsx:106"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getDatabaseOperation",
"method": "GET",
"path": "/database-operations/{id}",
"dashboard_calls": [
"web/src/routes/databases.$databaseId.resize-retry.tsx:31",
"web/src/routes/databases.$databaseId.switchover.tsx:33"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"resource": "database-operations",
"resource_parameter": "id",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getDatabasePublicEndpointCapabilities",
"method": "GET",
"path": "/databases/{id}/public-endpoint-capabilities",
"dashboard_calls": [
"web/src/lib/databases.ts:55"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getDatabasePublicEndpointOperation",
"method": "GET",
"path": "/database-public-endpoint-operations/{id}",
"dashboard_calls": [
"web/src/routes/databases.$databaseId.public-endpoints.tsx:91"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"resource": "database-public-endpoint-operations",
"resource_parameter": "id",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getDatabasePublicTrust",
"method": "GET",
"path": "/databases/{id}/trust",
"dashboard_calls": [
"web/src/components/database-security.tsx:125"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getDatabaseQueryCapabilities",
"method": "GET",
"path": "/databases/{id}/query-capabilities",
"dashboard_calls": [
"web/src/lib/databases.ts:22"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"databases:query"
],
"resource": "databases",
"resource_parameter": "id",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getDeployment",
"method": "GET",
"path": "/deployments/{id}",
"dashboard_calls": [
"web/src/components/shell.tsx:210",
"web/src/components/parent-navigation.tsx:28",
"web/src/routes/deployments.$deploymentId.tsx:43",
"web/src/routes/deployments.$deploymentId.tsx:71",
"web/src/routes/builds.$buildId.tsx:568"
],
"current_interface": "dedicated workflow",
"policy": {
"boundary": "project",
"category": "deploy",
"exposure": "dedicated",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getDeviceConsent",
"method": "GET",
"path": "/auth/device",
"dashboard_calls": [
"web/src/routes/login.device.tsx:26"
],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "human",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getExternalDatabase",
"method": "GET",
"path": "/external-databases/{id}",
"dashboard_calls": [
"web/src/lib/external-databases.ts:20"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getExternalDatabaseOperation",
"method": "GET",
"path": "/external-database-operations/{id}",
"dashboard_calls": [],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"resource": "external-database-operations",
"resource_parameter": "id",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getExternalDatabaseTrust",
"method": "GET",
"path": "/external-databases/{id}/trust",
"dashboard_calls": [],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getGitConnection",
"method": "GET",
"path": "/git/connections/{id}",
"dashboard_calls": [
"web/src/components/git-connections.tsx:125"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"machine_permissions": [
"git:manage"
],
"permissions": [
"deployments:write"
],
"prerequisite": "",
"resource": "git/connections",
"resource_parameter": "id",
"review": "canonical",
"scope_requirement": "project_credential",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getGitProviderSetup",
"method": "GET",
"path": "/git/setup",
"dashboard_calls": [
"web/src/lib/git-connections.ts:51"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"machine_permissions": [
"git:manage"
],
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"scope_requirement": "project_credential",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getHostAccess",
"method": "GET",
"path": "/host-access",
"dashboard_calls": [
"web/src/routes/settings.host-access.tsx:25",
"web/src/routes/infrastructure.nodes.$node.terminal.tsx:14"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"scope_requirement": "installation_owner",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getIdempotentDeployment",
"method": "GET",
"path": "/idempotency/{key}",
"dashboard_calls": [],
"current_interface": "dedicated workflow",
"policy": {
"boundary": "project",
"category": "deploy",
"exposure": "dedicated",
"permissions": [],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getIdentity",
"method": "GET",
"path": "/me",
"dashboard_calls": [
"web/src/components/shell.tsx:71"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getInstallationLoginProvider",
"method": "GET",
"path": "/installation/login-providers/{provider}",
"dashboard_calls": [
"web/src/components/login-provider-settings.tsx:37"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getInstallationLogs",
"method": "GET",
"path": "/installation/logs",
"dashboard_calls": [],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"scope_requirement": "installation_owner",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getInstallationSMTP",
"method": "GET",
"path": "/installation/smtp",
"dashboard_calls": [
"web/src/components/smtp-settings.tsx:28"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getInstallationSetup",
"method": "GET",
"path": "/installation/setup",
"dashboard_calls": [
"web/src/components/installation.tsx:42"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"scope_requirement": "installation_owner",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getInstallationStatus",
"method": "GET",
"path": "/installation/status",
"dashboard_calls": [
"web/src/components/installation.tsx:149",
"web/src/components/installation.tsx:283"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"scope_requirement": "installation_owner",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getLicenseStatus",
"method": "GET",
"path": "/license",
"dashboard_calls": [
"web/src/lib/license.ts:6"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getManagedActions",
"method": "GET",
"path": "/applications/{id}/actions",
"dashboard_calls": [
"web/src/components/managed-actions-workflows.tsx:93",
"web/src/components/managed-actions-status.tsx:23"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getManagedActionsCapabilities",
"method": "GET",
"path": "/actions/capabilities",
"dashboard_calls": [
"web/src/components/managed-actions-form.tsx:154"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getManagedDatabase",
"method": "GET",
"path": "/databases/{id}",
"dashboard_calls": [
"web/src/lib/databases.ts:86"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getManagedPlatform",
"method": "GET",
"path": "/managed-platforms/{id}",
"dashboard_calls": [
"web/src/lib/managed-platforms.ts:61"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getManagedPlatformCatalog",
"method": "GET",
"path": "/managed-platforms/catalog",
"dashboard_calls": [
"web/src/lib/managed-platforms.ts:47"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getManagedPlatformOperation",
"method": "GET",
"path": "/managed-platform-operations/{id}",
"dashboard_calls": [],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getManagedPlatformPublicTrust",
"method": "GET",
"path": "/managed-platforms/{id}/trust",
"dashboard_calls": [
"web/src/components/platform-security.tsx:31"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getManagedPlatformRecoveryOperation",
"method": "GET",
"path": "/managed-platform-recovery-operations/{id}",
"dashboard_calls": [],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getOnboarding",
"method": "GET",
"path": "/auth/onboarding",
"dashboard_calls": [
"web/src/routes/login.onboarding.tsx:16"
],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "human",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getOrganizationSecurity",
"method": "GET",
"path": "/organization/security",
"dashboard_calls": [
"web/src/components/pro-access.tsx:284"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getPreview",
"method": "GET",
"path": "/previews/{preview}",
"dashboard_calls": [],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"resource": "previews",
"resource_parameter": "preview",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getProfile",
"method": "GET",
"path": "/auth/profile",
"dashboard_calls": [
"web/src/routes/settings.profile.tsx:17"
],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "human",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getProxy",
"method": "GET",
"path": "/settings/haproxy",
"dashboard_calls": [
"web/src/components/proxy-settings.tsx:38",
"web/src/components/proxy-settings.tsx:251"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getSecretProvider",
"method": "GET",
"path": "/secret-providers/{name}",
"dashboard_calls": [
"web/src/components/secret-provider-form.tsx:121",
"web/src/components/secret-provider-editor.tsx:15"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getServiceDelivery",
"method": "GET",
"path": "/applications/{id}/services/{service}/delivery",
"dashboard_calls": [
"web/src/components/service-delivery.tsx:23"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getServiceRuntime",
"method": "GET",
"path": "/applications/{id}/services/{service}/runtime",
"dashboard_calls": [
"web/src/components/pod-terminal.tsx:65",
"web/src/components/service-detail.tsx:66",
"web/src/components/logs.tsx:69"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getServiceTLS",
"method": "GET",
"path": "/applications/{id}/services/{service}/tls",
"dashboard_calls": [
"web/src/components/tls-settings.tsx:60"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getShowcase",
"method": "GET",
"path": "/showcase",
"dashboard_calls": [
"web/src/components/sample-banner.tsx:19"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"fixed_scope": {
"project": "demo",
"environment": "development"
},
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getSlackIntegration",
"method": "GET",
"path": "/integrations/slack",
"dashboard_calls": [
"web/src/components/slack-settings.tsx:59",
"web/src/components/slack-settings.tsx:998"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getSource",
"method": "GET",
"path": "/applications/{id}/source",
"dashboard_calls": [
"web/src/components/application-source.tsx:36",
"web/src/routes/applications.$applicationId.source.tsx:26"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getSourceBuild",
"method": "GET",
"path": "/builds/{id}",
"dashboard_calls": [
"web/src/components/shell.tsx:225",
"web/src/routes/builds.$buildId.edit.tsx:16",
"web/src/routes/builds.$buildId.tsx:67"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "getVirtualNetwork",
"method": "GET",
"path": "/virtual-networks/{name}",
"dashboard_calls": [
"web/src/components/virtual-network-connect.tsx:92",
"web/src/components/virtual-network-form.tsx:97",
"web/src/routes/networks.$networkName.tsx:57",
"web/src/routes/networks.$networkName.tsx:283",
"web/src/routes/networks.$networkName.connect.tsx:18"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "gitHubAppWebhook",
"method": "POST",
"path": "/webhooks/github-app/{app}",
"dashboard_calls": [],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "transport",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "githubStatus",
"method": "GET",
"path": "/integrations/github",
"dashboard_calls": [],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "githubWebhook",
"method": "POST",
"path": "/webhooks/github",
"dashboard_calls": [],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "transport",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "gitlabStatus",
"method": "GET",
"path": "/integrations/gitlab",
"dashboard_calls": [],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "gitlabWebhook",
"method": "POST",
"path": "/webhooks/gitlab",
"dashboard_calls": [],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "transport",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "grantHostAccess",
"method": "PUT",
"path": "/host-access/{user}",
"dashboard_calls": [
"web/src/routes/settings.host-access.tsx:76"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"scope_requirement": "installation_owner",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "inspectInvite",
"method": "POST",
"path": "/auth/invites/inspect",
"dashboard_calls": [
"web/src/components/auth-screen.tsx:87"
],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "human",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "installBuildWorkflow",
"method": "POST",
"path": "/builds/{id}/install",
"dashboard_calls": [
"web/src/routes/builds.$buildId.tsx:437"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "listActionsJobs",
"method": "GET",
"path": "/applications/{id}/actions/{service}/jobs",
"dashboard_calls": [
"web/src/components/managed-actions-workflows.tsx:80"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listAlarms",
"method": "GET",
"path": "/alarms",
"dashboard_calls": [
"web/src/lib/alarms.ts:27"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listApplicationDNSProviders",
"method": "GET",
"path": "/applications/{id}/domains/dns-providers",
"dashboard_calls": [
"web/src/routes/applications.$applicationId.domains.tsx:56"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listApplicationDomains",
"method": "GET",
"path": "/applications/{id}/domains",
"dashboard_calls": [
"web/src/routes/applications.$applicationId.tsx:135",
"web/src/routes/applications.$applicationId.domains.tsx:45"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listApplicationPreviews",
"method": "GET",
"path": "/applications/{id}/previews",
"dashboard_calls": [
"web/src/components/application-previews.tsx:35"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listApplicationTLSIssuers",
"method": "GET",
"path": "/applications/{id}/tls/issuers",
"dashboard_calls": [
"web/src/components/tls-settings.tsx:35"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listApplications",
"method": "GET",
"path": "/applications",
"dashboard_calls": [
"web/src/components/command-palette.tsx:48",
"web/src/components/move-service-dialog.tsx:43",
"web/src/components/compute-notice.tsx:14",
"web/src/components/application-list.tsx:62",
"web/src/routes/databases.$databaseId.connect.tsx:62"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listAudit",
"method": "GET",
"path": "/audit",
"dashboard_calls": [
"web/src/routes/settings.tsx:722"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listBackendCertificates",
"method": "GET",
"path": "/applications/{id}/services/{service}/certificates",
"dashboard_calls": [
"web/src/components/service-delivery.tsx:31"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listBackupArtifacts",
"method": "GET",
"path": "/backup-artifacts",
"dashboard_calls": [
"web/src/components/database-backups.tsx:13",
"web/src/routes/backups.tsx:155",
"web/src/routes/databases.$databaseId.recover.tsx:25"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "none",
"scope_requirement": "project_credential",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listBackupDestinations",
"method": "GET",
"path": "/backup-destinations",
"dashboard_calls": [
"web/src/lib/backups.ts:63"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "none",
"scope_requirement": "project_credential",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listBackupSchedules",
"method": "GET",
"path": "/backup-schedules",
"dashboard_calls": [
"web/src/lib/backups.ts:77"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "none",
"scope_requirement": "project_credential",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listBackupTargets",
"method": "GET",
"path": "/backup-targets",
"dashboard_calls": [
"web/src/lib/backups.ts:70"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "none",
"scope_requirement": "project_credential",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listBackups",
"method": "GET",
"path": "/backups",
"dashboard_calls": [
"web/src/routes/backups.tsx:146"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "none",
"scope_requirement": "project_credential",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listCustomRoles",
"method": "GET",
"path": "/roles",
"dashboard_calls": [
"web/src/components/pro-access.tsx:24"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listDNSProviders",
"method": "GET",
"path": "/dns-providers",
"dashboard_calls": [
"web/src/components/dns-provider-credential-fields.tsx:320",
"web/src/routes/settings.dns-providers.tsx:58"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listDatabaseConnections",
"method": "GET",
"path": "/databases/{id}/connections",
"dashboard_calls": [
"web/src/lib/databases.ts:73"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listDatabaseOperations",
"method": "GET",
"path": "/databases/{id}/operations",
"dashboard_calls": [
"web/src/lib/databases.ts:36"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listDatabasePlacementNodes",
"method": "GET",
"path": "/database-placement/nodes",
"dashboard_calls": [
"web/src/lib/databases.ts:29"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listDatabasePublicEndpoints",
"method": "GET",
"path": "/databases/{id}/public-endpoints",
"dashboard_calls": [
"web/src/lib/databases.ts:44"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listExternalDatabaseConnections",
"method": "GET",
"path": "/external-databases/{id}/connections",
"dashboard_calls": [
"web/src/lib/external-databases.ts:27"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listExternalDatabases",
"method": "GET",
"path": "/external-databases",
"dashboard_calls": [
"web/src/lib/external-databases.ts:13"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listGitConnections",
"method": "GET",
"path": "/git/connections",
"dashboard_calls": [
"web/src/lib/git-connections.ts:18"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"machine_permissions": [
"git:manage"
],
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"scope_requirement": "project_credential",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listGitRepositories",
"method": "GET",
"path": "/git/connections/{id}/repositories",
"dashboard_calls": [
"web/src/components/git-repository-field.tsx:50"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"machine_permissions": [
"git:manage"
],
"permissions": [
"deployments:write"
],
"prerequisite": "",
"resource": "git/connections",
"resource_parameter": "id",
"review": "canonical",
"scope_requirement": "project_credential",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listHumanSessions",
"method": "GET",
"path": "/auth/sessions",
"dashboard_calls": [
"web/src/components/account-settings.tsx:33"
],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "human",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listKeys",
"method": "GET",
"path": "/keys",
"dashboard_calls": [
"web/src/routes/settings.tsx:210"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listManagedDatabases",
"method": "GET",
"path": "/databases",
"dashboard_calls": [
"web/src/lib/databases.ts:96"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listManagedPlatformOperations",
"method": "GET",
"path": "/managed-platforms/{id}/operations",
"dashboard_calls": [
"web/src/lib/managed-platforms.ts:72"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listManagedPlatformRecoveryOperations",
"method": "GET",
"path": "/managed-platforms/{id}/recovery-operations",
"dashboard_calls": [
"web/src/lib/managed-platforms.ts:84"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listManagedPlatforms",
"method": "GET",
"path": "/managed-platforms",
"dashboard_calls": [
"web/src/lib/managed-platforms.ts:32"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listNodeEnrollments",
"method": "GET",
"path": "/nodes/enrollments",
"dashboard_calls": [
"web/src/components/node-controls.tsx:213"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listNodes",
"method": "GET",
"path": "/nodes",
"dashboard_calls": [
"web/src/components/node-controls.tsx:140",
"web/src/routes/infrastructure.tsx:208"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listPlacementNodes",
"method": "GET",
"path": "/placement/nodes",
"dashboard_calls": [
"web/src/components/service-execution-fields.tsx:76",
"web/src/components/managed-actions-form.tsx:200",
"web/src/routes/applications.$applicationId.services.new.tsx:35"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listProjectMembers",
"method": "GET",
"path": "/projects/{project}/members",
"dashboard_calls": [
"web/src/components/team-settings.tsx:90"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listProjects",
"method": "GET",
"path": "/projects",
"dashboard_calls": [
"web/src/components/team-settings.tsx:73",
"web/src/lib/projects.ts:8"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listRegistries",
"method": "GET",
"path": "/registries",
"dashboard_calls": [
"web/src/components/build-form.tsx:121",
"web/src/components/deploy-dialog.tsx:93",
"web/src/components/registry-settings.tsx:27",
"web/src/components/registry-editor-page.tsx:14"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listRequests",
"method": "GET",
"path": "/requests",
"dashboard_calls": [
"web/src/components/requests.tsx:74"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"logs:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listRetainedApplicationData",
"method": "GET",
"path": "/storage/retained",
"dashboard_calls": [
"web/src/components/retained-storage.tsx:36"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"machine_permissions": [
"applications:manage"
],
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listSecretProviders",
"method": "GET",
"path": "/secret-providers",
"dashboard_calls": [
"web/src/components/secret-providers.tsx:26"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listServiceMoves",
"method": "GET",
"path": "/applications/{id}/service-moves",
"dashboard_calls": [
"web/src/components/move-service-dialog.tsx:271"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listSlackChannels",
"method": "GET",
"path": "/integrations/slack/channels",
"dashboard_calls": [
"web/src/components/slack-settings.tsx:789",
"web/src/components/slack-settings.tsx:814"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listSlackDeliveries",
"method": "GET",
"path": "/integrations/slack/deliveries",
"dashboard_calls": [
"web/src/components/slack-settings.tsx:70"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listSourceBuildRuns",
"method": "GET",
"path": "/builds/{id}/runs",
"dashboard_calls": [
"web/src/routes/builds.$buildId.tsx:73"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listSourceBuilds",
"method": "GET",
"path": "/builds",
"dashboard_calls": [
"web/src/routes/builds.tsx:25"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listTLSIssuers",
"method": "GET",
"path": "/tls/issuers",
"dashboard_calls": [
"web/src/components/tls-settings.tsx:33"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listTeamMembers",
"method": "GET",
"path": "/teams/{id}/members",
"dashboard_calls": [
"web/src/components/team-settings.tsx:82"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listTeams",
"method": "GET",
"path": "/teams",
"dashboard_calls": [
"web/src/components/team-settings.tsx:52"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listTemplates",
"method": "GET",
"path": "/templates",
"dashboard_calls": [
"web/src/routes/templates.tsx:46",
"web/src/routes/templates.$templateId.tsx:26"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listUserAuditHistory",
"method": "GET",
"path": "/audit/history",
"dashboard_calls": [
"web/src/components/audit-history.tsx:30"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listUsers",
"method": "GET",
"path": "/users",
"dashboard_calls": [
"web/src/components/audit-history.tsx:23",
"web/src/components/team-settings.tsx:932",
"web/src/routes/settings.host-access.tsx:30"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listVirtualNetworkCandidates",
"method": "GET",
"path": "/virtual-networks/{name}/candidates",
"dashboard_calls": [
"web/src/components/virtual-network-connect.tsx:50"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listVirtualNetworks",
"method": "GET",
"path": "/virtual-networks",
"dashboard_calls": [
"web/src/routes/networks.tsx:26",
"web/src/routes/networks.new.tsx:18"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listVolumeResizes",
"method": "GET",
"path": "/applications/{id}/volume-resizes",
"dashboard_calls": [
"web/src/components/volume-resize.tsx:46"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "listWorkloadSecrets",
"method": "GET",
"path": "/secrets",
"dashboard_calls": [
"web/src/components/service-secrets.tsx:34",
"web/src/components/application-secrets.tsx:33",
"web/src/components/template-form.tsx:96",
"web/src/routes/databases.$databaseId.connect.tsx:92"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "loginWithPassword",
"method": "POST",
"path": "/auth/login",
"dashboard_calls": [],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "human",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "logoutHuman",
"method": "POST",
"path": "/auth/logout",
"dashboard_calls": [],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "human",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "mcpMessage",
"method": "POST",
"path": "/mcp",
"dashboard_calls": [],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "transport",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "namedGitWebhook",
"method": "POST",
"path": "/webhooks/git/{connection}",
"dashboard_calls": [],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "transport",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "observeSourceBuild",
"method": "GET",
"path": "/builds/{id}/runs/{run}",
"dashboard_calls": [
"web/src/routes/builds.$buildId.tsx:555"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "openHostTerminal",
"method": "POST",
"path": "/nodes/{node}/terminal",
"dashboard_calls": [
"web/src/components/pod-terminal.tsx:193"
],
"current_interface": "dedicated workflow",
"policy": {
"boundary": "installation",
"category": "terminal",
"exposure": "dedicated",
"permissions": [
"nodes:terminal"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "planBackupRestore",
"method": "POST",
"path": "/backup-artifacts/{id}/restore-plan",
"dashboard_calls": [
"web/src/routes/backups.artifacts.$artifactId.restore.tsx:275"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "backup",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"references": {
"application_id": "applications"
},
"review": "canonical",
"scope_requirement": "project_credential",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "planDeployment",
"method": "POST",
"path": "/plan",
"dashboard_calls": [
"web/src/components/backend-certificate-form.tsx:96",
"web/src/components/delete-service-dialog.tsx:56",
"web/src/components/service-environment-form.tsx:104",
"web/src/components/deploy-dialog.tsx:249",
"web/src/components/deploy-dialog.tsx:287",
"web/src/components/virtual-network-connect.tsx:108",
"web/src/components/managed-actions-form.tsx:438",
"web/src/routes/applications.$applicationId.domains.tsx:140"
],
"current_interface": "dedicated workflow",
"policy": {
"boundary": "project",
"category": "deploy",
"exposure": "dedicated",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "planServiceMove",
"method": "POST",
"path": "/applications/{id}/services/{service}/move-plan",
"dashboard_calls": [
"web/src/components/move-service-dialog.tsx:71"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"references": {
"destination_id": "applications"
},
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "planSource",
"method": "POST",
"path": "/applications/{id}/source/plan",
"dashboard_calls": [
"web/src/components/application-source.tsx:132"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "planSourceBuildDeployment",
"method": "POST",
"path": "/builds/{id}/runs/{run}/plan",
"dashboard_calls": [
"web/src/routes/builds.$buildId.tsx:727"
],
"current_interface": "dedicated workflow",
"policy": {
"boundary": "project",
"category": "deploy",
"exposure": "dedicated",
"permissions": [],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "planSourceImport",
"method": "POST",
"path": "/sources/plan",
"dashboard_calls": [
"web/src/routes/applications.import.tsx:90"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"machine_permissions": [
"git:manage"
],
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"scope_requirement": "project_credential",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "planTemplate",
"method": "POST",
"path": "/templates/{id}/plan",
"dashboard_calls": [
"web/src/components/template-form.tsx:118",
"web/src/components/template-form.tsx:142"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"references": {
"application_id": "applications"
},
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "planVirtualNetwork",
"method": "POST",
"path": "/virtual-networks/plan",
"dashboard_calls": [
"web/src/components/virtual-network-form.tsx:60"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"machine_permissions": [
"networks:write"
],
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "planVolumeResize",
"method": "POST",
"path": "/applications/{id}/volume-resizes/plan",
"dashboard_calls": [
"web/src/components/volume-resize.tsx:198"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "pollDeviceAuthorization",
"method": "POST",
"path": "/auth/device/token",
"dashboard_calls": [],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "human",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "pollHostTerminal",
"method": "GET",
"path": "/nodes/{node}/terminal/{session}/poll",
"dashboard_calls": [],
"current_interface": "dedicated workflow",
"policy": {
"boundary": "installation",
"category": "terminal",
"exposure": "dedicated",
"permissions": [
"nodes:terminal"
],
"prerequisite": "Use the bounded terminal tools with separate terminal opt-in.",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "pollTerminal",
"method": "GET",
"path": "/applications/{id}/services/{service}/terminal/{session}/poll",
"dashboard_calls": [],
"current_interface": "dedicated workflow",
"policy": {
"boundary": "project",
"category": "terminal",
"exposure": "dedicated",
"permissions": [
"deployments:write",
"pods:exec"
],
"prerequisite": "Use the bounded terminal tools with separate terminal opt-in.",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "previewBuildWorkflow",
"method": "POST",
"path": "/builds/{id}/preview",
"dashboard_calls": [
"web/src/routes/builds.$buildId.tsx:90",
"web/src/routes/builds.$buildId.tsx:290"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "publishDatabasePublicEndpoint",
"method": "POST",
"path": "/databases/{id}/public-endpoints",
"dashboard_calls": [
"web/src/routes/databases.$databaseId.public-endpoints.tsx:243"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "putAlarmSettings",
"method": "PUT",
"path": "/alarm-settings",
"dashboard_calls": [
"web/src/routes/alarms.settings.tsx:154"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "putDNSProvider",
"method": "PUT",
"path": "/dns-providers/{name}",
"dashboard_calls": [
"web/src/components/dns-provider-credential-fields.tsx:374"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "putInstallationLoginProvider",
"method": "PUT",
"path": "/installation/login-providers/{provider}",
"dashboard_calls": [
"web/src/components/login-provider-settings.tsx:193"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"password",
"clear_password",
"client_secret",
"clear_secret"
]
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "putInstallationSMTP",
"method": "PUT",
"path": "/installation/smtp",
"dashboard_calls": [
"web/src/components/smtp-settings.tsx:152"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"password",
"clear_password",
"client_secret",
"clear_secret"
]
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "putSecretProvider",
"method": "PUT",
"path": "/secret-providers/{name}",
"dashboard_calls": [
"web/src/components/secret-provider-form.tsx:86"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "putTemplateSecret",
"method": "PUT",
"path": "/templates/{id}/secrets/{name}",
"dashboard_calls": [
"web/src/components/template-secret-field.tsx:90"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "putWorkloadSecret",
"method": "PUT",
"path": "/secrets/{name}",
"dashboard_calls": [
"web/src/components/application-secrets.tsx:210",
"web/src/lib/save-environment.ts:35"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "queryInstallationLogs",
"method": "POST",
"path": "/installation/logs/query",
"dashboard_calls": [
"web/src/components/logs.tsx:83"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"scope_requirement": "installation_owner",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "queryLogs",
"method": "POST",
"path": "/applications/{id}/logs/query",
"dashboard_calls": [
"web/src/components/logs.tsx:89"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"logs:read"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "queryManagedDatabase",
"method": "POST",
"path": "/databases/{id}/query",
"dashboard_calls": [
"web/src/routes/databases.$databaseId.query.tsx:116"
],
"current_interface": "dedicated workflow",
"policy": {
"boundary": "project",
"category": "execution",
"exposure": "dedicated",
"permissions": [],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "readAlarm",
"method": "POST",
"path": "/alarms/{id}/read",
"dashboard_calls": [],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:read"
],
"scope_requirement": "project_credential",
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "registerAccount",
"method": "POST",
"path": "/auth/register",
"dashboard_calls": [],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "human",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "releaseActionsProviderHold",
"method": "POST",
"path": "/applications/{id}/actions/{service}/hold/release",
"dashboard_calls": [
"web/src/lib/actions-hold.ts:36"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "removeLicense",
"method": "DELETE",
"path": "/license",
"dashboard_calls": [
"web/src/components/license-settings.tsx:223"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "removeShowcase",
"method": "POST",
"path": "/showcase/remove",
"dashboard_calls": [
"web/src/components/sample-banner.tsx:114"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "renameApplication",
"method": "PUT",
"path": "/applications/{id}/name",
"dashboard_calls": [
"web/src/components/rename-resource.tsx:174"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"machine_permissions": [
"applications:manage"
],
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "renameProject",
"method": "PUT",
"path": "/projects/{id}/name",
"dashboard_calls": [
"web/src/components/rename-resource.tsx:183"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "renameService",
"method": "PUT",
"path": "/applications/{id}/services/{service}/name",
"dashboard_calls": [
"web/src/components/rename-resource.tsx:167"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"machine_permissions": [
"applications:manage"
],
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "replaceDatabaseConnection",
"method": "POST",
"path": "/databases/{id}/connect",
"dashboard_calls": [
"web/src/routes/databases.$databaseId.connect.tsx:211"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "requestPasswordReset",
"method": "POST",
"path": "/auth/password/forgot",
"dashboard_calls": [],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "human",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "requestRouting",
"method": "GET",
"path": "/applications/{id}/services/{service}/requests/routing",
"dashboard_calls": [
"web/src/components/requests.tsx:450"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "read",
"exposure": "generic",
"permissions": [
"logs:read"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "resetPassword",
"method": "POST",
"path": "/auth/password/reset",
"dashboard_calls": [],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "human",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "resizeManagedDatabase",
"method": "POST",
"path": "/databases/{id}/resize",
"dashboard_calls": [
"web/src/components/database-form.tsx:130"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "restartService",
"method": "POST",
"path": "/applications/{id}/services/{service}/restart",
"dashboard_calls": [
"web/src/components/service-detail.tsx:1160"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "restoreBackup",
"method": "POST",
"path": "/backup-artifacts/{id}/restore",
"dashboard_calls": [
"web/src/routes/databases.$databaseId.recover.tsx:104",
"web/src/routes/backups.artifacts.$artifactId.restore.tsx:256"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "backup",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"references": {},
"review": "canonical",
"scope_requirement": "project_credential",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "resumeGitHubAppSetup",
"method": "POST",
"path": "/git/connections/{id}/github/setup",
"dashboard_calls": [
"web/src/components/git-app-setup.tsx:102"
],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "protocol",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the provider authorization flow with the exact actor session and provider state. Generic invocation cannot supply this proof.",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "resumeService",
"method": "POST",
"path": "/applications/{id}/services/{service}/resume",
"dashboard_calls": [],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "retryManagedDatabaseResize",
"method": "POST",
"path": "/databases/{id}/resize-retry",
"dashboard_calls": [
"web/src/routes/databases.$databaseId.resize-retry.tsx:72"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "retryOracleDatabaseSwitchover",
"method": "POST",
"path": "/databases/{id}/switchover-retry",
"dashboard_calls": [
"web/src/routes/databases.$databaseId.switchover.tsx:79"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "retryServiceVolumeCleanup",
"method": "POST",
"path": "/deployments/{id}/volume-cleanup",
"dashboard_calls": [
"web/src/routes/deployments.$deploymentId.tsx:259"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "revealDatabaseCredentials",
"method": "POST",
"path": "/databases/{id}/credentials",
"dashboard_calls": [
"web/src/routes/databases.$databaseId.tsx:429"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "credentials",
"credential_required": true,
"exposure": "generic",
"permissions": [
"deployments:write",
"agent:credentials"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "reviewDatabaseConnection",
"method": "POST",
"path": "/databases/{id}/connection-plan",
"dashboard_calls": [
"web/src/routes/databases.$databaseId.connect.tsx:194"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"references": {
"application_id": "applications"
},
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "reviewDatabaseImport",
"method": "POST",
"path": "/backup-imports",
"dashboard_calls": [
"web/src/routes/databases.import.tsx:210"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "backup",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"references": {},
"review": "canonical",
"scope_requirement": "project_credential",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "reviewDatabasePublicEndpoint",
"method": "POST",
"path": "/databases/{id}/public-endpoint-plan",
"dashboard_calls": [
"web/src/routes/databases.$databaseId.public-endpoints.tsx:196"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "reviewDatabaseResize",
"method": "POST",
"path": "/databases/{id}/resize-plan",
"dashboard_calls": [
"web/src/components/database-form.tsx:118"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "reviewLegacyExternalDatabaseBinding",
"method": "POST",
"path": "/external-databases/{id}/connection-plan",
"dashboard_calls": [
"web/src/routes/databases.external.$externalDatabaseId.connect.tsx:59"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"references": {
"application_id": "applications"
},
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "reviewManagedDatabaseRecovery",
"method": "POST",
"path": "/databases/{id}/restore-plan",
"dashboard_calls": [
"web/src/routes/databases.$databaseId.recover.tsx:94",
"web/src/routes/backups.artifacts.$artifactId.restore.tsx:265"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "reviewManagedDatabaseResizeRetry",
"method": "POST",
"path": "/databases/{id}/resize-retry-plan",
"dashboard_calls": [
"web/src/routes/databases.$databaseId.resize-retry.tsx:66"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "reviewManagedPlatform",
"method": "POST",
"path": "/managed-platforms/reviews",
"dashboard_calls": [
"web/src/routes/platforms.new.tsx:334",
"web/src/routes/platforms.$platformId.delete.tsx:13"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "deploy",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "reviewManagedPlatformRecovery",
"method": "POST",
"path": "/managed-platform-recovery/reviews",
"dashboard_calls": [
"web/src/components/platform-recovery.tsx:180"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "deploy",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "reviewOracleDatabaseSwitchover",
"method": "POST",
"path": "/databases/{id}/switchover-plan",
"dashboard_calls": [
"web/src/routes/databases.$databaseId.switchover.tsx:72"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "revokeDatabasePublicEndpoint",
"method": "DELETE",
"path": "/databases/{id}/public-endpoints/{endpoint}",
"dashboard_calls": [
"web/src/routes/databases.$databaseId.public-endpoints.tsx:280"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "revokeHostAccess",
"method": "DELETE",
"path": "/host-access/{user}/{node}",
"dashboard_calls": [
"web/src/routes/settings.host-access.tsx:237"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"scope_requirement": "installation_owner",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "revokeHumanSession",
"method": "DELETE",
"path": "/auth/sessions/{id}",
"dashboard_calls": [
"web/src/components/account-settings.tsx:293"
],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "human",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "revokeKey",
"method": "DELETE",
"path": "/keys/{id}",
"dashboard_calls": [
"web/src/routes/settings.tsx:381"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "revokeNodeEnrollment",
"method": "DELETE",
"path": "/nodes/enrollments/{id}",
"dashboard_calls": [
"web/src/components/node-controls.tsx:321"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "rollbackApplication",
"method": "POST",
"path": "/applications/{id}/rollback",
"dashboard_calls": [
"web/src/routes/applications.$applicationId.tsx:760"
],
"current_interface": "dedicated workflow",
"policy": {
"boundary": "project",
"category": "deploy",
"exposure": "dedicated",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "rotateExternalDatabaseCredentials",
"method": "PUT",
"path": "/external-databases/{id}",
"dashboard_calls": [
"web/src/routes/databases.external.$externalDatabaseId.edit.tsx:40"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "rotateKey",
"method": "POST",
"path": "/keys/{id}/rotate",
"dashboard_calls": [
"web/src/routes/settings.tsx:499"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "credentials",
"credential_required": true,
"exposure": "installation",
"permissions": [
"admin",
"agent:admin",
"agent:credentials"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "runSourceBuild",
"method": "POST",
"path": "/builds/{id}/run",
"dashboard_calls": [
"web/src/routes/builds.$buildId.tsx:491"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "scaleService",
"method": "POST",
"path": "/applications/{id}/services/{service}/scale",
"dashboard_calls": [],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "setAppearance",
"method": "PATCH",
"path": "/settings/appearance",
"dashboard_calls": [],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "setProjectMember",
"method": "PUT",
"path": "/projects/{project}/members",
"dashboard_calls": [
"web/src/components/team-settings.tsx:309",
"web/src/components/team-settings.tsx:347"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "setProxy",
"method": "PATCH",
"path": "/settings/haproxy",
"dashboard_calls": [
"web/src/components/proxy-settings.tsx:214"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "setSlackChannel",
"method": "PUT",
"path": "/integrations/slack/channel",
"dashboard_calls": [
"web/src/components/slack-settings.tsx:957"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "setSlackEvents",
"method": "PUT",
"path": "/integrations/slack/events",
"dashboard_calls": [
"web/src/components/slack-settings.tsx:944"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "setSource",
"method": "PUT",
"path": "/applications/{id}/source",
"dashboard_calls": [
"web/src/components/application-source.tsx:306"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"machine_permissions": [
"git:manage"
],
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "setTeamMember",
"method": "PUT",
"path": "/teams/{id}/members/{user}",
"dashboard_calls": [
"web/src/components/team-settings.tsx:211"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "setTeamUsername",
"method": "PUT",
"path": "/teams/{id}/members/{user}/username",
"dashboard_calls": [
"web/src/components/team-settings.tsx:441"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "setupInstallerOwner",
"method": "POST",
"path": "/auth/setup",
"dashboard_calls": [],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "human",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "startDeviceAuthorization",
"method": "POST",
"path": "/auth/device/start",
"dashboard_calls": [],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "human",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "startGitHubAppManifest",
"method": "POST",
"path": "/git/github/start",
"dashboard_calls": [
"web/src/components/git-app-setup.tsx:108"
],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "protocol",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the provider authorization flow with the exact actor session and provider state. Generic invocation cannot supply this proof.",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "startGitSourceOAuth",
"method": "POST",
"path": "/git/connections/{id}/authorize",
"dashboard_calls": [
"web/src/components/git-oauth.tsx:56"
],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "protocol",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the provider authorization flow with the exact actor session and provider state. Generic invocation cannot supply this proof.",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "startProviderLogin",
"method": "GET",
"path": "/auth/oauth/{provider}/start",
"dashboard_calls": [],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "human",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "startServiceMove",
"method": "POST",
"path": "/applications/{id}/services/{service}/move",
"dashboard_calls": [
"web/src/components/move-service-dialog.tsx:80"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"references": {
"destination_id": "applications"
},
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "startVolumeResize",
"method": "POST",
"path": "/applications/{id}/volume-resizes",
"dashboard_calls": [
"web/src/components/volume-resize.tsx:202"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "stopService",
"method": "POST",
"path": "/applications/{id}/services/{service}/stop",
"dashboard_calls": [],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "streamEvents",
"method": "GET",
"path": "/deployments/{id}/events",
"dashboard_calls": [],
"current_interface": "dedicated workflow",
"policy": {
"boundary": "project",
"category": "stream",
"exposure": "dedicated",
"permissions": [],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json",
"text/event-stream"
]
},
{
"operation": "streamHostTerminal",
"method": "GET",
"path": "/nodes/{node}/terminal/{session}/output",
"dashboard_calls": [],
"current_interface": "dedicated workflow",
"policy": {
"boundary": "installation",
"category": "terminal",
"exposure": "dedicated",
"permissions": [
"nodes:terminal"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json",
"text/event-stream"
]
},
{
"operation": "streamLogs",
"method": "GET",
"path": "/applications/{id}/logs",
"dashboard_calls": [],
"current_interface": "dedicated workflow",
"policy": {
"boundary": "project",
"category": "stream",
"exposure": "dedicated",
"permissions": [],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json",
"text/plain"
]
},
{
"operation": "switchoverOracleDatabase",
"method": "POST",
"path": "/databases/{id}/switchover",
"dashboard_calls": [
"web/src/routes/databases.$databaseId.switchover.tsx:80"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "syncRegistry",
"method": "POST",
"path": "/registries/{name}/sync",
"dashboard_calls": [
"web/src/components/registry-settings.tsx:105"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json"
]
},
{
"operation": "terminalInput",
"method": "POST",
"path": "/applications/{id}/services/{service}/terminal/{session}/input",
"dashboard_calls": [],
"current_interface": "dedicated workflow",
"policy": {
"boundary": "project",
"category": "terminal",
"exposure": "dedicated",
"permissions": [
"deployments:write",
"pods:exec"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "terminalOutput",
"method": "GET",
"path": "/applications/{id}/services/{service}/terminal/{session}/output",
"dashboard_calls": [],
"current_interface": "dedicated workflow",
"policy": {
"boundary": "project",
"category": "terminal",
"exposure": "dedicated",
"permissions": [
"deployments:write",
"pods:exec"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [],
"response_media": [
"application/json",
"text/event-stream"
]
},
{
"operation": "testBackupDestination",
"method": "POST",
"path": "/backup-destinations/{id}/test",
"dashboard_calls": [
"web/src/routes/backups.tsx:431"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "backup",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"references": {},
"review": "canonical",
"scope_requirement": "project_credential",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "testDeploymentNotification",
"method": "POST",
"path": "/applications/{id}/notifications/{target}/test",
"dashboard_calls": [
"web/src/routes/applications.$applicationId.notifications.tsx:181"
],
"current_interface": "dedicated workflow",
"policy": {
"boundary": "project",
"category": "deploy",
"exposure": "dedicated",
"permissions": [],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "testInstallationSMTP",
"method": "POST",
"path": "/installation/smtp/test",
"dashboard_calls": [
"web/src/components/smtp-settings.tsx:90"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "testSlack",
"method": "POST",
"path": "/integrations/slack/test",
"dashboard_calls": [
"web/src/components/slack-settings.tsx:322"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "updateBackupDestination",
"method": "PUT",
"path": "/backup-destinations/{id}",
"dashboard_calls": [
"web/src/components/backup-destination-form.tsx:134"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "credentials",
"credential_required": true,
"exposure": "generic",
"permissions": [
"deployments:write",
"agent:credentials"
],
"prerequisite": "",
"review": "canonical",
"scope_requirement": "project_credential",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "updateBackupSchedule",
"method": "PUT",
"path": "/backup-schedules/{id}",
"dashboard_calls": [
"web/src/components/backup-schedule-form.tsx:76"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "backup",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"references": {
"application_id": "applications",
"managed_database_id": "databases"
},
"review": "canonical",
"scope_requirement": "project_credential",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "updateCustomRole",
"method": "PUT",
"path": "/roles/{role}",
"dashboard_calls": [
"web/src/components/pro-access.tsx:190"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "updateDeploymentNotification",
"method": "PUT",
"path": "/applications/{id}/notifications/{target}",
"dashboard_calls": [
"web/src/routes/applications.$applicationId.notifications.tsx:156"
],
"current_interface": "dedicated workflow",
"policy": {
"boundary": "project",
"category": "deploy",
"exposure": "dedicated",
"permissions": [],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "updateGitConnection",
"method": "PUT",
"path": "/git/connections/{id}",
"dashboard_calls": [
"web/src/components/git-connections.tsx:397"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "credentials",
"credential_required": true,
"exposure": "generic",
"machine_permissions": [
"git:manage"
],
"permissions": [
"deployments:write",
"agent:credentials"
],
"prerequisite": "",
"resource": "git/connections",
"resource_parameter": "id",
"review": "canonical",
"scope_requirement": "project_credential",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "updateOrganizationSecurity",
"method": "PUT",
"path": "/organization/security",
"dashboard_calls": [
"web/src/components/pro-access.tsx:366"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "updateProfile",
"method": "PATCH",
"path": "/auth/profile",
"dashboard_calls": [
"web/src/routes/settings.profile.tsx:59"
],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "human",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "updateRegistry",
"method": "PUT",
"path": "/registries/{name}",
"dashboard_calls": [
"web/src/components/registry-settings.tsx:254"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "updateSourceBuild",
"method": "PUT",
"path": "/builds/{id}",
"dashboard_calls": [
"web/src/components/build-form.tsx:429"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"references": {
"application_id": "applications"
},
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "updateUser",
"method": "PATCH",
"path": "/users/{id}",
"dashboard_calls": [
"web/src/components/team-settings.tsx:1054"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": [
"credentials",
"password",
"token",
"api_key",
"private_key",
"client_secret",
"secret"
]
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "updateVirtualNetwork",
"method": "PUT",
"path": "/virtual-networks/{name}",
"dashboard_calls": [
"web/src/components/virtual-network-form.tsx:165"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"machine_permissions": [
"networks:write"
],
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "upgradeInstallation",
"method": "POST",
"path": "/installation/upgrade",
"dashboard_calls": [
"web/src/components/installation.tsx:171"
],
"current_interface": "separate installation invocation",
"policy": {
"boundary": "installation",
"category": "admin",
"exposure": "installation",
"permissions": [
"admin",
"agent:admin"
],
"prerequisite": "",
"review": "canonical",
"scope_requirement": "installation_owner",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "uploadBackendCertificate",
"method": "POST",
"path": "/applications/{id}/services/{service}/certificates",
"dashboard_calls": [
"web/src/components/backend-certificate-form.tsx:60"
],
"current_interface": "dedicated workflow",
"policy": {
"boundary": "project",
"category": "binary",
"exposure": "dedicated",
"permissions": [],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "uploadDatabaseImport",
"method": "PUT",
"path": "/backup-imports/{id}/archive",
"dashboard_calls": [],
"current_interface": "dedicated workflow",
"policy": {
"boundary": "project",
"category": "binary",
"exposure": "dedicated",
"permissions": [],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/octet-stream"
],
"response_media": [
"application/json"
]
},
{
"operation": "verifyApplicationDomain",
"method": "POST",
"path": "/applications/{id}/domains/{hostname}/verify",
"dashboard_calls": [
"web/src/routes/applications.$applicationId.domains.tsx:430"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "verifyRegistration",
"method": "POST",
"path": "/auth/register/verify",
"dashboard_calls": [],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "human",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "verifySessionMFA",
"method": "POST",
"path": "/auth/mfa/verify",
"dashboard_calls": [
"web/src/components/account-settings.tsx:83"
],
"current_interface": "human or protocol prerequisite",
"policy": {
"boundary": "identity",
"category": "human",
"exposure": "prerequisite",
"permissions": [],
"prerequisite": "Complete the dedicated identity or protocol flow.",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "volumeResizeAction",
"method": "POST",
"path": "/applications/{id}/volume-resizes/{resize}/{action}",
"dashboard_calls": [
"web/src/components/volume-resize.tsx:232"
],
"current_interface": "generic scoped invocation",
"policy": {
"boundary": "project",
"category": "write",
"exposure": "generic",
"permissions": [
"deployments:write"
],
"prerequisite": "",
"review": "canonical",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
},
{
"operation": "writeHostTerminal",
"method": "POST",
"path": "/nodes/{node}/terminal/{session}/input",
"dashboard_calls": [],
"current_interface": "dedicated workflow",
"policy": {
"boundary": "installation",
"category": "terminal",
"exposure": "dedicated",
"permissions": [
"nodes:terminal"
],
"prerequisite": "",
"review": "none",
"sensitive_fields": []
},
"request_media": [
"application/json"
],
"response_media": [
"application/json"
]
}
]
}