AI-agent integration

Give agents machine-readable contracts, narrow credentials and observable requests instead of asking them to reverse-engineer a dashboard.

1. Fetch /api/v1/capabilities and the OpenAPI document.
2. Use authenticated schema inspection to learn field names and constraints.
3. Mint a service identity with only the required scopes.
4. Generate requests and retain request IDs in logs.
5. Handle structured validation, authorization and concurrency errors explicitly.

Do not place administrator cookies, signing secrets or AWS credentials in prompts. Prefer a disposable scoped token and revoke it when the task ends.

Schema evolution

Agents should inspect rather than memorize schemas, tolerate additional response fields and stop on capability/version mismatch. Human review remains appropriate for destructive migrations, restore and secret rotation.