# Routes that are missing granular token authorization (`authorization permissions: [...]` or `skip_granular_token_authorization`).
# One entry per route, in the form `METHOD /path`.
#
# These routes should have authorization added over time.
# Do not add new entries to this file -- instead, add authorization for new routes.
* /*path
DELETE /admin/knowledge_graph/namespaces/:id
DELETE /admin/token
DELETE /broadcast_messages/:id
DELETE /features/:name
DELETE /groups/:id/integrations/:slug
DELETE /groups/:id/manage/personal_access_tokens/:pat_id
DELETE /groups/:id/manage/resource_access_tokens/:prat_id
DELETE /groups/:id/manage/ssh_keys/:key_id
DELETE /namespaces/:id/storage/limit_exclusion
DELETE /personal_access_tokens/self
DELETE /projects/:id/alert_management_alerts/:alert_iid/metric_images/:metric_image_id
DELETE /projects/:id/approval_settings/rules/:approval_rule_id
DELETE /projects/:id/error_tracking/client_keys/:key_id
DELETE /projects/:id/integrations/:slug
DELETE /projects/:id/issues/:issue_iid/metric_images/:metric_image_id
DELETE /projects/:id/managed_licenses/:managed_license_id
DELETE /projects/:id/ml/mlflow/api/2.0/mlflow/registered-models/delete
DELETE /projects/:id/packages/:package_id/package_files/:package_file_id
DELETE /projects/:id/packages/protection/rules/:package_protection_rule_id
DELETE /projects/:id/service_accounts/:user_id
DELETE /projects/:id/service_accounts/:user_id/personal_access_tokens/:token_id
DELETE /projects/:id/services/:slug
DELETE /projects/:id/snippets/:snippet_id
DELETE /runner_controllers/:id
DELETE /runner_controllers/:id/scopes/instance
DELETE /runner_controllers/:id/scopes/runners/:runner_id
DELETE /runner_controllers/:runner_controller_id/tokens/:id
DELETE /runners/:id
DELETE /users/:id
DELETE /users/:id/emails/:email_id
DELETE /users/:id/gpg_keys/:key_id
DELETE /users/:id/identities/:provider
DELETE /users/:id/keys/:key_id
DELETE /users/:user_id/impersonation_tokens/:impersonation_token_id
DELETE /vscode/settings_sync(/:settings_context_hash)/v1/collection
DELETE /vulnerabilities/:id/issue_links/:issue_link_id
GET /admin/active_context/connections
GET /admin/data_management/:model_name
GET /admin/data_management/:model_name/:record_identifier
GET /admin/databases/:database_name/dictionary/tables/:table_name
GET /admin/knowledge_graph/namespaces
GET /admin/migrations/pending
GET /ai/duo_workflows/list_tools
GET /ai/duo_workflows/workflows/:id
GET /ai/duo_workflows/workflows/:id/checkpoints
GET /ai/duo_workflows/workflows/:id/checkpoints/:checkpoint_id
GET /ai/duo_workflows/workflows/:id/events
GET /ai/duo_workflows/workflows/agent_privileges
GET /ai/duo_workflows/ws
GET /analytics/code_review
GET /analytics/group_activity/issues_count
GET /analytics/group_activity/merge_requests_count
GET /analytics/group_activity/new_members_count
GET /application/settings
GET /application/statistics
GET /broadcast_messages
GET /broadcast_messages/:id
GET /dependency_list_exports/:export_id
GET /dependency_list_exports/:export_id/download
GET /discover-cert-based-clusters
GET /events
GET /features
GET /features/definitions
GET /groups/:id/-/packages/debian/pool/:distribution/:project_id/:letter/:package_name/:package_version/:file_name
GET /groups/:id/dora/metrics
GET /groups/:id/export_relations/download
GET /groups/:id/export_relations/status
GET /groups/:id/integrations
GET /groups/:id/integrations/:slug
GET /groups/:id/manage/personal_access_tokens
GET /groups/:id/manage/resource_access_tokens
GET /groups/:id/manage/ssh_keys
GET /ldap/:provider/groups
GET /ldap/groups
GET /mcp
GET /namespaces/:id/subscription_add_on_purchase/:add_on_name
GET /namespaces/storage/limit_exclusions
GET /offline_exports
GET /offline_exports/:id
GET /pages/domains
GET /personal_access_tokens/self
GET /personal_access_tokens/self/associations
GET /projects/:id/alert_management_alerts/:alert_iid/metric_images
GET /projects/:id/analytics/deployment_frequency
GET /projects/:id/approval_settings
GET /projects/:id/attestations/:attestation_iid/download
GET /projects/:id/attestations/:subject_digest
GET /projects/:id/audit_events
GET /projects/:id/audit_events/:audit_event_id
GET /projects/:id/dependency_proxy/packages/maven/*path/:file_name
GET /projects/:id/dependency_proxy/packages/npm/*package_name/-/*file_name
GET /projects/:id/dora/metrics
GET /projects/:id/error_tracking/client_keys
GET /projects/:id/error_tracking/settings
GET /projects/:id/events
GET /projects/:id/google_cloud/setup/integrations.sh
GET /projects/:id/google_cloud/setup/runner_deployment_project.sh
GET /projects/:id/integrations
GET /projects/:id/integrations/:slug
GET /projects/:id/issues/:issue_iid/metric_images
GET /projects/:id/managed_licenses
GET /projects/:id/managed_licenses/:managed_license_id
GET /projects/:id/merge_requests/:merge_request_iid/approval_settings
GET /projects/:id/ml/mlflow/api/2.0/mlflow/experiments/get
GET /projects/:id/ml/mlflow/api/2.0/mlflow/experiments/get-by-name
GET /projects/:id/ml/mlflow/api/2.0/mlflow/experiments/list
GET /projects/:id/ml/mlflow/api/2.0/mlflow/metrics/get-history
GET /projects/:id/ml/mlflow/api/2.0/mlflow/model-versions/get
GET /projects/:id/ml/mlflow/api/2.0/mlflow/model-versions/get-download-uri
GET /projects/:id/ml/mlflow/api/2.0/mlflow/registered-models/alias
GET /projects/:id/ml/mlflow/api/2.0/mlflow/registered-models/get
GET /projects/:id/ml/mlflow/api/2.0/mlflow/registered-models/search
GET /projects/:id/packages/:package_id/package_files
GET /projects/:id/packages/:package_id/package_files/:package_file_id/download
GET /projects/:id/packages/cargo/config.json
GET /projects/:id/packages/ml_models/:model_version_id/files/(*path/):file_name
GET /projects/:id/packages/protection/rules
GET /projects/:id/packages/rpm/*package_file_id/*file_name
GET /projects/:id/packages/rpm/repodata/*file_name
GET /projects/:id/packages/rubygems/:file_name
GET /projects/:id/repository/commits/:sha/statuses
GET /projects/:id/service_accounts
GET /projects/:id/service_accounts/:user_id/personal_access_tokens
GET /projects/:id/services
GET /projects/:id/services/:slug
GET /projects/:id/snippets
GET /projects/:id/snippets/:snippet_id
GET /projects/:id/snippets/:snippet_id/files/:ref/:file_path/raw
GET /projects/:id/snippets/:snippet_id/raw
GET /projects/:id/snippets/:snippet_id/user_agent_detail
GET /projects/:id/vulnerability_findings
GET /runner_controllers
GET /runner_controllers/:id
GET /runner_controllers/:id/scopes
GET /runner_controllers/:runner_controller_id/tokens
GET /runner_controllers/:runner_controller_id/tokens/:id
GET /runners
GET /runners/:id
GET /runners/:id/jobs
GET /runners/:id/managers
GET /runners/:id/projects
GET /runners/all
GET /security/vulnerability_archive_exports/:id
GET /security/vulnerability_archive_exports/:id/download
GET /swagger_doc
GET /swagger_doc/:name
GET /users
GET /users/:id/emails
GET /users/:id/events
GET /users/:id/support_pin
GET /users/:user_id/impersonation_tokens
GET /users/:user_id/impersonation_tokens/:impersonation_token_id
GET /users/:user_id/memberships
GET /vscode/settings_sync(/:settings_context_hash)/v1/manifest
GET /vscode/settings_sync(/:settings_context_hash)/v1/resource/:resource_name
GET /vscode/settings_sync(/:settings_context_hash)/v1/resource/:resource_name/:id
GET /vulnerabilities/:id/issue_links
GET /web_commits/public_key
PATCH /ai/duo_workflows/workflows/:id
PATCH /projects/:id/error_tracking/settings
PATCH /projects/:id/managed_licenses/:managed_license_id
PATCH /projects/:id/ml/mlflow/api/2.0/mlflow/model-versions/update
PATCH /projects/:id/ml/mlflow/api/2.0/mlflow/registered-models/update
PATCH /projects/:id/packages/protection/rules/:package_protection_rule_id
PATCH /projects/:id/service_accounts/:user_id
PATCH /users/:id/disable_two_factor
POST /admin/ai_catalog/seed_external_agents
POST /admin/token
POST /ai/duo_workflows/code_review/add_comments
POST /ai/duo_workflows/direct_access
POST /ai/duo_workflows/revoke_token
POST /ai/duo_workflows/workflows
POST /ai/duo_workflows/workflows/:id/checkpoint_writes_batch
POST /ai/duo_workflows/workflows/:id/checkpoints
POST /ai/duo_workflows/workflows/:id/events
POST /ai/llm/git_command
POST /ai/third_party_agents/direct_access
POST /broadcast_messages
POST /duo_code_review/evaluations
POST /features/:name
POST /geo/node_proxy/:id/graphql
POST /glql
POST /groups/:id/epics/:epic_iid/todo
POST /groups/:id/export_relations
POST /groups/:id/labels/:subscribable_id/subscribe
POST /groups/:id/labels/:subscribable_id/unsubscribe
POST /groups/:id/manage/personal_access_tokens/:pat_id/rotate
POST /groups/:id/manage/resource_access_tokens/:prat_id/rotate
POST /hooks/:hook_id
POST /integrations/jira_connect/subscriptions
POST /integrations/slack/events
POST /integrations/slack/interactions
POST /integrations/slack/options
POST /markdown
POST /mcp
POST /namespaces/:id/storage/limit_exclusion
POST /namespaces/:id/subscription_add_on_purchase/:add_on_name
POST /offline_exports
POST /organizations
POST /personal_access_tokens/self/rotate
POST /pipelines/:id/dependency_list_exports
POST /projects/:id/alert_management_alerts/:alert_iid/metric_images
POST /projects/:id/approval_settings/rules
POST /projects/:id/error_tracking/client_keys
POST /projects/:id/integrations/mattermost_slash_commands/trigger
POST /projects/:id/issues/:issue_iid/metric_images
POST /projects/:id/issues/:subscribable_id/subscribe
POST /projects/:id/issues/:subscribable_id/unsubscribe
POST /projects/:id/labels/:subscribable_id/subscribe
POST /projects/:id/labels/:subscribable_id/unsubscribe
POST /projects/:id/managed_licenses
POST /projects/:id/merge_requests/:merge_request_iid/approvals
POST /projects/:id/merge_requests/:subscribable_id/subscribe
POST /projects/:id/merge_requests/:subscribable_id/unsubscribe
POST /projects/:id/ml/mlflow/api/2.0/mlflow/experiments/create
POST /projects/:id/ml/mlflow/api/2.0/mlflow/experiments/delete
POST /projects/:id/ml/mlflow/api/2.0/mlflow/experiments/search
POST /projects/:id/ml/mlflow/api/2.0/mlflow/experiments/set-experiment-tag
POST /projects/:id/ml/mlflow/api/2.0/mlflow/model-versions/create
POST /projects/:id/ml/mlflow/api/2.0/mlflow/registered-models/create
POST /projects/:id/ml/mlflow/api/2.0/mlflow/registered-models/get-latest-versions
POST /projects/:id/packages/protection/rules
POST /projects/:id/packages/rpm
POST /projects/:id/security_scans/sast/:sast_endpoint
POST /projects/:id/service_accounts
POST /projects/:id/service_accounts/:user_id/personal_access_tokens
POST /projects/:id/service_accounts/:user_id/personal_access_tokens/:token_id/rotate
POST /projects/:id/services/mattermost_slash_commands/trigger
POST /projects/:id/snippets
POST /projects/:id/statuses/:sha
POST /projects/:project_id/product_analytics/request/dry-run
POST /projects/:project_id/product_analytics/request/load
POST /projects/:project_id/product_analytics/request/meta
POST /runner_controllers
POST /runner_controllers/:id/scopes/instance
POST /runner_controllers/:id/scopes/runners/:runner_id
POST /runner_controllers/:runner_controller_id/tokens
POST /runner_controllers/:runner_controller_id/tokens/:id/rotate
POST /runners/:id/reset_authentication_token
POST /runners/reset_registration_token
POST /security/projects/:id/vulnerability_archive_exports
POST /slack/trigger
POST /users
POST /users/:id/activate
POST /users/:id/approve
POST /users/:id/ban
POST /users/:id/block
POST /users/:id/deactivate
POST /users/:id/emails
POST /users/:id/gpg_keys
POST /users/:id/gpg_keys/:key_id/revoke
POST /users/:id/reject
POST /users/:id/support_pin/revoke
POST /users/:id/unban
POST /users/:id/unblock
POST /users/:user_id/impersonation_tokens
POST /users/:user_id/keys
POST /users/:user_id/personal_access_tokens
POST /vscode/settings_sync(/:settings_context_hash)/v1/resource/:resource_name
POST /vulnerabilities/:id/issue_links
POST /vulnerabilities/:vulnerability_id/flags/ai_detection
PUT /admin/active_context/code/enabled_namespaces
PUT /admin/active_context/collections/:id
PUT /admin/active_context/connections/activate
PUT /admin/active_context/connections/deactivate
PUT /admin/data_management/:model_name/:record_identifier/checksum
PUT /admin/data_management/:model_name/checksum
PUT /admin/knowledge_graph/namespaces/:id
PUT /ai/duo_workflows/workflows/:id/events/:event_id
PUT /application/settings
PUT /broadcast_messages/:id
PUT /elasticsearch_indexed_namespaces/rollback
PUT /elasticsearch_indexed_namespaces/rollout
PUT /groups/:id/integrations/apple-app-store
PUT /groups/:id/integrations/asana
PUT /groups/:id/integrations/assembla
PUT /groups/:id/integrations/bamboo
PUT /groups/:id/integrations/bugzilla
PUT /groups/:id/integrations/buildkite
PUT /groups/:id/integrations/campfire
PUT /groups/:id/integrations/clickup
PUT /groups/:id/integrations/confluence
PUT /groups/:id/integrations/custom-issue-tracker
PUT /groups/:id/integrations/datadog
PUT /groups/:id/integrations/diffblue-cover
PUT /groups/:id/integrations/discord
PUT /groups/:id/integrations/drone-ci
PUT /groups/:id/integrations/emails-on-push
PUT /groups/:id/integrations/ewm
PUT /groups/:id/integrations/external-wiki
PUT /groups/:id/integrations/git-guardian
PUT /groups/:id/integrations/github
PUT /groups/:id/integrations/gitlab-slack-application
PUT /groups/:id/integrations/google-cloud-platform-artifact-registry
PUT /groups/:id/integrations/google-cloud-platform-workload-identity-federation
PUT /groups/:id/integrations/google-play
PUT /groups/:id/integrations/hangouts-chat
PUT /groups/:id/integrations/harbor
PUT /groups/:id/integrations/irker
PUT /groups/:id/integrations/jenkins
PUT /groups/:id/integrations/jira
PUT /groups/:id/integrations/jira-cloud-app
PUT /groups/:id/integrations/linear
PUT /groups/:id/integrations/matrix
PUT /groups/:id/integrations/mattermost
PUT /groups/:id/integrations/mattermost-slash-commands
PUT /groups/:id/integrations/microsoft-teams
PUT /groups/:id/integrations/mock-ci
PUT /groups/:id/integrations/mock-monitoring
PUT /groups/:id/integrations/packagist
PUT /groups/:id/integrations/phorge
PUT /groups/:id/integrations/pipelines-email
PUT /groups/:id/integrations/pivotaltracker
PUT /groups/:id/integrations/pumble
PUT /groups/:id/integrations/pushover
PUT /groups/:id/integrations/redmine
PUT /groups/:id/integrations/slack
PUT /groups/:id/integrations/squash-tm
PUT /groups/:id/integrations/teamcity
PUT /groups/:id/integrations/telegram
PUT /groups/:id/integrations/unify-circuit
PUT /groups/:id/integrations/webex-teams
PUT /groups/:id/integrations/youtrack
PUT /groups/:id/integrations/zentao
PUT /namespaces/:id
PUT /namespaces/:id/subscription_add_on_purchase/:add_on_name
PUT /projects/:id/alert_management_alerts/:alert_iid/metric_images/:metric_image_id
PUT /projects/:id/approval_settings/rules/:approval_rule_id
PUT /projects/:id/error_tracking/settings
PUT /projects/:id/integrations/apple-app-store
PUT /projects/:id/integrations/asana
PUT /projects/:id/integrations/assembla
PUT /projects/:id/integrations/bamboo
PUT /projects/:id/integrations/bugzilla
PUT /projects/:id/integrations/buildkite
PUT /projects/:id/integrations/campfire
PUT /projects/:id/integrations/clickup
PUT /projects/:id/integrations/confluence
PUT /projects/:id/integrations/custom-issue-tracker
PUT /projects/:id/integrations/datadog
PUT /projects/:id/integrations/diffblue-cover
PUT /projects/:id/integrations/discord
PUT /projects/:id/integrations/drone-ci
PUT /projects/:id/integrations/emails-on-push
PUT /projects/:id/integrations/ewm
PUT /projects/:id/integrations/external-wiki
PUT /projects/:id/integrations/git-guardian
PUT /projects/:id/integrations/github
PUT /projects/:id/integrations/gitlab-slack-application
PUT /projects/:id/integrations/google-cloud-platform-artifact-registry
PUT /projects/:id/integrations/google-cloud-platform-workload-identity-federation
PUT /projects/:id/integrations/google-play
PUT /projects/:id/integrations/hangouts-chat
PUT /projects/:id/integrations/harbor
PUT /projects/:id/integrations/irker
PUT /projects/:id/integrations/jenkins
PUT /projects/:id/integrations/jira
PUT /projects/:id/integrations/jira-cloud-app
PUT /projects/:id/integrations/linear
PUT /projects/:id/integrations/matrix
PUT /projects/:id/integrations/mattermost
PUT /projects/:id/integrations/mattermost-slash-commands
PUT /projects/:id/integrations/microsoft-teams
PUT /projects/:id/integrations/mock-ci
PUT /projects/:id/integrations/mock-monitoring
PUT /projects/:id/integrations/packagist
PUT /projects/:id/integrations/phorge
PUT /projects/:id/integrations/pipelines-email
PUT /projects/:id/integrations/pivotaltracker
PUT /projects/:id/integrations/pumble
PUT /projects/:id/integrations/pushover
PUT /projects/:id/integrations/redmine
PUT /projects/:id/integrations/slack
PUT /projects/:id/integrations/squash-tm
PUT /projects/:id/integrations/teamcity
PUT /projects/:id/integrations/telegram
PUT /projects/:id/integrations/unify-circuit
PUT /projects/:id/integrations/webex-teams
PUT /projects/:id/integrations/youtrack
PUT /projects/:id/integrations/zentao
PUT /projects/:id/issues/:issue_iid/metric_images/:metric_image_id
PUT /projects/:id/packages/ml_models/:model_version_id/files/(*path/):file_name
PUT /projects/:id/services/apple-app-store
PUT /projects/:id/services/asana
PUT /projects/:id/services/assembla
PUT /projects/:id/services/bamboo
PUT /projects/:id/services/bugzilla
PUT /projects/:id/services/buildkite
PUT /projects/:id/services/campfire
PUT /projects/:id/services/clickup
PUT /projects/:id/services/confluence
PUT /projects/:id/services/custom-issue-tracker
PUT /projects/:id/services/datadog
PUT /projects/:id/services/diffblue-cover
PUT /projects/:id/services/discord
PUT /projects/:id/services/drone-ci
PUT /projects/:id/services/emails-on-push
PUT /projects/:id/services/ewm
PUT /projects/:id/services/external-wiki
PUT /projects/:id/services/git-guardian
PUT /projects/:id/services/github
PUT /projects/:id/services/gitlab-slack-application
PUT /projects/:id/services/google-cloud-platform-artifact-registry
PUT /projects/:id/services/google-cloud-platform-workload-identity-federation
PUT /projects/:id/services/google-play
PUT /projects/:id/services/hangouts-chat
PUT /projects/:id/services/harbor
PUT /projects/:id/services/irker
PUT /projects/:id/services/jenkins
PUT /projects/:id/services/jira
PUT /projects/:id/services/jira-cloud-app
PUT /projects/:id/services/linear
PUT /projects/:id/services/matrix
PUT /projects/:id/services/mattermost
PUT /projects/:id/services/mattermost-slash-commands
PUT /projects/:id/services/microsoft-teams
PUT /projects/:id/services/mock-ci
PUT /projects/:id/services/mock-monitoring
PUT /projects/:id/services/packagist
PUT /projects/:id/services/phorge
PUT /projects/:id/services/pipelines-email
PUT /projects/:id/services/pivotaltracker
PUT /projects/:id/services/pumble
PUT /projects/:id/services/pushover
PUT /projects/:id/services/redmine
PUT /projects/:id/services/slack
PUT /projects/:id/services/squash-tm
PUT /projects/:id/services/teamcity
PUT /projects/:id/services/telegram
PUT /projects/:id/services/unify-circuit
PUT /projects/:id/services/webex-teams
PUT /projects/:id/services/youtrack
PUT /projects/:id/services/zentao
PUT /projects/:id/snippets/:snippet_id
PUT /runner_controllers/:id
PUT /runners/:id
PUT /suggestions/:id/apply
PUT /suggestions/batch_apply
PUT /user/:user_id/credit_card_validation
PUT /users/:id
