Contexts, Policy, and Identity - CircleCI
CircleCI contexts, context secrets and restrictions, OIDC claims, policy management, decisions, and OpenTelemetry exporters. Generated from the complete hash-pinned official CircleCI API v2 OpenAPI document. The CircleCI cloud base is the enrollment default; per-organization connections may target a compatible CircleCI Server API v2 base. Reads are uncached and approval-free. Mutations are grant-off and approval-gated; destructive and administrative changes require approval every run.
What this pack installs
- circleci-context-policy Ingredient
Trust & control
What installing this whole pack would let it do. Recued grants these permissions at install — review them there before approving.
What it's allowed to do
Destructive
Web APIs
circleci-context-policy
external change
Read: get_org_claims · No approvalDestructive: delete_org_claims · Always asksAdmin: patch_org_claims · Always asksRead: get_project_claims · No approvalDestructive: delete_project_claims · Always asksAdmin: patch_project_claims · Always asksRead: get_decision_logs · No approvalAdmin: make_decision · Always asksRead: get_decision_settings · No approvalAdmin: set_decision_settings · Always asksRead: get_decision_log · No approvalRead: get_decision_log_policy_bundle · No approvalRead: get_policy_bundle · No approvalAdmin: create_policy_bundle · Always asksRead: get_policy_document · No approvalAdmin: create_context · Always asksRead: list_contexts · No approvalRead: get_context · No approvalDestructive: delete_context · Always asksRead: list_environment_variables_from_context · No approvalAdmin: add_environment_variable_to_context · Always asksDestructive: delete_environment_variable_from_context · Always asksRead: get_context_restrictions · No approvalAdmin: create_context_restriction · Always asksDestructive: delete_context_restriction · Always asksRead: list_otel_exporters · No approvalAdmin: create_otel_exporter · Always asksDestructive: delete_otel_exporter · Always asks