Render Postgres, Key Value, deprecated Redis, metrics, bounded logs, maintenance, registry credentials, and log-stream settings. Generated from the current hash-pinned official Render OpenAPI document. Reads are uncached; sensitive reads are marked sensitive-read and require approval unless session-granted, while ordinary reads remain unheld. Every mutation is grant-off and approval-gated, and administrative or destructive changes require approval every run.