Appendix B — Capabilities Permalink to this section#

Capabilities are checked at the top of the relevant handler. Each constant resolves to one or more underlying Splunk capabilities.

Capability constant	Endpoints / methods
edit_ai_commander_config + list_ai_commander_config	aicommander (POST, DELETE, edit-GET)
list_ai_commander_config	aicommander (read-only GET)
AGENT_RUN_CAPABILITIES	agents (POST, PUT, DELETE)
AGENT_CONNECTION_CAPABILITIES	mcp_connection, vector_stores (write paths)
SAGEMAKER_REGISTER_MODEL_CAPABILITIES	register_model (GET, POST, PUT)
upload_lookup_files + upload_onnx_model_file	upload_model (POST)
LLM_CAPABILITIES / DOCKER_DSDL_CAPABILITIES / KUBERNETES_DSDL_CAPABILITIES	list_connections (per-family filtering)

ACL checks (sharing, perms.read, perms.write) apply on a per-record basis for agents, MCP connections, and vector stores.

---