naftiko: "1.0.0-alpha1"

info:
  label: Acronis Cyber Protection Operations
  description: >-
    Unified workflow for managing Acronis Cyber Protect Cloud operations including tenant administration,
    agent monitoring, backup task tracking, and usage reporting. Used by MSPs, IT administrators, and
    security teams to automate Acronis cyber protection platform management.
  tags:
    - Acronis
    - Account Management
    - Backup
    - Cybersecurity
    - Monitoring
    - MSP
  created: "2026-04-19"
  modified: "2026-04-19"

binds:
  - namespace: env
    keys:
      ACRONIS_ACCESS_TOKEN: ACRONIS_ACCESS_TOKEN

capability:
  consumes:
    - import: acronis-account
      location: ./shared/acronis-account-management.yaml
    - import: acronis-agents
      location: ./shared/acronis-agent-management.yaml
    - import: acronis-tasks
      location: ./shared/acronis-task-manager.yaml

  exposes:
    - type: rest
      port: 8080
      namespace: acronis-cyber-protection-api
      description: Unified REST API for Acronis Cyber Protect Cloud platform management.
      resources:
        - path: /v1/tenants
          name: tenants
          description: Tenant hierarchy management
          operations:
            - method: GET
              name: list-tenants
              description: List tenants
              call: "acronis-account.list-tenants"
              outputParameters:
                - type: object
                  mapping: "$."
            - method: POST
              name: create-tenant
              description: Create tenant
              call: "acronis-account.create-tenant"
              outputParameters:
                - type: object
                  mapping: "$."
        - path: /v1/tenants/{tenant_id}
          name: tenant
          description: Individual tenant operations
          operations:
            - method: GET
              name: get-tenant
              description: Get tenant details
              call: "acronis-account.get-tenant"
              with:
                tenant_id: "rest.tenant_id"
              outputParameters:
                - type: object
                  mapping: "$."
        - path: /v1/tenants/{tenant_id}/users
          name: tenant-users
          description: Tenant user management
          operations:
            - method: GET
              name: list-tenant-users
              description: List users in a tenant
              call: "acronis-account.list-tenant-users"
              with:
                tenant_id: "rest.tenant_id"
              outputParameters:
                - type: object
                  mapping: "$."
        - path: /v1/tenants/{tenant_id}/usages
          name: tenant-usages
          description: Tenant usage monitoring
          operations:
            - method: GET
              name: get-tenant-usages
              description: Get usage metrics for a tenant
              call: "acronis-account.get-tenant-usages"
              with:
                tenant_id: "rest.tenant_id"
              outputParameters:
                - type: object
                  mapping: "$."
        - path: /v1/agents
          name: agents
          description: Protection agent management
          operations:
            - method: GET
              name: list-agents
              description: List agents for a tenant
              call: "acronis-agents.list-agents"
              with:
                tenant_id: "rest.tenant_id"
              outputParameters:
                - type: object
                  mapping: "$."
        - path: /v1/tasks
          name: tasks
          description: Backup task monitoring
          operations:
            - method: GET
              name: list-tasks
              description: List backup tasks
              call: "acronis-tasks.list-tasks"
              with:
                tenant_id: "rest.tenant_id"
              outputParameters:
                - type: object
                  mapping: "$."
        - path: /v1/search
          name: search
          description: Cross-tenant search
          operations:
            - method: GET
              name: search
              description: Search tenants and users
              call: "acronis-account.search"
              with:
                query: "rest.query"
              outputParameters:
                - type: object
                  mapping: "$."

    - type: mcp
      port: 9090
      namespace: acronis-cyber-protection-mcp
      transport: http
      description: MCP server for AI-assisted Acronis Cyber Protect Cloud management.
      tools:
        - name: list-tenants
          description: List Acronis tenant hierarchy - companies, partners, and customer accounts
          hints:
            readOnly: true
            openWorld: true
          call: "acronis-account.list-tenants"
          with:
            parent_id: "tools.parent_id"
          outputParameters:
            - type: object
              mapping: "$."
        - name: get-tenant
          description: Get details about a specific Acronis tenant
          hints:
            readOnly: true
            idempotent: true
          call: "acronis-account.get-tenant"
          with:
            tenant_id: "tools.tenant_id"
          outputParameters:
            - type: object
              mapping: "$."
        - name: list-tenant-users
          description: List users in an Acronis tenant
          hints:
            readOnly: true
            openWorld: true
          call: "acronis-account.list-tenant-users"
          with:
            tenant_id: "tools.tenant_id"
          outputParameters:
            - type: object
              mapping: "$."
        - name: get-tenant-usages
          description: Get current usage metrics for an Acronis tenant across all services
          hints:
            readOnly: true
            idempotent: true
          call: "acronis-account.get-tenant-usages"
          with:
            tenant_id: "tools.tenant_id"
          outputParameters:
            - type: object
              mapping: "$."
        - name: list-agents
          description: List Acronis protection agents registered for a tenant
          hints:
            readOnly: true
            openWorld: true
          call: "acronis-agents.list-agents"
          with:
            tenant_id: "tools.tenant_id"
            os_family: "tools.os_family"
          outputParameters:
            - type: object
              mapping: "$."
        - name: get-agent
          description: Get details about a specific Acronis backup agent including online status
          hints:
            readOnly: true
            idempotent: true
          call: "acronis-agents.get-agent"
          with:
            agent_id: "tools.agent_id"
          outputParameters:
            - type: object
              mapping: "$."
        - name: list-tasks
          description: List Acronis backup tasks with filtering by state, result, policy, and resource
          hints:
            readOnly: true
            openWorld: true
          call: "acronis-tasks.list-tasks"
          with:
            tenant_id: "tools.tenant_id"
            state: "tools.state"
            result_code: "tools.result_code"
          outputParameters:
            - type: object
              mapping: "$."
        - name: get-task
          description: Get details about a specific Acronis backup task
          hints:
            readOnly: true
            idempotent: true
          call: "acronis-tasks.get-task"
          with:
            task_id: "tools.task_id"
          outputParameters:
            - type: object
              mapping: "$."
        - name: search
          description: Search Acronis platform for tenants and users by name or email
          hints:
            readOnly: true
            openWorld: true
          call: "acronis-account.search"
          with:
            query: "tools.query"
            tenant_id: "tools.tenant_id"
          outputParameters:
            - type: object
              mapping: "$."
        - name: list-hardware-nodes
          description: List hardware nodes managed by Acronis for a tenant
          hints:
            readOnly: true
            openWorld: true
          call: "acronis-agents.list-hardware-nodes"
          with:
            tenant_id: "tools.tenant_id"
          outputParameters:
            - type: object
              mapping: "$."