naftiko: 1.0.0-alpha2
info:
  label: 'Akamai: EdgeWorkers API — Secure tokens'
  description: 'Akamai: EdgeWorkers API — Secure tokens. 2 operations. Lead operation: Akamai Create a Secure Token. Self-contained
    Naftiko capability covering one Akamai business surface.'
  tags:
  - Akamai
  - Secure tokens
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    AKAMAI_API_KEY: AKAMAI_API_KEY
capability:
  consumes:
  - type: http
    namespace: edgeworkers-secure-tokens
    baseUri: https://{hostname}/edgeworkers/v1
    description: 'Akamai: EdgeWorkers API — Secure tokens business capability. Self-contained, no shared references.'
    resources:
    - name: secure-token
      path: /secure-token
      operations:
      - name: postsecuretoken
        method: POST
        description: Akamai Create a Secure Token
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: accountSwitchKey
          in: query
          type: string
          description: For customers who manage more than one account, this [runs the operation from another account](https://techdocs.akamai.com/developer/docs/manage-many-accounts-w
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: secure-token-propertyId
      path: /secure-token/{propertyId}
      operations:
      - name: getsecuretoken
        method: GET
        description: Akamai Get a Secure Token
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: acl
          in: query
          type: string
          description: Path prefix of the response pages to debug. This value can be a pattern that matches multiple pages,
            and is explicitly part of the final token. The default is `
        - name: url
          in: query
          type: string
          description: Exact path of the response pages to debug. This value is not explicitly part of the final token, but
            is used as a salt in the HMAC computation. If you specify a
        - name: expiry
          in: query
          type: integer
          description: Number of minutes before the authentication token expires, from a minute to an hour. The default is
            15.
        - name: network
          in: query
          type: string
          description: __Enum__ The network on which to use this authentication token, either `STAGING` or `PRODUCTION`. If
            not specified, the token is created for the network where t
        - name: accountSwitchKey
          in: query
          type: string
          description: For customers who manage more than one account, this [runs the operation from another account](https://techdocs.akamai.com/developer/docs/manage-many-accounts-w
  exposes:
  - type: rest
    namespace: edgeworkers-secure-tokens-rest
    port: 8080
    description: 'REST adapter for Akamai: EdgeWorkers API — Secure tokens. One Spectral-compliant resource per consumed operation,
      prefixed with /v1.'
    resources:
    - path: /v1/secure-token
      name: secure-token
      description: REST surface for secure-token.
      operations:
      - method: POST
        name: postsecuretoken
        description: Akamai Create a Secure Token
        call: edgeworkers-secure-tokens.postsecuretoken
        with:
          accountSwitchKey: rest.accountSwitchKey
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/secure-token/{propertyid}
      name: secure-token-propertyid
      description: REST surface for secure-token-propertyId.
      operations:
      - method: GET
        name: getsecuretoken
        description: Akamai Get a Secure Token
        call: edgeworkers-secure-tokens.getsecuretoken
        with:
          acl: rest.acl
          url: rest.url
          expiry: rest.expiry
          network: rest.network
          accountSwitchKey: rest.accountSwitchKey
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: edgeworkers-secure-tokens-mcp
    port: 9090
    transport: http
    description: 'MCP adapter for Akamai: EdgeWorkers API — Secure tokens. One tool per consumed operation, routed inline
      through this capability''s consumes block.'
    tools:
    - name: akamai-create-secure-token
      description: Akamai Create a Secure Token
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: edgeworkers-secure-tokens.postsecuretoken
      with:
        accountSwitchKey: tools.accountSwitchKey
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: akamai-get-secure-token
      description: Akamai Get a Secure Token
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: edgeworkers-secure-tokens.getsecuretoken
      with:
        acl: tools.acl
        url: tools.url
        expiry: tools.expiry
        network: tools.network
        accountSwitchKey: tools.accountSwitchKey
      outputParameters:
      - type: object
        mapping: $.