naftiko: 1.0.0-alpha2 info: label: Apache APISIX Admin API — Secrets description: 'Apache APISIX Admin API — Secrets. 4 operations. Lead operation: Apache APISIX Get a Secret. Self-contained Naftiko capability covering one Apache Apisix business surface.' tags: - Apache Apisix - Secrets created: '2026-05-19' modified: '2026-05-19' binds: - namespace: env keys: APACHE_APISIX_API_KEY: APACHE_APISIX_API_KEY capability: consumes: - type: http namespace: admin-secrets baseUri: http://127.0.0.1:9180/apisix/admin description: Apache APISIX Admin API — Secrets business capability. Self-contained, no shared references. resources: - name: secrets-secret_manager-secret_id path: /secrets/{secret_manager}/{secret_id} operations: - name: getsecret method: GET description: Apache APISIX Get a Secret outputRawFormat: json outputParameters: - name: result type: object value: $. - name: createorupdatesecret method: PUT description: Apache APISIX Create or Update a Secret outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: true - name: patchsecret method: PATCH description: Apache APISIX Patch a Secret outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: true - name: deletesecret method: DELETE description: Apache APISIX Delete a Secret outputRawFormat: json outputParameters: - name: result type: object value: $. authentication: type: apikey key: X-API-KEY value: '{{env.APACHE_APISIX_API_KEY}}' placement: header exposes: - type: rest namespace: admin-secrets-rest port: 8080 description: REST adapter for Apache APISIX Admin API — Secrets. One Spectral-compliant resource per consumed operation, prefixed with /v1. resources: - path: /v1/secrets/{secret-manager}/{secret-id} name: secrets-secret-manager-secret-id description: REST surface for secrets-secret_manager-secret_id. operations: - method: GET name: getsecret description: Apache APISIX Get a Secret call: admin-secrets.getsecret outputParameters: - type: object mapping: $. - method: PUT name: createorupdatesecret description: Apache APISIX Create or Update a Secret call: admin-secrets.createorupdatesecret with: body: rest.body outputParameters: - type: object mapping: $. - method: PATCH name: patchsecret description: Apache APISIX Patch a Secret call: admin-secrets.patchsecret with: body: rest.body outputParameters: - type: object mapping: $. - method: DELETE name: deletesecret description: Apache APISIX Delete a Secret call: admin-secrets.deletesecret outputParameters: - type: object mapping: $. - type: mcp namespace: admin-secrets-mcp port: 9090 transport: http description: MCP adapter for Apache APISIX Admin API — Secrets. One tool per consumed operation, routed inline through this capability's consumes block. tools: - name: apache-apisix-get-secret description: Apache APISIX Get a Secret hints: readOnly: true destructive: false idempotent: true call: admin-secrets.getsecret outputParameters: - type: object mapping: $. - name: apache-apisix-create-update-secret description: Apache APISIX Create or Update a Secret hints: readOnly: false destructive: false idempotent: true call: admin-secrets.createorupdatesecret with: body: tools.body outputParameters: - type: object mapping: $. - name: apache-apisix-patch-secret description: Apache APISIX Patch a Secret hints: readOnly: false destructive: false idempotent: true call: admin-secrets.patchsecret with: body: tools.body outputParameters: - type: object mapping: $. - name: apache-apisix-delete-secret description: Apache APISIX Delete a Secret hints: readOnly: false destructive: true idempotent: true call: admin-secrets.deletesecret outputParameters: - type: object mapping: $.