naftiko: "1.0.0-alpha1"

info:
  label: AppOmni API
  description: >-
    API for the AppOmni SaaS security management platform, providing access to
    security events, policies, and compliance reports for enterprise SaaS applications.
  tags:
    - AppOmni
    - SaaS Security
    - Compliance
    - Threat Detection
  created: "2026-04-19"
  modified: "2026-04-19"

binds:
  - namespace: env
    keys:
      APPOMNI_API_TOKEN: APPOMNI_API_TOKEN

capability:
  consumes:
    - type: http
      namespace: appomni
      baseUri: "https://api.appomni.com/v1"
      description: AppOmni SaaS security API
      authentication:
        type: bearer
        token: "{{APPOMNI_API_TOKEN}}"
      resources:
        - name: events
          path: /events
          description: Security events detected across SaaS applications
          operations:
            - name: list-events
              method: GET
              description: Returns security events
              outputRawFormat: json
              outputParameters:
                - name: result
                  type: object
                  value: "$."
            - name: get-event
              method: GET
              description: Returns a specific security event
              inputParameters:
                - name: eventId
                  in: path
                  type: string
                  required: true
                  description: Event identifier
              outputRawFormat: json
              outputParameters:
                - name: result
                  type: object
                  value: "$."

        - name: policies
          path: /policies
          description: Security policy management
          operations:
            - name: list-policies
              method: GET
              description: Returns security policies
              outputRawFormat: json
              outputParameters:
                - name: result
                  type: object
                  value: "$."

        - name: compliance-reports
          path: /compliance/reports
          description: Compliance reporting
          operations:
            - name: list-reports
              method: GET
              description: Returns compliance reports
              outputRawFormat: json
              outputParameters:
                - name: result
                  type: object
                  value: "$."

  exposes:
    - type: mcp
      port: 9090
      namespace: appomni-mcp
      transport: http
      tools:
        - name: list-security-events
          description: Lists security events detected across monitored SaaS applications
          hints:
            readOnly: true
            idempotent: true
          call: "appomni.list-events"
          outputParameters:
            - type: object
              mapping: "$."

        - name: get-security-event
          description: Gets details for a specific SaaS security event
          hints:
            readOnly: true
            idempotent: true
          call: "appomni.get-event"
          with:
            eventId: "tools.eventId"
          outputParameters:
            - type: object
              mapping: "$."

        - name: list-security-policies
          description: Lists security policies configured for monitored SaaS applications
          hints:
            readOnly: true
            idempotent: true
          call: "appomni.list-policies"
          outputParameters:
            - type: object
              mapping: "$."

        - name: list-compliance-reports
          description: Lists compliance reports generated by AppOmni (SOC2, ISO27001, HIPAA, etc.)
          hints:
            readOnly: true
            idempotent: true
          call: "appomni.list-reports"
          outputParameters:
            - type: object
              mapping: "$."