slug: appwrite
provider: Appwrite
generated_by: planning/capability-mapping/scripts/classify_capabilities.py
model: claude-opus-5
frame:
- Software & Technology
min_confidence: 0.7
capability_model:
  source: https://github.com/vincentmakes/turbo-ea-capabilities
  license: CC-BY-4.0
  attribution: Turbo EA Capabilities by Vincent Verdet — Turbo EA, https://github.com/vincentmakes/turbo-ea-capabilities,
    CC BY 4.0
  notice: NOTICE
edge_count: 6
edges:
- tag: Users
  spec_file: appwrite-users-api-openapi.yml
  capability_id: BC-620.20
  capability_id_l1: BC-620
  capability_name: Identity & Access Management
  confidence: 0.8
  evidence: 'POST /users/argon2  Create user with Argon2 password; GET /users/identities  List identities;
    schemas: identity, session, jwt, mfaChallengeSecret'
  reason: Server-side management of end-user accounts, credentials (password hash algorithms), identities,
    sessions and MFA is identity and access management, not customer master data; no sales/CRM semantics
    are present.
- tag: Webhooks
  spec_file: appwrite-webhooks-api-openapi.yml
  capability_id: BC-4270.80
  capability_id_l1: BC-4270
  capability_name: Webhook & Event Subscription Management
  confidence: 0.8
  evidence: POST /webhooks  webhooksCreate  Create webhook; PATCH /webhooks/{webhookId}/secret  Update
    webhook secret key
  reason: Full CRUD lifecycle over outbound webhook subscriptions including signing secrets maps directly
    to webhook and event subscription management in the developer platform capability.
- tag: waf
  spec_file: appwrite-waf-api-openapi.yml
  capability_id: BC-620
  capability_id_l1: BC-620
  capability_name: Cybersecurity Management
  confidence: 0.8
  evidence: POST /waf/rules/deny  wafCreateDenyRule  Create a deny WAF rule; POST /waf/rules/rate-limit  Create
    a rate-limit WAF rule
  reason: Management of web application firewall rules (deny, challenge, bypass, rate-limit, redirect)
    is a protective security control, clearly cybersecurity management; no single listed sub-capability
    cleanly covers WAF policy, so only L1 is asserted.
- tag: Apps
  spec_file: appwrite-apps-api-openapi.yml
  capability_id: BC-4270.40
  capability_id_l1: BC-4270
  capability_name: Developer Identity & Credential Management
  confidence: 0.7
  evidence: 'GET /apps/scopes/oauth2 appsListOAuth2Scopes ''List OAuth2 Scopes''; GET /apps/{appId}/keys
    ''List App Keys''; POST /apps/{appId}/installations/{installationId}/tokens ''Create Installation
    Token''; schemas: appSecretPlaintext, oauth2Token'
  reason: Registration of applications with OAuth2 scopes, app keys, secrets and installation tokens is
    issuance and stewardship of developer credentials and OAuth clients on the platform. Could alternatively
    be read as partner app programme stewardship, hence 0.7.
- tag: Mysql
  spec_file: appwrite-mysql-api-openapi.yml
  capability_id: BC-600.50
  capability_id_l1: BC-600
  capability_name: IT Infrastructure Management
  confidence: 0.7
  evidence: 'POST /mysql mysqlCreate ''Create database''; POST /mysql/{databaseId}/backups ''Create backup'';
    schemas: dedicatedDatabase, dedicatedDatabaseReplicas, dedicatedDatabasePITRWindows'
  reason: Provisioning and operating dedicated MySQL database instances with backups, backup policies,
    PITR restorations and replicas — managed data-platform infrastructure, i.e. IT Infrastructure Management
    (compute/storage).
- tag: Sites
  spec_file: appwrite-sites-api-openapi.yml
  capability_id: BC-4210.40
  capability_id_l1: BC-4210
  capability_name: Deployment Orchestration
  confidence: 0.7
  evidence: 'POST /sites/{siteId}/deployments  sitesCreateDeployment  Create deployment; PATCH /sites/{siteId}/deployment  sitesUpdateSiteDeployment  Update
    site''s deployment; schemas: deployment, deploymentList, framework'
  reason: Hosting service that builds and deploys web applications from frameworks/templates and manages
    which deployment is live — deployment orchestration of software to production.