naftiko: 1.0.0-alpha2 info: label: Amplify Platform API v1.0.0 — auth description: 'Amplify Platform API v1.0.0 — auth. 28 operations. Lead operation: Axway Activate a User. Self-contained Naftiko capability covering one Axway business surface.' tags: - Axway - auth created: '2026-05-19' modified: '2026-05-19' binds: - namespace: env keys: AXWAY_API_KEY: AXWAY_API_KEY capability: consumes: - type: http namespace: amplify-platform-auth baseUri: https://platform.axway.com/api/v1 description: Amplify Platform API v1.0.0 — auth business capability. Self-contained, no shared references. resources: - name: auth-activate path: /auth/activate operations: - name: authactivationconfirm method: POST description: Axway Activate a User outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: auth-activate-forgot path: /auth/activate/forgot operations: - name: authactivationforgot method: POST description: Axway Reset User Password outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: auth-activate-resend path: /auth/activate/resend operations: - name: authactivationresend method: POST description: Axway Resend Activation Link outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: auth-activate-signup path: /auth/activate/signup operations: - name: authactivationsignup method: POST description: Axway Activate a Signup User outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: auth-activation-activation_id path: /auth/activation/{activation_id} operations: - name: authactivationfind method: GET description: Axway Find Activation outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: activation_id in: path type: string required: true - name: auth-authenticator path: /auth/authenticator operations: - name: authdeviceauthconfirm method: POST description: Axway Confirm Authenticator App outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: authdeviceauthcreate method: GET description: Axway Initiate Authenticator App Setup outputRawFormat: json outputParameters: - name: result type: object value: $. - name: authdeviceauthremoveapp method: DELETE description: Axway Remove Authenticator App outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: x-auth-password in: header type: string required: true - name: auth-checkSession path: /auth/checkSession operations: - name: authsessioncheck method: GET description: Axway Checks if the User is Signed in outputRawFormat: json outputParameters: - name: result type: object value: $. - name: auth-deviceauth path: /auth/deviceauth operations: - name: authdeviceauthvalidate method: POST description: Axway Validates a New Sessions Device Authorization outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: grant in: query type: string - name: body in: body type: object description: Request body (JSON). required: false - name: auth-deviceauth-resend path: /auth/deviceauth/resend operations: - name: authdeviceauthresend method: POST description: Axway Resends Device Authorization outputRawFormat: json outputParameters: - name: result type: object value: $. - name: auth-deviceauth-device_id path: /auth/deviceauth/{device_id} operations: - name: authdeviceauthremove method: DELETE description: Axway Remove Authorized Device outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: device_id in: path type: string required: true - name: auth-deviceauth-user_id path: /auth/deviceauth/{user_id} operations: - name: authdeviceauthfind method: GET description: Axway Retrieve Authorized Devices outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: user_id in: path type: string required: true - name: auth-findSession path: /auth/findSession operations: - name: authsessionfind method: GET description: Axway Retrieves the Current Session outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: from in: query type: string - name: auth-forgot path: /auth/forgot operations: - name: authforgot method: POST description: Axway Send Forgot Password Link outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: auth-impersonate path: /auth/impersonate operations: - name: authunimpersonate method: DELETE description: Axway Unimpersonate User outputRawFormat: json outputParameters: - name: result type: object value: $. - name: auth-login path: /auth/login operations: - name: authlogin method: POST description: Axway Sign-in outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: grant in: query type: string - name: body in: body type: object description: Request body (JSON). required: false - name: auth-logout path: /auth/logout operations: - name: authlogout method: GET description: Axway Sign-out outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: msg in: query type: string - name: redirect in: query type: string - name: auth-mfa-send path: /auth/mfa/send operations: - name: authmfasend method: POST description: Axway Send an Authorization Code outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: auth-mfa-verify path: /auth/mfa/verify operations: - name: authmfaverify method: POST description: Axway Verify an Authorization Code outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: auth-onboarding path: /auth/onboarding operations: - name: authonboarding method: PUT description: Axway Onboarding Capture outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: grant in: query type: string - name: body in: body type: object description: Request body (JSON). required: false - name: auth-password_policy path: /auth/password_policy operations: - name: authfindpasswordpolicy method: GET description: Axway Get Effective Password Policy outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: provider_guid in: query type: string - name: user_guid in: query type: string - name: auth-service-service path: /auth/service/{service} operations: - name: authrevokeoauth method: DELETE description: Axway Revoke OAuth Service outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: service in: path type: string required: true - name: auth-signup path: /auth/signup operations: - name: authsignup method: POST description: Axway Sign Up outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: auth-switchLoggedInOrg path: /auth/switchLoggedInOrg operations: - name: authsessionswitchorg method: POST description: Axway Switch Signed-in Organization outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: auth-terms path: /auth/terms operations: - name: authacceptterms method: PUT description: Axway Accept Terms & Conditions outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: grant in: query type: string - name: auth-unlock-activation_id path: /auth/unlock/{activation_id} operations: - name: authactivationunlock method: PUT description: Axway Unlock Account outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: activation_id in: path type: string required: true - name: auth-validatePassword path: /auth/validatePassword operations: - name: authvalidatepassword method: POST description: Axway Validates a User Password outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: x-auth-password in: header type: string required: true authentication: type: bearer token: '{{env.AXWAY_API_KEY}}' exposes: - type: rest namespace: amplify-platform-auth-rest port: 8080 description: REST adapter for Amplify Platform API v1.0.0 — auth. One Spectral-compliant resource per consumed operation, prefixed with /v1. resources: - path: /v1/auth/activate name: auth-activate description: REST surface for auth-activate. operations: - method: POST name: authactivationconfirm description: Axway Activate a User call: amplify-platform-auth.authactivationconfirm with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/auth/activate/forgot name: auth-activate-forgot description: REST surface for auth-activate-forgot. operations: - method: POST name: authactivationforgot description: Axway Reset User Password call: amplify-platform-auth.authactivationforgot with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/auth/activate/resend name: auth-activate-resend description: REST surface for auth-activate-resend. operations: - method: POST name: authactivationresend description: Axway Resend Activation Link call: amplify-platform-auth.authactivationresend with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/auth/activate/signup name: auth-activate-signup description: REST surface for auth-activate-signup. operations: - method: POST name: authactivationsignup description: Axway Activate a Signup User call: amplify-platform-auth.authactivationsignup with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/auth/activation/{activation-id} name: auth-activation-activation-id description: REST surface for auth-activation-activation_id. operations: - method: GET name: authactivationfind description: Axway Find Activation call: amplify-platform-auth.authactivationfind with: activation_id: rest.activation_id outputParameters: - type: object mapping: $. - path: /v1/auth/authenticator name: auth-authenticator description: REST surface for auth-authenticator. operations: - method: POST name: authdeviceauthconfirm description: Axway Confirm Authenticator App call: amplify-platform-auth.authdeviceauthconfirm with: body: rest.body outputParameters: - type: object mapping: $. - method: GET name: authdeviceauthcreate description: Axway Initiate Authenticator App Setup call: amplify-platform-auth.authdeviceauthcreate outputParameters: - type: object mapping: $. - method: DELETE name: authdeviceauthremoveapp description: Axway Remove Authenticator App call: amplify-platform-auth.authdeviceauthremoveapp with: x-auth-password: rest.x-auth-password outputParameters: - type: object mapping: $. - path: /v1/auth/checksession name: auth-checksession description: REST surface for auth-checkSession. operations: - method: GET name: authsessioncheck description: Axway Checks if the User is Signed in call: amplify-platform-auth.authsessioncheck outputParameters: - type: object mapping: $. - path: /v1/auth/deviceauth name: auth-deviceauth description: REST surface for auth-deviceauth. operations: - method: POST name: authdeviceauthvalidate description: Axway Validates a New Sessions Device Authorization call: amplify-platform-auth.authdeviceauthvalidate with: grant: rest.grant body: rest.body outputParameters: - type: object mapping: $. - path: /v1/auth/deviceauth/resend name: auth-deviceauth-resend description: REST surface for auth-deviceauth-resend. operations: - method: POST name: authdeviceauthresend description: Axway Resends Device Authorization call: amplify-platform-auth.authdeviceauthresend outputParameters: - type: object mapping: $. - path: /v1/auth/deviceauth/{device-id} name: auth-deviceauth-device-id description: REST surface for auth-deviceauth-device_id. operations: - method: DELETE name: authdeviceauthremove description: Axway Remove Authorized Device call: amplify-platform-auth.authdeviceauthremove with: device_id: rest.device_id outputParameters: - type: object mapping: $. - path: /v1/auth/deviceauth/{user-id} name: auth-deviceauth-user-id description: REST surface for auth-deviceauth-user_id. operations: - method: GET name: authdeviceauthfind description: Axway Retrieve Authorized Devices call: amplify-platform-auth.authdeviceauthfind with: user_id: rest.user_id outputParameters: - type: object mapping: $. - path: /v1/auth/findsession name: auth-findsession description: REST surface for auth-findSession. operations: - method: GET name: authsessionfind description: Axway Retrieves the Current Session call: amplify-platform-auth.authsessionfind with: from: rest.from outputParameters: - type: object mapping: $. - path: /v1/auth/forgot name: auth-forgot description: REST surface for auth-forgot. operations: - method: POST name: authforgot description: Axway Send Forgot Password Link call: amplify-platform-auth.authforgot with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/auth/impersonate name: auth-impersonate description: REST surface for auth-impersonate. operations: - method: DELETE name: authunimpersonate description: Axway Unimpersonate User call: amplify-platform-auth.authunimpersonate outputParameters: - type: object mapping: $. - path: /v1/auth/login name: auth-login description: REST surface for auth-login. operations: - method: POST name: authlogin description: Axway Sign-in call: amplify-platform-auth.authlogin with: grant: rest.grant body: rest.body outputParameters: - type: object mapping: $. - path: /v1/auth/logout name: auth-logout description: REST surface for auth-logout. operations: - method: GET name: authlogout description: Axway Sign-out call: amplify-platform-auth.authlogout with: msg: rest.msg redirect: rest.redirect outputParameters: - type: object mapping: $. - path: /v1/auth/mfa/send name: auth-mfa-send description: REST surface for auth-mfa-send. operations: - method: POST name: authmfasend description: Axway Send an Authorization Code call: amplify-platform-auth.authmfasend with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/auth/mfa/verify name: auth-mfa-verify description: REST surface for auth-mfa-verify. operations: - method: POST name: authmfaverify description: Axway Verify an Authorization Code call: amplify-platform-auth.authmfaverify with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/auth/onboarding name: auth-onboarding description: REST surface for auth-onboarding. operations: - method: PUT name: authonboarding description: Axway Onboarding Capture call: amplify-platform-auth.authonboarding with: grant: rest.grant body: rest.body outputParameters: - type: object mapping: $. - path: /v1/auth/password-policy name: auth-password-policy description: REST surface for auth-password_policy. operations: - method: GET name: authfindpasswordpolicy description: Axway Get Effective Password Policy call: amplify-platform-auth.authfindpasswordpolicy with: provider_guid: rest.provider_guid user_guid: rest.user_guid outputParameters: - type: object mapping: $. - path: /v1/auth/service/{service} name: auth-service-service description: REST surface for auth-service-service. operations: - method: DELETE name: authrevokeoauth description: Axway Revoke OAuth Service call: amplify-platform-auth.authrevokeoauth with: service: rest.service outputParameters: - type: object mapping: $. - path: /v1/auth/signup name: auth-signup description: REST surface for auth-signup. operations: - method: POST name: authsignup description: Axway Sign Up call: amplify-platform-auth.authsignup with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/auth/switchloggedinorg name: auth-switchloggedinorg description: REST surface for auth-switchLoggedInOrg. operations: - method: POST name: authsessionswitchorg description: Axway Switch Signed-in Organization call: amplify-platform-auth.authsessionswitchorg with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/auth/terms name: auth-terms description: REST surface for auth-terms. operations: - method: PUT name: authacceptterms description: Axway Accept Terms & Conditions call: amplify-platform-auth.authacceptterms with: grant: rest.grant outputParameters: - type: object mapping: $. - path: /v1/auth/unlock/{activation-id} name: auth-unlock-activation-id description: REST surface for auth-unlock-activation_id. operations: - method: PUT name: authactivationunlock description: Axway Unlock Account call: amplify-platform-auth.authactivationunlock with: activation_id: rest.activation_id outputParameters: - type: object mapping: $. - path: /v1/auth/validatepassword name: auth-validatepassword description: REST surface for auth-validatePassword. operations: - method: POST name: authvalidatepassword description: Axway Validates a User Password call: amplify-platform-auth.authvalidatepassword with: x-auth-password: rest.x-auth-password outputParameters: - type: object mapping: $. - type: mcp namespace: amplify-platform-auth-mcp port: 9090 transport: http description: MCP adapter for Amplify Platform API v1.0.0 — auth. One tool per consumed operation, routed inline through this capability's consumes block. tools: - name: axway-activate-user description: Axway Activate a User hints: readOnly: false destructive: false idempotent: false call: amplify-platform-auth.authactivationconfirm with: body: tools.body outputParameters: - type: object mapping: $. - name: axway-reset-user-password description: Axway Reset User Password hints: readOnly: false destructive: false idempotent: false call: amplify-platform-auth.authactivationforgot with: body: tools.body outputParameters: - type: object mapping: $. - name: axway-resend-activation-link description: Axway Resend Activation Link hints: readOnly: false destructive: false idempotent: false call: amplify-platform-auth.authactivationresend with: body: tools.body outputParameters: - type: object mapping: $. - name: axway-activate-signup-user description: Axway Activate a Signup User hints: readOnly: false destructive: false idempotent: false call: amplify-platform-auth.authactivationsignup with: body: tools.body outputParameters: - type: object mapping: $. - name: axway-find-activation description: Axway Find Activation hints: readOnly: true destructive: false idempotent: true call: amplify-platform-auth.authactivationfind with: activation_id: tools.activation_id outputParameters: - type: object mapping: $. - name: axway-confirm-authenticator-app description: Axway Confirm Authenticator App hints: readOnly: false destructive: false idempotent: false call: amplify-platform-auth.authdeviceauthconfirm with: body: tools.body outputParameters: - type: object mapping: $. - name: axway-initiate-authenticator-app-setup description: Axway Initiate Authenticator App Setup hints: readOnly: true destructive: false idempotent: true call: amplify-platform-auth.authdeviceauthcreate outputParameters: - type: object mapping: $. - name: axway-remove-authenticator-app description: Axway Remove Authenticator App hints: readOnly: false destructive: true idempotent: true call: amplify-platform-auth.authdeviceauthremoveapp with: x-auth-password: tools.x-auth-password outputParameters: - type: object mapping: $. - name: axway-checks-if-user-is description: Axway Checks if the User is Signed in hints: readOnly: true destructive: false idempotent: true call: amplify-platform-auth.authsessioncheck outputParameters: - type: object mapping: $. - name: axway-validates-new-sessions-device description: Axway Validates a New Sessions Device Authorization hints: readOnly: true destructive: false idempotent: false call: amplify-platform-auth.authdeviceauthvalidate with: grant: tools.grant body: tools.body outputParameters: - type: object mapping: $. - name: axway-resends-device-authorization description: Axway Resends Device Authorization hints: readOnly: false destructive: false idempotent: false call: amplify-platform-auth.authdeviceauthresend outputParameters: - type: object mapping: $. - name: axway-remove-authorized-device description: Axway Remove Authorized Device hints: readOnly: false destructive: true idempotent: true call: amplify-platform-auth.authdeviceauthremove with: device_id: tools.device_id outputParameters: - type: object mapping: $. - name: axway-retrieve-authorized-devices description: Axway Retrieve Authorized Devices hints: readOnly: true destructive: false idempotent: true call: amplify-platform-auth.authdeviceauthfind with: user_id: tools.user_id outputParameters: - type: object mapping: $. - name: axway-retrieves-current-session description: Axway Retrieves the Current Session hints: readOnly: true destructive: false idempotent: true call: amplify-platform-auth.authsessionfind with: from: tools.from outputParameters: - type: object mapping: $. - name: axway-send-forgot-password-link description: Axway Send Forgot Password Link hints: readOnly: false destructive: false idempotent: false call: amplify-platform-auth.authforgot with: body: tools.body outputParameters: - type: object mapping: $. - name: axway-unimpersonate-user description: Axway Unimpersonate User hints: readOnly: false destructive: true idempotent: true call: amplify-platform-auth.authunimpersonate outputParameters: - type: object mapping: $. - name: axway-sign description: Axway Sign-in hints: readOnly: false destructive: false idempotent: false call: amplify-platform-auth.authlogin with: grant: tools.grant body: tools.body outputParameters: - type: object mapping: $. - name: axway-sign-out description: Axway Sign-out hints: readOnly: true destructive: false idempotent: true call: amplify-platform-auth.authlogout with: msg: tools.msg redirect: tools.redirect outputParameters: - type: object mapping: $. - name: axway-send-authorization-code description: Axway Send an Authorization Code hints: readOnly: false destructive: false idempotent: false call: amplify-platform-auth.authmfasend with: body: tools.body outputParameters: - type: object mapping: $. - name: axway-verify-authorization-code description: Axway Verify an Authorization Code hints: readOnly: false destructive: false idempotent: false call: amplify-platform-auth.authmfaverify with: body: tools.body outputParameters: - type: object mapping: $. - name: axway-onboarding-capture description: Axway Onboarding Capture hints: readOnly: false destructive: false idempotent: true call: amplify-platform-auth.authonboarding with: grant: tools.grant body: tools.body outputParameters: - type: object mapping: $. - name: axway-get-effective-password-policy description: Axway Get Effective Password Policy hints: readOnly: true destructive: false idempotent: true call: amplify-platform-auth.authfindpasswordpolicy with: provider_guid: tools.provider_guid user_guid: tools.user_guid outputParameters: - type: object mapping: $. - name: axway-revoke-oauth-service description: Axway Revoke OAuth Service hints: readOnly: false destructive: true idempotent: true call: amplify-platform-auth.authrevokeoauth with: service: tools.service outputParameters: - type: object mapping: $. - name: axway-sign-up description: Axway Sign Up hints: readOnly: false destructive: false idempotent: false call: amplify-platform-auth.authsignup with: body: tools.body outputParameters: - type: object mapping: $. - name: axway-switch-signed-organization description: Axway Switch Signed-in Organization hints: readOnly: false destructive: false idempotent: false call: amplify-platform-auth.authsessionswitchorg with: body: tools.body outputParameters: - type: object mapping: $. - name: axway-accept-terms-conditions description: Axway Accept Terms & Conditions hints: readOnly: false destructive: false idempotent: true call: amplify-platform-auth.authacceptterms with: grant: tools.grant outputParameters: - type: object mapping: $. - name: axway-unlock-account description: Axway Unlock Account hints: readOnly: false destructive: false idempotent: true call: amplify-platform-auth.authactivationunlock with: activation_id: tools.activation_id outputParameters: - type: object mapping: $. - name: axway-validates-user-password description: Axway Validates a User Password hints: readOnly: true destructive: false idempotent: false call: amplify-platform-auth.authvalidatepassword with: x-auth-password: tools.x-auth-password outputParameters: - type: object mapping: $.