naftiko: 1.0.0-alpha2 info: label: bunq API — Session Server description: 'bunq API — Session Server. 1 operations. Lead operation: Session Server. Self-contained Naftiko capability covering one Bunq business surface.' tags: - Bunq - Session Server created: '2026-05-19' modified: '2026-05-19' binds: - namespace: env keys: BUNQ_API_KEY: BUNQ_API_KEY capability: consumes: - type: http namespace: bunq-session-server baseUri: https://public-api.sandbox.bunq.com/{basePath} description: bunq API — Session Server business capability. Self-contained, no shared references. resources: - name: session-server path: /session-server operations: - name: createsessionserver method: POST description: Create a new session for a DeviceServer. Provide the Installation token in the "X-Bunq-Client-Authentication" header. And don't forget to create the "X-Bunq-Client-Signature" header. The response contains a Session token that should be used outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: true exposes: - type: rest namespace: bunq-session-server-rest port: 8080 description: REST adapter for bunq API — Session Server. One Spectral-compliant resource per consumed operation, prefixed with /v1. resources: - path: /v1/session-server name: session-server description: REST surface for session-server. operations: - method: POST name: createsessionserver description: Create a new session for a DeviceServer. Provide the Installation token in the "X-Bunq-Client-Authentication" header. And don't forget to create the "X-Bunq-Client-Signature" header. The response contains a Session token that should be used call: bunq-session-server.createsessionserver with: body: rest.body outputParameters: - type: object mapping: $. - type: mcp namespace: bunq-session-server-mcp port: 9090 transport: http description: MCP adapter for bunq API — Session Server. One tool per consumed operation, routed inline through this capability's consumes block. tools: - name: create-new-session-deviceserver-provide description: Create a new session for a DeviceServer. Provide the Installation token in the "X-Bunq-Client-Authentication" header. And don't forget to create the "X-Bunq-Client-Signature" header. The response contains a Session token that should be used hints: readOnly: true destructive: false idempotent: false call: bunq-session-server.createsessionserver with: body: tools.body outputParameters: - type: object mapping: $.