naftiko: 1.0.0-alpha2 info: label: Cilium API description: The Cilium REST API provides access to the Cilium daemon and agent endpoints for managing Kubernetes network policy, security, and connectivity. The API is served by the cilium-agent process over a local Unix domain socket and HTTP interface. It covers endpoint management, identity management, policy configuration, IP address management, service configuration, BGP operations, and daemon health status. tags: - Cilium - API created: '2026-05-06' modified: '2026-05-06' capability: consumes: - type: http namespace: cilium baseUri: http://localhost/v1 description: Cilium API HTTP API. resources: - name: healthz path: /healthz operations: - name: getdaemonhealth method: GET description: Cilium Get daemon health status outputRawFormat: json outputParameters: - name: result type: object value: $. - name: config path: /config operations: - name: getdaemonconfig method: GET description: Cilium Get daemon configuration outputRawFormat: json outputParameters: - name: result type: object value: $. - name: patchdaemonconfig method: PATCH description: Cilium Modify daemon configuration outputRawFormat: json outputParameters: - name: result type: object value: $. - name: cluster-nodes path: /cluster/nodes operations: - name: getclusternodes method: GET description: Cilium List cluster nodes outputRawFormat: json outputParameters: - name: result type: object value: $. - name: debuginfo path: /debuginfo operations: - name: getdebuginfo method: GET description: Cilium Get debugging information outputRawFormat: json outputParameters: - name: result type: object value: $. - name: map path: /map operations: - name: getbpfmaps method: GET description: Cilium List BPF maps outputRawFormat: json outputParameters: - name: result type: object value: $. - name: node-ids path: /node/ids operations: - name: getnodeids method: GET description: Cilium Get node IDs outputRawFormat: json outputParameters: - name: result type: object value: $. - name: endpoint path: /endpoint operations: - name: listendpoints method: GET description: Cilium List endpoints outputRawFormat: json outputParameters: - name: result type: object value: $. - name: deleteendpoints method: DELETE description: Cilium Delete endpoints by label selector outputRawFormat: json outputParameters: - name: result type: object value: $. - name: endpoint-id path: /endpoint/{id} operations: - name: getendpoint method: GET description: Cilium Get endpoint by ID outputRawFormat: json outputParameters: - name: result type: object value: $. - name: putendpoint method: PUT description: Cilium Create or replace endpoint outputRawFormat: json outputParameters: - name: result type: object value: $. - name: patchendpoint method: PATCH description: Cilium Modify endpoint outputRawFormat: json outputParameters: - name: result type: object value: $. - name: deleteendpoint method: DELETE description: Cilium Delete endpoint outputRawFormat: json outputParameters: - name: result type: object value: $. - name: endpoint-id-config path: /endpoint/{id}/config operations: - name: getendpointconfig method: GET description: Cilium Get endpoint configuration outputRawFormat: json outputParameters: - name: result type: object value: $. - name: patchendpointconfig method: PATCH description: Cilium Modify endpoint configuration outputRawFormat: json outputParameters: - name: result type: object value: $. - name: endpoint-id-labels path: /endpoint/{id}/labels operations: - name: getendpointlabels method: GET description: Cilium Get endpoint labels outputRawFormat: json outputParameters: - name: result type: object value: $. - name: patchendpointlabels method: PATCH description: Cilium Modify endpoint labels outputRawFormat: json outputParameters: - name: result type: object value: $. - name: endpoint-id-log path: /endpoint/{id}/log operations: - name: getendpointlog method: GET description: Cilium Get endpoint status log outputRawFormat: json outputParameters: - name: result type: object value: $. - name: endpoint-id-healthz path: /endpoint/{id}/healthz operations: - name: getendpointhealth method: GET description: Cilium Get endpoint health outputRawFormat: json outputParameters: - name: result type: object value: $. - name: identity path: /identity operations: - name: listidentities method: GET description: Cilium List security identities outputRawFormat: json outputParameters: - name: result type: object value: $. - name: identity-id path: /identity/{id} operations: - name: getidentity method: GET description: Cilium Get identity by ID outputRawFormat: json outputParameters: - name: result type: object value: $. - name: identity-endpoints path: /identity/endpoints operations: - name: getlocalendpointidentities method: GET description: Cilium List local endpoint identities outputRawFormat: json outputParameters: - name: result type: object value: $. - name: policy-selectors path: /policy/selectors operations: - name: getpolicyselectors method: GET description: Cilium Get policy selectors outputRawFormat: json outputParameters: - name: result type: object value: $. - name: fqdn-cache path: /fqdn/cache operations: - name: getfqdncache method: GET description: Cilium Get FQDN DNS cache outputRawFormat: json outputParameters: - name: result type: object value: $. - name: deletefqdncache method: DELETE description: Cilium Clear FQDN DNS cache outputRawFormat: json outputParameters: - name: result type: object value: $. - name: fqdn-names path: /fqdn/names operations: - name: getfqdnnames method: GET description: Cilium Get FQDN selector names outputRawFormat: json outputParameters: - name: result type: object value: $. - name: ipam path: /ipam operations: - name: allocateipaddress method: POST description: Cilium Allocate IP address outputRawFormat: json outputParameters: - name: result type: object value: $. - name: ipam-ip path: /ipam/{ip} operations: - name: allocatespecificipaddress method: POST description: Cilium Allocate specific IP address outputRawFormat: json outputParameters: - name: result type: object value: $. - name: releaseipaddress method: DELETE description: Cilium Release IP address outputRawFormat: json outputParameters: - name: result type: object value: $. - name: ip path: /ip operations: - name: listipaddresses method: GET description: Cilium List IP addresses outputRawFormat: json outputParameters: - name: result type: object value: $. - name: service path: /service operations: - name: listservices method: GET description: Cilium List services outputRawFormat: json outputParameters: - name: result type: object value: $. - name: service-id path: /service/{id} operations: - name: getservice method: GET description: Cilium Get service by ID outputRawFormat: json outputParameters: - name: result type: object value: $. - name: putservice method: PUT description: Cilium Create or update service outputRawFormat: json outputParameters: - name: result type: object value: $. - name: deleteservice method: DELETE description: Cilium Delete service outputRawFormat: json outputParameters: - name: result type: object value: $. - name: lrp path: /lrp operations: - name: listlocalredirectpolicies method: GET description: Cilium List local redirect policies outputRawFormat: json outputParameters: - name: result type: object value: $. - name: prefilter path: /prefilter operations: - name: getprefilterconfig method: GET description: Cilium Get prefilter configuration outputRawFormat: json outputParameters: - name: result type: object value: $. - name: patchprefilterconfig method: PATCH description: Cilium Update prefilter configuration outputRawFormat: json outputParameters: - name: result type: object value: $. - name: deleteprefilterconfig method: DELETE description: Cilium Delete prefilter entries outputRawFormat: json outputParameters: - name: result type: object value: $. - name: bgp-peers path: /bgp/peers operations: - name: getbgppeers method: GET description: Cilium List BGP peers outputRawFormat: json outputParameters: - name: result type: object value: $. - name: bgp-routes path: /bgp/routes operations: - name: getbgproutes method: GET description: Cilium List BGP routes outputRawFormat: json outputParameters: - name: result type: object value: $. - name: bgp-route-policies path: /bgp/route-policies operations: - name: getbgproutepolicies method: GET description: Cilium List BGP route policies outputRawFormat: json outputParameters: - name: result type: object value: $. exposes: - type: rest port: 8080 namespace: cilium-rest description: REST adapter for Cilium API. resources: - path: /healthz name: getdaemonhealth operations: - method: GET name: getdaemonhealth description: Cilium Get daemon health status call: cilium.getdaemonhealth outputParameters: - type: object mapping: $. - path: /config name: getdaemonconfig operations: - method: GET name: getdaemonconfig description: Cilium Get daemon configuration call: cilium.getdaemonconfig outputParameters: - type: object mapping: $. - path: /config name: patchdaemonconfig operations: - method: PATCH name: patchdaemonconfig description: Cilium Modify daemon configuration call: cilium.patchdaemonconfig outputParameters: - type: object mapping: $. - path: /cluster/nodes name: getclusternodes operations: - method: GET name: getclusternodes description: Cilium List cluster nodes call: cilium.getclusternodes outputParameters: - type: object mapping: $. - path: /debuginfo name: getdebuginfo operations: - method: GET name: getdebuginfo description: Cilium Get debugging information call: cilium.getdebuginfo outputParameters: - type: object mapping: $. - path: /map name: getbpfmaps operations: - method: GET name: getbpfmaps description: Cilium List BPF maps call: cilium.getbpfmaps outputParameters: - type: object mapping: $. - path: /node/ids name: getnodeids operations: - method: GET name: getnodeids description: Cilium Get node IDs call: cilium.getnodeids outputParameters: - type: object mapping: $. - path: /endpoint name: listendpoints operations: - method: GET name: listendpoints description: Cilium List endpoints call: cilium.listendpoints outputParameters: - type: object mapping: $. - path: /endpoint name: deleteendpoints operations: - method: DELETE name: deleteendpoints description: Cilium Delete endpoints by label selector call: cilium.deleteendpoints outputParameters: - type: object mapping: $. - path: /endpoint/{id} name: getendpoint operations: - method: GET name: getendpoint description: Cilium Get endpoint by ID call: cilium.getendpoint outputParameters: - type: object mapping: $. - path: /endpoint/{id} name: putendpoint operations: - method: PUT name: putendpoint description: Cilium Create or replace endpoint call: cilium.putendpoint outputParameters: - type: object mapping: $. - path: /endpoint/{id} name: patchendpoint operations: - method: PATCH name: patchendpoint description: Cilium Modify endpoint call: cilium.patchendpoint outputParameters: - type: object mapping: $. - path: /endpoint/{id} name: deleteendpoint operations: - method: DELETE name: deleteendpoint description: Cilium Delete endpoint call: cilium.deleteendpoint outputParameters: - type: object mapping: $. - path: /endpoint/{id}/config name: getendpointconfig operations: - method: GET name: getendpointconfig description: Cilium Get endpoint configuration call: cilium.getendpointconfig outputParameters: - type: object mapping: $. - path: /endpoint/{id}/config name: patchendpointconfig operations: - method: PATCH name: patchendpointconfig description: Cilium Modify endpoint configuration call: cilium.patchendpointconfig outputParameters: - type: object mapping: $. - path: /endpoint/{id}/labels name: getendpointlabels operations: - method: GET name: getendpointlabels description: Cilium Get endpoint labels call: cilium.getendpointlabels outputParameters: - type: object mapping: $. - path: /endpoint/{id}/labels name: patchendpointlabels operations: - method: PATCH name: patchendpointlabels description: Cilium Modify endpoint labels call: cilium.patchendpointlabels outputParameters: - type: object mapping: $. - path: /endpoint/{id}/log name: getendpointlog operations: - method: GET name: getendpointlog description: Cilium Get endpoint status log call: cilium.getendpointlog outputParameters: - type: object mapping: $. - path: /endpoint/{id}/healthz name: getendpointhealth operations: - method: GET name: getendpointhealth description: Cilium Get endpoint health call: cilium.getendpointhealth outputParameters: - type: object mapping: $. - path: /identity name: listidentities operations: - method: GET name: listidentities description: Cilium List security identities call: cilium.listidentities outputParameters: - type: object mapping: $. - path: /identity/{id} name: getidentity operations: - method: GET name: getidentity description: Cilium Get identity by ID call: cilium.getidentity outputParameters: - type: object mapping: $. - path: /identity/endpoints name: getlocalendpointidentities operations: - method: GET name: getlocalendpointidentities description: Cilium List local endpoint identities call: cilium.getlocalendpointidentities outputParameters: - type: object mapping: $. - path: /policy/selectors name: getpolicyselectors operations: - method: GET name: getpolicyselectors description: Cilium Get policy selectors call: cilium.getpolicyselectors outputParameters: - type: object mapping: $. - path: /fqdn/cache name: getfqdncache operations: - method: GET name: getfqdncache description: Cilium Get FQDN DNS cache call: cilium.getfqdncache outputParameters: - type: object mapping: $. - path: /fqdn/cache name: deletefqdncache operations: - method: DELETE name: deletefqdncache description: Cilium Clear FQDN DNS cache call: cilium.deletefqdncache outputParameters: - type: object mapping: $. - path: /fqdn/names name: getfqdnnames operations: - method: GET name: getfqdnnames description: Cilium Get FQDN selector names call: cilium.getfqdnnames outputParameters: - type: object mapping: $. - path: /ipam name: allocateipaddress operations: - method: POST name: allocateipaddress description: Cilium Allocate IP address call: cilium.allocateipaddress outputParameters: - type: object mapping: $. - path: /ipam/{ip} name: allocatespecificipaddress operations: - method: POST name: allocatespecificipaddress description: Cilium Allocate specific IP address call: cilium.allocatespecificipaddress outputParameters: - type: object mapping: $. - path: /ipam/{ip} name: releaseipaddress operations: - method: DELETE name: releaseipaddress description: Cilium Release IP address call: cilium.releaseipaddress outputParameters: - type: object mapping: $. - path: /ip name: listipaddresses operations: - method: GET name: listipaddresses description: Cilium List IP addresses call: cilium.listipaddresses outputParameters: - type: object mapping: $. - path: /service name: listservices operations: - method: GET name: listservices description: Cilium List services call: cilium.listservices outputParameters: - type: object mapping: $. - path: /service/{id} name: getservice operations: - method: GET name: getservice description: Cilium Get service by ID call: cilium.getservice outputParameters: - type: object mapping: $. - path: /service/{id} name: putservice operations: - method: PUT name: putservice description: Cilium Create or update service call: cilium.putservice outputParameters: - type: object mapping: $. - path: /service/{id} name: deleteservice operations: - method: DELETE name: deleteservice description: Cilium Delete service call: cilium.deleteservice outputParameters: - type: object mapping: $. - path: /lrp name: listlocalredirectpolicies operations: - method: GET name: listlocalredirectpolicies description: Cilium List local redirect policies call: cilium.listlocalredirectpolicies outputParameters: - type: object mapping: $. - path: /prefilter name: getprefilterconfig operations: - method: GET name: getprefilterconfig description: Cilium Get prefilter configuration call: cilium.getprefilterconfig outputParameters: - type: object mapping: $. - path: /prefilter name: patchprefilterconfig operations: - method: PATCH name: patchprefilterconfig description: Cilium Update prefilter configuration call: cilium.patchprefilterconfig outputParameters: - type: object mapping: $. - path: /prefilter name: deleteprefilterconfig operations: - method: DELETE name: deleteprefilterconfig description: Cilium Delete prefilter entries call: cilium.deleteprefilterconfig outputParameters: - type: object mapping: $. - path: /bgp/peers name: getbgppeers operations: - method: GET name: getbgppeers description: Cilium List BGP peers call: cilium.getbgppeers outputParameters: - type: object mapping: $. - path: /bgp/routes name: getbgproutes operations: - method: GET name: getbgproutes description: Cilium List BGP routes call: cilium.getbgproutes outputParameters: - type: object mapping: $. - path: /bgp/route-policies name: getbgproutepolicies operations: - method: GET name: getbgproutepolicies description: Cilium List BGP route policies call: cilium.getbgproutepolicies outputParameters: - type: object mapping: $. - type: mcp port: 9090 namespace: cilium-mcp transport: http description: MCP adapter for Cilium API for AI agent use. tools: - name: getdaemonhealth description: Cilium Get daemon health status hints: readOnly: true destructive: false idempotent: true call: cilium.getdaemonhealth outputParameters: - type: object mapping: $. - name: getdaemonconfig description: Cilium Get daemon configuration hints: readOnly: true destructive: false idempotent: true call: cilium.getdaemonconfig outputParameters: - type: object mapping: $. - name: patchdaemonconfig description: Cilium Modify daemon configuration hints: readOnly: false destructive: false idempotent: false call: cilium.patchdaemonconfig outputParameters: - type: object mapping: $. - name: getclusternodes description: Cilium List cluster nodes hints: readOnly: true destructive: false idempotent: true call: cilium.getclusternodes outputParameters: - type: object mapping: $. - name: getdebuginfo description: Cilium Get debugging information hints: readOnly: true destructive: false idempotent: true call: cilium.getdebuginfo outputParameters: - type: object mapping: $. - name: getbpfmaps description: Cilium List BPF maps hints: readOnly: true destructive: false idempotent: true call: cilium.getbpfmaps outputParameters: - type: object mapping: $. - name: getnodeids description: Cilium Get node IDs hints: readOnly: true destructive: false idempotent: true call: cilium.getnodeids outputParameters: - type: object mapping: $. - name: listendpoints description: Cilium List endpoints hints: readOnly: true destructive: false idempotent: true call: cilium.listendpoints outputParameters: - type: object mapping: $. - name: deleteendpoints description: Cilium Delete endpoints by label selector hints: readOnly: false destructive: true idempotent: true call: cilium.deleteendpoints outputParameters: - type: object mapping: $. - name: getendpoint description: Cilium Get endpoint by ID hints: readOnly: true destructive: false idempotent: true call: cilium.getendpoint outputParameters: - type: object mapping: $. - name: putendpoint description: Cilium Create or replace endpoint hints: readOnly: false destructive: false idempotent: true call: cilium.putendpoint outputParameters: - type: object mapping: $. - name: patchendpoint description: Cilium Modify endpoint hints: readOnly: false destructive: false idempotent: false call: cilium.patchendpoint outputParameters: - type: object mapping: $. - name: deleteendpoint description: Cilium Delete endpoint hints: readOnly: false destructive: true idempotent: true call: cilium.deleteendpoint outputParameters: - type: object mapping: $. - name: getendpointconfig description: Cilium Get endpoint configuration hints: readOnly: true destructive: false idempotent: true call: cilium.getendpointconfig outputParameters: - type: object mapping: $. - name: patchendpointconfig description: Cilium Modify endpoint configuration hints: readOnly: false destructive: false idempotent: false call: cilium.patchendpointconfig outputParameters: - type: object mapping: $. - name: getendpointlabels description: Cilium Get endpoint labels hints: readOnly: true destructive: false idempotent: true call: cilium.getendpointlabels outputParameters: - type: object mapping: $. - name: patchendpointlabels description: Cilium Modify endpoint labels hints: readOnly: false destructive: false idempotent: false call: cilium.patchendpointlabels outputParameters: - type: object mapping: $. - name: getendpointlog description: Cilium Get endpoint status log hints: readOnly: true destructive: false idempotent: true call: cilium.getendpointlog outputParameters: - type: object mapping: $. - name: getendpointhealth description: Cilium Get endpoint health hints: readOnly: true destructive: false idempotent: true call: cilium.getendpointhealth outputParameters: - type: object mapping: $. - name: listidentities description: Cilium List security identities hints: readOnly: true destructive: false idempotent: true call: cilium.listidentities outputParameters: - type: object mapping: $. - name: getidentity description: Cilium Get identity by ID hints: readOnly: true destructive: false idempotent: true call: cilium.getidentity outputParameters: - type: object mapping: $. - name: getlocalendpointidentities description: Cilium List local endpoint identities hints: readOnly: true destructive: false idempotent: true call: cilium.getlocalendpointidentities outputParameters: - type: object mapping: $. - name: getpolicyselectors description: Cilium Get policy selectors hints: readOnly: true destructive: false idempotent: true call: cilium.getpolicyselectors outputParameters: - type: object mapping: $. - name: getfqdncache description: Cilium Get FQDN DNS cache hints: readOnly: true destructive: false idempotent: true call: cilium.getfqdncache outputParameters: - type: object mapping: $. - name: deletefqdncache description: Cilium Clear FQDN DNS cache hints: readOnly: false destructive: true idempotent: true call: cilium.deletefqdncache outputParameters: - type: object mapping: $. - name: getfqdnnames description: Cilium Get FQDN selector names hints: readOnly: true destructive: false idempotent: true call: cilium.getfqdnnames outputParameters: - type: object mapping: $. - name: allocateipaddress description: Cilium Allocate IP address hints: readOnly: false destructive: false idempotent: false call: cilium.allocateipaddress outputParameters: - type: object mapping: $. - name: allocatespecificipaddress description: Cilium Allocate specific IP address hints: readOnly: false destructive: false idempotent: false call: cilium.allocatespecificipaddress outputParameters: - type: object mapping: $. - name: releaseipaddress description: Cilium Release IP address hints: readOnly: false destructive: true idempotent: true call: cilium.releaseipaddress outputParameters: - type: object mapping: $. - name: listipaddresses description: Cilium List IP addresses hints: readOnly: true destructive: false idempotent: true call: cilium.listipaddresses outputParameters: - type: object mapping: $. - name: listservices description: Cilium List services hints: readOnly: true destructive: false idempotent: true call: cilium.listservices outputParameters: - type: object mapping: $. - name: getservice description: Cilium Get service by ID hints: readOnly: true destructive: false idempotent: true call: cilium.getservice outputParameters: - type: object mapping: $. - name: putservice description: Cilium Create or update service hints: readOnly: false destructive: false idempotent: true call: cilium.putservice outputParameters: - type: object mapping: $. - name: deleteservice description: Cilium Delete service hints: readOnly: false destructive: true idempotent: true call: cilium.deleteservice outputParameters: - type: object mapping: $. - name: listlocalredirectpolicies description: Cilium List local redirect policies hints: readOnly: true destructive: false idempotent: true call: cilium.listlocalredirectpolicies outputParameters: - type: object mapping: $. - name: getprefilterconfig description: Cilium Get prefilter configuration hints: readOnly: true destructive: false idempotent: true call: cilium.getprefilterconfig outputParameters: - type: object mapping: $. - name: patchprefilterconfig description: Cilium Update prefilter configuration hints: readOnly: false destructive: false idempotent: false call: cilium.patchprefilterconfig outputParameters: - type: object mapping: $. - name: deleteprefilterconfig description: Cilium Delete prefilter entries hints: readOnly: false destructive: true idempotent: true call: cilium.deleteprefilterconfig outputParameters: - type: object mapping: $. - name: getbgppeers description: Cilium List BGP peers hints: readOnly: true destructive: false idempotent: true call: cilium.getbgppeers outputParameters: - type: object mapping: $. - name: getbgproutes description: Cilium List BGP routes hints: readOnly: true destructive: false idempotent: true call: cilium.getbgproutes outputParameters: - type: object mapping: $. - name: getbgproutepolicies description: Cilium List BGP route policies hints: readOnly: true destructive: false idempotent: true call: cilium.getbgproutepolicies outputParameters: - type: object mapping: $.