naftiko: 1.0.0-alpha2
info:
  label: Coveo Search API — Organizations
  description: 'Coveo Search API — Organizations. 15 operations. Lead operation: Lists All Authentication Providers for an
    Organization. Self-contained Naftiko capability covering one Coveo business surface.'
  tags:
  - Coveo
  - Search
  - Organizations
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    COVEO_SEARCH_TOKEN: COVEO_SEARCH_TOKEN
capability:
  consumes:
  - type: http
    namespace: search-organizations
    baseUri: https://platform.cloud.coveo.com
    description: Coveo Search API — Organizations business capability. Self-contained, no shared references.
    authentication:
      type: bearer
      token: '{{env.COVEO_SEARCH_TOKEN}}'
    resources:
    - name: rest-organizations-organizationId-authentication
      path: /rest/organizations/{organizationId}/authentication
      operations:
      - name: listauthentications
        method: GET
        description: Lists All Authentication Providers for an Organization
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: rest-organizations-organizationId-authentication-saml
      path: /rest/organizations/{organizationId}/authentication/saml
      operations:
      - name: listsamlauthentications
        method: GET
        description: Lists the SAML Authentications for an Organization
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createsamlauthentication
        method: POST
        description: Creates a New SAML Authentication in an Organization
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: rest-organizations-organizationId-authentication-saml-id
      path: /rest/organizations/{organizationId}/authentication/saml/{id}
      operations:
      - name: loadsamlauthentication
        method: GET
        description: Loads a Single SAML Authentication from an Organization
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: string
          description: The SAML authentication ID
          required: true
      - name: updatesamlauthentication
        method: PUT
        description: Updates a SAML Authentication in an Organization
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: string
          description: The SAML authentication ID
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: deletesamlauthentication
        method: DELETE
        description: Deletes a SAML Authentication from an Organization
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: string
          description: The SAML authentication ID
          required: true
    - name: rest-organizations-organizationId-authentication-sharepoint
      path: /rest/organizations/{organizationId}/authentication/sharepoint
      operations:
      - name: listsharepointclaimsauthprovider
        method: GET
        description: List SharePoint Claims Authentication Providers
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createsharepointauthenticationprovider
        method: POST
        description: Create SharePoint Claims Authentication Provider
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: rest-organizations-organizationId-authentication-sharepoint-id
      path: /rest/organizations/{organizationId}/authentication/sharepoint/{id}
      operations:
      - name: getsharepointauthenticationprovider
        method: GET
        description: Get SharePoint Claims Authentication Provider
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: string
          description: The unique identifier of the target SharePoint claims authentication provider.
          required: true
      - name: updatesharepointauthenticationprovider
        method: PUT
        description: Update SharePoint Claims Authentication Provider
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: string
          description: The unique identifier of the target SharePoint claims authentication provider.
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: deletesharepointauthenticationprovider
        method: DELETE
        description: Delete SharePoint Claims Authentication Provider
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: string
          description: The unique identifier of the target SharePoint claims authentication provider.
          required: true
    - name: rest-organizations-organizationId-authentication-trusteduris
      path: /rest/organizations/{organizationId}/authentication/trusteduris
      operations:
      - name: gettrusteduris
        method: GET
        description: List Trusted Search Page URIs
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: addtrusteduri
        method: POST
        description: Add Trusted Search Page URI
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: rest-organizations-organizationId-authentication-trusteduris-recentuntrusted
      path: /rest/organizations/{organizationId}/authentication/trusteduris/recentuntrusted
      operations:
      - name: getrecentuntrusteduris
        method: GET
        description: List Recently Seen Search Page URIs That Were Not Trusted.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: rest-organizations-organizationId-authentication-trusteduris-id
      path: /rest/organizations/{organizationId}/authentication/trusteduris/{id}
      operations:
      - name: deletetrusteduri
        method: DELETE
        description: Delete Trusted Search Page URI
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: string
          description: The unique identifier of the trusted search page URI entry to delete.
          required: true
  exposes:
  - type: rest
    namespace: search-organizations-rest
    port: 8080
    description: REST adapter for Coveo Search API — Organizations. One Spectral-compliant resource per consumed operation,
      prefixed with /v1.
    resources:
    - path: /v1/organizations/{organizationid}/authentication
      name: rest-organizations-organizationid-authentication
      description: REST surface for rest-organizations-organizationId-authentication.
      operations:
      - method: GET
        name: listauthentications
        description: Lists All Authentication Providers for an Organization
        call: search-organizations.listauthentications
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/organizations/{organizationid}/authentication/saml
      name: rest-organizations-organizationid-authentication-saml
      description: REST surface for rest-organizations-organizationId-authentication-saml.
      operations:
      - method: GET
        name: listsamlauthentications
        description: Lists the SAML Authentications for an Organization
        call: search-organizations.listsamlauthentications
        outputParameters:
        - type: object
          mapping: $.
      - method: POST
        name: createsamlauthentication
        description: Creates a New SAML Authentication in an Organization
        call: search-organizations.createsamlauthentication
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/organizations/{organizationid}/authentication/saml/{id}
      name: rest-organizations-organizationid-authentication-saml-id
      description: REST surface for rest-organizations-organizationId-authentication-saml-id.
      operations:
      - method: GET
        name: loadsamlauthentication
        description: Loads a Single SAML Authentication from an Organization
        call: search-organizations.loadsamlauthentication
        with:
          id: rest.id
        outputParameters:
        - type: object
          mapping: $.
      - method: PUT
        name: updatesamlauthentication
        description: Updates a SAML Authentication in an Organization
        call: search-organizations.updatesamlauthentication
        with:
          id: rest.id
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
      - method: DELETE
        name: deletesamlauthentication
        description: Deletes a SAML Authentication from an Organization
        call: search-organizations.deletesamlauthentication
        with:
          id: rest.id
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/organizations/{organizationid}/authentication/sharepoint
      name: rest-organizations-organizationid-authentication-sharepoint
      description: REST surface for rest-organizations-organizationId-authentication-sharepoint.
      operations:
      - method: GET
        name: listsharepointclaimsauthprovider
        description: List SharePoint Claims Authentication Providers
        call: search-organizations.listsharepointclaimsauthprovider
        outputParameters:
        - type: object
          mapping: $.
      - method: POST
        name: createsharepointauthenticationprovider
        description: Create SharePoint Claims Authentication Provider
        call: search-organizations.createsharepointauthenticationprovider
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/organizations/{organizationid}/authentication/sharepoint/{id}
      name: rest-organizations-organizationid-authentication-sharepoint-id
      description: REST surface for rest-organizations-organizationId-authentication-sharepoint-id.
      operations:
      - method: GET
        name: getsharepointauthenticationprovider
        description: Get SharePoint Claims Authentication Provider
        call: search-organizations.getsharepointauthenticationprovider
        with:
          id: rest.id
        outputParameters:
        - type: object
          mapping: $.
      - method: PUT
        name: updatesharepointauthenticationprovider
        description: Update SharePoint Claims Authentication Provider
        call: search-organizations.updatesharepointauthenticationprovider
        with:
          id: rest.id
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
      - method: DELETE
        name: deletesharepointauthenticationprovider
        description: Delete SharePoint Claims Authentication Provider
        call: search-organizations.deletesharepointauthenticationprovider
        with:
          id: rest.id
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/organizations/{organizationid}/authentication/trusteduris
      name: rest-organizations-organizationid-authentication-trusteduris
      description: REST surface for rest-organizations-organizationId-authentication-trusteduris.
      operations:
      - method: GET
        name: gettrusteduris
        description: List Trusted Search Page URIs
        call: search-organizations.gettrusteduris
        outputParameters:
        - type: object
          mapping: $.
      - method: POST
        name: addtrusteduri
        description: Add Trusted Search Page URI
        call: search-organizations.addtrusteduri
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/organizations/{organizationid}/authentication/trusteduris/recentuntrusted
      name: rest-organizations-organizationid-authentication-trusteduris-recentuntrusted
      description: REST surface for rest-organizations-organizationId-authentication-trusteduris-recentuntrusted.
      operations:
      - method: GET
        name: getrecentuntrusteduris
        description: List Recently Seen Search Page URIs That Were Not Trusted.
        call: search-organizations.getrecentuntrusteduris
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/organizations/{organizationid}/authentication/trusteduris/{id}
      name: rest-organizations-organizationid-authentication-trusteduris-id
      description: REST surface for rest-organizations-organizationId-authentication-trusteduris-id.
      operations:
      - method: DELETE
        name: deletetrusteduri
        description: Delete Trusted Search Page URI
        call: search-organizations.deletetrusteduri
        with:
          id: rest.id
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: search-organizations-mcp
    port: 9090
    transport: http
    description: MCP adapter for Coveo Search API — Organizations. One tool per consumed operation, routed inline through
      this capability's consumes block.
    tools:
    - name: lists-all-authentication-providers-organization
      description: Lists All Authentication Providers for an Organization
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: search-organizations.listauthentications
      outputParameters:
      - type: object
        mapping: $.
    - name: lists-saml-authentications-organization
      description: Lists the SAML Authentications for an Organization
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: search-organizations.listsamlauthentications
      outputParameters:
      - type: object
        mapping: $.
    - name: creates-new-saml-authentication-organization
      description: Creates a New SAML Authentication in an Organization
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: search-organizations.createsamlauthentication
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: loads-single-saml-authentication-organization
      description: Loads a Single SAML Authentication from an Organization
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: search-organizations.loadsamlauthentication
      with:
        id: tools.id
      outputParameters:
      - type: object
        mapping: $.
    - name: updates-saml-authentication-organization
      description: Updates a SAML Authentication in an Organization
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: search-organizations.updatesamlauthentication
      with:
        id: tools.id
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: deletes-saml-authentication-organization
      description: Deletes a SAML Authentication from an Organization
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: search-organizations.deletesamlauthentication
      with:
        id: tools.id
      outputParameters:
      - type: object
        mapping: $.
    - name: list-sharepoint-claims-authentication-providers
      description: List SharePoint Claims Authentication Providers
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: search-organizations.listsharepointclaimsauthprovider
      outputParameters:
      - type: object
        mapping: $.
    - name: create-sharepoint-claims-authentication-provider
      description: Create SharePoint Claims Authentication Provider
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: search-organizations.createsharepointauthenticationprovider
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: get-sharepoint-claims-authentication-provider
      description: Get SharePoint Claims Authentication Provider
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: search-organizations.getsharepointauthenticationprovider
      with:
        id: tools.id
      outputParameters:
      - type: object
        mapping: $.
    - name: update-sharepoint-claims-authentication-provider
      description: Update SharePoint Claims Authentication Provider
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: search-organizations.updatesharepointauthenticationprovider
      with:
        id: tools.id
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: delete-sharepoint-claims-authentication-provider
      description: Delete SharePoint Claims Authentication Provider
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: search-organizations.deletesharepointauthenticationprovider
      with:
        id: tools.id
      outputParameters:
      - type: object
        mapping: $.
    - name: list-trusted-search-page-uris
      description: List Trusted Search Page URIs
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: search-organizations.gettrusteduris
      outputParameters:
      - type: object
        mapping: $.
    - name: add-trusted-search-page-uri
      description: Add Trusted Search Page URI
      hints:
        readOnly: true
        destructive: false
        idempotent: false
      call: search-organizations.addtrusteduri
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: list-recently-seen-search-page
      description: List Recently Seen Search Page URIs That Were Not Trusted.
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: search-organizations.getrecentuntrusteduris
      outputParameters:
      - type: object
        mapping: $.
    - name: delete-trusted-search-page-uri
      description: Delete Trusted Search Page URI
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: search-organizations.deletetrusteduri
      with:
        id: tools.id
      outputParameters:
      - type: object
        mapping: $.