naftiko: 1.0.0-alpha2
info:
  label: Datadog API — Patch
  description: 'Datadog API — Patch. 5 operations. Lead operation: Datadog Patch Aws Scan Options. Self-contained Naftiko
    capability covering one Datadog business surface.'
  tags:
  - Datadog
  - Patch
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    DATADOG_API_KEY: DATADOG_API_KEY
capability:
  consumes:
  - type: http
    namespace: datadog-patch
    baseUri: https://{subdomain}.{site}
    description: Datadog API — Patch business capability. Self-contained, no shared references.
    resources:
    - name: api-v2-agentless_scanning-accounts-aws-account_id
      path: /api/v2/agentless_scanning/accounts/aws/{account_id}
      operations:
      - name: updateawsscanoptions
        method: PATCH
        description: Datadog Patch Aws Scan Options
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v2-scim-Groups-group_id
      path: /api/v2/scim/Groups/{group_id}
      operations:
      - name: patchscimgroup
        method: PATCH
        description: Datadog Patch Group
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: group_id
          in: path
          type: string
          description: None
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v2-scim-Users-user_uuid
      path: /api/v2/scim/Users/{user_uuid}
      operations:
      - name: patchscimuser
        method: PATCH
        description: Datadog Patch User
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: user_uuid
          in: path
          type: string
          description: None
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v2-security-signals-notification_rules-id
      path: /api/v2/security/signals/notification_rules/{id}
      operations:
      - name: patchsignalnotificationrule
        method: PATCH
        description: Datadog Patch a Signal-based Notification Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: string
          description: ID of the notification rule.
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v2-security-vulnerabilities-notification_rules-id
      path: /api/v2/security/vulnerabilities/notification_rules/{id}
      operations:
      - name: patchvulnerabilitynotificationrule
        method: PATCH
        description: Datadog Patch a Vulnerability-based Notification Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: string
          description: ID of the notification rule.
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    authentication:
      type: bearer
      token: '{{env.DATADOG_API_KEY}}'
  exposes:
  - type: rest
    namespace: datadog-patch-rest
    port: 8080
    description: REST adapter for Datadog API — Patch. One Spectral-compliant resource per consumed operation, prefixed with
      /v1.
    resources:
    - path: /v1/api/v2/agentless-scanning/accounts/aws/{account-id}
      name: api-v2-agentless-scanning-accounts-aws-account-id
      description: REST surface for api-v2-agentless_scanning-accounts-aws-account_id.
      operations:
      - method: PATCH
        name: updateawsscanoptions
        description: Datadog Patch Aws Scan Options
        call: datadog-patch.updateawsscanoptions
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v2/scim/groups/{group-id}
      name: api-v2-scim-groups-group-id
      description: REST surface for api-v2-scim-Groups-group_id.
      operations:
      - method: PATCH
        name: patchscimgroup
        description: Datadog Patch Group
        call: datadog-patch.patchscimgroup
        with:
          group_id: rest.group_id
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v2/scim/users/{user-uuid}
      name: api-v2-scim-users-user-uuid
      description: REST surface for api-v2-scim-Users-user_uuid.
      operations:
      - method: PATCH
        name: patchscimuser
        description: Datadog Patch User
        call: datadog-patch.patchscimuser
        with:
          user_uuid: rest.user_uuid
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v2/security/signals/notification-rules/{id}
      name: api-v2-security-signals-notification-rules-id
      description: REST surface for api-v2-security-signals-notification_rules-id.
      operations:
      - method: PATCH
        name: patchsignalnotificationrule
        description: Datadog Patch a Signal-based Notification Rule
        call: datadog-patch.patchsignalnotificationrule
        with:
          id: rest.id
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v2/security/vulnerabilities/notification-rules/{id}
      name: api-v2-security-vulnerabilities-notification-rules-id
      description: REST surface for api-v2-security-vulnerabilities-notification_rules-id.
      operations:
      - method: PATCH
        name: patchvulnerabilitynotificationrule
        description: Datadog Patch a Vulnerability-based Notification Rule
        call: datadog-patch.patchvulnerabilitynotificationrule
        with:
          id: rest.id
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: datadog-patch-mcp
    port: 9090
    transport: http
    description: MCP adapter for Datadog API — Patch. One tool per consumed operation, routed inline through this capability's
      consumes block.
    tools:
    - name: datadog-patch-aws-scan-options
      description: Datadog Patch Aws Scan Options
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: datadog-patch.updateawsscanoptions
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: datadog-patch-group
      description: Datadog Patch Group
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: datadog-patch.patchscimgroup
      with:
        group_id: tools.group_id
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: datadog-patch-user
      description: Datadog Patch User
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: datadog-patch.patchscimuser
      with:
        user_uuid: tools.user_uuid
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: datadog-patch-signal-based-notification
      description: Datadog Patch a Signal-based Notification Rule
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: datadog-patch.patchsignalnotificationrule
      with:
        id: tools.id
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: datadog-patch-vulnerability-based-notification
      description: Datadog Patch a Vulnerability-based Notification Rule
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: datadog-patch.patchvulnerabilitynotificationrule
      with:
        id: tools.id
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.