naftiko: 1.0.0-alpha2
info:
  label: Decentro KYC & Onboarding API — KYC
  description: 'Decentro KYC & Onboarding API — KYC. 3 operations. Lead operation: Initialize DigiLocker session. Self-contained
    Naftiko capability covering one Decentro business surface.'
  tags:
  - Decentro
  - KYC
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    DECENTRO_API_KEY: DECENTRO_API_KEY
capability:
  consumes:
  - type: http
    namespace: kyc-kyc
    baseUri: https://in.decentro.tech
    description: Decentro KYC & Onboarding API — KYC business capability. Self-contained, no shared references.
    resources:
    - name: v2-kyc-digilocker-initialize
      path: /v2/kyc/digilocker/initialize
      operations:
      - name: initializedigilocker
        method: POST
        description: Initialize DigiLocker session
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: v2-kyc-identities-aadhaar-otp-generate
      path: /v2/kyc/identities/aadhaar/otp/generate
      operations:
      - name: generateaadhaarotp
        method: POST
        description: Generate Aadhaar OTP
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: v2-kyc-identities-aadhaar-otp-validate
      path: /v2/kyc/identities/aadhaar/otp/validate
      operations:
      - name: validateaadhaarotp
        method: POST
        description: Validate Aadhaar OTP
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    authentication:
      type: apikey
      key: client_secret
      value: '{{env.DECENTRO_API_KEY}}'
      placement: header
  exposes:
  - type: rest
    namespace: kyc-kyc-rest
    port: 8080
    description: REST adapter for Decentro KYC & Onboarding API — KYC. One Spectral-compliant resource per consumed operation,
      prefixed with /v1.
    resources:
    - path: /v1/v2/kyc/digilocker/initialize
      name: v2-kyc-digilocker-initialize
      description: REST surface for v2-kyc-digilocker-initialize.
      operations:
      - method: POST
        name: initializedigilocker
        description: Initialize DigiLocker session
        call: kyc-kyc.initializedigilocker
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/v2/kyc/identities/aadhaar/otp/generate
      name: v2-kyc-identities-aadhaar-otp-generate
      description: REST surface for v2-kyc-identities-aadhaar-otp-generate.
      operations:
      - method: POST
        name: generateaadhaarotp
        description: Generate Aadhaar OTP
        call: kyc-kyc.generateaadhaarotp
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/v2/kyc/identities/aadhaar/otp/validate
      name: v2-kyc-identities-aadhaar-otp-validate
      description: REST surface for v2-kyc-identities-aadhaar-otp-validate.
      operations:
      - method: POST
        name: validateaadhaarotp
        description: Validate Aadhaar OTP
        call: kyc-kyc.validateaadhaarotp
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: kyc-kyc-mcp
    port: 9090
    transport: http
    description: MCP adapter for Decentro KYC & Onboarding API — KYC. One tool per consumed operation, routed inline through
      this capability's consumes block.
    tools:
    - name: initialize-digilocker-session
      description: Initialize DigiLocker session
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: kyc-kyc.initializedigilocker
      outputParameters:
      - type: object
        mapping: $.
    - name: generate-aadhaar-otp
      description: Generate Aadhaar OTP
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: kyc-kyc.generateaadhaarotp
      outputParameters:
      - type: object
        mapping: $.
    - name: validate-aadhaar-otp
      description: Validate Aadhaar OTP
      hints:
        readOnly: true
        destructive: false
        idempotent: false
      call: kyc-kyc.validateaadhaarotp
      outputParameters:
      - type: object
        mapping: $.