naftiko: 1.0.0-alpha2
info:
  label: Didomi Platform API — Keys, Secrets & Quotas
  description: Didomi Platform API — Keys, Secrets & Quotas. 14 operations. Self-contained Naftiko capability over the Didomi Platform REST API.
  tags:
  - Didomi
  - Consent Management
  - Privacy
  created: '2026-05-25'
  modified: '2026-05-25'
binds:
- namespace: env
  keys:
    DIDOMI_BEARER_TOKEN: DIDOMI_BEARER_TOKEN
capability:
  consumes:
  - type: http
    namespace: keys-secrets
    baseUri: https://api.didomi.io/v1
    description: Didomi Platform API — Keys, Secrets & Quotas business capability against the Didomi Platform REST API (https://api.didomi.io/v1).
    resources:
    - name: keys
      path: /keys
      operations:
      - name: get-keys
        method: GET
        description: Retrieve a list of API keys
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: query
          in: query
          type: object
          required: false
          description: Optional query filters / pagination.
      - name: post-keys
        method: POST
        description: Create a new API key
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          required: true
          description: Request body (JSON).
    - name: keys-id
      path: /keys/{id}
      operations:
      - name: get-keys-id
        method: GET
        description: Retrieve an API key
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: string
          required: true
      - name: put-keys-id
        method: PUT
        description: Update an API key
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: string
          required: true
        - name: body
          in: body
          type: object
          required: true
          description: Request body (JSON).
      - name: patch-keys-id
        method: PATCH
        description: Patch an API key
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: string
          required: true
        - name: body
          in: body
          type: object
          required: true
          description: Request body (JSON).
      - name: delete-keys-id
        method: DELETE
        description: Delete an API key
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: string
          required: true
    - name: quotas
      path: /quotas
      operations:
      - name: get-quotas
        method: GET
        description: Retrieve a list of quotas
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: query
          in: query
          type: object
          required: false
          description: Optional query filters / pagination.
    - name: quotas-id
      path: /quotas/{id}
      operations:
      - name: get-quotas-id
        method: GET
        description: Retrieve a quota
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: string
          required: true
    - name: secrets
      path: /secrets
      operations:
      - name: get-secrets
        method: GET
        description: Retrieve a list of secrets
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: query
          in: query
          type: object
          required: false
          description: Optional query filters / pagination.
      - name: post-secrets
        method: POST
        description: Create a secret
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          required: true
          description: Request body (JSON).
    - name: secrets-id
      path: /secrets/{id}
      operations:
      - name: get-secrets-id
        method: GET
        description: Retrieve a secret
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: string
          required: true
      - name: put-secrets-id
        method: PUT
        description: Update a secret
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: string
          required: true
        - name: body
          in: body
          type: object
          required: true
          description: Request body (JSON).
      - name: patch-secrets-id
        method: PATCH
        description: Patch a secret
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: string
          required: true
        - name: body
          in: body
          type: object
          required: true
          description: Request body (JSON).
      - name: delete-secrets-id
        method: DELETE
        description: Delete a secret
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: string
          required: true
    authentication:
      type: bearer
      value: '{{env.DIDOMI_BEARER_TOKEN}}'
      placement: header
      note: Obtain by POSTing api-key + secret to /v1/sessions and reusing access_token for up to one hour.
  exposes:
  - type: rest
    namespace: keys-secrets-rest
    port: 8080
    description: REST adapter for Didomi Platform API — Keys, Secrets & Quotas. One resource per consumed operation.
    resources:
    - path: /v1/keys
      name: keys
      description: REST surface for keys.
      operations:
      - method: GET
        name: get-keys
        description: Retrieve a list of API keys
        call: keys-secrets.get-keys
      - method: POST
        name: post-keys
        description: Create a new API key
        call: keys-secrets.post-keys
    - path: /v1/keys/{id}
      name: keys-id
      description: REST surface for keys-id.
      operations:
      - method: GET
        name: get-keys-id
        description: Retrieve an API key
        call: keys-secrets.get-keys-id
      - method: PUT
        name: put-keys-id
        description: Update an API key
        call: keys-secrets.put-keys-id
      - method: PATCH
        name: patch-keys-id
        description: Patch an API key
        call: keys-secrets.patch-keys-id
      - method: DELETE
        name: delete-keys-id
        description: Delete an API key
        call: keys-secrets.delete-keys-id
    - path: /v1/quotas
      name: quotas
      description: REST surface for quotas.
      operations:
      - method: GET
        name: get-quotas
        description: Retrieve a list of quotas
        call: keys-secrets.get-quotas
    - path: /v1/quotas/{id}
      name: quotas-id
      description: REST surface for quotas-id.
      operations:
      - method: GET
        name: get-quotas-id
        description: Retrieve a quota
        call: keys-secrets.get-quotas-id
    - path: /v1/secrets
      name: secrets
      description: REST surface for secrets.
      operations:
      - method: GET
        name: get-secrets
        description: Retrieve a list of secrets
        call: keys-secrets.get-secrets
      - method: POST
        name: post-secrets
        description: Create a secret
        call: keys-secrets.post-secrets
    - path: /v1/secrets/{id}
      name: secrets-id
      description: REST surface for secrets-id.
      operations:
      - method: GET
        name: get-secrets-id
        description: Retrieve a secret
        call: keys-secrets.get-secrets-id
      - method: PUT
        name: put-secrets-id
        description: Update a secret
        call: keys-secrets.put-secrets-id
      - method: PATCH
        name: patch-secrets-id
        description: Patch a secret
        call: keys-secrets.patch-secrets-id
      - method: DELETE
        name: delete-secrets-id
        description: Delete a secret
        call: keys-secrets.delete-secrets-id
  - type: mcp
    namespace: keys-secrets-mcp
    port: 9090
    transport: http
    description: MCP adapter for Didomi Platform API — Keys, Secrets & Quotas. One tool per consumed operation.
    tools:
    - name: didomi-get-keys
      description: Retrieve a list of API keys
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: keys-secrets.get-keys
    - name: didomi-post-keys
      description: Create a new API key
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: keys-secrets.post-keys
    - name: didomi-get-keys-id
      description: Retrieve an API key
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: keys-secrets.get-keys-id
    - name: didomi-put-keys-id
      description: Update an API key
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: keys-secrets.put-keys-id
    - name: didomi-patch-keys-id
      description: Patch an API key
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: keys-secrets.patch-keys-id
    - name: didomi-delete-keys-id
      description: Delete an API key
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: keys-secrets.delete-keys-id
    - name: didomi-get-quotas
      description: Retrieve a list of quotas
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: keys-secrets.get-quotas
    - name: didomi-get-quotas-id
      description: Retrieve a quota
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: keys-secrets.get-quotas-id
    - name: didomi-get-secrets
      description: Retrieve a list of secrets
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: keys-secrets.get-secrets
    - name: didomi-post-secrets
      description: Create a secret
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: keys-secrets.post-secrets
    - name: didomi-get-secrets-id
      description: Retrieve a secret
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: keys-secrets.get-secrets-id
    - name: didomi-put-secrets-id
      description: Update a secret
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: keys-secrets.put-secrets-id
    - name: didomi-patch-secrets-id
      description: Patch a secret
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: keys-secrets.patch-secrets-id
    - name: didomi-delete-secrets-id
      description: Delete a secret
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: keys-secrets.delete-secrets-id