naftiko: 1.0.0-alpha2
info:
  label: Envestnet Verification APIs — User
  description: 'Envestnet Verification APIs — User. 7 operations. Lead operation: Envestnet Get User Details. Self-contained
    Naftiko capability covering one Envestnet business surface.'
  tags:
  - Envestnet
  - User
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    ENVESTNET_API_KEY: ENVESTNET_API_KEY
capability:
  consumes:
  - type: http
    namespace: verification-user
    baseUri: ''
    description: Envestnet Verification APIs — User business capability. Self-contained, no shared references.
    resources:
    - name: user
      path: /user
      operations:
      - name: getuser
        method: GET
        description: Envestnet Get User Details
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: updateuser
        method: PUT
        description: Envestnet Update User Details
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: user-accessTokens
      path: /user/accessTokens
      operations:
      - name: getaccesstokens
        method: GET
        description: Envestnet Get Access Tokens
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appIds
          in: query
          type: string
          description: appIds
          required: true
    - name: user-logout
      path: /user/logout
      operations:
      - name: userlogout
        method: POST
        description: Envestnet User Logout
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: user-register
      path: /user/register
      operations:
      - name: registeruser
        method: POST
        description: Envestnet Register User
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: user-samlLogin
      path: /user/samlLogin
      operations:
      - name: samllogin
        method: POST
        description: Envestnet Saml Login
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: issuer
          in: query
          type: string
          description: issuer
          required: true
        - name: samlResponse
          in: query
          type: string
          description: samlResponse
          required: true
        - name: source
          in: query
          type: string
          description: source
    - name: user-unregister
      path: /user/unregister
      operations:
      - name: unregister
        method: DELETE
        description: Envestnet Delete User
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
  exposes:
  - type: rest
    namespace: verification-user-rest
    port: 8080
    description: REST adapter for Envestnet Verification APIs — User. One Spectral-compliant resource per consumed operation,
      prefixed with /v1.
    resources:
    - path: /v1/user
      name: user
      description: REST surface for user.
      operations:
      - method: GET
        name: getuser
        description: Envestnet Get User Details
        call: verification-user.getuser
        outputParameters:
        - type: object
          mapping: $.
      - method: PUT
        name: updateuser
        description: Envestnet Update User Details
        call: verification-user.updateuser
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/user/accesstokens
      name: user-accesstokens
      description: REST surface for user-accessTokens.
      operations:
      - method: GET
        name: getaccesstokens
        description: Envestnet Get Access Tokens
        call: verification-user.getaccesstokens
        with:
          appIds: rest.appIds
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/user/logout
      name: user-logout
      description: REST surface for user-logout.
      operations:
      - method: POST
        name: userlogout
        description: Envestnet User Logout
        call: verification-user.userlogout
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/user/register
      name: user-register
      description: REST surface for user-register.
      operations:
      - method: POST
        name: registeruser
        description: Envestnet Register User
        call: verification-user.registeruser
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/user/samllogin
      name: user-samllogin
      description: REST surface for user-samlLogin.
      operations:
      - method: POST
        name: samllogin
        description: Envestnet Saml Login
        call: verification-user.samllogin
        with:
          issuer: rest.issuer
          samlResponse: rest.samlResponse
          source: rest.source
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/user/unregister
      name: user-unregister
      description: REST surface for user-unregister.
      operations:
      - method: DELETE
        name: unregister
        description: Envestnet Delete User
        call: verification-user.unregister
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: verification-user-mcp
    port: 9090
    transport: http
    description: MCP adapter for Envestnet Verification APIs — User. One tool per consumed operation, routed inline through
      this capability's consumes block.
    tools:
    - name: envestnet-get-user-details
      description: Envestnet Get User Details
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: verification-user.getuser
      outputParameters:
      - type: object
        mapping: $.
    - name: envestnet-update-user-details
      description: Envestnet Update User Details
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: verification-user.updateuser
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: envestnet-get-access-tokens
      description: Envestnet Get Access Tokens
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: verification-user.getaccesstokens
      with:
        appIds: tools.appIds
      outputParameters:
      - type: object
        mapping: $.
    - name: envestnet-user-logout
      description: Envestnet User Logout
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: verification-user.userlogout
      outputParameters:
      - type: object
        mapping: $.
    - name: envestnet-register-user
      description: Envestnet Register User
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: verification-user.registeruser
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: envestnet-saml-login
      description: Envestnet Saml Login
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: verification-user.samllogin
      with:
        issuer: tools.issuer
        samlResponse: tools.samlResponse
        source: tools.source
      outputParameters:
      - type: object
        mapping: $.
    - name: envestnet-delete-user
      description: Envestnet Delete User
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: verification-user.unregister
      outputParameters:
      - type: object
        mapping: $.