naftiko: 1.0.0-alpha2 info: label: Envoy Admin API — Certificates description: 'Envoy Admin API — Certificates. 1 operations. Lead operation: Envoy Get TLS certificate information. Self-contained Naftiko capability covering one Envoy business surface.' tags: - Envoy - Certificates created: '2026-05-19' modified: '2026-05-19' binds: - namespace: env keys: ENVOY_API_KEY: ENVOY_API_KEY capability: consumes: - type: http namespace: admin-certificates baseUri: http://localhost:9901 description: Envoy Admin API — Certificates business capability. Self-contained, no shared references. resources: - name: certs path: /certs operations: - name: getcertificates method: GET description: Envoy Get TLS certificate information outputRawFormat: json outputParameters: - name: result type: object value: $. exposes: - type: rest namespace: admin-certificates-rest port: 8080 description: REST adapter for Envoy Admin API — Certificates. One Spectral-compliant resource per consumed operation, prefixed with /v1. resources: - path: /v1/certs name: certs description: REST surface for certs. operations: - method: GET name: getcertificates description: Envoy Get TLS certificate information call: admin-certificates.getcertificates outputParameters: - type: object mapping: $. - type: mcp namespace: admin-certificates-mcp port: 9090 transport: http description: MCP adapter for Envoy Admin API — Certificates. One tool per consumed operation, routed inline through this capability's consumes block. tools: - name: envoy-get-tls-certificate-information description: Envoy Get TLS certificate information hints: readOnly: true destructive: false idempotent: true call: admin-certificates.getcertificates outputParameters: - type: object mapping: $.