overlay: 1.0.0 info: title: API Evangelist agent overlay for Workspace version: 1.0.0 extends: ../openapi/_original/eu-sovereign-cloud-api-foundation-workspace-v1-openapi.yml x-generated: '2026-10-09' x-method: generated x-source: openapi/eu-sovereign-cloud-api-foundation-workspace-v1-openapi.yml x-rationale: Adds agent-facing annotations derived from HTTP method semantics (GET read-only; PUT createOrUpdate and DELETE idempotent per the spec's create-or-update design; POST start/stop/restart non-idempotent actions), the candidate MCP tool name for each operation (mcp/eu-sovereign-cloud-api-mcp.yml), externalDocs pointing at spec.secapi.cloud, and the base-URL caveat recorded in apis.yml. The original OpenAPI is not modified. actions: - target: $.info update: x-api-evangelist: provider: eu-sovereign-cloud-api family: foundation-workspace-v1 base-url-note: No shared production base URL. Per spec.secapi.cloud/docs/content/Examples/usage each implementing cloud provider (e.g. IONOS, Aruba) serves SECA on its own host, dns-based or path-based. The servers[] host demo.secapi.cloud did not resolve in DNS on 2026-10-09. - target: $ update: externalDocs: description: SECA specification documentation url: https://spec.secapi.cloud/ - target: $.paths['/v1/tenants/{tenant}/workspaces'].get update: x-agent-hints: readOnly: true destructive: false idempotent: true mcp-tool: workspace_list_workspaces - target: $.paths['/v1/tenants/{tenant}/workspaces/{name}'].get update: x-agent-hints: readOnly: true destructive: false idempotent: true mcp-tool: workspace_get_workspace - target: $.paths['/v1/tenants/{tenant}/workspaces/{name}'].put update: x-agent-hints: readOnly: false destructive: false idempotent: true mcp-tool: workspace_create_or_update_workspace - target: $.paths['/v1/tenants/{tenant}/workspaces/{name}'].delete update: x-agent-hints: readOnly: false destructive: true idempotent: true mcp-tool: workspace_delete_workspace