naftiko: 1.0.0-alpha2 info: label: Fastly Next-Gen WAF API — WAF Active Rules description: 'Fastly Next-Gen WAF API — WAF Active Rules. 2 operations. Lead operation: List active WAF rules. Self-contained Naftiko capability covering one Fastly business surface.' tags: - Fastly - WAF Active Rules created: '2026-05-19' modified: '2026-05-19' binds: - namespace: env keys: FASTLY_API_KEY: FASTLY_API_KEY capability: consumes: - type: http namespace: waf-waf-active-rules baseUri: https://api.fastly.com description: Fastly Next-Gen WAF API — WAF Active Rules business capability. Self-contained, no shared references. resources: - name: waf-firewalls-firewall_id-versions-firewall_version_number-active-rules path: /waf/firewalls/{firewall_id}/versions/{firewall_version_number}/active-rules operations: - name: listwafactiverules method: GET description: List active WAF rules outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: page[number] in: query type: integer description: The page number to retrieve. - name: page[size] in: query type: integer description: The number of items per page. - name: createwafactiverule method: POST description: Add an active WAF rule outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: true authentication: type: apikey key: Fastly-Key value: '{{env.FASTLY_API_KEY}}' placement: header exposes: - type: rest namespace: waf-waf-active-rules-rest port: 8080 description: REST adapter for Fastly Next-Gen WAF API — WAF Active Rules. One Spectral-compliant resource per consumed operation, prefixed with /v1. resources: - path: /v1/waf/firewalls/{firewall-id}/versions/{firewall-version-number}/active-rules name: waf-firewalls-firewall-id-versions-firewall-version-number-active-rules description: REST surface for waf-firewalls-firewall_id-versions-firewall_version_number-active-rules. operations: - method: GET name: listwafactiverules description: List active WAF rules call: waf-waf-active-rules.listwafactiverules with: page[number]: rest.page[number] page[size]: rest.page[size] outputParameters: - type: object mapping: $. - method: POST name: createwafactiverule description: Add an active WAF rule call: waf-waf-active-rules.createwafactiverule with: body: rest.body outputParameters: - type: object mapping: $. - type: mcp namespace: waf-waf-active-rules-mcp port: 9090 transport: http description: MCP adapter for Fastly Next-Gen WAF API — WAF Active Rules. One tool per consumed operation, routed inline through this capability's consumes block. tools: - name: list-active-waf-rules description: List active WAF rules hints: readOnly: true destructive: false idempotent: true call: waf-waf-active-rules.listwafactiverules with: page[number]: tools.page[number] page[size]: tools.page[size] outputParameters: - type: object mapping: $. - name: add-active-waf-rule description: Add an active WAF rule hints: readOnly: false destructive: false idempotent: false call: waf-waf-active-rules.createwafactiverule with: body: tools.body outputParameters: - type: object mapping: $.