naftiko: 1.0.0-alpha2
info:
  label: Frontegg Entitlements Agent API
  description: 'Frontegg Entitlements Agent API capability. 3 operations. Lead operation: Is entitled to feature. Self-contained Naftiko capability for the Frontegg Frontegg Entitlements Agent business
    surface.'
  tags:
  - Frontegg
  - Agent
  created: '2026-05-22'
  modified: '2026-05-22'
binds:
- namespace: env
  keys:
    FRONTEGG_CLIENT_ID: FRONTEGG_CLIENT_ID
    FRONTEGG_API_KEY: FRONTEGG_API_KEY
    FRONTEGG_BEARER_TOKEN: FRONTEGG_BEARER_TOKEN
capability:
  consumes:
  - type: http
    namespace: frontegg-entitlements-agent
    baseUri: http://{host}:{port}
    description: Frontegg Entitlements Agent API. Bearer JWT (environment or user token) authentication.
    resources:
    - name: v1-data-e10s-features-is-entitled-to-input-feature
      path: /v1/data/e10s/features/is_entitled_to_input_feature
      operations:
      - name: OpenApiPDPController_isEntitledToFeature
        method: POST
        description: Is entitled to feature
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: v1-data-e10s-permissions-is-entitled-to-input-permission
      path: /v1/data/e10s/permissions/is_entitled_to_input_permission
      operations:
      - name: OpenApiPDPController_isEntitledToPermission
        method: POST
        description: Is entitled to permission
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: v1-data-e10s-routes-is-entitled-to-input-route
      path: /v1/data/e10s/routes/is_entitled_to_input_route
      operations:
      - name: OpenApiPDPController_isEntitledToRoute
        method: POST
        description: Is entitled to route
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
  exposes:
  - type: rest
    namespace: frontegg-entitlements-agent-rest
    port: 8080
    description: REST adapter for Frontegg Entitlements Agent. One resource per consumed operation, prefixed with /v1.
    resources:
    - path: /v1/v1/data/e10s/features/is_entitled_to_input_feature
      name: v1-data-e10s-features-is-entitled-to-input-feature
      description: REST surface for v1-data-e10s-features-is-entitled-to-input-feature.
      operations:
      - method: POST
        name: OpenApiPDPController_isEntitledToFeature
        description: Is entitled to feature
        call: frontegg-entitlements-agent.OpenApiPDPController_isEntitledToFeature
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/v1/data/e10s/permissions/is_entitled_to_input_permission
      name: v1-data-e10s-permissions-is-entitled-to-input-permission
      description: REST surface for v1-data-e10s-permissions-is-entitled-to-input-permission.
      operations:
      - method: POST
        name: OpenApiPDPController_isEntitledToPermission
        description: Is entitled to permission
        call: frontegg-entitlements-agent.OpenApiPDPController_isEntitledToPermission
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/v1/data/e10s/routes/is_entitled_to_input_route
      name: v1-data-e10s-routes-is-entitled-to-input-route
      description: REST surface for v1-data-e10s-routes-is-entitled-to-input-route.
      operations:
      - method: POST
        name: OpenApiPDPController_isEntitledToRoute
        description: Is entitled to route
        call: frontegg-entitlements-agent.OpenApiPDPController_isEntitledToRoute
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: frontegg-entitlements-agent-mcp
    port: 9090
    transport: http
    description: MCP adapter for Frontegg Entitlements Agent. One tool per consumed operation.
    tools:
    - name: frontegg-entitlements-agent-openapipdpcontroller-isentitledt
      description: Is entitled to feature
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: frontegg-entitlements-agent.OpenApiPDPController_isEntitledToFeature
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: frontegg-entitlements-agent-openapipdpcontroller-isentitledt
      description: Is entitled to permission
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: frontegg-entitlements-agent.OpenApiPDPController_isEntitledToPermission
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: frontegg-entitlements-agent-openapipdpcontroller-isentitledt
      description: Is entitled to route
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: frontegg-entitlements-agent.OpenApiPDPController_isEntitledToRoute
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.