naftiko: 1.0.0-alpha2 info: label: GitHub Application API — Branches description: 'GitHub Application API — Branches. 1 operations. Lead operation: GitHub Get Apps with Access to the Protected Branch. Self-contained Naftiko capability covering one Github business surface.' tags: - Github - Branches created: '2026-05-19' modified: '2026-05-19' binds: - namespace: env keys: GITHUB_API_KEY: GITHUB_API_KEY capability: consumes: - type: http namespace: app-branches baseUri: '' description: GitHub Application API — Branches business capability. Self-contained, no shared references. resources: - name: repos-owner-repo-branches-branch-protection-restrictions-apps path: /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps operations: - name: getappswithaccesstotheprotectedbranch method: GET description: GitHub Get Apps with Access to the Protected Branch outputRawFormat: json outputParameters: - name: result type: object value: $. authentication: type: bearer token: '{{env.GITHUB_API_KEY}}' exposes: - type: rest namespace: app-branches-rest port: 8080 description: REST adapter for GitHub Application API — Branches. One Spectral-compliant resource per consumed operation, prefixed with /v1. resources: - path: /v1/repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps name: repos-owner-repo-branches-branch-protection-restrictions-apps description: REST surface for repos-owner-repo-branches-branch-protection-restrictions-apps. operations: - method: GET name: getappswithaccesstotheprotectedbranch description: GitHub Get Apps with Access to the Protected Branch call: app-branches.getappswithaccesstotheprotectedbranch outputParameters: - type: object mapping: $. - type: mcp namespace: app-branches-mcp port: 9090 transport: http description: MCP adapter for GitHub Application API — Branches. One tool per consumed operation, routed inline through this capability's consumes block. tools: - name: github-get-apps-access-protected description: GitHub Get Apps with Access to the Protected Branch hints: readOnly: true destructive: false idempotent: true call: app-branches.getappswithaccesstotheprotectedbranch outputParameters: - type: object mapping: $.