naftiko: 1.0.0-alpha2 info: label: GitHub Org API — Allowed description: 'GitHub Org API — Allowed. 2 operations. Lead operation: GitHub Get Allowed Actions for an Organization. Self-contained Naftiko capability covering one Github business surface.' tags: - Github - Allowed created: '2026-05-19' modified: '2026-05-19' binds: - namespace: env keys: GITHUB_API_KEY: GITHUB_API_KEY capability: consumes: - type: http namespace: organizations-allowed baseUri: '' description: GitHub Org API — Allowed business capability. Self-contained, no shared references. resources: - name: orgs-org-actions-permissions-selected-actions path: /orgs/{org}/actions/permissions/selected-actions operations: - name: getallowedactionsforanorganization method: GET description: GitHub Get Allowed Actions for an Organization outputRawFormat: json outputParameters: - name: result type: object value: $. - name: setallowedactionsforanorganization method: PUT description: GitHub Set Allowed Actions for an Organization outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false authentication: type: bearer token: '{{env.GITHUB_API_KEY}}' exposes: - type: rest namespace: organizations-allowed-rest port: 8080 description: REST adapter for GitHub Org API — Allowed. One Spectral-compliant resource per consumed operation, prefixed with /v1. resources: - path: /v1/orgs/{org}/actions/permissions/selected-actions name: orgs-org-actions-permissions-selected-actions description: REST surface for orgs-org-actions-permissions-selected-actions. operations: - method: GET name: getallowedactionsforanorganization description: GitHub Get Allowed Actions for an Organization call: organizations-allowed.getallowedactionsforanorganization outputParameters: - type: object mapping: $. - method: PUT name: setallowedactionsforanorganization description: GitHub Set Allowed Actions for an Organization call: organizations-allowed.setallowedactionsforanorganization with: body: rest.body outputParameters: - type: object mapping: $. - type: mcp namespace: organizations-allowed-mcp port: 9090 transport: http description: MCP adapter for GitHub Org API — Allowed. One tool per consumed operation, routed inline through this capability's consumes block. tools: - name: github-get-allowed-actions-organization description: GitHub Get Allowed Actions for an Organization hints: readOnly: true destructive: false idempotent: true call: organizations-allowed.getallowedactionsforanorganization outputParameters: - type: object mapping: $. - name: github-set-allowed-actions-organization description: GitHub Set Allowed Actions for an Organization hints: readOnly: false destructive: false idempotent: true call: organizations-allowed.setallowedactionsforanorganization with: body: tools.body outputParameters: - type: object mapping: $.