naftiko: 1.0.0-alpha2 info: label: github-repo-actions-api — Secrets description: 'github-repo-actions-api — Secrets. 5 operations. Lead operation: GitHub List Repository Organization Secrets. Self-contained Naftiko capability covering one Github business surface.' tags: - Github - Secrets created: '2026-05-19' modified: '2026-05-19' binds: - namespace: env keys: GITHUB_API_KEY: GITHUB_API_KEY capability: consumes: - type: http namespace: repo-actions-secrets baseUri: '' description: github-repo-actions-api — Secrets business capability. Self-contained, no shared references. resources: - name: repos-owner-repo-actions-organization-secrets path: /repos/{owner}/{repo}/actions/organization-secrets operations: - name: listrepositoryorganizationsecrets method: GET description: GitHub List Repository Organization Secrets outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: Authorization in: header type: string - name: X-GitHub-Api-Version in: header type: string - name: Accept in: header type: string - name: repos-owner-repo-actions-secrets path: /repos/{owner}/{repo}/actions/secrets operations: - name: listrepositorysecrets method: GET description: GitHub List Repository Secrets outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: Authorization in: header type: string - name: X-GitHub-Api-Version in: header type: string - name: Accept in: header type: string - name: repos-owner-repo-actions-secrets-secret_name path: /repos/{owner}/{repo}/actions/secrets/{secret_name} operations: - name: getrepositorysecret method: GET description: GitHub Get Repository Secret outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: Authorization in: header type: string - name: X-GitHub-Api-Version in: header type: string - name: Accept in: header type: string - name: createorupdaterepositorysecret method: PUT description: GitHub Create or Update Repository Secret outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: Authorization in: header type: string - name: X-GitHub-Api-Version in: header type: string - name: Accept in: header type: string - name: body in: body type: object description: Request body (JSON). required: true - name: deleterepositorysecret method: DELETE description: GitHub Delete Repository Secret outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: Authorization in: header type: string - name: X-GitHub-Api-Version in: header type: string - name: Accept in: header type: string authentication: type: bearer token: '{{env.GITHUB_API_KEY}}' exposes: - type: rest namespace: repo-actions-secrets-rest port: 8080 description: REST adapter for github-repo-actions-api — Secrets. One Spectral-compliant resource per consumed operation, prefixed with /v1. resources: - path: /v1/repos/{owner}/{repo}/actions/organization-secrets name: repos-owner-repo-actions-organization-secrets description: REST surface for repos-owner-repo-actions-organization-secrets. operations: - method: GET name: listrepositoryorganizationsecrets description: GitHub List Repository Organization Secrets call: repo-actions-secrets.listrepositoryorganizationsecrets with: Authorization: rest.Authorization X-GitHub-Api-Version: rest.X-GitHub-Api-Version Accept: rest.Accept outputParameters: - type: object mapping: $. - path: /v1/repos/{owner}/{repo}/actions/secrets name: repos-owner-repo-actions-secrets description: REST surface for repos-owner-repo-actions-secrets. operations: - method: GET name: listrepositorysecrets description: GitHub List Repository Secrets call: repo-actions-secrets.listrepositorysecrets with: Authorization: rest.Authorization X-GitHub-Api-Version: rest.X-GitHub-Api-Version Accept: rest.Accept outputParameters: - type: object mapping: $. - path: /v1/repos/{owner}/{repo}/actions/secrets/{secret-name} name: repos-owner-repo-actions-secrets-secret-name description: REST surface for repos-owner-repo-actions-secrets-secret_name. operations: - method: GET name: getrepositorysecret description: GitHub Get Repository Secret call: repo-actions-secrets.getrepositorysecret with: Authorization: rest.Authorization X-GitHub-Api-Version: rest.X-GitHub-Api-Version Accept: rest.Accept outputParameters: - type: object mapping: $. - method: PUT name: createorupdaterepositorysecret description: GitHub Create or Update Repository Secret call: repo-actions-secrets.createorupdaterepositorysecret with: Authorization: rest.Authorization X-GitHub-Api-Version: rest.X-GitHub-Api-Version Accept: rest.Accept body: rest.body outputParameters: - type: object mapping: $. - method: DELETE name: deleterepositorysecret description: GitHub Delete Repository Secret call: repo-actions-secrets.deleterepositorysecret with: Authorization: rest.Authorization X-GitHub-Api-Version: rest.X-GitHub-Api-Version Accept: rest.Accept outputParameters: - type: object mapping: $. - type: mcp namespace: repo-actions-secrets-mcp port: 9090 transport: http description: MCP adapter for github-repo-actions-api — Secrets. One tool per consumed operation, routed inline through this capability's consumes block. tools: - name: github-list-repository-organization-secrets description: GitHub List Repository Organization Secrets hints: readOnly: true destructive: false idempotent: true call: repo-actions-secrets.listrepositoryorganizationsecrets with: Authorization: tools.Authorization X-GitHub-Api-Version: tools.X-GitHub-Api-Version Accept: tools.Accept outputParameters: - type: object mapping: $. - name: github-list-repository-secrets description: GitHub List Repository Secrets hints: readOnly: true destructive: false idempotent: true call: repo-actions-secrets.listrepositorysecrets with: Authorization: tools.Authorization X-GitHub-Api-Version: tools.X-GitHub-Api-Version Accept: tools.Accept outputParameters: - type: object mapping: $. - name: github-get-repository-secret description: GitHub Get Repository Secret hints: readOnly: true destructive: false idempotent: true call: repo-actions-secrets.getrepositorysecret with: Authorization: tools.Authorization X-GitHub-Api-Version: tools.X-GitHub-Api-Version Accept: tools.Accept outputParameters: - type: object mapping: $. - name: github-create-update-repository-secret description: GitHub Create or Update Repository Secret hints: readOnly: false destructive: false idempotent: true call: repo-actions-secrets.createorupdaterepositorysecret with: Authorization: tools.Authorization X-GitHub-Api-Version: tools.X-GitHub-Api-Version Accept: tools.Accept body: tools.body outputParameters: - type: object mapping: $. - name: github-delete-repository-secret description: GitHub Delete Repository Secret hints: readOnly: false destructive: true idempotent: true call: repo-actions-secrets.deleterepositorysecret with: Authorization: tools.Authorization X-GitHub-Api-Version: tools.X-GitHub-Api-Version Accept: tools.Accept outputParameters: - type: object mapping: $.