naftiko: 1.0.0-alpha2 info: label: github-repos-api — Access description: 'github-repos-api — Access. 14 operations. Lead operation: GitHub Get Access Restrictions. Self-contained Naftiko capability covering one Github business surface.' tags: - Github - Access created: '2026-05-19' modified: '2026-05-19' binds: - namespace: env keys: GITHUB_API_KEY: GITHUB_API_KEY capability: consumes: - type: http namespace: repo-branches-access baseUri: '' description: github-repos-api — Access business capability. Self-contained, no shared references. resources: - name: repos-owner-repo-branches-branch-protection-restrictions path: /repos/{owner}/{repo}/branches/{branch}/protection/restrictions operations: - name: getaccessrestrictions method: GET description: GitHub Get Access Restrictions outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: Authorization in: header type: string - name: X-GitHub-Api-Version in: header type: string - name: Accept in: header type: string - name: deleteaccessrestrictions method: DELETE description: GitHub Delete Access Restrictions outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: Authorization in: header type: string - name: X-GitHub-Api-Version in: header type: string - name: Accept in: header type: string - name: repos-owner-repo-branches-branch-protection-restrictions-apps path: /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps operations: - name: getappswithaccesstotheprotectedbranch method: GET description: GitHub Get Apps with Access to the Protected Branch outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: Authorization in: header type: string - name: X-GitHub-Api-Version in: header type: string - name: Accept in: header type: string - name: addappaccessrestrictions method: POST description: GitHub Add App Access Restrictions outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: Authorization in: header type: string - name: X-GitHub-Api-Version in: header type: string - name: Accept in: header type: string - name: body in: body type: object description: Request body (JSON). required: false - name: setappaccessrestrictions method: PUT description: GitHub Set App Access Restrictions outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: Authorization in: header type: string - name: X-GitHub-Api-Version in: header type: string - name: Accept in: header type: string - name: body in: body type: object description: Request body (JSON). required: false - name: removeappaccessrestrictions method: DELETE description: GitHub Remove App Access Restrictions outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: Authorization in: header type: string - name: X-GitHub-Api-Version in: header type: string - name: Accept in: header type: string - name: body in: body type: object description: Request body (JSON). required: false - name: repos-owner-repo-branches-branch-protection-restrictions-teams path: /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teams operations: - name: getteamswithaccesstotheprotectedbranch method: GET description: GitHub Get Teams with Access to the Protected Branch outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: Authorization in: header type: string - name: X-GitHub-Api-Version in: header type: string - name: Accept in: header type: string - name: addteamaccessrestrictions method: POST description: GitHub Add Team Access Restrictions outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: Authorization in: header type: string - name: X-GitHub-Api-Version in: header type: string - name: Accept in: header type: string - name: body in: body type: object description: Request body (JSON). required: false - name: setteamaccessrestrictions method: PUT description: GitHub Set Team Access Restrictions outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: Authorization in: header type: string - name: X-GitHub-Api-Version in: header type: string - name: Accept in: header type: string - name: body in: body type: object description: Request body (JSON). required: false - name: removeteamaccessrestrictions method: DELETE description: GitHub Remove Team Access Restrictions outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: Authorization in: header type: string - name: X-GitHub-Api-Version in: header type: string - name: Accept in: header type: string - name: body in: body type: object description: Request body (JSON). required: false - name: repos-owner-repo-branches-branch-protection-restrictions-users path: /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/users operations: - name: getuserswithaccesstotheprotectedbranch method: GET description: GitHub Get Users with Access to the Protected Branch outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: Authorization in: header type: string - name: X-GitHub-Api-Version in: header type: string - name: Accept in: header type: string - name: adduseraccessrestrictions method: POST description: GitHub Add User Access Restrictions outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: Authorization in: header type: string - name: X-GitHub-Api-Version in: header type: string - name: Accept in: header type: string - name: body in: body type: object description: Request body (JSON). required: false - name: setuseraccessrestrictions method: PUT description: GitHub Set User Access Restrictions outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: Authorization in: header type: string - name: X-GitHub-Api-Version in: header type: string - name: Accept in: header type: string - name: body in: body type: object description: Request body (JSON). required: false - name: removeuseraccessrestrictions method: DELETE description: GitHub Remove User Access Restrictions outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: Authorization in: header type: string - name: X-GitHub-Api-Version in: header type: string - name: Accept in: header type: string - name: body in: body type: object description: Request body (JSON). required: false authentication: type: bearer token: '{{env.GITHUB_API_KEY}}' exposes: - type: rest namespace: repo-branches-access-rest port: 8080 description: REST adapter for github-repos-api — Access. One Spectral-compliant resource per consumed operation, prefixed with /v1. resources: - path: /v1/repos/{owner}/{repo}/branches/{branch}/protection/restrictions name: repos-owner-repo-branches-branch-protection-restrictions description: REST surface for repos-owner-repo-branches-branch-protection-restrictions. operations: - method: GET name: getaccessrestrictions description: GitHub Get Access Restrictions call: repo-branches-access.getaccessrestrictions with: Authorization: rest.Authorization X-GitHub-Api-Version: rest.X-GitHub-Api-Version Accept: rest.Accept outputParameters: - type: object mapping: $. - method: DELETE name: deleteaccessrestrictions description: GitHub Delete Access Restrictions call: repo-branches-access.deleteaccessrestrictions with: Authorization: rest.Authorization X-GitHub-Api-Version: rest.X-GitHub-Api-Version Accept: rest.Accept outputParameters: - type: object mapping: $. - path: /v1/repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps name: repos-owner-repo-branches-branch-protection-restrictions-apps description: REST surface for repos-owner-repo-branches-branch-protection-restrictions-apps. operations: - method: GET name: getappswithaccesstotheprotectedbranch description: GitHub Get Apps with Access to the Protected Branch call: repo-branches-access.getappswithaccesstotheprotectedbranch with: Authorization: rest.Authorization X-GitHub-Api-Version: rest.X-GitHub-Api-Version Accept: rest.Accept outputParameters: - type: object mapping: $. - method: POST name: addappaccessrestrictions description: GitHub Add App Access Restrictions call: repo-branches-access.addappaccessrestrictions with: Authorization: rest.Authorization X-GitHub-Api-Version: rest.X-GitHub-Api-Version Accept: rest.Accept body: rest.body outputParameters: - type: object mapping: $. - method: PUT name: setappaccessrestrictions description: GitHub Set App Access Restrictions call: repo-branches-access.setappaccessrestrictions with: Authorization: rest.Authorization X-GitHub-Api-Version: rest.X-GitHub-Api-Version Accept: rest.Accept body: rest.body outputParameters: - type: object mapping: $. - method: DELETE name: removeappaccessrestrictions description: GitHub Remove App Access Restrictions call: repo-branches-access.removeappaccessrestrictions with: Authorization: rest.Authorization X-GitHub-Api-Version: rest.X-GitHub-Api-Version Accept: rest.Accept body: rest.body outputParameters: - type: object mapping: $. - path: /v1/repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teams name: repos-owner-repo-branches-branch-protection-restrictions-teams description: REST surface for repos-owner-repo-branches-branch-protection-restrictions-teams. operations: - method: GET name: getteamswithaccesstotheprotectedbranch description: GitHub Get Teams with Access to the Protected Branch call: repo-branches-access.getteamswithaccesstotheprotectedbranch with: Authorization: rest.Authorization X-GitHub-Api-Version: rest.X-GitHub-Api-Version Accept: rest.Accept outputParameters: - type: object mapping: $. - method: POST name: addteamaccessrestrictions description: GitHub Add Team Access Restrictions call: repo-branches-access.addteamaccessrestrictions with: Authorization: rest.Authorization X-GitHub-Api-Version: rest.X-GitHub-Api-Version Accept: rest.Accept body: rest.body outputParameters: - type: object mapping: $. - method: PUT name: setteamaccessrestrictions description: GitHub Set Team Access Restrictions call: repo-branches-access.setteamaccessrestrictions with: Authorization: rest.Authorization X-GitHub-Api-Version: rest.X-GitHub-Api-Version Accept: rest.Accept body: rest.body outputParameters: - type: object mapping: $. - method: DELETE name: removeteamaccessrestrictions description: GitHub Remove Team Access Restrictions call: repo-branches-access.removeteamaccessrestrictions with: Authorization: rest.Authorization X-GitHub-Api-Version: rest.X-GitHub-Api-Version Accept: rest.Accept body: rest.body outputParameters: - type: object mapping: $. - path: /v1/repos/{owner}/{repo}/branches/{branch}/protection/restrictions/users name: repos-owner-repo-branches-branch-protection-restrictions-users description: REST surface for repos-owner-repo-branches-branch-protection-restrictions-users. operations: - method: GET name: getuserswithaccesstotheprotectedbranch description: GitHub Get Users with Access to the Protected Branch call: repo-branches-access.getuserswithaccesstotheprotectedbranch with: Authorization: rest.Authorization X-GitHub-Api-Version: rest.X-GitHub-Api-Version Accept: rest.Accept outputParameters: - type: object mapping: $. - method: POST name: adduseraccessrestrictions description: GitHub Add User Access Restrictions call: repo-branches-access.adduseraccessrestrictions with: Authorization: rest.Authorization X-GitHub-Api-Version: rest.X-GitHub-Api-Version Accept: rest.Accept body: rest.body outputParameters: - type: object mapping: $. - method: PUT name: setuseraccessrestrictions description: GitHub Set User Access Restrictions call: repo-branches-access.setuseraccessrestrictions with: Authorization: rest.Authorization X-GitHub-Api-Version: rest.X-GitHub-Api-Version Accept: rest.Accept body: rest.body outputParameters: - type: object mapping: $. - method: DELETE name: removeuseraccessrestrictions description: GitHub Remove User Access Restrictions call: repo-branches-access.removeuseraccessrestrictions with: Authorization: rest.Authorization X-GitHub-Api-Version: rest.X-GitHub-Api-Version Accept: rest.Accept body: rest.body outputParameters: - type: object mapping: $. - type: mcp namespace: repo-branches-access-mcp port: 9090 transport: http description: MCP adapter for github-repos-api — Access. One tool per consumed operation, routed inline through this capability's consumes block. tools: - name: github-get-access-restrictions description: GitHub Get Access Restrictions hints: readOnly: true destructive: false idempotent: true call: repo-branches-access.getaccessrestrictions with: Authorization: tools.Authorization X-GitHub-Api-Version: tools.X-GitHub-Api-Version Accept: tools.Accept outputParameters: - type: object mapping: $. - name: github-delete-access-restrictions description: GitHub Delete Access Restrictions hints: readOnly: false destructive: true idempotent: true call: repo-branches-access.deleteaccessrestrictions with: Authorization: tools.Authorization X-GitHub-Api-Version: tools.X-GitHub-Api-Version Accept: tools.Accept outputParameters: - type: object mapping: $. - name: github-get-apps-access-protected description: GitHub Get Apps with Access to the Protected Branch hints: readOnly: true destructive: false idempotent: true call: repo-branches-access.getappswithaccesstotheprotectedbranch with: Authorization: tools.Authorization X-GitHub-Api-Version: tools.X-GitHub-Api-Version Accept: tools.Accept outputParameters: - type: object mapping: $. - name: github-add-app-access-restrictions description: GitHub Add App Access Restrictions hints: readOnly: false destructive: false idempotent: false call: repo-branches-access.addappaccessrestrictions with: Authorization: tools.Authorization X-GitHub-Api-Version: tools.X-GitHub-Api-Version Accept: tools.Accept body: tools.body outputParameters: - type: object mapping: $. - name: github-set-app-access-restrictions description: GitHub Set App Access Restrictions hints: readOnly: false destructive: false idempotent: true call: repo-branches-access.setappaccessrestrictions with: Authorization: tools.Authorization X-GitHub-Api-Version: tools.X-GitHub-Api-Version Accept: tools.Accept body: tools.body outputParameters: - type: object mapping: $. - name: github-remove-app-access-restrictions description: GitHub Remove App Access Restrictions hints: readOnly: false destructive: true idempotent: true call: repo-branches-access.removeappaccessrestrictions with: Authorization: tools.Authorization X-GitHub-Api-Version: tools.X-GitHub-Api-Version Accept: tools.Accept body: tools.body outputParameters: - type: object mapping: $. - name: github-get-teams-access-protected description: GitHub Get Teams with Access to the Protected Branch hints: readOnly: true destructive: false idempotent: true call: repo-branches-access.getteamswithaccesstotheprotectedbranch with: Authorization: tools.Authorization X-GitHub-Api-Version: tools.X-GitHub-Api-Version Accept: tools.Accept outputParameters: - type: object mapping: $. - name: github-add-team-access-restrictions description: GitHub Add Team Access Restrictions hints: readOnly: false destructive: false idempotent: false call: repo-branches-access.addteamaccessrestrictions with: Authorization: tools.Authorization X-GitHub-Api-Version: tools.X-GitHub-Api-Version Accept: tools.Accept body: tools.body outputParameters: - type: object mapping: $. - name: github-set-team-access-restrictions description: GitHub Set Team Access Restrictions hints: readOnly: false destructive: false idempotent: true call: repo-branches-access.setteamaccessrestrictions with: Authorization: tools.Authorization X-GitHub-Api-Version: tools.X-GitHub-Api-Version Accept: tools.Accept body: tools.body outputParameters: - type: object mapping: $. - name: github-remove-team-access-restrictions description: GitHub Remove Team Access Restrictions hints: readOnly: false destructive: true idempotent: true call: repo-branches-access.removeteamaccessrestrictions with: Authorization: tools.Authorization X-GitHub-Api-Version: tools.X-GitHub-Api-Version Accept: tools.Accept body: tools.body outputParameters: - type: object mapping: $. - name: github-get-users-access-protected description: GitHub Get Users with Access to the Protected Branch hints: readOnly: true destructive: false idempotent: true call: repo-branches-access.getuserswithaccesstotheprotectedbranch with: Authorization: tools.Authorization X-GitHub-Api-Version: tools.X-GitHub-Api-Version Accept: tools.Accept outputParameters: - type: object mapping: $. - name: github-add-user-access-restrictions description: GitHub Add User Access Restrictions hints: readOnly: false destructive: false idempotent: false call: repo-branches-access.adduseraccessrestrictions with: Authorization: tools.Authorization X-GitHub-Api-Version: tools.X-GitHub-Api-Version Accept: tools.Accept body: tools.body outputParameters: - type: object mapping: $. - name: github-set-user-access-restrictions description: GitHub Set User Access Restrictions hints: readOnly: false destructive: false idempotent: true call: repo-branches-access.setuseraccessrestrictions with: Authorization: tools.Authorization X-GitHub-Api-Version: tools.X-GitHub-Api-Version Accept: tools.Accept body: tools.body outputParameters: - type: object mapping: $. - name: github-remove-user-access-restrictions description: GitHub Remove User Access Restrictions hints: readOnly: false destructive: true idempotent: true call: repo-branches-access.removeuseraccessrestrictions with: Authorization: tools.Authorization X-GitHub-Api-Version: tools.X-GitHub-Api-Version Accept: tools.Accept body: tools.body outputParameters: - type: object mapping: $.