naftiko: 1.0.0-alpha2
info:
  label: Kibana APIs — connectors
  description: 'Kibana APIs — connectors. 8 operations. Lead operation: Handle OAuth callback. Self-contained Naftiko capability
    covering one Kibana business surface.'
  tags:
  - Kibana
  - connectors
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    KIBANA_API_KEY: KIBANA_API_KEY
capability:
  consumes:
  - type: http
    namespace: kibana-connectors
    baseUri: https://{kibana_url}
    description: Kibana APIs — connectors business capability. Self-contained, no shared references.
    resources:
    - name: api-actions-connector-_oauth_callback
      path: /api/actions/connector/_oauth_callback
      operations:
      - name: getactionsconnectoroauthcallback
        method: GET
        description: Handle OAuth callback
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: code
          in: query
          type: string
          description: The authorization code returned by the OAuth provider.
        - name: state
          in: query
          type: string
          description: The state parameter for CSRF protection.
        - name: error
          in: query
          type: string
          description: Error code if the authorization failed.
        - name: error_description
          in: query
          type: string
          description: Human-readable error description.
        - name: session_state
          in: query
          type: string
          description: Session state from the OAuth provider (e.g., Microsoft).
    - name: api-actions-connector-id
      path: /api/actions/connector/{id}
      operations:
      - name: deleteactionsconnectorid
        method: DELETE
        description: Delete a connector
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: kbn-xsrf
          in: header
          type: string
          description: A required header to protect against CSRF attacks
          required: true
        - name: id
          in: path
          type: string
          description: An identifier for the connector.
          required: true
      - name: getactionsconnectorid
        method: GET
        description: Get connector information
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: string
          description: An identifier for the connector.
          required: true
      - name: postactionsconnectorid
        method: POST
        description: Create a connector
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: kbn-xsrf
          in: header
          type: string
          description: A required header to protect against CSRF attacks
          required: true
        - name: id
          in: path
          type: string
          description: An identifier for the connector.
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
      - name: putactionsconnectorid
        method: PUT
        description: Update a connector
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: kbn-xsrf
          in: header
          type: string
          description: A required header to protect against CSRF attacks
          required: true
        - name: id
          in: path
          type: string
          description: An identifier for the connector.
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
    - name: api-actions-connector-id-_execute
      path: /api/actions/connector/{id}/_execute
      operations:
      - name: postactionsconnectoridexecute
        method: POST
        description: Run a connector
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: kbn-xsrf
          in: header
          type: string
          description: A required header to protect against CSRF attacks
          required: true
        - name: id
          in: path
          type: string
          description: An identifier for the connector.
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
    - name: api-actions-connector_types
      path: /api/actions/connector_types
      operations:
      - name: getactionsconnectortypes
        method: GET
        description: Get connector types
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: feature_id
          in: query
          type: string
          description: A filter to limit the retrieved connector types to those that support a specific feature (such as alerting
            or cases).
    - name: api-actions-connectors
      path: /api/actions/connectors
      operations:
      - name: getactionsconnectors
        method: GET
        description: Get all connectors
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    authentication:
      type: apikey
      key: Authorization
      value: '{{env.KIBANA_API_KEY}}'
      placement: header
  exposes:
  - type: rest
    namespace: kibana-connectors-rest
    port: 8080
    description: REST adapter for Kibana APIs — connectors. One Spectral-compliant resource per consumed operation, prefixed
      with /v1.
    resources:
    - path: /v1/api/actions/connector/oauth-callback
      name: api-actions-connector-oauth-callback
      description: REST surface for api-actions-connector-_oauth_callback.
      operations:
      - method: GET
        name: getactionsconnectoroauthcallback
        description: Handle OAuth callback
        call: kibana-connectors.getactionsconnectoroauthcallback
        with:
          code: rest.code
          state: rest.state
          error: rest.error
          error_description: rest.error_description
          session_state: rest.session_state
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/actions/connector/{id}
      name: api-actions-connector-id
      description: REST surface for api-actions-connector-id.
      operations:
      - method: DELETE
        name: deleteactionsconnectorid
        description: Delete a connector
        call: kibana-connectors.deleteactionsconnectorid
        with:
          kbn-xsrf: rest.kbn-xsrf
          id: rest.id
        outputParameters:
        - type: object
          mapping: $.
      - method: GET
        name: getactionsconnectorid
        description: Get connector information
        call: kibana-connectors.getactionsconnectorid
        with:
          id: rest.id
        outputParameters:
        - type: object
          mapping: $.
      - method: POST
        name: postactionsconnectorid
        description: Create a connector
        call: kibana-connectors.postactionsconnectorid
        with:
          kbn-xsrf: rest.kbn-xsrf
          id: rest.id
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
      - method: PUT
        name: putactionsconnectorid
        description: Update a connector
        call: kibana-connectors.putactionsconnectorid
        with:
          kbn-xsrf: rest.kbn-xsrf
          id: rest.id
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/actions/connector/{id}/execute
      name: api-actions-connector-id-execute
      description: REST surface for api-actions-connector-id-_execute.
      operations:
      - method: POST
        name: postactionsconnectoridexecute
        description: Run a connector
        call: kibana-connectors.postactionsconnectoridexecute
        with:
          kbn-xsrf: rest.kbn-xsrf
          id: rest.id
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/actions/connector-types
      name: api-actions-connector-types
      description: REST surface for api-actions-connector_types.
      operations:
      - method: GET
        name: getactionsconnectortypes
        description: Get connector types
        call: kibana-connectors.getactionsconnectortypes
        with:
          feature_id: rest.feature_id
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/actions/connectors
      name: api-actions-connectors
      description: REST surface for api-actions-connectors.
      operations:
      - method: GET
        name: getactionsconnectors
        description: Get all connectors
        call: kibana-connectors.getactionsconnectors
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: kibana-connectors-mcp
    port: 9090
    transport: http
    description: MCP adapter for Kibana APIs — connectors. One tool per consumed operation, routed inline through this capability's
      consumes block.
    tools:
    - name: handle-oauth-callback
      description: Handle OAuth callback
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: kibana-connectors.getactionsconnectoroauthcallback
      with:
        code: tools.code
        state: tools.state
        error: tools.error
        error_description: tools.error_description
        session_state: tools.session_state
      outputParameters:
      - type: object
        mapping: $.
    - name: delete-connector
      description: Delete a connector
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: kibana-connectors.deleteactionsconnectorid
      with:
        kbn-xsrf: tools.kbn-xsrf
        id: tools.id
      outputParameters:
      - type: object
        mapping: $.
    - name: get-connector-information
      description: Get connector information
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: kibana-connectors.getactionsconnectorid
      with:
        id: tools.id
      outputParameters:
      - type: object
        mapping: $.
    - name: create-connector
      description: Create a connector
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: kibana-connectors.postactionsconnectorid
      with:
        kbn-xsrf: tools.kbn-xsrf
        id: tools.id
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: update-connector
      description: Update a connector
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: kibana-connectors.putactionsconnectorid
      with:
        kbn-xsrf: tools.kbn-xsrf
        id: tools.id
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: run-connector
      description: Run a connector
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: kibana-connectors.postactionsconnectoridexecute
      with:
        kbn-xsrf: tools.kbn-xsrf
        id: tools.id
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: get-connector-types
      description: Get connector types
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: kibana-connectors.getactionsconnectortypes
      with:
        feature_id: tools.feature_id
      outputParameters:
      - type: object
        mapping: $.
    - name: get-all-connectors
      description: Get all connectors
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: kibana-connectors.getactionsconnectors
      outputParameters:
      - type: object
        mapping: $.