naftiko: 1.0.0-alpha2 info: label: Kibana APIs — Elastic Package Manager (EPM) description: 'Kibana APIs — Elastic Package Manager (EPM). 35 operations. Lead operation: Bulk get assets. Self-contained Naftiko capability covering one Kibana business surface.' tags: - Kibana - Elastic Package Manager (EPM) created: '2026-05-19' modified: '2026-05-19' binds: - namespace: env keys: KIBANA_API_KEY: KIBANA_API_KEY capability: consumes: - type: http namespace: kibana-elastic-package-manager-epm baseUri: https://{kibana_url} description: Kibana APIs — Elastic Package Manager (EPM) business capability. Self-contained, no shared references. resources: - name: api-fleet-epm-bulk_assets path: /api/fleet/epm/bulk_assets operations: - name: postfleetepmbulkassets method: POST description: Bulk get assets outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: kbn-xsrf in: header type: string description: A required header to protect against CSRF attacks required: true - name: body in: body type: object description: Request body (JSON). required: false - name: api-fleet-epm-categories path: /api/fleet/epm/categories operations: - name: getfleetepmcategories method: GET description: Get package categories outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: prerelease in: query type: boolean description: When true, include prerelease packages in the results - name: include_policy_templates in: query type: boolean description: When true, include categories that only contain policy templates - name: api-fleet-epm-custom_integrations path: /api/fleet/epm/custom_integrations operations: - name: postfleetepmcustomintegrations method: POST description: Create a custom integration outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: kbn-xsrf in: header type: string description: A required header to protect against CSRF attacks required: true - name: body in: body type: object description: Request body (JSON). required: false - name: api-fleet-epm-custom_integrations-pkgName path: /api/fleet/epm/custom_integrations/{pkgName} operations: - name: putfleetepmcustomintegrationspkgname method: PUT description: Update a custom integration outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: kbn-xsrf in: header type: string description: A required header to protect against CSRF attacks required: true - name: pkgName in: path type: string description: Package name required: true - name: body in: body type: object description: Request body (JSON). required: false - name: api-fleet-epm-packages path: /api/fleet/epm/packages operations: - name: getfleetepmpackages method: GET description: Get packages outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: category in: query type: string description: Filter packages by category - name: prerelease in: query type: boolean description: When true, include prerelease packages in the results - name: excludeInstallStatus in: query type: boolean description: When true, exclude the install status from the response - name: withPackagePoliciesCount in: query type: boolean description: When true, include the number of package policies per package - name: postfleetepmpackages method: POST description: Install a package by upload outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: kbn-xsrf in: header type: string description: A required header to protect against CSRF attacks required: true - name: ignoreMappingUpdateErrors in: query type: boolean description: When true, ignore mapping update errors during installation - name: skipDataStreamRollover in: query type: boolean description: When true, skip data stream rollover after installation - name: body in: body type: object description: Request body (JSON). required: false - name: api-fleet-epm-packages-_bulk path: /api/fleet/epm/packages/_bulk operations: - name: postfleetepmpackagesbulk method: POST description: Bulk install packages outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: kbn-xsrf in: header type: string description: A required header to protect against CSRF attacks required: true - name: prerelease in: query type: boolean description: When true, allow installing prerelease versions - name: body in: body type: object description: Request body (JSON). required: false - name: api-fleet-epm-packages-_bulk_rollback path: /api/fleet/epm/packages/_bulk_rollback operations: - name: postfleetepmpackagesbulkrollback method: POST description: Bulk rollback packages outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: kbn-xsrf in: header type: string description: A required header to protect against CSRF attacks required: true - name: body in: body type: object description: Request body (JSON). required: false - name: api-fleet-epm-packages-_bulk_rollback-taskId path: /api/fleet/epm/packages/_bulk_rollback/{taskId} operations: - name: getfleetepmpackagesbulkrollbacktaskid method: GET description: Get Bulk rollback packages details outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: taskId in: path type: string description: Task ID of the bulk operation required: true - name: api-fleet-epm-packages-_bulk_uninstall path: /api/fleet/epm/packages/_bulk_uninstall operations: - name: postfleetepmpackagesbulkuninstall method: POST description: Bulk uninstall packages outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: kbn-xsrf in: header type: string description: A required header to protect against CSRF attacks required: true - name: body in: body type: object description: Request body (JSON). required: false - name: api-fleet-epm-packages-_bulk_uninstall-taskId path: /api/fleet/epm/packages/_bulk_uninstall/{taskId} operations: - name: getfleetepmpackagesbulkuninstalltaskid method: GET description: Get Bulk uninstall packages details outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: taskId in: path type: string description: Task ID of the bulk operation required: true - name: api-fleet-epm-packages-_bulk_upgrade path: /api/fleet/epm/packages/_bulk_upgrade operations: - name: postfleetepmpackagesbulkupgrade method: POST description: Bulk upgrade packages outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: kbn-xsrf in: header type: string description: A required header to protect against CSRF attacks required: true - name: body in: body type: object description: Request body (JSON). required: false - name: api-fleet-epm-packages-_bulk_upgrade-taskId path: /api/fleet/epm/packages/_bulk_upgrade/{taskId} operations: - name: getfleetepmpackagesbulkupgradetaskid method: GET description: Get Bulk upgrade packages details outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: taskId in: path type: string description: Task ID of the bulk operation required: true - name: api-fleet-epm-packages-installed path: /api/fleet/epm/packages/installed operations: - name: getfleetepmpackagesinstalled method: GET description: Get installed packages outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: dataStreamType in: query type: string description: Filter by data stream type - name: showOnlyActiveDataStreams in: query type: boolean description: When true, only return packages with active data streams - name: nameQuery in: query type: string description: Filter packages by name - name: searchAfter in: query type: array description: Sort values from the previous page for `search_after` pagination - name: perPage in: query type: number description: Number of results per page - name: sortOrder in: query type: string description: Sort order, ascending or descending - name: api-fleet-epm-packages-limited path: /api/fleet/epm/packages/limited operations: - name: getfleetepmpackageslimited method: GET description: Get a limited package list outputRawFormat: json outputParameters: - name: result type: object value: $. - name: api-fleet-epm-packages-pkgName path: /api/fleet/epm/packages/{pkgName} operations: - name: deletefleetepmpackagespkgname method: DELETE description: Delete a package outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: kbn-xsrf in: header type: string description: A required header to protect against CSRF attacks required: true - name: pkgName in: path type: string description: Package name required: true - name: force in: query type: boolean description: When true, delete the package even if it has active package policies - name: getfleetepmpackagespkgname method: GET description: Get a package outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: pkgName in: path type: string description: Package name required: true - name: ignoreUnverified in: query type: boolean description: When true, returns the package even if the signature cannot be verified - name: prerelease in: query type: boolean description: When true, include prerelease versions - name: full in: query type: boolean description: When true, return the full package info including assets - name: withMetadata in: query type: boolean description: When true, include package metadata such as whether it has package policies - name: postfleetepmpackagespkgname method: POST description: Install a package from the registry outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: kbn-xsrf in: header type: string description: A required header to protect against CSRF attacks required: true - name: pkgName in: path type: string description: Package name required: true - name: prerelease in: query type: boolean description: When true, allow installing prerelease versions - name: ignoreMappingUpdateErrors in: query type: boolean description: When true, ignore mapping update errors during installation - name: skipDataStreamRollover in: query type: boolean description: When true, skip data stream rollover after installation - name: skipDependencyCheck in: query type: boolean description: Skip dependency validation when installing a package with dependencies - name: body in: body type: object description: Request body (JSON). required: false - name: putfleetepmpackagespkgname method: PUT description: Update package settings outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: kbn-xsrf in: header type: string description: A required header to protect against CSRF attacks required: true - name: pkgName in: path type: string description: Package name required: true - name: body in: body type: object description: Request body (JSON). required: false - name: api-fleet-epm-packages-pkgName-review_upgrade path: /api/fleet/epm/packages/{pkgName}/review_upgrade operations: - name: postfleetepmpackagespkgnamereviewupgrade method: POST description: Review a pending policy upgrade for a package with deprecations outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: kbn-xsrf in: header type: string description: A required header to protect against CSRF attacks required: true - name: pkgName in: path type: string description: Package name to review upgrade for required: true - name: body in: body type: object description: Request body (JSON). required: false - name: api-fleet-epm-packages-pkgName-rollback path: /api/fleet/epm/packages/{pkgName}/rollback operations: - name: postfleetepmpackagespkgnamerollback method: POST description: Rollback a package to previous version outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: kbn-xsrf in: header type: string description: A required header to protect against CSRF attacks required: true - name: pkgName in: path type: string description: Package name to roll back required: true - name: api-fleet-epm-packages-pkgName-stats path: /api/fleet/epm/packages/{pkgName}/stats operations: - name: getfleetepmpackagespkgnamestats method: GET description: Get package stats outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: pkgName in: path type: string description: Package name required: true - name: api-fleet-epm-packages-pkgName-pkgVersion path: /api/fleet/epm/packages/{pkgName}/{pkgVersion} operations: - name: deletefleetepmpackagespkgnamepkgversion method: DELETE description: Delete a package outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: kbn-xsrf in: header type: string description: A required header to protect against CSRF attacks required: true - name: pkgName in: path type: string description: Package name required: true - name: pkgVersion in: path type: string description: Package version required: true - name: force in: query type: boolean description: When true, delete the package even if it has active package policies - name: getfleetepmpackagespkgnamepkgversion method: GET description: Get a package outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: pkgName in: path type: string description: Package name required: true - name: pkgVersion in: path type: string description: Package version required: true - name: ignoreUnverified in: query type: boolean description: When true, returns the package even if the signature cannot be verified - name: prerelease in: query type: boolean description: When true, include prerelease versions - name: full in: query type: boolean description: When true, return the full package info including assets - name: withMetadata in: query type: boolean description: When true, include package metadata such as whether it has package policies - name: postfleetepmpackagespkgnamepkgversion method: POST description: Install a package from the registry outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: kbn-xsrf in: header type: string description: A required header to protect against CSRF attacks required: true - name: pkgName in: path type: string description: Package name required: true - name: pkgVersion in: path type: string description: Package version required: true - name: prerelease in: query type: boolean description: When true, allow installing prerelease versions - name: ignoreMappingUpdateErrors in: query type: boolean description: When true, ignore mapping update errors during installation - name: skipDataStreamRollover in: query type: boolean description: When true, skip data stream rollover after installation - name: skipDependencyCheck in: query type: boolean description: Skip dependency validation when installing a package with dependencies - name: body in: body type: object description: Request body (JSON). required: false - name: putfleetepmpackagespkgnamepkgversion method: PUT description: Update package settings outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: kbn-xsrf in: header type: string description: A required header to protect against CSRF attacks required: true - name: pkgName in: path type: string description: Package name required: true - name: pkgVersion in: path type: string description: Package version required: true - name: body in: body type: object description: Request body (JSON). required: false - name: api-fleet-epm-packages-pkgName-pkgVersion-datastream_assets path: /api/fleet/epm/packages/{pkgName}/{pkgVersion}/datastream_assets operations: - name: deletefleetepmpackagespkgnamepkgversiondatastreamassets method: DELETE description: Delete assets for an input package outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: kbn-xsrf in: header type: string description: A required header to protect against CSRF attacks required: true - name: pkgName in: path type: string description: Package name required: true - name: pkgVersion in: path type: string description: Package version required: true - name: packagePolicyId in: query type: string description: The ID of the package policy required: true - name: api-fleet-epm-packages-pkgName-pkgVersion-dependencies path: /api/fleet/epm/packages/{pkgName}/{pkgVersion}/dependencies operations: - name: getfleetepmpackagespkgnamepkgversiondependencies method: GET description: Get package dependencies outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: pkgName in: path type: string description: Package name required: true - name: pkgVersion in: path type: string description: Package version required: true - name: api-fleet-epm-packages-pkgName-pkgVersion-kibana_assets path: /api/fleet/epm/packages/{pkgName}/{pkgVersion}/kibana_assets operations: - name: deletefleetepmpackagespkgnamepkgversionkibanaassets method: DELETE description: Delete Kibana assets for a package outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: kbn-xsrf in: header type: string description: A required header to protect against CSRF attacks required: true - name: pkgName in: path type: string description: Package name required: true - name: pkgVersion in: path type: string description: Package version required: true - name: postfleetepmpackagespkgnamepkgversionkibanaassets method: POST description: Install Kibana assets for a package outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: kbn-xsrf in: header type: string description: A required header to protect against CSRF attacks required: true - name: pkgName in: path type: string description: Package name required: true - name: pkgVersion in: path type: string description: Package version required: true - name: body in: body type: object description: Request body (JSON). required: false - name: api-fleet-epm-packages-pkgName-pkgVersion-rule_assets path: /api/fleet/epm/packages/{pkgName}/{pkgVersion}/rule_assets operations: - name: postfleetepmpackagespkgnamepkgversionruleassets method: POST description: Install Kibana alert rule for a package outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: kbn-xsrf in: header type: string description: A required header to protect against CSRF attacks required: true - name: pkgName in: path type: string description: Package name required: true - name: pkgVersion in: path type: string description: Package version required: true - name: body in: body type: object description: Request body (JSON). required: false - name: api-fleet-epm-packages-pkgName-pkgVersion-transforms-authorize path: /api/fleet/epm/packages/{pkgName}/{pkgVersion}/transforms/authorize operations: - name: postfleetepmpackagespkgnamepkgversiontransformsauthorize method: POST description: Authorize transforms outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: kbn-xsrf in: header type: string description: A required header to protect against CSRF attacks required: true - name: pkgName in: path type: string description: Package name required: true - name: pkgVersion in: path type: string description: Package version required: true - name: prerelease in: query type: boolean description: When true, allow prerelease versions - name: body in: body type: object description: Request body (JSON). required: false - name: api-fleet-epm-packages-pkgName-pkgVersion-filePath path: /api/fleet/epm/packages/{pkgName}/{pkgVersion}/{filePath} operations: - name: getfleetepmpackagespkgnamepkgversionfilepath method: GET description: Get a package file outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: pkgName in: path type: string description: Package name required: true - name: pkgVersion in: path type: string description: Package version required: true - name: filePath in: path type: string description: File path within the package required: true - name: api-fleet-epm-templates-pkgName-pkgVersion-inputs path: /api/fleet/epm/templates/{pkgName}/{pkgVersion}/inputs operations: - name: getfleetepmtemplatespkgnamepkgversioninputs method: GET description: Get an inputs template outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: pkgName in: path type: string description: Package name required: true - name: pkgVersion in: path type: string description: Package version required: true - name: format in: query type: string description: 'Output format for the inputs template: json, yml, or yaml' - name: prerelease in: query type: boolean description: When true, allow prerelease versions - name: ignoreUnverified in: query type: boolean description: When true, return inputs even if the package signature cannot be verified - name: api-fleet-epm-verification_key_id path: /api/fleet/epm/verification_key_id operations: - name: getfleetepmverificationkeyid method: GET description: Get a package signature verification key ID outputRawFormat: json outputParameters: - name: result type: object value: $. authentication: type: apikey key: Authorization value: '{{env.KIBANA_API_KEY}}' placement: header exposes: - type: rest namespace: kibana-elastic-package-manager-epm-rest port: 8080 description: REST adapter for Kibana APIs — Elastic Package Manager (EPM). One Spectral-compliant resource per consumed operation, prefixed with /v1. resources: - path: /v1/api/fleet/epm/bulk-assets name: api-fleet-epm-bulk-assets description: REST surface for api-fleet-epm-bulk_assets. operations: - method: POST name: postfleetepmbulkassets description: Bulk get assets call: kibana-elastic-package-manager-epm.postfleetepmbulkassets with: kbn-xsrf: rest.kbn-xsrf body: rest.body outputParameters: - type: object mapping: $. - path: /v1/api/fleet/epm/categories name: api-fleet-epm-categories description: REST surface for api-fleet-epm-categories. operations: - method: GET name: getfleetepmcategories description: Get package categories call: kibana-elastic-package-manager-epm.getfleetepmcategories with: prerelease: rest.prerelease include_policy_templates: rest.include_policy_templates outputParameters: - type: object mapping: $. - path: /v1/api/fleet/epm/custom-integrations name: api-fleet-epm-custom-integrations description: REST surface for api-fleet-epm-custom_integrations. operations: - method: POST name: postfleetepmcustomintegrations description: Create a custom integration call: kibana-elastic-package-manager-epm.postfleetepmcustomintegrations with: kbn-xsrf: rest.kbn-xsrf body: rest.body outputParameters: - type: object mapping: $. - path: /v1/api/fleet/epm/custom-integrations/{pkgname} name: api-fleet-epm-custom-integrations-pkgname description: REST surface for api-fleet-epm-custom_integrations-pkgName. operations: - method: PUT name: putfleetepmcustomintegrationspkgname description: Update a custom integration call: kibana-elastic-package-manager-epm.putfleetepmcustomintegrationspkgname with: kbn-xsrf: rest.kbn-xsrf pkgName: rest.pkgName body: rest.body outputParameters: - type: object mapping: $. - path: /v1/api/fleet/epm/packages name: api-fleet-epm-packages description: REST surface for api-fleet-epm-packages. operations: - method: GET name: getfleetepmpackages description: Get packages call: kibana-elastic-package-manager-epm.getfleetepmpackages with: category: rest.category prerelease: rest.prerelease excludeInstallStatus: rest.excludeInstallStatus withPackagePoliciesCount: rest.withPackagePoliciesCount outputParameters: - type: object mapping: $. - method: POST name: postfleetepmpackages description: Install a package by upload call: kibana-elastic-package-manager-epm.postfleetepmpackages with: kbn-xsrf: rest.kbn-xsrf ignoreMappingUpdateErrors: rest.ignoreMappingUpdateErrors skipDataStreamRollover: rest.skipDataStreamRollover body: rest.body outputParameters: - type: object mapping: $. - path: /v1/api/fleet/epm/packages/bulk name: api-fleet-epm-packages-bulk description: REST surface for api-fleet-epm-packages-_bulk. operations: - method: POST name: postfleetepmpackagesbulk description: Bulk install packages call: kibana-elastic-package-manager-epm.postfleetepmpackagesbulk with: kbn-xsrf: rest.kbn-xsrf prerelease: rest.prerelease body: rest.body outputParameters: - type: object mapping: $. - path: /v1/api/fleet/epm/packages/bulk-rollback name: api-fleet-epm-packages-bulk-rollback description: REST surface for api-fleet-epm-packages-_bulk_rollback. operations: - method: POST name: postfleetepmpackagesbulkrollback description: Bulk rollback packages call: kibana-elastic-package-manager-epm.postfleetepmpackagesbulkrollback with: kbn-xsrf: rest.kbn-xsrf body: rest.body outputParameters: - type: object mapping: $. - path: /v1/api/fleet/epm/packages/bulk-rollback/{taskid} name: api-fleet-epm-packages-bulk-rollback-taskid description: REST surface for api-fleet-epm-packages-_bulk_rollback-taskId. operations: - method: GET name: getfleetepmpackagesbulkrollbacktaskid description: Get Bulk rollback packages details call: kibana-elastic-package-manager-epm.getfleetepmpackagesbulkrollbacktaskid with: taskId: rest.taskId outputParameters: - type: object mapping: $. - path: /v1/api/fleet/epm/packages/bulk-uninstall name: api-fleet-epm-packages-bulk-uninstall description: REST surface for api-fleet-epm-packages-_bulk_uninstall. operations: - method: POST name: postfleetepmpackagesbulkuninstall description: Bulk uninstall packages call: kibana-elastic-package-manager-epm.postfleetepmpackagesbulkuninstall with: kbn-xsrf: rest.kbn-xsrf body: rest.body outputParameters: - type: object mapping: $. - path: /v1/api/fleet/epm/packages/bulk-uninstall/{taskid} name: api-fleet-epm-packages-bulk-uninstall-taskid description: REST surface for api-fleet-epm-packages-_bulk_uninstall-taskId. operations: - method: GET name: getfleetepmpackagesbulkuninstalltaskid description: Get Bulk uninstall packages details call: kibana-elastic-package-manager-epm.getfleetepmpackagesbulkuninstalltaskid with: taskId: rest.taskId outputParameters: - type: object mapping: $. - path: /v1/api/fleet/epm/packages/bulk-upgrade name: api-fleet-epm-packages-bulk-upgrade description: REST surface for api-fleet-epm-packages-_bulk_upgrade. operations: - method: POST name: postfleetepmpackagesbulkupgrade description: Bulk upgrade packages call: kibana-elastic-package-manager-epm.postfleetepmpackagesbulkupgrade with: kbn-xsrf: rest.kbn-xsrf body: rest.body outputParameters: - type: object mapping: $. - path: /v1/api/fleet/epm/packages/bulk-upgrade/{taskid} name: api-fleet-epm-packages-bulk-upgrade-taskid description: REST surface for api-fleet-epm-packages-_bulk_upgrade-taskId. operations: - method: GET name: getfleetepmpackagesbulkupgradetaskid description: Get Bulk upgrade packages details call: kibana-elastic-package-manager-epm.getfleetepmpackagesbulkupgradetaskid with: taskId: rest.taskId outputParameters: - type: object mapping: $. - path: /v1/api/fleet/epm/packages/installed name: api-fleet-epm-packages-installed description: REST surface for api-fleet-epm-packages-installed. operations: - method: GET name: getfleetepmpackagesinstalled description: Get installed packages call: kibana-elastic-package-manager-epm.getfleetepmpackagesinstalled with: dataStreamType: rest.dataStreamType showOnlyActiveDataStreams: rest.showOnlyActiveDataStreams nameQuery: rest.nameQuery searchAfter: rest.searchAfter perPage: rest.perPage sortOrder: rest.sortOrder outputParameters: - type: object mapping: $. - path: /v1/api/fleet/epm/packages/limited name: api-fleet-epm-packages-limited description: REST surface for api-fleet-epm-packages-limited. operations: - method: GET name: getfleetepmpackageslimited description: Get a limited package list call: kibana-elastic-package-manager-epm.getfleetepmpackageslimited outputParameters: - type: object mapping: $. - path: /v1/api/fleet/epm/packages/{pkgname} name: api-fleet-epm-packages-pkgname description: REST surface for api-fleet-epm-packages-pkgName. operations: - method: DELETE name: deletefleetepmpackagespkgname description: Delete a package call: kibana-elastic-package-manager-epm.deletefleetepmpackagespkgname with: kbn-xsrf: rest.kbn-xsrf pkgName: rest.pkgName force: rest.force outputParameters: - type: object mapping: $. - method: GET name: getfleetepmpackagespkgname description: Get a package call: kibana-elastic-package-manager-epm.getfleetepmpackagespkgname with: pkgName: rest.pkgName ignoreUnverified: rest.ignoreUnverified prerelease: rest.prerelease full: rest.full withMetadata: rest.withMetadata outputParameters: - type: object mapping: $. - method: POST name: postfleetepmpackagespkgname description: Install a package from the registry call: kibana-elastic-package-manager-epm.postfleetepmpackagespkgname with: kbn-xsrf: rest.kbn-xsrf pkgName: rest.pkgName prerelease: rest.prerelease ignoreMappingUpdateErrors: rest.ignoreMappingUpdateErrors skipDataStreamRollover: rest.skipDataStreamRollover skipDependencyCheck: rest.skipDependencyCheck body: rest.body outputParameters: - type: object mapping: $. - method: PUT name: putfleetepmpackagespkgname description: Update package settings call: kibana-elastic-package-manager-epm.putfleetepmpackagespkgname with: kbn-xsrf: rest.kbn-xsrf pkgName: rest.pkgName body: rest.body outputParameters: - type: object mapping: $. - path: /v1/api/fleet/epm/packages/{pkgname}/review-upgrade name: api-fleet-epm-packages-pkgname-review-upgrade description: REST surface for api-fleet-epm-packages-pkgName-review_upgrade. operations: - method: POST name: postfleetepmpackagespkgnamereviewupgrade description: Review a pending policy upgrade for a package with deprecations call: kibana-elastic-package-manager-epm.postfleetepmpackagespkgnamereviewupgrade with: kbn-xsrf: rest.kbn-xsrf pkgName: rest.pkgName body: rest.body outputParameters: - type: object mapping: $. - path: /v1/api/fleet/epm/packages/{pkgname}/rollback name: api-fleet-epm-packages-pkgname-rollback description: REST surface for api-fleet-epm-packages-pkgName-rollback. operations: - method: POST name: postfleetepmpackagespkgnamerollback description: Rollback a package to previous version call: kibana-elastic-package-manager-epm.postfleetepmpackagespkgnamerollback with: kbn-xsrf: rest.kbn-xsrf pkgName: rest.pkgName outputParameters: - type: object mapping: $. - path: /v1/api/fleet/epm/packages/{pkgname}/stats name: api-fleet-epm-packages-pkgname-stats description: REST surface for api-fleet-epm-packages-pkgName-stats. operations: - method: GET name: getfleetepmpackagespkgnamestats description: Get package stats call: kibana-elastic-package-manager-epm.getfleetepmpackagespkgnamestats with: pkgName: rest.pkgName outputParameters: - type: object mapping: $. - path: /v1/api/fleet/epm/packages/{pkgname}/{pkgversion} name: api-fleet-epm-packages-pkgname-pkgversion description: REST surface for api-fleet-epm-packages-pkgName-pkgVersion. operations: - method: DELETE name: deletefleetepmpackagespkgnamepkgversion description: Delete a package call: kibana-elastic-package-manager-epm.deletefleetepmpackagespkgnamepkgversion with: kbn-xsrf: rest.kbn-xsrf pkgName: rest.pkgName pkgVersion: rest.pkgVersion force: rest.force outputParameters: - type: object mapping: $. - method: GET name: getfleetepmpackagespkgnamepkgversion description: Get a package call: kibana-elastic-package-manager-epm.getfleetepmpackagespkgnamepkgversion with: pkgName: rest.pkgName pkgVersion: rest.pkgVersion ignoreUnverified: rest.ignoreUnverified prerelease: rest.prerelease full: rest.full withMetadata: rest.withMetadata outputParameters: - type: object mapping: $. - method: POST name: postfleetepmpackagespkgnamepkgversion description: Install a package from the registry call: kibana-elastic-package-manager-epm.postfleetepmpackagespkgnamepkgversion with: kbn-xsrf: rest.kbn-xsrf pkgName: rest.pkgName pkgVersion: rest.pkgVersion prerelease: rest.prerelease ignoreMappingUpdateErrors: rest.ignoreMappingUpdateErrors skipDataStreamRollover: rest.skipDataStreamRollover skipDependencyCheck: rest.skipDependencyCheck body: rest.body outputParameters: - type: object mapping: $. - method: PUT name: putfleetepmpackagespkgnamepkgversion description: Update package settings call: kibana-elastic-package-manager-epm.putfleetepmpackagespkgnamepkgversion with: kbn-xsrf: rest.kbn-xsrf pkgName: rest.pkgName pkgVersion: rest.pkgVersion body: rest.body outputParameters: - type: object mapping: $. - path: /v1/api/fleet/epm/packages/{pkgname}/{pkgversion}/datastream-assets name: api-fleet-epm-packages-pkgname-pkgversion-datastream-assets description: REST surface for api-fleet-epm-packages-pkgName-pkgVersion-datastream_assets. operations: - method: DELETE name: deletefleetepmpackagespkgnamepkgversiondatastreamassets description: Delete assets for an input package call: kibana-elastic-package-manager-epm.deletefleetepmpackagespkgnamepkgversiondatastreamassets with: kbn-xsrf: rest.kbn-xsrf pkgName: rest.pkgName pkgVersion: rest.pkgVersion packagePolicyId: rest.packagePolicyId outputParameters: - type: object mapping: $. - path: /v1/api/fleet/epm/packages/{pkgname}/{pkgversion}/dependencies name: api-fleet-epm-packages-pkgname-pkgversion-dependencies description: REST surface for api-fleet-epm-packages-pkgName-pkgVersion-dependencies. operations: - method: GET name: getfleetepmpackagespkgnamepkgversiondependencies description: Get package dependencies call: kibana-elastic-package-manager-epm.getfleetepmpackagespkgnamepkgversiondependencies with: pkgName: rest.pkgName pkgVersion: rest.pkgVersion outputParameters: - type: object mapping: $. - path: /v1/api/fleet/epm/packages/{pkgname}/{pkgversion}/kibana-assets name: api-fleet-epm-packages-pkgname-pkgversion-kibana-assets description: REST surface for api-fleet-epm-packages-pkgName-pkgVersion-kibana_assets. operations: - method: DELETE name: deletefleetepmpackagespkgnamepkgversionkibanaassets description: Delete Kibana assets for a package call: kibana-elastic-package-manager-epm.deletefleetepmpackagespkgnamepkgversionkibanaassets with: kbn-xsrf: rest.kbn-xsrf pkgName: rest.pkgName pkgVersion: rest.pkgVersion outputParameters: - type: object mapping: $. - method: POST name: postfleetepmpackagespkgnamepkgversionkibanaassets description: Install Kibana assets for a package call: kibana-elastic-package-manager-epm.postfleetepmpackagespkgnamepkgversionkibanaassets with: kbn-xsrf: rest.kbn-xsrf pkgName: rest.pkgName pkgVersion: rest.pkgVersion body: rest.body outputParameters: - type: object mapping: $. - path: /v1/api/fleet/epm/packages/{pkgname}/{pkgversion}/rule-assets name: api-fleet-epm-packages-pkgname-pkgversion-rule-assets description: REST surface for api-fleet-epm-packages-pkgName-pkgVersion-rule_assets. operations: - method: POST name: postfleetepmpackagespkgnamepkgversionruleassets description: Install Kibana alert rule for a package call: kibana-elastic-package-manager-epm.postfleetepmpackagespkgnamepkgversionruleassets with: kbn-xsrf: rest.kbn-xsrf pkgName: rest.pkgName pkgVersion: rest.pkgVersion body: rest.body outputParameters: - type: object mapping: $. - path: /v1/api/fleet/epm/packages/{pkgname}/{pkgversion}/transforms/authorize name: api-fleet-epm-packages-pkgname-pkgversion-transforms-authorize description: REST surface for api-fleet-epm-packages-pkgName-pkgVersion-transforms-authorize. operations: - method: POST name: postfleetepmpackagespkgnamepkgversiontransformsauthorize description: Authorize transforms call: kibana-elastic-package-manager-epm.postfleetepmpackagespkgnamepkgversiontransformsauthorize with: kbn-xsrf: rest.kbn-xsrf pkgName: rest.pkgName pkgVersion: rest.pkgVersion prerelease: rest.prerelease body: rest.body outputParameters: - type: object mapping: $. - path: /v1/api/fleet/epm/packages/{pkgname}/{pkgversion}/{filepath} name: api-fleet-epm-packages-pkgname-pkgversion-filepath description: REST surface for api-fleet-epm-packages-pkgName-pkgVersion-filePath. operations: - method: GET name: getfleetepmpackagespkgnamepkgversionfilepath description: Get a package file call: kibana-elastic-package-manager-epm.getfleetepmpackagespkgnamepkgversionfilepath with: pkgName: rest.pkgName pkgVersion: rest.pkgVersion filePath: rest.filePath outputParameters: - type: object mapping: $. - path: /v1/api/fleet/epm/templates/{pkgname}/{pkgversion}/inputs name: api-fleet-epm-templates-pkgname-pkgversion-inputs description: REST surface for api-fleet-epm-templates-pkgName-pkgVersion-inputs. operations: - method: GET name: getfleetepmtemplatespkgnamepkgversioninputs description: Get an inputs template call: kibana-elastic-package-manager-epm.getfleetepmtemplatespkgnamepkgversioninputs with: pkgName: rest.pkgName pkgVersion: rest.pkgVersion format: rest.format prerelease: rest.prerelease ignoreUnverified: rest.ignoreUnverified outputParameters: - type: object mapping: $. - path: /v1/api/fleet/epm/verification-key-id name: api-fleet-epm-verification-key-id description: REST surface for api-fleet-epm-verification_key_id. operations: - method: GET name: getfleetepmverificationkeyid description: Get a package signature verification key ID call: kibana-elastic-package-manager-epm.getfleetepmverificationkeyid outputParameters: - type: object mapping: $. - type: mcp namespace: kibana-elastic-package-manager-epm-mcp port: 9090 transport: http description: MCP adapter for Kibana APIs — Elastic Package Manager (EPM). One tool per consumed operation, routed inline through this capability's consumes block. tools: - name: bulk-get-assets description: Bulk get assets hints: readOnly: true destructive: false idempotent: false call: kibana-elastic-package-manager-epm.postfleetepmbulkassets with: kbn-xsrf: tools.kbn-xsrf body: tools.body outputParameters: - type: object mapping: $. - name: get-package-categories description: Get package categories hints: readOnly: true destructive: false idempotent: true call: kibana-elastic-package-manager-epm.getfleetepmcategories with: prerelease: tools.prerelease include_policy_templates: tools.include_policy_templates outputParameters: - type: object mapping: $. - name: create-custom-integration description: Create a custom integration hints: readOnly: false destructive: false idempotent: false call: kibana-elastic-package-manager-epm.postfleetepmcustomintegrations with: kbn-xsrf: tools.kbn-xsrf body: tools.body outputParameters: - type: object mapping: $. - name: update-custom-integration description: Update a custom integration hints: readOnly: false destructive: false idempotent: true call: kibana-elastic-package-manager-epm.putfleetepmcustomintegrationspkgname with: kbn-xsrf: tools.kbn-xsrf pkgName: tools.pkgName body: tools.body outputParameters: - type: object mapping: $. - name: get-packages description: Get packages hints: readOnly: true destructive: false idempotent: true call: kibana-elastic-package-manager-epm.getfleetepmpackages with: category: tools.category prerelease: tools.prerelease excludeInstallStatus: tools.excludeInstallStatus withPackagePoliciesCount: tools.withPackagePoliciesCount outputParameters: - type: object mapping: $. - name: install-package-upload description: Install a package by upload hints: readOnly: false destructive: false idempotent: false call: kibana-elastic-package-manager-epm.postfleetepmpackages with: kbn-xsrf: tools.kbn-xsrf ignoreMappingUpdateErrors: tools.ignoreMappingUpdateErrors skipDataStreamRollover: tools.skipDataStreamRollover body: tools.body outputParameters: - type: object mapping: $. - name: bulk-install-packages description: Bulk install packages hints: readOnly: false destructive: false idempotent: false call: kibana-elastic-package-manager-epm.postfleetepmpackagesbulk with: kbn-xsrf: tools.kbn-xsrf prerelease: tools.prerelease body: tools.body outputParameters: - type: object mapping: $. - name: bulk-rollback-packages description: Bulk rollback packages hints: readOnly: false destructive: false idempotent: false call: kibana-elastic-package-manager-epm.postfleetepmpackagesbulkrollback with: kbn-xsrf: tools.kbn-xsrf body: tools.body outputParameters: - type: object mapping: $. - name: get-bulk-rollback-packages-details description: Get Bulk rollback packages details hints: readOnly: true destructive: false idempotent: true call: kibana-elastic-package-manager-epm.getfleetepmpackagesbulkrollbacktaskid with: taskId: tools.taskId outputParameters: - type: object mapping: $. - name: bulk-uninstall-packages description: Bulk uninstall packages hints: readOnly: false destructive: false idempotent: false call: kibana-elastic-package-manager-epm.postfleetepmpackagesbulkuninstall with: kbn-xsrf: tools.kbn-xsrf body: tools.body outputParameters: - type: object mapping: $. - name: get-bulk-uninstall-packages-details description: Get Bulk uninstall packages details hints: readOnly: true destructive: false idempotent: true call: kibana-elastic-package-manager-epm.getfleetepmpackagesbulkuninstalltaskid with: taskId: tools.taskId outputParameters: - type: object mapping: $. - name: bulk-upgrade-packages description: Bulk upgrade packages hints: readOnly: false destructive: false idempotent: false call: kibana-elastic-package-manager-epm.postfleetepmpackagesbulkupgrade with: kbn-xsrf: tools.kbn-xsrf body: tools.body outputParameters: - type: object mapping: $. - name: get-bulk-upgrade-packages-details description: Get Bulk upgrade packages details hints: readOnly: true destructive: false idempotent: true call: kibana-elastic-package-manager-epm.getfleetepmpackagesbulkupgradetaskid with: taskId: tools.taskId outputParameters: - type: object mapping: $. - name: get-installed-packages description: Get installed packages hints: readOnly: true destructive: false idempotent: true call: kibana-elastic-package-manager-epm.getfleetepmpackagesinstalled with: dataStreamType: tools.dataStreamType showOnlyActiveDataStreams: tools.showOnlyActiveDataStreams nameQuery: tools.nameQuery searchAfter: tools.searchAfter perPage: tools.perPage sortOrder: tools.sortOrder outputParameters: - type: object mapping: $. - name: get-limited-package-list description: Get a limited package list hints: readOnly: true destructive: false idempotent: true call: kibana-elastic-package-manager-epm.getfleetepmpackageslimited outputParameters: - type: object mapping: $. - name: delete-package description: Delete a package hints: readOnly: false destructive: true idempotent: true call: kibana-elastic-package-manager-epm.deletefleetepmpackagespkgname with: kbn-xsrf: tools.kbn-xsrf pkgName: tools.pkgName force: tools.force outputParameters: - type: object mapping: $. - name: get-package description: Get a package hints: readOnly: true destructive: false idempotent: true call: kibana-elastic-package-manager-epm.getfleetepmpackagespkgname with: pkgName: tools.pkgName ignoreUnverified: tools.ignoreUnverified prerelease: tools.prerelease full: tools.full withMetadata: tools.withMetadata outputParameters: - type: object mapping: $. - name: install-package-registry description: Install a package from the registry hints: readOnly: false destructive: false idempotent: false call: kibana-elastic-package-manager-epm.postfleetepmpackagespkgname with: kbn-xsrf: tools.kbn-xsrf pkgName: tools.pkgName prerelease: tools.prerelease ignoreMappingUpdateErrors: tools.ignoreMappingUpdateErrors skipDataStreamRollover: tools.skipDataStreamRollover skipDependencyCheck: tools.skipDependencyCheck body: tools.body outputParameters: - type: object mapping: $. - name: update-package-settings description: Update package settings hints: readOnly: false destructive: false idempotent: true call: kibana-elastic-package-manager-epm.putfleetepmpackagespkgname with: kbn-xsrf: tools.kbn-xsrf pkgName: tools.pkgName body: tools.body outputParameters: - type: object mapping: $. - name: review-pending-policy-upgrade-package description: Review a pending policy upgrade for a package with deprecations hints: readOnly: false destructive: false idempotent: false call: kibana-elastic-package-manager-epm.postfleetepmpackagespkgnamereviewupgrade with: kbn-xsrf: tools.kbn-xsrf pkgName: tools.pkgName body: tools.body outputParameters: - type: object mapping: $. - name: rollback-package-previous-version description: Rollback a package to previous version hints: readOnly: false destructive: false idempotent: false call: kibana-elastic-package-manager-epm.postfleetepmpackagespkgnamerollback with: kbn-xsrf: tools.kbn-xsrf pkgName: tools.pkgName outputParameters: - type: object mapping: $. - name: get-package-stats description: Get package stats hints: readOnly: true destructive: false idempotent: true call: kibana-elastic-package-manager-epm.getfleetepmpackagespkgnamestats with: pkgName: tools.pkgName outputParameters: - type: object mapping: $. - name: delete-package-2 description: Delete a package hints: readOnly: false destructive: true idempotent: true call: kibana-elastic-package-manager-epm.deletefleetepmpackagespkgnamepkgversion with: kbn-xsrf: tools.kbn-xsrf pkgName: tools.pkgName pkgVersion: tools.pkgVersion force: tools.force outputParameters: - type: object mapping: $. - name: get-package-2 description: Get a package hints: readOnly: true destructive: false idempotent: true call: kibana-elastic-package-manager-epm.getfleetepmpackagespkgnamepkgversion with: pkgName: tools.pkgName pkgVersion: tools.pkgVersion ignoreUnverified: tools.ignoreUnverified prerelease: tools.prerelease full: tools.full withMetadata: tools.withMetadata outputParameters: - type: object mapping: $. - name: install-package-registry-2 description: Install a package from the registry hints: readOnly: false destructive: false idempotent: false call: kibana-elastic-package-manager-epm.postfleetepmpackagespkgnamepkgversion with: kbn-xsrf: tools.kbn-xsrf pkgName: tools.pkgName pkgVersion: tools.pkgVersion prerelease: tools.prerelease ignoreMappingUpdateErrors: tools.ignoreMappingUpdateErrors skipDataStreamRollover: tools.skipDataStreamRollover skipDependencyCheck: tools.skipDependencyCheck body: tools.body outputParameters: - type: object mapping: $. - name: update-package-settings-2 description: Update package settings hints: readOnly: false destructive: false idempotent: true call: kibana-elastic-package-manager-epm.putfleetepmpackagespkgnamepkgversion with: kbn-xsrf: tools.kbn-xsrf pkgName: tools.pkgName pkgVersion: tools.pkgVersion body: tools.body outputParameters: - type: object mapping: $. - name: delete-assets-input-package description: Delete assets for an input package hints: readOnly: false destructive: true idempotent: true call: kibana-elastic-package-manager-epm.deletefleetepmpackagespkgnamepkgversiondatastreamassets with: kbn-xsrf: tools.kbn-xsrf pkgName: tools.pkgName pkgVersion: tools.pkgVersion packagePolicyId: tools.packagePolicyId outputParameters: - type: object mapping: $. - name: get-package-dependencies description: Get package dependencies hints: readOnly: true destructive: false idempotent: true call: kibana-elastic-package-manager-epm.getfleetepmpackagespkgnamepkgversiondependencies with: pkgName: tools.pkgName pkgVersion: tools.pkgVersion outputParameters: - type: object mapping: $. - name: delete-kibana-assets-package description: Delete Kibana assets for a package hints: readOnly: false destructive: true idempotent: true call: kibana-elastic-package-manager-epm.deletefleetepmpackagespkgnamepkgversionkibanaassets with: kbn-xsrf: tools.kbn-xsrf pkgName: tools.pkgName pkgVersion: tools.pkgVersion outputParameters: - type: object mapping: $. - name: install-kibana-assets-package description: Install Kibana assets for a package hints: readOnly: false destructive: false idempotent: false call: kibana-elastic-package-manager-epm.postfleetepmpackagespkgnamepkgversionkibanaassets with: kbn-xsrf: tools.kbn-xsrf pkgName: tools.pkgName pkgVersion: tools.pkgVersion body: tools.body outputParameters: - type: object mapping: $. - name: install-kibana-alert-rule-package description: Install Kibana alert rule for a package hints: readOnly: false destructive: false idempotent: false call: kibana-elastic-package-manager-epm.postfleetepmpackagespkgnamepkgversionruleassets with: kbn-xsrf: tools.kbn-xsrf pkgName: tools.pkgName pkgVersion: tools.pkgVersion body: tools.body outputParameters: - type: object mapping: $. - name: authorize-transforms description: Authorize transforms hints: readOnly: false destructive: false idempotent: false call: kibana-elastic-package-manager-epm.postfleetepmpackagespkgnamepkgversiontransformsauthorize with: kbn-xsrf: tools.kbn-xsrf pkgName: tools.pkgName pkgVersion: tools.pkgVersion prerelease: tools.prerelease body: tools.body outputParameters: - type: object mapping: $. - name: get-package-file description: Get a package file hints: readOnly: true destructive: false idempotent: true call: kibana-elastic-package-manager-epm.getfleetepmpackagespkgnamepkgversionfilepath with: pkgName: tools.pkgName pkgVersion: tools.pkgVersion filePath: tools.filePath outputParameters: - type: object mapping: $. - name: get-inputs-template description: Get an inputs template hints: readOnly: true destructive: false idempotent: true call: kibana-elastic-package-manager-epm.getfleetepmtemplatespkgnamepkgversioninputs with: pkgName: tools.pkgName pkgVersion: tools.pkgVersion format: tools.format prerelease: tools.prerelease ignoreUnverified: tools.ignoreUnverified outputParameters: - type: object mapping: $. - name: get-package-signature-verification-key description: Get a package signature verification key ID hints: readOnly: true destructive: false idempotent: true call: kibana-elastic-package-manager-epm.getfleetepmverificationkeyid outputParameters: - type: object mapping: $.