naftiko: 1.0.0-alpha2 info: label: McAfee ESM API — Cases description: 'McAfee ESM API — Cases. 2 operations. Lead operation: McAfee Create a new case. Self-contained Naftiko capability covering one Mcafee business surface.' tags: - Mcafee - Cases created: '2026-05-19' modified: '2026-05-19' binds: - namespace: env keys: MCAFEE_API_KEY: MCAFEE_API_KEY capability: consumes: - type: http namespace: esm-cases baseUri: https://{esm-server}/rs/esm description: McAfee ESM API — Cases business capability. Self-contained, no shared references. resources: - name: v2-caseAddCase path: /v2/caseAddCase operations: - name: addcase method: POST description: McAfee Create a new case outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: true - name: v2-caseGetCaseList path: /v2/caseGetCaseList operations: - name: getcases method: POST description: McAfee List incident cases outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false authentication: type: apikey key: JWTToken value: '{{env.MCAFEE_API_KEY}}' placement: cookie exposes: - type: rest namespace: esm-cases-rest port: 8080 description: REST adapter for McAfee ESM API — Cases. One Spectral-compliant resource per consumed operation, prefixed with /v1. resources: - path: /v1/v2/caseaddcase name: v2-caseaddcase description: REST surface for v2-caseAddCase. operations: - method: POST name: addcase description: McAfee Create a new case call: esm-cases.addcase with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/v2/casegetcaselist name: v2-casegetcaselist description: REST surface for v2-caseGetCaseList. operations: - method: POST name: getcases description: McAfee List incident cases call: esm-cases.getcases with: body: rest.body outputParameters: - type: object mapping: $. - type: mcp namespace: esm-cases-mcp port: 9090 transport: http description: MCP adapter for McAfee ESM API — Cases. One tool per consumed operation, routed inline through this capability's consumes block. tools: - name: mcafee-create-new-case description: McAfee Create a new case hints: readOnly: false destructive: false idempotent: false call: esm-cases.addcase with: body: tools.body outputParameters: - type: object mapping: $. - name: mcafee-list-incident-cases description: McAfee List incident cases hints: readOnly: true destructive: false idempotent: false call: esm-cases.getcases with: body: tools.body outputParameters: - type: object mapping: $.