naftiko: 1.0.0-alpha2
info:
  label: Microsoft Azure AttestationClient — Attestation
  description: 'Microsoft Azure AttestationClient — Attestation. 4 operations. Lead operation: Microsoft Azure Attest To An
    Sgx Enclave. Self-contained Naftiko capability covering one Microsoft Azure business surface.'
  tags:
  - Microsoft Azure
  - Attestation
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    MICROSOFT_AZURE_API_KEY: MICROSOFT_AZURE_API_KEY
capability:
  consumes:
  - type: http
    namespace: attestationclient-attestation
    baseUri: ''
    description: Microsoft Azure AttestationClient — Attestation business capability. Self-contained, no shared references.
    resources:
    - name: attest-OpenEnclave
      path: /attest/OpenEnclave
      operations:
      - name: microsoftazureattestationattestopenenclave
        method: POST
        description: Microsoft Azure Attest To An Sgx Enclave
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: request
          in: body
          type: string
          description: Request object containing the quote
          required: true
    - name: attest-SevSnpVm
      path: /attest/SevSnpVm
      operations:
      - name: microsoftazureattestationattestsevsnpvm
        method: POST
        description: Microsoft Azure Attest To An Sev Snp Virtual Machine
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: request
          in: body
          type: string
          description: Request object containing the quote
          required: true
    - name: attest-SgxEnclave
      path: /attest/SgxEnclave
      operations:
      - name: microsoftazureattestationattestsgxenclave
        method: POST
        description: Microsoft Azure Attest To An Sgx Enclave
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: request
          in: body
          type: string
          description: Request object containing the quote
          required: true
    - name: attest-Tpm
      path: /attest/Tpm
      operations:
      - name: microsoftazureattestationattesttpm
        method: POST
        description: Microsoft Azure Attest A Virtualization Based Security Vbs Enclave
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: request
          in: body
          type: string
          description: Request object
          required: true
  exposes:
  - type: rest
    namespace: attestationclient-attestation-rest
    port: 8080
    description: REST adapter for Microsoft Azure AttestationClient — Attestation. One Spectral-compliant resource per consumed
      operation, prefixed with /v1.
    resources:
    - path: /v1/attest/openenclave
      name: attest-openenclave
      description: REST surface for attest-OpenEnclave.
      operations:
      - method: POST
        name: microsoftazureattestationattestopenenclave
        description: Microsoft Azure Attest To An Sgx Enclave
        call: attestationclient-attestation.microsoftazureattestationattestopenenclave
        with:
          request: rest.request
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/attest/sevsnpvm
      name: attest-sevsnpvm
      description: REST surface for attest-SevSnpVm.
      operations:
      - method: POST
        name: microsoftazureattestationattestsevsnpvm
        description: Microsoft Azure Attest To An Sev Snp Virtual Machine
        call: attestationclient-attestation.microsoftazureattestationattestsevsnpvm
        with:
          request: rest.request
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/attest/sgxenclave
      name: attest-sgxenclave
      description: REST surface for attest-SgxEnclave.
      operations:
      - method: POST
        name: microsoftazureattestationattestsgxenclave
        description: Microsoft Azure Attest To An Sgx Enclave
        call: attestationclient-attestation.microsoftazureattestationattestsgxenclave
        with:
          request: rest.request
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/attest/tpm
      name: attest-tpm
      description: REST surface for attest-Tpm.
      operations:
      - method: POST
        name: microsoftazureattestationattesttpm
        description: Microsoft Azure Attest A Virtualization Based Security Vbs Enclave
        call: attestationclient-attestation.microsoftazureattestationattesttpm
        with:
          request: rest.request
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: attestationclient-attestation-mcp
    port: 9090
    transport: http
    description: MCP adapter for Microsoft Azure AttestationClient — Attestation. One tool per consumed operation, routed
      inline through this capability's consumes block.
    tools:
    - name: microsoft-azure-attest-sgx-enclave
      description: Microsoft Azure Attest To An Sgx Enclave
      hints:
        readOnly: true
        destructive: false
        idempotent: false
      call: attestationclient-attestation.microsoftazureattestationattestopenenclave
      with:
        request: tools.request
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-azure-attest-sev-snp
      description: Microsoft Azure Attest To An Sev Snp Virtual Machine
      hints:
        readOnly: true
        destructive: false
        idempotent: false
      call: attestationclient-attestation.microsoftazureattestationattestsevsnpvm
      with:
        request: tools.request
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-azure-attest-sgx-enclave-2
      description: Microsoft Azure Attest To An Sgx Enclave
      hints:
        readOnly: true
        destructive: false
        idempotent: false
      call: attestationclient-attestation.microsoftazureattestationattestsgxenclave
      with:
        request: tools.request
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-azure-attest-virtualization-based
      description: Microsoft Azure Attest A Virtualization Based Security Vbs Enclave
      hints:
        readOnly: true
        destructive: false
        idempotent: false
      call: attestationclient-attestation.microsoftazureattestationattesttpm
      with:
        request: tools.request
      outputParameters:
      - type: object
        mapping: $.