naftiko: 1.0.0-alpha2
info:
  label: Microsoft Azure AttestationClient — OpenID Metadata Discovery
  description: 'Microsoft Azure AttestationClient — OpenID Metadata Discovery. 2 operations. Lead operation: Microsoft Azure
    Retrieves The Openid Configuration Data For The Azure Attestation Service. Self-contained Naftiko capability covering
    one Microsoft Azure business surface.'
  tags:
  - Microsoft Azure
  - OpenID Metadata Discovery
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    MICROSOFT_AZURE_API_KEY: MICROSOFT_AZURE_API_KEY
capability:
  consumes:
  - type: http
    namespace: attestationclient-openid-metadata-discovery
    baseUri: ''
    description: Microsoft Azure AttestationClient — OpenID Metadata Discovery business capability. Self-contained, no shared
      references.
    resources:
    - name: .well-known-openid-configuration
      path: /.well-known/openid-configuration
      operations:
      - name: microsoftazuremetadataconfigurationget
        method: GET
        description: Microsoft Azure Retrieves The Openid Configuration Data For The Azure Attestation Service
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: certs
      path: /certs
      operations:
      - name: microsoftazuresigningcertificatesget
        method: GET
        description: Microsoft Azure Retrieves The Attestation Signing Keys In Use By The Attestation Service
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
  exposes:
  - type: rest
    namespace: attestationclient-openid-metadata-discovery-rest
    port: 8080
    description: REST adapter for Microsoft Azure AttestationClient — OpenID Metadata Discovery. One Spectral-compliant resource
      per consumed operation, prefixed with /v1.
    resources:
    - path: /v1/well-known/openid-configuration
      name: well-known-openid-configuration
      description: REST surface for .well-known-openid-configuration.
      operations:
      - method: GET
        name: microsoftazuremetadataconfigurationget
        description: Microsoft Azure Retrieves The Openid Configuration Data For The Azure Attestation Service
        call: attestationclient-openid-metadata-discovery.microsoftazuremetadataconfigurationget
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/certs
      name: certs
      description: REST surface for certs.
      operations:
      - method: GET
        name: microsoftazuresigningcertificatesget
        description: Microsoft Azure Retrieves The Attestation Signing Keys In Use By The Attestation Service
        call: attestationclient-openid-metadata-discovery.microsoftazuresigningcertificatesget
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: attestationclient-openid-metadata-discovery-mcp
    port: 9090
    transport: http
    description: MCP adapter for Microsoft Azure AttestationClient — OpenID Metadata Discovery. One tool per consumed operation,
      routed inline through this capability's consumes block.
    tools:
    - name: microsoft-azure-retrieves-openid-configuration
      description: Microsoft Azure Retrieves The Openid Configuration Data For The Azure Attestation Service
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: attestationclient-openid-metadata-discovery.microsoftazuremetadataconfigurationget
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-azure-retrieves-attestation-signing
      description: Microsoft Azure Retrieves The Attestation Signing Keys In Use By The Attestation Service
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: attestationclient-openid-metadata-discovery.microsoftazuresigningcertificatesget
      outputParameters:
      - type: object
        mapping: $.