naftiko: 1.0.0-alpha2
info:
  label: Microsoft Azure BatchService — Certificates
  description: 'Microsoft Azure BatchService — Certificates. 5 operations. Lead operation: Microsoft Azure Adds A Certificate
    To The Specified Account. Self-contained Naftiko capability covering one Microsoft Azure business surface.'
  tags:
  - Microsoft Azure
  - Certificates
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    MICROSOFT_AZURE_API_KEY: MICROSOFT_AZURE_API_KEY
capability:
  consumes:
  - type: http
    namespace: batchservice-certificates
    baseUri: ''
    description: Microsoft Azure BatchService — Certificates business capability. Self-contained, no shared references.
    resources:
    - name: certificates
      path: /certificates
      operations:
      - name: microsoftazurecertificateadd
        method: POST
        description: Microsoft Azure Adds A Certificate To The Specified Account
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: certificate
          in: body
          type: string
          description: The Certificate to be added.
          required: true
        - name: timeout
          in: query
          type: integer
          description: The maximum time that the server can spend processing the request, in seconds. The default is 30 seconds.
        - name: client-request-id
          in: header
          type: string
          description: The caller-generated request identity, in the form of a GUID with no decoration such as curly braces,
            e.g. 9C4D50EE-2D56-4CD3-8152-34347DC9F2B0.
        - name: return-client-request-id
          in: header
          type: boolean
          description: Whether the server should return the client-request-id in the response.
        - name: ocp-date
          in: header
          type: string
          description: The time the request was issued. Client libraries typically set this to the current system clock time;
            set it explicitly if you are calling the REST API directl
      - name: microsoftazurecertificatelist
        method: GET
        description: Microsoft Azure Lists All Of The Certificates That Have Been Added To The Specified Account
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: $filter
          in: query
          type: string
          description: An OData $filter clause. For more information on constructing this filter, see https://docs.microsoft.com/en-us/rest/api/batchservice/odata-filters-in-batch#lis
        - name: $select
          in: query
          type: string
          description: An OData $select clause.
        - name: maxresults
          in: query
          type: integer
          description: The maximum number of items to return in the response. A maximum of 1000 Certificates can be returned.
        - name: timeout
          in: query
          type: integer
          description: The maximum time that the server can spend processing the request, in seconds. The default is 30 seconds.
        - name: client-request-id
          in: header
          type: string
          description: The caller-generated request identity, in the form of a GUID with no decoration such as curly braces,
            e.g. 9C4D50EE-2D56-4CD3-8152-34347DC9F2B0.
        - name: return-client-request-id
          in: header
          type: boolean
          description: Whether the server should return the client-request-id in the response.
        - name: ocp-date
          in: header
          type: string
          description: The time the request was issued. Client libraries typically set this to the current system clock time;
            set it explicitly if you are calling the REST API directl
    - name: certificates(thumbprintAlgorithm={thumbprintAlgorithm},thumbprint={thumbprint})
      path: /certificates(thumbprintAlgorithm={thumbprintAlgorithm},thumbprint={thumbprint})
      operations:
      - name: microsoftazurecertificatedelete
        method: DELETE
        description: Microsoft Azure Deletes A Certificate From The Specified Account
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: thumbprintAlgorithm
          in: path
          type: string
          description: The algorithm used to derive the thumbprint parameter. This must be sha1.
          required: true
        - name: thumbprint
          in: path
          type: string
          description: The thumbprint of the Certificate to be deleted.
          required: true
        - name: timeout
          in: query
          type: integer
          description: The maximum time that the server can spend processing the request, in seconds. The default is 30 seconds.
        - name: client-request-id
          in: header
          type: string
          description: The caller-generated request identity, in the form of a GUID with no decoration such as curly braces,
            e.g. 9C4D50EE-2D56-4CD3-8152-34347DC9F2B0.
        - name: return-client-request-id
          in: header
          type: boolean
          description: Whether the server should return the client-request-id in the response.
        - name: ocp-date
          in: header
          type: string
          description: The time the request was issued. Client libraries typically set this to the current system clock time;
            set it explicitly if you are calling the REST API directl
      - name: microsoftazurecertificateget
        method: GET
        description: Microsoft Azure Get Certificates Thumbprintalgorithm Thumbprintalgorithm,thumbprint Thumbprint
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: thumbprintAlgorithm
          in: path
          type: string
          description: The algorithm used to derive the thumbprint parameter. This must be sha1.
          required: true
        - name: thumbprint
          in: path
          type: string
          description: The thumbprint of the Certificate to get.
          required: true
        - name: $select
          in: query
          type: string
          description: An OData $select clause.
        - name: timeout
          in: query
          type: integer
          description: The maximum time that the server can spend processing the request, in seconds. The default is 30 seconds.
        - name: client-request-id
          in: header
          type: string
          description: The caller-generated request identity, in the form of a GUID with no decoration such as curly braces,
            e.g. 9C4D50EE-2D56-4CD3-8152-34347DC9F2B0.
        - name: return-client-request-id
          in: header
          type: boolean
          description: Whether the server should return the client-request-id in the response.
        - name: ocp-date
          in: header
          type: string
          description: The time the request was issued. Client libraries typically set this to the current system clock time;
            set it explicitly if you are calling the REST API directl
    - name: certificates(thumbprintAlgorithm={thumbprintAlgorithm},thumbprint={thumbprint})-
      path: /certificates(thumbprintAlgorithm={thumbprintAlgorithm},thumbprint={thumbprint})/canceldelete
      operations:
      - name: microsoftazurecertificatecanceldeletion
        method: POST
        description: Microsoft Azure Cancels A Failed Deletion Of A Certificate From The Specified Account
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: thumbprintAlgorithm
          in: path
          type: string
          description: The algorithm used to derive the thumbprint parameter. This must be sha1.
          required: true
        - name: thumbprint
          in: path
          type: string
          description: The thumbprint of the Certificate being deleted.
          required: true
        - name: timeout
          in: query
          type: integer
          description: The maximum time that the server can spend processing the request, in seconds. The default is 30 seconds.
        - name: client-request-id
          in: header
          type: string
          description: The caller-generated request identity, in the form of a GUID with no decoration such as curly braces,
            e.g. 9C4D50EE-2D56-4CD3-8152-34347DC9F2B0.
        - name: return-client-request-id
          in: header
          type: boolean
          description: Whether the server should return the client-request-id in the response.
        - name: ocp-date
          in: header
          type: string
          description: The time the request was issued. Client libraries typically set this to the current system clock time;
            set it explicitly if you are calling the REST API directl
  exposes:
  - type: rest
    namespace: batchservice-certificates-rest
    port: 8080
    description: REST adapter for Microsoft Azure BatchService — Certificates. One Spectral-compliant resource per consumed
      operation, prefixed with /v1.
    resources:
    - path: /v1/certificates
      name: certificates
      description: REST surface for certificates.
      operations:
      - method: POST
        name: microsoftazurecertificateadd
        description: Microsoft Azure Adds A Certificate To The Specified Account
        call: batchservice-certificates.microsoftazurecertificateadd
        with:
          certificate: rest.certificate
          timeout: rest.timeout
          client-request-id: rest.client-request-id
          return-client-request-id: rest.return-client-request-id
          ocp-date: rest.ocp-date
        outputParameters:
        - type: object
          mapping: $.
      - method: GET
        name: microsoftazurecertificatelist
        description: Microsoft Azure Lists All Of The Certificates That Have Been Added To The Specified Account
        call: batchservice-certificates.microsoftazurecertificatelist
        with:
          $filter: rest.$filter
          $select: rest.$select
          maxresults: rest.maxresults
          timeout: rest.timeout
          client-request-id: rest.client-request-id
          return-client-request-id: rest.return-client-request-id
          ocp-date: rest.ocp-date
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/certificates-thumbprintalgorithm-thumbprintalgorithm-thumbprint-thumbprint
      name: certificates-thumbprintalgorithm-thumbprintalgorithm-thumbprint-thumbprint
      description: REST surface for certificates(thumbprintAlgorithm={thumbprintAlgorithm},thumbprint={thumbprint}).
      operations:
      - method: DELETE
        name: microsoftazurecertificatedelete
        description: Microsoft Azure Deletes A Certificate From The Specified Account
        call: batchservice-certificates.microsoftazurecertificatedelete
        with:
          thumbprintAlgorithm: rest.thumbprintAlgorithm
          thumbprint: rest.thumbprint
          timeout: rest.timeout
          client-request-id: rest.client-request-id
          return-client-request-id: rest.return-client-request-id
          ocp-date: rest.ocp-date
        outputParameters:
        - type: object
          mapping: $.
      - method: GET
        name: microsoftazurecertificateget
        description: Microsoft Azure Get Certificates Thumbprintalgorithm Thumbprintalgorithm,thumbprint Thumbprint
        call: batchservice-certificates.microsoftazurecertificateget
        with:
          thumbprintAlgorithm: rest.thumbprintAlgorithm
          thumbprint: rest.thumbprint
          $select: rest.$select
          timeout: rest.timeout
          client-request-id: rest.client-request-id
          return-client-request-id: rest.return-client-request-id
          ocp-date: rest.ocp-date
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/certificates-thumbprintalgorithm-thumbprintalgorithm-thumbprint-thumbprint/canceldelete
      name: certificates-thumbprintalgorithm-thumbprintalgorithm-thumbprint-thumbprint
      description: REST surface for certificates(thumbprintAlgorithm={thumbprintAlgorithm},thumbprint={thumbprint})-.
      operations:
      - method: POST
        name: microsoftazurecertificatecanceldeletion
        description: Microsoft Azure Cancels A Failed Deletion Of A Certificate From The Specified Account
        call: batchservice-certificates.microsoftazurecertificatecanceldeletion
        with:
          thumbprintAlgorithm: rest.thumbprintAlgorithm
          thumbprint: rest.thumbprint
          timeout: rest.timeout
          client-request-id: rest.client-request-id
          return-client-request-id: rest.return-client-request-id
          ocp-date: rest.ocp-date
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: batchservice-certificates-mcp
    port: 9090
    transport: http
    description: MCP adapter for Microsoft Azure BatchService — Certificates. One tool per consumed operation, routed inline
      through this capability's consumes block.
    tools:
    - name: microsoft-azure-adds-certificate-specified
      description: Microsoft Azure Adds A Certificate To The Specified Account
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: batchservice-certificates.microsoftazurecertificateadd
      with:
        certificate: tools.certificate
        timeout: tools.timeout
        client-request-id: tools.client-request-id
        return-client-request-id: tools.return-client-request-id
        ocp-date: tools.ocp-date
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-azure-lists-all-certificates
      description: Microsoft Azure Lists All Of The Certificates That Have Been Added To The Specified Account
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: batchservice-certificates.microsoftazurecertificatelist
      with:
        $filter: tools.$filter
        $select: tools.$select
        maxresults: tools.maxresults
        timeout: tools.timeout
        client-request-id: tools.client-request-id
        return-client-request-id: tools.return-client-request-id
        ocp-date: tools.ocp-date
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-azure-deletes-certificate-specified
      description: Microsoft Azure Deletes A Certificate From The Specified Account
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: batchservice-certificates.microsoftazurecertificatedelete
      with:
        thumbprintAlgorithm: tools.thumbprintAlgorithm
        thumbprint: tools.thumbprint
        timeout: tools.timeout
        client-request-id: tools.client-request-id
        return-client-request-id: tools.return-client-request-id
        ocp-date: tools.ocp-date
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-azure-get-certificates-thumbprintalgorithm
      description: Microsoft Azure Get Certificates Thumbprintalgorithm Thumbprintalgorithm,thumbprint Thumbprint
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: batchservice-certificates.microsoftazurecertificateget
      with:
        thumbprintAlgorithm: tools.thumbprintAlgorithm
        thumbprint: tools.thumbprint
        $select: tools.$select
        timeout: tools.timeout
        client-request-id: tools.client-request-id
        return-client-request-id: tools.return-client-request-id
        ocp-date: tools.ocp-date
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-azure-cancels-failed-deletion
      description: Microsoft Azure Cancels A Failed Deletion Of A Certificate From The Specified Account
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: batchservice-certificates.microsoftazurecertificatecanceldeletion
      with:
        thumbprintAlgorithm: tools.thumbprintAlgorithm
        thumbprint: tools.thumbprint
        timeout: tools.timeout
        client-request-id: tools.client-request-id
        return-client-request-id: tools.return-client-request-id
        ocp-date: tools.ocp-date
      outputParameters:
      - type: object
        mapping: $.