naftiko: 1.0.0-alpha2 info: label: Microsoft Endpoint Configuration Management Microsoft Intune Graph API — Devices description: 'Microsoft Endpoint Configuration Management Microsoft Intune Graph API — Devices. 6 operations. Lead operation: Microsoft Endpoint Configuration Management List managed devices. Self-contained Naftiko capability covering one Microsoft Endpoint Configuration Management business surface.' tags: - Microsoft Endpoint Configuration Management - Devices created: '2026-05-19' modified: '2026-05-19' binds: - namespace: env keys: MICROSOFT_ENDPOINT_CONFIGURATION_MANAGEMENT_API_KEY: MICROSOFT_ENDPOINT_CONFIGURATION_MANAGEMENT_API_KEY capability: consumes: - type: http namespace: intune-graph-devices baseUri: https://graph.microsoft.com/v1.0 description: Microsoft Endpoint Configuration Management Microsoft Intune Graph API — Devices business capability. Self-contained, no shared references. resources: - name: deviceManagement-managedDevices path: /deviceManagement/managedDevices operations: - name: listmanageddevices method: GET description: Microsoft Endpoint Configuration Management List managed devices outputRawFormat: json outputParameters: - name: result type: object value: $. - name: createmanageddevice method: POST description: Microsoft Endpoint Configuration Management Create managed device outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: true - name: deviceManagement-managedDevices-managedDeviceId path: /deviceManagement/managedDevices/{managedDeviceId} operations: - name: getmanageddevice method: GET description: Microsoft Endpoint Configuration Management Get managed device outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: managedDeviceId in: path type: string description: The unique identifier of the managed device. required: true - name: updatemanageddevice method: PATCH description: Microsoft Endpoint Configuration Management Update managed device outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: managedDeviceId in: path type: string required: true - name: body in: body type: object description: Request body (JSON). required: true - name: deletemanageddevice method: DELETE description: Microsoft Endpoint Configuration Management Delete managed device outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: managedDeviceId in: path type: string required: true - name: users-userId-ownedDevices path: /users/{userId}/ownedDevices operations: - name: listuserowneddevices method: GET description: Microsoft Endpoint Configuration Management List user owned devices outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: userId in: path type: string required: true authentication: type: bearer token: '{{env.MICROSOFT_ENDPOINT_CONFIGURATION_MANAGEMENT_API_KEY}}' exposes: - type: rest namespace: intune-graph-devices-rest port: 8080 description: REST adapter for Microsoft Endpoint Configuration Management Microsoft Intune Graph API — Devices. One Spectral-compliant resource per consumed operation, prefixed with /v1. resources: - path: /v1/devicemanagement/manageddevices name: devicemanagement-manageddevices description: REST surface for deviceManagement-managedDevices. operations: - method: GET name: listmanageddevices description: Microsoft Endpoint Configuration Management List managed devices call: intune-graph-devices.listmanageddevices outputParameters: - type: object mapping: $. - method: POST name: createmanageddevice description: Microsoft Endpoint Configuration Management Create managed device call: intune-graph-devices.createmanageddevice with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/devicemanagement/manageddevices/{manageddeviceid} name: devicemanagement-manageddevices-manageddeviceid description: REST surface for deviceManagement-managedDevices-managedDeviceId. operations: - method: GET name: getmanageddevice description: Microsoft Endpoint Configuration Management Get managed device call: intune-graph-devices.getmanageddevice with: managedDeviceId: rest.managedDeviceId outputParameters: - type: object mapping: $. - method: PATCH name: updatemanageddevice description: Microsoft Endpoint Configuration Management Update managed device call: intune-graph-devices.updatemanageddevice with: managedDeviceId: rest.managedDeviceId body: rest.body outputParameters: - type: object mapping: $. - method: DELETE name: deletemanageddevice description: Microsoft Endpoint Configuration Management Delete managed device call: intune-graph-devices.deletemanageddevice with: managedDeviceId: rest.managedDeviceId outputParameters: - type: object mapping: $. - path: /v1/users/{userid}/owneddevices name: users-userid-owneddevices description: REST surface for users-userId-ownedDevices. operations: - method: GET name: listuserowneddevices description: Microsoft Endpoint Configuration Management List user owned devices call: intune-graph-devices.listuserowneddevices with: userId: rest.userId outputParameters: - type: object mapping: $. - type: mcp namespace: intune-graph-devices-mcp port: 9090 transport: http description: MCP adapter for Microsoft Endpoint Configuration Management Microsoft Intune Graph API — Devices. One tool per consumed operation, routed inline through this capability's consumes block. tools: - name: microsoft-endpoint-configuration-management-list description: Microsoft Endpoint Configuration Management List managed devices hints: readOnly: true destructive: false idempotent: true call: intune-graph-devices.listmanageddevices outputParameters: - type: object mapping: $. - name: microsoft-endpoint-configuration-management-create description: Microsoft Endpoint Configuration Management Create managed device hints: readOnly: false destructive: false idempotent: false call: intune-graph-devices.createmanageddevice with: body: tools.body outputParameters: - type: object mapping: $. - name: microsoft-endpoint-configuration-management-get description: Microsoft Endpoint Configuration Management Get managed device hints: readOnly: true destructive: false idempotent: true call: intune-graph-devices.getmanageddevice with: managedDeviceId: tools.managedDeviceId outputParameters: - type: object mapping: $. - name: microsoft-endpoint-configuration-management-update description: Microsoft Endpoint Configuration Management Update managed device hints: readOnly: false destructive: false idempotent: true call: intune-graph-devices.updatemanageddevice with: managedDeviceId: tools.managedDeviceId body: tools.body outputParameters: - type: object mapping: $. - name: microsoft-endpoint-configuration-management-delete description: Microsoft Endpoint Configuration Management Delete managed device hints: readOnly: false destructive: true idempotent: true call: intune-graph-devices.deletemanageddevice with: managedDeviceId: tools.managedDeviceId outputParameters: - type: object mapping: $. - name: microsoft-endpoint-configuration-management-list-2 description: Microsoft Endpoint Configuration Management List user owned devices hints: readOnly: true destructive: false idempotent: true call: intune-graph-devices.listuserowneddevices with: userId: tools.userId outputParameters: - type: object mapping: $.