naftiko: 1.0.0-alpha2
info:
  label: Microsoft Graph Directory — directory.publicKeyInfrastructureRoot
  description: 'Microsoft Graph Directory — directory.publicKeyInfrastructureRoot. 16 operations. Lead operation: Microsoft
    Graph Get publicKeyInfrastructure from directory. Self-contained Naftiko capability covering one Microsoft Graph business
    surface.'
  tags:
  - Microsoft Graph
  - directory.publicKeyInfrastructureRoot
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    MICROSOFT_GRAPH_API_KEY: MICROSOFT_GRAPH_API_KEY
capability:
  consumes:
  - type: http
    namespace: directory-directory-publickeyinfrastructureroot
    baseUri: ''
    description: Microsoft Graph Directory — directory.publicKeyInfrastructureRoot business capability. Self-contained, no
      shared references.
    resources:
    - name: directory-publicKeyInfrastructure
      path: /directory/publicKeyInfrastructure
      operations:
      - name: directorygetpublickeyinfrastructure
        method: GET
        description: Microsoft Graph Get publicKeyInfrastructure from directory
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: $select
          in: query
          type: array
          description: Select properties to be returned
        - name: $expand
          in: query
          type: array
          description: Expand related entities
      - name: directoryupdatepublickeyinfrastructure
        method: PATCH
        description: Microsoft Graph Update the navigation property publicKeyInfrastructure in directory
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: directorydeletepublickeyinfrastructure
        method: DELETE
        description: Microsoft Graph Delete navigation property publicKeyInfrastructure for directory
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: If-Match
          in: header
          type: string
          description: ETag
    - name: directory-publicKeyInfrastructure-certificateBasedAuthConfigurations
      path: /directory/publicKeyInfrastructure/certificateBasedAuthConfigurations
      operations:
      - name: directorypublickeyinfrastructurelistcertificatebasedauthconfigurations
        method: GET
        description: Microsoft Graph List certificateBasedAuthPki objects
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: $orderby
          in: query
          type: array
          description: Order items by property values
        - name: $select
          in: query
          type: array
          description: Select properties to be returned
        - name: $expand
          in: query
          type: array
          description: Expand related entities
      - name: directorypublickeyinfrastructurecreatecertificatebasedauthconfigurations
        method: POST
        description: Microsoft Graph Create certificateBasedAuthPki
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: directory-publicKeyInfrastructure-certificateBasedAuthConfigurations-$count
      path: /directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/$count
      operations:
      - name: directorypublickeyinfrastructurecertificatebasedauthconfigurationsgetcount4154
        method: GET
        description: Microsoft Graph Get the number of the resource
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: directory-publicKeyInfrastructure-certificateBasedAuthConfigurations-certificate
      path: /directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPki-id}
      operations:
      - name: directorypublickeyinfrastructuregetcertificatebasedauthconfigurations
        method: GET
        description: Microsoft Graph Get certificateBasedAuthPki
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: $select
          in: query
          type: array
          description: Select properties to be returned
        - name: $expand
          in: query
          type: array
          description: Expand related entities
      - name: directorypublickeyinfrastructureupdatecertificatebasedauthconfigurations
        method: PATCH
        description: Microsoft Graph Update certificateBasedAuthPki
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: directorypublickeyinfrastructuredeletecertificatebasedauthconfigurations
        method: DELETE
        description: Microsoft Graph Delete certificateBasedAuthPki
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: If-Match
          in: header
          type: string
          description: ETag
    - name: directory-publicKeyInfrastructure-certificateBasedAuthConfigurations-certificate
      path: /directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPki-id}/certificateAuthorities
      operations:
      - name: directorypublickeyinfrastructurecertificatebasedauthconfigurationslistcertificateauthorities
        method: GET
        description: Microsoft Graph List certificateAuthorityDetail objects
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: $orderby
          in: query
          type: array
          description: Order items by property values
        - name: $select
          in: query
          type: array
          description: Select properties to be returned
        - name: $expand
          in: query
          type: array
          description: Expand related entities
      - name: directorypublickeyinfrastructurecertificatebasedauthconfigurationscreatecertificateauthorities
        method: POST
        description: Microsoft Graph Create certificateAuthorityDetail
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: directory-publicKeyInfrastructure-certificateBasedAuthConfigurations-certificate
      path: /directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPki-id}/certificateAuthorities/$count
      operations:
      - name: directorypublickeyinfrastructurecertificatebasedauthconfigurationscertificateauthoritiesgetcount8126
        method: GET
        description: Microsoft Graph Get the number of the resource
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: directory-publicKeyInfrastructure-certificateBasedAuthConfigurations-certificate
      path: /directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPki-id}/certificateAuthorities/{certificateAuthorityDetail-id}
      operations:
      - name: directorypublickeyinfrastructurecertificatebasedauthconfigurationsgetcertificateauthorities
        method: GET
        description: Microsoft Graph Get certificateAuthorities from directory
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: $select
          in: query
          type: array
          description: Select properties to be returned
        - name: $expand
          in: query
          type: array
          description: Expand related entities
      - name: directorypublickeyinfrastructurecertificatebasedauthconfigurationsupdatecertificateauthorities
        method: PATCH
        description: Microsoft Graph Update certificateAuthorityDetail
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: directorypublickeyinfrastructurecertificatebasedauthconfigurationsdeletecertificateauthorities
        method: DELETE
        description: Microsoft Graph Delete certificateAuthorityDetail
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: If-Match
          in: header
          type: string
          description: ETag
    - name: directory-publicKeyInfrastructure-certificateBasedAuthConfigurations-certificate
      path: /directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPki-id}/upload
      operations:
      - name: directorypublickeyinfrastructurecertificatebasedauthconfigurationscertificatebasedauthpkiupload
        method: POST
        description: Microsoft Graph Invoke action upload
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
  exposes:
  - type: rest
    namespace: directory-directory-publickeyinfrastructureroot-rest
    port: 8080
    description: REST adapter for Microsoft Graph Directory — directory.publicKeyInfrastructureRoot. One Spectral-compliant
      resource per consumed operation, prefixed with /v1.
    resources:
    - path: /v1/directory/publickeyinfrastructure
      name: directory-publickeyinfrastructure
      description: REST surface for directory-publicKeyInfrastructure.
      operations:
      - method: GET
        name: directorygetpublickeyinfrastructure
        description: Microsoft Graph Get publicKeyInfrastructure from directory
        call: directory-directory-publickeyinfrastructureroot.directorygetpublickeyinfrastructure
        with:
          $select: rest.$select
          $expand: rest.$expand
        outputParameters:
        - type: object
          mapping: $.
      - method: PATCH
        name: directoryupdatepublickeyinfrastructure
        description: Microsoft Graph Update the navigation property publicKeyInfrastructure in directory
        call: directory-directory-publickeyinfrastructureroot.directoryupdatepublickeyinfrastructure
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
      - method: DELETE
        name: directorydeletepublickeyinfrastructure
        description: Microsoft Graph Delete navigation property publicKeyInfrastructure for directory
        call: directory-directory-publickeyinfrastructureroot.directorydeletepublickeyinfrastructure
        with:
          If-Match: rest.If-Match
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/directory/publickeyinfrastructure/certificatebasedauthconfigurations
      name: directory-publickeyinfrastructure-certificatebasedauthconfigurations
      description: REST surface for directory-publicKeyInfrastructure-certificateBasedAuthConfigurations.
      operations:
      - method: GET
        name: directorypublickeyinfrastructurelistcertificatebasedauthconfigurations
        description: Microsoft Graph List certificateBasedAuthPki objects
        call: directory-directory-publickeyinfrastructureroot.directorypublickeyinfrastructurelistcertificatebasedauthconfigurations
        with:
          $orderby: rest.$orderby
          $select: rest.$select
          $expand: rest.$expand
        outputParameters:
        - type: object
          mapping: $.
      - method: POST
        name: directorypublickeyinfrastructurecreatecertificatebasedauthconfigurations
        description: Microsoft Graph Create certificateBasedAuthPki
        call: directory-directory-publickeyinfrastructureroot.directorypublickeyinfrastructurecreatecertificatebasedauthconfigurations
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/directory/publickeyinfrastructure/certificatebasedauthconfigurations/count
      name: directory-publickeyinfrastructure-certificatebasedauthconfigurations-count
      description: REST surface for directory-publicKeyInfrastructure-certificateBasedAuthConfigurations-$count.
      operations:
      - method: GET
        name: directorypublickeyinfrastructurecertificatebasedauthconfigurationsgetcount4154
        description: Microsoft Graph Get the number of the resource
        call: directory-directory-publickeyinfrastructureroot.directorypublickeyinfrastructurecertificatebasedauthconfigurationsgetcount4154
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/directory/publickeyinfrastructure/certificatebasedauthconfigurations/{certificatebasedauthpki-id}
      name: directory-publickeyinfrastructure-certificatebasedauthconfigurations-certificate
      description: REST surface for directory-publicKeyInfrastructure-certificateBasedAuthConfigurations-certificate.
      operations:
      - method: GET
        name: directorypublickeyinfrastructuregetcertificatebasedauthconfigurations
        description: Microsoft Graph Get certificateBasedAuthPki
        call: directory-directory-publickeyinfrastructureroot.directorypublickeyinfrastructuregetcertificatebasedauthconfigurations
        with:
          $select: rest.$select
          $expand: rest.$expand
        outputParameters:
        - type: object
          mapping: $.
      - method: PATCH
        name: directorypublickeyinfrastructureupdatecertificatebasedauthconfigurations
        description: Microsoft Graph Update certificateBasedAuthPki
        call: directory-directory-publickeyinfrastructureroot.directorypublickeyinfrastructureupdatecertificatebasedauthconfigurations
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
      - method: DELETE
        name: directorypublickeyinfrastructuredeletecertificatebasedauthconfigurations
        description: Microsoft Graph Delete certificateBasedAuthPki
        call: directory-directory-publickeyinfrastructureroot.directorypublickeyinfrastructuredeletecertificatebasedauthconfigurations
        with:
          If-Match: rest.If-Match
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/directory/publickeyinfrastructure/certificatebasedauthconfigurations/{certificatebasedauthpki-id}/certificateauthorities
      name: directory-publickeyinfrastructure-certificatebasedauthconfigurations-certificate
      description: REST surface for directory-publicKeyInfrastructure-certificateBasedAuthConfigurations-certificate.
      operations:
      - method: GET
        name: directorypublickeyinfrastructurecertificatebasedauthconfigurationslistcertificateauthorities
        description: Microsoft Graph List certificateAuthorityDetail objects
        call: directory-directory-publickeyinfrastructureroot.directorypublickeyinfrastructurecertificatebasedauthconfigurationslistcertificateauthorities
        with:
          $orderby: rest.$orderby
          $select: rest.$select
          $expand: rest.$expand
        outputParameters:
        - type: object
          mapping: $.
      - method: POST
        name: directorypublickeyinfrastructurecertificatebasedauthconfigurationscreatecertificateauthorities
        description: Microsoft Graph Create certificateAuthorityDetail
        call: directory-directory-publickeyinfrastructureroot.directorypublickeyinfrastructurecertificatebasedauthconfigurationscreatecertificateauthorities
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/directory/publickeyinfrastructure/certificatebasedauthconfigurations/{certificatebasedauthpki-id}/certificateauthorities/count
      name: directory-publickeyinfrastructure-certificatebasedauthconfigurations-certificate
      description: REST surface for directory-publicKeyInfrastructure-certificateBasedAuthConfigurations-certificate.
      operations:
      - method: GET
        name: directorypublickeyinfrastructurecertificatebasedauthconfigurationscertificateauthoritiesgetcount8126
        description: Microsoft Graph Get the number of the resource
        call: directory-directory-publickeyinfrastructureroot.directorypublickeyinfrastructurecertificatebasedauthconfigurationscertificateauthoritiesgetcount8126
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/directory/publickeyinfrastructure/certificatebasedauthconfigurations/{certificatebasedauthpki-id}/certificateauthorities/{certificateauthoritydetail-id}
      name: directory-publickeyinfrastructure-certificatebasedauthconfigurations-certificate
      description: REST surface for directory-publicKeyInfrastructure-certificateBasedAuthConfigurations-certificate.
      operations:
      - method: GET
        name: directorypublickeyinfrastructurecertificatebasedauthconfigurationsgetcertificateauthorities
        description: Microsoft Graph Get certificateAuthorities from directory
        call: directory-directory-publickeyinfrastructureroot.directorypublickeyinfrastructurecertificatebasedauthconfigurationsgetcertificateauthorities
        with:
          $select: rest.$select
          $expand: rest.$expand
        outputParameters:
        - type: object
          mapping: $.
      - method: PATCH
        name: directorypublickeyinfrastructurecertificatebasedauthconfigurationsupdatecertificateauthorities
        description: Microsoft Graph Update certificateAuthorityDetail
        call: directory-directory-publickeyinfrastructureroot.directorypublickeyinfrastructurecertificatebasedauthconfigurationsupdatecertificateauthorities
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
      - method: DELETE
        name: directorypublickeyinfrastructurecertificatebasedauthconfigurationsdeletecertificateauthorities
        description: Microsoft Graph Delete certificateAuthorityDetail
        call: directory-directory-publickeyinfrastructureroot.directorypublickeyinfrastructurecertificatebasedauthconfigurationsdeletecertificateauthorities
        with:
          If-Match: rest.If-Match
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/directory/publickeyinfrastructure/certificatebasedauthconfigurations/{certificatebasedauthpki-id}/upload
      name: directory-publickeyinfrastructure-certificatebasedauthconfigurations-certificate
      description: REST surface for directory-publicKeyInfrastructure-certificateBasedAuthConfigurations-certificate.
      operations:
      - method: POST
        name: directorypublickeyinfrastructurecertificatebasedauthconfigurationscertificatebasedauthpkiupload
        description: Microsoft Graph Invoke action upload
        call: directory-directory-publickeyinfrastructureroot.directorypublickeyinfrastructurecertificatebasedauthconfigurationscertificatebasedauthpkiupload
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: directory-directory-publickeyinfrastructureroot-mcp
    port: 9090
    transport: http
    description: MCP adapter for Microsoft Graph Directory — directory.publicKeyInfrastructureRoot. One tool per consumed
      operation, routed inline through this capability's consumes block.
    tools:
    - name: microsoft-graph-get-publickeyinfrastructure-directory
      description: Microsoft Graph Get publicKeyInfrastructure from directory
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: directory-directory-publickeyinfrastructureroot.directorygetpublickeyinfrastructure
      with:
        $select: tools.$select
        $expand: tools.$expand
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-graph-update-navigation-property
      description: Microsoft Graph Update the navigation property publicKeyInfrastructure in directory
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: directory-directory-publickeyinfrastructureroot.directoryupdatepublickeyinfrastructure
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-graph-delete-navigation-property
      description: Microsoft Graph Delete navigation property publicKeyInfrastructure for directory
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: directory-directory-publickeyinfrastructureroot.directorydeletepublickeyinfrastructure
      with:
        If-Match: tools.If-Match
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-graph-list-certificatebasedauthpki-objects
      description: Microsoft Graph List certificateBasedAuthPki objects
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: directory-directory-publickeyinfrastructureroot.directorypublickeyinfrastructurelistcertificatebasedauthconfigurations
      with:
        $orderby: tools.$orderby
        $select: tools.$select
        $expand: tools.$expand
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-graph-create-certificatebasedauthpki
      description: Microsoft Graph Create certificateBasedAuthPki
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: directory-directory-publickeyinfrastructureroot.directorypublickeyinfrastructurecreatecertificatebasedauthconfigurations
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-graph-get-number-resource
      description: Microsoft Graph Get the number of the resource
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: directory-directory-publickeyinfrastructureroot.directorypublickeyinfrastructurecertificatebasedauthconfigurationsgetcount4154
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-graph-get-certificatebasedauthpki
      description: Microsoft Graph Get certificateBasedAuthPki
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: directory-directory-publickeyinfrastructureroot.directorypublickeyinfrastructuregetcertificatebasedauthconfigurations
      with:
        $select: tools.$select
        $expand: tools.$expand
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-graph-update-certificatebasedauthpki
      description: Microsoft Graph Update certificateBasedAuthPki
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: directory-directory-publickeyinfrastructureroot.directorypublickeyinfrastructureupdatecertificatebasedauthconfigurations
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-graph-delete-certificatebasedauthpki
      description: Microsoft Graph Delete certificateBasedAuthPki
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: directory-directory-publickeyinfrastructureroot.directorypublickeyinfrastructuredeletecertificatebasedauthconfigurations
      with:
        If-Match: tools.If-Match
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-graph-list-certificateauthoritydetail-objects
      description: Microsoft Graph List certificateAuthorityDetail objects
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: directory-directory-publickeyinfrastructureroot.directorypublickeyinfrastructurecertificatebasedauthconfigurationslistcertificateauthorities
      with:
        $orderby: tools.$orderby
        $select: tools.$select
        $expand: tools.$expand
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-graph-create-certificateauthoritydetail
      description: Microsoft Graph Create certificateAuthorityDetail
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: directory-directory-publickeyinfrastructureroot.directorypublickeyinfrastructurecertificatebasedauthconfigurationscreatecertificateauthorities
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-graph-get-number-resource-2
      description: Microsoft Graph Get the number of the resource
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: directory-directory-publickeyinfrastructureroot.directorypublickeyinfrastructurecertificatebasedauthconfigurationscertificateauthoritiesgetcount8126
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-graph-get-certificateauthorities-directory
      description: Microsoft Graph Get certificateAuthorities from directory
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: directory-directory-publickeyinfrastructureroot.directorypublickeyinfrastructurecertificatebasedauthconfigurationsgetcertificateauthorities
      with:
        $select: tools.$select
        $expand: tools.$expand
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-graph-update-certificateauthoritydetail
      description: Microsoft Graph Update certificateAuthorityDetail
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: directory-directory-publickeyinfrastructureroot.directorypublickeyinfrastructurecertificatebasedauthconfigurationsupdatecertificateauthorities
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-graph-delete-certificateauthoritydetail
      description: Microsoft Graph Delete certificateAuthorityDetail
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: directory-directory-publickeyinfrastructureroot.directorypublickeyinfrastructurecertificatebasedauthconfigurationsdeletecertificateauthorities
      with:
        If-Match: tools.If-Match
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-graph-invoke-action-upload
      description: Microsoft Graph Invoke action upload
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: directory-directory-publickeyinfrastructureroot.directorypublickeyinfrastructurecertificatebasedauthconfigurationscertificatebasedauthpkiupload
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.