naftiko: 1.0.0-alpha2 info: label: Microsoft Graph Security — reports.securityReportsRoot description: 'Microsoft Graph Security — reports.securityReportsRoot. 6 operations. Lead operation: Microsoft Graph Get security from reports. Self-contained Naftiko capability covering one Microsoft Graph business surface.' tags: - Microsoft Graph - reports.securityReportsRoot created: '2026-05-19' modified: '2026-05-19' binds: - namespace: env keys: MICROSOFT_GRAPH_API_KEY: MICROSOFT_GRAPH_API_KEY capability: consumes: - type: http namespace: security-reports-securityreportsroot baseUri: '' description: Microsoft Graph Security — reports.securityReportsRoot business capability. Self-contained, no shared references. resources: - name: reports-security path: /reports/security operations: - name: reportsgetsecurity method: GET description: Microsoft Graph Get security from reports outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: $select in: query type: array description: Select properties to be returned - name: $expand in: query type: array description: Expand related entities - name: reportsupdatesecurity method: PATCH description: Microsoft Graph Update the navigation property security in reports outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: true - name: reportsdeletesecurity method: DELETE description: Microsoft Graph Delete navigation property security for reports outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: If-Match in: header type: string description: ETag - name: reports-security-getAttackSimulationRepeatOffenders() path: /reports/security/getAttackSimulationRepeatOffenders() operations: - name: reportssecuritygetattacksimulationrepeatoffenders method: GET description: Microsoft Graph Invoke function getAttackSimulationRepeatOffenders outputRawFormat: json outputParameters: - name: result type: object value: $. - name: reports-security-getAttackSimulationSimulationUserCoverage() path: /reports/security/getAttackSimulationSimulationUserCoverage() operations: - name: reportssecuritygetattacksimulationsimulationusercoverage method: GET description: Microsoft Graph Invoke function getAttackSimulationSimulationUserCoverage outputRawFormat: json outputParameters: - name: result type: object value: $. - name: reports-security-getAttackSimulationTrainingUserCoverage() path: /reports/security/getAttackSimulationTrainingUserCoverage() operations: - name: reportssecuritygetattacksimulationtrainingusercoverage method: GET description: Microsoft Graph Invoke function getAttackSimulationTrainingUserCoverage outputRawFormat: json outputParameters: - name: result type: object value: $. exposes: - type: rest namespace: security-reports-securityreportsroot-rest port: 8080 description: REST adapter for Microsoft Graph Security — reports.securityReportsRoot. One Spectral-compliant resource per consumed operation, prefixed with /v1. resources: - path: /v1/reports/security name: reports-security description: REST surface for reports-security. operations: - method: GET name: reportsgetsecurity description: Microsoft Graph Get security from reports call: security-reports-securityreportsroot.reportsgetsecurity with: $select: rest.$select $expand: rest.$expand outputParameters: - type: object mapping: $. - method: PATCH name: reportsupdatesecurity description: Microsoft Graph Update the navigation property security in reports call: security-reports-securityreportsroot.reportsupdatesecurity with: body: rest.body outputParameters: - type: object mapping: $. - method: DELETE name: reportsdeletesecurity description: Microsoft Graph Delete navigation property security for reports call: security-reports-securityreportsroot.reportsdeletesecurity with: If-Match: rest.If-Match outputParameters: - type: object mapping: $. - path: /v1/reports/security/getattacksimulationrepeatoffenders name: reports-security-getattacksimulationrepeatoffenders description: REST surface for reports-security-getAttackSimulationRepeatOffenders(). operations: - method: GET name: reportssecuritygetattacksimulationrepeatoffenders description: Microsoft Graph Invoke function getAttackSimulationRepeatOffenders call: security-reports-securityreportsroot.reportssecuritygetattacksimulationrepeatoffenders outputParameters: - type: object mapping: $. - path: /v1/reports/security/getattacksimulationsimulationusercoverage name: reports-security-getattacksimulationsimulationusercoverage description: REST surface for reports-security-getAttackSimulationSimulationUserCoverage(). operations: - method: GET name: reportssecuritygetattacksimulationsimulationusercoverage description: Microsoft Graph Invoke function getAttackSimulationSimulationUserCoverage call: security-reports-securityreportsroot.reportssecuritygetattacksimulationsimulationusercoverage outputParameters: - type: object mapping: $. - path: /v1/reports/security/getattacksimulationtrainingusercoverage name: reports-security-getattacksimulationtrainingusercoverage description: REST surface for reports-security-getAttackSimulationTrainingUserCoverage(). operations: - method: GET name: reportssecuritygetattacksimulationtrainingusercoverage description: Microsoft Graph Invoke function getAttackSimulationTrainingUserCoverage call: security-reports-securityreportsroot.reportssecuritygetattacksimulationtrainingusercoverage outputParameters: - type: object mapping: $. - type: mcp namespace: security-reports-securityreportsroot-mcp port: 9090 transport: http description: MCP adapter for Microsoft Graph Security — reports.securityReportsRoot. One tool per consumed operation, routed inline through this capability's consumes block. tools: - name: microsoft-graph-get-security-reports description: Microsoft Graph Get security from reports hints: readOnly: true destructive: false idempotent: true call: security-reports-securityreportsroot.reportsgetsecurity with: $select: tools.$select $expand: tools.$expand outputParameters: - type: object mapping: $. - name: microsoft-graph-update-navigation-property description: Microsoft Graph Update the navigation property security in reports hints: readOnly: false destructive: false idempotent: true call: security-reports-securityreportsroot.reportsupdatesecurity with: body: tools.body outputParameters: - type: object mapping: $. - name: microsoft-graph-delete-navigation-property description: Microsoft Graph Delete navigation property security for reports hints: readOnly: false destructive: true idempotent: true call: security-reports-securityreportsroot.reportsdeletesecurity with: If-Match: tools.If-Match outputParameters: - type: object mapping: $. - name: microsoft-graph-invoke-function-getattacksimulationrepeatoffenders description: Microsoft Graph Invoke function getAttackSimulationRepeatOffenders hints: readOnly: true destructive: false idempotent: true call: security-reports-securityreportsroot.reportssecuritygetattacksimulationrepeatoffenders outputParameters: - type: object mapping: $. - name: microsoft-graph-invoke-function-getattacksimulationsimulationusercoverage description: Microsoft Graph Invoke function getAttackSimulationSimulationUserCoverage hints: readOnly: true destructive: false idempotent: true call: security-reports-securityreportsroot.reportssecuritygetattacksimulationsimulationusercoverage outputParameters: - type: object mapping: $. - name: microsoft-graph-invoke-function-getattacksimulationtrainingusercoverage description: Microsoft Graph Invoke function getAttackSimulationTrainingUserCoverage hints: readOnly: true destructive: false idempotent: true call: security-reports-securityreportsroot.reportssecuritygetattacksimulationtrainingusercoverage outputParameters: - type: object mapping: $.