naftiko: 1.0.0-alpha2
info:
  title: Banking Governance Capability
  description: A governance capability over banking APIs that enforces consent, audit, and risk-policy gates on every consumer call.
  tags: [Naftiko, Banking, Governance]
  created: '2026-05-01'
  modified: '2026-05-04'
binds:
- namespace: openbanking-env
  keys: {OB_HOST: OB_HOST, OB_TOKEN: OB_TOKEN}
- namespace: naftiko-env
  keys: {NAFTIKO_API_KEY: NAFTIKO_API_KEY}
capability:
  consumes:
  - namespace: openbanking
    type: http
    baseUri: https://{{OB_HOST}}
    authentication: {type: bearer, token: '{{OB_TOKEN}}'}
    resources:
    - {name: consents, path: /open-banking/v3.1/aisp/account-access-consents, operations: [{name: list-consents, method: GET}, {name: create-consent, method: POST}]}
    - {name: accounts, path: /open-banking/v3.1/aisp/accounts, operations: [{name: list-accounts, method: GET}]}
  - namespace: naftiko-control
    type: http
    baseUri: https://api.naftiko.com
    authentication: {type: bearer, token: '{{NAFTIKO_API_KEY}}'}
    resources:
    - {name: governance-events, path: /v1/governance/events, operations: [{name: emit-governance-event, method: POST}]}
  exposes:
  - type: rest
    address: 0.0.0.0
    port: 8080
    namespace: banking-governance-capability-rest
    description: Governance-gated banking surface.
    resources:
    - {name: governed-accounts, path: /accounts, operations: [{method: GET, name: list-governed-accounts, call: openbanking.list-accounts}]}
  - type: mcp
    address: 0.0.0.0
    port: 3010
    namespace: banking-governance-capability-mcp
    description: MCP for governed banking ops.
    tools:
    - {name: list-accounts, hints: {readOnly: true}, call: openbanking.list-accounts}
    - {name: list-consents, hints: {readOnly: true}, call: openbanking.list-consents}
    - {name: create-consent, call: openbanking.create-consent}
  - type: skill
    address: 0.0.0.0
    port: 3011
    namespace: banking-governance-capability-skills
    description: Skill for banking governance.
    skills:
    - name: banking-governance-capability
      description: Governance-gated banking access.
      location: file:///opt/naftiko/skills/banking-governance-capability
      allowed-tools: list-accounts,list-consents,create-consent
      tools:
      - {name: list-accounts, from: {sourceNamespace: banking-governance-capability-mcp, action: list-accounts}}
      - {name: list-consents, from: {sourceNamespace: banking-governance-capability-mcp, action: list-consents}}
      - {name: create-consent, from: {sourceNamespace: banking-governance-capability-mcp, action: create-consent}}