naftiko: 1.0.0-alpha2 info: label: NetBird REST API — EDR SentinelOne Integrations description: 'NetBird REST API — EDR SentinelOne Integrations. 4 operations. Lead operation: Create EDR SentinelOne Integration. Self-contained Naftiko capability covering one Netbird business surface.' tags: - Netbird - EDR SentinelOne Integrations created: '2026-05-19' modified: '2026-05-19' binds: - namespace: env keys: NETBIRD_API_KEY: NETBIRD_API_KEY capability: consumes: - type: http namespace: netbird-edr-sentinelone-integrations baseUri: https://api.netbird.io description: NetBird REST API — EDR SentinelOne Integrations business capability. Self-contained, no shared references. resources: - name: api-integrations-edr-sentinelone path: /api/integrations/edr/sentinelone operations: - name: createsentineloneedrintegration method: POST description: Create EDR SentinelOne Integration outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: true - name: get method: GET description: Get EDR SentinelOne Integration outputRawFormat: json outputParameters: - name: result type: object value: $. - name: updatesentineloneedrintegration method: PUT description: Update EDR SentinelOne Integration outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: true - name: delete method: DELETE description: Delete EDR SentinelOne Integration outputRawFormat: json outputParameters: - name: result type: object value: $. authentication: type: bearer token: '{{env.NETBIRD_API_KEY}}' exposes: - type: rest namespace: netbird-edr-sentinelone-integrations-rest port: 8080 description: REST adapter for NetBird REST API — EDR SentinelOne Integrations. One Spectral-compliant resource per consumed operation, prefixed with /v1. resources: - path: /v1/api/integrations/edr/sentinelone name: api-integrations-edr-sentinelone description: REST surface for api-integrations-edr-sentinelone. operations: - method: POST name: createsentineloneedrintegration description: Create EDR SentinelOne Integration call: netbird-edr-sentinelone-integrations.createsentineloneedrintegration with: body: rest.body outputParameters: - type: object mapping: $. - method: GET name: get description: Get EDR SentinelOne Integration call: netbird-edr-sentinelone-integrations.get outputParameters: - type: object mapping: $. - method: PUT name: updatesentineloneedrintegration description: Update EDR SentinelOne Integration call: netbird-edr-sentinelone-integrations.updatesentineloneedrintegration with: body: rest.body outputParameters: - type: object mapping: $. - method: DELETE name: delete description: Delete EDR SentinelOne Integration call: netbird-edr-sentinelone-integrations.delete outputParameters: - type: object mapping: $. - type: mcp namespace: netbird-edr-sentinelone-integrations-mcp port: 9090 transport: http description: MCP adapter for NetBird REST API — EDR SentinelOne Integrations. One tool per consumed operation, routed inline through this capability's consumes block. tools: - name: create-edr-sentinelone-integration description: Create EDR SentinelOne Integration hints: readOnly: false destructive: false idempotent: false call: netbird-edr-sentinelone-integrations.createsentineloneedrintegration with: body: tools.body outputParameters: - type: object mapping: $. - name: get-edr-sentinelone-integration description: Get EDR SentinelOne Integration hints: readOnly: true destructive: false idempotent: true call: netbird-edr-sentinelone-integrations.get outputParameters: - type: object mapping: $. - name: update-edr-sentinelone-integration description: Update EDR SentinelOne Integration hints: readOnly: false destructive: false idempotent: true call: netbird-edr-sentinelone-integrations.updatesentineloneedrintegration with: body: tools.body outputParameters: - type: object mapping: $. - name: delete-edr-sentinelone-integration description: Delete EDR SentinelOne Integration hints: readOnly: false destructive: true idempotent: true call: netbird-edr-sentinelone-integrations.delete outputParameters: - type: object mapping: $.