naftiko: 1.0.0-alpha2
info:
  label: PDCP API — vulnerability
  description: 'PDCP API — vulnerability. 1 operations. Lead operation: Get Vulnerability Timeline. Self-contained Naftiko
    capability covering one Nuclei business surface.'
  tags:
  - Nuclei
  - vulnerability
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    NUCLEI_API_KEY: NUCLEI_API_KEY
capability:
  consumes:
  - type: http
    namespace: nuclei-vulnerability
    baseUri: https://api.projectdiscovery.io
    description: PDCP API — vulnerability business capability. Self-contained, no shared references.
    resources:
    - name: v2-vulnerability-id-timeline
      path: /v2/vulnerability/{id}/timeline
      operations:
      - name: getvulnerabilitytimeline
        method: GET
        description: Get Vulnerability Timeline
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: event_type
          in: query
          type: array
          description: Filter by event types (comma-separated). If not provided, returns all events.
    authentication:
      type: apikey
      key: X-API-Key
      value: '{{env.NUCLEI_API_KEY}}'
      placement: header
  exposes:
  - type: rest
    namespace: nuclei-vulnerability-rest
    port: 8080
    description: REST adapter for PDCP API — vulnerability. One Spectral-compliant resource per consumed operation, prefixed
      with /v1.
    resources:
    - path: /v1/v2/vulnerability/{id}/timeline
      name: v2-vulnerability-id-timeline
      description: REST surface for v2-vulnerability-id-timeline.
      operations:
      - method: GET
        name: getvulnerabilitytimeline
        description: Get Vulnerability Timeline
        call: nuclei-vulnerability.getvulnerabilitytimeline
        with:
          event_type: rest.event_type
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: nuclei-vulnerability-mcp
    port: 9090
    transport: http
    description: MCP adapter for PDCP API — vulnerability. One tool per consumed operation, routed inline through this capability's
      consumes block.
    tools:
    - name: get-vulnerability-timeline
      description: Get Vulnerability Timeline
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: nuclei-vulnerability.getvulnerabilitytimeline
      with:
        event_type: tools.event_type
      outputParameters:
      - type: object
        mapping: $.