naftiko: 1.0.0-alpha2 info: label: NVD CVE API — CVE Change History description: 'NVD CVE API — CVE Change History. 1 operations. Lead operation: Get CVE change history. Self-contained Naftiko capability covering one Nvd business surface.' tags: - Nvd - CVE Change History created: '2026-05-19' modified: '2026-05-19' binds: - namespace: env keys: NVD_API_KEY: NVD_API_KEY capability: consumes: - type: http namespace: cve-cve-change-history baseUri: https://services.nvd.nist.gov/rest/json description: NVD CVE API — CVE Change History business capability. Self-contained, no shared references. resources: - name: cvehistory-2.0 path: /cvehistory/2.0 operations: - name: getcvechangehistory method: GET description: Get CVE change history outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: cveId in: query type: string - name: changeStartDate in: query type: string required: true - name: changeEndDate in: query type: string required: true - name: eventName in: query type: string - name: resultsPerPage in: query type: integer - name: startIndex in: query type: integer authentication: type: apikey key: apiKey value: '{{env.NVD_API_KEY}}' placement: header exposes: - type: rest namespace: cve-cve-change-history-rest port: 8080 description: REST adapter for NVD CVE API — CVE Change History. One Spectral-compliant resource per consumed operation, prefixed with /v1. resources: - path: /v1/cvehistory/2-0 name: cvehistory-2-0 description: REST surface for cvehistory-2.0. operations: - method: GET name: getcvechangehistory description: Get CVE change history call: cve-cve-change-history.getcvechangehistory with: cveId: rest.cveId changeStartDate: rest.changeStartDate changeEndDate: rest.changeEndDate eventName: rest.eventName resultsPerPage: rest.resultsPerPage startIndex: rest.startIndex outputParameters: - type: object mapping: $. - type: mcp namespace: cve-cve-change-history-mcp port: 9090 transport: http description: MCP adapter for NVD CVE API — CVE Change History. One tool per consumed operation, routed inline through this capability's consumes block. tools: - name: get-cve-change-history description: Get CVE change history hints: readOnly: true destructive: false idempotent: true call: cve-cve-change-history.getcvechangehistory with: cveId: tools.cveId changeStartDate: tools.changeStartDate changeEndDate: tools.changeEndDate eventName: tools.eventName resultsPerPage: tools.resultsPerPage startIndex: tools.startIndex outputParameters: - type: object mapping: $.