naftiko: 1.0.0-alpha2 info: label: ZAP API — soap description: 'ZAP API — soap. 2 operations. Lead operation: soap. Self-contained Naftiko capability covering one Owasp Zap business surface.' tags: - Owasp Zap - soap created: '2026-05-19' modified: '2026-05-19' binds: - namespace: env keys: OWASP_ZAP_API_KEY: OWASP_ZAP_API_KEY capability: consumes: - type: http namespace: owasp-zap-soap baseUri: http://zap description: ZAP API — soap business capability. Self-contained, no shared references. resources: - name: JSON-soap-action-importFile path: /JSON/soap/action/importFile/ operations: - name: soapactionimportfile method: GET description: Import a WSDL definition from local file. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: JSON-soap-action-importUrl path: /JSON/soap/action/importUrl/ operations: - name: soapactionimporturl method: GET description: Import a WSDL definition from a URL. outputRawFormat: json outputParameters: - name: result type: object value: $. authentication: type: apikey key: X-ZAP-API-Key value: '{{env.OWASP_ZAP_API_KEY}}' placement: header exposes: - type: rest namespace: owasp-zap-soap-rest port: 8080 description: REST adapter for ZAP API — soap. One Spectral-compliant resource per consumed operation, prefixed with /v1. resources: - path: /v1/json/soap/action/importfile name: json-soap-action-importfile description: REST surface for JSON-soap-action-importFile. operations: - method: GET name: soapactionimportfile description: Import a WSDL definition from local file. call: owasp-zap-soap.soapactionimportfile outputParameters: - type: object mapping: $. - path: /v1/json/soap/action/importurl name: json-soap-action-importurl description: REST surface for JSON-soap-action-importUrl. operations: - method: GET name: soapactionimporturl description: Import a WSDL definition from a URL. call: owasp-zap-soap.soapactionimporturl outputParameters: - type: object mapping: $. - type: mcp namespace: owasp-zap-soap-mcp port: 9090 transport: http description: MCP adapter for ZAP API — soap. One tool per consumed operation, routed inline through this capability's consumes block. tools: - name: import-wsdl-definition-local-file description: Import a WSDL definition from local file. hints: readOnly: true destructive: false idempotent: true call: owasp-zap-soap.soapactionimportfile outputParameters: - type: object mapping: $. - name: import-wsdl-definition-url description: Import a WSDL definition from a URL. hints: readOnly: true destructive: false idempotent: true call: owasp-zap-soap.soapactionimporturl outputParameters: - type: object mapping: $.