naftiko: 1.0.0-alpha2
info:
  label: CIE Directory Sync Service APIs Mounted on Strata Cloud Manger — Directory Sync Service
  description: 'CIE Directory Sync Service APIs Mounted on Strata Cloud Manger — Directory Sync Service. 3 operations. Lead
    operation: Palo Alto Networks Group Information. Self-contained Naftiko capability covering one Palo Alto Networks business
    surface.'
  tags:
  - Palo Alto Networks
  - Directory Sync Service
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    PALO_ALTO_NETWORKS_API_KEY: PALO_ALTO_NETWORKS_API_KEY
capability:
  consumes:
  - type: http
    namespace: palo-alto-cloud-identity-engine-directory-sync-service
    baseUri: ''
    description: CIE Directory Sync Service APIs Mounted on Strata Cloud Manger — Directory Sync Service business capability.
      Self-contained, no shared references.
    resources:
    - name: https:-api.sase.paloaltonetworks.com-cie-directory-sync-v1-cache-groups
      path: https://api.sase.paloaltonetworks.com/cie/directory-sync/v1/cache-groups
      operations:
      - name: post
        method: POST
        description: Palo Alto Networks Group Information
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: https:-api.sase.paloaltonetworks.com-cie-directory-sync-v1-cache-users
      path: https://api.sase.paloaltonetworks.com/cie/directory-sync/v1/cache-users
      operations:
      - name: post
        method: POST
        description: Palo Alto Networks User Information
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: https:-api.sase.paloaltonetworks.com-cie-directory-sync-v1-domains
      path: https://api.sase.paloaltonetworks.com/cie/directory-sync/v1/domains
      operations:
      - name: get
        method: GET
        description: Palo Alto Networks Domain Details
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
  exposes:
  - type: rest
    namespace: palo-alto-cloud-identity-engine-directory-sync-service-rest
    port: 8080
    description: REST adapter for CIE Directory Sync Service APIs Mounted on Strata Cloud Manger — Directory Sync Service.
      One Spectral-compliant resource per consumed operation, prefixed with /v1.
    resources:
    - path: /v1/https/api-sase-paloaltonetworks-com/cie/directory-sync/v1/cache-groups
      name: https-api-sase-paloaltonetworks-com-cie-directory-sync-v1-cache-groups
      description: REST surface for https:-api.sase.paloaltonetworks.com-cie-directory-sync-v1-cache-groups.
      operations:
      - method: POST
        name: post
        description: Palo Alto Networks Group Information
        call: palo-alto-cloud-identity-engine-directory-sync-service.post
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/https/api-sase-paloaltonetworks-com/cie/directory-sync/v1/cache-users
      name: https-api-sase-paloaltonetworks-com-cie-directory-sync-v1-cache-users
      description: REST surface for https:-api.sase.paloaltonetworks.com-cie-directory-sync-v1-cache-users.
      operations:
      - method: POST
        name: post
        description: Palo Alto Networks User Information
        call: palo-alto-cloud-identity-engine-directory-sync-service.post
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/https/api-sase-paloaltonetworks-com/cie/directory-sync/v1/domains
      name: https-api-sase-paloaltonetworks-com-cie-directory-sync-v1-domains
      description: REST surface for https:-api.sase.paloaltonetworks.com-cie-directory-sync-v1-domains.
      operations:
      - method: GET
        name: get
        description: Palo Alto Networks Domain Details
        call: palo-alto-cloud-identity-engine-directory-sync-service.get
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: palo-alto-cloud-identity-engine-directory-sync-service-mcp
    port: 9090
    transport: http
    description: MCP adapter for CIE Directory Sync Service APIs Mounted on Strata Cloud Manger — Directory Sync Service.
      One tool per consumed operation, routed inline through this capability's consumes block.
    tools:
    - name: palo-alto-networks-group-information
      description: Palo Alto Networks Group Information
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: palo-alto-cloud-identity-engine-directory-sync-service.post
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: palo-alto-networks-user-information
      description: Palo Alto Networks User Information
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: palo-alto-cloud-identity-engine-directory-sync-service.post
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: palo-alto-networks-domain-details
      description: Palo Alto Networks Domain Details
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: palo-alto-cloud-identity-engine-directory-sync-service.get
      outputParameters:
      - type: object
        mapping: $.