naftiko: 1.0.0-alpha2 info: label: Palo Alto Networks Cortex XSOAR REST API — Entries description: 'Palo Alto Networks Cortex XSOAR REST API — Entries. 1 operations. Lead operation: Palo Alto Networks Add Entry to Investigation. Self-contained Naftiko capability covering one Palo Alto Networks business surface.' tags: - Palo Alto Networks - Entries created: '2026-05-19' modified: '2026-05-19' binds: - namespace: env keys: PALO_ALTO_NETWORKS_API_KEY: PALO_ALTO_NETWORKS_API_KEY capability: consumes: - type: http namespace: palo-alto-cortex-xsoar-entries baseUri: https://{xsoar-server} description: Palo Alto Networks Cortex XSOAR REST API — Entries business capability. Self-contained, no shared references. resources: - name: entry path: /entry operations: - name: addentry method: POST description: Palo Alto Networks Add Entry to Investigation outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: true authentication: type: apikey key: Authorization value: '{{env.PALO_ALTO_NETWORKS_API_KEY}}' placement: header exposes: - type: rest namespace: palo-alto-cortex-xsoar-entries-rest port: 8080 description: REST adapter for Palo Alto Networks Cortex XSOAR REST API — Entries. One Spectral-compliant resource per consumed operation, prefixed with /v1. resources: - path: /v1/entry name: entry description: REST surface for entry. operations: - method: POST name: addentry description: Palo Alto Networks Add Entry to Investigation call: palo-alto-cortex-xsoar-entries.addentry with: body: rest.body outputParameters: - type: object mapping: $. - type: mcp namespace: palo-alto-cortex-xsoar-entries-mcp port: 9090 transport: http description: MCP adapter for Palo Alto Networks Cortex XSOAR REST API — Entries. One tool per consumed operation, routed inline through this capability's consumes block. tools: - name: palo-alto-networks-add-entry description: Palo Alto Networks Add Entry to Investigation hints: readOnly: false destructive: false idempotent: false call: palo-alto-cortex-xsoar-entries.addentry with: body: tools.body outputParameters: - type: object mapping: $.