naftiko: 1.0.0-alpha2 info: label: Palo Alto Networks Prisma Cloud CSPM API — CloudAccounts description: 'Palo Alto Networks Prisma Cloud CSPM API — CloudAccounts. 3 operations. Lead operation: Palo Alto Networks List Cloud Accounts. Self-contained Naftiko capability covering one Palo Alto Networks business surface.' tags: - Palo Alto Networks - CloudAccounts created: '2026-05-19' modified: '2026-05-19' binds: - namespace: env keys: PALO_ALTO_NETWORKS_API_KEY: PALO_ALTO_NETWORKS_API_KEY capability: consumes: - type: http namespace: palo-alto-prisma-cloud-cspm-cloudaccounts baseUri: https://api.prismacloud.io description: Palo Alto Networks Prisma Cloud CSPM API — CloudAccounts business capability. Self-contained, no shared references. resources: - name: cloud path: /cloud operations: - name: listcloudaccounts method: GET description: Palo Alto Networks List Cloud Accounts outputRawFormat: json outputParameters: - name: result type: object value: $. - name: cloud-cloudType path: /cloud/{cloudType} operations: - name: addcloudaccount method: POST description: Palo Alto Networks Add a Cloud Account outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: cloudType in: path type: string description: Cloud provider type to onboard. required: true - name: body in: body type: object description: Request body (JSON). required: true - name: cloud-cloudType-id path: /cloud/{cloudType}/{id} operations: - name: removecloudaccount method: DELETE description: Palo Alto Networks Remove a Cloud Account outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: cloudType in: path type: string description: Cloud provider type. required: true - name: id in: path type: string description: Cloud account identifier. required: true authentication: type: bearer token: '{{env.PALO_ALTO_NETWORKS_API_KEY}}' exposes: - type: rest namespace: palo-alto-prisma-cloud-cspm-cloudaccounts-rest port: 8080 description: REST adapter for Palo Alto Networks Prisma Cloud CSPM API — CloudAccounts. One Spectral-compliant resource per consumed operation, prefixed with /v1. resources: - path: /v1/cloud name: cloud description: REST surface for cloud. operations: - method: GET name: listcloudaccounts description: Palo Alto Networks List Cloud Accounts call: palo-alto-prisma-cloud-cspm-cloudaccounts.listcloudaccounts outputParameters: - type: object mapping: $. - path: /v1/cloud/{cloudtype} name: cloud-cloudtype description: REST surface for cloud-cloudType. operations: - method: POST name: addcloudaccount description: Palo Alto Networks Add a Cloud Account call: palo-alto-prisma-cloud-cspm-cloudaccounts.addcloudaccount with: cloudType: rest.cloudType body: rest.body outputParameters: - type: object mapping: $. - path: /v1/cloud/{cloudtype}/{id} name: cloud-cloudtype-id description: REST surface for cloud-cloudType-id. operations: - method: DELETE name: removecloudaccount description: Palo Alto Networks Remove a Cloud Account call: palo-alto-prisma-cloud-cspm-cloudaccounts.removecloudaccount with: cloudType: rest.cloudType id: rest.id outputParameters: - type: object mapping: $. - type: mcp namespace: palo-alto-prisma-cloud-cspm-cloudaccounts-mcp port: 9090 transport: http description: MCP adapter for Palo Alto Networks Prisma Cloud CSPM API — CloudAccounts. One tool per consumed operation, routed inline through this capability's consumes block. tools: - name: palo-alto-networks-list-cloud description: Palo Alto Networks List Cloud Accounts hints: readOnly: true destructive: false idempotent: true call: palo-alto-prisma-cloud-cspm-cloudaccounts.listcloudaccounts outputParameters: - type: object mapping: $. - name: palo-alto-networks-add-cloud description: Palo Alto Networks Add a Cloud Account hints: readOnly: false destructive: false idempotent: false call: palo-alto-prisma-cloud-cspm-cloudaccounts.addcloudaccount with: cloudType: tools.cloudType body: tools.body outputParameters: - type: object mapping: $. - name: palo-alto-networks-remove-cloud description: Palo Alto Networks Remove a Cloud Account hints: readOnly: false destructive: true idempotent: true call: palo-alto-prisma-cloud-cspm-cloudaccounts.removecloudaccount with: cloudType: tools.cloudType id: tools.id outputParameters: - type: object mapping: $.