naftiko: 1.0.0-alpha2 info: label: Palo Alto Networks Prisma Cloud CSPM API — Policies description: 'Palo Alto Networks Prisma Cloud CSPM API — Policies. 4 operations. Lead operation: Palo Alto Networks List Policies. Self-contained Naftiko capability covering one Palo Alto Networks business surface.' tags: - Palo Alto Networks - Policies created: '2026-05-19' modified: '2026-05-19' binds: - namespace: env keys: PALO_ALTO_NETWORKS_API_KEY: PALO_ALTO_NETWORKS_API_KEY capability: consumes: - type: http namespace: palo-alto-prisma-cloud-cspm-policies baseUri: https://api.prismacloud.io description: Palo Alto Networks Prisma Cloud CSPM API — Policies business capability. Self-contained, no shared references. resources: - name: policy path: /policy operations: - name: listpolicies method: GET description: Palo Alto Networks List Policies outputRawFormat: json outputParameters: - name: result type: object value: $. - name: createpolicy method: POST description: Palo Alto Networks Create a Custom Policy outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: true - name: policy-policyId path: /policy/{policyId} operations: - name: getpolicy method: GET description: Palo Alto Networks Get Policy Details outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: policyId in: path type: string description: Unique policy identifier. required: true - name: updatepolicy method: PUT description: Palo Alto Networks Update a Policy outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: policyId in: path type: string description: Unique policy identifier. required: true - name: body in: body type: object description: Request body (JSON). required: true authentication: type: bearer token: '{{env.PALO_ALTO_NETWORKS_API_KEY}}' exposes: - type: rest namespace: palo-alto-prisma-cloud-cspm-policies-rest port: 8080 description: REST adapter for Palo Alto Networks Prisma Cloud CSPM API — Policies. One Spectral-compliant resource per consumed operation, prefixed with /v1. resources: - path: /v1/policy name: policy description: REST surface for policy. operations: - method: GET name: listpolicies description: Palo Alto Networks List Policies call: palo-alto-prisma-cloud-cspm-policies.listpolicies outputParameters: - type: object mapping: $. - method: POST name: createpolicy description: Palo Alto Networks Create a Custom Policy call: palo-alto-prisma-cloud-cspm-policies.createpolicy with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/policy/{policyid} name: policy-policyid description: REST surface for policy-policyId. operations: - method: GET name: getpolicy description: Palo Alto Networks Get Policy Details call: palo-alto-prisma-cloud-cspm-policies.getpolicy with: policyId: rest.policyId outputParameters: - type: object mapping: $. - method: PUT name: updatepolicy description: Palo Alto Networks Update a Policy call: palo-alto-prisma-cloud-cspm-policies.updatepolicy with: policyId: rest.policyId body: rest.body outputParameters: - type: object mapping: $. - type: mcp namespace: palo-alto-prisma-cloud-cspm-policies-mcp port: 9090 transport: http description: MCP adapter for Palo Alto Networks Prisma Cloud CSPM API — Policies. One tool per consumed operation, routed inline through this capability's consumes block. tools: - name: palo-alto-networks-list-policies description: Palo Alto Networks List Policies hints: readOnly: true destructive: false idempotent: true call: palo-alto-prisma-cloud-cspm-policies.listpolicies outputParameters: - type: object mapping: $. - name: palo-alto-networks-create-custom description: Palo Alto Networks Create a Custom Policy hints: readOnly: false destructive: false idempotent: false call: palo-alto-prisma-cloud-cspm-policies.createpolicy with: body: tools.body outputParameters: - type: object mapping: $. - name: palo-alto-networks-get-policy description: Palo Alto Networks Get Policy Details hints: readOnly: true destructive: false idempotent: true call: palo-alto-prisma-cloud-cspm-policies.getpolicy with: policyId: tools.policyId outputParameters: - type: object mapping: $. - name: palo-alto-networks-update-policy description: Palo Alto Networks Update a Policy hints: readOnly: false destructive: false idempotent: true call: palo-alto-prisma-cloud-cspm-policies.updatepolicy with: policyId: tools.policyId body: tools.body outputParameters: - type: object mapping: $.