naftiko: 1.0.0-alpha2 info: label: supports a RESTful API for the Libpod library — secrets (compat) description: 'supports a RESTful API for the Libpod library — secrets (compat). 4 operations. Lead operation: List secrets. Self-contained Naftiko capability covering one Podman business surface.' tags: - Podman - secrets (compat) created: '2026-05-19' modified: '2026-05-19' binds: - namespace: env keys: PODMAN_API_KEY: PODMAN_API_KEY capability: consumes: - type: http namespace: podman-secrets-compat baseUri: http://podman.io description: supports a RESTful API for the Libpod library — secrets (compat) business capability. Self-contained, no shared references. resources: - name: secrets path: /secrets operations: - name: secretlist method: GET description: List secrets outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: filters in: query type: string description: 'JSON encoded value of the filters (a `map[string][]string`) to process on the secrets list. Currently available filters:' - name: secrets-create path: /secrets/create operations: - name: secretcreate method: POST description: Create a secret outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: create in: body type: string description: attributes for creating a secret - name: secrets-name path: /secrets/{name} operations: - name: secretdelete method: DELETE description: Remove secret outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: name in: path type: string description: the name or ID of the secret required: true - name: secretinspect method: GET description: Inspect secret outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: name in: path type: string description: the name or ID of the secret required: true exposes: - type: rest namespace: podman-secrets-compat-rest port: 8080 description: REST adapter for supports a RESTful API for the Libpod library — secrets (compat). One Spectral-compliant resource per consumed operation, prefixed with /v1. resources: - path: /v1/secrets name: secrets description: REST surface for secrets. operations: - method: GET name: secretlist description: List secrets call: podman-secrets-compat.secretlist with: filters: rest.filters outputParameters: - type: object mapping: $. - path: /v1/secrets/create name: secrets-create description: REST surface for secrets-create. operations: - method: POST name: secretcreate description: Create a secret call: podman-secrets-compat.secretcreate with: create: rest.create outputParameters: - type: object mapping: $. - path: /v1/secrets/{name} name: secrets-name description: REST surface for secrets-name. operations: - method: DELETE name: secretdelete description: Remove secret call: podman-secrets-compat.secretdelete with: name: rest.name outputParameters: - type: object mapping: $. - method: GET name: secretinspect description: Inspect secret call: podman-secrets-compat.secretinspect with: name: rest.name outputParameters: - type: object mapping: $. - type: mcp namespace: podman-secrets-compat-mcp port: 9090 transport: http description: MCP adapter for supports a RESTful API for the Libpod library — secrets (compat). One tool per consumed operation, routed inline through this capability's consumes block. tools: - name: list-secrets description: List secrets hints: readOnly: true destructive: false idempotent: true call: podman-secrets-compat.secretlist with: filters: tools.filters outputParameters: - type: object mapping: $. - name: create-secret description: Create a secret hints: readOnly: false destructive: false idempotent: false call: podman-secrets-compat.secretcreate with: create: tools.create outputParameters: - type: object mapping: $. - name: remove-secret description: Remove secret hints: readOnly: false destructive: true idempotent: true call: podman-secrets-compat.secretdelete with: name: tools.name outputParameters: - type: object mapping: $. - name: inspect-secret description: Inspect secret hints: readOnly: true destructive: false idempotent: true call: podman-secrets-compat.secretinspect with: name: tools.name outputParameters: - type: object mapping: $.