naftiko: 1.0.0-alpha2 info: label: Pulumi APIs — CloudSetup description: 'Pulumi APIs — CloudSetup. 10 operations. Lead operation: AWSSetup. Self-contained Naftiko capability covering one Pulumi business surface.' tags: - Pulumi - CloudSetup created: '2026-05-19' modified: '2026-05-19' binds: - namespace: env keys: PULUMI_API_KEY: PULUMI_API_KEY capability: consumes: - type: http namespace: pulumi-cloudsetup baseUri: '' description: Pulumi APIs — CloudSetup business capability. Self-contained, no shared references. resources: - name: api-esc-cloudsetup-orgName-aws-setup path: /api/esc/cloudsetup/{orgName}/aws/setup operations: - name: awssetup method: POST description: AWSSetup outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: orgName in: path type: string description: The organization name required: true - name: body in: body type: object description: Request body (JSON). required: false - name: api-esc-cloudsetup-orgName-aws-sso-accounts path: /api/esc/cloudsetup/{orgName}/aws/sso/accounts operations: - name: awsssolistaccounts method: GET description: AWSSSOListAccounts outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: orgName in: path type: string description: The organization name required: true - name: region in: query type: string description: The AWS region - name: sessionId in: query type: string description: The SSO session identifier - name: api-esc-cloudsetup-orgName-aws-sso-initiate path: /api/esc/cloudsetup/{orgName}/aws/sso/initiate operations: - name: awsssoinitiate method: POST description: AWSSSOInitiate outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: orgName in: path type: string description: The organization name required: true - name: body in: body type: object description: Request body (JSON). required: false - name: api-esc-cloudsetup-orgName-aws-sso-setup path: /api/esc/cloudsetup/{orgName}/aws/sso/setup operations: - name: awsssosetup method: POST description: AWSSSOSetup outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: orgName in: path type: string description: The organization name required: true - name: body in: body type: object description: Request body (JSON). required: false - name: api-esc-cloudsetup-orgName-oauth-azure-accounts path: /api/esc/cloudsetup/{orgName}/oauth/azure/accounts operations: - name: azurelistaccounts method: GET description: AzureListAccounts outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: orgName in: path type: string description: The organization name required: true - name: armSessionId in: query type: string description: The Azure ARM session identifier - name: api-esc-cloudsetup-orgName-oauth-azure-setup path: /api/esc/cloudsetup/{orgName}/oauth/azure/setup operations: - name: azuresetup method: POST description: AzureSetup outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: orgName in: path type: string description: The organization name required: true - name: body in: body type: object description: Request body (JSON). required: false - name: api-esc-cloudsetup-orgName-oauth-complete path: /api/esc/cloudsetup/{orgName}/oauth/complete operations: - name: completeoauth method: POST description: CompleteOAuth outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: orgName in: path type: string description: The organization name required: true - name: body in: body type: object description: Request body (JSON). required: false - name: api-esc-cloudsetup-orgName-oauth-gcp-accounts path: /api/esc/cloudsetup/{orgName}/oauth/gcp/accounts operations: - name: gcplistaccounts method: GET description: GCPListAccounts outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: orgName in: path type: string description: The organization name required: true - name: oauthSessionId in: query type: string description: The OAuth session identifier - name: api-esc-cloudsetup-orgName-oauth-gcp-setup path: /api/esc/cloudsetup/{orgName}/oauth/gcp/setup operations: - name: gcpsetup method: POST description: GCPSetup outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: orgName in: path type: string description: The organization name required: true - name: body in: body type: object description: Request body (JSON). required: false - name: api-esc-cloudsetup-orgName-oauth-initiate path: /api/esc/cloudsetup/{orgName}/oauth/initiate operations: - name: initiateoauth method: POST description: InitiateOAuth outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: orgName in: path type: string description: The organization name required: true - name: body in: body type: object description: Request body (JSON). required: false exposes: - type: rest namespace: pulumi-cloudsetup-rest port: 8080 description: REST adapter for Pulumi APIs — CloudSetup. One Spectral-compliant resource per consumed operation, prefixed with /v1. resources: - path: /v1/api/esc/cloudsetup/{orgname}/aws/setup name: api-esc-cloudsetup-orgname-aws-setup description: REST surface for api-esc-cloudsetup-orgName-aws-setup. operations: - method: POST name: awssetup description: AWSSetup call: pulumi-cloudsetup.awssetup with: orgName: rest.orgName body: rest.body outputParameters: - type: object mapping: $. - path: /v1/api/esc/cloudsetup/{orgname}/aws/sso/accounts name: api-esc-cloudsetup-orgname-aws-sso-accounts description: REST surface for api-esc-cloudsetup-orgName-aws-sso-accounts. operations: - method: GET name: awsssolistaccounts description: AWSSSOListAccounts call: pulumi-cloudsetup.awsssolistaccounts with: orgName: rest.orgName region: rest.region sessionId: rest.sessionId outputParameters: - type: object mapping: $. - path: /v1/api/esc/cloudsetup/{orgname}/aws/sso/initiate name: api-esc-cloudsetup-orgname-aws-sso-initiate description: REST surface for api-esc-cloudsetup-orgName-aws-sso-initiate. operations: - method: POST name: awsssoinitiate description: AWSSSOInitiate call: pulumi-cloudsetup.awsssoinitiate with: orgName: rest.orgName body: rest.body outputParameters: - type: object mapping: $. - path: /v1/api/esc/cloudsetup/{orgname}/aws/sso/setup name: api-esc-cloudsetup-orgname-aws-sso-setup description: REST surface for api-esc-cloudsetup-orgName-aws-sso-setup. operations: - method: POST name: awsssosetup description: AWSSSOSetup call: pulumi-cloudsetup.awsssosetup with: orgName: rest.orgName body: rest.body outputParameters: - type: object mapping: $. - path: /v1/api/esc/cloudsetup/{orgname}/oauth/azure/accounts name: api-esc-cloudsetup-orgname-oauth-azure-accounts description: REST surface for api-esc-cloudsetup-orgName-oauth-azure-accounts. operations: - method: GET name: azurelistaccounts description: AzureListAccounts call: pulumi-cloudsetup.azurelistaccounts with: orgName: rest.orgName armSessionId: rest.armSessionId outputParameters: - type: object mapping: $. - path: /v1/api/esc/cloudsetup/{orgname}/oauth/azure/setup name: api-esc-cloudsetup-orgname-oauth-azure-setup description: REST surface for api-esc-cloudsetup-orgName-oauth-azure-setup. operations: - method: POST name: azuresetup description: AzureSetup call: pulumi-cloudsetup.azuresetup with: orgName: rest.orgName body: rest.body outputParameters: - type: object mapping: $. - path: /v1/api/esc/cloudsetup/{orgname}/oauth/complete name: api-esc-cloudsetup-orgname-oauth-complete description: REST surface for api-esc-cloudsetup-orgName-oauth-complete. operations: - method: POST name: completeoauth description: CompleteOAuth call: pulumi-cloudsetup.completeoauth with: orgName: rest.orgName body: rest.body outputParameters: - type: object mapping: $. - path: /v1/api/esc/cloudsetup/{orgname}/oauth/gcp/accounts name: api-esc-cloudsetup-orgname-oauth-gcp-accounts description: REST surface for api-esc-cloudsetup-orgName-oauth-gcp-accounts. operations: - method: GET name: gcplistaccounts description: GCPListAccounts call: pulumi-cloudsetup.gcplistaccounts with: orgName: rest.orgName oauthSessionId: rest.oauthSessionId outputParameters: - type: object mapping: $. - path: /v1/api/esc/cloudsetup/{orgname}/oauth/gcp/setup name: api-esc-cloudsetup-orgname-oauth-gcp-setup description: REST surface for api-esc-cloudsetup-orgName-oauth-gcp-setup. operations: - method: POST name: gcpsetup description: GCPSetup call: pulumi-cloudsetup.gcpsetup with: orgName: rest.orgName body: rest.body outputParameters: - type: object mapping: $. - path: /v1/api/esc/cloudsetup/{orgname}/oauth/initiate name: api-esc-cloudsetup-orgname-oauth-initiate description: REST surface for api-esc-cloudsetup-orgName-oauth-initiate. operations: - method: POST name: initiateoauth description: InitiateOAuth call: pulumi-cloudsetup.initiateoauth with: orgName: rest.orgName body: rest.body outputParameters: - type: object mapping: $. - type: mcp namespace: pulumi-cloudsetup-mcp port: 9090 transport: http description: MCP adapter for Pulumi APIs — CloudSetup. One tool per consumed operation, routed inline through this capability's consumes block. tools: - name: awssetup description: AWSSetup hints: readOnly: false destructive: false idempotent: false call: pulumi-cloudsetup.awssetup with: orgName: tools.orgName body: tools.body outputParameters: - type: object mapping: $. - name: awsssolistaccounts description: AWSSSOListAccounts hints: readOnly: true destructive: false idempotent: true call: pulumi-cloudsetup.awsssolistaccounts with: orgName: tools.orgName region: tools.region sessionId: tools.sessionId outputParameters: - type: object mapping: $. - name: awsssoinitiate description: AWSSSOInitiate hints: readOnly: false destructive: false idempotent: false call: pulumi-cloudsetup.awsssoinitiate with: orgName: tools.orgName body: tools.body outputParameters: - type: object mapping: $. - name: awsssosetup description: AWSSSOSetup hints: readOnly: false destructive: false idempotent: false call: pulumi-cloudsetup.awsssosetup with: orgName: tools.orgName body: tools.body outputParameters: - type: object mapping: $. - name: azurelistaccounts description: AzureListAccounts hints: readOnly: true destructive: false idempotent: true call: pulumi-cloudsetup.azurelistaccounts with: orgName: tools.orgName armSessionId: tools.armSessionId outputParameters: - type: object mapping: $. - name: azuresetup description: AzureSetup hints: readOnly: false destructive: false idempotent: false call: pulumi-cloudsetup.azuresetup with: orgName: tools.orgName body: tools.body outputParameters: - type: object mapping: $. - name: completeoauth description: CompleteOAuth hints: readOnly: false destructive: false idempotent: false call: pulumi-cloudsetup.completeoauth with: orgName: tools.orgName body: tools.body outputParameters: - type: object mapping: $. - name: gcplistaccounts description: GCPListAccounts hints: readOnly: true destructive: false idempotent: true call: pulumi-cloudsetup.gcplistaccounts with: orgName: tools.orgName oauthSessionId: tools.oauthSessionId outputParameters: - type: object mapping: $. - name: gcpsetup description: GCPSetup hints: readOnly: false destructive: false idempotent: false call: pulumi-cloudsetup.gcpsetup with: orgName: tools.orgName body: tools.body outputParameters: - type: object mapping: $. - name: initiateoauth description: InitiateOAuth hints: readOnly: false destructive: false idempotent: false call: pulumi-cloudsetup.initiateoauth with: orgName: tools.orgName body: tools.body outputParameters: - type: object mapping: $.