naftiko: 1.0.0-alpha2
info:
  label: Saasment API — Security Posture
  description: 'Saasment API — Security Posture. 2 operations. Lead operation: List Monitored Applications. Self-contained
    Naftiko capability covering one Saasment business surface.'
  tags:
  - Saasment
  - Security Posture
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    SAASMENT_API_KEY: SAASMENT_API_KEY
capability:
  consumes:
  - type: http
    namespace: saasment-security-posture
    baseUri: https://api.saasment.com/v1
    description: Saasment API — Security Posture business capability. Self-contained, no shared references.
    resources:
    - name: posture-applications
      path: /posture/applications
      operations:
      - name: listmonitoredapplications
        method: GET
        description: List Monitored Applications
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: page
          in: query
          type: integer
        - name: per_page
          in: query
          type: integer
    - name: posture-score
      path: /posture/score
      operations:
      - name: getposturescore
        method: GET
        description: Get Security Posture Score
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: app_ids
          in: query
          type: string
          description: Comma-separated list of application IDs to filter
    authentication:
      type: bearer
      token: '{{env.SAASMENT_API_KEY}}'
  exposes:
  - type: rest
    namespace: saasment-security-posture-rest
    port: 8080
    description: REST adapter for Saasment API — Security Posture. One Spectral-compliant resource per consumed operation,
      prefixed with /v1.
    resources:
    - path: /v1/posture/applications
      name: posture-applications
      description: REST surface for posture-applications.
      operations:
      - method: GET
        name: listmonitoredapplications
        description: List Monitored Applications
        call: saasment-security-posture.listmonitoredapplications
        with:
          page: rest.page
          per_page: rest.per_page
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/posture/score
      name: posture-score
      description: REST surface for posture-score.
      operations:
      - method: GET
        name: getposturescore
        description: Get Security Posture Score
        call: saasment-security-posture.getposturescore
        with:
          app_ids: rest.app_ids
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: saasment-security-posture-mcp
    port: 9090
    transport: http
    description: MCP adapter for Saasment API — Security Posture. One tool per consumed operation, routed inline through this
      capability's consumes block.
    tools:
    - name: list-monitored-applications
      description: List Monitored Applications
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: saasment-security-posture.listmonitoredapplications
      with:
        page: tools.page
        per_page: tools.per_page
      outputParameters:
      - type: object
        mapping: $.
    - name: get-security-posture-score
      description: Get Security Posture Score
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: saasment-security-posture.getposturescore
      with:
        app_ids: tools.app_ids
      outputParameters:
      - type: object
        mapping: $.