naftiko: 1.0.0-alpha2 info: label: Secure Code Warrior Portal API — Courses description: 'Secure Code Warrior Portal API — Courses. 2 operations. Lead operation: List Courses. Self-contained Naftiko capability covering one Secure Code Warrior business surface.' tags: - Secure Code Warrior - Courses created: '2026-05-19' modified: '2026-05-19' binds: - namespace: env keys: SECURE_CODE_WARRIOR_API_KEY: SECURE_CODE_WARRIOR_API_KEY capability: consumes: - type: http namespace: portal-courses baseUri: https://portal-api.securecodewarrior.com/api/v2 description: Secure Code Warrior Portal API — Courses business capability. Self-contained, no shared references. resources: - name: courses path: /courses operations: - name: listcourses method: GET description: List Courses outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: page in: query type: integer - name: includeBadges in: query type: boolean - name: courses-course_id-assign path: /courses/{course_id}/assign operations: - name: assigncourse method: POST description: Assign Course outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: course_id in: path type: string required: true - name: body in: body type: object description: Request body (JSON). required: true authentication: type: apikey key: X-API-Key value: '{{env.SECURE_CODE_WARRIOR_API_KEY}}' placement: header exposes: - type: rest namespace: portal-courses-rest port: 8080 description: REST adapter for Secure Code Warrior Portal API — Courses. One Spectral-compliant resource per consumed operation, prefixed with /v1. resources: - path: /v1/courses name: courses description: REST surface for courses. operations: - method: GET name: listcourses description: List Courses call: portal-courses.listcourses with: page: rest.page includeBadges: rest.includeBadges outputParameters: - type: object mapping: $. - path: /v1/courses/{course-id}/assign name: courses-course-id-assign description: REST surface for courses-course_id-assign. operations: - method: POST name: assigncourse description: Assign Course call: portal-courses.assigncourse with: course_id: rest.course_id body: rest.body outputParameters: - type: object mapping: $. - type: mcp namespace: portal-courses-mcp port: 9090 transport: http description: MCP adapter for Secure Code Warrior Portal API — Courses. One tool per consumed operation, routed inline through this capability's consumes block. tools: - name: list-courses description: List Courses hints: readOnly: true destructive: false idempotent: true call: portal-courses.listcourses with: page: tools.page includeBadges: tools.includeBadges outputParameters: - type: object mapping: $. - name: assign-course description: Assign Course hints: readOnly: false destructive: false idempotent: false call: portal-courses.assigncourse with: course_id: tools.course_id body: tools.body outputParameters: - type: object mapping: $.