naftiko: 1.0.0-alpha2 info: label: Snyk API — PersonalAccessToken description: 'Snyk API — PersonalAccessToken. 2 operations. Lead operation: List personal access tokens. Self-contained Naftiko capability covering one Snyk business surface.' tags: - Snyk - PersonalAccessToken created: '2026-05-19' modified: '2026-05-19' binds: - namespace: env keys: SNYK_API_KEY: SNYK_API_KEY capability: consumes: - type: http namespace: rest-personalaccesstoken baseUri: https://api.snyk.io/rest description: Snyk API — PersonalAccessToken business capability. Self-contained, no shared references. resources: - name: self-personal_access_tokens path: /self/personal_access_tokens operations: - name: listpersonalaccesstoken method: GET description: List personal access tokens outputRawFormat: json outputParameters: - name: result type: object value: $. - name: self-personal_access_tokens-personal_access_token_id path: /self/personal_access_tokens/{personal_access_token_id} operations: - name: deletepersonalaccesstoken method: DELETE description: Deletes a personal access token outputRawFormat: json outputParameters: - name: result type: object value: $. authentication: type: bearer token: '{{env.SNYK_API_KEY}}' exposes: - type: rest namespace: rest-personalaccesstoken-rest port: 8080 description: REST adapter for Snyk API — PersonalAccessToken. One Spectral-compliant resource per consumed operation, prefixed with /v1. resources: - path: /v1/self/personal-access-tokens name: self-personal-access-tokens description: REST surface for self-personal_access_tokens. operations: - method: GET name: listpersonalaccesstoken description: List personal access tokens call: rest-personalaccesstoken.listpersonalaccesstoken outputParameters: - type: object mapping: $. - path: /v1/self/personal-access-tokens/{personal-access-token-id} name: self-personal-access-tokens-personal-access-token-id description: REST surface for self-personal_access_tokens-personal_access_token_id. operations: - method: DELETE name: deletepersonalaccesstoken description: Deletes a personal access token call: rest-personalaccesstoken.deletepersonalaccesstoken outputParameters: - type: object mapping: $. - type: mcp namespace: rest-personalaccesstoken-mcp port: 9090 transport: http description: MCP adapter for Snyk API — PersonalAccessToken. One tool per consumed operation, routed inline through this capability's consumes block. tools: - name: list-personal-access-tokens description: List personal access tokens hints: readOnly: true destructive: false idempotent: true call: rest-personalaccesstoken.listpersonalaccesstoken outputParameters: - type: object mapping: $. - name: deletes-personal-access-token description: Deletes a personal access token hints: readOnly: false destructive: true idempotent: true call: rest-personalaccesstoken.deletepersonalaccesstoken outputParameters: - type: object mapping: $.