naftiko: 1.0.0-alpha2
info:
  label: Stytch B2B Identity Management
  description: Unified capability for B2B identity and access management workflows. Combines Stytch's B2B API for organization
    creation, member management, SSO configuration, and session management. Used by SaaS platform developers building multi-tenant
    authentication.
  tags:
  - Stytch
  - Authentication
  - B2B
  - Identity Management
  - SSO
  - Multi-Tenant
  - SaaS
  created: '2026-05-02'
  modified: '2026-05-06'
binds:
- namespace: env
  keys:
    STYTCH_PROJECT_ID: STYTCH_PROJECT_ID
    STYTCH_SECRET: STYTCH_SECRET
capability:
  consumes:
  - type: http
    namespace: stytch-b2b
    baseUri: https://api.stytch.com/v1/b2b
    description: Stytch B2B Authentication API for multi-tenant applications.
    authentication:
      type: basic
      username: '{{STYTCH_PROJECT_ID}}'
      password: '{{STYTCH_SECRET}}'
    resources:
    - name: organizations
      path: /organizations
      description: Organization management
      operations:
      - name: create-organization
        method: POST
        description: Create a new B2B organization
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        body:
          type: json
          data:
            organization_name: '{{tools.organization_name}}'
    - name: organization
      path: /organizations/{organization_id}
      description: Individual organization
      operations:
      - name: get-organization
        method: GET
        description: Get an organization by ID
        inputParameters:
        - name: organization_id
          in: path
          type: string
          required: true
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: delete-organization
        method: DELETE
        description: Delete an organization
        inputParameters:
        - name: organization_id
          in: path
          type: string
          required: true
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: organization-members
      path: /organizations/{organization_id}/members
      description: Organization member management
      operations:
      - name: list-members
        method: GET
        description: List organization members
        inputParameters:
        - name: organization_id
          in: path
          type: string
          required: true
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: create-member
        method: POST
        description: Create a new organization member
        inputParameters:
        - name: organization_id
          in: path
          type: string
          required: true
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        body:
          type: json
          data:
            email_address: '{{tools.email_address}}'
    - name: member
      path: /organizations/{organization_id}/members/{member_id}
      description: Individual member
      operations:
      - name: get-member
        method: GET
        description: Get a member by ID
        inputParameters:
        - name: organization_id
          in: path
          type: string
          required: true
        - name: member_id
          in: path
          type: string
          required: true
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: delete-member
        method: DELETE
        description: Delete a member
        inputParameters:
        - name: organization_id
          in: path
          type: string
          required: true
        - name: member_id
          in: path
          type: string
          required: true
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: b2b-magic-link-send
      path: /magic_links/email/send
      description: Send B2B magic links
      operations:
      - name: send-b2b-magic-link
        method: POST
        description: Send a magic link to a member
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        body:
          type: json
          data:
            email_address: '{{tools.email_address}}'
            organization_id: '{{tools.organization_id}}'
    - name: b2b-magic-link-authenticate
      path: /magic_links/authenticate
      description: Authenticate B2B magic links
      operations:
      - name: authenticate-b2b-magic-link
        method: POST
        description: Authenticate a member with a magic link token
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        body:
          type: json
          data:
            magic_links_token: '{{tools.token}}'
            session_duration_minutes: '{{tools.session_duration_minutes}}'
    - name: b2b-session-authenticate
      path: /sessions/authenticate
      description: Authenticate B2B sessions
      operations:
      - name: authenticate-b2b-session
        method: POST
        description: Validate and authenticate a B2B session
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sso-connections
      path: /sso/connections
      description: SSO connection management
      operations:
      - name: list-sso-connections
        method: GET
        description: List SSO connections for an organization
        inputParameters:
        - name: organization_id
          in: query
          type: string
          required: true
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: discovery
      path: /discovery/organizations
      description: Organization discovery
      operations:
      - name: discover-organizations
        method: POST
        description: Discover organizations a user can access
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
  exposes:
  - type: rest
    port: 8081
    namespace: stytch-b2b-identity-api
    description: Unified REST API for Stytch B2B identity and access management.
    resources:
    - path: /v1/organizations
      name: organizations
      description: Organization (tenant) management
      operations:
      - method: POST
        name: create-organization
        description: Create a B2B organization
        call: stytch-b2b.create-organization
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/organizations/{organization_id}
      name: organization
      description: Individual organization
      operations:
      - method: GET
        name: get-organization
        description: Get an organization
        call: stytch-b2b.get-organization
        with:
          organization_id: rest.organization_id
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/organizations/{organization_id}/members
      name: members
      description: Organization member management
      operations:
      - method: GET
        name: list-members
        description: List members
        call: stytch-b2b.list-members
        with:
          organization_id: rest.organization_id
        outputParameters:
        - type: object
          mapping: $.
      - method: POST
        name: create-member
        description: Invite a member
        call: stytch-b2b.create-member
        with:
          organization_id: rest.organization_id
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/magic-links/send
      name: b2b-magic-links
      description: B2B magic link authentication
      operations:
      - method: POST
        name: send-b2b-magic-link
        description: Send a magic link to a member
        call: stytch-b2b.send-b2b-magic-link
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/sso/connections
      name: sso-connections
      description: SSO connection management
      operations:
      - method: GET
        name: list-sso-connections
        description: List SSO connections for an organization
        call: stytch-b2b.list-sso-connections
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    port: 9081
    namespace: stytch-b2b-identity-mcp
    transport: http
    description: MCP server for AI-assisted Stytch B2B identity management.
    tools:
    - name: create-organization
      description: Create a new Stytch B2B organization (tenant) for a SaaS customer
      hints:
        readOnly: false
        destructive: false
      call: stytch-b2b.create-organization
      outputParameters:
      - type: object
        mapping: $.
    - name: get-organization
      description: Retrieve a Stytch B2B organization by ID
      hints:
        readOnly: true
      call: stytch-b2b.get-organization
      with:
        organization_id: tools.organization_id
      outputParameters:
      - type: object
        mapping: $.
    - name: list-members
      description: List members of a Stytch B2B organization
      hints:
        readOnly: true
      call: stytch-b2b.list-members
      with:
        organization_id: tools.organization_id
      outputParameters:
      - type: object
        mapping: $.
    - name: create-member
      description: Invite a new member to a Stytch B2B organization
      hints:
        readOnly: false
        destructive: false
      call: stytch-b2b.create-member
      with:
        organization_id: tools.organization_id
      outputParameters:
      - type: object
        mapping: $.
    - name: delete-member
      description: Remove a member from a Stytch B2B organization
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: stytch-b2b.delete-member
      with:
        organization_id: tools.organization_id
        member_id: tools.member_id
      outputParameters:
      - type: object
        mapping: $.
    - name: send-b2b-magic-link
      description: Send a Stytch magic link to authenticate a B2B organization member
      hints:
        readOnly: false
        destructive: false
      call: stytch-b2b.send-b2b-magic-link
      outputParameters:
      - type: object
        mapping: $.
    - name: authenticate-b2b-session
      description: Validate a Stytch B2B member session token
      hints:
        readOnly: true
        idempotent: true
      call: stytch-b2b.authenticate-b2b-session
      outputParameters:
      - type: object
        mapping: $.
    - name: list-sso-connections
      description: List SSO (SAML/OIDC) connections for a Stytch B2B organization
      hints:
        readOnly: true
      call: stytch-b2b.list-sso-connections
      with:
        organization_id: tools.organization_id
      outputParameters:
      - type: object
        mapping: $.
    - name: discover-organizations
      description: Discover Stytch B2B organizations a user can access
      hints:
        readOnly: true
        openWorld: true
      call: stytch-b2b.discover-organizations
      outputParameters:
      - type: object
        mapping: $.