naftiko: 1.0.0-alpha2 info: label: Trellix Web Gateway Reporting API — Statistics description: 'Trellix Web Gateway Reporting API — Statistics. 4 operations. Lead operation: Get threat statistics. Self-contained Naftiko capability covering one Trellix Web Gateway business surface.' tags: - Trellix Web Gateway - Statistics created: '2026-05-19' modified: '2026-05-19' binds: - namespace: env keys: TRELLIX_WEB_GATEWAY_API_KEY: TRELLIX_WEB_GATEWAY_API_KEY capability: consumes: - type: http namespace: reporting-statistics baseUri: https://{mwg-server}:{port}/reporter/api description: Trellix Web Gateway Reporting API — Statistics business capability. Self-contained, no shared references. resources: - name: statistics-threats path: /statistics/threats operations: - name: getthreatstatistics method: GET description: Get threat statistics outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: granularity in: query type: string description: Time granularity for aggregation - name: statistics-top-categories path: /statistics/top/categories operations: - name: gettopcategories method: GET description: Get top URL categories outputRawFormat: json outputParameters: - name: result type: object value: $. - name: statistics-top-urls path: /statistics/top/urls operations: - name: gettopurls method: GET description: Get top accessed URLs outputRawFormat: json outputParameters: - name: result type: object value: $. - name: statistics-traffic path: /statistics/traffic operations: - name: gettrafficstatistics method: GET description: Get traffic statistics outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: granularity in: query type: string description: Time granularity for aggregation authentication: type: apikey key: JSESSIONID value: '{{env.TRELLIX_WEB_GATEWAY_API_KEY}}' placement: cookie exposes: - type: rest namespace: reporting-statistics-rest port: 8080 description: REST adapter for Trellix Web Gateway Reporting API — Statistics. One Spectral-compliant resource per consumed operation, prefixed with /v1. resources: - path: /v1/statistics/threats name: statistics-threats description: REST surface for statistics-threats. operations: - method: GET name: getthreatstatistics description: Get threat statistics call: reporting-statistics.getthreatstatistics with: granularity: rest.granularity outputParameters: - type: object mapping: $. - path: /v1/statistics/top/categories name: statistics-top-categories description: REST surface for statistics-top-categories. operations: - method: GET name: gettopcategories description: Get top URL categories call: reporting-statistics.gettopcategories outputParameters: - type: object mapping: $. - path: /v1/statistics/top/urls name: statistics-top-urls description: REST surface for statistics-top-urls. operations: - method: GET name: gettopurls description: Get top accessed URLs call: reporting-statistics.gettopurls outputParameters: - type: object mapping: $. - path: /v1/statistics/traffic name: statistics-traffic description: REST surface for statistics-traffic. operations: - method: GET name: gettrafficstatistics description: Get traffic statistics call: reporting-statistics.gettrafficstatistics with: granularity: rest.granularity outputParameters: - type: object mapping: $. - type: mcp namespace: reporting-statistics-mcp port: 9090 transport: http description: MCP adapter for Trellix Web Gateway Reporting API — Statistics. One tool per consumed operation, routed inline through this capability's consumes block. tools: - name: get-threat-statistics description: Get threat statistics hints: readOnly: true destructive: false idempotent: true call: reporting-statistics.getthreatstatistics with: granularity: tools.granularity outputParameters: - type: object mapping: $. - name: get-top-url-categories description: Get top URL categories hints: readOnly: true destructive: false idempotent: true call: reporting-statistics.gettopcategories outputParameters: - type: object mapping: $. - name: get-top-accessed-urls description: Get top accessed URLs hints: readOnly: true destructive: false idempotent: true call: reporting-statistics.gettopurls outputParameters: - type: object mapping: $. - name: get-traffic-statistics description: Get traffic statistics hints: readOnly: true destructive: false idempotent: true call: reporting-statistics.gettrafficstatistics with: granularity: tools.granularity outputParameters: - type: object mapping: $.