naftiko: 1.0.0-alpha2 info: label: Trellix ePO SaaS API — Devices description: 'Trellix ePO SaaS API — Devices. 2 operations. Lead operation: List managed devices. Self-contained Naftiko capability covering one Trellix business surface.' tags: - Trellix - Devices created: '2026-05-19' modified: '2026-05-19' binds: - namespace: env keys: TRELLIX_API_KEY: TRELLIX_API_KEY capability: consumes: - type: http namespace: epo-saas-devices baseUri: https://api.manage.trellix.com description: Trellix ePO SaaS API — Devices business capability. Self-contained, no shared references. resources: - name: epo-v2-devices path: /epo/v2/devices operations: - name: listdevices method: GET description: List managed devices outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: filter in: query type: string description: Filter expression to narrow device results by attributes such as name, operating system, or agent status. - name: sort in: query type: string description: Sort order for results, specified as a field name with optional direction prefix (+ for ascending, - for descending). - name: epo-v2-devices-deviceId path: /epo/v2/devices/{deviceId} operations: - name: getdevice method: GET description: Get device details outputRawFormat: json outputParameters: - name: result type: object value: $. authentication: type: bearer token: '{{env.TRELLIX_API_KEY}}' exposes: - type: rest namespace: epo-saas-devices-rest port: 8080 description: REST adapter for Trellix ePO SaaS API — Devices. One Spectral-compliant resource per consumed operation, prefixed with /v1. resources: - path: /v1/epo/v2/devices name: epo-v2-devices description: REST surface for epo-v2-devices. operations: - method: GET name: listdevices description: List managed devices call: epo-saas-devices.listdevices with: filter: rest.filter sort: rest.sort outputParameters: - type: object mapping: $. - path: /v1/epo/v2/devices/{deviceid} name: epo-v2-devices-deviceid description: REST surface for epo-v2-devices-deviceId. operations: - method: GET name: getdevice description: Get device details call: epo-saas-devices.getdevice outputParameters: - type: object mapping: $. - type: mcp namespace: epo-saas-devices-mcp port: 9090 transport: http description: MCP adapter for Trellix ePO SaaS API — Devices. One tool per consumed operation, routed inline through this capability's consumes block. tools: - name: list-managed-devices description: List managed devices hints: readOnly: true destructive: false idempotent: true call: epo-saas-devices.listdevices with: filter: tools.filter sort: tools.sort outputParameters: - type: object mapping: $. - name: get-device-details description: Get device details hints: readOnly: true destructive: false idempotent: true call: epo-saas-devices.getdevice outputParameters: - type: object mapping: $.