naftiko: 1.0.0-alpha2
info:
  label: Tyk Gateway API — Certs
  description: 'Tyk Gateway API — Certs. 3 operations. Lead operation: Tyk List Certificates.. Self-contained Naftiko capability
    covering one Tyk business surface.'
  tags:
  - Tyk
  - Certs
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    TYK_API_KEY: TYK_API_KEY
capability:
  consumes:
  - type: http
    namespace: gateway-certs
    baseUri: https://{tenant}
    description: Tyk Gateway API — Certs business capability. Self-contained, no shared references.
    resources:
    - name: tyk-certs
      path: /tyk/certs
      operations:
      - name: listcerts
        method: GET
        description: Tyk List Certificates.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: org_id
          in: query
          type: string
          description: Organisation ID to list the certificates.
        - name: mode
          in: query
          type: string
          description: Mode to list the certificate details.
      - name: addcert
        method: POST
        description: Tyk Add a Certificate.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: org_id
          in: query
          type: string
          description: Organisation ID to add the certificate to.
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
    - name: tyk-certs-certID
      path: /tyk/certs/{certID}
      operations:
      - name: deletecerts
        method: DELETE
        description: Tyk Delete Certificate.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: certID
          in: path
          type: string
          description: Certificate ID to be deleted.
          required: true
        - name: org_id
          in: query
          type: string
          description: Organisation ID to delete the certificates from.
    authentication:
      type: apikey
      key: X-Tyk-Authorization
      value: '{{env.TYK_API_KEY}}'
      placement: header
  exposes:
  - type: rest
    namespace: gateway-certs-rest
    port: 8080
    description: REST adapter for Tyk Gateway API — Certs. One Spectral-compliant resource per consumed operation, prefixed
      with /v1.
    resources:
    - path: /v1/tyk/certs
      name: tyk-certs
      description: REST surface for tyk-certs.
      operations:
      - method: GET
        name: listcerts
        description: Tyk List Certificates.
        call: gateway-certs.listcerts
        with:
          org_id: rest.org_id
          mode: rest.mode
        outputParameters:
        - type: object
          mapping: $.
      - method: POST
        name: addcert
        description: Tyk Add a Certificate.
        call: gateway-certs.addcert
        with:
          org_id: rest.org_id
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/tyk/certs/{certid}
      name: tyk-certs-certid
      description: REST surface for tyk-certs-certID.
      operations:
      - method: DELETE
        name: deletecerts
        description: Tyk Delete Certificate.
        call: gateway-certs.deletecerts
        with:
          certID: rest.certID
          org_id: rest.org_id
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: gateway-certs-mcp
    port: 9090
    transport: http
    description: MCP adapter for Tyk Gateway API — Certs. One tool per consumed operation, routed inline through this capability's
      consumes block.
    tools:
    - name: tyk-list-certificates
      description: Tyk List Certificates.
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: gateway-certs.listcerts
      with:
        org_id: tools.org_id
        mode: tools.mode
      outputParameters:
      - type: object
        mapping: $.
    - name: tyk-add-certificate
      description: Tyk Add a Certificate.
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: gateway-certs.addcert
      with:
        org_id: tools.org_id
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: tyk-delete-certificate
      description: Tyk Delete Certificate.
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: gateway-certs.deletecerts
      with:
        certID: tools.certID
        org_id: tools.org_id
      outputParameters:
      - type: object
        mapping: $.