naftiko: 1.0.0-alpha2 info: label: Unleash Admin API — Users description: 'Unleash Admin API — Users. 30 operations. Lead operation: Get a List of Groups. Self-contained Naftiko capability covering one Unleash business surface.' tags: - Unleash - Users created: '2026-05-19' modified: '2026-05-19' binds: - namespace: env keys: UNLEASH_API_KEY: UNLEASH_API_KEY capability: consumes: - type: http namespace: admin-users baseUri: https://app.unleash-instance.example.com description: Unleash Admin API — Users business capability. Self-contained, no shared references. resources: - name: api-admin-groups path: /api/admin/groups operations: - name: getgroups method: GET description: Get a List of Groups outputRawFormat: json outputParameters: - name: result type: object value: $. - name: creategroup method: POST description: Create a New Group outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: true - name: api-admin-groups-scim-groups path: /api/admin/groups/scim-groups operations: - name: deletescimgroups method: DELETE description: Delete All SCIM Groups outputRawFormat: json outputParameters: - name: result type: object value: $. - name: api-admin-groups-groupId path: /api/admin/groups/{groupId} operations: - name: getgroup method: GET description: Get a Single Group outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: groupId in: path type: string required: true - name: updategroup method: PUT description: Update a Group outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: groupId in: path type: string required: true - name: body in: body type: object description: Request body (JSON). required: true - name: deletegroup method: DELETE description: Delete a Single Group outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: groupId in: path type: string required: true - name: api-admin-roles path: /api/admin/roles operations: - name: getroles method: GET description: Get a List of Roles outputRawFormat: json outputParameters: - name: result type: object value: $. - name: createrole method: POST description: Create a New Role outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: true - name: api-admin-roles-validate path: /api/admin/roles/validate operations: - name: validaterole method: POST description: Validate a Role outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: true - name: api-admin-roles-roleId path: /api/admin/roles/{roleId} operations: - name: getrolebyid method: GET description: Get a Single Role outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: roleId in: path type: string required: true - name: updaterole method: PUT description: Update a Role outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: roleId in: path type: string required: true - name: body in: body type: object description: Request body (JSON). required: true - name: deleterole method: DELETE description: Delete a Custom Role outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: roleId in: path type: string required: true - name: api-admin-user path: /api/admin/user operations: - name: getme method: GET description: Get Your Own User Details outputRawFormat: json outputParameters: - name: result type: object value: $. - name: api-admin-user-admin path: /api/admin/user-admin operations: - name: getusers method: GET description: Get All Users and [root Roles](https://docs.getunleash.io/concepts/rbac#predefined-roles) outputRawFormat: json outputParameters: - name: result type: object value: $. - name: createuser method: POST description: Create a New User outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: true - name: api-admin-user-admin-access path: /api/admin/user-admin/access operations: - name: getbaseusersandgroups method: GET description: Get Basic User and Group Information outputRawFormat: json outputParameters: - name: result type: object value: $. - name: api-admin-user-admin-admin-count path: /api/admin/user-admin/admin-count operations: - name: getadmincount method: GET description: Get Total Count of Admin Accounts outputRawFormat: json outputParameters: - name: result type: object value: $. - name: api-admin-user-admin-inactive path: /api/admin/user-admin/inactive operations: - name: getinactiveusers method: GET description: Gets Inactive Users outputRawFormat: json outputParameters: - name: result type: object value: $. - name: api-admin-user-admin-inactive-delete path: /api/admin/user-admin/inactive/delete operations: - name: deleteinactiveusers method: POST description: Deletes Inactive Users outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: true - name: api-admin-user-admin-reset-password path: /api/admin/user-admin/reset-password operations: - name: resetuserpassword method: POST description: Reset User Password outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: true - name: api-admin-user-admin-scim-users path: /api/admin/user-admin/scim-users operations: - name: deletescimusers method: DELETE description: Delete All SCIM Users outputRawFormat: json outputParameters: - name: result type: object value: $. - name: api-admin-user-admin-search path: /api/admin/user-admin/search operations: - name: searchusers method: GET description: Search Users outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: q in: query type: string description: The pattern to search in the username or email - name: api-admin-user-admin-validate-password path: /api/admin/user-admin/validate-password operations: - name: validateuserpassword method: POST description: Validate Password for a User outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: true - name: api-admin-user-admin-id path: /api/admin/user-admin/{id} operations: - name: getuser method: GET description: Get User outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: id in: path type: integer description: a user id required: true - name: updateuser method: PUT description: Update a User outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: id in: path type: integer description: a user id required: true - name: body in: body type: object description: Request body (JSON). required: true - name: deleteuser method: DELETE description: Delete a User outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: id in: path type: integer description: a user id required: true - name: api-admin-user-admin-id-change-password path: /api/admin/user-admin/{id}/change-password operations: - name: changeuserpassword method: POST description: Change Password for a User outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: id in: path type: integer description: a user id required: true - name: body in: body type: object description: Request body (JSON). required: true - name: api-admin-user-change-password path: /api/admin/user/change-password operations: - name: changemypassword method: POST description: Change Your Own Password outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: true - name: api-admin-user-profile path: /api/admin/user/profile operations: - name: getprofile method: GET description: Get Your Own User Profile outputRawFormat: json outputParameters: - name: result type: object value: $. - name: api-admin-user-roles path: /api/admin/user/roles operations: - name: getuserroles method: GET description: Get Roles for Currently Logged in User outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: projectId in: query type: string description: The id of the project you want to check permissions for authentication: type: bearer token: '{{env.UNLEASH_API_KEY}}' exposes: - type: rest namespace: admin-users-rest port: 8080 description: REST adapter for Unleash Admin API — Users. One Spectral-compliant resource per consumed operation, prefixed with /v1. resources: - path: /v1/api/admin/groups name: api-admin-groups description: REST surface for api-admin-groups. operations: - method: GET name: getgroups description: Get a List of Groups call: admin-users.getgroups outputParameters: - type: object mapping: $. - method: POST name: creategroup description: Create a New Group call: admin-users.creategroup with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/api/admin/groups/scim-groups name: api-admin-groups-scim-groups description: REST surface for api-admin-groups-scim-groups. operations: - method: DELETE name: deletescimgroups description: Delete All SCIM Groups call: admin-users.deletescimgroups outputParameters: - type: object mapping: $. - path: /v1/api/admin/groups/{groupid} name: api-admin-groups-groupid description: REST surface for api-admin-groups-groupId. operations: - method: GET name: getgroup description: Get a Single Group call: admin-users.getgroup with: groupId: rest.groupId outputParameters: - type: object mapping: $. - method: PUT name: updategroup description: Update a Group call: admin-users.updategroup with: groupId: rest.groupId body: rest.body outputParameters: - type: object mapping: $. - method: DELETE name: deletegroup description: Delete a Single Group call: admin-users.deletegroup with: groupId: rest.groupId outputParameters: - type: object mapping: $. - path: /v1/api/admin/roles name: api-admin-roles description: REST surface for api-admin-roles. operations: - method: GET name: getroles description: Get a List of Roles call: admin-users.getroles outputParameters: - type: object mapping: $. - method: POST name: createrole description: Create a New Role call: admin-users.createrole with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/api/admin/roles/validate name: api-admin-roles-validate description: REST surface for api-admin-roles-validate. operations: - method: POST name: validaterole description: Validate a Role call: admin-users.validaterole with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/api/admin/roles/{roleid} name: api-admin-roles-roleid description: REST surface for api-admin-roles-roleId. operations: - method: GET name: getrolebyid description: Get a Single Role call: admin-users.getrolebyid with: roleId: rest.roleId outputParameters: - type: object mapping: $. - method: PUT name: updaterole description: Update a Role call: admin-users.updaterole with: roleId: rest.roleId body: rest.body outputParameters: - type: object mapping: $. - method: DELETE name: deleterole description: Delete a Custom Role call: admin-users.deleterole with: roleId: rest.roleId outputParameters: - type: object mapping: $. - path: /v1/api/admin/user name: api-admin-user description: REST surface for api-admin-user. operations: - method: GET name: getme description: Get Your Own User Details call: admin-users.getme outputParameters: - type: object mapping: $. - path: /v1/api/admin/user-admin name: api-admin-user-admin description: REST surface for api-admin-user-admin. operations: - method: GET name: getusers description: Get All Users and [root Roles](https://docs.getunleash.io/concepts/rbac#predefined-roles) call: admin-users.getusers outputParameters: - type: object mapping: $. - method: POST name: createuser description: Create a New User call: admin-users.createuser with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/api/admin/user-admin/access name: api-admin-user-admin-access description: REST surface for api-admin-user-admin-access. operations: - method: GET name: getbaseusersandgroups description: Get Basic User and Group Information call: admin-users.getbaseusersandgroups outputParameters: - type: object mapping: $. - path: /v1/api/admin/user-admin/admin-count name: api-admin-user-admin-admin-count description: REST surface for api-admin-user-admin-admin-count. operations: - method: GET name: getadmincount description: Get Total Count of Admin Accounts call: admin-users.getadmincount outputParameters: - type: object mapping: $. - path: /v1/api/admin/user-admin/inactive name: api-admin-user-admin-inactive description: REST surface for api-admin-user-admin-inactive. operations: - method: GET name: getinactiveusers description: Gets Inactive Users call: admin-users.getinactiveusers outputParameters: - type: object mapping: $. - path: /v1/api/admin/user-admin/inactive/delete name: api-admin-user-admin-inactive-delete description: REST surface for api-admin-user-admin-inactive-delete. operations: - method: POST name: deleteinactiveusers description: Deletes Inactive Users call: admin-users.deleteinactiveusers with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/api/admin/user-admin/reset-password name: api-admin-user-admin-reset-password description: REST surface for api-admin-user-admin-reset-password. operations: - method: POST name: resetuserpassword description: Reset User Password call: admin-users.resetuserpassword with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/api/admin/user-admin/scim-users name: api-admin-user-admin-scim-users description: REST surface for api-admin-user-admin-scim-users. operations: - method: DELETE name: deletescimusers description: Delete All SCIM Users call: admin-users.deletescimusers outputParameters: - type: object mapping: $. - path: /v1/api/admin/user-admin/search name: api-admin-user-admin-search description: REST surface for api-admin-user-admin-search. operations: - method: GET name: searchusers description: Search Users call: admin-users.searchusers with: q: rest.q outputParameters: - type: object mapping: $. - path: /v1/api/admin/user-admin/validate-password name: api-admin-user-admin-validate-password description: REST surface for api-admin-user-admin-validate-password. operations: - method: POST name: validateuserpassword description: Validate Password for a User call: admin-users.validateuserpassword with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/api/admin/user-admin/{id} name: api-admin-user-admin-id description: REST surface for api-admin-user-admin-id. operations: - method: GET name: getuser description: Get User call: admin-users.getuser with: id: rest.id outputParameters: - type: object mapping: $. - method: PUT name: updateuser description: Update a User call: admin-users.updateuser with: id: rest.id body: rest.body outputParameters: - type: object mapping: $. - method: DELETE name: deleteuser description: Delete a User call: admin-users.deleteuser with: id: rest.id outputParameters: - type: object mapping: $. - path: /v1/api/admin/user-admin/{id}/change-password name: api-admin-user-admin-id-change-password description: REST surface for api-admin-user-admin-id-change-password. operations: - method: POST name: changeuserpassword description: Change Password for a User call: admin-users.changeuserpassword with: id: rest.id body: rest.body outputParameters: - type: object mapping: $. - path: /v1/api/admin/user/change-password name: api-admin-user-change-password description: REST surface for api-admin-user-change-password. operations: - method: POST name: changemypassword description: Change Your Own Password call: admin-users.changemypassword with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/api/admin/user/profile name: api-admin-user-profile description: REST surface for api-admin-user-profile. operations: - method: GET name: getprofile description: Get Your Own User Profile call: admin-users.getprofile outputParameters: - type: object mapping: $. - path: /v1/api/admin/user/roles name: api-admin-user-roles description: REST surface for api-admin-user-roles. operations: - method: GET name: getuserroles description: Get Roles for Currently Logged in User call: admin-users.getuserroles with: projectId: rest.projectId outputParameters: - type: object mapping: $. - type: mcp namespace: admin-users-mcp port: 9090 transport: http description: MCP adapter for Unleash Admin API — Users. One tool per consumed operation, routed inline through this capability's consumes block. tools: - name: get-list-groups description: Get a List of Groups hints: readOnly: true destructive: false idempotent: true call: admin-users.getgroups outputParameters: - type: object mapping: $. - name: create-new-group description: Create a New Group hints: readOnly: false destructive: false idempotent: false call: admin-users.creategroup with: body: tools.body outputParameters: - type: object mapping: $. - name: delete-all-scim-groups description: Delete All SCIM Groups hints: readOnly: false destructive: true idempotent: true call: admin-users.deletescimgroups outputParameters: - type: object mapping: $. - name: get-single-group description: Get a Single Group hints: readOnly: true destructive: false idempotent: true call: admin-users.getgroup with: groupId: tools.groupId outputParameters: - type: object mapping: $. - name: update-group description: Update a Group hints: readOnly: false destructive: false idempotent: true call: admin-users.updategroup with: groupId: tools.groupId body: tools.body outputParameters: - type: object mapping: $. - name: delete-single-group description: Delete a Single Group hints: readOnly: false destructive: true idempotent: true call: admin-users.deletegroup with: groupId: tools.groupId outputParameters: - type: object mapping: $. - name: get-list-roles description: Get a List of Roles hints: readOnly: true destructive: false idempotent: true call: admin-users.getroles outputParameters: - type: object mapping: $. - name: create-new-role description: Create a New Role hints: readOnly: false destructive: false idempotent: false call: admin-users.createrole with: body: tools.body outputParameters: - type: object mapping: $. - name: validate-role description: Validate a Role hints: readOnly: true destructive: false idempotent: false call: admin-users.validaterole with: body: tools.body outputParameters: - type: object mapping: $. - name: get-single-role description: Get a Single Role hints: readOnly: true destructive: false idempotent: true call: admin-users.getrolebyid with: roleId: tools.roleId outputParameters: - type: object mapping: $. - name: update-role description: Update a Role hints: readOnly: false destructive: false idempotent: true call: admin-users.updaterole with: roleId: tools.roleId body: tools.body outputParameters: - type: object mapping: $. - name: delete-custom-role description: Delete a Custom Role hints: readOnly: false destructive: true idempotent: true call: admin-users.deleterole with: roleId: tools.roleId outputParameters: - type: object mapping: $. - name: get-your-own-user-details description: Get Your Own User Details hints: readOnly: true destructive: false idempotent: true call: admin-users.getme outputParameters: - type: object mapping: $. - name: get-all-users-and-root description: Get All Users and [root Roles](https://docs.getunleash.io/concepts/rbac#predefined-roles) hints: readOnly: true destructive: false idempotent: true call: admin-users.getusers outputParameters: - type: object mapping: $. - name: create-new-user description: Create a New User hints: readOnly: false destructive: false idempotent: false call: admin-users.createuser with: body: tools.body outputParameters: - type: object mapping: $. - name: get-basic-user-and-group description: Get Basic User and Group Information hints: readOnly: true destructive: false idempotent: true call: admin-users.getbaseusersandgroups outputParameters: - type: object mapping: $. - name: get-total-count-admin-accounts description: Get Total Count of Admin Accounts hints: readOnly: true destructive: false idempotent: true call: admin-users.getadmincount outputParameters: - type: object mapping: $. - name: gets-inactive-users description: Gets Inactive Users hints: readOnly: true destructive: false idempotent: true call: admin-users.getinactiveusers outputParameters: - type: object mapping: $. - name: deletes-inactive-users description: Deletes Inactive Users hints: readOnly: false destructive: false idempotent: false call: admin-users.deleteinactiveusers with: body: tools.body outputParameters: - type: object mapping: $. - name: reset-user-password description: Reset User Password hints: readOnly: false destructive: false idempotent: false call: admin-users.resetuserpassword with: body: tools.body outputParameters: - type: object mapping: $. - name: delete-all-scim-users description: Delete All SCIM Users hints: readOnly: false destructive: true idempotent: true call: admin-users.deletescimusers outputParameters: - type: object mapping: $. - name: search-users description: Search Users hints: readOnly: true destructive: false idempotent: true call: admin-users.searchusers with: q: tools.q outputParameters: - type: object mapping: $. - name: validate-password-user description: Validate Password for a User hints: readOnly: true destructive: false idempotent: false call: admin-users.validateuserpassword with: body: tools.body outputParameters: - type: object mapping: $. - name: get-user description: Get User hints: readOnly: true destructive: false idempotent: true call: admin-users.getuser with: id: tools.id outputParameters: - type: object mapping: $. - name: update-user description: Update a User hints: readOnly: false destructive: false idempotent: true call: admin-users.updateuser with: id: tools.id body: tools.body outputParameters: - type: object mapping: $. - name: delete-user description: Delete a User hints: readOnly: false destructive: true idempotent: true call: admin-users.deleteuser with: id: tools.id outputParameters: - type: object mapping: $. - name: change-password-user description: Change Password for a User hints: readOnly: false destructive: false idempotent: false call: admin-users.changeuserpassword with: id: tools.id body: tools.body outputParameters: - type: object mapping: $. - name: change-your-own-password description: Change Your Own Password hints: readOnly: false destructive: false idempotent: false call: admin-users.changemypassword with: body: tools.body outputParameters: - type: object mapping: $. - name: get-your-own-user-profile description: Get Your Own User Profile hints: readOnly: true destructive: false idempotent: true call: admin-users.getprofile outputParameters: - type: object mapping: $. - name: get-roles-currently-logged-user description: Get Roles for Currently Logged in User hints: readOnly: true destructive: false idempotent: true call: admin-users.getuserroles with: projectId: tools.projectId outputParameters: - type: object mapping: $.