naftiko: 1.0.0-alpha2 info: label: Veracode Applications REST API — Sandboxes description: 'Veracode Applications REST API — Sandboxes. 2 operations. Lead operation: List Sandboxes. Self-contained Naftiko capability covering one Veracode business surface.' tags: - Veracode - Sandboxes created: '2026-05-19' modified: '2026-05-19' binds: - namespace: env keys: VERACODE_API_KEY: VERACODE_API_KEY capability: consumes: - type: http namespace: applications-sandboxes baseUri: https://api.veracode.com description: Veracode Applications REST API — Sandboxes business capability. Self-contained, no shared references. resources: - name: appsec-v1-applications-applicationGuid-sandboxes path: /appsec/v1/applications/{applicationGuid}/sandboxes operations: - name: listsandboxes method: GET description: List Sandboxes outputRawFormat: json outputParameters: - name: result type: object value: $. - name: createsandbox method: POST description: Create Sandbox outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: true exposes: - type: rest namespace: applications-sandboxes-rest port: 8080 description: REST adapter for Veracode Applications REST API — Sandboxes. One Spectral-compliant resource per consumed operation, prefixed with /v1. resources: - path: /v1/appsec/v1/applications/{applicationguid}/sandboxes name: appsec-v1-applications-applicationguid-sandboxes description: REST surface for appsec-v1-applications-applicationGuid-sandboxes. operations: - method: GET name: listsandboxes description: List Sandboxes call: applications-sandboxes.listsandboxes outputParameters: - type: object mapping: $. - method: POST name: createsandbox description: Create Sandbox call: applications-sandboxes.createsandbox with: body: rest.body outputParameters: - type: object mapping: $. - type: mcp namespace: applications-sandboxes-mcp port: 9090 transport: http description: MCP adapter for Veracode Applications REST API — Sandboxes. One tool per consumed operation, routed inline through this capability's consumes block. tools: - name: list-sandboxes description: List Sandboxes hints: readOnly: true destructive: false idempotent: true call: applications-sandboxes.listsandboxes outputParameters: - type: object mapping: $. - name: create-sandbox description: Create Sandbox hints: readOnly: false destructive: false idempotent: false call: applications-sandboxes.createsandbox with: body: tools.body outputParameters: - type: object mapping: $.