naftiko: 1.0.0-alpha2 info: label: Veracode Reporting REST API — Reports description: 'Veracode Reporting REST API — Reports. 2 operations. Lead operation: Generate Report. Self-contained Naftiko capability covering one Veracode business surface.' tags: - Veracode - Reports created: '2026-05-19' modified: '2026-05-19' binds: - namespace: env keys: VERACODE_API_KEY: VERACODE_API_KEY capability: consumes: - type: http namespace: reporting-reports baseUri: https://api.veracode.com description: Veracode Reporting REST API — Reports business capability. Self-contained, no shared references. resources: - name: appsec-v1-analytics-report path: /appsec/v1/analytics/report operations: - name: generatereport method: POST description: Generate Report outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: true - name: appsec-v1-analytics-report-reportId path: /appsec/v1/analytics/report/{reportId} operations: - name: getreport method: GET description: Get Report outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: reportId in: path type: string description: Report ID from the generate report response required: true - name: page in: query type: integer - name: size in: query type: integer exposes: - type: rest namespace: reporting-reports-rest port: 8080 description: REST adapter for Veracode Reporting REST API — Reports. One Spectral-compliant resource per consumed operation, prefixed with /v1. resources: - path: /v1/appsec/v1/analytics/report name: appsec-v1-analytics-report description: REST surface for appsec-v1-analytics-report. operations: - method: POST name: generatereport description: Generate Report call: reporting-reports.generatereport with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/appsec/v1/analytics/report/{reportid} name: appsec-v1-analytics-report-reportid description: REST surface for appsec-v1-analytics-report-reportId. operations: - method: GET name: getreport description: Get Report call: reporting-reports.getreport with: reportId: rest.reportId page: rest.page size: rest.size outputParameters: - type: object mapping: $. - type: mcp namespace: reporting-reports-mcp port: 9090 transport: http description: MCP adapter for Veracode Reporting REST API — Reports. One tool per consumed operation, routed inline through this capability's consumes block. tools: - name: generate-report description: Generate Report hints: readOnly: false destructive: false idempotent: false call: reporting-reports.generatereport with: body: tools.body outputParameters: - type: object mapping: $. - name: get-report description: Get Report hints: readOnly: true destructive: false idempotent: true call: reporting-reports.getreport with: reportId: tools.reportId page: tools.page size: tools.size outputParameters: - type: object mapping: $.