naftiko: 1.0.0-alpha2
info:
  label: Veracode Security Administration
  description: Unified workflow capability for Veracode platform administration. Enables security administrators to manage
    users, API service accounts, teams, business units, and roles across the Veracode organization. Designed for platform
    admins responsible for access control, onboarding, and organizational structure.
  tags:
  - Veracode
  - Identity Management
  - Access Control
  - Users
  - Administration
  created: '2026-05-03'
  modified: '2026-05-06'
binds:
- namespace: env
  keys:
    VERACODE_API_ID: VERACODE_API_ID
    VERACODE_API_KEY: VERACODE_API_KEY
capability:
  consumes:
  - type: http
    namespace: veracode-identity
    baseUri: https://api.veracode.com
    description: Veracode Identity REST API
    authentication:
      type: hmac
      apiId: '{{VERACODE_API_ID}}'
      apiKey: '{{VERACODE_API_KEY}}'
    resources:
    - name: users
      path: /api/authn/v2/users
      description: User account management
      operations:
      - name: list-users
        method: GET
        description: List all users in the organization
        inputParameters:
        - name: page
          in: query
          type: integer
          required: false
          description: Page number
        - name: size
          in: query
          type: integer
          required: false
          description: Page size
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: create-user
        method: POST
        description: Create a new user or API service account
        inputParameters: []
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        body:
          type: json
          data:
            email_address: '{{tools.email_address}}'
            first_name: '{{tools.first_name}}'
            last_name: '{{tools.last_name}}'
    - name: user-search
      path: /api/authn/v2/users/search
      description: User search
      operations:
      - name: search-users
        method: GET
        description: Search users by term, role, type, or API ID
        inputParameters:
        - name: search_term
          in: query
          type: string
          required: false
          description: Search term
        - name: user_type
          in: query
          type: string
          required: false
          description: 'Filter by user type: HUMAN or API'
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: teams
      path: /api/authn/v2/teams
      description: Team management
      operations:
      - name: list-teams
        method: GET
        description: List all teams in the organization
        inputParameters: []
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: create-team
        method: POST
        description: Create a new team
        inputParameters: []
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        body:
          type: json
          data:
            team_name: '{{tools.team_name}}'
    - name: roles
      path: /api/authn/v2/roles
      description: Role management
      operations:
      - name: list-roles
        method: GET
        description: List all available roles
        inputParameters: []
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
  exposes:
  - type: rest
    port: 8081
    namespace: veracode-admin-api
    description: Unified REST API for Veracode platform administration.
    resources:
    - path: /v1/users
      name: users
      description: User account management
      operations:
      - method: GET
        name: list-users
        description: List all users in the organization
        call: veracode-identity.list-users
        outputParameters:
        - type: object
          mapping: $.
      - method: POST
        name: create-user
        description: Create a new user or API service account
        call: veracode-identity.create-user
        with:
          email_address: rest.email_address
          first_name: rest.first_name
          last_name: rest.last_name
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/users/search
      name: user-search
      description: User search
      operations:
      - method: GET
        name: search-users
        description: Search users by term or type
        call: veracode-identity.search-users
        with:
          search_term: rest.search_term
          user_type: rest.user_type
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/teams
      name: teams
      description: Team management
      operations:
      - method: GET
        name: list-teams
        description: List all teams
        call: veracode-identity.list-teams
        outputParameters:
        - type: object
          mapping: $.
      - method: POST
        name: create-team
        description: Create a new team
        call: veracode-identity.create-team
        with:
          team_name: rest.team_name
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/roles
      name: roles
      description: Role management
      operations:
      - method: GET
        name: list-roles
        description: List all available roles
        call: veracode-identity.list-roles
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    port: 9091
    namespace: veracode-admin-mcp
    transport: http
    description: MCP server for AI-assisted Veracode platform administration.
    tools:
    - name: list-users
      description: List all users in the Veracode organization
      hints:
        readOnly: true
        idempotent: true
      call: veracode-identity.list-users
      outputParameters:
      - type: object
        mapping: $.
    - name: search-users
      description: Search Veracode users by name, email, role, or type
      hints:
        readOnly: true
        openWorld: true
      call: veracode-identity.search-users
      with:
        search_term: tools.search_term
        user_type: tools.user_type
      outputParameters:
      - type: object
        mapping: $.
    - name: create-user
      description: Create a new user or API service account in the Veracode organization
      hints:
        readOnly: false
        idempotent: false
      call: veracode-identity.create-user
      with:
        email_address: tools.email_address
        first_name: tools.first_name
        last_name: tools.last_name
      outputParameters:
      - type: object
        mapping: $.
    - name: list-teams
      description: List all teams in the Veracode organization
      hints:
        readOnly: true
        idempotent: true
      call: veracode-identity.list-teams
      outputParameters:
      - type: object
        mapping: $.
    - name: create-team
      description: Create a new team in the Veracode organization
      hints:
        readOnly: false
        idempotent: false
      call: veracode-identity.create-team
      with:
        team_name: tools.team_name
      outputParameters:
      - type: object
        mapping: $.
    - name: list-roles
      description: List all available roles for role-based access control
      hints:
        readOnly: true
        idempotent: true
      call: veracode-identity.list-roles
      outputParameters:
      - type: object
        mapping: $.