naftiko: 1.0.0-alpha2 info: label: VTEX Tracking API — Authentication description: 'VTEX Tracking API — Authentication. 1 operations. Lead operation: VTex Asynchronous Login. Self-contained Naftiko capability covering one Vtex business surface.' tags: - Vtex - Authentication created: '2026-05-19' modified: '2026-05-19' binds: - namespace: env keys: VTEX_API_KEY: VTEX_API_KEY capability: consumes: - type: http namespace: tracking-authentication baseUri: https://api.vtextracking.com/receiver description: VTEX Tracking API — Authentication business capability. Self-contained, no shared references. resources: - name: auth path: /auth operations: - name: post method: POST description: VTex Asynchronous Login outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: Content-Type in: header type: string description: Type of the content being sent required: true - name: Accept in: header type: string description: HTTP Client Negotiation Accept Header. Indicates the types of responses the client can understand required: true - name: body in: body type: object description: Request body (JSON). required: false authentication: type: bearer token: '{{env.VTEX_API_KEY}}' exposes: - type: rest namespace: tracking-authentication-rest port: 8080 description: REST adapter for VTEX Tracking API — Authentication. One Spectral-compliant resource per consumed operation, prefixed with /v1. resources: - path: /v1/auth name: auth description: REST surface for auth. operations: - method: POST name: post description: VTex Asynchronous Login call: tracking-authentication.post with: Content-Type: rest.Content-Type Accept: rest.Accept body: rest.body outputParameters: - type: object mapping: $. - type: mcp namespace: tracking-authentication-mcp port: 9090 transport: http description: MCP adapter for VTEX Tracking API — Authentication. One tool per consumed operation, routed inline through this capability's consumes block. tools: - name: vtex-asynchronous-login description: VTex Asynchronous Login hints: readOnly: false destructive: false idempotent: false call: tracking-authentication.post with: Content-Type: tools.Content-Type Accept: tools.Accept body: tools.body outputParameters: - type: object mapping: $.