naftiko: 1.0.0-alpha2
info:
  label: Wise Platform API — jose
  description: 'Wise Platform API — jose. 7 operations. Lead operation: Playground JWE for GET requests. Self-contained Naftiko
    capability covering one Wise business surface.'
  tags:
  - Wise
  - jose
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    WISE_API_KEY: WISE_API_KEY
capability:
  consumes:
  - type: http
    namespace: platform-jose
    baseUri: https://api.wise.com
    description: Wise Platform API — jose business capability. Self-contained, no shared references.
    resources:
    - name: v1-auth-jose-playground-jwe
      path: /v1/auth/jose/playground/jwe
      operations:
      - name: joseplaygroundjweget
        method: GET
        description: Playground JWE for GET requests
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: Accept
          in: header
          type: string
          required: true
        - name: x-tw-jose-method
          in: header
          type: string
          description: JOSE method identifier.
          required: true
      - name: joseplaygroundjwepost
        method: POST
        description: Playground JWE for POST requests
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: Accept
          in: header
          type: string
          required: true
        - name: x-tw-jose-method
          in: header
          type: string
          description: JOSE method identifier.
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: v1-auth-jose-playground-jwe-direct-encryption
      path: /v1/auth/jose/playground/jwe-direct-encryption
      operations:
      - name: joseplaygroundjwedirectencryption
        method: POST
        description: Playground JWE for direct encryption
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: Accept
          in: header
          type: string
          required: true
        - name: x-tw-jose-method
          in: header
          type: string
          description: JOSE method identifier.
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: v1-auth-jose-playground-jws
      path: /v1/auth/jose/playground/jws
      operations:
      - name: joseplaygroundjws
        method: POST
        description: Playground JWS
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: Accept
          in: header
          type: string
          required: true
        - name: x-tw-jose-method
          in: header
          type: string
          description: JOSE method identifier.
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: v1-auth-jose-playground-jwsjwe
      path: /v1/auth/jose/playground/jwsjwe
      operations:
      - name: joseplaygroundjwsjwe
        method: POST
        description: Playground JWS+JWE
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: Accept
          in: header
          type: string
          required: true
        - name: x-tw-jose-method
          in: header
          type: string
          description: JOSE method identifier.
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: v1-auth-jose-request-public-keys
      path: /v1/auth/jose/request/public-keys
      operations:
      - name: joserequestpublickeyscreate
        method: POST
        description: Add a new client public key
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: v1-auth-jose-response-public-keys
      path: /v1/auth/jose/response/public-keys
      operations:
      - name: joseresponsepublickeysget
        method: GET
        description: Get Wise JOSE public key
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: version
          in: query
          type: integer
          description: Fetch a specific public key version. If omitted the most recent public key is provided.
        - name: algorithm
          in: query
          type: string
          description: Algorithm to be used for signature verification or payload encryption. This must match the algorithm
            used during request.
          required: true
        - name: scope
          in: query
          type: string
          description: Scope of the key. Must be `PAYLOAD_SIGNING` or `PAYLOAD_ENCRYPTION`.
          required: true
    authentication:
      type: bearer
      token: '{{env.WISE_API_KEY}}'
  exposes:
  - type: rest
    namespace: platform-jose-rest
    port: 8080
    description: REST adapter for Wise Platform API — jose. One Spectral-compliant resource per consumed operation, prefixed
      with /v1.
    resources:
    - path: /v1/v1/auth/jose/playground/jwe
      name: v1-auth-jose-playground-jwe
      description: REST surface for v1-auth-jose-playground-jwe.
      operations:
      - method: GET
        name: joseplaygroundjweget
        description: Playground JWE for GET requests
        call: platform-jose.joseplaygroundjweget
        with:
          Accept: rest.Accept
          x-tw-jose-method: rest.x-tw-jose-method
        outputParameters:
        - type: object
          mapping: $.
      - method: POST
        name: joseplaygroundjwepost
        description: Playground JWE for POST requests
        call: platform-jose.joseplaygroundjwepost
        with:
          Accept: rest.Accept
          x-tw-jose-method: rest.x-tw-jose-method
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/v1/auth/jose/playground/jwe-direct-encryption
      name: v1-auth-jose-playground-jwe-direct-encryption
      description: REST surface for v1-auth-jose-playground-jwe-direct-encryption.
      operations:
      - method: POST
        name: joseplaygroundjwedirectencryption
        description: Playground JWE for direct encryption
        call: platform-jose.joseplaygroundjwedirectencryption
        with:
          Accept: rest.Accept
          x-tw-jose-method: rest.x-tw-jose-method
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/v1/auth/jose/playground/jws
      name: v1-auth-jose-playground-jws
      description: REST surface for v1-auth-jose-playground-jws.
      operations:
      - method: POST
        name: joseplaygroundjws
        description: Playground JWS
        call: platform-jose.joseplaygroundjws
        with:
          Accept: rest.Accept
          x-tw-jose-method: rest.x-tw-jose-method
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/v1/auth/jose/playground/jwsjwe
      name: v1-auth-jose-playground-jwsjwe
      description: REST surface for v1-auth-jose-playground-jwsjwe.
      operations:
      - method: POST
        name: joseplaygroundjwsjwe
        description: Playground JWS+JWE
        call: platform-jose.joseplaygroundjwsjwe
        with:
          Accept: rest.Accept
          x-tw-jose-method: rest.x-tw-jose-method
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/v1/auth/jose/request/public-keys
      name: v1-auth-jose-request-public-keys
      description: REST surface for v1-auth-jose-request-public-keys.
      operations:
      - method: POST
        name: joserequestpublickeyscreate
        description: Add a new client public key
        call: platform-jose.joserequestpublickeyscreate
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/v1/auth/jose/response/public-keys
      name: v1-auth-jose-response-public-keys
      description: REST surface for v1-auth-jose-response-public-keys.
      operations:
      - method: GET
        name: joseresponsepublickeysget
        description: Get Wise JOSE public key
        call: platform-jose.joseresponsepublickeysget
        with:
          version: rest.version
          algorithm: rest.algorithm
          scope: rest.scope
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: platform-jose-mcp
    port: 9090
    transport: http
    description: MCP adapter for Wise Platform API — jose. One tool per consumed operation, routed inline through this capability's
      consumes block.
    tools:
    - name: playground-jwe-get-requests
      description: Playground JWE for GET requests
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: platform-jose.joseplaygroundjweget
      with:
        Accept: tools.Accept
        x-tw-jose-method: tools.x-tw-jose-method
      outputParameters:
      - type: object
        mapping: $.
    - name: playground-jwe-post-requests
      description: Playground JWE for POST requests
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: platform-jose.joseplaygroundjwepost
      with:
        Accept: tools.Accept
        x-tw-jose-method: tools.x-tw-jose-method
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: playground-jwe-direct-encryption
      description: Playground JWE for direct encryption
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: platform-jose.joseplaygroundjwedirectencryption
      with:
        Accept: tools.Accept
        x-tw-jose-method: tools.x-tw-jose-method
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: playground-jws
      description: Playground JWS
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: platform-jose.joseplaygroundjws
      with:
        Accept: tools.Accept
        x-tw-jose-method: tools.x-tw-jose-method
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: playground-jws-jwe
      description: Playground JWS+JWE
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: platform-jose.joseplaygroundjwsjwe
      with:
        Accept: tools.Accept
        x-tw-jose-method: tools.x-tw-jose-method
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: add-new-client-public-key
      description: Add a new client public key
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: platform-jose.joserequestpublickeyscreate
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: get-wise-jose-public-key
      description: Get Wise JOSE public key
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: platform-jose.joseresponsepublickeysget
      with:
        version: tools.version
        algorithm: tools.algorithm
        scope: tools.scope
      outputParameters:
      - type: object
        mapping: $.