naftiko: 1.0.0-alpha2
info:
  label: Wise Platform API — user-security
  description: 'Wise Platform API — user-security. 9 operations. Lead operation: List Phone Numbers. Self-contained Naftiko
    capability covering one Wise business surface.'
  tags:
  - Wise
  - user-security
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    WISE_API_KEY: WISE_API_KEY
capability:
  consumes:
  - type: http
    namespace: platform-user-security
    baseUri: https://api.wise.com
    description: Wise Platform API — user-security business capability. Self-contained, no shared references.
    resources:
    - name: v1-application-users-userId-phone-numbers
      path: /v1/application/users/{userId}/phone-numbers
      operations:
      - name: usersecurityphonenumberlist
        method: GET
        description: List Phone Numbers
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: userId
          in: path
          type: integer
          description: User ID.
          required: true
    - name: v1-application-users-userId-phone-numbers-phoneNumberId
      path: /v1/application/users/{userId}/phone-numbers/{phoneNumberId}
      operations:
      - name: usersecurityphonenumberupdate
        method: PUT
        description: Update Phone Number
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: userId
          in: path
          type: integer
          description: User ID.
          required: true
        - name: phoneNumberId
          in: path
          type: integer
          description: ID of a phone number.
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: v1-user-facemap-enrol
      path: /v1/user/facemap/enrol
      operations:
      - name: usersecurityfacemapenrol
        method: POST
        description: Enrol FaceMap
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: v1-user-partner-device-fingerprints
      path: /v1/user/partner-device-fingerprints
      operations:
      - name: usersecuritydevicefingerprintcreate
        method: POST
        description: Create Device Fingerprint
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: Accept
          in: header
          type: string
          required: true
        - name: Accept-Encoding
          in: header
          type: string
          required: true
        - name: Content-Encoding
          in: header
          type: string
          required: true
        - name: X-tw-jose-method
          in: header
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: v1-user-pin
      path: /v1/user/pin
      operations:
      - name: usersecuritypincreate
        method: POST
        description: Create PIN
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: Accept
          in: header
          type: string
          required: true
        - name: Accept-Encoding
          in: header
          type: string
          required: true
        - name: Content-Encoding
          in: header
          type: string
          required: true
        - name: X-tw-jose-method
          in: header
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: v1-users-userId-facemap-enrol
      path: /v1/users/{userId}/facemap/enrol
      operations:
      - name: usersecurityfacemapdelete
        method: DELETE
        description: Delete FaceMap
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: userId
          in: path
          type: integer
          description: User ID.
          required: true
    - name: v1-users-userId-partner-device-fingerprints
      path: /v1/users/{userId}/partner-device-fingerprints
      operations:
      - name: usersecuritydevicefingerprintlist
        method: GET
        description: List Device Fingerprints
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: userId
          in: path
          type: integer
          description: User ID.
          required: true
    - name: v1-users-userId-partner-device-fingerprints-deviceFingerprintId
      path: /v1/users/{userId}/partner-device-fingerprints/{deviceFingerprintId}
      operations:
      - name: usersecuritydevicefingerprintdelete
        method: DELETE
        description: Delete Device Fingerprint
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: userId
          in: path
          type: integer
          description: User ID.
          required: true
        - name: deviceFingerprintId
          in: path
          type: string
          description: Device fingerprint ID.
          required: true
    - name: v1-users-userId-pin
      path: /v1/users/{userId}/pin
      operations:
      - name: usersecuritypindelete
        method: DELETE
        description: Delete PIN
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: userId
          in: path
          type: integer
          description: User ID.
          required: true
    authentication:
      type: bearer
      token: '{{env.WISE_API_KEY}}'
  exposes:
  - type: rest
    namespace: platform-user-security-rest
    port: 8080
    description: REST adapter for Wise Platform API — user-security. One Spectral-compliant resource per consumed operation,
      prefixed with /v1.
    resources:
    - path: /v1/v1/application/users/{userid}/phone-numbers
      name: v1-application-users-userid-phone-numbers
      description: REST surface for v1-application-users-userId-phone-numbers.
      operations:
      - method: GET
        name: usersecurityphonenumberlist
        description: List Phone Numbers
        call: platform-user-security.usersecurityphonenumberlist
        with:
          userId: rest.userId
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/v1/application/users/{userid}/phone-numbers/{phonenumberid}
      name: v1-application-users-userid-phone-numbers-phonenumberid
      description: REST surface for v1-application-users-userId-phone-numbers-phoneNumberId.
      operations:
      - method: PUT
        name: usersecurityphonenumberupdate
        description: Update Phone Number
        call: platform-user-security.usersecurityphonenumberupdate
        with:
          userId: rest.userId
          phoneNumberId: rest.phoneNumberId
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/v1/user/facemap/enrol
      name: v1-user-facemap-enrol
      description: REST surface for v1-user-facemap-enrol.
      operations:
      - method: POST
        name: usersecurityfacemapenrol
        description: Enrol FaceMap
        call: platform-user-security.usersecurityfacemapenrol
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/v1/user/partner-device-fingerprints
      name: v1-user-partner-device-fingerprints
      description: REST surface for v1-user-partner-device-fingerprints.
      operations:
      - method: POST
        name: usersecuritydevicefingerprintcreate
        description: Create Device Fingerprint
        call: platform-user-security.usersecuritydevicefingerprintcreate
        with:
          Accept: rest.Accept
          Accept-Encoding: rest.Accept-Encoding
          Content-Encoding: rest.Content-Encoding
          X-tw-jose-method: rest.X-tw-jose-method
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/v1/user/pin
      name: v1-user-pin
      description: REST surface for v1-user-pin.
      operations:
      - method: POST
        name: usersecuritypincreate
        description: Create PIN
        call: platform-user-security.usersecuritypincreate
        with:
          Accept: rest.Accept
          Accept-Encoding: rest.Accept-Encoding
          Content-Encoding: rest.Content-Encoding
          X-tw-jose-method: rest.X-tw-jose-method
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/v1/users/{userid}/facemap/enrol
      name: v1-users-userid-facemap-enrol
      description: REST surface for v1-users-userId-facemap-enrol.
      operations:
      - method: DELETE
        name: usersecurityfacemapdelete
        description: Delete FaceMap
        call: platform-user-security.usersecurityfacemapdelete
        with:
          userId: rest.userId
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/v1/users/{userid}/partner-device-fingerprints
      name: v1-users-userid-partner-device-fingerprints
      description: REST surface for v1-users-userId-partner-device-fingerprints.
      operations:
      - method: GET
        name: usersecuritydevicefingerprintlist
        description: List Device Fingerprints
        call: platform-user-security.usersecuritydevicefingerprintlist
        with:
          userId: rest.userId
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/v1/users/{userid}/partner-device-fingerprints/{devicefingerprintid}
      name: v1-users-userid-partner-device-fingerprints-devicefingerprintid
      description: REST surface for v1-users-userId-partner-device-fingerprints-deviceFingerprintId.
      operations:
      - method: DELETE
        name: usersecuritydevicefingerprintdelete
        description: Delete Device Fingerprint
        call: platform-user-security.usersecuritydevicefingerprintdelete
        with:
          userId: rest.userId
          deviceFingerprintId: rest.deviceFingerprintId
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/v1/users/{userid}/pin
      name: v1-users-userid-pin
      description: REST surface for v1-users-userId-pin.
      operations:
      - method: DELETE
        name: usersecuritypindelete
        description: Delete PIN
        call: platform-user-security.usersecuritypindelete
        with:
          userId: rest.userId
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: platform-user-security-mcp
    port: 9090
    transport: http
    description: MCP adapter for Wise Platform API — user-security. One tool per consumed operation, routed inline through
      this capability's consumes block.
    tools:
    - name: list-phone-numbers
      description: List Phone Numbers
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: platform-user-security.usersecurityphonenumberlist
      with:
        userId: tools.userId
      outputParameters:
      - type: object
        mapping: $.
    - name: update-phone-number
      description: Update Phone Number
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: platform-user-security.usersecurityphonenumberupdate
      with:
        userId: tools.userId
        phoneNumberId: tools.phoneNumberId
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: enrol-facemap
      description: Enrol FaceMap
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: platform-user-security.usersecurityfacemapenrol
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: create-device-fingerprint
      description: Create Device Fingerprint
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: platform-user-security.usersecuritydevicefingerprintcreate
      with:
        Accept: tools.Accept
        Accept-Encoding: tools.Accept-Encoding
        Content-Encoding: tools.Content-Encoding
        X-tw-jose-method: tools.X-tw-jose-method
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: create-pin
      description: Create PIN
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: platform-user-security.usersecuritypincreate
      with:
        Accept: tools.Accept
        Accept-Encoding: tools.Accept-Encoding
        Content-Encoding: tools.Content-Encoding
        X-tw-jose-method: tools.X-tw-jose-method
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: delete-facemap
      description: Delete FaceMap
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: platform-user-security.usersecurityfacemapdelete
      with:
        userId: tools.userId
      outputParameters:
      - type: object
        mapping: $.
    - name: list-device-fingerprints
      description: List Device Fingerprints
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: platform-user-security.usersecuritydevicefingerprintlist
      with:
        userId: tools.userId
      outputParameters:
      - type: object
        mapping: $.
    - name: delete-device-fingerprint
      description: Delete Device Fingerprint
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: platform-user-security.usersecuritydevicefingerprintdelete
      with:
        userId: tools.userId
        deviceFingerprintId: tools.deviceFingerprintId
      outputParameters:
      - type: object
        mapping: $.
    - name: delete-pin
      description: Delete PIN
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: platform-user-security.usersecuritypindelete
      with:
        userId: tools.userId
      outputParameters:
      - type: object
        mapping: $.