apiVersion: naftiko.dev/v1
kind: Capability
metadata:
  name: yapily-data-access
  labels:
    provider: yapily
    domain: open-banking
    regulation: psd2
spec:
  title: Yapily Account Information Access
  description: |
    Retrieve a consenting bank customer's accounts, balances, transactions, identity,
    direct debits, standing orders, scheduled payments, and statements via Yapily's
    AIS endpoints. Uses a consent-token obtained from a prior PSD2 authorisation.
  api: yapily:yapily-data-api
  inputs:
    - name: consent_token
      type: string
      required: true
    - name: account_id
      type: string
      required: false
  operations:
    - getAccounts
    - getAccount
    - getAccountBalances
    - getAccountTransactions
    - getAccountIdentity
    - getAccountStatements
    - getAccountStatement
    - getAccountScheduledPayments
    - getAccountStandingOrders
    - getAccountDirectDebits
    - getAccountBeneficiaries
    - getAccountPeriodicPayments
    - getAccountTransactionsCategorisation
  governance:
    - PSD2 strong customer authentication required
    - Consents valid up to 90 days for AIS
    - Must respect institution-specific feature availability