naftiko: 1.0.0-alpha2 info: label: API Reference — Payment Authorization description: 'API Reference — Payment Authorization. 2 operations. Lead operation: Create authorization. Self-contained Naftiko capability covering one Zuora business surface.' tags: - Zuora - Payment Authorization created: '2026-05-19' modified: '2026-05-19' binds: - namespace: env keys: ZUORA_API_KEY: ZUORA_API_KEY capability: consumes: - type: http namespace: v1-payment-authorization baseUri: https://rest.zuora.com description: API Reference — Payment Authorization business capability. Self-contained, no shared references. resources: - name: v1-payment-methods-payment-method-id-authorize path: /v1/payment-methods/{payment-method-id}/authorize operations: - name: postcreateauthorization method: POST description: Create authorization outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: payment-method-id in: path type: string description: The unique ID of the payment method where the authorization is created. required: true - name: Request in: body type: string required: true - name: v1-payment-methods-payment-method-id-voidAuthorize path: /v1/payment-methods/{payment-method-id}/voidAuthorize operations: - name: postcancelauthorization method: POST description: Cancel authorization outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: payment-method-id in: path type: string description: The unique ID of the payment method where the authorization is cancelled. required: true - name: Request in: body type: string required: true exposes: - type: rest namespace: v1-payment-authorization-rest port: 8080 description: REST adapter for API Reference — Payment Authorization. One Spectral-compliant resource per consumed operation, prefixed with /v1. resources: - path: /v1/v1/payment-methods/{payment-method-id}/authorize name: v1-payment-methods-payment-method-id-authorize description: REST surface for v1-payment-methods-payment-method-id-authorize. operations: - method: POST name: postcreateauthorization description: Create authorization call: v1-payment-authorization.postcreateauthorization with: payment-method-id: rest.payment-method-id Request: rest.Request outputParameters: - type: object mapping: $. - path: /v1/v1/payment-methods/{payment-method-id}/voidauthorize name: v1-payment-methods-payment-method-id-voidauthorize description: REST surface for v1-payment-methods-payment-method-id-voidAuthorize. operations: - method: POST name: postcancelauthorization description: Cancel authorization call: v1-payment-authorization.postcancelauthorization with: payment-method-id: rest.payment-method-id Request: rest.Request outputParameters: - type: object mapping: $. - type: mcp namespace: v1-payment-authorization-mcp port: 9090 transport: http description: MCP adapter for API Reference — Payment Authorization. One tool per consumed operation, routed inline through this capability's consumes block. tools: - name: create-authorization description: Create authorization hints: readOnly: false destructive: false idempotent: false call: v1-payment-authorization.postcreateauthorization with: payment-method-id: tools.payment-method-id Request: tools.Request outputParameters: - type: object mapping: $. - name: cancel-authorization description: Cancel authorization hints: readOnly: false destructive: false idempotent: false call: v1-payment-authorization.postcancelauthorization with: payment-method-id: tools.payment-method-id Request: tools.Request outputParameters: - type: object mapping: $.