Akamai: Application Security API — API request constraints

naftiko: 1.0.0-alpha2
info:
  label: 'Akamai: Application Security API — API request constraints'
  description: 'Akamai: Application Security API — API request constraints. 3 operations. Lead operation: Akamai API Security
    List API Request Constraints and Actions. Self-contained Naftiko capability covering one Akamai Api Security business
    surface.'
  tags:
  - Akamai Api Security
  - API request constraints
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    AKAMAI_API_SECURITY_API_KEY: AKAMAI_API_SECURITY_API_KEY
capability:
  consumes:
  - type: http
    namespace: akamai-api-security-api-request-constraints
    baseUri: https://{hostname}/appsec/v1
    description: 'Akamai: Application Security API — API request constraints business capability. Self-contained, no shared
      references.'
    resources:
    - name: configs-configId-versions-versionNumber-security-policies-policyId-api-request-c
      path: /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/api-request-constraints
      operations:
      - name: getapirequestconstraints
        method: GET
        description: Akamai API Security List API Request Constraints and Actions
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: accountSwitchKey
          in: query
          type: string
          description: For customers who manage more than one account, this [runs the operation from another account](https://techdocs.akamai.com/developer/docs/manage-many-accounts-w
      - name: putapirequestconstraints
        method: PUT
        description: Akamai API Security Modify the Request Constraint Action for All APIs
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: accountSwitchKey
          in: query
          type: string
          description: For customers who manage more than one account, this [runs the operation from another account](https://techdocs.akamai.com/developer/docs/manage-many-accounts-w
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: configs-configId-versions-versionNumber-security-policies-policyId-api-request-c
      path: /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/api-request-constraints/{apiId}
      operations:
      - name: putapirequestconstraintsapi
        method: PUT
        description: Akamai API Security Modify an API Request Constraint's Action
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: accountSwitchKey
          in: query
          type: string
          description: For customers who manage more than one account, this [runs the operation from another account](https://techdocs.akamai.com/developer/docs/manage-many-accounts-w
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
  exposes:
  - type: rest
    namespace: akamai-api-security-api-request-constraints-rest
    port: 8080
    description: 'REST adapter for Akamai: Application Security API — API request constraints. One Spectral-compliant resource
      per consumed operation, prefixed with /v1.'
    resources:
    - path: /v1/configs/{configid}/versions/{versionnumber}/security-policies/{policyid}/api-request-constraints
      name: configs-configid-versions-versionnumber-security-policies-policyid-api-request-c
      description: REST surface for configs-configId-versions-versionNumber-security-policies-policyId-api-request-c.
      operations:
      - method: GET
        name: getapirequestconstraints
        description: Akamai API Security List API Request Constraints and Actions
        call: akamai-api-security-api-request-constraints.getapirequestconstraints
        with:
          accountSwitchKey: rest.accountSwitchKey
        outputParameters:
        - type: object
          mapping: $.
      - method: PUT
        name: putapirequestconstraints
        description: Akamai API Security Modify the Request Constraint Action for All APIs
        call: akamai-api-security-api-request-constraints.putapirequestconstraints
        with:
          accountSwitchKey: rest.accountSwitchKey
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/configs/{configid}/versions/{versionnumber}/security-policies/{policyid}/api-request-constraints/{apiid}
      name: configs-configid-versions-versionnumber-security-policies-policyid-api-request-c
      description: REST surface for configs-configId-versions-versionNumber-security-policies-policyId-api-request-c.
      operations:
      - method: PUT
        name: putapirequestconstraintsapi
        description: Akamai API Security Modify an API Request Constraint's Action
        call: akamai-api-security-api-request-constraints.putapirequestconstraintsapi
        with:
          accountSwitchKey: rest.accountSwitchKey
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: akamai-api-security-api-request-constraints-mcp
    port: 9090
    transport: http
    description: 'MCP adapter for Akamai: Application Security API — API request constraints. One tool per consumed operation,
      routed inline through this capability''s consumes block.'
    tools:
    - name: akamai-api-security-list-api
      description: Akamai API Security List API Request Constraints and Actions
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: akamai-api-security-api-request-constraints.getapirequestconstraints
      with:
        accountSwitchKey: tools.accountSwitchKey
      outputParameters:
      - type: object
        mapping: $.
    - name: akamai-api-security-modify-request
      description: Akamai API Security Modify the Request Constraint Action for All APIs
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: akamai-api-security-api-request-constraints.putapirequestconstraints
      with:
        accountSwitchKey: tools.accountSwitchKey
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: akamai-api-security-modify-api
      description: Akamai API Security Modify an API Request Constraint's Action
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: akamai-api-security-api-request-constraints.putapirequestconstraintsapi
      with:
        accountSwitchKey: tools.accountSwitchKey
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.