Akamai: Application Security API — URL protection policies

naftiko: 1.0.0-alpha2
info:
  label: 'Akamai: Application Security API — URL protection policies'
  description: 'Akamai: Application Security API — URL protection policies. 5 operations. Lead operation: Akamai API Security
    Create a URL Protection Policy. Self-contained Naftiko capability covering one Akamai Api Security business surface.'
  tags:
  - Akamai Api Security
  - URL protection policies
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    AKAMAI_API_SECURITY_API_KEY: AKAMAI_API_SECURITY_API_KEY
capability:
  consumes:
  - type: http
    namespace: akamai-api-security-url-protection-policies
    baseUri: https://{hostname}/appsec/v1
    description: 'Akamai: Application Security API — URL protection policies business capability. Self-contained, no shared
      references.'
    resources:
    - name: configs-configId-versions-versionNumber-url-protections
      path: /configs/{configId}/versions/{versionNumber}/url-protections
      operations:
      - name: posturlprotectionpolicies
        method: POST
        description: Akamai API Security Create a URL Protection Policy
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: accountSwitchKey
          in: query
          type: string
          description: For customers who manage more than one account, this [runs the operation from another account](https://techdocs.akamai.com/developer/docs/manage-many-accounts-w
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: geturlprotectionpolicies
        method: GET
        description: Akamai API Security List URL Protection Policies
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: accountSwitchKey
          in: query
          type: string
          description: For customers who manage more than one account, this [runs the operation from another account](https://techdocs.akamai.com/developer/docs/manage-many-accounts-w
    - name: configs-configId-versions-versionNumber-url-protections-urlProtectionPolicyId
      path: /configs/{configId}/versions/{versionNumber}/url-protections/{urlProtectionPolicyId}
      operations:
      - name: geturlprotectionpolicy
        method: GET
        description: Akamai API Security Get a URL Protection Policy
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: accountSwitchKey
          in: query
          type: string
          description: For customers who manage more than one account, this [runs the operation from another account](https://techdocs.akamai.com/developer/docs/manage-many-accounts-w
      - name: puturlprotectionpolicy
        method: PUT
        description: Akamai API Security Modify a URL Protection Policy
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: accountSwitchKey
          in: query
          type: string
          description: For customers who manage more than one account, this [runs the operation from another account](https://techdocs.akamai.com/developer/docs/manage-many-accounts-w
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: deleteurlprotectionpolicy
        method: DELETE
        description: Akamai API Security Remove a URL Protection Policy
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: accountSwitchKey
          in: query
          type: string
          description: For customers who manage more than one account, this [runs the operation from another account](https://techdocs.akamai.com/developer/docs/manage-many-accounts-w
  exposes:
  - type: rest
    namespace: akamai-api-security-url-protection-policies-rest
    port: 8080
    description: 'REST adapter for Akamai: Application Security API — URL protection policies. One Spectral-compliant resource
      per consumed operation, prefixed with /v1.'
    resources:
    - path: /v1/configs/{configid}/versions/{versionnumber}/url-protections
      name: configs-configid-versions-versionnumber-url-protections
      description: REST surface for configs-configId-versions-versionNumber-url-protections.
      operations:
      - method: POST
        name: posturlprotectionpolicies
        description: Akamai API Security Create a URL Protection Policy
        call: akamai-api-security-url-protection-policies.posturlprotectionpolicies
        with:
          accountSwitchKey: rest.accountSwitchKey
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
      - method: GET
        name: geturlprotectionpolicies
        description: Akamai API Security List URL Protection Policies
        call: akamai-api-security-url-protection-policies.geturlprotectionpolicies
        with:
          accountSwitchKey: rest.accountSwitchKey
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/configs/{configid}/versions/{versionnumber}/url-protections/{urlprotectionpolicyid}
      name: configs-configid-versions-versionnumber-url-protections-urlprotectionpolicyid
      description: REST surface for configs-configId-versions-versionNumber-url-protections-urlProtectionPolicyId.
      operations:
      - method: GET
        name: geturlprotectionpolicy
        description: Akamai API Security Get a URL Protection Policy
        call: akamai-api-security-url-protection-policies.geturlprotectionpolicy
        with:
          accountSwitchKey: rest.accountSwitchKey
        outputParameters:
        - type: object
          mapping: $.
      - method: PUT
        name: puturlprotectionpolicy
        description: Akamai API Security Modify a URL Protection Policy
        call: akamai-api-security-url-protection-policies.puturlprotectionpolicy
        with:
          accountSwitchKey: rest.accountSwitchKey
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
      - method: DELETE
        name: deleteurlprotectionpolicy
        description: Akamai API Security Remove a URL Protection Policy
        call: akamai-api-security-url-protection-policies.deleteurlprotectionpolicy
        with:
          accountSwitchKey: rest.accountSwitchKey
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: akamai-api-security-url-protection-policies-mcp
    port: 9090
    transport: http
    description: 'MCP adapter for Akamai: Application Security API — URL protection policies. One tool per consumed operation,
      routed inline through this capability''s consumes block.'
    tools:
    - name: akamai-api-security-create-url
      description: Akamai API Security Create a URL Protection Policy
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: akamai-api-security-url-protection-policies.posturlprotectionpolicies
      with:
        accountSwitchKey: tools.accountSwitchKey
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: akamai-api-security-list-url
      description: Akamai API Security List URL Protection Policies
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: akamai-api-security-url-protection-policies.geturlprotectionpolicies
      with:
        accountSwitchKey: tools.accountSwitchKey
      outputParameters:
      - type: object
        mapping: $.
    - name: akamai-api-security-get-url
      description: Akamai API Security Get a URL Protection Policy
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: akamai-api-security-url-protection-policies.geturlprotectionpolicy
      with:
        accountSwitchKey: tools.accountSwitchKey
      outputParameters:
      - type: object
        mapping: $.
    - name: akamai-api-security-modify-url
      description: Akamai API Security Modify a URL Protection Policy
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: akamai-api-security-url-protection-policies.puturlprotectionpolicy
      with:
        accountSwitchKey: tools.accountSwitchKey
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: akamai-api-security-remove-url
      description: Akamai API Security Remove a URL Protection Policy
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: akamai-api-security-url-protection-policies.deleteurlprotectionpolicy
      with:
        accountSwitchKey: tools.accountSwitchKey
      outputParameters:
      - type: object
        mapping: $.