Cilium · Capability

Cilium API

The Cilium REST API provides access to the Cilium daemon and agent endpoints for managing Kubernetes network policy, security, and connectivity. The API is served by the cilium-agent process over a local Unix domain socket and HTTP interface. It covers endpoint management, identity management, policy configuration, IP address management, service configuration, BGP operations, and daemon health status.

Run with Naftiko CiliumAPI

What You Can Do

GET
Getdaemonhealth — Cilium Get daemon health status
/healthz
GET
Getdaemonconfig — Cilium Get daemon configuration
/config
PATCH
Patchdaemonconfig — Cilium Modify daemon configuration
/config
GET
Getclusternodes — Cilium List cluster nodes
/cluster/nodes
GET
Getdebuginfo — Cilium Get debugging information
/debuginfo
GET
Getbpfmaps — Cilium List BPF maps
/map
GET
Getnodeids — Cilium Get node IDs
/node/ids
GET
Listendpoints — Cilium List endpoints
/endpoint
DELETE
Deleteendpoints — Cilium Delete endpoints by label selector
/endpoint
GET
Getendpoint — Cilium Get endpoint by ID
/endpoint/{id}
PUT
Putendpoint — Cilium Create or replace endpoint
/endpoint/{id}
PATCH
Patchendpoint — Cilium Modify endpoint
/endpoint/{id}
DELETE
Deleteendpoint — Cilium Delete endpoint
/endpoint/{id}
GET
Getendpointconfig — Cilium Get endpoint configuration
/endpoint/{id}/config
PATCH
Patchendpointconfig — Cilium Modify endpoint configuration
/endpoint/{id}/config
GET
Getendpointlabels — Cilium Get endpoint labels
/endpoint/{id}/labels
PATCH
Patchendpointlabels — Cilium Modify endpoint labels
/endpoint/{id}/labels
GET
Getendpointlog — Cilium Get endpoint status log
/endpoint/{id}/log
GET
Getendpointhealth — Cilium Get endpoint health
/endpoint/{id}/healthz
GET
Listidentities — Cilium List security identities
/identity
GET
Getidentity — Cilium Get identity by ID
/identity/{id}
GET
Getlocalendpointidentities — Cilium List local endpoint identities
/identity/endpoints
GET
Getpolicyselectors — Cilium Get policy selectors
/policy/selectors
GET
Getfqdncache — Cilium Get FQDN DNS cache
/fqdn/cache
DELETE
Deletefqdncache — Cilium Clear FQDN DNS cache
/fqdn/cache
GET
Getfqdnnames — Cilium Get FQDN selector names
/fqdn/names
POST
Allocateipaddress — Cilium Allocate IP address
/ipam
POST
Allocatespecificipaddress — Cilium Allocate specific IP address
/ipam/{ip}
DELETE
Releaseipaddress — Cilium Release IP address
/ipam/{ip}
GET
Listipaddresses — Cilium List IP addresses
/ip
GET
Listservices — Cilium List services
/service
GET
Getservice — Cilium Get service by ID
/service/{id}
PUT
Putservice — Cilium Create or update service
/service/{id}
DELETE
Deleteservice — Cilium Delete service
/service/{id}
GET
Listlocalredirectpolicies — Cilium List local redirect policies
/lrp
GET
Getprefilterconfig — Cilium Get prefilter configuration
/prefilter
PATCH
Patchprefilterconfig — Cilium Update prefilter configuration
/prefilter
DELETE
Deleteprefilterconfig — Cilium Delete prefilter entries
/prefilter
GET
Getbgppeers — Cilium List BGP peers
/bgp/peers
GET
Getbgproutes — Cilium List BGP routes
/bgp/routes
GET
Getbgproutepolicies — Cilium List BGP route policies
/bgp/route-policies

MCP Tools

getdaemonhealth

Cilium Get daemon health status

read-only idempotent
getdaemonconfig

Cilium Get daemon configuration

read-only idempotent
patchdaemonconfig

Cilium Modify daemon configuration

getclusternodes

Cilium List cluster nodes

read-only idempotent
getdebuginfo

Cilium Get debugging information

read-only idempotent
getbpfmaps

Cilium List BPF maps

read-only idempotent
getnodeids

Cilium Get node IDs

read-only idempotent
listendpoints

Cilium List endpoints

read-only idempotent
deleteendpoints

Cilium Delete endpoints by label selector

idempotent
getendpoint

Cilium Get endpoint by ID

read-only idempotent
putendpoint

Cilium Create or replace endpoint

idempotent
patchendpoint

Cilium Modify endpoint

deleteendpoint

Cilium Delete endpoint

idempotent
getendpointconfig

Cilium Get endpoint configuration

read-only idempotent
patchendpointconfig

Cilium Modify endpoint configuration

getendpointlabels

Cilium Get endpoint labels

read-only idempotent
patchendpointlabels

Cilium Modify endpoint labels

getendpointlog

Cilium Get endpoint status log

read-only idempotent
getendpointhealth

Cilium Get endpoint health

read-only idempotent
listidentities

Cilium List security identities

read-only idempotent
getidentity

Cilium Get identity by ID

read-only idempotent
getlocalendpointidentities

Cilium List local endpoint identities

read-only idempotent
getpolicyselectors

Cilium Get policy selectors

read-only idempotent
getfqdncache

Cilium Get FQDN DNS cache

read-only idempotent
deletefqdncache

Cilium Clear FQDN DNS cache

idempotent
getfqdnnames

Cilium Get FQDN selector names

read-only idempotent
allocateipaddress

Cilium Allocate IP address

allocatespecificipaddress

Cilium Allocate specific IP address

releaseipaddress

Cilium Release IP address

idempotent
listipaddresses

Cilium List IP addresses

read-only idempotent
listservices

Cilium List services

read-only idempotent
getservice

Cilium Get service by ID

read-only idempotent
putservice

Cilium Create or update service

idempotent
deleteservice

Cilium Delete service

idempotent
listlocalredirectpolicies

Cilium List local redirect policies

read-only idempotent
getprefilterconfig

Cilium Get prefilter configuration

read-only idempotent
patchprefilterconfig

Cilium Update prefilter configuration

deleteprefilterconfig

Cilium Delete prefilter entries

idempotent
getbgppeers

Cilium List BGP peers

read-only idempotent
getbgproutes

Cilium List BGP routes

read-only idempotent
getbgproutepolicies

Cilium List BGP route policies

read-only idempotent

Capability Spec

cilium-capability.yaml Raw ↑
naftiko: 1.0.0-alpha2
info:
  label: Cilium API
  description: The Cilium REST API provides access to the Cilium daemon and agent endpoints for managing Kubernetes network
    policy, security, and connectivity. The API is served by the cilium-agent process over a local Unix domain socket and
    HTTP interface. It covers endpoint management, identity management, policy configuration, IP address management, service
    configuration, BGP operations, and daemon health status.
  tags:
  - Cilium
  - API
  created: '2026-05-06'
  modified: '2026-05-06'
capability:
  consumes:
  - type: http
    namespace: cilium
    baseUri: http://localhost/v1
    description: Cilium API HTTP API.
    resources:
    - name: healthz
      path: /healthz
      operations:
      - name: getdaemonhealth
        method: GET
        description: Cilium Get daemon health status
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: config
      path: /config
      operations:
      - name: getdaemonconfig
        method: GET
        description: Cilium Get daemon configuration
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: patchdaemonconfig
        method: PATCH
        description: Cilium Modify daemon configuration
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: cluster-nodes
      path: /cluster/nodes
      operations:
      - name: getclusternodes
        method: GET
        description: Cilium List cluster nodes
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: debuginfo
      path: /debuginfo
      operations:
      - name: getdebuginfo
        method: GET
        description: Cilium Get debugging information
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: map
      path: /map
      operations:
      - name: getbpfmaps
        method: GET
        description: Cilium List BPF maps
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: node-ids
      path: /node/ids
      operations:
      - name: getnodeids
        method: GET
        description: Cilium Get node IDs
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: endpoint
      path: /endpoint
      operations:
      - name: listendpoints
        method: GET
        description: Cilium List endpoints
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: deleteendpoints
        method: DELETE
        description: Cilium Delete endpoints by label selector
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: endpoint-id
      path: /endpoint/{id}
      operations:
      - name: getendpoint
        method: GET
        description: Cilium Get endpoint by ID
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: putendpoint
        method: PUT
        description: Cilium Create or replace endpoint
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: patchendpoint
        method: PATCH
        description: Cilium Modify endpoint
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: deleteendpoint
        method: DELETE
        description: Cilium Delete endpoint
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: endpoint-id-config
      path: /endpoint/{id}/config
      operations:
      - name: getendpointconfig
        method: GET
        description: Cilium Get endpoint configuration
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: patchendpointconfig
        method: PATCH
        description: Cilium Modify endpoint configuration
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: endpoint-id-labels
      path: /endpoint/{id}/labels
      operations:
      - name: getendpointlabels
        method: GET
        description: Cilium Get endpoint labels
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: patchendpointlabels
        method: PATCH
        description: Cilium Modify endpoint labels
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: endpoint-id-log
      path: /endpoint/{id}/log
      operations:
      - name: getendpointlog
        method: GET
        description: Cilium Get endpoint status log
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: endpoint-id-healthz
      path: /endpoint/{id}/healthz
      operations:
      - name: getendpointhealth
        method: GET
        description: Cilium Get endpoint health
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: identity
      path: /identity
      operations:
      - name: listidentities
        method: GET
        description: Cilium List security identities
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: identity-id
      path: /identity/{id}
      operations:
      - name: getidentity
        method: GET
        description: Cilium Get identity by ID
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: identity-endpoints
      path: /identity/endpoints
      operations:
      - name: getlocalendpointidentities
        method: GET
        description: Cilium List local endpoint identities
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: policy-selectors
      path: /policy/selectors
      operations:
      - name: getpolicyselectors
        method: GET
        description: Cilium Get policy selectors
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: fqdn-cache
      path: /fqdn/cache
      operations:
      - name: getfqdncache
        method: GET
        description: Cilium Get FQDN DNS cache
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: deletefqdncache
        method: DELETE
        description: Cilium Clear FQDN DNS cache
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: fqdn-names
      path: /fqdn/names
      operations:
      - name: getfqdnnames
        method: GET
        description: Cilium Get FQDN selector names
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: ipam
      path: /ipam
      operations:
      - name: allocateipaddress
        method: POST
        description: Cilium Allocate IP address
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: ipam-ip
      path: /ipam/{ip}
      operations:
      - name: allocatespecificipaddress
        method: POST
        description: Cilium Allocate specific IP address
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: releaseipaddress
        method: DELETE
        description: Cilium Release IP address
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: ip
      path: /ip
      operations:
      - name: listipaddresses
        method: GET
        description: Cilium List IP addresses
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: service
      path: /service
      operations:
      - name: listservices
        method: GET
        description: Cilium List services
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: service-id
      path: /service/{id}
      operations:
      - name: getservice
        method: GET
        description: Cilium Get service by ID
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: putservice
        method: PUT
        description: Cilium Create or update service
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: deleteservice
        method: DELETE
        description: Cilium Delete service
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: lrp
      path: /lrp
      operations:
      - name: listlocalredirectpolicies
        method: GET
        description: Cilium List local redirect policies
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: prefilter
      path: /prefilter
      operations:
      - name: getprefilterconfig
        method: GET
        description: Cilium Get prefilter configuration
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: patchprefilterconfig
        method: PATCH
        description: Cilium Update prefilter configuration
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: deleteprefilterconfig
        method: DELETE
        description: Cilium Delete prefilter entries
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: bgp-peers
      path: /bgp/peers
      operations:
      - name: getbgppeers
        method: GET
        description: Cilium List BGP peers
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: bgp-routes
      path: /bgp/routes
      operations:
      - name: getbgproutes
        method: GET
        description: Cilium List BGP routes
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: bgp-route-policies
      path: /bgp/route-policies
      operations:
      - name: getbgproutepolicies
        method: GET
        description: Cilium List BGP route policies
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
  exposes:
  - type: rest
    port: 8080
    namespace: cilium-rest
    description: REST adapter for Cilium API.
    resources:
    - path: /healthz
      name: getdaemonhealth
      operations:
      - method: GET
        name: getdaemonhealth
        description: Cilium Get daemon health status
        call: cilium.getdaemonhealth
        outputParameters:
        - type: object
          mapping: $.
    - path: /config
      name: getdaemonconfig
      operations:
      - method: GET
        name: getdaemonconfig
        description: Cilium Get daemon configuration
        call: cilium.getdaemonconfig
        outputParameters:
        - type: object
          mapping: $.
    - path: /config
      name: patchdaemonconfig
      operations:
      - method: PATCH
        name: patchdaemonconfig
        description: Cilium Modify daemon configuration
        call: cilium.patchdaemonconfig
        outputParameters:
        - type: object
          mapping: $.
    - path: /cluster/nodes
      name: getclusternodes
      operations:
      - method: GET
        name: getclusternodes
        description: Cilium List cluster nodes
        call: cilium.getclusternodes
        outputParameters:
        - type: object
          mapping: $.
    - path: /debuginfo
      name: getdebuginfo
      operations:
      - method: GET
        name: getdebuginfo
        description: Cilium Get debugging information
        call: cilium.getdebuginfo
        outputParameters:
        - type: object
          mapping: $.
    - path: /map
      name: getbpfmaps
      operations:
      - method: GET
        name: getbpfmaps
        description: Cilium List BPF maps
        call: cilium.getbpfmaps
        outputParameters:
        - type: object
          mapping: $.
    - path: /node/ids
      name: getnodeids
      operations:
      - method: GET
        name: getnodeids
        description: Cilium Get node IDs
        call: cilium.getnodeids
        outputParameters:
        - type: object
          mapping: $.
    - path: /endpoint
      name: listendpoints
      operations:
      - method: GET
        name: listendpoints
        description: Cilium List endpoints
        call: cilium.listendpoints
        outputParameters:
        - type: object
          mapping: $.
    - path: /endpoint
      name: deleteendpoints
      operations:
      - method: DELETE
        name: deleteendpoints
        description: Cilium Delete endpoints by label selector
        call: cilium.deleteendpoints
        outputParameters:
        - type: object
          mapping: $.
    - path: /endpoint/{id}
      name: getendpoint
      operations:
      - method: GET
        name: getendpoint
        description: Cilium Get endpoint by ID
        call: cilium.getendpoint
        outputParameters:
        - type: object
          mapping: $.
    - path: /endpoint/{id}
      name: putendpoint
      operations:
      - method: PUT
        name: putendpoint
        description: Cilium Create or replace endpoint
        call: cilium.putendpoint
        outputParameters:
        - type: object
          mapping: $.
    - path: /endpoint/{id}
      name: patchendpoint
      operations:
      - method: PATCH
        name: patchendpoint
        description: Cilium Modify endpoint
        call: cilium.patchendpoint
        outputParameters:
        - type: object
          mapping: $.
    - path: /endpoint/{id}
      name: deleteendpoint
      operations:
      - method: DELETE
        name: deleteendpoint
        description: Cilium Delete endpoint
        call: cilium.deleteendpoint
        outputParameters:
        - type: object
          mapping: $.
    - path: /endpoint/{id}/config
      name: getendpointconfig
      operations:
      - method: GET
        name: getendpointconfig
        description: Cilium Get endpoint configuration
        call: cilium.getendpointconfig
        outputParameters:
        - type: object
          mapping: $.
    - path: /endpoint/{id}/config
      name: patchendpointconfig
      operations:
      - method: PATCH
        name: patchendpointconfig
        description: Cilium Modify endpoint configuration
        call: cilium.patchendpointconfig
        outputParameters:
        - type: object
          mapping: $.
    - path: /endpoint/{id}/labels
      name: getendpointlabels
      operations:
      - method: GET
        name: getendpointlabels
        description: Cilium Get endpoint labels
        call: cilium.getendpointlabels
        outputParameters:
        - type: object
          mapping: $.
    - path: /endpoint/{id}/labels
      name: patchendpointlabels
      operations:
      - method: PATCH
        name: patchendpointlabels
        description: Cilium Modify endpoint labels
        call: cilium.patchendpointlabels
        outputParameters:
        - type: object
          mapping: $.
    - path: /endpoint/{id}/log
      name: getendpointlog
      operations:
      - method: GET
        name: getendpointlog
        description: Cilium Get endpoint status log
        call: cilium.getendpointlog
        outputParameters:
        - type: object
          mapping: $.
    - path: /endpoint/{id}/healthz
      name: getendpointhealth
      operations:
      - method: GET
        name: getendpointhealth
        description: Cilium Get endpoint health
        call: cilium.getendpointhealth
        outputParameters:
        - type: object
          mapping: $.
    - path: /identity
      name: listidentities
      operations:
      - method: GET
        name: listidentities
        description: Cilium List security identities
        call: cilium.listidentities
        outputParameters:
        - type: object
          mapping: $.
    - path: /identity/{id}
      name: getidentity
      operations:
      - method: GET
        name: getidentity
        description: Cilium Get identity by ID
        call: cilium.getidentity
        outputParameters:
        - type: object
          mapping: $.
    - path: /identity/endpoints
      name: getlocalendpointidentities
      operations:
      - method: GET
        name: getlocalendpointidentities
        description: Cilium List local endpoint identities
        call: cilium.getlocalendpointidentities
        outputParameters:
        - type: object
          mapping: $.
    - path: /policy/selectors
      name: getpolicyselectors
      operations:
      - method: GET
        name: getpolicyselectors
        description: Cilium Get policy selectors
        call: cilium.getpolicyselectors
        outputParameters:
        - type: object
          mapping: $.
    - path: /fqdn/cache
      name: getfqdncache
      operations:
      - method: GET
        name: getfqdncache
        description: Cilium Get FQDN DNS cache
        call: cilium.getfqdncache
        outputParameters:
        - type: object
          mapping: $.
    - path: /fqdn/cache
      name: deletefqdncache
      operations:
      - method: DELETE
        name: deletefqdncache
        description: Cilium Clear FQDN DNS cache
        call: cilium.deletefqdncache
        outputParameters:
        - type: object
          mapping: $.
    - path: /fqdn/names
      name: getfqdnnames
      operations:
      - method: GET
        name: getfqdnnames
        description: Cilium Get FQDN selector names
        call: cilium.getfqdnnames
        outputParameters:
        - type: object
          mapping: $.
    - path: /ipam
      name: allocateipaddress
      operations:
      - method: POST
        name: allocateipaddress
        description: Cilium Allocate IP address
        call: cilium.allocateipaddress
        outputParameters:
        - type: object
          mapping: $.
    - path: /ipam/{ip}
      name: allocatespecificipaddress
      operations:
      - method: POST
        name: allocatespecificipaddress
        description: Cilium Allocate specific IP address
        call: cilium.allocatespecificipaddress
        outputParameters:
        - type: object
          mapping: $.
    - path: /ipam/{ip}
      name: releaseipaddress
      operations:
      - method: DELETE
        name: releaseipaddress
        description: Cilium Release IP address
        call: cilium.releaseipaddress
        outputParameters:
        - type: object
          mapping: $.
    - path: /ip
      name: listipaddresses
      operations:
      - method: GET
        name: listipaddresses
        description: Cilium List IP addresses
        call: cilium.listipaddresses
        outputParameters:
        - type: object
          mapping: $.
    - path: /service
      name: listservices
      operations:
      - method: GET
        name: listservices
        description: Cilium List services
        call: cilium.listservices
        outputParameters:
        - type: object
          mapping: $.
    - path: /service/{id}
      name: getservice
      operations:
      - method: GET
        name: getservice
        description: Cilium Get service by ID
        call: cilium.getservice
        outputParameters:
        - type: object
          mapping: $.
    - path: /service/{id}
      name: putservice
      operations:
      - method: PUT
        name: putservice
        description: Cilium Create or update service
        call: cilium.putservice
        outputParameters:
        - type: object
          mapping: $.
    - path: /service/{id}
      name: deleteservice
      operations:
      - method: DELETE
        name: deleteservice
        description: Cilium Delete service
        call: cilium.deleteservice
        outputParameters:
        - type: object
          mapping: $.
    - path: /lrp
      name: listlocalredirectpolicies
      operations:
      - method: GET
        name: listlocalredirectpolicies
        description: Cilium List local redirect policies
        call: cilium.listlocalredirectpolicies
        outputParameters:
        - type: object
          mapping: $.
    - path: /prefilter
      name: getprefilterconfig
      operations:
      - method: GET
        name: getprefilterconfig
        description: Cilium Get prefilter configuration
        call: cilium.getprefilterconfig
        outputParameters:
        - type: object
          mapping: $.
    - path: /prefilter
      name: patchprefilterconfig
      operations:
      - method: PATCH
        name: patchprefilterconfig
        description: Cilium Update prefilter configuration
        call: cilium.patchprefilterconfig
        outputParameters:
        - type: object
          mapping: $.
    - path: /prefilter
      name: deleteprefilterconfig
      operations:
      - method: DELETE
        name: deleteprefilterconfig
        description: Cilium Delete prefilter entries
        call: cilium.deleteprefilterconfig
        outputParameters:
        - type: object
          mapping: $.
    - path: /bgp/peers
      name: getbgppeers
      operations:
      - method: GET
        name: getbgppeers
        description: Cilium List BGP peers
        call: cilium.getbgppeers
        outputParameters:
        - type: object
          mapping: $.
    - path: /bgp/routes
      name: getbgproutes
      operations:
      - method: GET
        name: getbgproutes
        description: Cilium List BGP routes
        call: cilium.getbgproutes
        outputParameters:
        - type: object
          mapping: $.
    - path: /bgp/route-policies
      name: getbgproutepolicies
      operations:
      - method: GET
        name: getbgproutepolicies
        description: Cilium List BGP route policies
        call: cilium.getbgproutepolicies
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    port: 9090
    namespace: cilium-mcp
    transport: http
    description: MCP adapter for Cilium API for AI agent use.
    tools:
    - name: getdaemonhealth
      description: Cilium Get daemon health status
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: cilium.getdaemonhealth
      outputParameters:
      - type: object
        mapping: $.
    - name: getdaemonconfig
      description: Cilium Get daemon configuration
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: cilium.getdaemonconfig
      outputParameters:
      - type: object
        mapping: $.
    - name: patchdaemonconfig
      description: Cilium Modify daemon configuration
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: cilium.patchdaemonconfig
      outputParameters:
      - type: object
        mapping: $.
    - name: getclusternodes
      description: Cilium List cluster nodes
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: cilium.getclusternodes
      outputParameters:
      - type: object
        mapping: $.
    - name: getdebuginfo
      description: Cilium Get debugging information
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: cilium.getdebuginfo
      outputParameters:
      - type: object
        mapping: $.
    - name: getbpfmaps
      description: Cilium List BPF maps
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: cilium.getbpfmaps
      outputParameters:
      - type: object
        mapping: $.
    - name: getnodeids
      description: Cilium Get node IDs
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: cilium.getnodeids
      outputParameters:
      - type: object
        mapping: $.
    - name: listendpoints
      description: Cilium List endpoints
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: cilium.listendpoints
      outputParameters:
      - type: object
        mapping: $.
    - name: deleteendpoints
      description: Cilium Delete endpoints by label selector
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: cilium.deleteendpoints
      outputParameters:
      - type: object
        mapping: $.
    - name: getendpoint
      description: Cilium Get endpoint by ID
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: cilium.getendpoint
      outputParameters:
      - type: object
        mapping: $.
    - name: putendpoint
      description: Cilium Create or replace endpoint
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: cilium.putendpoint
      outputParameters:
      - type: object
        mapping: $.
    - name: patchendpoint
      description: Cilium Modify endpoint
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: cilium.patchendpoint
      outputParameters:
      - type: object
        mapping: $.
    - name: deleteendpoint
      description: Cilium Delete endpoint
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: cilium.deleteendpoint
      outputParameters:
      - type: object
        mapping: $.
    - name: getendpointconfig
      description: Cilium Get endpoint configuration
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: cilium.getendpointconfig
      outputParameters:
      - type: object
        mapping: $.
    - name: patchendpointconfig
      description: Cilium Modify endpoint configuration
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: cilium.patchendpointconfig
      outputParameters:
      - type: object
        mapping: $.
    - name: getendpointlabels
      description: Cilium Get endpoint labels
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: cilium.getendpointlabels
      outputParameters:
      - type: object
        mapping: $.
    - name: patchendpointlabels
      description: Cilium Modify endpoint labels
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: cilium.patchendpointlabels
      outputParameters:
      - type: object
        mapping: $.
    - name: getendpointlog
      description: Cilium Get endpoint status log
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: cilium.getendpointlog
      outputParameters:
      - type: object
        mapping: $.
    - name: getendpointhealth
      description: Cilium Get endpoint health
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: cilium.getendpointhealth
      outputParameters:
      - type: object
        mapping: $.
    - name: listidentities
      description: Cilium List security identities
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: cilium.listidentities
      outputParameters:
      - type: object
        mapping: $.
    - name: getidentity
      description: Cilium Get identity by ID
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: cilium.getidentity
      outputParameters:
      - type: object
        mapping: $.
    - name: getlocalendpointidentities
      description: Cilium List local endpoint identities
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: cilium.getlocalendpointidentities
      outputParameters:
      - type: object
        mapping: $.
    - name: getpolicyselectors
      description: Cilium Get policy selectors
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: cilium.getpolicyselectors
      outputParameters:
      - type: object
        mapping: $.
    - name: getfqdncache
      description: Cilium Get FQDN DNS cache
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: cilium.getfqdncache
      outputParameters:
      - type: object
        mapping: $.
    - name: deletefqdncache
      description: Cilium Clear FQDN DNS cache
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: cilium.deletefqdncache
      outputParameters:
      - type: object
        mapping: $.
    - name: getfqdnnames
      description: Cilium Get FQDN selector names
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: cilium.getfqdnnames
      outputParameters:
      - type: object
        mapping: $.
    - name: allocateipaddress
      description: Cilium Allocate IP address
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: cilium.allocateipaddress
      outputParameters:
      - type: object
        mapping: $.
    - name: allocatespecificipaddress
      description: Cilium Allocate specific IP address
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: cilium.allocatespecificipaddress
      outputParameters:
      - type: object
        mapping: $.
    - name: releaseipaddress
      description: Cilium Release IP address
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: cilium.releaseipaddress
      outputParameters:
      - type: object
        mapping: $.
    - name: listipaddresses
      description: Cilium List IP addresses
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: cilium.listipaddresses
      outputParameters:
      - type: object
        mapping: $.
    - name: listservices
      description: Cilium List services
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: cilium.listservices
      outputParameters:
      - type: object
        mapping: $.
    - name: getservice
      description: Cilium Get service by ID
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: cilium.getservice
      outputParameters:
      - type: object
        mapping: $.
    - name: putservice
      description: Cilium Create or update service
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: cilium.putservice
      outputParameters:
      - type: object
        mapping: $.
    - name: deleteservice
      description: Cilium Delete service
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: cilium.deleteservice
      outputParameters:
      - type: object
        mapping: $.
    - name: listlocalredirectpolicies
      description: Cilium List local redirect policies
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: cilium.listlocalredirectpolicies
      outputParameters:
      - type: object
        mapping: $.
    - name: getprefilt

# --- truncated at 32 KB (33 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/cilium/refs/heads/main/capabilities/cilium-capability.yaml