Pod API — AppEntitlement

naftiko: 1.0.0-alpha2
info:
  label: Pod API — AppEntitlement
  description: 'Pod API — AppEntitlement. 5 operations. Lead operation: Get the list of application entitlements for the company.
    Self-contained Naftiko capability covering one Finos business surface.'
  tags:
  - Finos
  - AppEntitlement
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    FINOS_API_KEY: FINOS_API_KEY
capability:
  consumes:
  - type: http
    namespace: symphony-pod-appentitlement
    baseUri: https://yourpodURL.symphony.com/pod
    description: Pod API — AppEntitlement business capability. Self-contained, no shared references.
    resources:
    - name: v1-admin-app-entitlement-list
      path: /v1/admin/app/entitlement/list
      operations:
      - name: get
        method: GET
        description: Get the list of application entitlements for the company
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: sessionToken
          in: header
          type: string
          description: Session authentication token.
          required: true
      - name: post
        method: POST
        description: Update the application entitlements for the company
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: sessionToken
          in: header
          type: string
          description: Session authentication token.
          required: true
        - name: payload
          in: body
          type: string
          required: true
    - name: v1-admin-user-uid-app-entitlement-list
      path: /v1/admin/user/{uid}/app/entitlement/list
      operations:
      - name: get
        method: GET
        description: Get the list of application entitlements for this user
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: sessionToken
          in: header
          type: string
          description: Session authentication token.
          required: true
        - name: uid
          in: path
          type: integer
          description: User ID as a decimal integer
          required: true
      - name: post
        method: POST
        description: Update the application entitlements for this user
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: sessionToken
          in: header
          type: string
          description: Session authentication token.
          required: true
        - name: uid
          in: path
          type: integer
          description: User ID as a decimal integer
          required: true
        - name: payload
          in: body
          type: string
          required: true
      - name: patch
        method: PATCH
        description: Update unique entitlement of an app for this user. Entitlement can be installation, visibility or product
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: sessionToken
          in: header
          type: string
          description: Session authentication token.
          required: true
        - name: uid
          in: path
          type: integer
          description: User ID as a decimal integer
          required: true
        - name: payload
          in: body
          type: string
          required: true
  exposes:
  - type: rest
    namespace: symphony-pod-appentitlement-rest
    port: 8080
    description: REST adapter for Pod API — AppEntitlement. One Spectral-compliant resource per consumed operation, prefixed
      with /v1.
    resources:
    - path: /v1/v1/admin/app/entitlement/list
      name: v1-admin-app-entitlement-list
      description: REST surface for v1-admin-app-entitlement-list.
      operations:
      - method: GET
        name: get
        description: Get the list of application entitlements for the company
        call: symphony-pod-appentitlement.get
        with:
          sessionToken: rest.sessionToken
        outputParameters:
        - type: object
          mapping: $.
      - method: POST
        name: post
        description: Update the application entitlements for the company
        call: symphony-pod-appentitlement.post
        with:
          sessionToken: rest.sessionToken
          payload: rest.payload
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/v1/admin/user/{uid}/app/entitlement/list
      name: v1-admin-user-uid-app-entitlement-list
      description: REST surface for v1-admin-user-uid-app-entitlement-list.
      operations:
      - method: GET
        name: get
        description: Get the list of application entitlements for this user
        call: symphony-pod-appentitlement.get
        with:
          sessionToken: rest.sessionToken
          uid: rest.uid
        outputParameters:
        - type: object
          mapping: $.
      - method: POST
        name: post
        description: Update the application entitlements for this user
        call: symphony-pod-appentitlement.post
        with:
          sessionToken: rest.sessionToken
          uid: rest.uid
          payload: rest.payload
        outputParameters:
        - type: object
          mapping: $.
      - method: PATCH
        name: patch
        description: Update unique entitlement of an app for this user. Entitlement can be installation, visibility or product
        call: symphony-pod-appentitlement.patch
        with:
          sessionToken: rest.sessionToken
          uid: rest.uid
          payload: rest.payload
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: symphony-pod-appentitlement-mcp
    port: 9090
    transport: http
    description: MCP adapter for Pod API — AppEntitlement. One tool per consumed operation, routed inline through this capability's
      consumes block.
    tools:
    - name: get-list-application-entitlements-company
      description: Get the list of application entitlements for the company
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: symphony-pod-appentitlement.get
      with:
        sessionToken: tools.sessionToken
      outputParameters:
      - type: object
        mapping: $.
    - name: update-application-entitlements-company
      description: Update the application entitlements for the company
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: symphony-pod-appentitlement.post
      with:
        sessionToken: tools.sessionToken
        payload: tools.payload
      outputParameters:
      - type: object
        mapping: $.
    - name: get-list-application-entitlements-this
      description: Get the list of application entitlements for this user
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: symphony-pod-appentitlement.get
      with:
        sessionToken: tools.sessionToken
        uid: tools.uid
      outputParameters:
      - type: object
        mapping: $.
    - name: update-application-entitlements-this-user
      description: Update the application entitlements for this user
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: symphony-pod-appentitlement.post
      with:
        sessionToken: tools.sessionToken
        uid: tools.uid
        payload: tools.payload
      outputParameters:
      - type: object
        mapping: $.
    - name: update-unique-entitlement-app-this
      description: Update unique entitlement of an app for this user. Entitlement can be installation, visibility or product
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: symphony-pod-appentitlement.patch
      with:
        sessionToken: tools.sessionToken
        uid: tools.uid
        payload: tools.payload
      outputParameters:
      - type: object
        mapping: $.