GitHub SCIM API — Scim

naftiko: 1.0.0-alpha2
info:
  label: GitHub SCIM API — Scim
  description: 'GitHub SCIM API — Scim. 12 operations. Lead operation: GitHub List Provisioned Scim Groups for an Enterprise.
    Self-contained Naftiko capability covering one Github business surface.'
  tags:
  - Github
  - Scim
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    GITHUB_API_KEY: GITHUB_API_KEY
capability:
  consumes:
  - type: http
    namespace: scim-scim
    baseUri: ''
    description: GitHub SCIM API — Scim business capability. Self-contained, no shared references.
    resources:
    - name: scim-v2-Groups
      path: /scim/v2/Groups
      operations:
      - name: listprovisionedscimgroupsforanenterprise
        method: GET
        description: GitHub List Provisioned Scim Groups for an Enterprise
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: filter
          in: query
          type: string
          description: If specified, only results that match the specified filter will be returned. Multiple filters are not
            supported. Possible filters are `externalId`, `id`, and `d
      - name: provisionscimenterprisegroup
        method: POST
        description: GitHub Provision Scim Enterprise Group
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: scim-v2-Groups-scim_group_id
      path: /scim/v2/Groups/{scim_group_id}
      operations:
      - name: getscimprovisioninginformationforanenterprisegroup
        method: GET
        description: GitHub Get Scim Provisioning Information for an Enterprise Group
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: setsciminformationforprovisionedenterprisegroup
        method: PUT
        description: GitHub Set Scim Information for Provisioned Enterprise Group
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: updateanattributeforscimenterprisegroup
        method: PATCH
        description: GitHub Update an Attribute for Scim Enterprise Group
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: deletescimgroupfromanenterprise
        method: DELETE
        description: GitHub Delete Scim Group from an Enterprise
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: scim-v2-Users
      path: /scim/v2/Users
      operations:
      - name: listscimprovisionedidentitiesforanenterprise
        method: GET
        description: GitHub List Scim Provisioned Identities for an Enterprise
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: filter
          in: query
          type: string
          description: 'If specified, only results that match the specified filter will be returned. Multiple filters are
            not supported. Possible filters are `userName`, `externalId`, '
      - name: provisionscimenterpriseuser
        method: POST
        description: GitHub Provision Scim Enterprise User
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: scim-v2-Users-scim_user_id
      path: /scim/v2/Users/{scim_user_id}
      operations:
      - name: getscimprovisioninginformationforanenterpriseuser
        method: GET
        description: GitHub Get Scim Provisioning Information for an Enterprise User
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: setsciminformationforprovisionedenterpriseuser
        method: PUT
        description: GitHub Set Scim Information for Provisioned Enterprise User
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: updateanattributeforscimenterpriseuser
        method: PATCH
        description: GitHub Update an Attribute for Scim Enterprise User
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: deletescimuserfromanenterprise
        method: DELETE
        description: GitHub Delete Scim User from an Enterprise
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    authentication:
      type: bearer
      token: '{{env.GITHUB_API_KEY}}'
  exposes:
  - type: rest
    namespace: scim-scim-rest
    port: 8080
    description: REST adapter for GitHub SCIM API — Scim. One Spectral-compliant resource per consumed operation, prefixed
      with /v1.
    resources:
    - path: /v1/scim/v2/groups
      name: scim-v2-groups
      description: REST surface for scim-v2-Groups.
      operations:
      - method: GET
        name: listprovisionedscimgroupsforanenterprise
        description: GitHub List Provisioned Scim Groups for an Enterprise
        call: scim-scim.listprovisionedscimgroupsforanenterprise
        with:
          filter: rest.filter
        outputParameters:
        - type: object
          mapping: $.
      - method: POST
        name: provisionscimenterprisegroup
        description: GitHub Provision Scim Enterprise Group
        call: scim-scim.provisionscimenterprisegroup
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/scim/v2/groups/{scim-group-id}
      name: scim-v2-groups-scim-group-id
      description: REST surface for scim-v2-Groups-scim_group_id.
      operations:
      - method: GET
        name: getscimprovisioninginformationforanenterprisegroup
        description: GitHub Get Scim Provisioning Information for an Enterprise Group
        call: scim-scim.getscimprovisioninginformationforanenterprisegroup
        outputParameters:
        - type: object
          mapping: $.
      - method: PUT
        name: setsciminformationforprovisionedenterprisegroup
        description: GitHub Set Scim Information for Provisioned Enterprise Group
        call: scim-scim.setsciminformationforprovisionedenterprisegroup
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
      - method: PATCH
        name: updateanattributeforscimenterprisegroup
        description: GitHub Update an Attribute for Scim Enterprise Group
        call: scim-scim.updateanattributeforscimenterprisegroup
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
      - method: DELETE
        name: deletescimgroupfromanenterprise
        description: GitHub Delete Scim Group from an Enterprise
        call: scim-scim.deletescimgroupfromanenterprise
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/scim/v2/users
      name: scim-v2-users
      description: REST surface for scim-v2-Users.
      operations:
      - method: GET
        name: listscimprovisionedidentitiesforanenterprise
        description: GitHub List Scim Provisioned Identities for an Enterprise
        call: scim-scim.listscimprovisionedidentitiesforanenterprise
        with:
          filter: rest.filter
        outputParameters:
        - type: object
          mapping: $.
      - method: POST
        name: provisionscimenterpriseuser
        description: GitHub Provision Scim Enterprise User
        call: scim-scim.provisionscimenterpriseuser
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/scim/v2/users/{scim-user-id}
      name: scim-v2-users-scim-user-id
      description: REST surface for scim-v2-Users-scim_user_id.
      operations:
      - method: GET
        name: getscimprovisioninginformationforanenterpriseuser
        description: GitHub Get Scim Provisioning Information for an Enterprise User
        call: scim-scim.getscimprovisioninginformationforanenterpriseuser
        outputParameters:
        - type: object
          mapping: $.
      - method: PUT
        name: setsciminformationforprovisionedenterpriseuser
        description: GitHub Set Scim Information for Provisioned Enterprise User
        call: scim-scim.setsciminformationforprovisionedenterpriseuser
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
      - method: PATCH
        name: updateanattributeforscimenterpriseuser
        description: GitHub Update an Attribute for Scim Enterprise User
        call: scim-scim.updateanattributeforscimenterpriseuser
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
      - method: DELETE
        name: deletescimuserfromanenterprise
        description: GitHub Delete Scim User from an Enterprise
        call: scim-scim.deletescimuserfromanenterprise
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: scim-scim-mcp
    port: 9090
    transport: http
    description: MCP adapter for GitHub SCIM API — Scim. One tool per consumed operation, routed inline through this capability's
      consumes block.
    tools:
    - name: github-list-provisioned-scim-groups
      description: GitHub List Provisioned Scim Groups for an Enterprise
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: scim-scim.listprovisionedscimgroupsforanenterprise
      with:
        filter: tools.filter
      outputParameters:
      - type: object
        mapping: $.
    - name: github-provision-scim-enterprise-group
      description: GitHub Provision Scim Enterprise Group
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: scim-scim.provisionscimenterprisegroup
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: github-get-scim-provisioning-information
      description: GitHub Get Scim Provisioning Information for an Enterprise Group
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: scim-scim.getscimprovisioninginformationforanenterprisegroup
      outputParameters:
      - type: object
        mapping: $.
    - name: github-set-scim-information-provisioned
      description: GitHub Set Scim Information for Provisioned Enterprise Group
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: scim-scim.setsciminformationforprovisionedenterprisegroup
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: github-update-attribute-scim-enterprise
      description: GitHub Update an Attribute for Scim Enterprise Group
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: scim-scim.updateanattributeforscimenterprisegroup
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: github-delete-scim-group-enterprise
      description: GitHub Delete Scim Group from an Enterprise
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: scim-scim.deletescimgroupfromanenterprise
      outputParameters:
      - type: object
        mapping: $.
    - name: github-list-scim-provisioned-identities
      description: GitHub List Scim Provisioned Identities for an Enterprise
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: scim-scim.listscimprovisionedidentitiesforanenterprise
      with:
        filter: tools.filter
      outputParameters:
      - type: object
        mapping: $.
    - name: github-provision-scim-enterprise-user
      description: GitHub Provision Scim Enterprise User
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: scim-scim.provisionscimenterpriseuser
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: github-get-scim-provisioning-information-2
      description: GitHub Get Scim Provisioning Information for an Enterprise User
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: scim-scim.getscimprovisioninginformationforanenterpriseuser
      outputParameters:
      - type: object
        mapping: $.
    - name: github-set-scim-information-provisioned-2
      description: GitHub Set Scim Information for Provisioned Enterprise User
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: scim-scim.setsciminformationforprovisionedenterpriseuser
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: github-update-attribute-scim-enterprise-2
      description: GitHub Update an Attribute for Scim Enterprise User
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: scim-scim.updateanattributeforscimenterpriseuser
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: github-delete-scim-user-enterprise
      description: GitHub Delete Scim User from an Enterprise
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: scim-scim.deletescimuserfromanenterprise
      outputParameters:
      - type: object
        mapping: $.