Google Cloud Armor API — SecurityPolicies

naftiko: 1.0.0-alpha2
info:
  label: Google Cloud Armor API — SecurityPolicies
  description: 'Google Cloud Armor API — SecurityPolicies. 5 operations. Lead operation: Google Cloud Armor List security
    policies. Self-contained Naftiko capability covering one Google Cloud Armor business surface.'
  tags:
  - Google Cloud Armor
  - SecurityPolicies
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    GOOGLE_CLOUD_ARMOR_API_KEY: GOOGLE_CLOUD_ARMOR_API_KEY
capability:
  consumes:
  - type: http
    namespace: openapi-securitypolicies
    baseUri: https://compute.googleapis.com/compute/v1
    description: Google Cloud Armor API — SecurityPolicies business capability. Self-contained, no shared references.
    resources:
    - name: projects-project-global-securityPolicies
      path: /projects/{project}/global/securityPolicies
      operations:
      - name: listsecuritypolicies
        method: GET
        description: Google Cloud Armor List security policies
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: project
          in: path
          type: string
          required: true
      - name: createsecuritypolicy
        method: POST
        description: Google Cloud Armor Create a security policy
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: project
          in: path
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: projects-project-global-securityPolicies-securityPolicy
      path: /projects/{project}/global/securityPolicies/{securityPolicy}
      operations:
      - name: getsecuritypolicy
        method: GET
        description: Google Cloud Armor Get a security policy
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: project
          in: path
          type: string
          required: true
        - name: securityPolicy
          in: path
          type: string
          required: true
      - name: patchsecuritypolicy
        method: PATCH
        description: Google Cloud Armor Update a security policy
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: project
          in: path
          type: string
          required: true
        - name: securityPolicy
          in: path
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: deletesecuritypolicy
        method: DELETE
        description: Google Cloud Armor Delete a security policy
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: project
          in: path
          type: string
          required: true
        - name: securityPolicy
          in: path
          type: string
          required: true
    authentication:
      type: bearer
      token: '{{env.GOOGLE_CLOUD_ARMOR_API_KEY}}'
  exposes:
  - type: rest
    namespace: openapi-securitypolicies-rest
    port: 8080
    description: REST adapter for Google Cloud Armor API — SecurityPolicies. One Spectral-compliant resource per consumed
      operation, prefixed with /v1.
    resources:
    - path: /v1/projects/{project}/global/securitypolicies
      name: projects-project-global-securitypolicies
      description: REST surface for projects-project-global-securityPolicies.
      operations:
      - method: GET
        name: listsecuritypolicies
        description: Google Cloud Armor List security policies
        call: openapi-securitypolicies.listsecuritypolicies
        with:
          project: rest.project
        outputParameters:
        - type: object
          mapping: $.
      - method: POST
        name: createsecuritypolicy
        description: Google Cloud Armor Create a security policy
        call: openapi-securitypolicies.createsecuritypolicy
        with:
          project: rest.project
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/projects/{project}/global/securitypolicies/{securitypolicy}
      name: projects-project-global-securitypolicies-securitypolicy
      description: REST surface for projects-project-global-securityPolicies-securityPolicy.
      operations:
      - method: GET
        name: getsecuritypolicy
        description: Google Cloud Armor Get a security policy
        call: openapi-securitypolicies.getsecuritypolicy
        with:
          project: rest.project
          securityPolicy: rest.securityPolicy
        outputParameters:
        - type: object
          mapping: $.
      - method: PATCH
        name: patchsecuritypolicy
        description: Google Cloud Armor Update a security policy
        call: openapi-securitypolicies.patchsecuritypolicy
        with:
          project: rest.project
          securityPolicy: rest.securityPolicy
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
      - method: DELETE
        name: deletesecuritypolicy
        description: Google Cloud Armor Delete a security policy
        call: openapi-securitypolicies.deletesecuritypolicy
        with:
          project: rest.project
          securityPolicy: rest.securityPolicy
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: openapi-securitypolicies-mcp
    port: 9090
    transport: http
    description: MCP adapter for Google Cloud Armor API — SecurityPolicies. One tool per consumed operation, routed inline
      through this capability's consumes block.
    tools:
    - name: google-cloud-armor-list-security
      description: Google Cloud Armor List security policies
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: openapi-securitypolicies.listsecuritypolicies
      with:
        project: tools.project
      outputParameters:
      - type: object
        mapping: $.
    - name: google-cloud-armor-create-security
      description: Google Cloud Armor Create a security policy
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: openapi-securitypolicies.createsecuritypolicy
      with:
        project: tools.project
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: google-cloud-armor-get-security
      description: Google Cloud Armor Get a security policy
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: openapi-securitypolicies.getsecuritypolicy
      with:
        project: tools.project
        securityPolicy: tools.securityPolicy
      outputParameters:
      - type: object
        mapping: $.
    - name: google-cloud-armor-update-security
      description: Google Cloud Armor Update a security policy
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: openapi-securitypolicies.patchsecuritypolicy
      with:
        project: tools.project
        securityPolicy: tools.securityPolicy
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: google-cloud-armor-delete-security
      description: Google Cloud Armor Delete a security policy
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: openapi-securitypolicies.deletesecuritypolicy
      with:
        project: tools.project
        securityPolicy: tools.securityPolicy
      outputParameters:
      - type: object
        mapping: $.