Hetzner Cloud API — Firewall Actions

naftiko: 1.0.0-alpha2
info:
  label: Hetzner Cloud API — Firewall Actions
  description: 'Hetzner Cloud API — Firewall Actions. 7 operations. Lead operation: List Actions. Self-contained Naftiko capability
    covering one Hetzner business surface.'
  tags:
  - Hetzner
  - Firewall Actions
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    HETZNER_API_KEY: HETZNER_API_KEY
capability:
  consumes:
  - type: http
    namespace: hetzner-firewall-actions
    baseUri: https://api.hetzner.cloud/v1
    description: Hetzner Cloud API — Firewall Actions business capability. Self-contained, no shared references.
    resources:
    - name: firewalls-actions
      path: /firewalls/actions
      operations:
      - name: listfirewallsactions
        method: GET
        description: List Actions
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: query
          type: array
          description: Filter the actions by ID. May be used multiple times.
        - name: sort
          in: query
          type: array
          description: Sort actions by field and direction. May be used multiple times.
        - name: status
          in: query
          type: array
          description: Filter the actions by status. May be used multiple times.
        - name: page
          in: query
          type: integer
          description: Page number to return. For more information, see "[Pagination](#description/pagination)".
        - name: per_page
          in: query
          type: integer
          description: Maximum number of entries returned per page. For more information, see "[Pagination](#description/pagination)".
    - name: firewalls-actions-id
      path: /firewalls/actions/{id}
      operations:
      - name: getfirewallsaction
        method: GET
        description: Get an Action
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: integer
          description: ID of the Action.
          required: true
    - name: firewalls-id-actions
      path: /firewalls/{id}/actions
      operations:
      - name: listfirewallactions
        method: GET
        description: List Actions for a Firewall
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: integer
          description: ID of the Firewall.
          required: true
        - name: sort
          in: query
          type: array
          description: Sort actions by field and direction. May be used multiple times.
        - name: status
          in: query
          type: array
          description: Filter the actions by status. May be used multiple times.
        - name: page
          in: query
          type: integer
          description: Page number to return. For more information, see "[Pagination](#description/pagination)".
        - name: per_page
          in: query
          type: integer
          description: Maximum number of entries returned per page. For more information, see "[Pagination](#description/pagination)".
    - name: firewalls-id-actions-apply_to_resources
      path: /firewalls/{id}/actions/apply_to_resources
      operations:
      - name: applyfirewalltoresources
        method: POST
        description: Apply to Resources
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: integer
          description: ID of the Firewall.
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: firewalls-id-actions-remove_from_resources
      path: /firewalls/{id}/actions/remove_from_resources
      operations:
      - name: removefirewallfromresources
        method: POST
        description: Remove from Resources
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: integer
          description: ID of the Firewall.
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: firewalls-id-actions-set_rules
      path: /firewalls/{id}/actions/set_rules
      operations:
      - name: setfirewallrules
        method: POST
        description: Set Rules
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: integer
          description: ID of the Firewall.
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: firewalls-id-actions-action_id
      path: /firewalls/{id}/actions/{action_id}
      operations:
      - name: getfirewallaction
        method: GET
        description: Get an Action for a Firewall
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: integer
          description: ID of the Firewall.
          required: true
        - name: action_id
          in: path
          type: integer
          description: ID of the Action.
          required: true
    authentication:
      type: bearer
      token: '{{env.HETZNER_API_KEY}}'
  exposes:
  - type: rest
    namespace: hetzner-firewall-actions-rest
    port: 8080
    description: REST adapter for Hetzner Cloud API — Firewall Actions. One Spectral-compliant resource per consumed operation,
      prefixed with /v1.
    resources:
    - path: /v1/firewalls/actions
      name: firewalls-actions
      description: REST surface for firewalls-actions.
      operations:
      - method: GET
        name: listfirewallsactions
        description: List Actions
        call: hetzner-firewall-actions.listfirewallsactions
        with:
          id: rest.id
          sort: rest.sort
          status: rest.status
          page: rest.page
          per_page: rest.per_page
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/firewalls/actions/{id}
      name: firewalls-actions-id
      description: REST surface for firewalls-actions-id.
      operations:
      - method: GET
        name: getfirewallsaction
        description: Get an Action
        call: hetzner-firewall-actions.getfirewallsaction
        with:
          id: rest.id
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/firewalls/{id}/actions
      name: firewalls-id-actions
      description: REST surface for firewalls-id-actions.
      operations:
      - method: GET
        name: listfirewallactions
        description: List Actions for a Firewall
        call: hetzner-firewall-actions.listfirewallactions
        with:
          id: rest.id
          sort: rest.sort
          status: rest.status
          page: rest.page
          per_page: rest.per_page
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/firewalls/{id}/actions/apply-to-resources
      name: firewalls-id-actions-apply-to-resources
      description: REST surface for firewalls-id-actions-apply_to_resources.
      operations:
      - method: POST
        name: applyfirewalltoresources
        description: Apply to Resources
        call: hetzner-firewall-actions.applyfirewalltoresources
        with:
          id: rest.id
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/firewalls/{id}/actions/remove-from-resources
      name: firewalls-id-actions-remove-from-resources
      description: REST surface for firewalls-id-actions-remove_from_resources.
      operations:
      - method: POST
        name: removefirewallfromresources
        description: Remove from Resources
        call: hetzner-firewall-actions.removefirewallfromresources
        with:
          id: rest.id
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/firewalls/{id}/actions/set-rules
      name: firewalls-id-actions-set-rules
      description: REST surface for firewalls-id-actions-set_rules.
      operations:
      - method: POST
        name: setfirewallrules
        description: Set Rules
        call: hetzner-firewall-actions.setfirewallrules
        with:
          id: rest.id
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/firewalls/{id}/actions/{action-id}
      name: firewalls-id-actions-action-id
      description: REST surface for firewalls-id-actions-action_id.
      operations:
      - method: GET
        name: getfirewallaction
        description: Get an Action for a Firewall
        call: hetzner-firewall-actions.getfirewallaction
        with:
          id: rest.id
          action_id: rest.action_id
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: hetzner-firewall-actions-mcp
    port: 9090
    transport: http
    description: MCP adapter for Hetzner Cloud API — Firewall Actions. One tool per consumed operation, routed inline through
      this capability's consumes block.
    tools:
    - name: list-actions
      description: List Actions
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: hetzner-firewall-actions.listfirewallsactions
      with:
        id: tools.id
        sort: tools.sort
        status: tools.status
        page: tools.page
        per_page: tools.per_page
      outputParameters:
      - type: object
        mapping: $.
    - name: get-action
      description: Get an Action
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: hetzner-firewall-actions.getfirewallsaction
      with:
        id: tools.id
      outputParameters:
      - type: object
        mapping: $.
    - name: list-actions-firewall
      description: List Actions for a Firewall
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: hetzner-firewall-actions.listfirewallactions
      with:
        id: tools.id
        sort: tools.sort
        status: tools.status
        page: tools.page
        per_page: tools.per_page
      outputParameters:
      - type: object
        mapping: $.
    - name: apply-resources
      description: Apply to Resources
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: hetzner-firewall-actions.applyfirewalltoresources
      with:
        id: tools.id
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: remove-resources
      description: Remove from Resources
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: hetzner-firewall-actions.removefirewallfromresources
      with:
        id: tools.id
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: set-rules
      description: Set Rules
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: hetzner-firewall-actions.setfirewallrules
      with:
        id: tools.id
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: get-action-firewall
      description: Get an Action for a Firewall
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: hetzner-firewall-actions.getfirewallaction
      with:
        id: tools.id
        action_id: tools.action_id
      outputParameters:
      - type: object
        mapping: $.