Complete InfluxDB Cloud API — Security and access endpoints

naftiko: 1.0.0-alpha2
info:
  label: Complete InfluxDB Cloud API — Security and access endpoints
  description: 'Complete InfluxDB Cloud API — Security and access endpoints. 19 operations. Lead operation: List authorizations.
    Self-contained Naftiko capability covering one Influxdb business surface.'
  tags:
  - Influxdb
  - Security and access endpoints
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    INFLUXDB_API_KEY: INFLUXDB_API_KEY
capability:
  consumes:
  - type: http
    namespace: influxdb-security-and-access-endpoints
    baseUri: ''
    description: Complete InfluxDB Cloud API — Security and access endpoints business capability. Self-contained, no shared
      references.
    resources:
    - name: api-v2-authorizations
      path: /api/v2/authorizations
      operations:
      - name: getauthorizations
        method: GET
        description: List authorizations
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: userID
          in: query
          type: string
          description: A user ID.
        - name: user
          in: query
          type: string
          description: A user name.
        - name: orgID
          in: query
          type: string
          description: An organization ID. Only returns authorizations that belong to the specified [organization](https://docs.influxdata.com/influxdb/cloud/reference/glossary/#organ
        - name: org
          in: query
          type: string
          description: An organization name.
        - name: token
          in: query
          type: string
          description: An API [token](https://docs.influxdata.com/influxdb/cloud/reference/glossary/#token) value.
      - name: postauthorizations
        method: POST
        description: Create an authorization
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v2-authorizations-authID
      path: /api/v2/authorizations/{authID}
      operations:
      - name: deleteauthorizationsid
        method: DELETE
        description: Delete an authorization
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: authID
          in: path
          type: string
          description: An authorization ID. Specifies the authorization to delete.
          required: true
      - name: getauthorizationsid
        method: GET
        description: Retrieve an authorization
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: authID
          in: path
          type: string
          description: An authorization ID. Specifies the authorization to retrieve.
          required: true
      - name: patchauthorizationsid
        method: PATCH
        description: Update an API token to be active or inactive
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: authID
          in: path
          type: string
          description: An authorization ID. Specifies the authorization to update.
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v2-orgs
      path: /api/v2/orgs
      operations:
      - name: getorgs
        method: GET
        description: List organizations
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: org
          in: query
          type: string
          description: An organization name.
        - name: orgID
          in: query
          type: string
          description: An organization ID.
        - name: userID
          in: query
          type: string
          description: A user ID.
    - name: api-v2-orgs-orgID
      path: /api/v2/orgs/{orgID}
      operations:
      - name: getorgsid
        method: GET
        description: Retrieve an organization
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: orgID
          in: path
          type: string
          description: The ID of the organization to retrieve.
          required: true
    - name: api-v2-orgs-orgID-members
      path: /api/v2/orgs/{orgID}/members
      operations:
      - name: getorgsidmembers
        method: GET
        description: List all members of an organization
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: orgID
          in: path
          type: string
          description: The ID of the organization to retrieve users for.
          required: true
    - name: api-v2-orgs-orgID-members-userID
      path: /api/v2/orgs/{orgID}/members/{userID}
      operations:
      - name: deleteorgsidmembersid
        method: DELETE
        description: Remove a member from an organization
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: userID
          in: path
          type: string
          description: The ID of the user to remove.
          required: true
        - name: orgID
          in: path
          type: string
          description: The ID of the organization to remove a user from.
          required: true
    - name: api-v2-orgs-orgID-owners
      path: /api/v2/orgs/{orgID}/owners
      operations:
      - name: getorgsidowners
        method: GET
        description: List all owners of an organization
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: orgID
          in: path
          type: string
          description: The ID of the organization to list owners for.
          required: true
    - name: api-v2-orgs-orgID-owners-userID
      path: /api/v2/orgs/{orgID}/owners/{userID}
      operations:
      - name: deleteorgsidownersid
        method: DELETE
        description: Remove an owner from an organization
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: userID
          in: path
          type: string
          description: The ID of the user to remove.
          required: true
        - name: orgID
          in: path
          type: string
          description: The ID of the organization to remove an owner from.
          required: true
    - name: api-v2-orgs-orgID-secrets
      path: /api/v2/orgs/{orgID}/secrets
      operations:
      - name: getorgsidsecrets
        method: GET
        description: List all secret keys for an organization
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: orgID
          in: path
          type: string
          description: The organization ID.
          required: true
    - name: api-v2-orgs-orgID-secrets-delete
      path: /api/v2/orgs/{orgID}/secrets/delete
      operations:
      - name: postorgsidsecrets
        method: POST
        description: Delete secrets from an organization
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: orgID
          in: path
          type: string
          description: The organization ID.
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v2-orgs-orgID-secrets-secretID
      path: /api/v2/orgs/{orgID}/secrets/{secretID}
      operations:
      - name: deleteorgsidsecretsid
        method: DELETE
        description: Delete a secret from an organization
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: orgID
          in: path
          type: string
          description: The organization ID.
          required: true
        - name: secretID
          in: path
          type: string
          description: The secret ID.
          required: true
    - name: api-v2-signin
      path: /api/v2/signin
      operations:
      - name: postsignin
        method: POST
        description: Create a user session.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-v2-signout
      path: /api/v2/signout
      operations:
      - name: postsignout
        method: POST
        description: Expire a user session
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-v2-users
      path: /api/v2/users
      operations:
      - name: getusers
        method: GET
        description: List users
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: name
          in: query
          type: string
          description: A user name.
        - name: id
          in: query
          type: string
          description: A user id.
    - name: api-v2-users-userID-password
      path: /api/v2/users/{userID}/password
      operations:
      - name: postusersidpassword
        method: POST
        description: Update a password
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: userID
          in: path
          type: string
          description: The ID of the user to set the password for.
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: putusersidpassword
        method: PUT
        description: Update a password
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: userID
          in: path
          type: string
          description: The ID of the user to set the password for.
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    authentication:
      type: apikey
      key: Authorization
      value: '{{env.INFLUXDB_API_KEY}}'
      placement: header
  exposes:
  - type: rest
    namespace: influxdb-security-and-access-endpoints-rest
    port: 8080
    description: REST adapter for Complete InfluxDB Cloud API — Security and access endpoints. One Spectral-compliant resource
      per consumed operation, prefixed with /v1.
    resources:
    - path: /v1/api/v2/authorizations
      name: api-v2-authorizations
      description: REST surface for api-v2-authorizations.
      operations:
      - method: GET
        name: getauthorizations
        description: List authorizations
        call: influxdb-security-and-access-endpoints.getauthorizations
        with:
          userID: rest.userID
          user: rest.user
          orgID: rest.orgID
          org: rest.org
          token: rest.token
        outputParameters:
        - type: object
          mapping: $.
      - method: POST
        name: postauthorizations
        description: Create an authorization
        call: influxdb-security-and-access-endpoints.postauthorizations
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v2/authorizations/{authid}
      name: api-v2-authorizations-authid
      description: REST surface for api-v2-authorizations-authID.
      operations:
      - method: DELETE
        name: deleteauthorizationsid
        description: Delete an authorization
        call: influxdb-security-and-access-endpoints.deleteauthorizationsid
        with:
          authID: rest.authID
        outputParameters:
        - type: object
          mapping: $.
      - method: GET
        name: getauthorizationsid
        description: Retrieve an authorization
        call: influxdb-security-and-access-endpoints.getauthorizationsid
        with:
          authID: rest.authID
        outputParameters:
        - type: object
          mapping: $.
      - method: PATCH
        name: patchauthorizationsid
        description: Update an API token to be active or inactive
        call: influxdb-security-and-access-endpoints.patchauthorizationsid
        with:
          authID: rest.authID
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v2/orgs
      name: api-v2-orgs
      description: REST surface for api-v2-orgs.
      operations:
      - method: GET
        name: getorgs
        description: List organizations
        call: influxdb-security-and-access-endpoints.getorgs
        with:
          org: rest.org
          orgID: rest.orgID
          userID: rest.userID
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v2/orgs/{orgid}
      name: api-v2-orgs-orgid
      description: REST surface for api-v2-orgs-orgID.
      operations:
      - method: GET
        name: getorgsid
        description: Retrieve an organization
        call: influxdb-security-and-access-endpoints.getorgsid
        with:
          orgID: rest.orgID
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v2/orgs/{orgid}/members
      name: api-v2-orgs-orgid-members
      description: REST surface for api-v2-orgs-orgID-members.
      operations:
      - method: GET
        name: getorgsidmembers
        description: List all members of an organization
        call: influxdb-security-and-access-endpoints.getorgsidmembers
        with:
          orgID: rest.orgID
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v2/orgs/{orgid}/members/{userid}
      name: api-v2-orgs-orgid-members-userid
      description: REST surface for api-v2-orgs-orgID-members-userID.
      operations:
      - method: DELETE
        name: deleteorgsidmembersid
        description: Remove a member from an organization
        call: influxdb-security-and-access-endpoints.deleteorgsidmembersid
        with:
          userID: rest.userID
          orgID: rest.orgID
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v2/orgs/{orgid}/owners
      name: api-v2-orgs-orgid-owners
      description: REST surface for api-v2-orgs-orgID-owners.
      operations:
      - method: GET
        name: getorgsidowners
        description: List all owners of an organization
        call: influxdb-security-and-access-endpoints.getorgsidowners
        with:
          orgID: rest.orgID
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v2/orgs/{orgid}/owners/{userid}
      name: api-v2-orgs-orgid-owners-userid
      description: REST surface for api-v2-orgs-orgID-owners-userID.
      operations:
      - method: DELETE
        name: deleteorgsidownersid
        description: Remove an owner from an organization
        call: influxdb-security-and-access-endpoints.deleteorgsidownersid
        with:
          userID: rest.userID
          orgID: rest.orgID
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v2/orgs/{orgid}/secrets
      name: api-v2-orgs-orgid-secrets
      description: REST surface for api-v2-orgs-orgID-secrets.
      operations:
      - method: GET
        name: getorgsidsecrets
        description: List all secret keys for an organization
        call: influxdb-security-and-access-endpoints.getorgsidsecrets
        with:
          orgID: rest.orgID
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v2/orgs/{orgid}/secrets/delete
      name: api-v2-orgs-orgid-secrets-delete
      description: REST surface for api-v2-orgs-orgID-secrets-delete.
      operations:
      - method: POST
        name: postorgsidsecrets
        description: Delete secrets from an organization
        call: influxdb-security-and-access-endpoints.postorgsidsecrets
        with:
          orgID: rest.orgID
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v2/orgs/{orgid}/secrets/{secretid}
      name: api-v2-orgs-orgid-secrets-secretid
      description: REST surface for api-v2-orgs-orgID-secrets-secretID.
      operations:
      - method: DELETE
        name: deleteorgsidsecretsid
        description: Delete a secret from an organization
        call: influxdb-security-and-access-endpoints.deleteorgsidsecretsid
        with:
          orgID: rest.orgID
          secretID: rest.secretID
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v2/signin
      name: api-v2-signin
      description: REST surface for api-v2-signin.
      operations:
      - method: POST
        name: postsignin
        description: Create a user session.
        call: influxdb-security-and-access-endpoints.postsignin
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v2/signout
      name: api-v2-signout
      description: REST surface for api-v2-signout.
      operations:
      - method: POST
        name: postsignout
        description: Expire a user session
        call: influxdb-security-and-access-endpoints.postsignout
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v2/users
      name: api-v2-users
      description: REST surface for api-v2-users.
      operations:
      - method: GET
        name: getusers
        description: List users
        call: influxdb-security-and-access-endpoints.getusers
        with:
          name: rest.name
          id: rest.id
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v2/users/{userid}/password
      name: api-v2-users-userid-password
      description: REST surface for api-v2-users-userID-password.
      operations:
      - method: POST
        name: postusersidpassword
        description: Update a password
        call: influxdb-security-and-access-endpoints.postusersidpassword
        with:
          userID: rest.userID
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
      - method: PUT
        name: putusersidpassword
        description: Update a password
        call: influxdb-security-and-access-endpoints.putusersidpassword
        with:
          userID: rest.userID
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: influxdb-security-and-access-endpoints-mcp
    port: 9090
    transport: http
    description: MCP adapter for Complete InfluxDB Cloud API — Security and access endpoints. One tool per consumed operation,
      routed inline through this capability's consumes block.
    tools:
    - name: list-authorizations
      description: List authorizations
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: influxdb-security-and-access-endpoints.getauthorizations
      with:
        userID: tools.userID
        user: tools.user
        orgID: tools.orgID
        org: tools.org
        token: tools.token
      outputParameters:
      - type: object
        mapping: $.
    - name: create-authorization
      description: Create an authorization
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: influxdb-security-and-access-endpoints.postauthorizations
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: delete-authorization
      description: Delete an authorization
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: influxdb-security-and-access-endpoints.deleteauthorizationsid
      with:
        authID: tools.authID
      outputParameters:
      - type: object
        mapping: $.
    - name: retrieve-authorization
      description: Retrieve an authorization
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: influxdb-security-and-access-endpoints.getauthorizationsid
      with:
        authID: tools.authID
      outputParameters:
      - type: object
        mapping: $.
    - name: update-api-token-be-active
      description: Update an API token to be active or inactive
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: influxdb-security-and-access-endpoints.patchauthorizationsid
      with:
        authID: tools.authID
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: list-organizations
      description: List organizations
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: influxdb-security-and-access-endpoints.getorgs
      with:
        org: tools.org
        orgID: tools.orgID
        userID: tools.userID
      outputParameters:
      - type: object
        mapping: $.
    - name: retrieve-organization
      description: Retrieve an organization
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: influxdb-security-and-access-endpoints.getorgsid
      with:
        orgID: tools.orgID
      outputParameters:
      - type: object
        mapping: $.
    - name: list-all-members-organization
      description: List all members of an organization
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: influxdb-security-and-access-endpoints.getorgsidmembers
      with:
        orgID: tools.orgID
      outputParameters:
      - type: object
        mapping: $.
    - name: remove-member-organization
      description: Remove a member from an organization
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: influxdb-security-and-access-endpoints.deleteorgsidmembersid
      with:
        userID: tools.userID
        orgID: tools.orgID
      outputParameters:
      - type: object
        mapping: $.
    - name: list-all-owners-organization
      description: List all owners of an organization
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: influxdb-security-and-access-endpoints.getorgsidowners
      with:
        orgID: tools.orgID
      outputParameters:
      - type: object
        mapping: $.
    - name: remove-owner-organization
      description: Remove an owner from an organization
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: influxdb-security-and-access-endpoints.deleteorgsidownersid
      with:
        userID: tools.userID
        orgID: tools.orgID
      outputParameters:
      - type: object
        mapping: $.
    - name: list-all-secret-keys-organization
      description: List all secret keys for an organization
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: influxdb-security-and-access-endpoints.getorgsidsecrets
      with:
        orgID: tools.orgID
      outputParameters:
      - type: object
        mapping: $.
    - name: delete-secrets-organization
      description: Delete secrets from an organization
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: influxdb-security-and-access-endpoints.postorgsidsecrets
      with:
        orgID: tools.orgID
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: delete-secret-organization
      description: Delete a secret from an organization
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: influxdb-security-and-access-endpoints.deleteorgsidsecretsid
      with:
        orgID: tools.orgID
        secretID: tools.secretID
      outputParameters:
      - type: object
        mapping: $.
    - name: create-user-session
      description: Create a user session.
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: influxdb-security-and-access-endpoints.postsignin
      outputParameters:
      - type: object
        mapping: $.
    - name: expire-user-session
      description: Expire a user session
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: influxdb-security-and-access-endpoints.postsignout
      outputParameters:
      - type: object
        mapping: $.
    - name: list-users
      description: List users
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: influxdb-security-and-access-endpoints.getusers
      with:
        name: tools.name
        id: tools.id
      outputParameters:
      - type: object
        mapping: $.
    - name: update-password
      description: Update a password
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: influxdb-security-and-access-endpoints.postusersidpassword
      with:
        userID: tools.userID
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: update-password-2
      description: Update a password
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: influxdb-security-and-access-endpoints.putusersidpassword
      with:
        userID: tools.userID
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.