Kion · Capability

Kion Cloud Operations API

The Kion Public API provides programmatic access to manage cloud operations, governance, compliance, and financial management across AWS, Azure, GCP, and OCI. Kion is a self-hosted cloud operations platform that consolidates account provisioning, access management, compliance enforcement, and FinOps into a single interface. The API uses Bearer token authentication via Kion App API Keys and is accessible at the /api/v3/ path of your Kion instance.

Run with Naftiko KionAPI

What You Can Do

GET
Listaccounts — Kion List accounts
/account
POST
Createaccount — Kion Create an account
/account
GET
Getaccount — Kion Get an account
/account/{id}
PATCH
Updateaccount — Kion Update an account
/account/{id}
GET
Listprojects — Kion List projects
/project
POST
Createproject — Kion Create a project
/project
GET
Getproject — Kion Get a project
/project/{id}
PATCH
Updateproject — Kion Update a project
/project/{id}
DELETE
Deleteproject — Kion Delete a project
/project/{id}
GET
Listprojectnotes — Kion List project notes
/project/{id}/note
POST
Createprojectnote — Kion Create a project note
/project/{id}/note
GET
Listprojectenforcements — Kion List project enforcements
/project/{id}/enforcement
POST
Createprojectenforcement — Kion Create a project enforcement
/project/{id}/enforcement
GET
Listprojectcloudaccessroles — Kion List project cloud access roles
/project/{id}/cloud-access-role
POST
Createprojectcloudaccessrole — Kion Create a project cloud access role
/project/{id}/cloud-access-role
GET
Listprojectpermissionmappings — Kion List project permission mappings
/project/{id}/permission-mapping
POST
Createprojectpermissionmapping — Kion Create a project permission mapping
/project/{id}/permission-mapping
GET
Listous — Kion List organizational units
/ou
POST
Createou — Kion Create an organizational unit
/ou
GET
Getou — Kion Get an organizational unit
/ou/{id}
PATCH
Updateou — Kion Update an organizational unit
/ou/{id}
DELETE
Deleteou — Kion Delete an organizational unit
/ou/{id}
GET
Listoucloudaccessroles — Kion List OU cloud access roles
/ou/{id}/cloud-access-role
POST
Createoucloudaccessrole — Kion Create an OU cloud access role
/ou/{id}/cloud-access-role
GET
Listoupermissionmappings — Kion List OU permission mappings
/ou/{id}/permission-mapping
POST
Createoupermissionmapping — Kion Create an OU permission mapping
/ou/{id}/permission-mapping
GET
Listcloudrules — Kion List cloud rules
/cloud-rule
POST
Createcloudrule — Kion Create a cloud rule
/cloud-rule
GET
Getcloudrule — Kion Get a cloud rule
/cloud-rule/{id}
PATCH
Updatecloudrule — Kion Update a cloud rule
/cloud-rule/{id}
DELETE
Deletecloudrule — Kion Delete a cloud rule
/cloud-rule/{id}
GET
Listcompliancechecks — Kion List compliance checks
/compliance-check
POST
Createcompliancecheck — Kion Create a compliance check
/compliance-check
GET
Getcompliancecheck — Kion Get a compliance check
/compliance-check/{id}
PATCH
Updatecompliancecheck — Kion Update a compliance check
/compliance-check/{id}
DELETE
Deletecompliancecheck — Kion Delete a compliance check
/compliance-check/{id}
GET
Listcompliancestandards — Kion List compliance standards
/compliance-standard
POST
Createcompliancestandard — Kion Create a compliance standard
/compliance-standard
GET
Getcompliancestandard — Kion Get a compliance standard
/compliance-standard/{id}
PATCH
Updatecompliancestandard — Kion Update a compliance standard
/compliance-standard/{id}
DELETE
Deletecompliancestandard — Kion Delete a compliance standard
/compliance-standard/{id}
GET
Listfundingsources — Kion List funding sources
/funding-source
POST
Createfundingsource — Kion Create a funding source
/funding-source
GET
Getfundingsource — Kion Get a funding source
/funding-source/{id}
PATCH
Updatefundingsource — Kion Update a funding source
/funding-source/{id}
DELETE
Deletefundingsource — Kion Delete a funding source
/funding-source/{id}
GET
Listfundingsourcepermissionmappings — Kion List funding source permission mappings
/funding-source/{id}/permission-mapping
POST
Createfundingsourcepermissionmapping — Kion Create a funding source permission mapping
/funding-source/{id}/permission-mapping
GET
Listlabels — Kion List labels
/label
POST
Createlabel — Kion Create a label
/label
GET
Getlabel — Kion Get a label
/label/{id}
PATCH
Updatelabel — Kion Update a label
/label/{id}
DELETE
Deletelabel — Kion Delete a label
/label/{id}
GET
Listusers — Kion List users
/user
POST
Createuser — Kion Create a user
/user
GET
Getuser — Kion Get a user
/user/{id}
PATCH
Updateuser — Kion Update a user
/user/{id}
DELETE
Deleteuser — Kion Delete a user
/user/{id}
GET
Listusergroups — Kion List user groups
/user-group
POST
Createusergroup — Kion Create a user group
/user-group

MCP Tools

listaccounts

Kion List accounts

read-only idempotent
createaccount

Kion Create an account

getaccount

Kion Get an account

read-only idempotent
updateaccount

Kion Update an account

listprojects

Kion List projects

read-only idempotent
createproject

Kion Create a project

getproject

Kion Get a project

read-only idempotent
updateproject

Kion Update a project

deleteproject

Kion Delete a project

idempotent
listprojectnotes

Kion List project notes

read-only idempotent
createprojectnote

Kion Create a project note

listprojectenforcements

Kion List project enforcements

read-only idempotent
createprojectenforcement

Kion Create a project enforcement

listprojectcloudaccessroles

Kion List project cloud access roles

read-only idempotent
createprojectcloudaccessrole

Kion Create a project cloud access role

listprojectpermissionmappings

Kion List project permission mappings

read-only idempotent
createprojectpermissionmapping

Kion Create a project permission mapping

listous

Kion List organizational units

read-only idempotent
createou

Kion Create an organizational unit

getou

Kion Get an organizational unit

read-only idempotent
updateou

Kion Update an organizational unit

deleteou

Kion Delete an organizational unit

idempotent
listoucloudaccessroles

Kion List OU cloud access roles

read-only idempotent
createoucloudaccessrole

Kion Create an OU cloud access role

listoupermissionmappings

Kion List OU permission mappings

read-only idempotent
createoupermissionmapping

Kion Create an OU permission mapping

listcloudrules

Kion List cloud rules

read-only idempotent
createcloudrule

Kion Create a cloud rule

getcloudrule

Kion Get a cloud rule

read-only idempotent
updatecloudrule

Kion Update a cloud rule

deletecloudrule

Kion Delete a cloud rule

idempotent
listcompliancechecks

Kion List compliance checks

read-only idempotent
createcompliancecheck

Kion Create a compliance check

getcompliancecheck

Kion Get a compliance check

read-only idempotent
updatecompliancecheck

Kion Update a compliance check

deletecompliancecheck

Kion Delete a compliance check

idempotent
listcompliancestandards

Kion List compliance standards

read-only idempotent
createcompliancestandard

Kion Create a compliance standard

getcompliancestandard

Kion Get a compliance standard

read-only idempotent
updatecompliancestandard

Kion Update a compliance standard

deletecompliancestandard

Kion Delete a compliance standard

idempotent
listfundingsources

Kion List funding sources

read-only idempotent
createfundingsource

Kion Create a funding source

getfundingsource

Kion Get a funding source

read-only idempotent
updatefundingsource

Kion Update a funding source

deletefundingsource

Kion Delete a funding source

idempotent
listfundingsourcepermissionmappings

Kion List funding source permission mappings

read-only idempotent
createfundingsourcepermissionmapping

Kion Create a funding source permission mapping

listlabels

Kion List labels

read-only idempotent
createlabel

Kion Create a label

getlabel

Kion Get a label

read-only idempotent
updatelabel

Kion Update a label

deletelabel

Kion Delete a label

idempotent
listusers

Kion List users

read-only idempotent
createuser

Kion Create a user

getuser

Kion Get a user

read-only idempotent
updateuser

Kion Update a user

deleteuser

Kion Delete a user

idempotent
listusergroups

Kion List user groups

read-only idempotent
createusergroup

Kion Create a user group

Capability Spec

kion-capability.yaml Raw ↑
naftiko: 1.0.0-alpha2
info:
  label: Kion Cloud Operations API
  description: The Kion Public API provides programmatic access to manage cloud operations, governance, compliance, and financial
    management across AWS, Azure, GCP, and OCI. Kion is a self-hosted cloud operations platform that consolidates account
    provisioning, access management, compliance enforcement, and FinOps into a single interface. The API uses Bearer token
    authentication via Kion App API Keys and is accessible at the /api/v3/ path of your Kion instance.
  tags:
  - Kion
  - API
  created: '2026-05-06'
  modified: '2026-05-06'
capability:
  consumes:
  - type: http
    namespace: kion
    baseUri: https://your-kion-instance.example.com/api/v3
    description: Kion Cloud Operations API HTTP API.
    authentication:
      type: bearer
      token: '{{KION_TOKEN}}'
    resources:
    - name: account
      path: /account
      operations:
      - name: listaccounts
        method: GET
        description: Kion List accounts
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createaccount
        method: POST
        description: Kion Create an account
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: account-id
      path: /account/{id}
      operations:
      - name: getaccount
        method: GET
        description: Kion Get an account
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: updateaccount
        method: PATCH
        description: Kion Update an account
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: project
      path: /project
      operations:
      - name: listprojects
        method: GET
        description: Kion List projects
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createproject
        method: POST
        description: Kion Create a project
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: project-id
      path: /project/{id}
      operations:
      - name: getproject
        method: GET
        description: Kion Get a project
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: updateproject
        method: PATCH
        description: Kion Update a project
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: deleteproject
        method: DELETE
        description: Kion Delete a project
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: project-id-note
      path: /project/{id}/note
      operations:
      - name: listprojectnotes
        method: GET
        description: Kion List project notes
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createprojectnote
        method: POST
        description: Kion Create a project note
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: project-id-enforcement
      path: /project/{id}/enforcement
      operations:
      - name: listprojectenforcements
        method: GET
        description: Kion List project enforcements
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createprojectenforcement
        method: POST
        description: Kion Create a project enforcement
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: project-id-cloud-access-role
      path: /project/{id}/cloud-access-role
      operations:
      - name: listprojectcloudaccessroles
        method: GET
        description: Kion List project cloud access roles
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createprojectcloudaccessrole
        method: POST
        description: Kion Create a project cloud access role
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: project-id-permission-mapping
      path: /project/{id}/permission-mapping
      operations:
      - name: listprojectpermissionmappings
        method: GET
        description: Kion List project permission mappings
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createprojectpermissionmapping
        method: POST
        description: Kion Create a project permission mapping
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: ou
      path: /ou
      operations:
      - name: listous
        method: GET
        description: Kion List organizational units
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createou
        method: POST
        description: Kion Create an organizational unit
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: ou-id
      path: /ou/{id}
      operations:
      - name: getou
        method: GET
        description: Kion Get an organizational unit
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: updateou
        method: PATCH
        description: Kion Update an organizational unit
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: deleteou
        method: DELETE
        description: Kion Delete an organizational unit
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: ou-id-cloud-access-role
      path: /ou/{id}/cloud-access-role
      operations:
      - name: listoucloudaccessroles
        method: GET
        description: Kion List OU cloud access roles
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createoucloudaccessrole
        method: POST
        description: Kion Create an OU cloud access role
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: ou-id-permission-mapping
      path: /ou/{id}/permission-mapping
      operations:
      - name: listoupermissionmappings
        method: GET
        description: Kion List OU permission mappings
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createoupermissionmapping
        method: POST
        description: Kion Create an OU permission mapping
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: cloud-rule
      path: /cloud-rule
      operations:
      - name: listcloudrules
        method: GET
        description: Kion List cloud rules
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createcloudrule
        method: POST
        description: Kion Create a cloud rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: cloud-rule-id
      path: /cloud-rule/{id}
      operations:
      - name: getcloudrule
        method: GET
        description: Kion Get a cloud rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: updatecloudrule
        method: PATCH
        description: Kion Update a cloud rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: deletecloudrule
        method: DELETE
        description: Kion Delete a cloud rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: compliance-check
      path: /compliance-check
      operations:
      - name: listcompliancechecks
        method: GET
        description: Kion List compliance checks
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createcompliancecheck
        method: POST
        description: Kion Create a compliance check
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: compliance-check-id
      path: /compliance-check/{id}
      operations:
      - name: getcompliancecheck
        method: GET
        description: Kion Get a compliance check
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: updatecompliancecheck
        method: PATCH
        description: Kion Update a compliance check
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: deletecompliancecheck
        method: DELETE
        description: Kion Delete a compliance check
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: compliance-standard
      path: /compliance-standard
      operations:
      - name: listcompliancestandards
        method: GET
        description: Kion List compliance standards
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createcompliancestandard
        method: POST
        description: Kion Create a compliance standard
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: compliance-standard-id
      path: /compliance-standard/{id}
      operations:
      - name: getcompliancestandard
        method: GET
        description: Kion Get a compliance standard
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: updatecompliancestandard
        method: PATCH
        description: Kion Update a compliance standard
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: deletecompliancestandard
        method: DELETE
        description: Kion Delete a compliance standard
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: funding-source
      path: /funding-source
      operations:
      - name: listfundingsources
        method: GET
        description: Kion List funding sources
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createfundingsource
        method: POST
        description: Kion Create a funding source
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: funding-source-id
      path: /funding-source/{id}
      operations:
      - name: getfundingsource
        method: GET
        description: Kion Get a funding source
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: updatefundingsource
        method: PATCH
        description: Kion Update a funding source
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: deletefundingsource
        method: DELETE
        description: Kion Delete a funding source
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: funding-source-id-permission-mapping
      path: /funding-source/{id}/permission-mapping
      operations:
      - name: listfundingsourcepermissionmappings
        method: GET
        description: Kion List funding source permission mappings
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createfundingsourcepermissionmapping
        method: POST
        description: Kion Create a funding source permission mapping
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: label
      path: /label
      operations:
      - name: listlabels
        method: GET
        description: Kion List labels
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createlabel
        method: POST
        description: Kion Create a label
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: label-id
      path: /label/{id}
      operations:
      - name: getlabel
        method: GET
        description: Kion Get a label
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: updatelabel
        method: PATCH
        description: Kion Update a label
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: deletelabel
        method: DELETE
        description: Kion Delete a label
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: user
      path: /user
      operations:
      - name: listusers
        method: GET
        description: Kion List users
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createuser
        method: POST
        description: Kion Create a user
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: user-id
      path: /user/{id}
      operations:
      - name: getuser
        method: GET
        description: Kion Get a user
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: updateuser
        method: PATCH
        description: Kion Update a user
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: deleteuser
        method: DELETE
        description: Kion Delete a user
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: user-group
      path: /user-group
      operations:
      - name: listusergroups
        method: GET
        description: Kion List user groups
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createusergroup
        method: POST
        description: Kion Create a user group
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
  exposes:
  - type: rest
    port: 8080
    namespace: kion-rest
    description: REST adapter for Kion Cloud Operations API.
    resources:
    - path: /account
      name: listaccounts
      operations:
      - method: GET
        name: listaccounts
        description: Kion List accounts
        call: kion.listaccounts
        outputParameters:
        - type: object
          mapping: $.
    - path: /account
      name: createaccount
      operations:
      - method: POST
        name: createaccount
        description: Kion Create an account
        call: kion.createaccount
        outputParameters:
        - type: object
          mapping: $.
    - path: /account/{id}
      name: getaccount
      operations:
      - method: GET
        name: getaccount
        description: Kion Get an account
        call: kion.getaccount
        outputParameters:
        - type: object
          mapping: $.
    - path: /account/{id}
      name: updateaccount
      operations:
      - method: PATCH
        name: updateaccount
        description: Kion Update an account
        call: kion.updateaccount
        outputParameters:
        - type: object
          mapping: $.
    - path: /project
      name: listprojects
      operations:
      - method: GET
        name: listprojects
        description: Kion List projects
        call: kion.listprojects
        outputParameters:
        - type: object
          mapping: $.
    - path: /project
      name: createproject
      operations:
      - method: POST
        name: createproject
        description: Kion Create a project
        call: kion.createproject
        outputParameters:
        - type: object
          mapping: $.
    - path: /project/{id}
      name: getproject
      operations:
      - method: GET
        name: getproject
        description: Kion Get a project
        call: kion.getproject
        outputParameters:
        - type: object
          mapping: $.
    - path: /project/{id}
      name: updateproject
      operations:
      - method: PATCH
        name: updateproject
        description: Kion Update a project
        call: kion.updateproject
        outputParameters:
        - type: object
          mapping: $.
    - path: /project/{id}
      name: deleteproject
      operations:
      - method: DELETE
        name: deleteproject
        description: Kion Delete a project
        call: kion.deleteproject
        outputParameters:
        - type: object
          mapping: $.
    - path: /project/{id}/note
      name: listprojectnotes
      operations:
      - method: GET
        name: listprojectnotes
        description: Kion List project notes
        call: kion.listprojectnotes
        outputParameters:
        - type: object
          mapping: $.
    - path: /project/{id}/note
      name: createprojectnote
      operations:
      - method: POST
        name: createprojectnote
        description: Kion Create a project note
        call: kion.createprojectnote
        outputParameters:
        - type: object
          mapping: $.
    - path: /project/{id}/enforcement
      name: listprojectenforcements
      operations:
      - method: GET
        name: listprojectenforcements
        description: Kion List project enforcements
        call: kion.listprojectenforcements
        outputParameters:
        - type: object
          mapping: $.
    - path: /project/{id}/enforcement
      name: createprojectenforcement
      operations:
      - method: POST
        name: createprojectenforcement
        description: Kion Create a project enforcement
        call: kion.createprojectenforcement
        outputParameters:
        - type: object
          mapping: $.
    - path: /project/{id}/cloud-access-role
      name: listprojectcloudaccessroles
      operations:
      - method: GET
        name: listprojectcloudaccessroles
        description: Kion List project cloud access roles
        call: kion.listprojectcloudaccessroles
        outputParameters:
        - type: object
          mapping: $.
    - path: /project/{id}/cloud-access-role
      name: createprojectcloudaccessrole
      operations:
      - method: POST
        name: createprojectcloudaccessrole
        description: Kion Create a project cloud access role
        call: kion.createprojectcloudaccessrole
        outputParameters:
        - type: object
          mapping: $.
    - path: /project/{id}/permission-mapping
      name: listprojectpermissionmappings
      operations:
      - method: GET
        name: listprojectpermissionmappings
        description: Kion List project permission mappings
        call: kion.listprojectpermissionmappings
        outputParameters:
        - type: object
          mapping: $.
    - path: /project/{id}/permission-mapping
      name: createprojectpermissionmapping
      operations:
      - method: POST
        name: createprojectpermissionmapping
        description: Kion Create a project permission mapping
        call: kion.createprojectpermissionmapping
        outputParameters:
        - type: object
          mapping: $.
    - path: /ou
      name: listous
      operations:
      - method: GET
        name: listous
        description: Kion List organizational units
        call: kion.listous
        outputParameters:
        - type: object
          mapping: $.
    - path: /ou
      name: createou
      operations:
      - method: POST
        name: createou
        description: Kion Create an organizational unit
        call: kion.createou
        outputParameters:
        - type: object
          mapping: $.
    - path: /ou/{id}
      name: getou
      operations:
      - method: GET
        name: getou
        description: Kion Get an organizational unit
        call: kion.getou
        outputParameters:
        - type: object
          mapping: $.
    - path: /ou/{id}
      name: updateou
      operations:
      - method: PATCH
        name: updateou
        description: Kion Update an organizational unit
        call: kion.updateou
        outputParameters:
        - type: object
          mapping: $.
    - path: /ou/{id}
      name: deleteou
      operations:
      - method: DELETE
        name: deleteou
        description: Kion Delete an organizational unit
        call: kion.deleteou
        outputParameters:
        - type: object
          mapping: $.
    - path: /ou/{id}/cloud-access-role
      name: listoucloudaccessroles
      operations:
      - method: GET
        name: listoucloudaccessroles
        description: Kion List OU cloud access roles
        call: kion.listoucloudaccessroles
        outputParameters:
        - type: object
          mapping: $.
    - path: /ou/{id}/cloud-access-role
      name: createoucloudaccessrole
      operations:
      - method: POST
        name: createoucloudaccessrole
        description: Kion Create an OU cloud access role
        call: kion.createoucloudaccessrole
        outputParameters:
        - type: object
          mapping: $.
    - path: /ou/{id}/permission-mapping
      name: listoupermissionmappings
      operations:
      - method: GET
        name: listoupermissionmappings
        description: Kion List OU permission mappings
        call: kion.listoupermissionmappings
        outputParameters:
        - type: object
          mapping: $.
    - path: /ou/{id}/permission-mapping
      name: createoupermissionmapping
      operations:
      - method: POST
        name: createoupermissionmapping
        description: Kion Create an OU permission mapping
        call: kion.createoupermissionmapping
        outputParameters:
        - type: object
          mapping: $.
    - path: /cloud-rule
      name: listcloudrules
      operations:
      - method: GET
        name: listcloudrules
        description: Kion List cloud rules
        call: kion.listcloudrules
        outputParameters:
        - type: object
          mapping: $.
    - path: /cloud-rule
      name: createcloudrule
      operations:
      - method: POST
        name: createcloudrule
        description: Kion Create a cloud rule
        call: kion.createcloudrule
        outputParameters:
        - type: object
          mapping: $.
    - path: /cloud-rule/{id}
      name: getcloudrule
      operations:
      - method: GET
        name: getcloudrule
        description: Kion Get a cloud rule
        call: kion.getcloudrule
        outputParameters:
        - type: object
          mapping: $.
    - path: /cloud-rule/{id}
      name: updatecloudrule
      operations:
      - method: PATCH
        name: updatecloudrule
        description: Kion Update a cloud rule
        call: kion.updatecloudrule
        outputParameters:
        - type: object
          mapping: $.
    - path: /cloud-rule/{id}
      name: deletecloudrule
      operations:
      - method: DELETE
        name: deletecloudrule
        description: Kion Delete a cloud rule
        call: kion.deletecloudrule
        outputParameters:
        - type: object
          mapping: $.
    - path: /compliance-check
      name: listcompliancechecks
      operations:
      - method: GET
        name: listcompliancechecks
        description: Kion List compliance checks
        call: kion.listcompliancechecks
        outputParameters:
        - type: object
          mapping: $.
    - path: /compliance-check
      name: createcompliancecheck
      operations:
      - method: POST
        name: createcompliancecheck
        description: Kion Create a compliance check
        call: kion.createcompliancecheck
        outputParameters:
        - type: object
          mapping: $.
    - path: /compliance-check/{id}
      name: getcompliancecheck
      operations:
      - method: GET
        name: getcompliancecheck
        description: Kion Get a compliance check
        call: kion.getcompliancecheck
        outputParameters:
        - type: object
          mapping: $.
    - path: /compliance-check/{id}
      name: updatecompliancecheck
      operations:
      - method: PATCH
        name: updatecompliancecheck
        description: Kion Update a compliance check
        call: kion.updatecompliancecheck
        outputParameters:
        - type: object
          mapping: $.
    - path: /compliance-check/{id}
      name: deletecompliancecheck
      operations:
      - method: DELETE
        name: deletecompliancecheck
        description: Kion Delete a compliance check
        call: kion.deletecompliancecheck
        outputParameters:
        - type: object
          mapping: $.
    - path: /compliance-standard
      name: listcompliancestandards
      operations:
      - method: GET
        name: listcompliancestandards
        description: Kion List compliance standards
        call: kion.listcompliancestandards
        outputParameters:
        - type: object
          mapping: $.
    - path: /compliance-standard
      name: createcompliancestandard
      operations:
      - method: POST
        name: createcompliancestandard
        description: Kion Create a compliance standard
        call: kion.createcompliancestandard
        outputParameters:
        - type: object
          mapping: $.
    - path: /compliance-standard/{id}
      name: getcompliancestandard
      operations:
      - method: GET
        name: getcompliancestandard
        description: Kion Get a compliance standard
        call: kion.getcompliancestandard
        outputParameters:
        - type: object
          mapping: $.
    - path: /compliance-standard/{id}
      name: updatecompliancestandard
      operations:
      - method: PATCH
        name: updatecompliancestandard
        description: Kion Update a compliance standard
        call: kion.updatecompliancestandard
        outputParameters:
        - type: object
          mapping: $.
    - path: /compliance-standard/{id}
      name: deletecompliancestandard
      operations:
      - method: DELETE
        name: deletecompliancestandard
        description: Kion Delete a compliance standard
        call: kion.deletecompliancestandard
        outputParameters:
        - type: object
          mapping: $.
    - path: /funding-source
      name: listfundingsources
      operations:
      - method: GET
        name: listfundingsources
        description: Kion List funding sources
        call: kion.listfundingsources
        outputParameters:
        - type: object
          mapping: $.
    - path: /funding-source
      name: createfundingsource
      operations:
      - method: POST
        name: createfundingsource
        description: Kion Create a funding source
        call: kion.createfundingsource
        outputParameters:
        - type: object
          mapping: $.
    - path: /funding-source/{id}
      name: getfundingsource
      operations:
      - method: GET
        name: getfundingsource
        description: Kion Get a funding source
        call: kion.getfundingsource
        outputParameters:
        - type: object
          mapping: $.
    - path: /funding-source/{id}
      name: updatefundingsource
      operations:
      - method: PATCH
        name: updatefundingsource
        description: Kion Update a funding source
        call: kion.updatefundingsource
        outputParameters:
        - type: object
          mapping: $.
    - path: /funding-source/{id}
      name: deletefundingsource
      operations:
      - method: DELETE
        name: deletefundingsource
        description: Kion Delete a funding source
        call: kion.deletefundingsource
        outputParameters:
        - type: object
          mapping: $.
    - path: /funding-source/{id}/permission-mapping
      name: listfundingsourcepermissionmappings
      operations:
      - method: GET
        name: listfundingsourcepermissionmappings
        description: Kion List funding source permission mappings
        call: kion.listfundingsourcepermissionmappings
        outputParameters:
        - type: object
          mapping: $.
    - path: /funding-source/{id}/permission-mapping
      name: createfundingsourcepermissionmapping
      operations:
      - method: POST
        name: createfundingsourcepermissionmapping
        description: Kion Create a funding source permission mapping
        call: kion.createfundingsourcepermissionmapping
        outputParameters:
        - type: object
          mapping: $.
    - path: /label
      name: listlabels
      operations:
      - method: GET
        name: listlabels
        description: Kion List labels
        call: kion.listlabels
        outputParameters:
        - type: object
          mapping: $.
    - path: /label
      name: createlabel
      operations:
      - method: POST
        name: createlabel
        description: Kion Create a label
        call: kion.createlabel
        outputParameters:
        - type: object
          mapping: $.
    - path: /label/{id}
      name: getlabel
      operations:
      - method: GET
        name: getlabel
        description: Kion Get a label
        call: kion.getlabel
        outputParameters:
        - type: object
          mapping: $.
    - path: /label/{id}
      name: updatelabel
      operations:
      - method: PATCH
        name: updatelabel
        description: Kion Update a label
        call: kion.updatelabel
        outputParameters:
        - type: object
          mapping: $.
    - path: /label/{id}
      name: deletelabel
      operations:
      - method: DELETE
        name: deletelabel
        description: Kion Delete a label
        call: kion.deletelabel
        outputParameters:
        - type: object
          mapping: $.
    - path: /user
      name: listusers
      operations:
      - method: GET
        name: listusers
        description: Kion List users
        call: kion.listusers
        outputParameters:
        - type: object
          mapping: $.
    - path: /user
      name: createuser
      operations:
      - method: POST
        name: createuser
        description: Kion Create a user
        call: kion.createuser
        outputParameters:
        - type: object
          mapping: $.
    - path: /user/{id}
      name: getuser
      operations:
      - method: GET
        name: getuser
        description: Kion Get a user
        call: kion.getuser
        outputParameters:
        - type: object
          mapping: $.
    - path: /user/{id}
      name: updateuser
      operations:
      - method: PATCH
        name: updateuser
        description: Kion Update a user
        call: kion.updateuser
        outputParameters:
      

# --- truncated at 32 KB (48 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/kion/refs/heads/main/capabilities/kion-capability.yaml