Kong Agent Gateway Bridge

naftiko: "1.0.0-alpha2"

info:
  title: Kong Agent Gateway Bridge
  description: >-
    Registers Naftiko-built capabilities and agents with Kong Agent
    Gateway for agent-to-agent (A2A) governance — agent identity
    verification, real-time prompt-injection inspection, per-agent
    policy enforcement, per-agent cost allocation, and A2A
    observability across MCP tool invocations and A2A messages.
  tags:
    - Naftiko
    - Kong
    - Partnership
    - Agent-Gateway
    - A2A
    - AI-Connectivity
  created: '2026-05-15'
  modified: '2026-05-15'

binds:
  - namespace: kong-konnect
    description: Kong Konnect Platform API endpoint + token.
    keys:
      KONG_KONNECT_BASE: KONG_KONNECT_BASE
      KONG_KONNECT_TOKEN: KONG_KONNECT_TOKEN

capability:
  consumes:
    - namespace: kong
      type: http
      baseUri: '{{KONG_KONNECT_BASE}}'
      authentication:
        type: bearer
        token: '{{KONG_KONNECT_TOKEN}}'
      resources:
        - name: agents
          path: '/v1/agent-gateway/agents'
          operations:
            - name: list-agents
              method: GET
            - name: register-agent
              method: POST
        - name: agent
          path: '/v1/agent-gateway/agents/{{agent_id}}'
          operations:
            - name: get-agent
              method: GET
              inputParameters:
                - { name: agent_id, in: path, required: true }
            - name: update-agent
              method: PATCH
              inputParameters:
                - { name: agent_id, in: path, required: true }
            - name: deregister-agent
              method: DELETE
              inputParameters:
                - { name: agent_id, in: path, required: true }
        - name: a2a-policies
          path: '/v1/agent-gateway/policies'
          operations:
            - name: list-a2a-policies
              method: GET
            - name: create-a2a-policy
              method: POST
        - name: agent-cost-allocation
          path: '/v1/agent-gateway/agents/{{agent_id}}/cost'
          operations:
            - name: get-agent-cost
              method: GET
              inputParameters:
                - { name: agent_id, in: path, required: true }
                - { name: since, in: query, required: false }
        - name: a2a-observability
          path: '/v1/agent-gateway/agents/{{agent_id}}/messages'
          operations:
            - name: list-a2a-messages
              method: GET
              inputParameters:
                - { name: agent_id, in: path, required: true }
                - { name: since, in: query, required: false }

  exposes:
    - type: rest
      address: 0.0.0.0
      port: 8080
      namespace: kong-agent-gateway-bridge-rest
      description: REST surface for registering Naftiko capabilities with Kong Agent Gateway for A2A governance.
      resources:
        - name: agents
          path: '/agent-gateway/agents'
          operations:
            - name: list-agents
              method: GET
              call: kong.list-agents
            - name: register-agent
              method: POST
              call: kong.register-agent
        - name: agent
          path: '/agent-gateway/agents/{agent_id}'
          operations:
            - name: get-agent
              method: GET
              inputParameters:
                - { name: agent_id, in: path, type: string, required: true }
              call: kong.get-agent
            - name: update-agent
              method: PATCH
              inputParameters:
                - { name: agent_id, in: path, type: string, required: true }
              call: kong.update-agent
            - name: deregister-agent
              method: DELETE
              inputParameters:
                - { name: agent_id, in: path, type: string, required: true }
              call: kong.deregister-agent
        - name: a2a-policies
          path: '/agent-gateway/policies'
          operations:
            - name: list-a2a-policies
              method: GET
              call: kong.list-a2a-policies
            - name: create-a2a-policy
              method: POST
              call: kong.create-a2a-policy
        - name: agent-cost-allocation
          path: '/agent-gateway/agents/{agent_id}/cost'
          operations:
            - name: get-agent-cost
              method: GET
              inputParameters:
                - { name: agent_id, in: path, type: string, required: true }
                - { name: since, in: query, type: string, required: false }
              call: kong.get-agent-cost
        - name: a2a-observability
          path: '/agent-gateway/agents/{agent_id}/messages'
          operations:
            - name: list-a2a-messages
              method: GET
              inputParameters:
                - { name: agent_id, in: path, type: string, required: true }
                - { name: since, in: query, type: string, required: false }
              call: kong.list-a2a-messages

    - type: mcp
      address: 0.0.0.0
      port: 3010
      namespace: kong-agent-gateway-bridge-mcp
      description: MCP server for registering and governing Naftiko agents through Kong Agent Gateway.
      tools:
        - name: list-agents
          description: List agents registered with Kong Agent Gateway.
          hints: { readOnly: true }
          call: kong.list-agents
        - name: register-agent
          description: Register a new agent with Kong Agent Gateway (typically a Naftiko-built capability).
          hints: { destructiveHint: false }
          call: kong.register-agent
        - name: get-agent
          description: Get a single agent registered with Kong Agent Gateway.
          hints: { readOnly: true }
          inputParameters:
            - { name: agent_id, type: string, required: true }
          call: kong.get-agent
        - name: update-agent
          description: Update an agent's identity, policy bindings, or cost allocation rules in Kong Agent Gateway.
          hints: { destructiveHint: true }
          inputParameters:
            - { name: agent_id, type: string, required: true }
          call: kong.update-agent
        - name: deregister-agent
          description: Deregister an agent from Kong Agent Gateway.
          hints: { destructiveHint: true }
          inputParameters:
            - { name: agent_id, type: string, required: true }
          call: kong.deregister-agent
        - name: list-a2a-policies
          description: List Kong Agent Gateway A2A policies (identity, prompt-injection inspection, cost ceilings).
          hints: { readOnly: true }
          call: kong.list-a2a-policies
        - name: create-a2a-policy
          description: Create a new Kong Agent Gateway A2A policy.
          hints: { destructiveHint: false }
          call: kong.create-a2a-policy
        - name: get-agent-cost
          description: Get per-agent cost allocation rollup from Kong Agent Gateway.
          hints: { readOnly: true }
          inputParameters:
            - { name: agent_id, type: string, required: true }
            - { name: since, type: string, required: false }
          call: kong.get-agent-cost
        - name: list-a2a-messages
          description: List A2A messages observed by Kong Agent Gateway for an agent (audit / observability).
          hints: { readOnly: true }
          inputParameters:
            - { name: agent_id, type: string, required: true }
            - { name: since, type: string, required: false }
          call: kong.list-a2a-messages