Lithic Developer API — Tokenization

naftiko: 1.0.0-alpha2
info:
  label: Lithic Developer API — Tokenization
  description: 'Lithic Developer API — Tokenization. 13 operations. Lead operation: List digital card art. Self-contained
    Naftiko capability covering one Lithic business surface.'
  tags:
  - Lithic
  - Tokenization
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    LITHIC_API_KEY: LITHIC_API_KEY
capability:
  consumes:
  - type: http
    namespace: lithic-tokenization
    baseUri: https://sandbox.lithic.com
    description: Lithic Developer API — Tokenization business capability. Self-contained, no shared references.
    resources:
    - name: v1-digital_card_art
      path: /v1/digital_card_art
      operations:
      - name: getdigitalcardart
        method: GET
        description: List digital card art
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: v1-digital_card_art-digital_card_art_token
      path: /v1/digital_card_art/{digital_card_art_token}
      operations:
      - name: getdigitalcardartbytoken
        method: GET
        description: Get digital card art by token
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: digital_card_art_token
          in: path
          type: string
          description: Specifies the digital card art to be displayed in the user’s digital wallet after tokenization. This
            artwork must be approved by Mastercard and configured by Li
          required: true
    - name: v1-simulate-tokenizations
      path: /v1/simulate/tokenizations
      operations:
      - name: postsimulatetokenizations
        method: POST
        description: Simulate a card's tokenization
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: v1-tokenization_decisioning-secret
      path: /v1/tokenization_decisioning/secret
      operations:
      - name: gettokenizationdecisioningsecret
        method: GET
        description: Retrieve the Tokenization Decisioning HMAC secret key
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: v1-tokenization_decisioning-secret-rotate
      path: /v1/tokenization_decisioning/secret/rotate
      operations:
      - name: rotatetokenizationdecisioningsecret
        method: POST
        description: Rotate the Tokenization Decisioning HMAC secret key
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: v1-tokenizations
      path: /v1/tokenizations
      operations:
      - name: gettokenizations
        method: GET
        description: Get a card's tokenizations
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: account_token
          in: query
          type: string
          description: Filters for tokenizations associated with a specific account.
        - name: begin
          in: query
          type: string
          description: Filter for tokenizations created after this date.
        - name: card_token
          in: query
          type: string
          description: Filters for tokenizations associated with a specific card.
        - name: end
          in: query
          type: string
          description: Filter for tokenizations created before this date.
        - name: tokenization_channel
          in: query
          type: string
          description: Filter for tokenizations by tokenization channel. If this is not specified, only DIGITAL_WALLET tokenizations
            will be returned.
    - name: v1-tokenizations-tokenization_token
      path: /v1/tokenizations/{tokenization_token}
      operations:
      - name: gettokenization
        method: GET
        description: Get a single card tokenization
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: tokenization_token
          in: path
          type: string
          description: Tokenization token
          required: true
    - name: v1-tokenizations-tokenization_token-activate
      path: /v1/tokenizations/{tokenization_token}/activate
      operations:
      - name: activatetokenization
        method: POST
        description: Activate a card tokenization
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: tokenization_token
          in: path
          type: string
          description: Tokenization token
          required: true
    - name: v1-tokenizations-tokenization_token-deactivate
      path: /v1/tokenizations/{tokenization_token}/deactivate
      operations:
      - name: deactivatetokenization
        method: POST
        description: Deactivate a card tokenization
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: tokenization_token
          in: path
          type: string
          description: Tokenization token
          required: true
    - name: v1-tokenizations-tokenization_token-pause
      path: /v1/tokenizations/{tokenization_token}/pause
      operations:
      - name: pausetokenization
        method: POST
        description: Pause a card tokenization
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: tokenization_token
          in: path
          type: string
          description: Tokenization token
          required: true
    - name: v1-tokenizations-tokenization_token-resend_activation_code
      path: /v1/tokenizations/{tokenization_token}/resend_activation_code
      operations:
      - name: resendactivationcodefortokenization
        method: POST
        description: Resend activation code for a card tokenization
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: tokenization_token
          in: path
          type: string
          description: Tokenization token
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
    - name: v1-tokenizations-tokenization_token-unpause
      path: /v1/tokenizations/{tokenization_token}/unpause
      operations:
      - name: unpausetokenization
        method: POST
        description: Unpause a card tokenization
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: tokenization_token
          in: path
          type: string
          description: Tokenization token
          required: true
    - name: v1-tokenizations-tokenization_token-update_digital_card_art
      path: /v1/tokenizations/{tokenization_token}/update_digital_card_art
      operations:
      - name: updatedigitalcardartfortokenization
        method: POST
        description: Update digital card art for a card tokenization
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: tokenization_token
          in: path
          type: string
          description: Tokenization token
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
    authentication:
      type: apikey
      key: Authorization
      value: '{{env.LITHIC_API_KEY}}'
      placement: header
  exposes:
  - type: rest
    namespace: lithic-tokenization-rest
    port: 8080
    description: REST adapter for Lithic Developer API — Tokenization. One Spectral-compliant resource per consumed operation,
      prefixed with /v1.
    resources:
    - path: /v1/v1/digital-card-art
      name: v1-digital-card-art
      description: REST surface for v1-digital_card_art.
      operations:
      - method: GET
        name: getdigitalcardart
        description: List digital card art
        call: lithic-tokenization.getdigitalcardart
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/v1/digital-card-art/{digital-card-art-token}
      name: v1-digital-card-art-digital-card-art-token
      description: REST surface for v1-digital_card_art-digital_card_art_token.
      operations:
      - method: GET
        name: getdigitalcardartbytoken
        description: Get digital card art by token
        call: lithic-tokenization.getdigitalcardartbytoken
        with:
          digital_card_art_token: rest.digital_card_art_token
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/v1/simulate/tokenizations
      name: v1-simulate-tokenizations
      description: REST surface for v1-simulate-tokenizations.
      operations:
      - method: POST
        name: postsimulatetokenizations
        description: Simulate a card's tokenization
        call: lithic-tokenization.postsimulatetokenizations
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/v1/tokenization-decisioning/secret
      name: v1-tokenization-decisioning-secret
      description: REST surface for v1-tokenization_decisioning-secret.
      operations:
      - method: GET
        name: gettokenizationdecisioningsecret
        description: Retrieve the Tokenization Decisioning HMAC secret key
        call: lithic-tokenization.gettokenizationdecisioningsecret
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/v1/tokenization-decisioning/secret/rotate
      name: v1-tokenization-decisioning-secret-rotate
      description: REST surface for v1-tokenization_decisioning-secret-rotate.
      operations:
      - method: POST
        name: rotatetokenizationdecisioningsecret
        description: Rotate the Tokenization Decisioning HMAC secret key
        call: lithic-tokenization.rotatetokenizationdecisioningsecret
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/v1/tokenizations
      name: v1-tokenizations
      description: REST surface for v1-tokenizations.
      operations:
      - method: GET
        name: gettokenizations
        description: Get a card's tokenizations
        call: lithic-tokenization.gettokenizations
        with:
          account_token: rest.account_token
          begin: rest.begin
          card_token: rest.card_token
          end: rest.end
          tokenization_channel: rest.tokenization_channel
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/v1/tokenizations/{tokenization-token}
      name: v1-tokenizations-tokenization-token
      description: REST surface for v1-tokenizations-tokenization_token.
      operations:
      - method: GET
        name: gettokenization
        description: Get a single card tokenization
        call: lithic-tokenization.gettokenization
        with:
          tokenization_token: rest.tokenization_token
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/v1/tokenizations/{tokenization-token}/activate
      name: v1-tokenizations-tokenization-token-activate
      description: REST surface for v1-tokenizations-tokenization_token-activate.
      operations:
      - method: POST
        name: activatetokenization
        description: Activate a card tokenization
        call: lithic-tokenization.activatetokenization
        with:
          tokenization_token: rest.tokenization_token
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/v1/tokenizations/{tokenization-token}/deactivate
      name: v1-tokenizations-tokenization-token-deactivate
      description: REST surface for v1-tokenizations-tokenization_token-deactivate.
      operations:
      - method: POST
        name: deactivatetokenization
        description: Deactivate a card tokenization
        call: lithic-tokenization.deactivatetokenization
        with:
          tokenization_token: rest.tokenization_token
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/v1/tokenizations/{tokenization-token}/pause
      name: v1-tokenizations-tokenization-token-pause
      description: REST surface for v1-tokenizations-tokenization_token-pause.
      operations:
      - method: POST
        name: pausetokenization
        description: Pause a card tokenization
        call: lithic-tokenization.pausetokenization
        with:
          tokenization_token: rest.tokenization_token
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/v1/tokenizations/{tokenization-token}/resend-activation-code
      name: v1-tokenizations-tokenization-token-resend-activation-code
      description: REST surface for v1-tokenizations-tokenization_token-resend_activation_code.
      operations:
      - method: POST
        name: resendactivationcodefortokenization
        description: Resend activation code for a card tokenization
        call: lithic-tokenization.resendactivationcodefortokenization
        with:
          tokenization_token: rest.tokenization_token
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/v1/tokenizations/{tokenization-token}/unpause
      name: v1-tokenizations-tokenization-token-unpause
      description: REST surface for v1-tokenizations-tokenization_token-unpause.
      operations:
      - method: POST
        name: unpausetokenization
        description: Unpause a card tokenization
        call: lithic-tokenization.unpausetokenization
        with:
          tokenization_token: rest.tokenization_token
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/v1/tokenizations/{tokenization-token}/update-digital-card-art
      name: v1-tokenizations-tokenization-token-update-digital-card-art
      description: REST surface for v1-tokenizations-tokenization_token-update_digital_card_art.
      operations:
      - method: POST
        name: updatedigitalcardartfortokenization
        description: Update digital card art for a card tokenization
        call: lithic-tokenization.updatedigitalcardartfortokenization
        with:
          tokenization_token: rest.tokenization_token
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: lithic-tokenization-mcp
    port: 9090
    transport: http
    description: MCP adapter for Lithic Developer API — Tokenization. One tool per consumed operation, routed inline through
      this capability's consumes block.
    tools:
    - name: list-digital-card-art
      description: List digital card art
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: lithic-tokenization.getdigitalcardart
      outputParameters:
      - type: object
        mapping: $.
    - name: get-digital-card-art-token
      description: Get digital card art by token
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: lithic-tokenization.getdigitalcardartbytoken
      with:
        digital_card_art_token: tools.digital_card_art_token
      outputParameters:
      - type: object
        mapping: $.
    - name: simulate-card-s-tokenization
      description: Simulate a card's tokenization
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: lithic-tokenization.postsimulatetokenizations
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: retrieve-tokenization-decisioning-hmac-secret
      description: Retrieve the Tokenization Decisioning HMAC secret key
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: lithic-tokenization.gettokenizationdecisioningsecret
      outputParameters:
      - type: object
        mapping: $.
    - name: rotate-tokenization-decisioning-hmac-secret
      description: Rotate the Tokenization Decisioning HMAC secret key
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: lithic-tokenization.rotatetokenizationdecisioningsecret
      outputParameters:
      - type: object
        mapping: $.
    - name: get-card-s-tokenizations
      description: Get a card's tokenizations
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: lithic-tokenization.gettokenizations
      with:
        account_token: tools.account_token
        begin: tools.begin
        card_token: tools.card_token
        end: tools.end
        tokenization_channel: tools.tokenization_channel
      outputParameters:
      - type: object
        mapping: $.
    - name: get-single-card-tokenization
      description: Get a single card tokenization
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: lithic-tokenization.gettokenization
      with:
        tokenization_token: tools.tokenization_token
      outputParameters:
      - type: object
        mapping: $.
    - name: activate-card-tokenization
      description: Activate a card tokenization
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: lithic-tokenization.activatetokenization
      with:
        tokenization_token: tools.tokenization_token
      outputParameters:
      - type: object
        mapping: $.
    - name: deactivate-card-tokenization
      description: Deactivate a card tokenization
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: lithic-tokenization.deactivatetokenization
      with:
        tokenization_token: tools.tokenization_token
      outputParameters:
      - type: object
        mapping: $.
    - name: pause-card-tokenization
      description: Pause a card tokenization
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: lithic-tokenization.pausetokenization
      with:
        tokenization_token: tools.tokenization_token
      outputParameters:
      - type: object
        mapping: $.
    - name: resend-activation-code-card-tokenization
      description: Resend activation code for a card tokenization
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: lithic-tokenization.resendactivationcodefortokenization
      with:
        tokenization_token: tools.tokenization_token
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: unpause-card-tokenization
      description: Unpause a card tokenization
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: lithic-tokenization.unpausetokenization
      with:
        tokenization_token: tools.tokenization_token
      outputParameters:
      - type: object
        mapping: $.
    - name: update-digital-card-art-card
      description: Update digital card art for a card tokenization
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: lithic-tokenization.updatedigitalcardartfortokenization
      with:
        tokenization_token: tools.tokenization_token
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.