McAfee (Trellix) · Capability

McAfee ePO API — Systems

McAfee ePO API — Systems. 4 operations. Lead operation: McAfee Apply a tag to systems. Self-contained Naftiko capability covering one Mcafee business surface.

Run with Naftiko McafeeSystems

What You Can Do

POST
Systemapplytag — McAfee Apply a tag to systems
/v1/system-applytag
POST
Systemcleartag — McAfee Remove a tag from systems
/v1/system-cleartag
GET
Systemfind — McAfee Search for systems
/v1/system-find
GET
Systemfindtag — McAfee Find systems by tag
/v1/system-findtag

MCP Tools

mcafee-apply-tag-systems

McAfee Apply a tag to systems

mcafee-remove-tag-systems

McAfee Remove a tag from systems

mcafee-search-systems

McAfee Search for systems

read-only idempotent
mcafee-find-systems-tag

McAfee Find systems by tag

read-only idempotent

Capability Spec

epo-systems.yaml Raw ↑
naftiko: 1.0.0-alpha2
info:
  label: McAfee ePO API — Systems
  description: 'McAfee ePO API — Systems. 4 operations. Lead operation: McAfee Apply a tag to systems. Self-contained Naftiko
    capability covering one Mcafee business surface.'
  tags:
  - Mcafee
  - Systems
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    MCAFEE_API_KEY: MCAFEE_API_KEY
capability:
  consumes:
  - type: http
    namespace: epo-systems
    baseUri: https://{epo-server}:8443/remote
    description: McAfee ePO API — Systems business capability. Self-contained, no shared references.
    resources:
    - name: system.applyTag
      path: /system.applyTag
      operations:
      - name: systemapplytag
        method: POST
        description: McAfee Apply a tag to systems
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: names
          in: query
          type: string
          description: Comma-separated list of system names or IDs
          required: true
        - name: tagName
          in: query
          type: string
          description: Name of the tag to apply
          required: true
    - name: system.clearTag
      path: /system.clearTag
      operations:
      - name: systemcleartag
        method: POST
        description: McAfee Remove a tag from systems
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: names
          in: query
          type: string
          description: Comma-separated list of system names or IDs
          required: true
        - name: tagName
          in: query
          type: string
          description: Name of the tag to remove
          required: true
    - name: system.find
      path: /system.find
      operations:
      - name: systemfind
        method: GET
        description: McAfee Search for systems
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: searchText
          in: query
          type: string
          description: Search string to match against system names, IP addresses, or other properties
          required: true
    - name: system.findTag
      path: /system.findTag
      operations:
      - name: systemfindtag
        method: GET
        description: McAfee Find systems by tag
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: tagName
          in: query
          type: string
          description: Name of the tag to search for
          required: true
    authentication:
      type: basic
      username: '{{env.MCAFEE_USER}}'
      password: '{{env.MCAFEE_PASS}}'
  exposes:
  - type: rest
    namespace: epo-systems-rest
    port: 8080
    description: REST adapter for McAfee ePO API — Systems. One Spectral-compliant resource per consumed operation, prefixed
      with /v1.
    resources:
    - path: /v1/system-applytag
      name: system-applytag
      description: REST surface for system.applyTag.
      operations:
      - method: POST
        name: systemapplytag
        description: McAfee Apply a tag to systems
        call: epo-systems.systemapplytag
        with:
          names: rest.names
          tagName: rest.tagName
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/system-cleartag
      name: system-cleartag
      description: REST surface for system.clearTag.
      operations:
      - method: POST
        name: systemcleartag
        description: McAfee Remove a tag from systems
        call: epo-systems.systemcleartag
        with:
          names: rest.names
          tagName: rest.tagName
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/system-find
      name: system-find
      description: REST surface for system.find.
      operations:
      - method: GET
        name: systemfind
        description: McAfee Search for systems
        call: epo-systems.systemfind
        with:
          searchText: rest.searchText
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/system-findtag
      name: system-findtag
      description: REST surface for system.findTag.
      operations:
      - method: GET
        name: systemfindtag
        description: McAfee Find systems by tag
        call: epo-systems.systemfindtag
        with:
          tagName: rest.tagName
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: epo-systems-mcp
    port: 9090
    transport: http
    description: MCP adapter for McAfee ePO API — Systems. One tool per consumed operation, routed inline through this capability's
      consumes block.
    tools:
    - name: mcafee-apply-tag-systems
      description: McAfee Apply a tag to systems
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: epo-systems.systemapplytag
      with:
        names: tools.names
        tagName: tools.tagName
      outputParameters:
      - type: object
        mapping: $.
    - name: mcafee-remove-tag-systems
      description: McAfee Remove a tag from systems
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: epo-systems.systemcleartag
      with:
        names: tools.names
        tagName: tools.tagName
      outputParameters:
      - type: object
        mapping: $.
    - name: mcafee-search-systems
      description: McAfee Search for systems
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: epo-systems.systemfind
      with:
        searchText: tools.searchText
      outputParameters:
      - type: object
        mapping: $.
    - name: mcafee-find-systems-tag
      description: McAfee Find systems by tag
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: epo-systems.systemfindtag
      with:
        tagName: tools.tagName
      outputParameters:
      - type: object
        mapping: $.