Okta API — Org

naftiko: 1.0.0-alpha2
info:
  label: Okta API — Org
  description: 'Okta API — Org. 17 operations. Lead operation: Okta Get org settings. Self-contained Naftiko capability covering
    one Okta business surface.'
  tags:
  - Okta
  - Org
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    OKTA_API_KEY: OKTA_API_KEY
capability:
  consumes:
  - type: http
    namespace: okta-org
    baseUri: https://your-subdomain.okta.com
    description: Okta API — Org business capability. Self-contained, no shared references.
    resources:
    - name: api-v1-org
      path: /api/v1/org
      operations:
      - name: getorgsettings
        method: GET
        description: Okta Get org settings
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: updateorgsetting
        method: PUT
        description: Okta Update Org setting
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: partialupdateorgsetting
        method: POST
        description: Okta Partial update Org setting
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v1-org-contacts
      path: /api/v1/org/contacts
      operations:
      - name: getorgcontacttypes
        method: GET
        description: Okta Get org contact types
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-v1-org-contacts-contactType
      path: /api/v1/org/contacts/{contactType}
      operations:
      - name: getorgcontactuser
        method: GET
        description: Okta Get org contact user
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: contactType
          in: path
          type: string
          required: true
      - name: updateorgcontactuser
        method: PUT
        description: Okta Update org contact user
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: contactType
          in: path
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v1-org-logo
      path: /api/v1/org/logo
      operations:
      - name: updateorglogo
        method: POST
        description: Okta Update org logo
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v1-org-preferences
      path: /api/v1/org/preferences
      operations:
      - name: getorgpreferences
        method: GET
        description: Okta Get org preferences
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-v1-org-preferences-hideEndUserFooter
      path: /api/v1/org/preferences/hideEndUserFooter
      operations:
      - name: hideoktauifooter
        method: POST
        description: Show Okta UI Footer
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-v1-org-preferences-showEndUserFooter
      path: /api/v1/org/preferences/showEndUserFooter
      operations:
      - name: showoktauifooter
        method: POST
        description: Show Okta UI Footer
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-v1-org-privacy-oktaCommunication
      path: /api/v1/org/privacy/oktaCommunication
      operations:
      - name: getoktacommunicationsettings
        method: GET
        description: Get Okta Communication Settings
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-v1-org-privacy-oktaCommunication-optIn
      path: /api/v1/org/privacy/oktaCommunication/optIn
      operations:
      - name: optinuserstooktacommunicationemails
        method: POST
        description: Opt in all users to Okta Communication emails
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-v1-org-privacy-oktaCommunication-optOut
      path: /api/v1/org/privacy/oktaCommunication/optOut
      operations:
      - name: optoutusersfromoktacommunicationemails
        method: POST
        description: Opt out all users from Okta Communication emails
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-v1-org-privacy-oktaSupport
      path: /api/v1/org/privacy/oktaSupport
      operations:
      - name: getorgoktasupportsettings
        method: GET
        description: Get Okta Support settings
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-v1-org-privacy-oktaSupport-extend
      path: /api/v1/org/privacy/oktaSupport/extend
      operations:
      - name: extendoktasupport
        method: POST
        description: Extend Okta Support
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-v1-org-privacy-oktaSupport-grant
      path: /api/v1/org/privacy/oktaSupport/grant
      operations:
      - name: grantoktasupport
        method: POST
        description: Grant Okta Support
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-v1-org-privacy-oktaSupport-revoke
      path: /api/v1/org/privacy/oktaSupport/revoke
      operations:
      - name: revokeoktasupport
        method: POST
        description: Extend Okta Support
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    authentication:
      type: apikey
      key: Authorization
      value: '{{env.OKTA_API_KEY}}'
      placement: header
  exposes:
  - type: rest
    namespace: okta-org-rest
    port: 8080
    description: REST adapter for Okta API — Org. One Spectral-compliant resource per consumed operation, prefixed with /v1.
    resources:
    - path: /v1/api/v1/org
      name: api-v1-org
      description: REST surface for api-v1-org.
      operations:
      - method: GET
        name: getorgsettings
        description: Okta Get org settings
        call: okta-org.getorgsettings
        outputParameters:
        - type: object
          mapping: $.
      - method: PUT
        name: updateorgsetting
        description: Okta Update Org setting
        call: okta-org.updateorgsetting
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
      - method: POST
        name: partialupdateorgsetting
        description: Okta Partial update Org setting
        call: okta-org.partialupdateorgsetting
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v1/org/contacts
      name: api-v1-org-contacts
      description: REST surface for api-v1-org-contacts.
      operations:
      - method: GET
        name: getorgcontacttypes
        description: Okta Get org contact types
        call: okta-org.getorgcontacttypes
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v1/org/contacts/{contacttype}
      name: api-v1-org-contacts-contacttype
      description: REST surface for api-v1-org-contacts-contactType.
      operations:
      - method: GET
        name: getorgcontactuser
        description: Okta Get org contact user
        call: okta-org.getorgcontactuser
        with:
          contactType: rest.contactType
        outputParameters:
        - type: object
          mapping: $.
      - method: PUT
        name: updateorgcontactuser
        description: Okta Update org contact user
        call: okta-org.updateorgcontactuser
        with:
          contactType: rest.contactType
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v1/org/logo
      name: api-v1-org-logo
      description: REST surface for api-v1-org-logo.
      operations:
      - method: POST
        name: updateorglogo
        description: Okta Update org logo
        call: okta-org.updateorglogo
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v1/org/preferences
      name: api-v1-org-preferences
      description: REST surface for api-v1-org-preferences.
      operations:
      - method: GET
        name: getorgpreferences
        description: Okta Get org preferences
        call: okta-org.getorgpreferences
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v1/org/preferences/hideenduserfooter
      name: api-v1-org-preferences-hideenduserfooter
      description: REST surface for api-v1-org-preferences-hideEndUserFooter.
      operations:
      - method: POST
        name: hideoktauifooter
        description: Show Okta UI Footer
        call: okta-org.hideoktauifooter
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v1/org/preferences/showenduserfooter
      name: api-v1-org-preferences-showenduserfooter
      description: REST surface for api-v1-org-preferences-showEndUserFooter.
      operations:
      - method: POST
        name: showoktauifooter
        description: Show Okta UI Footer
        call: okta-org.showoktauifooter
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v1/org/privacy/oktacommunication
      name: api-v1-org-privacy-oktacommunication
      description: REST surface for api-v1-org-privacy-oktaCommunication.
      operations:
      - method: GET
        name: getoktacommunicationsettings
        description: Get Okta Communication Settings
        call: okta-org.getoktacommunicationsettings
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v1/org/privacy/oktacommunication/optin
      name: api-v1-org-privacy-oktacommunication-optin
      description: REST surface for api-v1-org-privacy-oktaCommunication-optIn.
      operations:
      - method: POST
        name: optinuserstooktacommunicationemails
        description: Opt in all users to Okta Communication emails
        call: okta-org.optinuserstooktacommunicationemails
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v1/org/privacy/oktacommunication/optout
      name: api-v1-org-privacy-oktacommunication-optout
      description: REST surface for api-v1-org-privacy-oktaCommunication-optOut.
      operations:
      - method: POST
        name: optoutusersfromoktacommunicationemails
        description: Opt out all users from Okta Communication emails
        call: okta-org.optoutusersfromoktacommunicationemails
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v1/org/privacy/oktasupport
      name: api-v1-org-privacy-oktasupport
      description: REST surface for api-v1-org-privacy-oktaSupport.
      operations:
      - method: GET
        name: getorgoktasupportsettings
        description: Get Okta Support settings
        call: okta-org.getorgoktasupportsettings
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v1/org/privacy/oktasupport/extend
      name: api-v1-org-privacy-oktasupport-extend
      description: REST surface for api-v1-org-privacy-oktaSupport-extend.
      operations:
      - method: POST
        name: extendoktasupport
        description: Extend Okta Support
        call: okta-org.extendoktasupport
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v1/org/privacy/oktasupport/grant
      name: api-v1-org-privacy-oktasupport-grant
      description: REST surface for api-v1-org-privacy-oktaSupport-grant.
      operations:
      - method: POST
        name: grantoktasupport
        description: Grant Okta Support
        call: okta-org.grantoktasupport
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v1/org/privacy/oktasupport/revoke
      name: api-v1-org-privacy-oktasupport-revoke
      description: REST surface for api-v1-org-privacy-oktaSupport-revoke.
      operations:
      - method: POST
        name: revokeoktasupport
        description: Extend Okta Support
        call: okta-org.revokeoktasupport
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: okta-org-mcp
    port: 9090
    transport: http
    description: MCP adapter for Okta API — Org. One tool per consumed operation, routed inline through this capability's
      consumes block.
    tools:
    - name: okta-get-org-settings
      description: Okta Get org settings
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: okta-org.getorgsettings
      outputParameters:
      - type: object
        mapping: $.
    - name: okta-update-org-setting
      description: Okta Update Org setting
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: okta-org.updateorgsetting
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: okta-partial-update-org-setting
      description: Okta Partial update Org setting
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: okta-org.partialupdateorgsetting
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: okta-get-org-contact-types
      description: Okta Get org contact types
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: okta-org.getorgcontacttypes
      outputParameters:
      - type: object
        mapping: $.
    - name: okta-get-org-contact-user
      description: Okta Get org contact user
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: okta-org.getorgcontactuser
      with:
        contactType: tools.contactType
      outputParameters:
      - type: object
        mapping: $.
    - name: okta-update-org-contact-user
      description: Okta Update org contact user
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: okta-org.updateorgcontactuser
      with:
        contactType: tools.contactType
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: okta-update-org-logo
      description: Okta Update org logo
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: okta-org.updateorglogo
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: okta-get-org-preferences
      description: Okta Get org preferences
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: okta-org.getorgpreferences
      outputParameters:
      - type: object
        mapping: $.
    - name: show-okta-ui-footer
      description: Show Okta UI Footer
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: okta-org.hideoktauifooter
      outputParameters:
      - type: object
        mapping: $.
    - name: show-okta-ui-footer-2
      description: Show Okta UI Footer
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: okta-org.showoktauifooter
      outputParameters:
      - type: object
        mapping: $.
    - name: get-okta-communication-settings
      description: Get Okta Communication Settings
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: okta-org.getoktacommunicationsettings
      outputParameters:
      - type: object
        mapping: $.
    - name: opt-all-users-okta-communication
      description: Opt in all users to Okta Communication emails
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: okta-org.optinuserstooktacommunicationemails
      outputParameters:
      - type: object
        mapping: $.
    - name: opt-out-all-users-okta
      description: Opt out all users from Okta Communication emails
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: okta-org.optoutusersfromoktacommunicationemails
      outputParameters:
      - type: object
        mapping: $.
    - name: get-okta-support-settings
      description: Get Okta Support settings
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: okta-org.getorgoktasupportsettings
      outputParameters:
      - type: object
        mapping: $.
    - name: extend-okta-support
      description: Extend Okta Support
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: okta-org.extendoktasupport
      outputParameters:
      - type: object
        mapping: $.
    - name: grant-okta-support
      description: Grant Okta Support
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: okta-org.grantoktasupport
      outputParameters:
      - type: object
        mapping: $.
    - name: extend-okta-support-2
      description: Extend Okta Support
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: okta-org.revokeoktasupport
      outputParameters:
      - type: object
        mapping: $.