Podman · Capability

supports a RESTful API for the Libpod library — secrets (compat)

supports a RESTful API for the Libpod library — secrets (compat). 4 operations. Lead operation: List secrets. Self-contained Naftiko capability covering one Podman business surface.

Run with Naftiko Podmansecrets (compat)

What You Can Do

GET
Secretlist — List secrets
/v1/secrets
POST
Secretcreate — Create a secret
/v1/secrets/create
DELETE
Secretdelete — Remove secret
/v1/secrets/{name}
GET
Secretinspect — Inspect secret
/v1/secrets/{name}

MCP Tools

list-secrets

List secrets

read-only idempotent
create-secret

Create a secret

remove-secret

Remove secret

idempotent
inspect-secret

Inspect secret

read-only idempotent

Capability Spec

podman-secrets-compat.yaml Raw ↑
naftiko: 1.0.0-alpha2
info:
  label: supports a RESTful API for the Libpod library — secrets (compat)
  description: 'supports a RESTful API for the Libpod library — secrets (compat). 4 operations. Lead operation: List secrets.
    Self-contained Naftiko capability covering one Podman business surface.'
  tags:
  - Podman
  - secrets (compat)
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    PODMAN_API_KEY: PODMAN_API_KEY
capability:
  consumes:
  - type: http
    namespace: podman-secrets-compat
    baseUri: http://podman.io
    description: supports a RESTful API for the Libpod library — secrets (compat) business capability. Self-contained, no
      shared references.
    resources:
    - name: secrets
      path: /secrets
      operations:
      - name: secretlist
        method: GET
        description: List secrets
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: filters
          in: query
          type: string
          description: 'JSON encoded value of the filters (a `map[string][]string`) to process on the secrets list. Currently
            available filters:'
    - name: secrets-create
      path: /secrets/create
      operations:
      - name: secretcreate
        method: POST
        description: Create a secret
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: create
          in: body
          type: string
          description: attributes for creating a secret
    - name: secrets-name
      path: /secrets/{name}
      operations:
      - name: secretdelete
        method: DELETE
        description: Remove secret
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: name
          in: path
          type: string
          description: the name or ID of the secret
          required: true
      - name: secretinspect
        method: GET
        description: Inspect secret
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: name
          in: path
          type: string
          description: the name or ID of the secret
          required: true
  exposes:
  - type: rest
    namespace: podman-secrets-compat-rest
    port: 8080
    description: REST adapter for supports a RESTful API for the Libpod library — secrets (compat). One Spectral-compliant
      resource per consumed operation, prefixed with /v1.
    resources:
    - path: /v1/secrets
      name: secrets
      description: REST surface for secrets.
      operations:
      - method: GET
        name: secretlist
        description: List secrets
        call: podman-secrets-compat.secretlist
        with:
          filters: rest.filters
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/secrets/create
      name: secrets-create
      description: REST surface for secrets-create.
      operations:
      - method: POST
        name: secretcreate
        description: Create a secret
        call: podman-secrets-compat.secretcreate
        with:
          create: rest.create
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/secrets/{name}
      name: secrets-name
      description: REST surface for secrets-name.
      operations:
      - method: DELETE
        name: secretdelete
        description: Remove secret
        call: podman-secrets-compat.secretdelete
        with:
          name: rest.name
        outputParameters:
        - type: object
          mapping: $.
      - method: GET
        name: secretinspect
        description: Inspect secret
        call: podman-secrets-compat.secretinspect
        with:
          name: rest.name
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: podman-secrets-compat-mcp
    port: 9090
    transport: http
    description: MCP adapter for supports a RESTful API for the Libpod library — secrets (compat). One tool per consumed operation,
      routed inline through this capability's consumes block.
    tools:
    - name: list-secrets
      description: List secrets
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: podman-secrets-compat.secretlist
      with:
        filters: tools.filters
      outputParameters:
      - type: object
        mapping: $.
    - name: create-secret
      description: Create a secret
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: podman-secrets-compat.secretcreate
      with:
        create: tools.create
      outputParameters:
      - type: object
        mapping: $.
    - name: remove-secret
      description: Remove secret
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: podman-secrets-compat.secretdelete
      with:
        name: tools.name
      outputParameters:
      - type: object
        mapping: $.
    - name: inspect-secret
      description: Inspect secret
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: podman-secrets-compat.secretinspect
      with:
        name: tools.name
      outputParameters:
      - type: object
        mapping: $.