Prefect Cloud API — Workspace User Access

naftiko: 1.0.0-alpha2
info:
  label: Prefect Cloud API — Workspace User Access
  description: 'Prefect Cloud API — Workspace User Access. 4 operations. Lead operation: Upsert Workspace User Access. Self-contained
    Naftiko capability covering one Prefect business surface.'
  tags:
  - Prefect
  - Workspace User Access
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    PREFECT_API_KEY: PREFECT_API_KEY
capability:
  consumes:
  - type: http
    namespace: prefect-workspace-user-access
    baseUri: ''
    description: Prefect Cloud API — Workspace User Access business capability. Self-contained, no shared references.
    resources:
    - name: api-accounts-account_id-workspaces-workspace_id-user_access
      path: /api/accounts/{account_id}/workspaces/{workspace_id}/user_access/
      operations:
      - name: upsertworkspaceuseraccessapiaccountsaccountidworkspacesworkspaceiduseraccesspost
        method: POST
        description: Upsert Workspace User Access
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: account_id
          in: path
          type: string
          required: true
        - name: workspace_id
          in: path
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-accounts-account_id-workspaces-workspace_id-user_access-filter
      path: /api/accounts/{account_id}/workspaces/{workspace_id}/user_access/filter
      operations:
      - name: readworkspaceuseraccessesapiaccountsaccountidworkspacesworkspaceiduseraccessfilterpost
        method: POST
        description: Read Workspace User Accesses
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: account_id
          in: path
          type: string
          required: true
        - name: workspace_id
          in: path
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
    - name: api-accounts-account_id-workspaces-workspace_id-user_access-id
      path: /api/accounts/{account_id}/workspaces/{workspace_id}/user_access/{id}
      operations:
      - name: readworkspaceuseraccessapiaccountsaccountidworkspacesworkspaceiduseraccessidget
        method: GET
        description: Read Workspace User Access
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: string
          required: true
        - name: account_id
          in: path
          type: string
          required: true
        - name: workspace_id
          in: path
          type: string
          required: true
      - name: deleteworkspaceuseraccessapiaccountsaccountidworkspacesworkspaceiduseraccessiddelete
        method: DELETE
        description: Delete Workspace User Access
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: account_id
          in: path
          type: string
          required: true
        - name: id
          in: path
          type: string
          required: true
        - name: workspace_id
          in: path
          type: string
          required: true
  exposes:
  - type: rest
    namespace: prefect-workspace-user-access-rest
    port: 8080
    description: REST adapter for Prefect Cloud API — Workspace User Access. One Spectral-compliant resource per consumed
      operation, prefixed with /v1.
    resources:
    - path: /v1/api/accounts/{account-id}/workspaces/{workspace-id}/user-access
      name: api-accounts-account-id-workspaces-workspace-id-user-access
      description: REST surface for api-accounts-account_id-workspaces-workspace_id-user_access.
      operations:
      - method: POST
        name: upsertworkspaceuseraccessapiaccountsaccountidworkspacesworkspaceiduseraccesspost
        description: Upsert Workspace User Access
        call: prefect-workspace-user-access.upsertworkspaceuseraccessapiaccountsaccountidworkspacesworkspaceiduseraccesspost
        with:
          account_id: rest.account_id
          workspace_id: rest.workspace_id
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/accounts/{account-id}/workspaces/{workspace-id}/user-access/filter
      name: api-accounts-account-id-workspaces-workspace-id-user-access-filter
      description: REST surface for api-accounts-account_id-workspaces-workspace_id-user_access-filter.
      operations:
      - method: POST
        name: readworkspaceuseraccessesapiaccountsaccountidworkspacesworkspaceiduseraccessfilterpost
        description: Read Workspace User Accesses
        call: prefect-workspace-user-access.readworkspaceuseraccessesapiaccountsaccountidworkspacesworkspaceiduseraccessfilterpost
        with:
          account_id: rest.account_id
          workspace_id: rest.workspace_id
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/accounts/{account-id}/workspaces/{workspace-id}/user-access/{id}
      name: api-accounts-account-id-workspaces-workspace-id-user-access-id
      description: REST surface for api-accounts-account_id-workspaces-workspace_id-user_access-id.
      operations:
      - method: GET
        name: readworkspaceuseraccessapiaccountsaccountidworkspacesworkspaceiduseraccessidget
        description: Read Workspace User Access
        call: prefect-workspace-user-access.readworkspaceuseraccessapiaccountsaccountidworkspacesworkspaceiduseraccessidget
        with:
          id: rest.id
          account_id: rest.account_id
          workspace_id: rest.workspace_id
        outputParameters:
        - type: object
          mapping: $.
      - method: DELETE
        name: deleteworkspaceuseraccessapiaccountsaccountidworkspacesworkspaceiduseraccessiddelete
        description: Delete Workspace User Access
        call: prefect-workspace-user-access.deleteworkspaceuseraccessapiaccountsaccountidworkspacesworkspaceiduseraccessiddelete
        with:
          account_id: rest.account_id
          id: rest.id
          workspace_id: rest.workspace_id
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: prefect-workspace-user-access-mcp
    port: 9090
    transport: http
    description: MCP adapter for Prefect Cloud API — Workspace User Access. One tool per consumed operation, routed inline
      through this capability's consumes block.
    tools:
    - name: upsert-workspace-user-access
      description: Upsert Workspace User Access
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: prefect-workspace-user-access.upsertworkspaceuseraccessapiaccountsaccountidworkspacesworkspaceiduseraccesspost
      with:
        account_id: tools.account_id
        workspace_id: tools.workspace_id
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: read-workspace-user-accesses
      description: Read Workspace User Accesses
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: prefect-workspace-user-access.readworkspaceuseraccessesapiaccountsaccountidworkspacesworkspaceiduseraccessfilterpost
      with:
        account_id: tools.account_id
        workspace_id: tools.workspace_id
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: read-workspace-user-access
      description: Read Workspace User Access
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: prefect-workspace-user-access.readworkspaceuseraccessapiaccountsaccountidworkspacesworkspaceiduseraccessidget
      with:
        id: tools.id
        account_id: tools.account_id
        workspace_id: tools.workspace_id
      outputParameters:
      - type: object
        mapping: $.
    - name: delete-workspace-user-access
      description: Delete Workspace User Access
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: prefect-workspace-user-access.deleteworkspaceuseraccessapiaccountsaccountidworkspacesworkspaceiduseraccessiddelete
      with:
        account_id: tools.account_id
        id: tools.id
        workspace_id: tools.workspace_id
      outputParameters:
      - type: object
        mapping: $.