Red Hat Security Data API — Advisories

naftiko: 1.0.0-alpha2
info:
  label: Red Hat Security Data API — Advisories
  description: 'Red Hat Security Data API — Advisories. 2 operations. Lead operation: List Security Advisories. Self-contained
    Naftiko capability covering one Red Hat Enterprise Linux 8 business surface.'
  tags:
  - Red Hat Enterprise Linux 8
  - Advisories
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    RED_HAT_ENTERPRISE_LINUX_8_API_KEY: RED_HAT_ENTERPRISE_LINUX_8_API_KEY
capability:
  consumes:
  - type: http
    namespace: security-data-advisories
    baseUri: https://access.redhat.com/labs/securitydataapi
    description: Red Hat Security Data API — Advisories business capability. Self-contained, no shared references.
    resources:
    - name: advisory.json
      path: /advisory.json
      operations:
      - name: listadvisories
        method: GET
        description: List Security Advisories
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: before
          in: query
          type: string
          description: Filter advisories issued before this date (YYYY-MM-DD)
        - name: after
          in: query
          type: string
          description: Filter advisories issued after this date (YYYY-MM-DD)
        - name: type
          in: query
          type: string
          description: Filter by advisory type
        - name: severity
          in: query
          type: string
          description: Filter by severity (RHSA only)
        - name: package
          in: query
          type: string
          description: Filter by affected package name
        - name: product
          in: query
          type: string
          description: Filter by affected product
        - name: cve
          in: query
          type: string
          description: Filter by associated CVE ID
        - name: page
          in: query
          type: integer
        - name: per_page
          in: query
          type: integer
    - name: advisory-advisory}.json
      path: /advisory/{advisory}.json
      operations:
      - name: getadvisory
        method: GET
        description: Get Advisory Details
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: advisory
          in: path
          type: string
          description: The advisory ID (e.g., RHSA-2024:1234)
          required: true
  exposes:
  - type: rest
    namespace: security-data-advisories-rest
    port: 8080
    description: REST adapter for Red Hat Security Data API — Advisories. One Spectral-compliant resource per consumed operation,
      prefixed with /v1.
    resources:
    - path: /v1/advisory-json
      name: advisory-json
      description: REST surface for advisory.json.
      operations:
      - method: GET
        name: listadvisories
        description: List Security Advisories
        call: security-data-advisories.listadvisories
        with:
          before: rest.before
          after: rest.after
          type: rest.type
          severity: rest.severity
          package: rest.package
          product: rest.product
          cve: rest.cve
          page: rest.page
          per_page: rest.per_page
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/advisory/advisory-json
      name: advisory-advisory-json
      description: REST surface for advisory-advisory}.json.
      operations:
      - method: GET
        name: getadvisory
        description: Get Advisory Details
        call: security-data-advisories.getadvisory
        with:
          advisory: rest.advisory
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: security-data-advisories-mcp
    port: 9090
    transport: http
    description: MCP adapter for Red Hat Security Data API — Advisories. One tool per consumed operation, routed inline through
      this capability's consumes block.
    tools:
    - name: list-security-advisories
      description: List Security Advisories
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: security-data-advisories.listadvisories
      with:
        before: tools.before
        after: tools.after
        type: tools.type
        severity: tools.severity
        package: tools.package
        product: tools.product
        cve: tools.cve
        page: tools.page
        per_page: tools.per_page
      outputParameters:
      - type: object
        mapping: $.
    - name: get-advisory-details
      description: Get Advisory Details
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: security-data-advisories.getadvisory
      with:
        advisory: tools.advisory
      outputParameters:
      - type: object
        mapping: $.