Sonatype · Capability

Sonatype Lifecycle Public REST API — Auto Policy Waivers

Sonatype Lifecycle Public REST API — Auto Policy Waivers. 8 operations. Lead operation: Auto Policy Waivers. Self-contained Naftiko capability covering one Sonatype business surface.

Run with Naftiko SonatypeAuto Policy Waivers

What You Can Do

POST
Addautopolicywaivers — Use this method to create an auto policy waiver configuration. Only three configurations can exist at a time for a given application or organization. With different combinations for reachable/pathForward
/v1/api/v2/autopolicywaivers/v2/{ownertype}/{ownerid}
GET
Getapplicableautowaivers — Use this method to retrieve all applicable auto waivers for the scope specified. You can specify the scope by using the parameters ownerType and ownerId.
/v1/api/v2/autopolicywaivers/v2/{ownertype}/{ownerid}/applicableautowaivers
GET
Getautopolicywaivers — Use this method to retrieve waiver details for all auto policy waivers for the scope specified. You can specify the scope by using the parameters ownerType and ownerId.
/v1/api/v2/autopolicywaivers/{ownertype}/{ownerid}
POST
Addautopolicywaiver — Use this method to create an auto policy waiver configuration. Only one configuration can exist at a time for a given application or organization.
/v1/api/v2/autopolicywaivers/{ownertype}/{ownerid}
GET
Getautopolicywaiverstatus — Use this method to retrieve status details for any auto policy waiver enabled for the scope specified. You can specify the scope by using the parameters ownerType and ownerId.
/v1/api/v2/autopolicywaivers/{ownertype}/{ownerid}/status
DELETE
Deleteautopolicywaiver — Use this method to delete an auto policy waiver, specified by the autoPolicyWaiverId.
/v1/api/v2/autopolicywaivers/{ownertype}/{ownerid}/{autopolicywaiverid}
GET
Getautopolicywaiver — Use this method to retrieve auto policy waiver details for the autoPolicyWaiverId specified.
/v1/api/v2/autopolicywaivers/{ownertype}/{ownerid}/{autopolicywaiverid}
PUT
Updateautopolicywaiver — Use this method to update an auto policy waiver, specified by the autoPolicyWaiverId.
/v1/api/v2/autopolicywaivers/{ownertype}/{ownerid}/{autopolicywaiverid}

MCP Tools

use-this-method-create-auto

Use this method to create an auto policy waiver configuration. Only three configurations can exist at a time for a given application or organization. With different combinations for reachable/pathForward

use-this-method-retrieve-all

Use this method to retrieve all applicable auto waivers for the scope specified. You can specify the scope by using the parameters ownerType and ownerId.

read-only idempotent
use-this-method-retrieve-waiver

Use this method to retrieve waiver details for all auto policy waivers for the scope specified. You can specify the scope by using the parameters ownerType and ownerId.

read-only idempotent
use-this-method-create-auto-2

Use this method to create an auto policy waiver configuration. Only one configuration can exist at a time for a given application or organization.

use-this-method-retrieve-status

Use this method to retrieve status details for any auto policy waiver enabled for the scope specified. You can specify the scope by using the parameters ownerType and ownerId.

read-only idempotent
use-this-method-delete-auto

Use this method to delete an auto policy waiver, specified by the autoPolicyWaiverId.

idempotent
use-this-method-retrieve-auto

Use this method to retrieve auto policy waiver details for the autoPolicyWaiverId specified.

read-only idempotent
use-this-method-update-auto

Use this method to update an auto policy waiver, specified by the autoPolicyWaiverId.

idempotent

Capability Spec

lifecycle-auto-policy-waivers.yaml Raw ↑
naftiko: 1.0.0-alpha2
info:
  label: Sonatype Lifecycle Public REST API — Auto Policy Waivers
  description: 'Sonatype Lifecycle Public REST API — Auto Policy Waivers. 8 operations. Lead operation: Auto Policy Waivers.
    Self-contained Naftiko capability covering one Sonatype business surface.'
  tags:
  - Sonatype
  - Auto Policy Waivers
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    SONATYPE_API_KEY: SONATYPE_API_KEY
capability:
  consumes:
  - type: http
    namespace: lifecycle-auto-policy-waivers
    baseUri: ''
    description: Sonatype Lifecycle Public REST API — Auto Policy Waivers business capability. Self-contained, no shared references.
    resources:
    - name: api-v2-autoPolicyWaivers-v2-ownerType-ownerId
      path: /api/v2/autoPolicyWaivers/v2/{ownerType}/{ownerId}
      operations:
      - name: addautopolicywaivers
        method: POST
        description: Use this method to create an auto policy waiver configuration. Only three configurations can  exist at
          a time for a given application or organization. With different combinations for reachable/pathForward
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: ownerType
          in: path
          type: string
          description: Enter the ownerType to specify the scope. The response will contain the details for waivers within
            the scope.
          required: true
        - name: ownerId
          in: path
          type: string
          description: Enter the corresponding id for the ownerType specified above.
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v2-autoPolicyWaivers-v2-ownerType-ownerId-applicableAutoWaivers
      path: /api/v2/autoPolicyWaivers/v2/{ownerType}/{ownerId}/applicableAutoWaivers
      operations:
      - name: getapplicableautowaivers
        method: GET
        description: Use this method to retrieve all applicable auto waivers for the scope specified. You can specify the
          scope by using the parameters ownerType and ownerId.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: ownerType
          in: path
          type: string
          description: Enter the ownerType to specify the scope. The response will contain applicable auto policy waivers,
            if any, that are within the scope specified.
          required: true
        - name: ownerId
          in: path
          type: string
          description: Enter the corresponding id for the ownerType.
          required: true
    - name: api-v2-autoPolicyWaivers-ownerType-ownerId
      path: /api/v2/autoPolicyWaivers/{ownerType}/{ownerId}
      operations:
      - name: getautopolicywaivers
        method: GET
        description: Use this method to retrieve waiver details for all auto policy waivers for the scope specified. You can
          specify the scope by using the parameters ownerType and ownerId.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: ownerType
          in: path
          type: string
          description: Enter the ownerType to specify the scope. The response will contain waivers that are within the scope
            specified.
          required: true
        - name: ownerId
          in: path
          type: string
          description: Enter the corresponding id for the ownerType specified above.
          required: true
      - name: addautopolicywaiver
        method: POST
        description: Use this method to create an auto policy waiver configuration. Only one configuration can exist at a
          time for a given application or organization.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: ownerType
          in: path
          type: string
          description: Enter the ownerType to specify the scope. The response will contain the details for waivers within
            the scope.
          required: true
        - name: ownerId
          in: path
          type: string
          description: Enter the corresponding id for the ownerType specified above.
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v2-autoPolicyWaivers-ownerType-ownerId-status
      path: /api/v2/autoPolicyWaivers/{ownerType}/{ownerId}/status
      operations:
      - name: getautopolicywaiverstatus
        method: GET
        description: Use this method to retrieve status details for any auto policy waiver enabled for the scope specified.
          You can specify the scope by using the parameters ownerType and ownerId.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: ownerType
          in: path
          type: string
          description: Enter the ownerType to specify the scope. The response will contain status details for the active auto
            policy waiver, if any, that is within the scope specified
          required: true
        - name: ownerId
          in: path
          type: string
          description: Enter the corresponding id for the ownerType specified above.
          required: true
    - name: api-v2-autoPolicyWaivers-ownerType-ownerId-autoPolicyWaiverId
      path: /api/v2/autoPolicyWaivers/{ownerType}/{ownerId}/{autoPolicyWaiverId}
      operations:
      - name: deleteautopolicywaiver
        method: DELETE
        description: Use this method to delete an auto policy waiver, specified by the autoPolicyWaiverId.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: ownerType
          in: path
          type: string
          description: Enter the ownerType to specify the scope. A waiver corresponding to the autoPolicyWaiverId provided
            and within the scope specified will be deleted.
          required: true
        - name: ownerId
          in: path
          type: string
          description: Enter the corresponding id for the ownerType specified above.
          required: true
        - name: autoPolicyWaiverId
          in: path
          type: string
          description: Enter the autoPolicyWaiverId to be deleted
          required: true
      - name: getautopolicywaiver
        method: GET
        description: Use this method to retrieve auto policy waiver details for the autoPolicyWaiverId specified.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: ownerType
          in: path
          type: string
          description: Enter the ownerType to specify the scope. The response will contain the details for waivers within
            the scope.
          required: true
        - name: ownerId
          in: path
          type: string
          description: Enter the corresponding id for the ownerType specified above.
          required: true
        - name: autoPolicyWaiverId
          in: path
          type: string
          description: Enter the autoPolicyWaiverId for which you want to retrieve the auto policy waiver details.
          required: true
      - name: updateautopolicywaiver
        method: PUT
        description: Use this method to update an auto policy waiver, specified by the autoPolicyWaiverId.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: ownerType
          in: path
          type: string
          description: Enter the ownerType to specify the scope. The response will contain the details for waivers within
            the scope.
          required: true
        - name: ownerId
          in: path
          type: string
          description: Enter the corresponding id for the ownerType specified above.
          required: true
        - name: autoPolicyWaiverId
          in: path
          type: string
          description: Enter the autoPolicyWaiverId to be updated.
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    authentication:
      type: bearer
      token: '{{env.SONATYPE_API_KEY}}'
  exposes:
  - type: rest
    namespace: lifecycle-auto-policy-waivers-rest
    port: 8080
    description: REST adapter for Sonatype Lifecycle Public REST API — Auto Policy Waivers. One Spectral-compliant resource
      per consumed operation, prefixed with /v1.
    resources:
    - path: /v1/api/v2/autopolicywaivers/v2/{ownertype}/{ownerid}
      name: api-v2-autopolicywaivers-v2-ownertype-ownerid
      description: REST surface for api-v2-autoPolicyWaivers-v2-ownerType-ownerId.
      operations:
      - method: POST
        name: addautopolicywaivers
        description: Use this method to create an auto policy waiver configuration. Only three configurations can  exist at
          a time for a given application or organization. With different combinations for reachable/pathForward
        call: lifecycle-auto-policy-waivers.addautopolicywaivers
        with:
          ownerType: rest.ownerType
          ownerId: rest.ownerId
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v2/autopolicywaivers/v2/{ownertype}/{ownerid}/applicableautowaivers
      name: api-v2-autopolicywaivers-v2-ownertype-ownerid-applicableautowaivers
      description: REST surface for api-v2-autoPolicyWaivers-v2-ownerType-ownerId-applicableAutoWaivers.
      operations:
      - method: GET
        name: getapplicableautowaivers
        description: Use this method to retrieve all applicable auto waivers for the scope specified. You can specify the
          scope by using the parameters ownerType and ownerId.
        call: lifecycle-auto-policy-waivers.getapplicableautowaivers
        with:
          ownerType: rest.ownerType
          ownerId: rest.ownerId
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v2/autopolicywaivers/{ownertype}/{ownerid}
      name: api-v2-autopolicywaivers-ownertype-ownerid
      description: REST surface for api-v2-autoPolicyWaivers-ownerType-ownerId.
      operations:
      - method: GET
        name: getautopolicywaivers
        description: Use this method to retrieve waiver details for all auto policy waivers for the scope specified. You can
          specify the scope by using the parameters ownerType and ownerId.
        call: lifecycle-auto-policy-waivers.getautopolicywaivers
        with:
          ownerType: rest.ownerType
          ownerId: rest.ownerId
        outputParameters:
        - type: object
          mapping: $.
      - method: POST
        name: addautopolicywaiver
        description: Use this method to create an auto policy waiver configuration. Only one configuration can exist at a
          time for a given application or organization.
        call: lifecycle-auto-policy-waivers.addautopolicywaiver
        with:
          ownerType: rest.ownerType
          ownerId: rest.ownerId
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v2/autopolicywaivers/{ownertype}/{ownerid}/status
      name: api-v2-autopolicywaivers-ownertype-ownerid-status
      description: REST surface for api-v2-autoPolicyWaivers-ownerType-ownerId-status.
      operations:
      - method: GET
        name: getautopolicywaiverstatus
        description: Use this method to retrieve status details for any auto policy waiver enabled for the scope specified.
          You can specify the scope by using the parameters ownerType and ownerId.
        call: lifecycle-auto-policy-waivers.getautopolicywaiverstatus
        with:
          ownerType: rest.ownerType
          ownerId: rest.ownerId
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v2/autopolicywaivers/{ownertype}/{ownerid}/{autopolicywaiverid}
      name: api-v2-autopolicywaivers-ownertype-ownerid-autopolicywaiverid
      description: REST surface for api-v2-autoPolicyWaivers-ownerType-ownerId-autoPolicyWaiverId.
      operations:
      - method: DELETE
        name: deleteautopolicywaiver
        description: Use this method to delete an auto policy waiver, specified by the autoPolicyWaiverId.
        call: lifecycle-auto-policy-waivers.deleteautopolicywaiver
        with:
          ownerType: rest.ownerType
          ownerId: rest.ownerId
          autoPolicyWaiverId: rest.autoPolicyWaiverId
        outputParameters:
        - type: object
          mapping: $.
      - method: GET
        name: getautopolicywaiver
        description: Use this method to retrieve auto policy waiver details for the autoPolicyWaiverId specified.
        call: lifecycle-auto-policy-waivers.getautopolicywaiver
        with:
          ownerType: rest.ownerType
          ownerId: rest.ownerId
          autoPolicyWaiverId: rest.autoPolicyWaiverId
        outputParameters:
        - type: object
          mapping: $.
      - method: PUT
        name: updateautopolicywaiver
        description: Use this method to update an auto policy waiver, specified by the autoPolicyWaiverId.
        call: lifecycle-auto-policy-waivers.updateautopolicywaiver
        with:
          ownerType: rest.ownerType
          ownerId: rest.ownerId
          autoPolicyWaiverId: rest.autoPolicyWaiverId
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: lifecycle-auto-policy-waivers-mcp
    port: 9090
    transport: http
    description: MCP adapter for Sonatype Lifecycle Public REST API — Auto Policy Waivers. One tool per consumed operation,
      routed inline through this capability's consumes block.
    tools:
    - name: use-this-method-create-auto
      description: Use this method to create an auto policy waiver configuration. Only three configurations can  exist at
        a time for a given application or organization. With different combinations for reachable/pathForward
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: lifecycle-auto-policy-waivers.addautopolicywaivers
      with:
        ownerType: tools.ownerType
        ownerId: tools.ownerId
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: use-this-method-retrieve-all
      description: Use this method to retrieve all applicable auto waivers for the scope specified. You can specify the scope
        by using the parameters ownerType and ownerId.
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: lifecycle-auto-policy-waivers.getapplicableautowaivers
      with:
        ownerType: tools.ownerType
        ownerId: tools.ownerId
      outputParameters:
      - type: object
        mapping: $.
    - name: use-this-method-retrieve-waiver
      description: Use this method to retrieve waiver details for all auto policy waivers for the scope specified. You can
        specify the scope by using the parameters ownerType and ownerId.
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: lifecycle-auto-policy-waivers.getautopolicywaivers
      with:
        ownerType: tools.ownerType
        ownerId: tools.ownerId
      outputParameters:
      - type: object
        mapping: $.
    - name: use-this-method-create-auto-2
      description: Use this method to create an auto policy waiver configuration. Only one configuration can exist at a time
        for a given application or organization.
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: lifecycle-auto-policy-waivers.addautopolicywaiver
      with:
        ownerType: tools.ownerType
        ownerId: tools.ownerId
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: use-this-method-retrieve-status
      description: Use this method to retrieve status details for any auto policy waiver enabled for the scope specified.
        You can specify the scope by using the parameters ownerType and ownerId.
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: lifecycle-auto-policy-waivers.getautopolicywaiverstatus
      with:
        ownerType: tools.ownerType
        ownerId: tools.ownerId
      outputParameters:
      - type: object
        mapping: $.
    - name: use-this-method-delete-auto
      description: Use this method to delete an auto policy waiver, specified by the autoPolicyWaiverId.
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: lifecycle-auto-policy-waivers.deleteautopolicywaiver
      with:
        ownerType: tools.ownerType
        ownerId: tools.ownerId
        autoPolicyWaiverId: tools.autoPolicyWaiverId
      outputParameters:
      - type: object
        mapping: $.
    - name: use-this-method-retrieve-auto
      description: Use this method to retrieve auto policy waiver details for the autoPolicyWaiverId specified.
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: lifecycle-auto-policy-waivers.getautopolicywaiver
      with:
        ownerType: tools.ownerType
        ownerId: tools.ownerId
        autoPolicyWaiverId: tools.autoPolicyWaiverId
      outputParameters:
      - type: object
        mapping: $.
    - name: use-this-method-update-auto
      description: Use this method to update an auto policy waiver, specified by the autoPolicyWaiverId.
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: lifecycle-auto-policy-waivers.updateautopolicywaiver
      with:
        ownerType: tools.ownerType
        ownerId: tools.ownerId
        autoPolicyWaiverId: tools.autoPolicyWaiverId
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.