Workday Security Groups API — Security Groups

naftiko: 1.0.0-alpha2
info:
  label: Workday Security Groups API — Security Groups
  description: 'Workday Security Groups API — Security Groups. 2 operations. Lead operation: Workday Security List security
    groups. Self-contained Naftiko capability covering one Workday Security business surface.'
  tags:
  - Workday Security
  - Security Groups
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    WORKDAY_SECURITY_API_KEY: WORKDAY_SECURITY_API_KEY
capability:
  consumes:
  - type: http
    namespace: security-groups-security-groups
    baseUri: https://{host}/ccx/api/v1/{tenant}
    description: Workday Security Groups API — Security Groups business capability. Self-contained, no shared references.
    resources:
    - name: securityGroups
      path: /securityGroups
      operations:
      - name: listsecuritygroups
        method: GET
        description: Workday Security List security groups
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: type
          in: query
          type: string
          description: Filter by security group type
        - name: search
          in: query
          type: string
          description: Search term to filter security groups by name or description
        - name: inactive
          in: query
          type: boolean
          description: Include inactive security groups in the results
    - name: securityGroups-securityGroupId
      path: /securityGroups/{securityGroupId}
      operations:
      - name: getsecuritygroup
        method: GET
        description: Workday Security Get a specific security group
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: securityGroupId
          in: path
          type: string
          description: Unique identifier of the security group
          required: true
    authentication:
      type: bearer
      token: '{{env.WORKDAY_SECURITY_API_KEY}}'
  exposes:
  - type: rest
    namespace: security-groups-security-groups-rest
    port: 8080
    description: REST adapter for Workday Security Groups API — Security Groups. One Spectral-compliant resource per consumed
      operation, prefixed with /v1.
    resources:
    - path: /v1/securitygroups
      name: securitygroups
      description: REST surface for securityGroups.
      operations:
      - method: GET
        name: listsecuritygroups
        description: Workday Security List security groups
        call: security-groups-security-groups.listsecuritygroups
        with:
          type: rest.type
          search: rest.search
          inactive: rest.inactive
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/securitygroups/{securitygroupid}
      name: securitygroups-securitygroupid
      description: REST surface for securityGroups-securityGroupId.
      operations:
      - method: GET
        name: getsecuritygroup
        description: Workday Security Get a specific security group
        call: security-groups-security-groups.getsecuritygroup
        with:
          securityGroupId: rest.securityGroupId
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: security-groups-security-groups-mcp
    port: 9090
    transport: http
    description: MCP adapter for Workday Security Groups API — Security Groups. One tool per consumed operation, routed inline
      through this capability's consumes block.
    tools:
    - name: workday-security-list-security-groups
      description: Workday Security List security groups
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: security-groups-security-groups.listsecuritygroups
      with:
        type: tools.type
        search: tools.search
        inactive: tools.inactive
      outputParameters:
      - type: object
        mapping: $.
    - name: workday-security-get-specific-security
      description: Workday Security Get a specific security group
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: security-groups-security-groups.getsecuritygroup
      with:
        securityGroupId: tools.securityGroupId
      outputParameters:
      - type: object
        mapping: $.