WSO2 API Manager - Admin — System Scopes

naftiko: 1.0.0-alpha2
info:
  label: WSO2 API Manager - Admin — System Scopes
  description: 'WSO2 API Manager - Admin — System Scopes. 5 operations. Lead operation: Get Role Scope Mappings. Self-contained
    Naftiko capability covering one Wso2 business surface.'
  tags:
  - Wso2
  - System Scopes
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    WSO2_API_KEY: WSO2_API_KEY
capability:
  consumes:
  - type: http
    namespace: admin-system-scopes
    baseUri: https://apis.wso2.com/api/am/admin/v4
    description: WSO2 API Manager - Admin — System Scopes business capability. Self-contained, no shared references.
    resources:
    - name: system-scopes
      path: /system-scopes
      operations:
      - name: systemscopesget
        method: GET
        description: Get Role Scope Mappings
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: updaterolesforscope
        method: PUT
        description: Update Roles For Scope
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: system-scopes-role-aliases
      path: /system-scopes/role-aliases
      operations:
      - name: get
        method: GET
        description: Retrieve Role Alias Mappings
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: put
        method: PUT
        description: Add a New Role Alias
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: system-scopes-scopeName
      path: /system-scopes/{scopeName}
      operations:
      - name: systemscopesscopenameget
        method: GET
        description: Retrieve Scopes for a Particular User
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: username
          in: query
          type: string
    authentication:
      type: bearer
      token: '{{env.WSO2_API_KEY}}'
  exposes:
  - type: rest
    namespace: admin-system-scopes-rest
    port: 8080
    description: REST adapter for WSO2 API Manager - Admin — System Scopes. One Spectral-compliant resource per consumed operation,
      prefixed with /v1.
    resources:
    - path: /v1/system-scopes
      name: system-scopes
      description: REST surface for system-scopes.
      operations:
      - method: GET
        name: systemscopesget
        description: Get Role Scope Mappings
        call: admin-system-scopes.systemscopesget
        outputParameters:
        - type: object
          mapping: $.
      - method: PUT
        name: updaterolesforscope
        description: Update Roles For Scope
        call: admin-system-scopes.updaterolesforscope
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/system-scopes/role-aliases
      name: system-scopes-role-aliases
      description: REST surface for system-scopes-role-aliases.
      operations:
      - method: GET
        name: get
        description: Retrieve Role Alias Mappings
        call: admin-system-scopes.get
        outputParameters:
        - type: object
          mapping: $.
      - method: PUT
        name: put
        description: Add a New Role Alias
        call: admin-system-scopes.put
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/system-scopes/{scopename}
      name: system-scopes-scopename
      description: REST surface for system-scopes-scopeName.
      operations:
      - method: GET
        name: systemscopesscopenameget
        description: Retrieve Scopes for a Particular User
        call: admin-system-scopes.systemscopesscopenameget
        with:
          username: rest.username
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: admin-system-scopes-mcp
    port: 9090
    transport: http
    description: MCP adapter for WSO2 API Manager - Admin — System Scopes. One tool per consumed operation, routed inline
      through this capability's consumes block.
    tools:
    - name: get-role-scope-mappings
      description: Get Role Scope Mappings
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: admin-system-scopes.systemscopesget
      outputParameters:
      - type: object
        mapping: $.
    - name: update-roles-scope
      description: Update Roles For Scope
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: admin-system-scopes.updaterolesforscope
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: retrieve-role-alias-mappings
      description: Retrieve Role Alias Mappings
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: admin-system-scopes.get
      outputParameters:
      - type: object
        mapping: $.
    - name: add-new-role-alias
      description: Add a New Role Alias
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: admin-system-scopes.put
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: retrieve-scopes-particular-user
      description: Retrieve Scopes for a Particular User
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: admin-system-scopes.systemscopesscopenameget
      with:
        username: tools.username
      outputParameters:
      - type: object
        mapping: $.