Blog

Naftiko Capabilities for APIIDA

·April 27, 2026
Table of contents

APIIDA is a federated API management platform designed for enterprises that operate multiple gateways. It provides a unified control plane that spans heterogeneous infrastructure — deploy to Kong and Apigee from the same platform, manage cross-gateway policies consistently, and get a single view of metrics across your entire gateway estate. The Naftiko capability for APIIDA exposes this federated surface as AI-consumable tools.

What the Capability Covers

The federated-api-management capability wraps the APIIDA management API focusing on cross-gateway governance: discovering managed APIs, validating specifications before deployment, pushing APIs to target gateways, and retrieving metrics from across the estate.

MCP Tools Available

  • list-managed-apis — List all APIs managed across the APIIDA federated control plane
  • validate-api-specification — Validate an OpenAPI specification before deployment
  • deploy-api-to-gateways — Deploy a validated API to one or more gateway platforms simultaneously
  • list-managed-gateways — List all gateway instances registered with APIIDA
  • get-gateway-metrics — Retrieve aggregated metrics across all managed gateways

Capability Specification

naftiko: "1.0.0-alpha1"

info:
  label: "APIIDA Federated API Management"
  description: "Unified workflow for federated API management across multiple API gateways using APIIDA  validating specs, deploying APIs, monitoring gateways, and managing API lifecycle from a central control plane."
  tags:
    - APIIDA
    - API Management
    - Federated
    - Gateway
    - Enterprise

binds:
  - namespace: env
    keys:
      APIIDA_API_KEY: APIIDA_API_KEY

capability:
  consumes:
    - namespace: apiida-control-plane
      type: http
      baseUri: https://control.apiida.com
      authentication:
        type: bearer
        token: ""
      resources:
        - name: apis
          path: "/v1/apis"
          operations:
            - name: list-apis
              method: GET
            - name: validate-spec
              method: POST
            - name: deploy-api
              method: POST
    - namespace: apiida-gateway-manager
      type: http
      baseUri: https://gateway.apiida.com
      authentication:
        type: bearer
        token: ""
      resources:
        - name: gateways
          path: "/v1/gateways/{gatewayId}"
          operations:
            - name: list-gateways
              method: GET
            - name: get-gateway-metrics
              method: GET

  exposes:
    - type: mcp
      port: 9090
      namespace: apiida-federated-mcp
      transport: http
      description: "MCP server for AI-assisted APIIDA federated API management."
      tools:
        - name: list-managed-apis
          description: "List all APIs managed across the APIIDA federated control plane."
          hints: {readOnly: true, destructive: false, idempotent: true}
          call: "apiida-control-plane.list-apis"
          outputParameters:
            - type: object
              mapping: "$."

        - name: validate-api-specification
          description: "Validate an OpenAPI proxy specification before deployment."
          hints: {readOnly: true, destructive: false, idempotent: true}
          call: "apiida-control-plane.validate-spec"
          outputParameters:
            - type: object
              mapping: "$."

        - name: deploy-api-to-gateways
          description: "Deploy a validated API to one or more gateway environments."
          hints: {readOnly: false, destructive: false, idempotent: false}
          call: "apiida-control-plane.deploy-api"
          outputParameters:
            - type: object
              mapping: "$."

        - name: list-managed-gateways
          description: "List all gateways registered in the APIIDA gateway manager."
          hints: {readOnly: true, destructive: false, idempotent: true}
          call: "apiida-gateway-manager.list-gateways"
          outputParameters:
            - type: object
              mapping: "$."

        - name: get-gateway-metrics
          description: "Get monitoring and performance metrics for a specific gateway."
          hints: {readOnly: true, destructive: false, idempotent: true}
          call: "apiida-gateway-manager.get-gateway-metrics"
          outputParameters:
            - type: object
              mapping: "$."

Running It

docker pull ghcr.io/naftiko/framework:latest

# Set APIIDA_API_KEY in your .env file
docker run -p 9090:9090 \
  -v ./capabilities/federated-api-management.yaml:/app/capability.yaml \
  --env-file .env \
  ghcr.io/naftiko/framework:latest /app/capability.yaml

The validate-api-specification and deploy-api-to-gateways combination is particularly powerful: an agent can validate a spec, check target gateways, confirm readiness, and execute deployment as a governed, auditable sequence. The APIIDA capability is part of the Naftiko Fleet.