Blog

Naftiko Capabilities for APIIDA

·April 27, 2026

Table of contents

APIIDA is a federated API management platform designed for enterprises that operate multiple gateways. It provides a unified control plane that spans heterogeneous infrastructure — deploy to Kong and Apigee from the same platform, manage cross-gateway policies consistently, and get a single view of metrics across your entire gateway estate. The Naftiko capability for APIIDA exposes this federated surface as AI-consumable tools.

What the Capability Covers

The federated-api-management capability wraps the APIIDA management API focusing on cross-gateway governance: discovering managed APIs, validating specifications before deployment, pushing APIs to target gateways, and retrieving metrics from across the estate.

MCP Tools Available

list-managed-apis — List all APIs managed across the APIIDA federated control plane
validate-api-specification — Validate an OpenAPI specification before deployment
deploy-api-to-gateways — Deploy a validated API to one or more gateway platforms simultaneously
list-managed-gateways — List all gateway instances registered with APIIDA
get-gateway-metrics — Retrieve aggregated metrics across all managed gateways

Capability Specification

naftiko: "1.0.0-alpha1"

info:
  label: "APIIDA Federated API Management"
  description: "Unified workflow for federated API management across multiple API gateways using APIIDA — validating specs, deploying APIs, monitoring gateways, and managing API lifecycle from a central control plane."
  tags:
    - APIIDA
    - API Management
    - Federated
    - Gateway
    - Enterprise

binds:
  - namespace: env
    keys:
      APIIDA_API_KEY: APIIDA_API_KEY

capability:
  consumes:
    - namespace: apiida-control-plane
      type: http
      baseUri: https://control.apiida.com
      authentication:
        type: bearer
        token: "{{APIIDA_API_KEY}}"
      resources:
        - name: apis
          path: "/v1/apis"
          operations:
            - name: list-apis
              method: GET
            - name: validate-spec
              method: POST
            - name: deploy-api
              method: POST
    - namespace: apiida-gateway-manager
      type: http
      baseUri: https://gateway.apiida.com
      authentication:
        type: bearer
        token: "{{APIIDA_API_KEY}}"
      resources:
        - name: gateways
          path: "/v1/gateways/{gatewayId}"
          operations:
            - name: list-gateways
              method: GET
            - name: get-gateway-metrics
              method: GET

  exposes:
    - type: mcp
      port: 9090
      namespace: apiida-federated-mcp
      transport: http
      description: "MCP server for AI-assisted APIIDA federated API management."
      tools:
        - name: list-managed-apis
          description: "List all APIs managed across the APIIDA federated control plane."
          hints: {readOnly: true, destructive: false, idempotent: true}
          call: "apiida-control-plane.list-apis"
          outputParameters:
            - type: object
              mapping: "$."

        - name: validate-api-specification
          description: "Validate an OpenAPI proxy specification before deployment."
          hints: {readOnly: true, destructive: false, idempotent: true}
          call: "apiida-control-plane.validate-spec"
          outputParameters:
            - type: object
              mapping: "$."

        - name: deploy-api-to-gateways
          description: "Deploy a validated API to one or more gateway environments."
          hints: {readOnly: false, destructive: false, idempotent: false}
          call: "apiida-control-plane.deploy-api"
          outputParameters:
            - type: object
              mapping: "$."

        - name: list-managed-gateways
          description: "List all gateways registered in the APIIDA gateway manager."
          hints: {readOnly: true, destructive: false, idempotent: true}
          call: "apiida-gateway-manager.list-gateways"
          outputParameters:
            - type: object
              mapping: "$."

        - name: get-gateway-metrics
          description: "Get monitoring and performance metrics for a specific gateway."
          hints: {readOnly: true, destructive: false, idempotent: true}
          call: "apiida-gateway-manager.get-gateway-metrics"
          outputParameters:
            - type: object
              mapping: "$."

Running It

docker pull ghcr.io/naftiko/framework:latest

# Set APIIDA_API_KEY in your .env file
docker run -p 9090:9090 \
  -v ./capabilities/federated-api-management.yaml:/app/capability.yaml \
  --env-file .env \
  ghcr.io/naftiko/framework:latest /app/capability.yaml

The validate-api-specification and deploy-api-to-gateways combination is particularly powerful: an agent can validate a spec, check target gateways, confirm readiness, and execute deployment as a governed, auditable sequence. The APIIDA capability is part of the Naftiko Fleet.

Subscribe to the Naftiko Manifest

Want to learn more and stay up to date on the latest from Naftiko? Get new posts, releases, and signals from the capability fleet in your inbox.