Blog

Naftiko Capabilities for Apinizer

·April 29, 2026
Table of contents

Apinizer is an API management and gateway platform focused on enterprise API governance, security, and monitoring. It provides a centralized view of API traffic with deep policy management, endpoint inspection, and metrics collection. The Naftiko capability for Apinizer exposes the full management surface as MCP tools — gateway configuration, endpoint inventory, policy inspection, and real-time metrics.

What the Capability Covers

The gateway-management capability wraps the Apinizer API and covers the four core operational surfaces: the gateways themselves, the endpoints registered on each gateway, the policies applied to each gateway, and the monitoring metrics produced by the platform.

MCP Tools Available

  • list-gateways — List all configured Apinizer API gateways with status and configuration
  • create-gateway — Create a new Apinizer API gateway
  • list-endpoints — List all API endpoints registered on a specific gateway
  • list-policies — List all security and traffic policies applied to a gateway
  • get-metrics — Retrieve monitoring metrics including request counts, latency, and error rates

Capability Specification

naftiko: "1.0.0-alpha1"

info:
  name: Apinizer Gateway Management
  description: Manage gateways, inspect endpoints and policies, and monitor metrics across the Apinizer platform
  version: 1.0.0

capability:
  consumes:
    - namespace: apinizer
      type: http
      baseUri: https://api.apinizer.com
      authentication:
        type: bearer
        token: "{{APINIZER_API_KEY}}"
      resources:
        - name: gateways
          path: "/v1/gateways/{gatewayId}"
          operations:
            - name: listGateways
              method: GET
            - name: createGateway
              method: POST
        - name: endpoints
          path: "/v1/gateways/{gatewayId}/endpoints"
          operations:
            - name: listEndpoints
              method: GET
        - name: policies
          path: "/v1/gateways/{gatewayId}/policies"
          operations:
            - name: listPolicies
              method: GET
        - name: metrics
          path: "/v1/metrics"
          operations:
            - name: getMetrics
              method: GET

  exposes:
    - type: mcp
      address: "0.0.0.0"
      port: 9121
      namespace: apinizer-management
      description: "Apinizer gateway management  inspect gateways, endpoints, policies, and retrieve monitoring metrics"
      tools:
        - name: list-gateways
          description: "List all configured Apinizer API gateways with their status and configuration"
          hints:
            readOnly: true
          call: apinizer.listGateways
          outputParameters:
            - type: array
              mapping: "$."
              items:
                type: object

        - name: create-gateway
          description: "Create a new Apinizer API gateway"
          hints:
            readOnly: false
            destructive: false
            idempotent: false
          call: apinizer.createGateway
          inputParameters:
            - name: body
              type: object
              required: true
              description: "Gateway configuration including name, type, and connection settings"
          outputParameters:
            - type: object
              mapping: "$."

        - name: list-endpoints
          description: "List all API endpoints registered on a specific Apinizer gateway"
          hints:
            readOnly: true
          call: apinizer.listEndpoints
          inputParameters:
            - name: gatewayId
              type: string
              required: true
              description: "Gateway ID"
          outputParameters:
            - type: array
              mapping: "$."
              items:
                type: object

        - name: list-policies
          description: "List all security and traffic policies applied to a specific Apinizer gateway"
          hints:
            readOnly: true
          call: apinizer.listPolicies
          inputParameters:
            - name: gatewayId
              type: string
              required: true
              description: "Gateway ID"
          outputParameters:
            - type: array
              mapping: "$."
              items:
                type: object

        - name: get-metrics
          description: "Retrieve monitoring metrics including request counts, latency, and error rates from Apinizer"
          hints:
            readOnly: true
          call: apinizer.getMetrics
          outputParameters:
            - type: object
              mapping: "$."

Running It

docker pull ghcr.io/naftiko/framework:latest

# Set APINIZER_API_KEY in your .env file
docker run -p 9121:9121 \
  -v ./capabilities/gateway-management.yaml:/app/capability.yaml \
  --env-file .env \
  ghcr.io/naftiko/framework:latest /app/capability.yaml

The combination of list-endpoints, list-policies, and get-metrics gives an AI agent everything it needs to run a policy compliance check — enumerate endpoints, verify the expected policies are applied to each, and correlate against traffic metrics to surface uncovered endpoints. The Apinizer capability is part of the Naftiko Fleet.

Subscribe to the Naftiko Manifest

Want to learn more and stay up to date on the latest from Naftiko? Get new posts, releases, and signals from the capability fleet in your inbox.