Blog

Naftiko Capabilities for Apinizer

·April 29, 2026
Table of contents

Apinizer is an API management and gateway platform focused on enterprise API governance, security, and monitoring. It provides a centralized view of API traffic with deep policy management, endpoint inspection, and metrics collection. The Naftiko capability for Apinizer exposes the full management surface as MCP tools — gateway configuration, endpoint inventory, policy inspection, and real-time metrics.

What the Capability Covers

The gateway-management capability wraps the Apinizer API and covers the four core operational surfaces: the gateways themselves, the endpoints registered on each gateway, the policies applied to each gateway, and the monitoring metrics produced by the platform.

MCP Tools Available

  • list-gateways — List all configured Apinizer API gateways with status and configuration
  • create-gateway — Create a new Apinizer API gateway
  • list-endpoints — List all API endpoints registered on a specific gateway
  • list-policies — List all security and traffic policies applied to a gateway
  • get-metrics — Retrieve monitoring metrics including request counts, latency, and error rates

Capability Specification

naftiko: "1.0.0-alpha1"

info:
  name: Apinizer Gateway Management
  description: Manage gateways, inspect endpoints and policies, and monitor metrics across the Apinizer platform
  version: 1.0.0

capability:
  consumes:
    - namespace: apinizer
      type: http
      baseUri: https://api.apinizer.com
      authentication:
        type: bearer
        token: ""
      resources:
        - name: gateways
          path: "/v1/gateways/{gatewayId}"
          operations:
            - name: listGateways
              method: GET
            - name: createGateway
              method: POST
        - name: endpoints
          path: "/v1/gateways/{gatewayId}/endpoints"
          operations:
            - name: listEndpoints
              method: GET
        - name: policies
          path: "/v1/gateways/{gatewayId}/policies"
          operations:
            - name: listPolicies
              method: GET
        - name: metrics
          path: "/v1/metrics"
          operations:
            - name: getMetrics
              method: GET

  exposes:
    - type: mcp
      address: "0.0.0.0"
      port: 9121
      namespace: apinizer-management
      description: "Apinizer gateway management  inspect gateways, endpoints, policies, and retrieve monitoring metrics"
      tools:
        - name: list-gateways
          description: "List all configured Apinizer API gateways with their status and configuration"
          hints:
            readOnly: true
          call: apinizer.listGateways
          outputParameters:
            - type: array
              mapping: "$."
              items:
                type: object

        - name: create-gateway
          description: "Create a new Apinizer API gateway"
          hints:
            readOnly: false
            destructive: false
            idempotent: false
          call: apinizer.createGateway
          inputParameters:
            - name: body
              type: object
              required: true
              description: "Gateway configuration including name, type, and connection settings"
          outputParameters:
            - type: object
              mapping: "$."

        - name: list-endpoints
          description: "List all API endpoints registered on a specific Apinizer gateway"
          hints:
            readOnly: true
          call: apinizer.listEndpoints
          inputParameters:
            - name: gatewayId
              type: string
              required: true
              description: "Gateway ID"
          outputParameters:
            - type: array
              mapping: "$."
              items:
                type: object

        - name: list-policies
          description: "List all security and traffic policies applied to a specific Apinizer gateway"
          hints:
            readOnly: true
          call: apinizer.listPolicies
          inputParameters:
            - name: gatewayId
              type: string
              required: true
              description: "Gateway ID"
          outputParameters:
            - type: array
              mapping: "$."
              items:
                type: object

        - name: get-metrics
          description: "Retrieve monitoring metrics including request counts, latency, and error rates from Apinizer"
          hints:
            readOnly: true
          call: apinizer.getMetrics
          outputParameters:
            - type: object
              mapping: "$."

Running It

docker pull ghcr.io/naftiko/framework:latest

# Set APINIZER_API_KEY in your .env file
docker run -p 9121:9121 \
  -v ./capabilities/gateway-management.yaml:/app/capability.yaml \
  --env-file .env \
  ghcr.io/naftiko/framework:latest /app/capability.yaml

The combination of list-endpoints, list-policies, and get-metrics gives an AI agent everything it needs to run a policy compliance check — enumerate endpoints, verify the expected policies are applied to each, and correlate against traffic metrics to surface uncovered endpoints. The Apinizer capability is part of the Naftiko Fleet.