Blog

Naftiko Capabilities for Azure API Management

·April 30, 2026
Table of contents

Azure API Management is Microsoft’s enterprise API gateway platform, tightly integrated with the Azure ecosystem. It handles API lifecycle management, developer onboarding, subscription and product management, policy enforcement, and AI gateway routing for Azure OpenAI and other AI services. The Naftiko capability set for Azure APIM covers these surfaces across four workflow capabilities.

What the Capability Covers

The Azure APIM capability set spans four workflow capabilities: AI Gateway Management, API Lifecycle Management, Developer Onboarding, and Gateway Operations — covering the full operational surface from AI model routing to certificate management.

Key Operations

API lifecycle, product and subscription management, developer portal, AI gateway configuration for Azure OpenAI, backend management, named values, diagnostics, and certificate management.

Capability Specification

naftiko: "1.0.0-alpha1"

info:
  label: API Lifecycle Management
  description: >-
    Workflow capability for API Platform Admins to manage the full API lifecycle
    including creating and versioning APIs, configuring policies, managing
    products and subscriptions, organizing with tags, and maintaining backends
    and certificates across Azure API Management.
  tags:
    - API Lifecycle
    - Platform Administration
    - API Governance
    - Products
    - Subscriptions
    - Policies

capability:
  consumes:
    - type: http
      namespace: azure-apim-rest
      baseUri: https://management.azure.com
      auth:
        type: oauth2
        scopes:
          - user_impersonation
      resources:
        - name: api
          label: APIs
          path: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ApiManagement/service/{serviceName}/apis/{apiId}
          operations:
            - name: Api_ListByService
              label: List APIs
              method: GET
            - name: Api_Get
              label: Get API
              method: GET
            - name: Api_CreateOrUpdate
              label: Create or Update API
              method: PUT
            - name: Api_Delete
              label: Delete API
              method: DELETE

        - name: product
          label: Products
          path: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ApiManagement/service/{serviceName}/products/{productId}
          operations:
            - name: Product_ListByService
              label: List Products
              method: GET
            - name: Product_CreateOrUpdate
              label: Create or Update Product
              method: PUT

        - name: subscription
          label: Subscriptions
          path: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ApiManagement/service/{serviceName}/subscriptions/{sid}
          operations:
            - name: Subscription_List
              label: List Subscriptions
              method: GET
            - name: Subscription_CreateOrUpdate
              label: Create Subscription
              method: PUT

  exposes:
    - type: mcp
      port: 9100
      namespace: azure-apim-lifecycle-mcp
      description: "MCP tools for Azure API Management lifecycle operations."
      tools:
        - name: list-apis
          description: "List all APIs in the Azure API Management service."
          hints:
            readOnly: true
          call: azure-apim-rest.Api_ListByService
          outputParameters:
            - type: object
              mapping: "$."

        - name: list-products
          description: "List all API products configured in Azure API Management."
          hints:
            readOnly: true
          call: azure-apim-rest.Product_ListByService
          outputParameters:
            - type: object
              mapping: "$."

        - name: list-subscriptions
          description: "List all subscriptions granting access to API products."
          hints:
            readOnly: true
          call: azure-apim-rest.Subscription_List
          outputParameters:
            - type: object
              mapping: "$."

Running It

docker pull ghcr.io/naftiko/framework:latest

# Set AZURE_SUBSCRIPTION_ID, AZURE_RESOURCE_GROUP, AZURE_APIM_NAME, AZURE_ACCESS_TOKEN in .env
docker run -p 9100:9100 \
  -v ./capabilities/api-lifecycle-management.yaml:/app/capability.yaml \
  --env-file .env \
  ghcr.io/naftiko/framework:latest /app/capability.yaml

Azure APIM customers building AI workflows have a powerful combination available: the AI gateway capability manages Azure OpenAI routing and policies, while the API lifecycle capability gives agents full visibility into what APIs those AI services are exposing downstream. The Azure API Management capability set is part of the Naftiko Fleet.