The Capability Spec

Declare what you consume, orchestrate, expose, and govern -- all in YAML, validated by JSON Schema, committed to Git.
Naftiko capabilities Naftiko capabilities Naftiko capabilities

Everything in one spec

A single declarative YAML file defines the full lifecycle of a capability -- from the APIs it consumes through the protocols it exposes, with governance and deployment baked in.
Consumption
Declare which APIs you consume, how you authenticate, and what formats you convert -- HTTP/REST, JSON, XML, Avro, Protobuf, CSV, YAML.
Orchestration
Chain multiple API calls into a single operation with multi-step workflows, JSONPath extraction, lookup steps, and capability composition.
Exposure
Expose capabilities simultaneously as REST APIs, MCP servers (tools, resources, prompts), Agent Skills, and A2A -- from a single deployment.

Governance metadata baked in

Every capability carries structured metadata that drives cost attribution, compliance, and agent safety decisions.
Labels on info
Cost-center, environment-tier, and team labels that propagate to Kubernetes resources for FinOps and operational grouping.
Tags on consumes
Provenance, billing allocation, data sensitivity classification, and reliability expectations on every consumed API.
Tags on exposes
Network topology, Backstage catalog grouping, and lifecycle deprecation signaling on exposed adapters.
Tags on operations
Agent safety policies (safe, requires-confirmation, restricted) and effect classification (read, create, update, delete) on every exposed operation.

Validated everywhere

The spec is validated by JSON Schema, linted by Spectral rules, and enforced in CI/CD pipelines.
JSON Schema
Published schema validates every capability spec. Available on JSON Schema Store at GA.
Spectral ruleset
Out-of-the-box ruleset for common best practices, integrated with VS Code diagnostics.
CI/CD enforcement
GitHub Actions via Super Linter enforce governance rules as merge gates.
Kyverno admission
Mirror governance rules as Kubernetes ClusterPolicies for admission-time enforcement.

See the spec in action

Walk through the 6-step tutorial to build your first capability.
Start the tutorial