Pulls advertising campaign metrics from Snowflake, refreshes the Power BI executive dashboard, and sends the weekly report to stakeholders via Microsoft Teams.

naftiko: '0.5'
info:
  label: Ad Campaign Performance Reporter
  description: Pulls advertising campaign metrics from Snowflake, refreshes the Power BI executive dashboard, and sends the weekly report to stakeholders via Microsoft Teams.
  tags:
  - advertising
  - analytics
  - snowflake
  - power-bi
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: ad-performance
    port: 8080
    tools:
    - name: generate-ad-report
      description: Given a campaign ID and date range, generate the performance report.
      inputParameters:
      - name: campaign_id
        in: body
        type: string
        description: Advertising campaign ID.
      - name: date_range
        in: body
        type: string
        description: Reporting date range.
      steps:
      - name: get-metrics
        type: call
        call: snowflake.query-ad-metrics
        with:
          campaign_id: '{{campaign_id}}'
          date_range: '{{date_range}}'
      - name: refresh-dashboard
        type: call
        call: powerbi.refresh-dataset
        with:
          dataset_id: ad-performance
      - name: notify-stakeholders
        type: call
        call: teams.post-message
        with:
          channel_id: ad-operations
          text: 'Ad report: {{campaign_id}}. Impressions: {{get-metrics.impressions}}. CTR: {{get-metrics.ctr}}%. Dashboard refreshed.'
  consumes:
  - type: http
    namespace: snowflake
    baseUri: https://comcast.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: statements
      path: /statements
      operations:
      - name: query-ad-metrics
        method: POST
  - type: http
    namespace: powerbi
    baseUri: https://api.powerbi.com/v1.0/myorg
    authentication:
      type: bearer
      token: $secrets.powerbi_token
    resources:
    - name: datasets
      path: /datasets/{{dataset_id}}/refreshes
      operations:
      - name: refresh-dataset
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

Runs quarterly Okta access reviews by pulling user-app assignments, creating Jira review tasks for managers, and posting summary to the governance Teams channel.

naftiko: '0.5'
info:
  label: Okta Quarterly Access Review
  description: Runs quarterly Okta access reviews by pulling user-app assignments, creating Jira review tasks for managers, and posting summary to the governance Teams channel.
  tags:
  - security
  - governance
  - okta
  - jira
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: access-review
    port: 8080
    tools:
    - name: run-access-review
      description: Given a department, run the quarterly access review and create review tasks.
      inputParameters:
      - name: department
        in: body
        type: string
        description: Department to review.
      steps:
      - name: get-assignments
        type: call
        call: okta.get-department-apps
        with:
          department: '{{department}}'
      - name: create-review
        type: call
        call: jira.create-issue
        with:
          project: GRC
          summary: 'Q1 access review: {{department}}'
          description: 'Users: {{get-assignments.user_count}}. Apps: {{get-assignments.app_count}}'
      - name: notify-governance
        type: call
        call: teams.post-message
        with:
          channel_id: iam-governance
          text: 'Access review: {{department}}. {{get-assignments.user_count}} users, {{get-assignments.app_count}} apps. Jira: {{create-review.key}}'
  consumes:
  - type: http
    namespace: okta
    baseUri: https://comcast.okta.com/api/v1
    authentication:
      type: apikey
      key: Authorization
      value: $secrets.okta_api_token
      placement: header
    resources:
    - name: users
      path: /users
      operations:
      - name: get-department-apps
        method: GET
  - type: http
    namespace: jira
    baseUri: https://comcast.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - name: issues
      path: /issue
      operations:
      - name: create-issue
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

Triggers a Power BI dataset refresh for the subscriber analytics dashboard after Snowflake pipeline completion and notifies the analytics team in Teams.

naftiko: '0.5'
info:
  label: Power BI Dashboard Refresh Trigger
  description: Triggers a Power BI dataset refresh for the subscriber analytics dashboard after Snowflake pipeline completion and notifies the analytics team in Teams.
  tags:
  - data
  - analytics
  - power-bi
  - snowflake
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: bi-reporting
    port: 8080
    tools:
    - name: trigger-dashboard-refresh
      description: Given a Power BI workspace ID and dataset ID, trigger a dataset refresh and notify the analytics team in Teams when complete.
      inputParameters:
      - name: workspace_id
        in: body
        type: string
        description: The Power BI workspace (group) ID.
      - name: dataset_id
        in: body
        type: string
        description: The Power BI dataset ID to refresh.
      steps:
      - name: trigger-refresh
        type: call
        call: powerbi.refresh-dataset
        with:
          workspaceId: '{{workspace_id}}'
          datasetId: '{{dataset_id}}'
      - name: notify-analytics
        type: call
        call: msteams.post-channel-message
        with:
          channelId: analytics-team
          message: Power BI dataset {{dataset_id}} refresh triggered in workspace {{workspace_id}}.
  consumes:
  - type: http
    namespace: powerbi
    baseUri: https://api.powerbi.com/v1.0/myorg
    authentication:
      type: bearer
      token: $secrets.powerbi_token
    resources:
    - name: datasets
      path: /groups/{{workspaceId}}/datasets/{{datasetId}}/refreshes
      inputParameters:
      - name: workspaceId
        in: path
      - name: datasetId
        in: path
      operations:
      - name: refresh-dataset
        method: POST
  - type: http
    namespace: msteams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - name: channel-messages
      path: /teams/channels/{{channelId}}/messages
      inputParameters:
      - name: channelId
        in: path
      operations:
      - name: post-channel-message
        method: POST

When an employee's role changes in Workday, updates Okta group memberships to match the new role's access profile.

naftiko: '0.5'
info:
  label: Workday Role Change Access Provisioning
  description: When an employee's role changes in Workday, updates Okta group memberships to match the new role's access profile.
  tags:
  - hr
  - identity
  - workday
  - okta
  - access-management
capability:
  exposes:
  - type: mcp
    namespace: hr-identity
    port: 8080
    tools:
    - name: sync-role-access
      description: Given a Workday employee ID and new job profile, update Okta group memberships to reflect the new role's access entitlements.
      inputParameters:
      - name: employee_id
        in: body
        type: string
        description: The Workday worker ID.
      - name: new_job_profile
        in: body
        type: string
        description: The new Workday job profile name.
      steps:
      - name: get-worker
        type: call
        call: workday.get-worker
        with:
          worker_id: '{{employee_id}}'
      - name: assign-okta-group
        type: call
        call: okta.add-user-to-group
        with:
          userId: '{{get-worker.okta_user_id}}'
          groupProfile: '{{new_job_profile}}'
  consumes:
  - type: http
    namespace: workday
    baseUri: https://wd2-impl-services1.workday.com/ccx/api/v1
    authentication:
      type: bearer
      token: $secrets.workday_token
    resources:
    - name: workers
      path: /comcast/workers/{{worker_id}}
      inputParameters:
      - name: worker_id
        in: path
      operations:
      - name: get-worker
        method: GET
  - type: http
    namespace: okta
    baseUri: https://comcast.okta.com/api/v1
    authentication:
      type: apikey
      key: Authorization
      value: $secrets.okta_api_token
      placement: header
    resources:
    - name: group-members
      path: /groups/{{groupProfile}}/users/{{userId}}
      inputParameters:
      - name: groupProfile
        in: path
      - name: userId
        in: path
      operations:
      - name: add-user-to-group
        method: PUT

Checks content licensing rights expiry in Snowflake, creates a Jira task for the content operations team, and notifies stakeholders via Microsoft Teams.

naftiko: '0.5'
info:
  label: NBC Universal Content Rights Checker
  description: Checks content licensing rights expiry in Snowflake, creates a Jira task for the content operations team, and notifies stakeholders via Microsoft Teams.
  tags:
  - content
  - licensing
  - snowflake
  - jira
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: content-rights
    port: 8080
    tools:
    - name: check-content-rights
      description: Given a content catalog ID, check licensing rights and flag expirations.
      inputParameters:
      - name: catalog_id
        in: body
        type: string
        description: Content catalog identifier.
      steps:
      - name: get-rights
        type: call
        call: snowflake.query-rights
        with:
          catalog_id: '{{catalog_id}}'
      - name: create-task
        type: call
        call: jira.create-issue
        with:
          project: CONTENT
          summary: 'Rights expiry: {{get-rights.title}} — {{get-rights.expiry_date}}'
          description: 'Territories: {{get-rights.territories}}. License type: {{get-rights.license_type}}'
      - name: notify-content-ops
        type: call
        call: teams.post-message
        with:
          channel_id: content-operations
          text: 'Rights expiring: {{get-rights.title}} on {{get-rights.expiry_date}}. Jira: {{create-task.key}}'
  consumes:
  - type: http
    namespace: snowflake
    baseUri: https://comcast.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: statements
      path: /statements
      operations:
      - name: query-rights
        method: POST
  - type: http
    namespace: jira
    baseUri: https://comcast.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - name: issues
      path: /issue
      operations:
      - name: create-issue
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

Generates SailPoint identity governance reports, stores results in Snowflake, and posts summary to the security governance Teams channel.

naftiko: '0.5'
info:
  label: SailPoint Identity Governance Reporter
  description: Generates SailPoint identity governance reports, stores results in Snowflake, and posts summary to the security governance Teams channel.
  tags:
  - security
  - identity-governance
  - sailpoint
  - snowflake
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: identity-governance
    port: 8080
    tools:
    - name: generate-governance-report
      description: Given a governance campaign ID, generate the compliance report.
      inputParameters:
      - name: campaign_id
        in: body
        type: string
        description: SailPoint certification campaign ID.
      steps:
      - name: get-campaign
        type: call
        call: sailpoint.get-campaign
        with:
          campaign_id: '{{campaign_id}}'
      - name: store-results
        type: call
        call: snowflake.insert-governance
        with:
          campaign_id: '{{campaign_id}}'
          completion_pct: '{{get-campaign.completion_pct}}'
      - name: notify-governance
        type: call
        call: teams.post-message
        with:
          channel_id: security-governance
          text: 'Governance report: {{get-campaign.name}}. Completion: {{get-campaign.completion_pct}}%. Reviewed: {{get-campaign.decisions_made}}'
  consumes:
  - type: http
    namespace: sailpoint
    baseUri: https://comcast.api.identitynow.com/v3
    authentication:
      type: bearer
      token: $secrets.sailpoint_token
    resources:
    - name: campaigns
      path: /campaigns/{{campaign_id}}
      operations:
      - name: get-campaign
        method: GET
  - type: http
    namespace: snowflake
    baseUri: https://comcast.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: statements
      path: /statements
      operations:
      - name: insert-governance
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

When GitHub Dependabot finds a critical vulnerability, creates a Jira security ticket, notifies the owning team via Microsoft Teams, and logs the event in Splunk.

naftiko: '0.5'
info:
  label: GitHub Dependency Vulnerability Handler
  description: When GitHub Dependabot finds a critical vulnerability, creates a Jira security ticket, notifies the owning team via Microsoft Teams, and logs the event in Splunk.
  tags:
  - security
  - development
  - github
  - jira
  - microsoft-teams
  - splunk
capability:
  exposes:
  - type: mcp
    namespace: dep-vuln-handler
    port: 8080
    tools:
    - name: handle-dependency-vuln
      description: Given a GitHub repository and advisory ID, create tracking ticket and notify.
      inputParameters:
      - name: repo_name
        in: body
        type: string
        description: GitHub repository name.
      - name: advisory_id
        in: body
        type: string
        description: GitHub security advisory ID.
      steps:
      - name: get-advisory
        type: call
        call: github.get-advisory
        with:
          repo_name: '{{repo_name}}'
          advisory_id: '{{advisory_id}}'
      - name: create-ticket
        type: call
        call: jira.create-issue
        with:
          project: SEC
          summary: 'Dependency vuln: {{repo_name}} — {{get-advisory.package}}'
          description: 'Severity: {{get-advisory.severity}}. CVE: {{get-advisory.cve}}'
      - name: log-event
        type: call
        call: splunk.index-event
        with:
          source: github-dependabot
          event: 'Vulnerability: {{repo_name}} — {{get-advisory.cve}}'
      - name: notify-team
        type: call
        call: teams.post-message
        with:
          channel_id: appsec
          text: 'Critical vuln: {{repo_name}} — {{get-advisory.package}} ({{get-advisory.severity}}). Jira: {{create-ticket.key}}'
  consumes:
  - type: http
    namespace: github
    baseUri: https://api.github.com
    authentication:
      type: bearer
      token: $secrets.github_token
    resources:
    - name: advisories
      path: /repos/comcast/{{repo_name}}/security-advisories/{{advisory_id}}
      operations:
      - name: get-advisory
        method: GET
  - type: http
    namespace: jira
    baseUri: https://comcast.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - name: issues
      path: /issue
      operations:
      - name: create-issue
        method: POST
  - type: http
    namespace: splunk
    baseUri: https://splunk.comcast.com:8088
    authentication:
      type: bearer
      token: $secrets.splunk_hec_token
    resources:
    - name: events
      path: /services/collector/event
      operations:
      - name: index-event
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

Searches the Comcast Confluence knowledge base for articles matching a given query and returns the top results.

naftiko: '0.5'
info:
  label: Confluence Knowledge Base Search
  description: Searches the Comcast Confluence knowledge base for articles matching a given query and returns the top results.
  tags:
  - knowledge-management
  - confluence
capability:
  exposes:
  - type: mcp
    namespace: kb-search
    port: 8080
    tools:
    - name: search-articles
      description: Given a search query, return the top Confluence article titles and page IDs.
      inputParameters:
      - name: query
        in: body
        type: string
        description: Search query string.
      call: confluence.search
      with:
        query: '{{query}}'
      outputParameters:
      - name: result_count
        type: number
        mapping: $.size
      - name: top_title
        type: string
        mapping: $.results[0].title
  consumes:
  - type: http
    namespace: confluence
    baseUri: https://comcast.atlassian.net/wiki/rest/api
    authentication:
      type: basic
      username: $secrets.confluence_user
      password: $secrets.confluence_api_token
    resources:
    - name: content
      path: /content/search
      inputParameters:
      - name: query
        in: query
      operations:
      - name: search
        method: GET

Returns current active headcount by department and cost center from Workday, for workforce planning and finance reporting.

naftiko: '0.5'
info:
  label: Workday Headcount Snapshot
  description: Returns current active headcount by department and cost center from Workday, for workforce planning and finance reporting.
  tags:
  - hr
  - finance
  - workday
  - headcount
  - reporting
capability:
  exposes:
  - type: mcp
    namespace: hr-reporting
    port: 8080
    tools:
    - name: get-headcount-snapshot
      description: Returns current active employee headcount grouped by department and cost center from Workday. Use for workforce planning, headcount budgeting, and finance period close.
      call: workday.get-headcount
      outputParameters:
      - name: employees
        type: array
        mapping: $.data
        items:
        - name: employee_id
          type: string
          mapping: $.id
        - name: full_name
          type: string
          mapping: $.name
        - name: department
          type: string
          mapping: $.department
        - name: cost_center
          type: string
          mapping: $.costCenter
  consumes:
  - type: http
    namespace: workday
    baseUri: https://wd2-impl-services1.workday.com/ccx/api/v1
    authentication:
      type: bearer
      token: $secrets.workday_token
    resources:
    - name: workers
      path: /comcast/workers
      operations:
      - name: get-headcount
        method: GET

Checks the latest Terraform Cloud run status for a Comcast infrastructure workspace.

naftiko: '0.5'
info:
  label: Terraform Workspace Run Status
  description: Checks the latest Terraform Cloud run status for a Comcast infrastructure workspace.
  tags:
  - infrastructure
  - terraform
capability:
  exposes:
  - type: mcp
    namespace: infra-runs
    port: 8080
    tools:
    - name: get-run-status
      description: Given a Terraform workspace name, return the latest run status and resource change count.
      inputParameters:
      - name: workspace_name
        in: body
        type: string
        description: Terraform Cloud workspace name.
      call: terraform.get-latest-run
      with:
        workspace_name: '{{workspace_name}}'
      outputParameters:
      - name: run_status
        type: string
        mapping: $.data.attributes.status
      - name: resource_changes
        type: number
        mapping: $.data.attributes.resource_changes
  consumes:
  - type: http
    namespace: terraform
    baseUri: https://app.terraform.io/api/v2
    authentication:
      type: bearer
      token: $secrets.terraform_token
    resources:
    - name: workspaces
      path: /organizations/comcast/workspaces/{{workspace_name}}
      inputParameters:
      - name: workspace_name
        in: path
      operations:
      - name: get-latest-run
        method: GET

Reconciles ServiceNow CMDB asset inventory against discovered assets, creates Jira tickets for unmatched items, and posts the reconciliation summary to Microsoft Teams.

naftiko: '0.5'
info:
  label: ServiceNow Asset Discovery Reconciliation
  description: Reconciles ServiceNow CMDB asset inventory against discovered assets, creates Jira tickets for unmatched items, and posts the reconciliation summary to Microsoft Teams.
  tags:
  - itsm
  - asset-management
  - servicenow
  - jira
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: asset-reconciliation
    port: 8080
    tools:
    - name: reconcile-assets
      description: Given a ServiceNow discovery run ID, reconcile discovered vs. registered assets.
      inputParameters:
      - name: discovery_run_id
        in: body
        type: string
        description: ServiceNow discovery run ID.
      steps:
      - name: get-discovery
        type: call
        call: servicenow.get-discovery-results
        with:
          run_id: '{{discovery_run_id}}'
      - name: create-ticket
        type: call
        call: jira.create-issue
        with:
          project: ITAM
          summary: 'Asset reconciliation: {{get-discovery.unmatched_count}} unmatched'
          description: 'Discovered: {{get-discovery.discovered_count}}. Matched: {{get-discovery.matched_count}}. Unmatched: {{get-discovery.unmatched_count}}'
      - name: notify-team
        type: call
        call: teams.post-message
        with:
          channel_id: it-asset-management
          text: 'Asset reconciliation: {{get-discovery.unmatched_count}} unmatched devices found. Jira: {{create-ticket.key}}'
  consumes:
  - type: http
    namespace: servicenow
    baseUri: https://comcast.service-now.com/api/now
    authentication:
      type: basic
      username: $secrets.snow_user
      password: $secrets.snow_password
    resources:
    - name: discovery
      path: /table/discovery_status/{{run_id}}
      operations:
      - name: get-discovery-results
        method: GET
  - type: http
    namespace: jira
    baseUri: https://comcast.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - name: issues
      path: /issue
      operations:
      - name: create-issue
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

When a ServiceNow P1 incident is created, sets up a Teams bridge call, pages the on-call via PagerDuty, and posts status updates to the NOC channel.

naftiko: '0.5'
info:
  label: ServiceNow Major Incident Bridge Coordinator
  description: When a ServiceNow P1 incident is created, sets up a Teams bridge call, pages the on-call via PagerDuty, and posts status updates to the NOC channel.
  tags:
  - incident-management
  - servicenow
  - microsoft-teams
  - pagerduty
capability:
  exposes:
  - type: mcp
    namespace: major-incident
    port: 8080
    tools:
    - name: coordinate-major-incident
      description: Given a ServiceNow P1 incident number, set up the major incident bridge.
      inputParameters:
      - name: incident_number
        in: body
        type: string
        description: ServiceNow P1 incident number.
      steps:
      - name: get-incident
        type: call
        call: servicenow.get-incident
        with:
          incident_number: '{{incident_number}}'
      - name: page-oncall
        type: call
        call: pagerduty.create-incident
        with:
          service_id: noc-oncall
          title: 'P1: {{get-incident.short_description}} — {{incident_number}}'
          urgency: high
      - name: post-bridge
        type: call
        call: teams.post-message
        with:
          channel_id: noc-major-incidents
          text: 'P1 BRIDGE: {{incident_number}} — {{get-incident.short_description}}. On-call paged. Join bridge immediately.'
  consumes:
  - type: http
    namespace: servicenow
    baseUri: https://comcast.service-now.com/api/now
    authentication:
      type: basic
      username: $secrets.snow_user
      password: $secrets.snow_password
    resources:
    - name: incidents
      path: /table/incident/{{incident_number}}
      operations:
      - name: get-incident
        method: GET
  - type: http
    namespace: pagerduty
    baseUri: https://api.pagerduty.com
    authentication:
      type: bearer
      token: $secrets.pagerduty_token
    resources:
    - name: incidents
      path: /incidents
      operations:
      - name: create-incident
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

Retrieves the candidate pipeline status for an open Workday job requisition and summarizes candidate stage counts for the recruiting team.

naftiko: '0.5'
info:
  label: Workday Recruiting Pipeline Summary
  description: Retrieves the candidate pipeline status for an open Workday job requisition and summarizes candidate stage counts for the recruiting team.
  tags:
  - hr
  - recruiting
  - workday
  - reporting
capability:
  exposes:
  - type: mcp
    namespace: recruiting
    port: 8080
    tools:
    - name: get-requisition-pipeline
      description: Given a Workday job requisition ID, return a stage-by-stage summary of candidates in the hiring pipeline including screened, interviewed, and offered counts.
      inputParameters:
      - name: requisition_id
        in: body
        type: string
        description: The Workday job requisition ID.
      call: workday.get-job-requisition
      with:
        requisitionId: '{{requisition_id}}'
      outputParameters:
      - name: job_title
        type: string
        mapping: $.jobRequisition.jobTitle
      - name: total_candidates
        type: number
        mapping: $.jobRequisition.candidateCount
      - name: open_since
        type: string
        mapping: $.jobRequisition.openDate
  consumes:
  - type: http
    namespace: workday
    baseUri: https://wd2-impl-services1.workday.com/ccx/api/v1
    authentication:
      type: bearer
      token: $secrets.workday_token
    resources:
    - name: job-requisitions
      path: /comcast/jobRequisitions/{{requisitionId}}
      inputParameters:
      - name: requisitionId
        in: path
      operations:
      - name: get-job-requisition
        method: GET

Retrieves the approval status and total amount of a SAP Concur expense report at Comcast.

naftiko: '0.5'
info:
  label: SAP Concur Expense Status Lookup
  description: Retrieves the approval status and total amount of a SAP Concur expense report at Comcast.
  tags:
  - finance
  - expenses
  - sap-concur
capability:
  exposes:
  - type: mcp
    namespace: expense-status
    port: 8080
    tools:
    - name: get-expense-report
      description: Given a Concur expense report ID, return its status, total amount, and approver name.
      inputParameters:
      - name: report_id
        in: body
        type: string
        description: SAP Concur expense report ID.
      call: concur.get-report
      with:
        report_id: '{{report_id}}'
      outputParameters:
      - name: status
        type: string
        mapping: $.ApprovalStatusName
      - name: total
        type: number
        mapping: $.Total
      - name: approver
        type: string
        mapping: $.ApproverName
  consumes:
  - type: http
    namespace: concur
    baseUri: https://us.api.concursolutions.com/api/v3.0
    authentication:
      type: bearer
      token: $secrets.concur_token
    resources:
    - name: reports
      path: /expense/reports/{{report_id}}
      inputParameters:
      - name: report_id
        in: path
      operations:
      - name: get-report
        method: GET

Monitors Xfinity mobile app crash rates via Datadog, creates a Jira bug when thresholds are exceeded, and notifies the mobile engineering team via Microsoft Teams.

naftiko: '0.5'
info:
  label: Xfinity App Crash Rate Monitor
  description: Monitors Xfinity mobile app crash rates via Datadog, creates a Jira bug when thresholds are exceeded, and notifies the mobile engineering team via Microsoft Teams.
  tags:
  - mobile
  - observability
  - datadog
  - jira
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: app-crash-monitor
    port: 8080
    tools:
    - name: handle-crash-rate-alert
      description: Given a Datadog alert for app crash rate spike, create bug and notify.
      inputParameters:
      - name: alert_id
        in: body
        type: string
        description: Datadog alert ID.
      - name: app_version
        in: body
        type: string
        description: App version affected.
      steps:
      - name: get-alert
        type: call
        call: datadog.get-monitor
        with:
          alert_id: '{{alert_id}}'
      - name: create-bug
        type: call
        call: jira.create-issue
        with:
          project: MOBILE
          summary: 'Crash rate spike: Xfinity app {{app_version}}'
          issue_type: Bug
          description: '{{get-alert.message}}'
      - name: notify-mobile
        type: call
        call: teams.post-message
        with:
          channel_id: mobile-engineering
          text: 'Crash rate alert: Xfinity app {{app_version}}. Jira: {{create-bug.key}}'
  consumes:
  - type: http
    namespace: datadog
    baseUri: https://api.datadoghq.com/api/v1
    authentication:
      type: bearer
      token: $secrets.datadog_api_key
    resources:
    - name: monitors
      path: /monitor/{{alert_id}}
      operations:
      - name: get-monitor
        method: GET
  - type: http
    namespace: jira
    baseUri: https://comcast.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - name: issues
      path: /issue
      operations:
      - name: create-issue
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

When an employee termination is processed in Workday, deactivates their Okta account, closes ServiceNow assignments, and logs the offboarding in Splunk.

naftiko: '0.5'
info:
  label: Workday Termination Access Revocation
  description: When an employee termination is processed in Workday, deactivates their Okta account, closes ServiceNow assignments, and logs the offboarding in Splunk.
  tags:
  - hr
  - offboarding
  - workday
  - okta
  - servicenow
  - splunk
capability:
  exposes:
  - type: mcp
    namespace: termination-sync
    port: 8080
    tools:
    - name: process-termination
      description: Given a Workday employee ID for a terminated employee, revoke all access.
      inputParameters:
      - name: employee_id
        in: body
        type: string
        description: Workday employee ID.
      steps:
      - name: get-worker
        type: call
        call: workday.get-worker
        with:
          employee_id: '{{employee_id}}'
      - name: deactivate-okta
        type: call
        call: okta.deactivate-user
        with:
          user_email: '{{get-worker.email}}'
      - name: close-assignments
        type: call
        call: servicenow.close-user-tickets
        with:
          user_email: '{{get-worker.email}}'
      - name: log-offboarding
        type: call
        call: splunk.index-event
        with:
          source: hr-offboarding
          event: 'Terminated: {{get-worker.name}} ({{get-worker.email}}). Okta deactivated. ServiceNow closed.'
  consumes:
  - type: http
    namespace: workday
    baseUri: https://wd5-impl-services1.workday.com/ccx/api/v1/comcast
    authentication:
      type: bearer
      token: $secrets.workday_token
    resources:
    - name: workers
      path: /workers/{{employee_id}}
      operations:
      - name: get-worker
        method: GET
  - type: http
    namespace: okta
    baseUri: https://comcast.okta.com/api/v1
    authentication:
      type: apikey
      key: Authorization
      value: $secrets.okta_api_token
      placement: header
    resources:
    - name: users
      path: /users/{{user_email}}/lifecycle/deactivate
      operations:
      - name: deactivate-user
        method: POST
  - type: http
    namespace: servicenow
    baseUri: https://comcast.service-now.com/api/now
    authentication:
      type: basic
      username: $secrets.snow_user
      password: $secrets.snow_password
    resources:
    - name: tickets
      path: /table/incident
      operations:
      - name: close-user-tickets
        method: PATCH
  - type: http
    namespace: splunk
    baseUri: https://splunk.comcast.com:8088
    authentication:
      type: bearer
      token: $secrets.splunk_hec_token
    resources:
    - name: events
      path: /services/collector/event
      operations:
      - name: index-event
        method: POST

Retrieves the latest pipeline run status for a Comcast Azure DevOps project.

naftiko: '0.5'
info:
  label: Azure DevOps Pipeline Status
  description: Retrieves the latest pipeline run status for a Comcast Azure DevOps project.
  tags:
  - cicd
  - azure-devops
capability:
  exposes:
  - type: mcp
    namespace: pipeline-status
    port: 8080
    tools:
    - name: get-pipeline-run
      description: Given an Azure DevOps project name and pipeline ID, return the latest run status and result.
      inputParameters:
      - name: project_name
        in: body
        type: string
        description: Azure DevOps project name.
      - name: pipeline_id
        in: body
        type: string
        description: Pipeline ID.
      call: azdo.get-run
      with:
        project_name: '{{project_name}}'
        pipeline_id: '{{pipeline_id}}'
      outputParameters:
      - name: state
        type: string
        mapping: $.value[0].state
      - name: result
        type: string
        mapping: $.value[0].result
  consumes:
  - type: http
    namespace: azdo
    baseUri: https://dev.azure.com/comcast
    authentication:
      type: basic
      username: $secrets.azdo_user
      password: $secrets.azdo_pat
    resources:
    - name: pipelines
      path: /{{project_name}}/_apis/pipelines/{{pipeline_id}}/runs
      inputParameters:
      - name: project_name
        in: path
      - name: pipeline_id
        in: path
      operations:
      - name: get-run
        method: GET

Checks Jira for release readiness by verifying all stories are done, creates a Confluence release notes page, and posts the go/no-go status to Microsoft Teams.

naftiko: '0.5'
info:
  label: Jira Release Readiness Checker
  description: Checks Jira for release readiness by verifying all stories are done, creates a Confluence release notes page, and posts the go/no-go status to Microsoft Teams.
  tags:
  - release-management
  - jira
  - confluence
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: release-readiness
    port: 8080
    tools:
    - name: check-release-readiness
      description: Given a Jira release version, verify readiness and generate release notes.
      inputParameters:
      - name: version_name
        in: body
        type: string
        description: Jira fix version name.
      - name: project_key
        in: body
        type: string
        description: Jira project key.
      steps:
      - name: get-version-issues
        type: call
        call: jira.search-version-issues
        with:
          project: '{{project_key}}'
          version: '{{version_name}}'
      - name: create-release-notes
        type: call
        call: confluence.create-page
        with:
          space_key: REL
          title: 'Release Notes: {{project_key}} {{version_name}}'
          content: 'Total: {{get-version-issues.total}}. Done: {{get-version-issues.done}}. Open: {{get-version-issues.open}}'
      - name: post-status
        type: call
        call: teams.post-message
        with:
          channel_id: release-management
          text: 'Release {{version_name}}: {{get-version-issues.done}}/{{get-version-issues.total}} done. Notes: {{create-release-notes.url}}'
  consumes:
  - type: http
    namespace: jira
    baseUri: https://comcast.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - name: search
      path: /search
      operations:
      - name: search-version-issues
        method: GET
  - type: http
    namespace: confluence
    baseUri: https://comcast.atlassian.net/wiki/api/v2
    authentication:
      type: basic
      username: $secrets.confluence_user
      password: $secrets.confluence_api_token
    resources:
    - name: pages
      path: /pages
      operations:
      - name: create-page
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

When Datadog alerts on RDS storage approaching capacity, retrieves instance details, creates a ServiceNow change request for expansion, and notifies the DBA team via Microsoft Teams.

naftiko: '0.5'
info:
  label: AWS RDS Storage Capacity Handler
  description: When Datadog alerts on RDS storage approaching capacity, retrieves instance details, creates a ServiceNow change request for expansion, and notifies the DBA team via Microsoft Teams.
  tags:
  - database
  - cloud
  - aws
  - datadog
  - servicenow
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: rds-capacity
    port: 8080
    tools:
    - name: handle-rds-capacity
      description: Given a Datadog alert for RDS storage, initiate capacity expansion.
      inputParameters:
      - name: alert_id
        in: body
        type: string
        description: Datadog alert ID.
      - name: db_instance
        in: body
        type: string
        description: RDS instance identifier.
      steps:
      - name: get-alert
        type: call
        call: datadog.get-monitor
        with:
          alert_id: '{{alert_id}}'
      - name: create-change
        type: call
        call: servicenow.create-change-request
        with:
          short_description: 'RDS storage expansion: {{db_instance}}'
          category: database
          priority: '2'
      - name: notify-dba
        type: call
        call: teams.post-message
        with:
          channel_id: dba-team
          text: 'RDS storage alert: {{db_instance}}. Change: {{create-change.number}}'
  consumes:
  - type: http
    namespace: datadog
    baseUri: https://api.datadoghq.com/api/v1
    authentication:
      type: bearer
      token: $secrets.datadog_api_key
    resources:
    - name: monitors
      path: /monitor/{{alert_id}}
      operations:
      - name: get-monitor
        method: GET
  - type: http
    namespace: servicenow
    baseUri: https://comcast.service-now.com/api/now
    authentication:
      type: basic
      username: $secrets.snow_user
      password: $secrets.snow_password
    resources:
    - name: changes
      path: /table/change_request
      operations:
      - name: create-change-request
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

When an expense report is submitted in SAP Concur, validates the amount against policy and routes the approval request to the manager via Microsoft Teams.

naftiko: '0.5'
info:
  label: SAP Concur Expense Report Approval
  description: When an expense report is submitted in SAP Concur, validates the amount against policy and routes the approval request to the manager via Microsoft Teams.
  tags:
  - finance
  - expense-management
  - sap-concur
  - microsoft-teams
  - approval
capability:
  exposes:
  - type: mcp
    namespace: expense-approval
    port: 8080
    tools:
    - name: approve-expense-report
      description: Given an SAP Concur expense report ID and manager email, retrieve report details and send an approval card to the manager in Teams.
      inputParameters:
      - name: report_id
        in: body
        type: string
        description: The SAP Concur expense report ID.
      - name: manager_email
        in: body
        type: string
        description: The Microsoft Teams UPN of the approving manager.
      steps:
      - name: get-report
        type: call
        call: concur.get-expense-report
        with:
          reportId: '{{report_id}}'
      - name: send-approval
        type: call
        call: msteams.post-message
        with:
          recipient: '{{manager_email}}'
          message: 'Expense approval needed: Report {{report_id}} for {{get-report.Total}} {{get-report.CurrencyCode}} submitted by {{get-report.OwnerName}}.'
  consumes:
  - type: http
    namespace: concur
    baseUri: https://www.concursolutions.com/api/v3.0
    authentication:
      type: bearer
      token: $secrets.concur_token
    resources:
    - name: expense-reports
      path: /expense/reports/{{reportId}}
      inputParameters:
      - name: reportId
        in: path
      operations:
      - name: get-expense-report
        method: GET
  - type: http
    namespace: msteams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - name: messages
      path: /chats/messages
      operations:
      - name: post-message
        method: POST

Aggregates broadband speed test data from Snowflake, identifies underperforming markets, and posts the report to the network engineering Teams channel.

naftiko: '0.5'
info:
  label: Broadband Speed Test Analytics Reporter
  description: Aggregates broadband speed test data from Snowflake, identifies underperforming markets, and posts the report to the network engineering Teams channel.
  tags:
  - network
  - analytics
  - snowflake
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: speed-analytics
    port: 8080
    tools:
    - name: generate-speed-report
      description: Given a market region, generate the speed test analytics report.
      inputParameters:
      - name: market_region
        in: body
        type: string
        description: Market region to analyze.
      steps:
      - name: get-speed-data
        type: call
        call: snowflake.query-speed-tests
        with:
          market_region: '{{market_region}}'
      - name: notify-engineering
        type: call
        call: teams.post-message
        with:
          channel_id: network-engineering
          text: 'Speed report: {{market_region}}. Avg download: {{get-speed-data.avg_download_mbps}} Mbps. Below-threshold: {{get-speed-data.below_threshold_pct}}%'
  consumes:
  - type: http
    namespace: snowflake
    baseUri: https://comcast.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: statements
      path: /statements
      operations:
      - name: query-speed-tests
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

Retrieves Okta users with privileged group assignments for a quarterly access review and posts the report to SharePoint for compliance records.

naftiko: '0.5'
info:
  label: Okta User Access Review
  description: Retrieves Okta users with privileged group assignments for a quarterly access review and posts the report to SharePoint for compliance records.
  tags:
  - identity
  - security
  - okta
  - sharepoint
  - access-management
capability:
  exposes:
  - type: mcp
    namespace: identity-ops
    port: 8080
    tools:
    - name: run-access-review
      description: Given an Okta group ID, retrieve all active group members and their application assignments, then upload the access review report to SharePoint.
      inputParameters:
      - name: group_id
        in: body
        type: string
        description: The Okta group ID to review for privileged access.
      - name: sharepoint_site_id
        in: body
        type: string
        description: The SharePoint site ID where the access review report should be uploaded.
      steps:
      - name: get-group-members
        type: call
        call: okta.get-group-members
        with:
          groupId: '{{group_id}}'
      - name: upload-report
        type: call
        call: sharepoint.create-file
        with:
          siteId: '{{sharepoint_site_id}}'
          fileName: access-review-{{group_id}}.json
          content: '{{get-group-members.members}}'
  consumes:
  - type: http
    namespace: okta
    baseUri: https://comcast.okta.com/api/v1
    authentication:
      type: apikey
      key: Authorization
      value: $secrets.okta_api_token
      placement: header
    resources:
    - name: group-members
      path: /groups/{{groupId}}/users
      inputParameters:
      - name: groupId
        in: path
      operations:
      - name: get-group-members
        method: GET
  - type: http
    namespace: sharepoint
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - name: files
      path: /sites/{{siteId}}/drive/root/children
      inputParameters:
      - name: siteId
        in: path
      operations:
      - name: create-file
        method: POST

When a SAP Concur expense report violates policy, retrieves violation details, creates a Jira compliance ticket, and notifies the finance team via Microsoft Teams.

naftiko: '0.5'
info:
  label: SAP Concur Policy Violation Handler
  description: When a SAP Concur expense report violates policy, retrieves violation details, creates a Jira compliance ticket, and notifies the finance team via Microsoft Teams.
  tags:
  - finance
  - compliance
  - sap-concur
  - jira
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: expense-compliance
    port: 8080
    tools:
    - name: handle-policy-violation
      description: Given a Concur report ID with policy violations, create tracking and notify.
      inputParameters:
      - name: report_id
        in: body
        type: string
        description: SAP Concur expense report ID.
      steps:
      - name: get-report
        type: call
        call: concur.get-report
        with:
          report_id: '{{report_id}}'
      - name: create-ticket
        type: call
        call: jira.create-issue
        with:
          project: FIN
          summary: 'Expense violation: {{get-report.employee_name}} — ${{get-report.total}}'
          description: 'Violation: {{get-report.violation_reason}}'
      - name: notify-finance
        type: call
        call: teams.post-message
        with:
          channel_id: finance-compliance
          text: 'Expense violation: {{get-report.employee_name}} (${{get-report.total}}). Jira: {{create-ticket.key}}'
  consumes:
  - type: http
    namespace: concur
    baseUri: https://us.api.concursolutions.com/api/v3.0
    authentication:
      type: bearer
      token: $secrets.concur_token
    resources:
    - name: reports
      path: /expense/reports/{{report_id}}
      operations:
      - name: get-report
        method: GET
  - type: http
    namespace: jira
    baseUri: https://comcast.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - name: issues
      path: /issue
      operations:
      - name: create-issue
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

When Datadog detects API gateway throttling, retrieves request metrics, creates a Jira capacity ticket, and alerts the API team via Microsoft Teams.

naftiko: '0.5'
info:
  label: Datadog API Gateway Throttle Handler
  description: When Datadog detects API gateway throttling, retrieves request metrics, creates a Jira capacity ticket, and alerts the API team via Microsoft Teams.
  tags:
  - api
  - observability
  - datadog
  - jira
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: api-throttle
    port: 8080
    tools:
    - name: handle-throttle-alert
      description: Given a Datadog alert for API throttling, investigate and create capacity ticket.
      inputParameters:
      - name: alert_id
        in: body
        type: string
        description: Datadog alert ID.
      - name: api_name
        in: body
        type: string
        description: API service name.
      steps:
      - name: get-alert
        type: call
        call: datadog.get-monitor
        with:
          alert_id: '{{alert_id}}'
      - name: create-ticket
        type: call
        call: jira.create-issue
        with:
          project: API
          summary: 'Throttling: {{api_name}}'
          description: '{{get-alert.message}}'
      - name: notify-api-team
        type: call
        call: teams.post-message
        with:
          channel_id: api-platform
          text: 'API throttling: {{api_name}}. Jira: {{create-ticket.key}}'
  consumes:
  - type: http
    namespace: datadog
    baseUri: https://api.datadoghq.com/api/v1
    authentication:
      type: bearer
      token: $secrets.datadog_api_key
    resources:
    - name: monitors
      path: /monitor/{{alert_id}}
      operations:
      - name: get-monitor
        method: GET
  - type: http
    namespace: jira
    baseUri: https://comcast.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - name: issues
      path: /issue
      operations:
      - name: create-issue
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

After a ServiceNow incident is resolved, extracts lessons learned and updates the Confluence runbook, then notifies the engineering team via Microsoft Teams.

naftiko: '0.5'
info:
  label: Confluence Incident Runbook Updater
  description: After a ServiceNow incident is resolved, extracts lessons learned and updates the Confluence runbook, then notifies the engineering team via Microsoft Teams.
  tags:
  - knowledge-management
  - servicenow
  - confluence
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: runbook-ops
    port: 8080
    tools:
    - name: update-runbook
      description: Given a resolved ServiceNow incident, update the related Confluence runbook.
      inputParameters:
      - name: incident_number
        in: body
        type: string
        description: ServiceNow incident number.
      steps:
      - name: get-incident
        type: call
        call: servicenow.get-incident
        with:
          incident_number: '{{incident_number}}'
      - name: update-page
        type: call
        call: confluence.update-page
        with:
          page_id: '{{get-incident.runbook_id}}'
          content: 'Lessons from {{incident_number}}: {{get-incident.close_notes}}'
      - name: notify-team
        type: call
        call: teams.post-message
        with:
          channel_id: sre-team
          text: 'Runbook updated from {{incident_number}}. Page: {{get-incident.runbook_id}}'
  consumes:
  - type: http
    namespace: servicenow
    baseUri: https://comcast.service-now.com/api/now
    authentication:
      type: basic
      username: $secrets.snow_user
      password: $secrets.snow_password
    resources:
    - name: incidents
      path: /table/incident/{{incident_number}}
      operations:
      - name: get-incident
        method: GET
  - type: http
    namespace: confluence
    baseUri: https://comcast.atlassian.net/wiki/api/v2
    authentication:
      type: basic
      username: $secrets.confluence_user
      password: $secrets.confluence_api_token
    resources:
    - name: pages
      path: /pages/{{page_id}}
      operations:
      - name: update-page
        method: PUT
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

When a Salesforce service case is escalated by a high-value subscriber, creates a ServiceNow priority ticket and notifies the enterprise support team in Microsoft Teams.

naftiko: '0.5'
info:
  label: Salesforce Case Escalation Handler
  description: When a Salesforce service case is escalated by a high-value subscriber, creates a ServiceNow priority ticket and notifies the enterprise support team in Microsoft Teams.
  tags:
  - customer-support
  - crm
  - salesforce
  - servicenow
  - microsoft-teams
  - escalation
capability:
  exposes:
  - type: mcp
    namespace: support-ops
    port: 8080
    tools:
    - name: handle-case-escalation
      description: Given a Salesforce case ID, retrieve case details and escalate to ServiceNow with a Teams notification to the enterprise support team.
      inputParameters:
      - name: case_id
        in: body
        type: string
        description: The Salesforce case record ID.
      steps:
      - name: get-case
        type: call
        call: salesforce.get-case
        with:
          caseId: '{{case_id}}'
      - name: create-snow-ticket
        type: call
        call: servicenow.create-incident
        with:
          short_description: 'Escalated case: {{get-case.Subject}}'
          description: 'Salesforce Case: {{case_id}}

            Account: {{get-case.AccountName}}

            Description: {{get-case.Description}}'
          urgency: '2'
      - name: notify-enterprise-support
        type: call
        call: msteams.post-channel-message
        with:
          channelId: enterprise-support
          message: 'Case escalation: {{get-case.Subject}} | Account: {{get-case.AccountName}} | ServiceNow: {{create-snow-ticket.number}}'
  consumes:
  - type: http
    namespace: salesforce
    baseUri: https://comcast.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: cases
      path: /sobjects/Case/{{caseId}}
      inputParameters:
      - name: caseId
        in: path
      operations:
      - name: get-case
        method: GET
  - type: http
    namespace: servicenow
    baseUri: https://comcast.service-now.com/api/now
    authentication:
      type: basic
      username: $secrets.snow_user
      password: $secrets.snow_password
    resources:
    - name: incidents
      path: /table/incident
      operations:
      - name: create-incident
        method: POST
  - type: http
    namespace: msteams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - name: channel-messages
      path: /teams/channels/{{channelId}}/messages
      inputParameters:
      - name: channelId
        in: path
      operations:
      - name: post-channel-message
        method: POST

When a new deployment is released via GitHub Actions, creates a Datadog deployment marker to annotate the release on all monitoring dashboards.

naftiko: '0.5'
info:
  label: Datadog Dashboard Annotation on Deployment
  description: When a new deployment is released via GitHub Actions, creates a Datadog deployment marker to annotate the release on all monitoring dashboards.
  tags:
  - devops
  - observability
  - github
  - datadog
  - deployment
capability:
  exposes:
  - type: mcp
    namespace: deployment-ops
    port: 8080
    tools:
    - name: annotate-deployment
      description: Given a GitHub repository, branch, and commit SHA, create a Datadog deployment marker to annotate dashboards at the deployment timestamp.
      inputParameters:
      - name: repo
        in: body
        type: string
        description: GitHub repository name in owner/repo format.
      - name: branch
        in: body
        type: string
        description: The branch that was deployed.
      - name: commit_sha
        in: body
        type: string
        description: The git commit SHA being deployed.
      - name: service_name
        in: body
        type: string
        description: The Datadog service name to annotate.
      steps:
      - name: create-dd-marker
        type: call
        call: datadog.create-event
        with:
          title: 'Deployment: {{service_name}} {{commit_sha}}'
          text: 'Repo: {{repo}} | Branch: {{branch}} | Commit: {{commit_sha}}'
          alert_type: info
      - name: notify-team
        type: call
        call: msteams.post-channel-message
        with:
          channelId: deployments
          message: 'Deployment annotated in Datadog: {{service_name}} {{commit_sha}} from {{branch}}.'
  consumes:
  - type: http
    namespace: datadog
    baseUri: https://api.datadoghq.com/api/v1
    authentication:
      type: apikey
      key: DD-API-KEY
      value: $secrets.datadog_api_key
      placement: header
    resources:
    - name: events
      path: /events
      operations:
      - name: create-event
        method: POST
  - type: http
    namespace: msteams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - name: channel-messages
      path: /teams/channels/{{channelId}}/messages
      inputParameters:
      - name: channelId
        in: path
      operations:
      - name: post-channel-message
        method: POST

Retrieves completed NPS survey responses from Salesforce and posts a weekly satisfaction summary to the customer success Teams channel.

naftiko: '0.5'
info:
  label: Salesforce NPS Score Campaign Sync
  description: Retrieves completed NPS survey responses from Salesforce and posts a weekly satisfaction summary to the customer success Teams channel.
  tags:
  - crm
  - customer-success
  - salesforce
  - microsoft-teams
  - reporting
capability:
  exposes:
  - type: mcp
    namespace: cx-reporting
    port: 8080
    tools:
    - name: publish-nps-digest
      description: Given a date range, retrieve NPS survey results from Salesforce and post a satisfaction score summary to the customer success Teams channel.
      inputParameters:
      - name: start_date
        in: body
        type: string
        description: Report start date in YYYY-MM-DD format.
      - name: end_date
        in: body
        type: string
        description: Report end date in YYYY-MM-DD format.
      steps:
      - name: get-nps-results
        type: call
        call: salesforce.get-nps-surveys
        with:
          startDate: '{{start_date}}'
          endDate: '{{end_date}}'
      - name: post-digest
        type: call
        call: msteams.post-channel-message
        with:
          channelId: customer-success
          message: 'NPS digest ({{start_date}} to {{end_date}}): Score={{get-nps-results.npsScore}}, Promoters={{get-nps-results.promoters}}, Detractors={{get-nps-results.detractors}}'
  consumes:
  - type: http
    namespace: salesforce
    baseUri: https://comcast.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: nps-surveys
      path: /query
      inputParameters:
      - name: startDate
        in: query
      - name: endDate
        in: query
      operations:
      - name: get-nps-surveys
        method: GET
  - type: http
    namespace: msteams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - name: channel-messages
      path: /teams/channels/{{channelId}}/messages
      inputParameters:
      - name: channelId
        in: path
      operations:
      - name: post-channel-message
        method: POST

Retrieves details of a CrowdStrike endpoint detection including severity, tactic, and affected hostname.

naftiko: '0.5'
info:
  label: CrowdStrike Endpoint Detection Lookup
  description: Retrieves details of a CrowdStrike endpoint detection including severity, tactic, and affected hostname.
  tags:
  - security
  - endpoint
  - crowdstrike
capability:
  exposes:
  - type: mcp
    namespace: endpoint-detections
    port: 8080
    tools:
    - name: get-detection
      description: Given a CrowdStrike detection ID, return the severity, tactic, technique, and hostname.
      inputParameters:
      - name: detection_id
        in: body
        type: string
        description: CrowdStrike detection ID.
      call: crowdstrike.get-detection
      with:
        detection_id: '{{detection_id}}'
      outputParameters:
      - name: severity
        type: string
        mapping: $.resources[0].severity
      - name: tactic
        type: string
        mapping: $.resources[0].tactic
      - name: hostname
        type: string
        mapping: $.resources[0].hostname
  consumes:
  - type: http
    namespace: crowdstrike
    baseUri: https://api.crowdstrike.com
    authentication:
      type: bearer
      token: $secrets.crowdstrike_token
    resources:
    - name: detections
      path: /detects/entities/summaries/GET/v1
      operations:
      - name: get-detection
        method: POST

When CrowdStrike detects ransomware activity, isolates the affected endpoint, creates a ServiceNow P1 security incident, and alerts the SOC and CISO via Microsoft Teams.

naftiko: '0.5'
info:
  label: CrowdStrike Ransomware Containment
  description: When CrowdStrike detects ransomware activity, isolates the affected endpoint, creates a ServiceNow P1 security incident, and alerts the SOC and CISO via Microsoft Teams.
  tags:
  - security
  - ransomware
  - crowdstrike
  - servicenow
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: ransomware-response
    port: 8080
    tools:
    - name: contain-ransomware
      description: Given a CrowdStrike detection ID, contain the ransomware and escalate.
      inputParameters:
      - name: detection_id
        in: body
        type: string
        description: CrowdStrike detection ID.
      steps:
      - name: get-detection
        type: call
        call: crowdstrike.get-detection
        with:
          detection_id: '{{detection_id}}'
      - name: isolate-host
        type: call
        call: crowdstrike.contain-host
        with:
          host_id: '{{get-detection.host_id}}'
      - name: create-incident
        type: call
        call: servicenow.create-incident
        with:
          short_description: 'Ransomware: {{get-detection.malware_family}} on {{get-detection.hostname}}'
          urgency: '1'
          impact: '1'
      - name: alert-soc
        type: call
        call: teams.post-message
        with:
          channel_id: soc-critical
          text: 'RANSOMWARE: {{get-detection.hostname}} isolated. Family: {{get-detection.malware_family}}. ServiceNow: {{create-incident.number}}'
  consumes:
  - type: http
    namespace: crowdstrike
    baseUri: https://api.crowdstrike.com
    authentication:
      type: bearer
      token: $secrets.crowdstrike_token
    resources:
    - name: detections
      path: /detects/entities/summaries/GET/v1
      operations:
      - name: get-detection
        method: POST
    - name: hosts
      path: /hosts/entities/host-actions/v1
      operations:
      - name: contain-host
        method: POST
  - type: http
    namespace: servicenow
    baseUri: https://comcast.service-now.com/api/now
    authentication:
      type: basic
      username: $secrets.snow_user
      password: $secrets.snow_password
    resources:
    - name: incidents
      path: /table/incident
      operations:
      - name: create-incident
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

On a protected-branch GitHub Actions failure, creates a Jira bug, posts an alert to the engineering Teams channel, and logs an event in Datadog.

naftiko: '0.5'
info:
  label: GitHub Actions Pipeline Failure Handler
  description: On a protected-branch GitHub Actions failure, creates a Jira bug, posts an alert to the engineering Teams channel, and logs an event in Datadog.
  tags:
  - devops
  - cicd
  - github
  - jira
  - datadog
  - microsoft-teams
  - incident-response
capability:
  exposes:
  - type: mcp
    namespace: devops-cicd
    port: 8080
    tools:
    - name: handle-pipeline-failure
      description: Given a GitHub Actions workflow failure, create a Jira bug, send a Datadog event marker, and alert the engineering Teams channel.
      inputParameters:
      - name: repo
        in: body
        type: string
        description: GitHub repository in owner/repo format.
      - name: workflow_name
        in: body
        type: string
        description: The name of the failed GitHub Actions workflow.
      - name: branch
        in: body
        type: string
        description: The branch on which the failure occurred.
      - name: run_id
        in: body
        type: string
        description: The GitHub Actions workflow run ID.
      steps:
      - name: get-run-details
        type: call
        call: github.get-workflow-run
        with:
          repo: '{{repo}}'
          run_id: '{{run_id}}'
      - name: create-jira-bug
        type: call
        call: jira.create-issue
        with:
          projectKey: ENG
          issuetype: Bug
          summary: '[CI Failure] {{repo}} / {{branch}} — {{workflow_name}}'
          description: 'Run: {{run_id}}

            Conclusion: {{get-run-details.conclusion}}'
      - name: log-datadog
        type: call
        call: datadog.create-event
        with:
          title: 'CI Failure: {{repo}} {{workflow_name}}'
          text: 'Branch: {{branch}}, Run: {{run_id}}'
          alert_type: error
      - name: alert-team
        type: call
        call: msteams.post-channel-message
        with:
          channelId: engineering-alerts
          message: 'CI Failure: {{repo}} | Branch: {{branch}} | Workflow: {{workflow_name}} | Jira: {{create-jira-bug.key}}'
  consumes:
  - type: http
    namespace: github
    baseUri: https://api.github.com
    authentication:
      type: bearer
      token: $secrets.github_token
    resources:
    - name: workflow-runs
      path: /repos/{{repo}}/actions/runs/{{run_id}}
      inputParameters:
      - name: repo
        in: path
      - name: run_id
        in: path
      operations:
      - name: get-workflow-run
        method: GET
  - type: http
    namespace: jira
    baseUri: https://comcast.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - name: issues
      path: /issue
      operations:
      - name: create-issue
        method: POST
  - type: http
    namespace: datadog
    baseUri: https://api.datadoghq.com/api/v1
    authentication:
      type: apikey
      key: DD-API-KEY
      value: $secrets.datadog_api_key
      placement: header
    resources:
    - name: events
      path: /events
      operations:
      - name: create-event
        method: POST
  - type: http
    namespace: msteams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - name: channel-messages
      path: /teams/channels/{{channelId}}/messages
      inputParameters:
      - name: channelId
        in: path
      operations:
      - name: post-channel-message
        method: POST

Monitors subscriber data quality in Snowflake, identifies anomalies, creates Jira tickets for the data team, and posts alerts to the data-ops Teams channel.

naftiko: '0.5'
info:
  label: Snowflake Subscriber Data Quality Monitor
  description: Monitors subscriber data quality in Snowflake, identifies anomalies, creates Jira tickets for the data team, and posts alerts to the data-ops Teams channel.
  tags:
  - data-quality
  - snowflake
  - jira
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: data-quality
    port: 8080
    tools:
    - name: check-data-quality
      description: Given a Snowflake table name, run quality checks and report anomalies.
      inputParameters:
      - name: table_name
        in: body
        type: string
        description: Snowflake table name.
      steps:
      - name: run-checks
        type: call
        call: snowflake.run-quality-checks
        with:
          table_name: '{{table_name}}'
      - name: create-ticket
        type: call
        call: jira.create-issue
        with:
          project: DATA
          summary: 'Data quality: {{table_name}} — {{run-checks.anomaly_count}} anomalies'
          description: 'Null rate: {{run-checks.null_rate}}%. Duplicate rate: {{run-checks.duplicate_rate}}%'
      - name: notify-team
        type: call
        call: teams.post-message
        with:
          channel_id: data-ops
          text: 'Data quality: {{table_name}}. {{run-checks.anomaly_count}} anomalies. Jira: {{create-ticket.key}}'
  consumes:
  - type: http
    namespace: snowflake
    baseUri: https://comcast.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: statements
      path: /statements
      operations:
      - name: run-quality-checks
        method: POST
  - type: http
    namespace: jira
    baseUri: https://comcast.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - name: issues
      path: /issue
      operations:
      - name: create-issue
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

When Datadog detects database connection pool exhaustion, retrieves metrics, creates a ServiceNow incident, and notifies the DBA team via Microsoft Teams.

naftiko: '0.5'
info:
  label: Datadog Database Connection Pool Alert
  description: When Datadog detects database connection pool exhaustion, retrieves metrics, creates a ServiceNow incident, and notifies the DBA team via Microsoft Teams.
  tags:
  - database
  - observability
  - datadog
  - servicenow
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: db-pool-alert
    port: 8080
    tools:
    - name: handle-pool-exhaustion
      description: Given a Datadog alert for connection pool issues, investigate and escalate.
      inputParameters:
      - name: alert_id
        in: body
        type: string
        description: Datadog alert ID.
      - name: db_host
        in: body
        type: string
        description: Database hostname.
      steps:
      - name: get-alert
        type: call
        call: datadog.get-monitor
        with:
          alert_id: '{{alert_id}}'
      - name: create-incident
        type: call
        call: servicenow.create-incident
        with:
          short_description: 'DB pool exhaustion: {{db_host}}'
          urgency: '2'
          description: '{{get-alert.message}}'
      - name: notify-dba
        type: call
        call: teams.post-message
        with:
          channel_id: dba-team
          text: 'DB pool alert: {{db_host}}. ServiceNow: {{create-incident.number}}'
  consumes:
  - type: http
    namespace: datadog
    baseUri: https://api.datadoghq.com/api/v1
    authentication:
      type: bearer
      token: $secrets.datadog_api_key
    resources:
    - name: monitors
      path: /monitor/{{alert_id}}
      operations:
      - name: get-monitor
        method: GET
  - type: http
    namespace: servicenow
    baseUri: https://comcast.service-now.com/api/now
    authentication:
      type: basic
      username: $secrets.snow_user
      password: $secrets.snow_password
    resources:
    - name: incidents
      path: /table/incident
      operations:
      - name: create-incident
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

Retrieves an employee profile from Workday including job title, department, manager name, and hire date.

naftiko: '0.5'
info:
  label: Workday Employee Profile Lookup
  description: Retrieves an employee profile from Workday including job title, department, manager name, and hire date.
  tags:
  - hr
  - workday
capability:
  exposes:
  - type: mcp
    namespace: employee-profiles
    port: 8080
    tools:
    - name: get-employee-profile
      description: Given a Workday employee ID, return the employee profile details.
      inputParameters:
      - name: employee_id
        in: body
        type: string
        description: Workday employee ID.
      call: workday.get-worker
      with:
        employee_id: '{{employee_id}}'
      outputParameters:
      - name: job_title
        type: string
        mapping: $.jobTitle
      - name: department
        type: string
        mapping: $.department
      - name: manager
        type: string
        mapping: $.manager
      - name: hire_date
        type: string
        mapping: $.hireDate
  consumes:
  - type: http
    namespace: workday
    baseUri: https://wd5-impl-services1.workday.com/ccx/api/v1/comcast
    authentication:
      type: bearer
      token: $secrets.workday_token
    resources:
    - name: workers
      path: /workers/{{employee_id}}
      inputParameters:
      - name: employee_id
        in: path
      operations:
      - name: get-worker
        method: GET

Coordinates bulk DOCSIS modem firmware upgrades by verifying compatibility, creating a ServiceNow change request, and scheduling the maintenance window via PagerDuty.

naftiko: '0.5'
info:
  label: DOCSIS Modem Firmware Upgrade Coordinator
  description: Coordinates bulk DOCSIS modem firmware upgrades by verifying compatibility, creating a ServiceNow change request, and scheduling the maintenance window via PagerDuty.
  tags:
  - network
  - cable
  - firmware
  - servicenow
  - pagerduty
capability:
  exposes:
  - type: mcp
    namespace: modem-firmware
    port: 8080
    tools:
    - name: coordinate-modem-upgrade
      description: Given a modem model and target firmware version, coordinate the upgrade across affected devices.
      inputParameters:
      - name: modem_model
        in: body
        type: string
        description: DOCSIS modem model identifier.
      - name: target_firmware
        in: body
        type: string
        description: Target firmware version.
      steps:
      - name: create-change
        type: call
        call: servicenow.create-change-request
        with:
          short_description: 'DOCSIS firmware upgrade: {{modem_model}} to {{target_firmware}}'
          category: network
          priority: '3'
      - name: schedule-maintenance
        type: call
        call: pagerduty.create-maintenance-window
        with:
          service_id: cable-network-ops
          description: 'Modem firmware: {{modem_model}} — CHG: {{create-change.number}}'
  consumes:
  - type: http
    namespace: servicenow
    baseUri: https://comcast.service-now.com/api/now
    authentication:
      type: basic
      username: $secrets.snow_user
      password: $secrets.snow_password
    resources:
    - name: changes
      path: /table/change_request
      operations:
      - name: create-change-request
        method: POST
  - type: http
    namespace: pagerduty
    baseUri: https://api.pagerduty.com
    authentication:
      type: bearer
      token: $secrets.pagerduty_token
    resources:
    - name: maintenance
      path: /maintenance_windows
      operations:
      - name: create-maintenance-window
        method: POST

Detects infrastructure drift in Terraform Cloud, creates a Jira ticket, triggers a remediation run, and notifies the platform team via Microsoft Teams.

naftiko: '0.5'
info:
  label: Terraform Infrastructure Drift Remediator
  description: Detects infrastructure drift in Terraform Cloud, creates a Jira ticket, triggers a remediation run, and notifies the platform team via Microsoft Teams.
  tags:
  - infrastructure
  - terraform
  - jira
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: drift-remediation
    port: 8080
    tools:
    - name: remediate-drift
      description: Given a Terraform workspace with drift, initiate remediation.
      inputParameters:
      - name: workspace_name
        in: body
        type: string
        description: Terraform workspace name.
      - name: drift_summary
        in: body
        type: string
        description: Summary of detected drift.
      steps:
      - name: get-workspace
        type: call
        call: terraform.get-workspace
        with:
          workspace_name: '{{workspace_name}}'
      - name: create-ticket
        type: call
        call: jira.create-issue
        with:
          project: INFRA
          summary: 'Drift: {{workspace_name}}'
          description: '{{drift_summary}}'
      - name: trigger-run
        type: call
        call: terraform.create-run
        with:
          workspace_id: '{{get-workspace.id}}'
          message: Drift fix — {{create-ticket.key}}
      - name: notify-team
        type: call
        call: teams.post-message
        with:
          channel_id: platform-engineering
          text: 'Drift: {{workspace_name}}. Jira: {{create-ticket.key}}. Run: {{trigger-run.id}}'
  consumes:
  - type: http
    namespace: terraform
    baseUri: https://app.terraform.io/api/v2
    authentication:
      type: bearer
      token: $secrets.terraform_token
    resources:
    - name: workspaces
      path: /organizations/comcast/workspaces/{{workspace_name}}
      operations:
      - name: get-workspace
        method: GET
    - name: runs
      path: /runs
      operations:
      - name: create-run
        method: POST
  - type: http
    namespace: jira
    baseUri: https://comcast.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - name: issues
      path: /issue
      operations:
      - name: create-issue
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

Retrieves the current sprint status and issue breakdown for a Comcast engineering Jira project.

naftiko: '0.5'
info:
  label: Jira Project Status Lookup
  description: Retrieves the current sprint status and issue breakdown for a Comcast engineering Jira project.
  tags:
  - project-management
  - jira
capability:
  exposes:
  - type: mcp
    namespace: project-status
    port: 8080
    tools:
    - name: get-project-status
      description: Given a Jira project key, return the active sprint name, total issues, and done count.
      inputParameters:
      - name: project_key
        in: body
        type: string
        description: Jira project key (e.g., XFIN, STREAM).
      call: jira.get-board-sprint
      with:
        project_key: '{{project_key}}'
      outputParameters:
      - name: sprint_name
        type: string
        mapping: $.values[0].name
      - name: total_issues
        type: number
        mapping: $.values[0].total
      - name: done_count
        type: number
        mapping: $.values[0].done
  consumes:
  - type: http
    namespace: jira
    baseUri: https://comcast.atlassian.net/rest/agile/1.0
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - name: sprints
      path: /board/{{project_key}}/sprint
      inputParameters:
      - name: project_key
        in: path
      operations:
      - name: get-board-sprint
        method: GET

When Splunk detects a log volume anomaly exceeding a threshold, creates a Jira bug for the owning team and posts an alert to the engineering Teams channel.

naftiko: '0.5'
info:
  label: Splunk Log Anomaly to Jira
  description: When Splunk detects a log volume anomaly exceeding a threshold, creates a Jira bug for the owning team and posts an alert to the engineering Teams channel.
  tags:
  - observability
  - devops
  - splunk
  - jira
  - microsoft-teams
  - monitoring
capability:
  exposes:
  - type: mcp
    namespace: log-monitoring
    port: 8080
    tools:
    - name: handle-log-anomaly
      description: Given a Splunk alert and affected service name, create a Jira bug and notify the engineering Teams channel with log anomaly details.
      inputParameters:
      - name: service_name
        in: body
        type: string
        description: The service or application generating the anomalous log volume.
      - name: alert_count
        in: body
        type: integer
        description: Number of error events detected in the anomaly window.
      - name: time_window
        in: body
        type: string
        description: The time window of the anomaly, e.g. last 15 minutes.
      steps:
      - name: create-jira-bug
        type: call
        call: jira.create-issue
        with:
          projectKey: OPS
          issuetype: Bug
          summary: 'Log anomaly: {{service_name}} — {{alert_count}} errors in {{time_window}}'
          description: 'Service: {{service_name}}

            Error count: {{alert_count}}

            Window: {{time_window}}'
      - name: alert-engineering
        type: call
        call: msteams.post-channel-message
        with:
          channelId: engineering-alerts
          message: 'Splunk anomaly: {{service_name}} — {{alert_count}} errors in {{time_window}} | Jira: {{create-jira-bug.key}}'
  consumes:
  - type: http
    namespace: jira
    baseUri: https://comcast.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - name: issues
      path: /issue
      operations:
      - name: create-issue
        method: POST
  - type: http
    namespace: msteams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - name: channel-messages
      path: /teams/channels/{{channelId}}/messages
      inputParameters:
      - name: channelId
        in: path
      operations:
      - name: post-channel-message
        method: POST

When a new hire record appears in Workday, provisions Okta account, creates a ServiceNow equipment request, and notifies the hiring manager via Microsoft Teams.

naftiko: '0.5'
info:
  label: Workday New Hire IT Provisioning
  description: When a new hire record appears in Workday, provisions Okta account, creates a ServiceNow equipment request, and notifies the hiring manager via Microsoft Teams.
  tags:
  - hr
  - onboarding
  - workday
  - okta
  - servicenow
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: hire-provisioning
    port: 8080
    tools:
    - name: provision-new-hire
      description: Given a Workday employee ID for a new hire, provision IT resources.
      inputParameters:
      - name: employee_id
        in: body
        type: string
        description: Workday employee ID.
      steps:
      - name: get-worker
        type: call
        call: workday.get-worker
        with:
          employee_id: '{{employee_id}}'
      - name: create-okta-user
        type: call
        call: okta.create-user
        with:
          email: '{{get-worker.email}}'
          first_name: '{{get-worker.first_name}}'
          last_name: '{{get-worker.last_name}}'
          department: '{{get-worker.department}}'
      - name: create-equipment-request
        type: call
        call: servicenow.create-request
        with:
          short_description: 'New hire equipment: {{get-worker.name}}'
          description: 'Department: {{get-worker.department}}. Start date: {{get-worker.start_date}}'
      - name: notify-manager
        type: call
        call: teams.post-message
        with:
          channel_id: hr-onboarding
          text: 'IT provisioned for {{get-worker.name}}: Okta created, equipment requested ({{create-equipment-request.number}}).'
  consumes:
  - type: http
    namespace: workday
    baseUri: https://wd5-impl-services1.workday.com/ccx/api/v1/comcast
    authentication:
      type: bearer
      token: $secrets.workday_token
    resources:
    - name: workers
      path: /workers/{{employee_id}}
      operations:
      - name: get-worker
        method: GET
  - type: http
    namespace: okta
    baseUri: https://comcast.okta.com/api/v1
    authentication:
      type: apikey
      key: Authorization
      value: $secrets.okta_api_token
      placement: header
    resources:
    - name: users
      path: /users
      operations:
      - name: create-user
        method: POST
  - type: http
    namespace: servicenow
    baseUri: https://comcast.service-now.com/api/now
    authentication:
      type: basic
      username: $secrets.snow_user
      password: $secrets.snow_password
    resources:
    - name: requests
      path: /table/sc_request
      operations:
      - name: create-request
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

Retrieves Comcast subscriber account details from Salesforce Service Cloud given an account number, returning service tier, billing status, and open cases.

naftiko: '0.5'
info:
  label: Customer Subscriber Lookup
  description: Retrieves Comcast subscriber account details from Salesforce Service Cloud given an account number, returning service tier, billing status, and open cases.
  tags:
  - crm
  - customer-support
  - salesforce
capability:
  exposes:
  - type: mcp
    namespace: subscriber-ops
    port: 8080
    tools:
    - name: get-subscriber-account
      description: Given a Comcast subscriber account number, retrieve account details including service tier, billing status, equipment, and open support cases from Salesforce Service Cloud.
      inputParameters:
      - name: account_number
        in: body
        type: string
        description: The Comcast customer account number.
      call: salesforce.get-account
      with:
        accountNumber: '{{account_number}}'
      outputParameters:
      - name: account_id
        type: string
        mapping: $.records[0].Id
      - name: subscriber_name
        type: string
        mapping: $.records[0].Name
      - name: service_tier
        type: string
        mapping: $.records[0].ServiceTier__c
      - name: billing_status
        type: string
        mapping: $.records[0].BillingStatus__c
  consumes:
  - type: http
    namespace: salesforce
    baseUri: https://comcast.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: accounts
      path: /query
      inputParameters:
      - name: accountNumber
        in: query
      operations:
      - name: get-account
        method: GET

Retrieves full incident details including priority, assigned group, and resolution notes from ServiceNow.

naftiko: '0.5'
info:
  label: ServiceNow Incident Detail Lookup
  description: Retrieves full incident details including priority, assigned group, and resolution notes from ServiceNow.
  tags:
  - itsm
  - servicenow
capability:
  exposes:
  - type: mcp
    namespace: incident-details
    port: 8080
    tools:
    - name: get-incident-detail
      description: Given a ServiceNow incident number, return priority, assigned group, state, and resolution notes.
      inputParameters:
      - name: incident_number
        in: body
        type: string
        description: ServiceNow incident number.
      call: servicenow.get-incident
      with:
        incident_number: '{{incident_number}}'
      outputParameters:
      - name: priority
        type: string
        mapping: $.result.priority
      - name: assigned_to
        type: string
        mapping: $.result.assigned_to
      - name: state
        type: string
        mapping: $.result.state
  consumes:
  - type: http
    namespace: servicenow
    baseUri: https://comcast.service-now.com/api/now
    authentication:
      type: basic
      username: $secrets.snow_user
      password: $secrets.snow_password
    resources:
    - name: incidents
      path: /table/incident/{{incident_number}}
      inputParameters:
      - name: incident_number
        in: path
      operations:
      - name: get-incident
        method: GET

Returns the current paid time-off and vacation accrual balances for a Comcast employee from Workday, for use in absence planning.

naftiko: '0.5'
info:
  label: Workday Time-Off Balance Lookup
  description: Returns the current paid time-off and vacation accrual balances for a Comcast employee from Workday, for use in absence planning.
  tags:
  - hr
  - workday
  - absence-management
capability:
  exposes:
  - type: mcp
    namespace: hr-absence
    port: 8080
    tools:
    - name: get-time-off-balance
      description: Given a Workday employee ID, return current accrued vacation, PTO, and sick leave balances. Use when an employee or manager needs to verify available time before approving an absence request.
      inputParameters:
      - name: employee_id
        in: body
        type: string
        description: The Workday worker ID.
      call: workday.get-leave-balance
      with:
        worker_id: '{{employee_id}}'
      outputParameters:
      - name: vacation_days
        type: number
        mapping: $.leaveBalances.vacation
      - name: pto_days
        type: number
        mapping: $.leaveBalances.pto
      - name: sick_days
        type: number
        mapping: $.leaveBalances.sick
  consumes:
  - type: http
    namespace: workday
    baseUri: https://wd2-impl-services1.workday.com/ccx/api/v1
    authentication:
      type: bearer
      token: $secrets.workday_token
    resources:
    - name: leave-balances
      path: /comcast/workers/{{worker_id}}/leaveBalance
      inputParameters:
      - name: worker_id
        in: path
      operations:
      - name: get-leave-balance
        method: GET

Runs data quality checks against Snowflake production tables and creates ServiceNow incidents for any datasets that fail freshness or completeness thresholds.

naftiko: '0.5'
info:
  label: Snowflake Data Quality Monitor
  description: Runs data quality checks against Snowflake production tables and creates ServiceNow incidents for any datasets that fail freshness or completeness thresholds.
  tags:
  - data
  - analytics
  - snowflake
  - servicenow
  - data-quality
capability:
  exposes:
  - type: mcp
    namespace: data-quality
    port: 8080
    tools:
    - name: check-data-quality
      description: Given a Snowflake table name and freshness threshold, validate table row count and last updated timestamp, and open a ServiceNow ticket if quality checks fail.
      inputParameters:
      - name: table_name
        in: body
        type: string
        description: Fully qualified Snowflake table name in DATABASE.SCHEMA.TABLE format.
      - name: freshness_hours
        in: body
        type: integer
        description: Maximum acceptable age in hours for the table's data.
      steps:
      - name: get-table-metadata
        type: call
        call: snowflake.get-table-info
        with:
          tableName: '{{table_name}}'
      - name: create-dq-ticket
        type: call
        call: servicenow.create-incident
        with:
          short_description: 'Data quality failure: {{table_name}}'
          category: data_pipeline
          description: 'Table {{table_name}} failed freshness check. Last updated: {{get-table-metadata.last_altered}}. Required: within {{freshness_hours}} hours.'
  consumes:
  - type: http
    namespace: snowflake
    baseUri: https://comcast.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: tables
      path: /databases/tables
      inputParameters:
      - name: tableName
        in: query
      operations:
      - name: get-table-info
        method: GET
  - type: http
    namespace: servicenow
    baseUri: https://comcast.service-now.com/api/now
    authentication:
      type: basic
      username: $secrets.snow_user
      password: $secrets.snow_password
    resources:
    - name: incidents
      path: /table/incident
      operations:
      - name: create-incident
        method: POST

Retrieves the status and configuration summary of a CloudFront CDN distribution used for Comcast content delivery.

naftiko: '0.5'
info:
  label: AWS CloudFront Distribution Status
  description: Retrieves the status and configuration summary of a CloudFront CDN distribution used for Comcast content delivery.
  tags:
  - cdn
  - cloud
  - aws
capability:
  exposes:
  - type: mcp
    namespace: cdn-status
    port: 8080
    tools:
    - name: get-distribution-status
      description: Given a CloudFront distribution ID, return its status and domain name.
      inputParameters:
      - name: distribution_id
        in: body
        type: string
        description: CloudFront distribution ID.
      call: cloudfront.get-distribution
      with:
        distribution_id: '{{distribution_id}}'
      outputParameters:
      - name: status
        type: string
        mapping: $.Distribution.Status
      - name: domain_name
        type: string
        mapping: $.Distribution.DomainName
  consumes:
  - type: http
    namespace: cloudfront
    baseUri: https://cloudfront.amazonaws.com/2020-05-31
    authentication:
      type: apikey
      key: Authorization
      value: $secrets.aws_auth_token
      placement: header
    resources:
    - name: distributions
      path: /distribution/{{distribution_id}}
      inputParameters:
      - name: distribution_id
        in: path
      operations:
      - name: get-distribution
        method: GET

When a ServiceNow incident SLA is about to breach, escalates via PagerDuty, updates the incident priority, and notifies management via Microsoft Teams.

naftiko: '0.5'
info:
  label: ServiceNow SLA Breach Escalation
  description: When a ServiceNow incident SLA is about to breach, escalates via PagerDuty, updates the incident priority, and notifies management via Microsoft Teams.
  tags:
  - itsm
  - sla
  - servicenow
  - pagerduty
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: sla-escalation
    port: 8080
    tools:
    - name: escalate-sla-breach
      description: Given a ServiceNow incident nearing SLA breach, escalate and notify.
      inputParameters:
      - name: incident_number
        in: body
        type: string
        description: ServiceNow incident number.
      - name: minutes_remaining
        in: body
        type: number
        description: Minutes until SLA breach.
      steps:
      - name: get-incident
        type: call
        call: servicenow.get-incident
        with:
          incident_number: '{{incident_number}}'
      - name: page-oncall
        type: call
        call: pagerduty.create-incident
        with:
          service_id: itsm-escalation
          title: 'SLA breach: {{incident_number}} in {{minutes_remaining}} min'
          urgency: high
      - name: notify-management
        type: call
        call: teams.post-message
        with:
          channel_id: it-management
          text: 'SLA breach imminent: {{incident_number}} — {{get-incident.short_description}}. {{minutes_remaining}} min remaining.'
  consumes:
  - type: http
    namespace: servicenow
    baseUri: https://comcast.service-now.com/api/now
    authentication:
      type: basic
      username: $secrets.snow_user
      password: $secrets.snow_password
    resources:
    - name: incidents
      path: /table/incident/{{incident_number}}
      operations:
      - name: get-incident
        method: GET
  - type: http
    namespace: pagerduty
    baseUri: https://api.pagerduty.com
    authentication:
      type: bearer
      token: $secrets.pagerduty_token
    resources:
    - name: incidents
      path: /incidents
      operations:
      - name: create-incident
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

Looks up the current on-call engineer for a specified PagerDuty escalation policy at Comcast.

naftiko: '0.5'
info:
  label: PagerDuty On-Call Engineer Lookup
  description: Looks up the current on-call engineer for a specified PagerDuty escalation policy at Comcast.
  tags:
  - incident-management
  - pagerduty
capability:
  exposes:
  - type: mcp
    namespace: oncall-lookup
    port: 8080
    tools:
    - name: get-oncall
      description: Given a PagerDuty escalation policy ID, return the current on-call engineer name and contact.
      inputParameters:
      - name: policy_id
        in: body
        type: string
        description: PagerDuty escalation policy ID.
      call: pagerduty.get-oncall
      with:
        policy_id: '{{policy_id}}'
      outputParameters:
      - name: engineer_name
        type: string
        mapping: $.oncalls[0].user.name
      - name: email
        type: string
        mapping: $.oncalls[0].user.email
  consumes:
  - type: http
    namespace: pagerduty
    baseUri: https://api.pagerduty.com
    authentication:
      type: bearer
      token: $secrets.pagerduty_token
    resources:
    - name: oncalls
      path: /oncalls
      inputParameters:
      - name: policy_id
        in: query
      operations:
      - name: get-oncall
        method: GET

Scans GitHub Dependabot alerts for critical vulnerabilities across Comcast repositories, creates Jira security tickets, and notifies the security team in Teams.

naftiko: '0.5'
info:
  label: GitHub Security Vulnerability Triage
  description: Scans GitHub Dependabot alerts for critical vulnerabilities across Comcast repositories, creates Jira security tickets, and notifies the security team in Teams.
  tags:
  - security
  - devops
  - github
  - jira
  - microsoft-teams
  - vulnerability-management
capability:
  exposes:
  - type: mcp
    namespace: security-ops
    port: 8080
    tools:
    - name: triage-vulnerability-alerts
      description: Given a GitHub repository, retrieve critical Dependabot alerts, create Jira security tickets, and post a summary to the security Teams channel.
      inputParameters:
      - name: repo
        in: body
        type: string
        description: GitHub repository in owner/repo format.
      steps:
      - name: get-alerts
        type: call
        call: github.get-dependabot-alerts
        with:
          repo: '{{repo}}'
          severity: critical
      - name: create-security-ticket
        type: call
        call: jira.create-issue
        with:
          projectKey: SEC
          issuetype: Security
          summary: 'Critical vulnerability: {{get-alerts.advisory_summary}}'
          description: 'Package: {{get-alerts.package_name}}

            CVSS: {{get-alerts.cvss_score}}

            Repo: {{repo}}'
      - name: notify-security
        type: call
        call: msteams.post-channel-message
        with:
          channelId: security-team
          message: 'Critical vulnerability in {{repo}}: {{get-alerts.advisory_summary}} | Jira: {{create-security-ticket.key}}'
  consumes:
  - type: http
    namespace: github
    baseUri: https://api.github.com
    authentication:
      type: bearer
      token: $secrets.github_token
    resources:
    - name: dependabot-alerts
      path: /repos/{{repo}}/dependabot/alerts
      inputParameters:
      - name: repo
        in: path
      - name: severity
        in: query
      operations:
      - name: get-dependabot-alerts
        method: GET
  - type: http
    namespace: jira
    baseUri: https://comcast.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - name: issues
      path: /issue
      operations:
      - name: create-issue
        method: POST
  - type: http
    namespace: msteams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - name: channel-messages
      path: /teams/channels/{{channelId}}/messages
      inputParameters:
      - name: channelId
        in: path
      operations:
      - name: post-channel-message
        method: POST

Retrieves unestimated and stale Jira backlog items for a project and posts a grooming reminder digest to the product team's Teams channel.

naftiko: '0.5'
info:
  label: Jira Backlog Grooming Report
  description: Retrieves unestimated and stale Jira backlog items for a project and posts a grooming reminder digest to the product team's Teams channel.
  tags:
  - devops
  - engineering
  - jira
  - microsoft-teams
  - backlog-management
capability:
  exposes:
  - type: mcp
    namespace: backlog-ops
    port: 8080
    tools:
    - name: digest-backlog-health
      description: Given a Jira project key, retrieve unestimated and stale backlog issues older than 30 days and post a grooming summary to the product team's Teams channel.
      inputParameters:
      - name: project_key
        in: body
        type: string
        description: The Jira project key, e.g. XFIN.
      steps:
      - name: get-stale-issues
        type: call
        call: jira.search-issues
        with:
          jql: project={{project_key}} AND status=Backlog AND created<=-30d AND storyPoints is EMPTY
      - name: post-reminder
        type: call
        call: msteams.post-channel-message
        with:
          channelId: product-team
          message: 'Backlog health for {{project_key}}: {{get-stale-issues.total}} unestimated or stale issues need grooming. Oldest: {{get-stale-issues.oldest_issue}}.'
  consumes:
  - type: http
    namespace: jira
    baseUri: https://comcast.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - name: issues
      path: /search
      inputParameters:
      - name: jql
        in: query
      operations:
      - name: search-issues
        method: GET
  - type: http
    namespace: msteams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - name: channel-messages
      path: /teams/channels/{{channelId}}/messages
      inputParameters:
      - name: channelId
        in: path
      operations:
      - name: post-channel-message
        method: POST

When AWS Cost Anomaly Detection identifies an unexpected spend spike, creates a ServiceNow ticket and alerts the FinOps team in Microsoft Teams.

naftiko: '0.5'
info:
  label: AWS Cost Anomaly Alert Handler
  description: When AWS Cost Anomaly Detection identifies an unexpected spend spike, creates a ServiceNow ticket and alerts the FinOps team in Microsoft Teams.
  tags:
  - cloud
  - finops
  - aws
  - servicenow
  - microsoft-teams
  - cost-management
capability:
  exposes:
  - type: mcp
    namespace: cloud-finops
    port: 8080
    tools:
    - name: handle-aws-cost-anomaly
      description: Given an AWS account ID, anomalous spend amount, and service name, create a ServiceNow cost ticket and alert the FinOps team in Teams.
      inputParameters:
      - name: aws_account_id
        in: body
        type: string
        description: The AWS account ID where the anomaly occurred.
      - name: anomaly_amount
        in: body
        type: number
        description: The anomalous incremental spend in USD.
      - name: aws_service
        in: body
        type: string
        description: The AWS service responsible for the spend spike, e.g. EC2, S3.
      steps:
      - name: get-cost-details
        type: call
        call: aws-cost.get-anomalies
        with:
          accountId: '{{aws_account_id}}'
          service: '{{aws_service}}'
      - name: create-ticket
        type: call
        call: servicenow.create-incident
        with:
          short_description: 'AWS cost anomaly: {{aws_service}} in account {{aws_account_id}} +${{anomaly_amount}}'
          category: cloud_cost
          urgency: '2'
      - name: alert-finops
        type: call
        call: msteams.post-channel-message
        with:
          channelId: finops-team
          message: 'AWS cost spike: {{aws_service}} in {{aws_account_id}} +${{anomaly_amount}} | ServiceNow: {{create-ticket.number}}'
  consumes:
  - type: http
    namespace: aws-cost
    baseUri: https://ce.us-east-1.amazonaws.com
    authentication:
      type: bearer
      token: $secrets.aws_token
    resources:
    - name: anomalies
      path: /GetAnomalies
      operations:
      - name: get-anomalies
        method: POST
  - type: http
    namespace: servicenow
    baseUri: https://comcast.service-now.com/api/now
    authentication:
      type: basic
      username: $secrets.snow_user
      password: $secrets.snow_password
    resources:
    - name: incidents
      path: /table/incident
      operations:
      - name: create-incident
        method: POST
  - type: http
    namespace: msteams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - name: channel-messages
      path: /teams/channels/{{channelId}}/messages
      inputParameters:
      - name: channelId
        in: path
      operations:
      - name: post-channel-message
        method: POST

When an Xfinity Mobile order is placed, provisions the SIM in the carrier system, updates Salesforce, and sends activation confirmation via the messaging platform.

naftiko: '0.5'
info:
  label: Xfinity Mobile Provisioning Orchestrator
  description: When an Xfinity Mobile order is placed, provisions the SIM in the carrier system, updates Salesforce, and sends activation confirmation via the messaging platform.
  tags:
  - mobile
  - provisioning
  - salesforce
  - servicenow
capability:
  exposes:
  - type: mcp
    namespace: mobile-provisioning
    port: 8080
    tools:
    - name: provision-mobile-line
      description: Given a Salesforce order ID for Xfinity Mobile, provision and activate the line.
      inputParameters:
      - name: order_id
        in: body
        type: string
        description: Salesforce mobile order ID.
      steps:
      - name: get-order
        type: call
        call: salesforce.get-order
        with:
          order_id: '{{order_id}}'
      - name: create-work-order
        type: call
        call: servicenow.create-work-order
        with:
          short_description: 'Mobile activation: {{order_id}}'
          description: 'Customer: {{get-order.customer_name}}. Plan: {{get-order.plan_name}}'
      - name: update-order
        type: call
        call: salesforce.update-order-status
        with:
          order_id: '{{order_id}}'
          status: Provisioned
  consumes:
  - type: http
    namespace: salesforce
    baseUri: https://comcast.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: orders
      path: /sobjects/Order/{{order_id}}
      operations:
      - name: get-order
        method: GET
      - name: update-order-status
        method: PATCH
  - type: http
    namespace: servicenow
    baseUri: https://comcast.service-now.com/api/now
    authentication:
      type: basic
      username: $secrets.snow_user
      password: $secrets.snow_password
    resources:
    - name: work-orders
      path: /table/wm_order
      operations:
      - name: create-work-order
        method: POST

Returns current payroll headcount grouped by department and pay grade from Workday for finance and HR reporting.

naftiko: '0.5'
info:
  label: Workday Payroll Headcount Export
  description: Returns current payroll headcount grouped by department and pay grade from Workday for finance and HR reporting.
  tags:
  - hr
  - finance
  - workday
  - payroll
  - reporting
capability:
  exposes:
  - type: mcp
    namespace: payroll-reporting
    port: 8080
    tools:
    - name: get-payroll-headcount
      description: Returns active employees grouped by department and pay grade from Workday payroll. Use for headcount reporting, period close, and compensation analysis.
      call: workday.get-payroll-results
      outputParameters:
      - name: total_gross_pay
        type: number
        mapping: $.totals.grossPay
      - name: total_employees
        type: number
        mapping: $.totals.headcount
      - name: period
        type: string
        mapping: $.payPeriod
  consumes:
  - type: http
    namespace: workday
    baseUri: https://wd2-impl-services1.workday.com/ccx/api/v1
    authentication:
      type: bearer
      token: $secrets.workday_token
    resources:
    - name: payroll-results
      path: /comcast/payrollResults
      operations:
      - name: get-payroll-results
        method: GET

Queries Splunk for security events matching a given source IP or user, and posts the event summary to the security operations Teams channel for investigation.

naftiko: '0.5'
info:
  label: Splunk Security Event Investigation
  description: Queries Splunk for security events matching a given source IP or user, and posts the event summary to the security operations Teams channel for investigation.
  tags:
  - security
  - observability
  - splunk
  - microsoft-teams
  - investigation
capability:
  exposes:
  - type: mcp
    namespace: security-investigation
    port: 8080
    tools:
    - name: investigate-security-event
      description: Given a source IP address or username, query Splunk for recent security events and post a summary of findings to the security operations Teams channel.
      inputParameters:
      - name: search_term
        in: body
        type: string
        description: The IP address or username to search for in Splunk security events.
      - name: lookback_hours
        in: body
        type: integer
        description: Number of hours to look back in Splunk for events.
      steps:
      - name: search-splunk
        type: call
        call: splunk.run-search
        with:
          search: index=security (src_ip={{search_term}} OR user={{search_term}}) earliest=-{{lookback_hours}}h
      - name: post-findings
        type: call
        call: msteams.post-channel-message
        with:
          channelId: security-operations
          message: 'Security investigation for {{search_term}} (last {{lookback_hours}}h): {{search-splunk.event_count}} events found. Top events: {{search-splunk.top_events}}'
  consumes:
  - type: http
    namespace: splunk
    baseUri: https://splunk.comcast.com:8089
    authentication:
      type: bearer
      token: $secrets.splunk_token
    resources:
    - name: search-jobs
      path: /services/search/jobs
      operations:
      - name: run-search
        method: POST
  - type: http
    namespace: msteams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - name: channel-messages
      path: /teams/channels/{{channelId}}/messages
      inputParameters:
      - name: channelId
        in: path
      operations:
      - name: post-channel-message
        method: POST

Coordinates subscriber equipment swaps by updating the Salesforce account, creating a ServiceNow work order, and notifying the logistics team via Microsoft Teams.

naftiko: '0.5'
info:
  label: Subscriber Equipment Swap Orchestrator
  description: Coordinates subscriber equipment swaps by updating the Salesforce account, creating a ServiceNow work order, and notifying the logistics team via Microsoft Teams.
  tags:
  - customer-support
  - equipment
  - salesforce
  - servicenow
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: equipment-swap
    port: 8080
    tools:
    - name: process-equipment-swap
      description: Given a subscriber account and new equipment serial, orchestrate the equipment swap.
      inputParameters:
      - name: account_id
        in: body
        type: string
        description: Subscriber account ID.
      - name: new_serial
        in: body
        type: string
        description: New equipment serial number.
      steps:
      - name: update-account
        type: call
        call: salesforce.update-equipment
        with:
          account_id: '{{account_id}}'
          serial: '{{new_serial}}'
      - name: create-work-order
        type: call
        call: servicenow.create-work-order
        with:
          short_description: 'Equipment swap: account {{account_id}}'
          description: 'New serial: {{new_serial}}'
      - name: notify-logistics
        type: call
        call: teams.post-message
        with:
          channel_id: logistics
          text: 'Equipment swap: {{account_id}} → {{new_serial}}. WO: {{create-work-order.number}}'
  consumes:
  - type: http
    namespace: salesforce
    baseUri: https://comcast.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: accounts
      path: /sobjects/Account/{{account_id}}
      operations:
      - name: update-equipment
        method: PATCH
  - type: http
    namespace: servicenow
    baseUri: https://comcast.service-now.com/api/now
    authentication:
      type: basic
      username: $secrets.snow_user
      password: $secrets.snow_password
    resources:
    - name: work-orders
      path: /table/wm_order
      operations:
      - name: create-work-order
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

Monitors video transcoding pipeline health in Datadog, creates a Jira ticket when failure rates spike, and alerts the media engineering team via Microsoft Teams.

naftiko: '0.5'
info:
  label: Video Transcoding Pipeline Monitor
  description: Monitors video transcoding pipeline health in Datadog, creates a Jira ticket when failure rates spike, and alerts the media engineering team via Microsoft Teams.
  tags:
  - media
  - transcoding
  - datadog
  - jira
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: transcoding-ops
    port: 8080
    tools:
    - name: handle-transcoding-alert
      description: Given a Datadog alert for transcoding failures, investigate and escalate.
      inputParameters:
      - name: alert_id
        in: body
        type: string
        description: Datadog alert ID.
      steps:
      - name: get-alert
        type: call
        call: datadog.get-monitor
        with:
          alert_id: '{{alert_id}}'
      - name: create-ticket
        type: call
        call: jira.create-issue
        with:
          project: MEDIA
          summary: 'Transcoding failures: {{get-alert.name}}'
          description: '{{get-alert.message}}'
      - name: notify-team
        type: call
        call: teams.post-message
        with:
          channel_id: media-engineering
          text: 'Transcoding alert: {{get-alert.name}}. Jira: {{create-ticket.key}}'
  consumes:
  - type: http
    namespace: datadog
    baseUri: https://api.datadoghq.com/api/v1
    authentication:
      type: bearer
      token: $secrets.datadog_api_key
    resources:
    - name: monitors
      path: /monitor/{{alert_id}}
      operations:
      - name: get-monitor
        method: GET
  - type: http
    namespace: jira
    baseUri: https://comcast.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - name: issues
      path: /issue
      operations:
      - name: create-issue
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

When a network outage alert fires in Datadog, creates a ServiceNow P1 incident, posts to the NOC Teams channel, and logs the event in Splunk.

naftiko: '0.5'
info:
  label: Network Outage Incident Response
  description: When a network outage alert fires in Datadog, creates a ServiceNow P1 incident, posts to the NOC Teams channel, and logs the event in Splunk.
  tags:
  - itsm
  - observability
  - datadog
  - servicenow
  - splunk
  - microsoft-teams
  - incident-response
capability:
  exposes:
  - type: mcp
    namespace: noc-ops
    port: 8080
    tools:
    - name: handle-network-outage
      description: Given a Datadog monitor alert for a network outage, create a ServiceNow P1 incident, send a NOC channel alert in Teams, and index the event in Splunk.
      inputParameters:
      - name: monitor_id
        in: body
        type: string
        description: The Datadog monitor ID that triggered the alert.
      - name: affected_region
        in: body
        type: string
        description: Geographic region or network segment affected by the outage.
      - name: alert_message
        in: body
        type: string
        description: The alert message text from Datadog.
      steps:
      - name: get-monitor
        type: call
        call: datadog.get-monitor
        with:
          monitor_id: '{{monitor_id}}'
      - name: create-incident
        type: call
        call: servicenow.create-incident
        with:
          short_description: 'Network outage: {{affected_region}}'
          description: '{{alert_message}}

            Monitor: {{monitor_id}}

            State: {{get-monitor.overall_state}}'
          urgency: '1'
          impact: '1'
      - name: alert-noc
        type: call
        call: msteams.post-channel-message
        with:
          channelId: noc-alerts
          message: 'P1 Outage: {{affected_region}} | Monitor: {{monitor_id}} | ServiceNow: {{create-incident.number}} | {{alert_message}}'
      - name: log-splunk
        type: call
        call: splunk.index-event
        with:
          source: datadog-alert
          event: 'Network outage detected in {{affected_region}}: {{alert_message}}'
  consumes:
  - type: http
    namespace: datadog
    baseUri: https://api.datadoghq.com/api/v1
    authentication:
      type: apikey
      key: DD-API-KEY
      value: $secrets.datadog_api_key
      placement: header
    resources:
    - name: monitors
      path: /monitor/{{monitor_id}}
      inputParameters:
      - name: monitor_id
        in: path
      operations:
      - name: get-monitor
        method: GET
  - type: http
    namespace: servicenow
    baseUri: https://comcast.service-now.com/api/now
    authentication:
      type: basic
      username: $secrets.snow_user
      password: $secrets.snow_password
    resources:
    - name: incidents
      path: /table/incident
      operations:
      - name: create-incident
        method: POST
  - type: http
    namespace: msteams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - name: channel-messages
      path: /teams/channels/{{channelId}}/messages
      inputParameters:
      - name: channelId
        in: path
      operations:
      - name: post-channel-message
        method: POST
  - type: http
    namespace: splunk
    baseUri: https://splunk.comcast.com:8088
    authentication:
      type: bearer
      token: $secrets.splunk_hec_token
    resources:
    - name: events
      path: /services/collector/event
      operations:
      - name: index-event
        method: POST

Identifies expiring enterprise contracts in Salesforce, creates Jira renewal tasks, and notifies account managers via Microsoft Teams.

naftiko: '0.5'
info:
  label: Salesforce Contract Renewal Workflow
  description: Identifies expiring enterprise contracts in Salesforce, creates Jira renewal tasks, and notifies account managers via Microsoft Teams.
  tags:
  - sales
  - contracts
  - salesforce
  - jira
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: contract-renewal
    port: 8080
    tools:
    - name: process-renewal
      description: Given a Salesforce contract ID nearing expiry, initiate the renewal workflow.
      inputParameters:
      - name: contract_id
        in: body
        type: string
        description: Salesforce contract ID.
      steps:
      - name: get-contract
        type: call
        call: salesforce.get-contract
        with:
          contract_id: '{{contract_id}}'
      - name: create-task
        type: call
        call: jira.create-issue
        with:
          project: SALES
          summary: 'Renewal: {{get-contract.account_name}} — {{get-contract.end_date}}'
          description: 'Annual value: ${{get-contract.annual_value}}'
      - name: notify-am
        type: call
        call: teams.post-message
        with:
          channel_id: account-management
          text: 'Renewal due: {{get-contract.account_name}}. Expires: {{get-contract.end_date}}. Value: ${{get-contract.annual_value}}. Jira: {{create-task.key}}'
  consumes:
  - type: http
    namespace: salesforce
    baseUri: https://comcast.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: contracts
      path: /sobjects/Contract/{{contract_id}}
      operations:
      - name: get-contract
        method: GET
  - type: http
    namespace: jira
    baseUri: https://comcast.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - name: issues
      path: /issue
      operations:
      - name: create-issue
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

Retrieves the current Xfinity service tier, bundle details, and contract end date for a subscriber from Salesforce.

naftiko: '0.5'
info:
  label: Salesforce Subscriber Service Tier Lookup
  description: Retrieves the current Xfinity service tier, bundle details, and contract end date for a subscriber from Salesforce.
  tags:
  - crm
  - subscriber
  - salesforce
capability:
  exposes:
  - type: mcp
    namespace: subscriber-tiers
    port: 8080
    tools:
    - name: get-service-tier
      description: Given a Comcast subscriber account ID, return service tier, bundle name, and contract end date.
      inputParameters:
      - name: account_id
        in: body
        type: string
        description: Comcast subscriber account ID.
      call: salesforce.get-subscriber
      with:
        account_id: '{{account_id}}'
      outputParameters:
      - name: service_tier
        type: string
        mapping: $.records[0].ServiceTier__c
      - name: bundle_name
        type: string
        mapping: $.records[0].BundleName__c
      - name: contract_end
        type: string
        mapping: $.records[0].ContractEnd__c
  consumes:
  - type: http
    namespace: salesforce
    baseUri: https://comcast.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: accounts
      path: /query
      inputParameters:
      - name: account_id
        in: query
      operations:
      - name: get-subscriber
        method: GET

Refreshes the subscriber analytics Power BI dashboard, verifies completion, and posts the status to the analytics Teams channel.

naftiko: '0.5'
info:
  label: Power BI Subscriber Dashboard Auto-Refresh
  description: Refreshes the subscriber analytics Power BI dashboard, verifies completion, and posts the status to the analytics Teams channel.
  tags:
  - analytics
  - dashboards
  - power-bi
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: dashboard-refresh
    port: 8080
    tools:
    - name: refresh-subscriber-dashboard
      description: Given a Power BI dataset ID, trigger refresh and report status.
      inputParameters:
      - name: dataset_id
        in: body
        type: string
        description: Power BI dataset ID.
      steps:
      - name: trigger-refresh
        type: call
        call: powerbi.trigger-refresh
        with:
          dataset_id: '{{dataset_id}}'
      - name: notify-analytics
        type: call
        call: teams.post-message
        with:
          channel_id: analytics-team
          text: 'Subscriber dashboard refreshed. Dataset: {{dataset_id}}'
  consumes:
  - type: http
    namespace: powerbi
    baseUri: https://api.powerbi.com/v1.0/myorg
    authentication:
      type: bearer
      token: $secrets.powerbi_token
    resources:
    - name: datasets
      path: /datasets/{{dataset_id}}/refreshes
      operations:
      - name: trigger-refresh
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

Retrieves subscriber usage patterns from Snowflake, identifies high-risk churn accounts in Salesforce, and creates a retention campaign task for the account team.

naftiko: '0.5'
info:
  label: Customer Churn Prediction Workflow
  description: Retrieves subscriber usage patterns from Snowflake, identifies high-risk churn accounts in Salesforce, and creates a retention campaign task for the account team.
  tags:
  - crm
  - analytics
  - churn
  - snowflake
  - salesforce
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: churn-prediction
    port: 8080
    tools:
    - name: process-churn-risk
      description: Given a market segment, identify high-risk churn subscribers and initiate retention workflows.
      inputParameters:
      - name: market_segment
        in: body
        type: string
        description: Market segment to analyze.
      steps:
      - name: get-usage-patterns
        type: call
        call: snowflake.query-churn-risk
        with:
          market_segment: '{{market_segment}}'
      - name: create-campaign
        type: call
        call: salesforce.create-campaign
        with:
          name: 'Retention: {{market_segment}} — {{get-usage-patterns.high_risk_count}} accounts'
          type: Retention
      - name: notify-retention
        type: call
        call: teams.post-message
        with:
          channel_id: customer-retention
          text: 'Churn risk: {{get-usage-patterns.high_risk_count}} accounts in {{market_segment}}. Campaign: {{create-campaign.id}}'
  consumes:
  - type: http
    namespace: snowflake
    baseUri: https://comcast.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: statements
      path: /statements
      operations:
      - name: query-churn-risk
        method: POST
  - type: http
    namespace: salesforce
    baseUri: https://comcast.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: campaigns
      path: /sobjects/Campaign
      operations:
      - name: create-campaign
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

Monitors enterprise internet SLA compliance via Datadog, stores metrics in Snowflake, and emails weekly SLA reports to account managers via Microsoft Outlook.

naftiko: '0.5'
info:
  label: Enterprise Internet SLA Monitor
  description: Monitors enterprise internet SLA compliance via Datadog, stores metrics in Snowflake, and emails weekly SLA reports to account managers via Microsoft Outlook.
  tags:
  - sla
  - enterprise
  - datadog
  - snowflake
  - microsoft-outlook
capability:
  exposes:
  - type: mcp
    namespace: enterprise-sla
    port: 8080
    tools:
    - name: generate-sla-report
      description: Given an enterprise account ID, generate the SLA compliance report.
      inputParameters:
      - name: account_id
        in: body
        type: string
        description: Enterprise account ID.
      steps:
      - name: get-sla-metrics
        type: call
        call: datadog.get-sla
        with:
          account_id: '{{account_id}}'
      - name: store-metrics
        type: call
        call: snowflake.insert-sla
        with:
          account_id: '{{account_id}}'
          uptime: '{{get-sla-metrics.uptime_pct}}'
      - name: email-report
        type: call
        call: outlook.send-email
        with:
          to: '{{get-sla-metrics.am_email}}'
          subject: 'SLA Report: {{account_id}}'
          body: 'Uptime: {{get-sla-metrics.uptime_pct}}%. Latency: {{get-sla-metrics.latency_ms}}ms.'
  consumes:
  - type: http
    namespace: datadog
    baseUri: https://api.datadoghq.com/api/v1
    authentication:
      type: bearer
      token: $secrets.datadog_api_key
    resources:
    - name: sla
      path: /slo
      operations:
      - name: get-sla
        method: GET
  - type: http
    namespace: snowflake
    baseUri: https://comcast.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: statements
      path: /statements
      operations:
      - name: insert-sla
        method: POST
  - type: http
    namespace: outlook
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - name: mail
      path: /me/sendMail
      operations:
      - name: send-email
        method: POST

Retrieves the CDN cache hit ratio and bandwidth metrics from Datadog for Comcast content delivery infrastructure.

naftiko: '0.5'
info:
  label: Datadog CDN Cache Hit Ratio
  description: Retrieves the CDN cache hit ratio and bandwidth metrics from Datadog for Comcast content delivery infrastructure.
  tags:
  - cdn
  - observability
  - datadog
capability:
  exposes:
  - type: mcp
    namespace: cdn-metrics
    port: 8080
    tools:
    - name: get-cache-metrics
      description: Given a CDN region, return the cache hit ratio and bandwidth utilization.
      inputParameters:
      - name: cdn_region
        in: body
        type: string
        description: CDN region (e.g., us-east, us-west).
      call: datadog.query-cdn-metrics
      with:
        cdn_region: '{{cdn_region}}'
      outputParameters:
      - name: hit_ratio
        type: number
        mapping: $.series[0].hit_ratio
      - name: bandwidth_gbps
        type: number
        mapping: $.series[0].bandwidth
  consumes:
  - type: http
    namespace: datadog
    baseUri: https://api.datadoghq.com/api/v1
    authentication:
      type: bearer
      token: $secrets.datadog_api_key
    resources:
    - name: metrics
      path: /query
      inputParameters:
      - name: cdn_region
        in: query
      operations:
      - name: query-cdn-metrics
        method: GET

Pulls completed sprint data from Jira for an engineering team, calculates velocity, and posts the sprint summary to the team's Microsoft Teams channel.

naftiko: '0.5'
info:
  label: Jira Sprint Velocity Report
  description: Pulls completed sprint data from Jira for an engineering team, calculates velocity, and posts the sprint summary to the team's Microsoft Teams channel.
  tags:
  - devops
  - engineering
  - jira
  - microsoft-teams
  - reporting
capability:
  exposes:
  - type: mcp
    namespace: engineering-reporting
    port: 8080
    tools:
    - name: publish-sprint-velocity
      description: Given a Jira board ID and sprint ID, retrieve completed issues and story points, then post a velocity summary to the engineering Teams channel.
      inputParameters:
      - name: board_id
        in: body
        type: string
        description: The Jira software board ID.
      - name: sprint_id
        in: body
        type: string
        description: The Jira sprint ID to report on.
      steps:
      - name: get-sprint-issues
        type: call
        call: jira.get-sprint-issues
        with:
          boardId: '{{board_id}}'
          sprintId: '{{sprint_id}}'
      - name: post-velocity
        type: call
        call: msteams.post-channel-message
        with:
          channelId: engineering-team
          message: 'Sprint {{sprint_id}} complete: {{get-sprint-issues.completedIssues}} issues, {{get-sprint-issues.completedPoints}} story points delivered.'
  consumes:
  - type: http
    namespace: jira
    baseUri: https://comcast.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - name: sprint-issues
      path: /board/{{boardId}}/sprint/{{sprintId}}/issue
      inputParameters:
      - name: boardId
        in: path
      - name: sprintId
        in: path
      operations:
      - name: get-sprint-issues
        method: GET
  - type: http
    namespace: msteams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - name: channel-messages
      path: /teams/channels/{{channelId}}/messages
      inputParameters:
      - name: channelId
        in: path
      operations:
      - name: post-channel-message
        method: POST

Retrieves LinkedIn employer brand metrics, stores trends in Snowflake, and posts the weekly summary to the HR marketing Teams channel.

naftiko: '0.5'
info:
  label: LinkedIn Talent Brand Monitor
  description: Retrieves LinkedIn employer brand metrics, stores trends in Snowflake, and posts the weekly summary to the HR marketing Teams channel.
  tags:
  - hr
  - employer-brand
  - linkedin
  - snowflake
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: talent-brand
    port: 8080
    tools:
    - name: monitor-talent-brand
      description: Given a reporting period, generate the LinkedIn employer brand report.
      inputParameters:
      - name: period
        in: body
        type: string
        description: Reporting period (e.g., 2026-W13).
      steps:
      - name: get-brand-metrics
        type: call
        call: linkedin.get-brand-stats
        with:
          period: '{{period}}'
      - name: store-metrics
        type: call
        call: snowflake.insert-brand-metrics
        with:
          period: '{{period}}'
          followers: '{{get-brand-metrics.followers}}'
          engagement_rate: '{{get-brand-metrics.engagement_rate}}'
      - name: notify-hr
        type: call
        call: teams.post-message
        with:
          channel_id: hr-marketing
          text: 'LinkedIn brand: {{period}}. Followers: {{get-brand-metrics.followers}}. Engagement: {{get-brand-metrics.engagement_rate}}%'
  consumes:
  - type: http
    namespace: linkedin
    baseUri: https://api.linkedin.com/v2
    authentication:
      type: bearer
      token: $secrets.linkedin_token
    resources:
    - name: brand
      path: /organizationalEntityFollowerStatistics
      operations:
      - name: get-brand-stats
        method: GET
  - type: http
    namespace: snowflake
    baseUri: https://comcast.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: statements
      path: /statements
      operations:
      - name: insert-brand-metrics
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

When Datadog detects an error spike in AWS Lambda functions, retrieves function metrics, creates a Jira ticket, and pages the on-call engineer via PagerDuty.

naftiko: '0.5'
info:
  label: AWS Lambda Error Spike Responder
  description: When Datadog detects an error spike in AWS Lambda functions, retrieves function metrics, creates a Jira ticket, and pages the on-call engineer via PagerDuty.
  tags:
  - cloud
  - serverless
  - datadog
  - jira
  - pagerduty
capability:
  exposes:
  - type: mcp
    namespace: lambda-errors
    port: 8080
    tools:
    - name: handle-lambda-errors
      description: Given a Datadog alert for Lambda errors, investigate and escalate.
      inputParameters:
      - name: alert_id
        in: body
        type: string
        description: Datadog alert ID.
      - name: function_name
        in: body
        type: string
        description: Lambda function name.
      steps:
      - name: get-alert
        type: call
        call: datadog.get-monitor
        with:
          alert_id: '{{alert_id}}'
      - name: create-ticket
        type: call
        call: jira.create-issue
        with:
          project: CLOUD
          summary: 'Lambda error spike: {{function_name}}'
          description: '{{get-alert.message}}'
      - name: page-oncall
        type: call
        call: pagerduty.create-incident
        with:
          service_id: cloud-engineering
          title: 'Lambda errors: {{function_name}} — {{create-ticket.key}}'
  consumes:
  - type: http
    namespace: datadog
    baseUri: https://api.datadoghq.com/api/v1
    authentication:
      type: bearer
      token: $secrets.datadog_api_key
    resources:
    - name: monitors
      path: /monitor/{{alert_id}}
      operations:
      - name: get-monitor
        method: GET
  - type: http
    namespace: jira
    baseUri: https://comcast.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - name: issues
      path: /issue
      operations:
      - name: create-issue
        method: POST
  - type: http
    namespace: pagerduty
    baseUri: https://api.pagerduty.com
    authentication:
      type: bearer
      token: $secrets.pagerduty_token
    resources:
    - name: incidents
      path: /incidents
      operations:
      - name: create-incident
        method: POST

Retrieves the status and review state of a GitHub pull request in Comcast engineering repositories.

naftiko: '0.5'
info:
  label: GitHub Pull Request Status Check
  description: Retrieves the status and review state of a GitHub pull request in Comcast engineering repositories.
  tags:
  - development
  - github
capability:
  exposes:
  - type: mcp
    namespace: pr-status
    port: 8080
    tools:
    - name: get-pr-status
      description: Given a repository name and PR number, return the PR title, status, and mergeable state.
      inputParameters:
      - name: repo_name
        in: body
        type: string
        description: GitHub repository name.
      - name: pr_number
        in: body
        type: string
        description: PR number.
      call: github.get-pr
      with:
        repo_name: '{{repo_name}}'
        pr_number: '{{pr_number}}'
      outputParameters:
      - name: title
        type: string
        mapping: $.title
      - name: state
        type: string
        mapping: $.state
      - name: mergeable
        type: string
        mapping: $.mergeable
  consumes:
  - type: http
    namespace: github
    baseUri: https://api.github.com
    authentication:
      type: bearer
      token: $secrets.github_token
    resources:
    - name: pulls
      path: /repos/comcast/{{repo_name}}/pulls/{{pr_number}}
      inputParameters:
      - name: repo_name
        in: path
      - name: pr_number
        in: path
      operations:
      - name: get-pr
        method: GET

When a cable node reaches capacity threshold, retrieves utilization data from Snowflake, creates a Jira planning epic, and notifies the network planning team via Microsoft Teams.

naftiko: '0.5'
info:
  label: Cable Node Split Planning Workflow
  description: When a cable node reaches capacity threshold, retrieves utilization data from Snowflake, creates a Jira planning epic, and notifies the network planning team via Microsoft Teams.
  tags:
  - network
  - cable
  - snowflake
  - jira
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: node-planning
    port: 8080
    tools:
    - name: plan-node-split
      description: Given a cable node ID and utilization percentage, initiate the node split planning workflow.
      inputParameters:
      - name: node_id
        in: body
        type: string
        description: Cable node identifier.
      - name: utilization_pct
        in: body
        type: number
        description: Current utilization percentage.
      steps:
      - name: get-node-data
        type: call
        call: snowflake.query-node-usage
        with:
          node_id: '{{node_id}}'
      - name: create-epic
        type: call
        call: jira.create-issue
        with:
          project: NETPLAN
          summary: 'Node split: {{node_id}} at {{utilization_pct}}%'
          issue_type: Epic
          description: 'Subscriber count: {{get-node-data.subscriber_count}}. Peak usage: {{get-node-data.peak_gbps}} Gbps'
      - name: notify-planning
        type: call
        call: teams.post-message
        with:
          channel_id: network-planning
          text: 'Node split needed: {{node_id}} ({{utilization_pct}}%). {{get-node-data.subscriber_count}} subscribers. Jira: {{create-epic.key}}'
  consumes:
  - type: http
    namespace: snowflake
    baseUri: https://comcast.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: statements
      path: /statements
      operations:
      - name: query-node-usage
        method: POST
  - type: http
    namespace: jira
    baseUri: https://comcast.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - name: issues
      path: /issue
      operations:
      - name: create-issue
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

Searches Splunk for network events matching a given CMTS node ID to aid in troubleshooting cable network issues.

naftiko: '0.5'
info:
  label: Splunk Network Event Search
  description: Searches Splunk for network events matching a given CMTS node ID to aid in troubleshooting cable network issues.
  tags:
  - network
  - splunk
capability:
  exposes:
  - type: mcp
    namespace: network-events
    port: 8080
    tools:
    - name: search-network-events
      description: Given a CMTS node ID, search Splunk for recent events and return the count and most common event type.
      inputParameters:
      - name: cmts_node_id
        in: body
        type: string
        description: CMTS node identifier.
      call: splunk.search
      with:
        cmts_node_id: '{{cmts_node_id}}'
      outputParameters:
      - name: event_count
        type: number
        mapping: $.results.event_count
      - name: top_event_type
        type: string
        mapping: $.results.top_type
  consumes:
  - type: http
    namespace: splunk
    baseUri: https://splunk.comcast.com:8089
    authentication:
      type: bearer
      token: $secrets.splunk_token
    resources:
    - name: search
      path: /services/search/jobs/export
      inputParameters:
      - name: cmts_node_id
        in: query
      operations:
      - name: search
        method: GET

Triggers a Terraform Cloud workspace run to provision or update cloud infrastructure, and creates a ServiceNow change record documenting the deployment.

naftiko: '0.5'
info:
  label: Terraform Cloud Infrastructure Provisioning
  description: Triggers a Terraform Cloud workspace run to provision or update cloud infrastructure, and creates a ServiceNow change record documenting the deployment.
  tags:
  - cloud
  - infrastructure
  - terraform
  - servicenow
  - change-management
capability:
  exposes:
  - type: mcp
    namespace: infra-provisioning
    port: 8080
    tools:
    - name: trigger-terraform-run
      description: Given a Terraform Cloud workspace ID and change description, trigger a plan and apply run and create a ServiceNow change record.
      inputParameters:
      - name: workspace_id
        in: body
        type: string
        description: The Terraform Cloud workspace ID.
      - name: change_description
        in: body
        type: string
        description: Description of the infrastructure change being applied.
      steps:
      - name: create-run
        type: call
        call: terraform.create-run
        with:
          workspaceId: '{{workspace_id}}'
          message: '{{change_description}}'
      - name: create-change-record
        type: call
        call: servicenow.create-change
        with:
          short_description: 'Terraform infra change: {{change_description}}'
          description: 'Workspace: {{workspace_id}}

            Run ID: {{create-run.runId}}'
          category: Infrastructure
  consumes:
  - type: http
    namespace: terraform
    baseUri: https://app.terraform.io/api/v2
    authentication:
      type: bearer
      token: $secrets.terraform_token
    resources:
    - name: runs
      path: /runs
      operations:
      - name: create-run
        method: POST
  - type: http
    namespace: servicenow
    baseUri: https://comcast.service-now.com/api/now
    authentication:
      type: basic
      username: $secrets.snow_user
      password: $secrets.snow_password
    resources:
    - name: change-requests
      path: /table/change_request
      operations:
      - name: create-change
        method: POST

Queries Snowflake for content viewership metrics including total views, average watch time, and completion rate.

naftiko: '0.5'
info:
  label: Snowflake Content Viewership Query
  description: Queries Snowflake for content viewership metrics including total views, average watch time, and completion rate.
  tags:
  - analytics
  - content
  - snowflake
capability:
  exposes:
  - type: mcp
    namespace: content-analytics
    port: 8080
    tools:
    - name: query-viewership
      description: Given a content ID and date range, return viewership analytics from Snowflake.
      inputParameters:
      - name: content_id
        in: body
        type: string
        description: Content identifier.
      - name: date_range
        in: body
        type: string
        description: Date range (e.g., 2026-03-01:2026-03-27).
      call: snowflake.run-query
      with:
        content_id: '{{content_id}}'
        date_range: '{{date_range}}'
      outputParameters:
      - name: total_views
        type: number
        mapping: $.data[0].total_views
      - name: avg_watch_min
        type: number
        mapping: $.data[0].avg_watch_minutes
      - name: completion_rate
        type: number
        mapping: $.data[0].completion_rate
  consumes:
  - type: http
    namespace: snowflake
    baseUri: https://comcast.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: statements
      path: /statements
      operations:
      - name: run-query
        method: POST

Audits compensation changes in Workday, logs them in Snowflake for compliance, and notifies the HR compliance team via Microsoft Teams.

naftiko: '0.5'
info:
  label: Workday Compensation Change Audit
  description: Audits compensation changes in Workday, logs them in Snowflake for compliance, and notifies the HR compliance team via Microsoft Teams.
  tags:
  - hr
  - compensation
  - compliance
  - workday
  - snowflake
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: comp-audit
    port: 8080
    tools:
    - name: audit-comp-change
      description: Given an employee ID with a recent compensation change, audit and log.
      inputParameters:
      - name: employee_id
        in: body
        type: string
        description: Workday employee ID.
      steps:
      - name: get-comp-history
        type: call
        call: workday.get-compensation
        with:
          employee_id: '{{employee_id}}'
      - name: log-audit
        type: call
        call: snowflake.insert-audit
        with:
          employee_id: '{{employee_id}}'
          old_salary: '{{get-comp-history.previous_salary}}'
          new_salary: '{{get-comp-history.current_salary}}'
      - name: notify-compliance
        type: call
        call: teams.post-message
        with:
          channel_id: hr-compliance
          text: 'Comp change: {{employee_id}}. Previous: ${{get-comp-history.previous_salary}} → ${{get-comp-history.current_salary}}'
  consumes:
  - type: http
    namespace: workday
    baseUri: https://wd5-impl-services1.workday.com/ccx/api/v1/comcast
    authentication:
      type: bearer
      token: $secrets.workday_token
    resources:
    - name: compensation
      path: /workers/{{employee_id}}/compensation
      operations:
      - name: get-compensation
        method: GET
  - type: http
    namespace: snowflake
    baseUri: https://comcast.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: statements
      path: /statements
      operations:
      - name: insert-audit
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

Pulls diversity and inclusion metrics from Workday, stores trend data in Snowflake, and posts the quarterly report to the HR leadership Teams channel.

naftiko: '0.5'
info:
  label: Workday Diversity Metrics Reporter
  description: Pulls diversity and inclusion metrics from Workday, stores trend data in Snowflake, and posts the quarterly report to the HR leadership Teams channel.
  tags:
  - hr
  - diversity
  - workday
  - snowflake
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: diversity-metrics
    port: 8080
    tools:
    - name: generate-diversity-report
      description: Given a fiscal quarter, generate the diversity metrics report.
      inputParameters:
      - name: fiscal_quarter
        in: body
        type: string
        description: Fiscal quarter (e.g., FY26-Q1).
      steps:
      - name: get-metrics
        type: call
        call: workday.get-diversity-stats
        with:
          quarter: '{{fiscal_quarter}}'
      - name: store-trends
        type: call
        call: snowflake.insert-diversity
        with:
          quarter: '{{fiscal_quarter}}'
          headcount: '{{get-metrics.total_headcount}}'
      - name: notify-leadership
        type: call
        call: teams.post-message
        with:
          channel_id: hr-leadership
          text: 'Diversity report: {{fiscal_quarter}}. Headcount: {{get-metrics.total_headcount}}. Representation: {{get-metrics.representation_pct}}%'
  consumes:
  - type: http
    namespace: workday
    baseUri: https://wd5-impl-services1.workday.com/ccx/api/v1/comcast
    authentication:
      type: bearer
      token: $secrets.workday_token
    resources:
    - name: diversity
      path: /reports/diversity
      operations:
      - name: get-diversity-stats
        method: GET
  - type: http
    namespace: snowflake
    baseUri: https://comcast.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: statements
      path: /statements
      operations:
      - name: insert-diversity
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

When Datadog detects VoIP quality degradation for Comcast Business customers, retrieves metrics, creates a ServiceNow incident, and pages the voice team via PagerDuty.

naftiko: '0.5'
info:
  label: Business VoIP Quality Alert Handler
  description: When Datadog detects VoIP quality degradation for Comcast Business customers, retrieves metrics, creates a ServiceNow incident, and pages the voice team via PagerDuty.
  tags:
  - voice
  - business
  - datadog
  - servicenow
  - pagerduty
capability:
  exposes:
  - type: mcp
    namespace: voip-quality
    port: 8080
    tools:
    - name: handle-voip-alert
      description: Given a Datadog alert for VoIP quality issues, investigate and escalate.
      inputParameters:
      - name: alert_id
        in: body
        type: string
        description: Datadog alert ID.
      - name: business_account
        in: body
        type: string
        description: Business customer account ID.
      steps:
      - name: get-alert
        type: call
        call: datadog.get-monitor
        with:
          alert_id: '{{alert_id}}'
      - name: create-incident
        type: call
        call: servicenow.create-incident
        with:
          short_description: 'VoIP quality: business account {{business_account}}'
          urgency: '2'
          description: '{{get-alert.message}}'
      - name: page-voice
        type: call
        call: pagerduty.create-incident
        with:
          service_id: voice-engineering
          title: 'VoIP quality: {{business_account}} — {{create-incident.number}}'
  consumes:
  - type: http
    namespace: datadog
    baseUri: https://api.datadoghq.com/api/v1
    authentication:
      type: bearer
      token: $secrets.datadog_api_key
    resources:
    - name: monitors
      path: /monitor/{{alert_id}}
      operations:
      - name: get-monitor
        method: GET
  - type: http
    namespace: servicenow
    baseUri: https://comcast.service-now.com/api/now
    authentication:
      type: basic
      username: $secrets.snow_user
      password: $secrets.snow_password
    resources:
    - name: incidents
      path: /table/incident
      operations:
      - name: create-incident
        method: POST
  - type: http
    namespace: pagerduty
    baseUri: https://api.pagerduty.com
    authentication:
      type: bearer
      token: $secrets.pagerduty_token
    resources:
    - name: incidents
      path: /incidents
      operations:
      - name: create-incident
        method: POST

When Okta detects a suspicious login, retrieves user details, creates a ServiceNow security incident, and alerts the security team via Microsoft Teams.

naftiko: '0.5'
info:
  label: Okta Suspicious Login Response
  description: When Okta detects a suspicious login, retrieves user details, creates a ServiceNow security incident, and alerts the security team via Microsoft Teams.
  tags:
  - security
  - identity
  - okta
  - servicenow
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: suspicious-login
    port: 8080
    tools:
    - name: handle-suspicious-login
      description: Given an Okta event ID for a suspicious login, investigate and escalate.
      inputParameters:
      - name: event_id
        in: body
        type: string
        description: Okta system log event ID.
      - name: user_email
        in: body
        type: string
        description: Affected user email.
      steps:
      - name: get-user
        type: call
        call: okta.get-user
        with:
          user_email: '{{user_email}}'
      - name: create-incident
        type: call
        call: servicenow.create-incident
        with:
          short_description: 'Suspicious login: {{user_email}}'
          urgency: '2'
          category: security
          description: 'User: {{get-user.name}}. Department: {{get-user.department}}. Event: {{event_id}}'
      - name: alert-security
        type: call
        call: teams.post-message
        with:
          channel_id: security-alerts
          text: 'Suspicious login: {{user_email}} ({{get-user.department}}). ServiceNow: {{create-incident.number}}'
  consumes:
  - type: http
    namespace: okta
    baseUri: https://comcast.okta.com/api/v1
    authentication:
      type: apikey
      key: Authorization
      value: $secrets.okta_api_token
      placement: header
    resources:
    - name: users
      path: /users/{{user_email}}
      operations:
      - name: get-user
        method: GET
  - type: http
    namespace: servicenow
    baseUri: https://comcast.service-now.com/api/now
    authentication:
      type: basic
      username: $secrets.snow_user
      password: $secrets.snow_password
    resources:
    - name: incidents
      path: /table/incident
      operations:
      - name: create-incident
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

When a GitHub release is published, annotates the Datadog deployment dashboard, creates a Jira release ticket, and notifies the engineering team via Microsoft Teams.

naftiko: '0.5'
info:
  label: GitHub Release Deployment Tracker
  description: When a GitHub release is published, annotates the Datadog deployment dashboard, creates a Jira release ticket, and notifies the engineering team via Microsoft Teams.
  tags:
  - deployment
  - github
  - datadog
  - jira
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: release-tracking
    port: 8080
    tools:
    - name: track-release
      description: Given a GitHub repository and release tag, track the deployment.
      inputParameters:
      - name: repo_name
        in: body
        type: string
        description: GitHub repository name.
      - name: release_tag
        in: body
        type: string
        description: Release tag (e.g., v2.3.1).
      steps:
      - name: get-release
        type: call
        call: github.get-release
        with:
          repo_name: '{{repo_name}}'
          tag: '{{release_tag}}'
      - name: annotate-datadog
        type: call
        call: datadog.create-event
        with:
          title: 'Deploy: {{repo_name}} {{release_tag}}'
          text: '{{get-release.body}}'
      - name: create-ticket
        type: call
        call: jira.create-issue
        with:
          project: REL
          summary: 'Release: {{repo_name}} {{release_tag}}'
          description: '{{get-release.body}}'
      - name: notify-team
        type: call
        call: teams.post-message
        with:
          channel_id: releases
          text: 'Released: {{repo_name}} {{release_tag}}. Jira: {{create-ticket.key}}'
  consumes:
  - type: http
    namespace: github
    baseUri: https://api.github.com
    authentication:
      type: bearer
      token: $secrets.github_token
    resources:
    - name: releases
      path: /repos/comcast/{{repo_name}}/releases/tags/{{tag}}
      operations:
      - name: get-release
        method: GET
  - type: http
    namespace: datadog
    baseUri: https://api.datadoghq.com/api/v1
    authentication:
      type: bearer
      token: $secrets.datadog_api_key
    resources:
    - name: events
      path: /events
      operations:
      - name: create-event
        method: POST
  - type: http
    namespace: jira
    baseUri: https://comcast.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - name: issues
      path: /issue
      operations:
      - name: create-issue
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

Retrieves Comcast Business opportunity pipeline from Salesforce, calculates weighted forecast, and posts the weekly summary to the sales leadership Teams channel.

naftiko: '0.5'
info:
  label: Salesforce Business Opportunity Pipeline
  description: Retrieves Comcast Business opportunity pipeline from Salesforce, calculates weighted forecast, and posts the weekly summary to the sales leadership Teams channel.
  tags:
  - sales
  - crm
  - salesforce
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: sales-pipeline
    port: 8080
    tools:
    - name: generate-pipeline-report
      description: Given a sales region, generate the opportunity pipeline report.
      inputParameters:
      - name: region
        in: body
        type: string
        description: Sales region.
      steps:
      - name: get-pipeline
        type: call
        call: salesforce.query-opportunities
        with:
          region: '{{region}}'
      - name: notify-leadership
        type: call
        call: teams.post-message
        with:
          channel_id: sales-leadership
          text: 'Pipeline: {{region}}. Total: ${{get-pipeline.total_value}}. Weighted: ${{get-pipeline.weighted_value}}. Deals: {{get-pipeline.deal_count}}'
  consumes:
  - type: http
    namespace: salesforce
    baseUri: https://comcast.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: opportunities
      path: /query
      operations:
      - name: query-opportunities
        method: GET
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

When Datadog detects Kubernetes cluster health degradation, retrieves node metrics, creates a Jira ticket, and pages the platform team via PagerDuty.

naftiko: '0.5'
info:
  label: Datadog Kubernetes Cluster Health Responder
  description: When Datadog detects Kubernetes cluster health degradation, retrieves node metrics, creates a Jira ticket, and pages the platform team via PagerDuty.
  tags:
  - cloud
  - kubernetes
  - datadog
  - jira
  - pagerduty
capability:
  exposes:
  - type: mcp
    namespace: k8s-health
    port: 8080
    tools:
    - name: handle-cluster-alert
      description: Given a Datadog alert for K8s cluster issues, investigate and escalate.
      inputParameters:
      - name: alert_id
        in: body
        type: string
        description: Datadog alert ID.
      - name: cluster_name
        in: body
        type: string
        description: Kubernetes cluster name.
      steps:
      - name: get-alert
        type: call
        call: datadog.get-monitor
        with:
          alert_id: '{{alert_id}}'
      - name: create-ticket
        type: call
        call: jira.create-issue
        with:
          project: PLATFORM
          summary: 'K8s cluster: {{cluster_name}}'
          description: '{{get-alert.message}}'
      - name: page-platform
        type: call
        call: pagerduty.create-incident
        with:
          service_id: platform-engineering
          title: 'K8s: {{cluster_name}} — {{create-ticket.key}}'
  consumes:
  - type: http
    namespace: datadog
    baseUri: https://api.datadoghq.com/api/v1
    authentication:
      type: bearer
      token: $secrets.datadog_api_key
    resources:
    - name: monitors
      path: /monitor/{{alert_id}}
      operations:
      - name: get-monitor
        method: GET
  - type: http
    namespace: jira
    baseUri: https://comcast.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - name: issues
      path: /issue
      operations:
      - name: create-issue
        method: POST
  - type: http
    namespace: pagerduty
    baseUri: https://api.pagerduty.com
    authentication:
      type: bearer
      token: $secrets.pagerduty_token
    resources:
    - name: incidents
      path: /incidents
      operations:
      - name: create-incident
        method: POST

When a Workday termination is processed, deactivates the employee's Okta account, disables Microsoft 365, and resolves open ServiceNow tickets.

naftiko: '0.5'
info:
  label: Employee Offboarding Access Revocation
  description: When a Workday termination is processed, deactivates the employee's Okta account, disables Microsoft 365, and resolves open ServiceNow tickets.
  tags:
  - hr
  - offboarding
  - workday
  - okta
  - servicenow
capability:
  exposes:
  - type: mcp
    namespace: hr-offboarding
    port: 8080
    tools:
    - name: trigger-offboarding
      description: Given a Workday employee ID and termination date, deactivate Okta, disable Microsoft Graph account, and resolve open ServiceNow tickets.
      inputParameters:
      - name: employee_id
        in: body
        type: string
        description: The Workday worker ID for the departing employee.
      - name: termination_date
        in: body
        type: string
        description: Termination date in YYYY-MM-DD format.
      steps:
      - name: get-worker
        type: call
        call: workday.get-worker
        with:
          worker_id: '{{employee_id}}'
      - name: deactivate-okta
        type: call
        call: okta.deactivate-user
        with:
          login: '{{get-worker.work_email}}'
      - name: disable-m365
        type: call
        call: msgraph.update-user
        with:
          userPrincipalName: '{{get-worker.work_email}}'
          accountEnabled: 'false'
      - name: close-tickets
        type: call
        call: servicenow.close-user-tickets
        with:
          caller_id: '{{get-worker.work_email}}'
  consumes:
  - type: http
    namespace: workday
    baseUri: https://wd2-impl-services1.workday.com/ccx/api/v1
    authentication:
      type: bearer
      token: $secrets.workday_token
    resources:
    - name: workers
      path: /comcast/workers/{{worker_id}}
      inputParameters:
      - name: worker_id
        in: path
      operations:
      - name: get-worker
        method: GET
  - type: http
    namespace: okta
    baseUri: https://comcast.okta.com/api/v1
    authentication:
      type: apikey
      key: Authorization
      value: $secrets.okta_api_token
      placement: header
    resources:
    - name: users
      path: /users/{{login}}/lifecycle/deactivate
      inputParameters:
      - name: login
        in: path
      operations:
      - name: deactivate-user
        method: POST
  - type: http
    namespace: msgraph
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - name: users
      path: /users/{{userPrincipalName}}
      inputParameters:
      - name: userPrincipalName
        in: path
      operations:
      - name: update-user
        method: PATCH
  - type: http
    namespace: servicenow
    baseUri: https://comcast.service-now.com/api/now
    authentication:
      type: basic
      username: $secrets.snow_user
      password: $secrets.snow_password
    resources:
    - name: incidents
      path: /table/incident
      operations:
      - name: close-user-tickets
        method: PATCH

When a Salesforce NPS survey returns a detractor score, retrieves subscriber details, creates a Jira follow-up task, and notifies the customer experience team via Microsoft Teams.

naftiko: '0.5'
info:
  label: Salesforce NPS Detractor Response
  description: When a Salesforce NPS survey returns a detractor score, retrieves subscriber details, creates a Jira follow-up task, and notifies the customer experience team via Microsoft Teams.
  tags:
  - customer-experience
  - nps
  - salesforce
  - jira
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: nps-response
    port: 8080
    tools:
    - name: handle-detractor
      description: Given a Salesforce NPS survey ID with detractor score, initiate follow-up.
      inputParameters:
      - name: survey_id
        in: body
        type: string
        description: Salesforce survey response ID.
      - name: account_id
        in: body
        type: string
        description: Subscriber account ID.
      steps:
      - name: get-account
        type: call
        call: salesforce.get-account
        with:
          account_id: '{{account_id}}'
      - name: create-followup
        type: call
        call: jira.create-issue
        with:
          project: CX
          summary: 'NPS detractor: {{get-account.Name}}'
          description: 'Survey: {{survey_id}}. Service tier: {{get-account.ServiceTier__c}}'
      - name: notify-cx
        type: call
        call: teams.post-message
        with:
          channel_id: customer-experience
          text: 'NPS detractor: {{get-account.Name}} ({{account_id}}). Jira: {{create-followup.key}}'
  consumes:
  - type: http
    namespace: salesforce
    baseUri: https://comcast.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: accounts
      path: /query
      operations:
      - name: get-account
        method: GET
  - type: http
    namespace: jira
    baseUri: https://comcast.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - name: issues
      path: /issue
      operations:
      - name: create-issue
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

Validates ServiceNow CMDB configuration item relationships, identifies orphaned CIs, creates Jira cleanup tasks, and notifies the CMDB team via Microsoft Teams.

naftiko: '0.5'
info:
  label: ServiceNow CMDB CI Relationship Validator
  description: Validates ServiceNow CMDB configuration item relationships, identifies orphaned CIs, creates Jira cleanup tasks, and notifies the CMDB team via Microsoft Teams.
  tags:
  - itsm
  - cmdb
  - servicenow
  - jira
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: cmdb-validation
    port: 8080
    tools:
    - name: validate-ci-relationships
      description: Given a CI class, validate relationships and identify orphans.
      inputParameters:
      - name: ci_class
        in: body
        type: string
        description: ServiceNow CI class name.
      steps:
      - name: get-orphans
        type: call
        call: servicenow.query-orphan-cis
        with:
          ci_class: '{{ci_class}}'
      - name: create-cleanup
        type: call
        call: jira.create-issue
        with:
          project: CMDB
          summary: 'Orphan CIs: {{ci_class}} — {{get-orphans.count}} found'
          description: 'Class: {{ci_class}}. Orphan count: {{get-orphans.count}}'
      - name: notify-team
        type: call
        call: teams.post-message
        with:
          channel_id: cmdb-team
          text: 'CMDB validation: {{ci_class}}. {{get-orphans.count}} orphan CIs. Jira: {{create-cleanup.key}}'
  consumes:
  - type: http
    namespace: servicenow
    baseUri: https://comcast.service-now.com/api/now
    authentication:
      type: basic
      username: $secrets.snow_user
      password: $secrets.snow_password
    resources:
    - name: cmdb
      path: /table/{{ci_class}}
      operations:
      - name: query-orphan-cis
        method: GET
  - type: http
    namespace: jira
    baseUri: https://comcast.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - name: issues
      path: /issue
      operations:
      - name: create-issue
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

When a new lead is created in Salesforce, enriches the record with ZoomInfo firmographic data and updates the account owner based on territory rules.

naftiko: '0.5'
info:
  label: Salesforce Lead Enrichment
  description: When a new lead is created in Salesforce, enriches the record with ZoomInfo firmographic data and updates the account owner based on territory rules.
  tags:
  - crm
  - sales
  - salesforce
  - zoominfo
  - lead-management
capability:
  exposes:
  - type: mcp
    namespace: crm-leads
    port: 8080
    tools:
    - name: enrich-lead
      description: Given a Salesforce lead ID, fetch firmographic data from ZoomInfo and update the lead record with enriched company details and revenue information.
      inputParameters:
      - name: lead_id
        in: body
        type: string
        description: The Salesforce lead record ID.
      steps:
      - name: get-lead
        type: call
        call: salesforce.get-lead
        with:
          lead_id: '{{lead_id}}'
      - name: enrich-company
        type: call
        call: zoominfo.search-company
        with:
          companyName: '{{get-lead.Company}}'
      - name: update-lead
        type: call
        call: salesforce-update.update-lead
        with:
          lead_id: '{{lead_id}}'
          AnnualRevenue: '{{enrich-company.revenue}}'
          NumberOfEmployees: '{{enrich-company.employeeCount}}'
          Industry: '{{enrich-company.industry}}'
  consumes:
  - type: http
    namespace: salesforce
    baseUri: https://comcast.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: leads
      path: /sobjects/Lead/{{lead_id}}
      inputParameters:
      - name: lead_id
        in: path
      operations:
      - name: get-lead
        method: GET
  - type: http
    namespace: zoominfo
    baseUri: https://api.zoominfo.com/search
    authentication:
      type: bearer
      token: $secrets.zoominfo_token
    resources:
    - name: companies
      path: /company
      operations:
      - name: search-company
        method: POST
  - type: http
    namespace: salesforce-update
    baseUri: https://comcast.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: leads
      path: /sobjects/Lead/{{lead_id}}
      inputParameters:
      - name: lead_id
        in: path
      operations:
      - name: update-lead
        method: PATCH

When a new hire is created in Workday, opens a ServiceNow onboarding ticket, provisions Okta access, and sends a Microsoft Teams welcome message.

naftiko: '0.5'
info:
  label: New Employee Onboarding Orchestrator
  description: When a new hire is created in Workday, opens a ServiceNow onboarding ticket, provisions Okta access, and sends a Microsoft Teams welcome message.
  tags:
  - hr
  - onboarding
  - workday
  - servicenow
  - okta
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: hr-onboarding
    port: 8080
    tools:
    - name: trigger-onboarding
      description: 'Given a Workday employee ID and start date, orchestrate the full onboarding sequence: open a ServiceNow ticket, provision Okta, and send a Teams welcome.'
      inputParameters:
      - name: employee_id
        in: body
        type: string
        description: The Workday worker ID for the new hire.
      - name: start_date
        in: body
        type: string
        description: Employee start date in YYYY-MM-DD format.
      steps:
      - name: get-worker
        type: call
        call: workday.get-worker
        with:
          worker_id: '{{employee_id}}'
      - name: create-snow-ticket
        type: call
        call: servicenow.create-incident
        with:
          short_description: 'New hire onboarding: {{get-worker.full_name}}'
          category: hr_onboarding
      - name: activate-okta
        type: call
        call: okta.create-user
        with:
          login: '{{get-worker.work_email}}'
          firstName: '{{get-worker.first_name}}'
          lastName: '{{get-worker.last_name}}'
      - name: send-welcome
        type: call
        call: msteams.post-message
        with:
          recipient: '{{get-worker.work_email}}'
          message: 'Welcome to Comcast, {{get-worker.first_name}}! Your onboarding ticket: {{create-snow-ticket.number}}.'
  consumes:
  - type: http
    namespace: workday
    baseUri: https://wd2-impl-services1.workday.com/ccx/api/v1
    authentication:
      type: bearer
      token: $secrets.workday_token
    resources:
    - name: workers
      path: /comcast/workers/{{worker_id}}
      inputParameters:
      - name: worker_id
        in: path
      operations:
      - name: get-worker
        method: GET
  - type: http
    namespace: servicenow
    baseUri: https://comcast.service-now.com/api/now
    authentication:
      type: basic
      username: $secrets.snow_user
      password: $secrets.snow_password
    resources:
    - name: incidents
      path: /table/incident
      operations:
      - name: create-incident
        method: POST
  - type: http
    namespace: okta
    baseUri: https://comcast.okta.com/api/v1
    authentication:
      type: apikey
      key: Authorization
      value: $secrets.okta_api_token
      placement: header
    resources:
    - name: users
      path: /users
      operations:
      - name: create-user
        method: POST
  - type: http
    namespace: msteams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - name: messages
      path: /chats/messages
      operations:
      - name: post-message
        method: POST

Audits Terraform-managed security groups for overly permissive rules, creates Jira compliance tickets, and notifies the cloud security team via Microsoft Teams.

naftiko: '0.5'
info:
  label: Terraform Security Group Audit
  description: Audits Terraform-managed security groups for overly permissive rules, creates Jira compliance tickets, and notifies the cloud security team via Microsoft Teams.
  tags:
  - security
  - cloud
  - terraform
  - jira
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: sg-audit
    port: 8080
    tools:
    - name: audit-security-groups
      description: Given a Terraform workspace, audit security group rules for compliance.
      inputParameters:
      - name: workspace_name
        in: body
        type: string
        description: Terraform workspace name.
      steps:
      - name: get-state
        type: call
        call: terraform.get-state
        with:
          workspace_name: '{{workspace_name}}'
      - name: create-ticket
        type: call
        call: jira.create-issue
        with:
          project: CLOUDSEC
          summary: 'SG audit: {{workspace_name}}'
          description: 'Open rules found: {{get-state.open_rule_count}}'
      - name: notify-security
        type: call
        call: teams.post-message
        with:
          channel_id: cloud-security
          text: 'SG audit: {{workspace_name}}. Open rules: {{get-state.open_rule_count}}. Jira: {{create-ticket.key}}'
  consumes:
  - type: http
    namespace: terraform
    baseUri: https://app.terraform.io/api/v2
    authentication:
      type: bearer
      token: $secrets.terraform_token
    resources:
    - name: state
      path: /workspaces/{{workspace_name}}/current-state-version
      operations:
      - name: get-state
        method: GET
  - type: http
    namespace: jira
    baseUri: https://comcast.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - name: issues
      path: /issue
      operations:
      - name: create-issue
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

Monitors the Peacock content recommendation ML pipeline via Datadog, creates a Jira ticket when accuracy drops, and notifies the ML team via Microsoft Teams.

naftiko: '0.5'
info:
  label: Peacock Content Recommendation Pipeline Monitor
  description: Monitors the Peacock content recommendation ML pipeline via Datadog, creates a Jira ticket when accuracy drops, and notifies the ML team via Microsoft Teams.
  tags:
  - streaming
  - ml-ops
  - datadog
  - jira
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: ml-pipeline
    port: 8080
    tools:
    - name: handle-recommendation-alert
      description: Given a Datadog alert for recommendation pipeline degradation, investigate and escalate.
      inputParameters:
      - name: alert_id
        in: body
        type: string
        description: Datadog alert ID.
      - name: pipeline_name
        in: body
        type: string
        description: ML pipeline name.
      steps:
      - name: get-metrics
        type: call
        call: datadog.get-monitor
        with:
          alert_id: '{{alert_id}}'
      - name: create-ticket
        type: call
        call: jira.create-issue
        with:
          project: MLOPS
          summary: 'Recommendation accuracy drop: {{pipeline_name}}'
          description: '{{get-metrics.message}}'
      - name: notify-ml-team
        type: call
        call: teams.post-message
        with:
          channel_id: ml-engineering
          text: 'Recommendation pipeline alert: {{pipeline_name}}. Jira: {{create-ticket.key}}'
  consumes:
  - type: http
    namespace: datadog
    baseUri: https://api.datadoghq.com/api/v1
    authentication:
      type: bearer
      token: $secrets.datadog_api_key
    resources:
    - name: monitors
      path: /monitor/{{alert_id}}
      operations:
      - name: get-monitor
        method: GET
  - type: http
    namespace: jira
    baseUri: https://comcast.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - name: issues
      path: /issue
      operations:
      - name: create-issue
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

When a high-volume alert fires in Splunk, sends the log context to Anthropic Claude for root cause analysis and posts the AI-generated triage summary to the engineering Teams channel.

naftiko: '0.5'
info:
  label: Intelligent Incident Triage with Claude
  description: When a high-volume alert fires in Splunk, sends the log context to Anthropic Claude for root cause analysis and posts the AI-generated triage summary to the engineering Teams channel.
  tags:
  - ai
  - automation
  - anthropic
  - splunk
  - microsoft-teams
  - incident-response
capability:
  exposes:
  - type: mcp
    namespace: ai-triage
    port: 8080
    tools:
    - name: triage-incident-with-ai
      description: Given a Splunk alert message and affected service, send log context to Claude for root cause analysis and post the triage summary to the engineering Teams channel.
      inputParameters:
      - name: alert_message
        in: body
        type: string
        description: The full Splunk alert message text including log snippets.
      - name: service_name
        in: body
        type: string
        description: The service or application that generated the alert.
      - name: teams_channel_id
        in: body
        type: string
        description: The Teams channel ID to post the triage summary to.
      steps:
      - name: analyze-logs
        type: call
        call: anthropic.create-message
        with:
          model: claude-3-5-sonnet-20241022
          content: 'Analyze this Splunk alert for {{service_name}} and provide a concise root cause analysis with recommended remediation steps:


            {{alert_message}}'
      - name: post-triage
        type: call
        call: msteams.post-channel-message
        with:
          channelId: '{{teams_channel_id}}'
          message: 'AI Triage for {{service_name}}:

            {{analyze-logs.content}}'
  consumes:
  - type: http
    namespace: anthropic
    baseUri: https://api.anthropic.com/v1
    authentication:
      type: apikey
      key: x-api-key
      value: $secrets.anthropic_api_key
      placement: header
    resources:
    - name: messages
      path: /messages
      operations:
      - name: create-message
        method: POST
  - type: http
    namespace: msteams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - name: channel-messages
      path: /teams/channels/{{channelId}}/messages
      inputParameters:
      - name: channelId
        in: path
      operations:
      - name: post-channel-message
        method: POST

Creates a ServiceNow standard change request for a planned network maintenance window, associates affected CIs, and notifies the NOC team in Teams.

naftiko: '0.5'
info:
  label: ServiceNow Change Request for Network Maintenance
  description: Creates a ServiceNow standard change request for a planned network maintenance window, associates affected CIs, and notifies the NOC team in Teams.
  tags:
  - itsm
  - change-management
  - servicenow
  - microsoft-teams
  - network
capability:
  exposes:
  - type: mcp
    namespace: change-management
    port: 8080
    tools:
    - name: open-network-change
      description: Given a maintenance description, affected network CIs, and planned time window, create a ServiceNow change request and notify the NOC team in Teams.
      inputParameters:
      - name: change_description
        in: body
        type: string
        description: Description of the planned network maintenance activity.
      - name: affected_ci
        in: body
        type: string
        description: Comma-separated list of affected network configuration items.
      - name: planned_start
        in: body
        type: string
        description: Planned maintenance start in ISO 8601 format.
      - name: planned_end
        in: body
        type: string
        description: Planned maintenance end in ISO 8601 format.
      steps:
      - name: create-change
        type: call
        call: servicenow.create-change
        with:
          short_description: '{{change_description}}'
          type: standard
          start_date: '{{planned_start}}'
          end_date: '{{planned_end}}'
          cmdb_ci: '{{affected_ci}}'
      - name: notify-noc
        type: call
        call: msteams.post-channel-message
        with:
          channelId: noc-team
          message: 'Network change {{create-change.number}} scheduled: {{change_description}} | Window: {{planned_start}} to {{planned_end}}'
  consumes:
  - type: http
    namespace: servicenow
    baseUri: https://comcast.service-now.com/api/now
    authentication:
      type: basic
      username: $secrets.snow_user
      password: $secrets.snow_password
    resources:
    - name: change-requests
      path: /table/change_request
      operations:
      - name: create-change
        method: POST
  - type: http
    namespace: msteams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - name: channel-messages
      path: /teams/channels/{{channelId}}/messages
      inputParameters:
      - name: channelId
        in: path
      operations:
      - name: post-channel-message
        method: POST

Checks the current latency and error rate for Peacock and Xfinity streaming services in Datadog.

naftiko: '0.5'
info:
  label: Datadog Streaming Service Latency Check
  description: Checks the current latency and error rate for Peacock and Xfinity streaming services in Datadog.
  tags:
  - streaming
  - observability
  - datadog
capability:
  exposes:
  - type: mcp
    namespace: streaming-health
    port: 8080
    tools:
    - name: get-streaming-latency
      description: Given a streaming service name, return p50 and p99 latency and error rate.
      inputParameters:
      - name: service_name
        in: body
        type: string
        description: Streaming service name (e.g., peacock-api, xfinity-stream).
      call: datadog.get-service-stats
      with:
        service_name: '{{service_name}}'
      outputParameters:
      - name: p50_latency_ms
        type: number
        mapping: $.series[0].p50
      - name: p99_latency_ms
        type: number
        mapping: $.series[0].p99
      - name: error_rate
        type: number
        mapping: $.series[0].error_rate
  consumes:
  - type: http
    namespace: datadog
    baseUri: https://api.datadoghq.com/api/v1
    authentication:
      type: bearer
      token: $secrets.datadog_api_key
    resources:
    - name: metrics
      path: /query
      inputParameters:
      - name: service_name
        in: query
      operations:
      - name: get-service-stats
        method: GET

When a Snowflake data pipeline fails, retrieves error details, creates a Jira bug for the data engineering team, and posts the failure to the data-ops Teams channel.

naftiko: '0.5'
info:
  label: Snowflake Data Pipeline Failure Handler
  description: When a Snowflake data pipeline fails, retrieves error details, creates a Jira bug for the data engineering team, and posts the failure to the data-ops Teams channel.
  tags:
  - data-engineering
  - snowflake
  - jira
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: data-pipeline-ops
    port: 8080
    tools:
    - name: handle-pipeline-failure
      description: Given a Snowflake task name and error code, create a tracking ticket and notify.
      inputParameters:
      - name: task_name
        in: body
        type: string
        description: Snowflake task name.
      - name: error_code
        in: body
        type: string
        description: Error code from the failed run.
      steps:
      - name: get-task-history
        type: call
        call: snowflake.get-task-history
        with:
          task_name: '{{task_name}}'
      - name: create-bug
        type: call
        call: jira.create-issue
        with:
          project: DATA
          summary: 'Pipeline failure: {{task_name}}'
          issue_type: Bug
          description: 'Error: {{error_code}}. Last success: {{get-task-history.last_success}}'
      - name: notify-data-ops
        type: call
        call: teams.post-message
        with:
          channel_id: data-ops
          text: 'Pipeline failed: {{task_name}} ({{error_code}}). Jira: {{create-bug.key}}'
  consumes:
  - type: http
    namespace: snowflake
    baseUri: https://comcast.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: tasks
      path: /statements
      operations:
      - name: get-task-history
        method: POST
  - type: http
    namespace: jira
    baseUri: https://comcast.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - name: issues
      path: /issue
      operations:
      - name: create-issue
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

Checks the last refresh status and duration for a Power BI dataset used in Comcast operational dashboards.

naftiko: '0.5'
info:
  label: Power BI Dataset Refresh Status
  description: Checks the last refresh status and duration for a Power BI dataset used in Comcast operational dashboards.
  tags:
  - analytics
  - dashboards
  - power-bi
capability:
  exposes:
  - type: mcp
    namespace: bi-refresh
    port: 8080
    tools:
    - name: get-refresh-status
      description: Given a Power BI dataset ID, return the last refresh status, time, and duration.
      inputParameters:
      - name: dataset_id
        in: body
        type: string
        description: Power BI dataset ID.
      call: powerbi.get-refresh-history
      with:
        dataset_id: '{{dataset_id}}'
      outputParameters:
      - name: status
        type: string
        mapping: $.value[0].status
      - name: end_time
        type: string
        mapping: $.value[0].endTime
      - name: duration_sec
        type: number
        mapping: $.value[0].durationSeconds
  consumes:
  - type: http
    namespace: powerbi
    baseUri: https://api.powerbi.com/v1.0/myorg
    authentication:
      type: bearer
      token: $secrets.powerbi_token
    resources:
    - name: refreshes
      path: /datasets/{{dataset_id}}/refreshes
      inputParameters:
      - name: dataset_id
        in: path
      operations:
      - name: get-refresh-history
        method: GET

When a Datadog SLO drops below its error budget threshold, creates a ServiceNow incident and notifies the responsible engineering team in Microsoft Teams.

naftiko: '0.5'
info:
  label: Datadog SLO Breach Alert
  description: When a Datadog SLO drops below its error budget threshold, creates a ServiceNow incident and notifies the responsible engineering team in Microsoft Teams.
  tags:
  - observability
  - itsm
  - datadog
  - servicenow
  - microsoft-teams
  - slo
capability:
  exposes:
  - type: mcp
    namespace: slo-ops
    port: 8080
    tools:
    - name: handle-slo-breach
      description: Given a Datadog SLO ID and service name, retrieve current SLO status, open a ServiceNow incident, and page the engineering team in Teams.
      inputParameters:
      - name: slo_id
        in: body
        type: string
        description: The Datadog SLO ID that is breaching its error budget.
      - name: service_name
        in: body
        type: string
        description: The service name associated with the SLO.
      steps:
      - name: get-slo-status
        type: call
        call: datadog.get-slo
        with:
          slo_id: '{{slo_id}}'
      - name: create-incident
        type: call
        call: servicenow.create-incident
        with:
          short_description: 'SLO breach: {{service_name}}'
          description: 'SLO {{slo_id}} for {{service_name}} has breached error budget. Current: {{get-slo-status.sli_value}}%'
          urgency: '2'
      - name: notify-team
        type: call
        call: msteams.post-channel-message
        with:
          channelId: engineering-alerts
          message: 'SLO breach: {{service_name}} | SLO: {{slo_id}} | Current SLI: {{get-slo-status.sli_value}}% | ServiceNow: {{create-incident.number}}'
  consumes:
  - type: http
    namespace: datadog
    baseUri: https://api.datadoghq.com/api/v1
    authentication:
      type: apikey
      key: DD-API-KEY
      value: $secrets.datadog_api_key
      placement: header
    resources:
    - name: slos
      path: /slo/{{slo_id}}
      inputParameters:
      - name: slo_id
        in: path
      operations:
      - name: get-slo
        method: GET
  - type: http
    namespace: servicenow
    baseUri: https://comcast.service-now.com/api/now
    authentication:
      type: basic
      username: $secrets.snow_user
      password: $secrets.snow_password
    resources:
    - name: incidents
      path: /table/incident
      operations:
      - name: create-incident
        method: POST
  - type: http
    namespace: msteams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - name: channel-messages
      path: /teams/channels/{{channelId}}/messages
      inputParameters:
      - name: channelId
        in: path
      operations:
      - name: post-channel-message
        method: POST

When Splunk detects potential account fraud, retrieves subscriber details from Salesforce, creates a ServiceNow security incident, and notifies the fraud team via Microsoft Teams.

naftiko: '0.5'
info:
  label: Splunk Fraud Detection Alert Handler
  description: When Splunk detects potential account fraud, retrieves subscriber details from Salesforce, creates a ServiceNow security incident, and notifies the fraud team via Microsoft Teams.
  tags:
  - security
  - fraud
  - splunk
  - salesforce
  - servicenow
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: fraud-detection
    port: 8080
    tools:
    - name: handle-fraud-alert
      description: Given a Splunk alert for potential fraud, investigate and escalate.
      inputParameters:
      - name: search_id
        in: body
        type: string
        description: Splunk search job ID.
      - name: account_id
        in: body
        type: string
        description: Affected subscriber account ID.
      steps:
      - name: get-account
        type: call
        call: salesforce.get-account
        with:
          account_id: '{{account_id}}'
      - name: create-incident
        type: call
        call: servicenow.create-incident
        with:
          short_description: 'Potential fraud: {{account_id}} — {{get-account.Name}}'
          urgency: '1'
          category: security
      - name: notify-fraud-team
        type: call
        call: teams.post-message
        with:
          channel_id: fraud-investigations
          text: 'Fraud alert: {{get-account.Name}} ({{account_id}}). Splunk: {{search_id}}. ServiceNow: {{create-incident.number}}'
  consumes:
  - type: http
    namespace: salesforce
    baseUri: https://comcast.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: accounts
      path: /query
      operations:
      - name: get-account
        method: GET
  - type: http
    namespace: servicenow
    baseUri: https://comcast.service-now.com/api/now
    authentication:
      type: basic
      username: $secrets.snow_user
      password: $secrets.snow_password
    resources:
    - name: incidents
      path: /table/incident
      operations:
      - name: create-incident
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

After a PagerDuty incident resolves, retrieves the timeline, creates a Confluence postmortem page, and shares the link via Microsoft Teams.

naftiko: '0.5'
info:
  label: PagerDuty Postmortem Generator
  description: After a PagerDuty incident resolves, retrieves the timeline, creates a Confluence postmortem page, and shares the link via Microsoft Teams.
  tags:
  - sre
  - postmortem
  - pagerduty
  - confluence
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: postmortem
    port: 8080
    tools:
    - name: generate-postmortem
      description: Given a PagerDuty incident ID, create a postmortem document.
      inputParameters:
      - name: incident_id
        in: body
        type: string
        description: PagerDuty incident ID.
      steps:
      - name: get-incident
        type: call
        call: pagerduty.get-incident
        with:
          incident_id: '{{incident_id}}'
      - name: create-page
        type: call
        call: confluence.create-page
        with:
          space_key: SRE
          title: 'Postmortem: {{get-incident.title}}'
          content: 'Duration: {{get-incident.duration}}. Service: {{get-incident.service_name}}'
      - name: notify-sre
        type: call
        call: teams.post-message
        with:
          channel_id: sre-team
          text: 'Postmortem: {{get-incident.title}}. Confluence: {{create-page.url}}'
  consumes:
  - type: http
    namespace: pagerduty
    baseUri: https://api.pagerduty.com
    authentication:
      type: bearer
      token: $secrets.pagerduty_token
    resources:
    - name: incidents
      path: /incidents/{{incident_id}}
      operations:
      - name: get-incident
        method: GET
  - type: http
    namespace: confluence
    baseUri: https://comcast.atlassian.net/wiki/api/v2
    authentication:
      type: basic
      username: $secrets.confluence_user
      password: $secrets.confluence_api_token
    resources:
    - name: pages
      path: /pages
      operations:
      - name: create-page
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

When Datadog detects a WiFi hotspot cluster outage, retrieves affected area data, creates a ServiceNow incident, and notifies field operations via Microsoft Teams.

naftiko: '0.5'
info:
  label: Xfinity WiFi Hotspot Outage Handler
  description: When Datadog detects a WiFi hotspot cluster outage, retrieves affected area data, creates a ServiceNow incident, and notifies field operations via Microsoft Teams.
  tags:
  - network
  - wifi
  - datadog
  - servicenow
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: wifi-ops
    port: 8080
    tools:
    - name: handle-hotspot-outage
      description: Given a Datadog alert for WiFi hotspot outage, create incident and notify field ops.
      inputParameters:
      - name: alert_id
        in: body
        type: string
        description: Datadog alert ID.
      - name: cluster_id
        in: body
        type: string
        description: WiFi hotspot cluster ID.
      steps:
      - name: get-alert
        type: call
        call: datadog.get-monitor
        with:
          alert_id: '{{alert_id}}'
      - name: create-incident
        type: call
        call: servicenow.create-incident
        with:
          short_description: 'Xfinity WiFi hotspot outage: cluster {{cluster_id}}'
          urgency: '2'
          description: '{{get-alert.message}}'
      - name: notify-field-ops
        type: call
        call: teams.post-message
        with:
          channel_id: field-operations
          text: 'WiFi hotspot outage: cluster {{cluster_id}}. ServiceNow: {{create-incident.number}}'
  consumes:
  - type: http
    namespace: datadog
    baseUri: https://api.datadoghq.com/api/v1
    authentication:
      type: bearer
      token: $secrets.datadog_api_key
    resources:
    - name: monitors
      path: /monitor/{{alert_id}}
      operations:
      - name: get-monitor
        method: GET
  - type: http
    namespace: servicenow
    baseUri: https://comcast.service-now.com/api/now
    authentication:
      type: basic
      username: $secrets.snow_user
      password: $secrets.snow_password
    resources:
    - name: incidents
      path: /table/incident
      operations:
      - name: create-incident
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

When a streaming CDN failure is detected in Datadog, creates a ServiceNow P1 incident, alerts the streaming ops team via Microsoft Teams, and triggers CloudFront failover.

naftiko: '0.5'
info:
  label: Streaming Content Delivery Failure Handler
  description: When a streaming CDN failure is detected in Datadog, creates a ServiceNow P1 incident, alerts the streaming ops team via Microsoft Teams, and triggers CloudFront failover.
  tags:
  - streaming
  - cdn
  - datadog
  - servicenow
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: streaming-cdn-ops
    port: 8080
    tools:
    - name: handle-cdn-failure
      description: Given a Datadog alert ID for CDN failure, create incident and trigger failover.
      inputParameters:
      - name: alert_id
        in: body
        type: string
        description: Datadog alert ID.
      - name: cdn_region
        in: body
        type: string
        description: Affected CDN region.
      steps:
      - name: get-alert
        type: call
        call: datadog.get-monitor
        with:
          alert_id: '{{alert_id}}'
      - name: create-incident
        type: call
        call: servicenow.create-incident
        with:
          short_description: 'CDN failure: {{cdn_region}} streaming'
          urgency: '1'
          impact: '1'
          description: '{{get-alert.message}}'
      - name: notify-ops
        type: call
        call: teams.post-message
        with:
          channel_id: streaming-ops
          text: 'CDN P1: {{cdn_region}}. ServiceNow: {{create-incident.number}}. Failover initiated.'
  consumes:
  - type: http
    namespace: datadog
    baseUri: https://api.datadoghq.com/api/v1
    authentication:
      type: bearer
      token: $secrets.datadog_api_key
    resources:
    - name: monitors
      path: /monitor/{{alert_id}}
      operations:
      - name: get-monitor
        method: GET
  - type: http
    namespace: servicenow
    baseUri: https://comcast.service-now.com/api/now
    authentication:
      type: basic
      username: $secrets.snow_user
      password: $secrets.snow_password
    resources:
    - name: incidents
      path: /table/incident
      operations:
      - name: create-incident
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

Lists all applications assigned to an Okta user at Comcast, including app name, status, and last sign-on time.

naftiko: '0.5'
info:
  label: Okta User Application List
  description: Lists all applications assigned to an Okta user at Comcast, including app name, status, and last sign-on time.
  tags:
  - identity
  - okta
capability:
  exposes:
  - type: mcp
    namespace: user-apps
    port: 8080
    tools:
    - name: list-user-apps
      description: Given an Okta user email, return the list of assigned applications.
      inputParameters:
      - name: user_email
        in: body
        type: string
        description: Okta user email address.
      call: okta.list-apps
      with:
        user_email: '{{user_email}}'
      outputParameters:
      - name: app_count
        type: number
        mapping: $.length
      - name: apps
        type: string
        mapping: $.apps
  consumes:
  - type: http
    namespace: okta
    baseUri: https://comcast.okta.com/api/v1
    authentication:
      type: apikey
      key: Authorization
      value: $secrets.okta_api_token
      placement: header
    resources:
    - name: appLinks
      path: /users/{{user_email}}/appLinks
      inputParameters:
      - name: user_email
        in: path
      operations:
      - name: list-apps
        method: GET

Analyzes AWS cost data from Snowflake, identifies optimization opportunities, creates Jira tickets for the cloud team, and posts savings summary to Microsoft Teams.

naftiko: '0.5'
info:
  label: AWS Cost Optimization Recommender
  description: Analyzes AWS cost data from Snowflake, identifies optimization opportunities, creates Jira tickets for the cloud team, and posts savings summary to Microsoft Teams.
  tags:
  - cloud
  - cost-optimization
  - aws
  - snowflake
  - jira
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: cost-optimization
    port: 8080
    tools:
    - name: generate-cost-recommendations
      description: Given an AWS account ID, analyze costs and generate optimization recommendations.
      inputParameters:
      - name: aws_account_id
        in: body
        type: string
        description: AWS account ID.
      steps:
      - name: get-cost-data
        type: call
        call: snowflake.query-aws-costs
        with:
          aws_account_id: '{{aws_account_id}}'
      - name: create-ticket
        type: call
        call: jira.create-issue
        with:
          project: CLOUD
          summary: 'Cost optimization: {{aws_account_id}} — ${{get-cost-data.savings_potential}}/mo'
          description: 'Current spend: ${{get-cost-data.monthly_spend}}. Idle resources: {{get-cost-data.idle_count}}'
      - name: notify-cloud-team
        type: call
        call: teams.post-message
        with:
          channel_id: cloud-finops
          text: 'Cost optimization: {{aws_account_id}}. Potential savings: ${{get-cost-data.savings_potential}}/mo. Jira: {{create-ticket.key}}'
  consumes:
  - type: http
    namespace: snowflake
    baseUri: https://comcast.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: statements
      path: /statements
      operations:
      - name: query-aws-costs
        method: POST
  - type: http
    namespace: jira
    baseUri: https://comcast.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - name: issues
      path: /issue
      operations:
      - name: create-issue
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

Monitors SSL certificate expiry events in Splunk, creates ServiceNow change requests for renewal, and notifies the security team via Microsoft Teams.

naftiko: '0.5'
info:
  label: Splunk SSL Certificate Expiry Monitor
  description: Monitors SSL certificate expiry events in Splunk, creates ServiceNow change requests for renewal, and notifies the security team via Microsoft Teams.
  tags:
  - security
  - certificates
  - splunk
  - servicenow
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: cert-monitor
    port: 8080
    tools:
    - name: handle-cert-expiry
      description: Given a domain with an expiring certificate detected in Splunk, initiate renewal.
      inputParameters:
      - name: domain
        in: body
        type: string
        description: Domain with expiring certificate.
      - name: days_remaining
        in: body
        type: number
        description: Days until expiry.
      steps:
      - name: create-change
        type: call
        call: servicenow.create-change-request
        with:
          short_description: 'SSL renewal: {{domain}}'
          category: security
          priority: '2'
      - name: notify-security
        type: call
        call: teams.post-message
        with:
          channel_id: security-ops
          text: 'SSL expiring: {{domain}} in {{days_remaining}} days. Change: {{create-change.number}}'
  consumes:
  - type: http
    namespace: servicenow
    baseUri: https://comcast.service-now.com/api/now
    authentication:
      type: basic
      username: $secrets.snow_user
      password: $secrets.snow_password
    resources:
    - name: changes
      path: /table/change_request
      operations:
      - name: create-change-request
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

When a Databricks job fails, retrieves run details, creates a Jira ticket, and notifies the data engineering team via Microsoft Teams.

naftiko: '0.5'
info:
  label: Azure Databricks Job Failure Handler
  description: When a Databricks job fails, retrieves run details, creates a Jira ticket, and notifies the data engineering team via Microsoft Teams.
  tags:
  - data-engineering
  - databricks
  - jira
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: databricks-ops
    port: 8080
    tools:
    - name: handle-job-failure
      description: Given a Databricks run ID, investigate the failure and escalate.
      inputParameters:
      - name: run_id
        in: body
        type: string
        description: Databricks run ID.
      steps:
      - name: get-run
        type: call
        call: databricks.get-run
        with:
          run_id: '{{run_id}}'
      - name: create-ticket
        type: call
        call: jira.create-issue
        with:
          project: DATA
          summary: 'Databricks failure: {{get-run.run_name}}'
          description: 'Error: {{get-run.error_message}}. Cluster: {{get-run.cluster_id}}'
      - name: notify-team
        type: call
        call: teams.post-message
        with:
          channel_id: data-engineering
          text: 'Databricks failed: {{get-run.run_name}}. Jira: {{create-ticket.key}}'
  consumes:
  - type: http
    namespace: databricks
    baseUri: https://comcast.cloud.databricks.com/api/2.1
    authentication:
      type: bearer
      token: $secrets.databricks_token
    resources:
    - name: runs
      path: /jobs/runs/get
      operations:
      - name: get-run
        method: GET
  - type: http
    namespace: jira
    baseUri: https://comcast.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - name: issues
      path: /issue
      operations:
      - name: create-issue
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

Aggregates Jira epic progress across product teams, generates a quarterly roadmap digest, and posts to the product leadership Teams channel.

naftiko: '0.5'
info:
  label: Jira Quarterly Roadmap Digest
  description: Aggregates Jira epic progress across product teams, generates a quarterly roadmap digest, and posts to the product leadership Teams channel.
  tags:
  - product-management
  - roadmap
  - jira
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: roadmap-digest
    port: 8080
    tools:
    - name: generate-roadmap-digest
      description: Given a fiscal quarter, generate the roadmap progress digest.
      inputParameters:
      - name: fiscal_quarter
        in: body
        type: string
        description: Fiscal quarter (e.g., FY26-Q1).
      steps:
      - name: get-epics
        type: call
        call: jira.search-epics
        with:
          quarter: '{{fiscal_quarter}}'
      - name: notify-leadership
        type: call
        call: teams.post-message
        with:
          channel_id: product-leadership
          text: 'Roadmap digest: {{fiscal_quarter}}. Total epics: {{get-epics.total}}. On-track: {{get-epics.on_track}}. At-risk: {{get-epics.at_risk}}'
  consumes:
  - type: http
    namespace: jira
    baseUri: https://comcast.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - name: search
      path: /search
      operations:
      - name: search-epics
        method: GET
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

Enriches Splunk security alerts with CrowdStrike threat intelligence, creates a ServiceNow security incident, and notifies the SOC via Microsoft Teams.

naftiko: '0.5'
info:
  label: Splunk Security Incident Enrichment
  description: Enriches Splunk security alerts with CrowdStrike threat intelligence, creates a ServiceNow security incident, and notifies the SOC via Microsoft Teams.
  tags:
  - security
  - siem
  - splunk
  - crowdstrike
  - servicenow
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: security-enrichment
    port: 8080
    tools:
    - name: enrich-security-alert
      description: Given a Splunk alert and indicator, enrich with threat intel and escalate.
      inputParameters:
      - name: search_id
        in: body
        type: string
        description: Splunk search ID.
      - name: indicator
        in: body
        type: string
        description: Threat indicator.
      steps:
      - name: get-results
        type: call
        call: splunk.get-results
        with:
          search_id: '{{search_id}}'
      - name: check-intel
        type: call
        call: crowdstrike.check-indicator
        with:
          indicator: '{{indicator}}'
      - name: create-incident
        type: call
        call: servicenow.create-incident
        with:
          short_description: 'Threat: {{indicator}} — {{check-intel.verdict}}'
          urgency: '1'
      - name: alert-soc
        type: call
        call: teams.post-message
        with:
          channel_id: soc-alerts
          text: 'Threat: {{indicator}}. Verdict: {{check-intel.verdict}}. ServiceNow: {{create-incident.number}}'
  consumes:
  - type: http
    namespace: splunk
    baseUri: https://splunk.comcast.com:8089
    authentication:
      type: bearer
      token: $secrets.splunk_token
    resources:
    - name: search
      path: /services/search/jobs/{{search_id}}/results
      operations:
      - name: get-results
        method: GET
  - type: http
    namespace: crowdstrike
    baseUri: https://api.crowdstrike.com
    authentication:
      type: bearer
      token: $secrets.crowdstrike_token
    resources:
    - name: intel
      path: /intel/combined/indicators/v1
      operations:
      - name: check-indicator
        method: GET
  - type: http
    namespace: servicenow
    baseUri: https://comcast.service-now.com/api/now
    authentication:
      type: basic
      username: $secrets.snow_user
      password: $secrets.snow_password
    resources:
    - name: incidents
      path: /table/incident
      operations:
      - name: create-incident
        method: POST
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

When an org restructure is processed in Workday, updates Okta group memberships, adjusts ServiceNow assignments, and notifies affected managers via Microsoft Teams.

naftiko: '0.5'
info:
  label: Workday Org Restructure Sync
  description: When an org restructure is processed in Workday, updates Okta group memberships, adjusts ServiceNow assignments, and notifies affected managers via Microsoft Teams.
  tags:
  - hr
  - identity
  - workday
  - okta
  - servicenow
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: org-sync
    port: 8080
    tools:
    - name: sync-org-change
      description: Given an employee ID with a department transfer, sync access across systems.
      inputParameters:
      - name: employee_id
        in: body
        type: string
        description: Workday employee ID.
      - name: new_department
        in: body
        type: string
        description: New department.
      steps:
      - name: get-worker
        type: call
        call: workday.get-worker
        with:
          employee_id: '{{employee_id}}'
      - name: update-okta
        type: call
        call: okta.update-groups
        with:
          email: '{{get-worker.email}}'
          department: '{{new_department}}'
      - name: update-snow
        type: call
        call: servicenow.update-user
        with:
          email: '{{get-worker.email}}'
          department: '{{new_department}}'
      - name: notify-manager
        type: call
        call: teams.post-message
        with:
          channel_id: hr-notifications
          text: 'Org change: {{get-worker.name}} → {{new_department}}. Access updated.'
  consumes:
  - type: http
    namespace: workday
    baseUri: https://wd5-impl-services1.workday.com/ccx/api/v1/comcast
    authentication:
      type: bearer
      token: $secrets.workday_token
    resources:
    - name: workers
      path: /workers/{{employee_id}}
      operations:
      - name: get-worker
        method: GET
  - type: http
    namespace: okta
    baseUri: https://comcast.okta.com/api/v1
    authentication:
      type: apikey
      key: Authorization
      value: $secrets.okta_api_token
      placement: header
    resources:
    - name: groups
      path: /users/{{email}}/groups
      operations:
      - name: update-groups
        method: PUT
  - type: http
    namespace: servicenow
    baseUri: https://comcast.service-now.com/api/now
    authentication:
      type: basic
      username: $secrets.snow_user
      password: $secrets.snow_password
    resources:
    - name: users
      path: /table/sys_user
      operations:
      - name: update-user
        method: PATCH
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.teams_token
    resources:
    - name: messages
      path: /teams/channels/messages
      operations:
      - name: post-message
        method: POST

Retrieves the status of an expense report from SAP Concur, returning total amount, approval status, and payment status.

naftiko: '0.5'
info:
  label: SAP Concur Expense Report Status
  description: Retrieves the status of an expense report from SAP Concur, returning total amount, approval status, and payment status.
  tags:
  - expense-management
  - sap-concur
  - finance
capability:
  exposes:
  - type: mcp
    namespace: expense-management
    port: 8080
    tools:
    - name: get-expense-report
      description: Look up a SAP Concur expense report. Returns total amount, approval status, and payment status.
      inputParameters:
      - name: report_id
        in: body
        type: string
        description: The SAP Concur expense report ID.
      call: concur.get-report
      with:
        report_id: '{{report_id}}'
      outputParameters:
      - name: total_amount
        type: number
        mapping: $.Total
      - name: approval_status
        type: string
        mapping: $.ApprovalStatusName
      - name: payment_status
        type: string
        mapping: $.PaymentStatusName
  consumes:
  - type: http
    namespace: concur
    baseUri: https://us2.api.concursolutions.com/api/v3.0
    authentication:
      type: bearer
      token: $secrets.concur_token
    resources:
    - name: reports
      path: /expense/reports/{{report_id}}
      inputParameters:
      - name: report_id
        in: path
      operations:
      - name: get-report
        method: GET

Orchestrates video content production by importing footage from cloud storage, triggering transcoding in AWS MediaConvert, uploading to YouTube, and scheduling promotion via social media.

naftiko: '0.5'
info:
  label: Video Content Production Pipeline
  description: Orchestrates video content production by importing footage from cloud storage, triggering transcoding in AWS MediaConvert, uploading to YouTube, and scheduling promotion via social media.
  tags:
  - video
  - aws
  - youtube
  - social-media
capability:
  exposes:
  - type: mcp
    namespace: video-production
    port: 8080
    tools:
    - name: produce-video-content
      description: Process raw video footage through transcoding, upload to YouTube, and schedule social promotion.
      inputParameters:
      - name: project_id
        in: body
        type: string
        description: The video project identifier.
      - name: brand
        in: body
        type: string
        description: The brand this video belongs to.
      - name: publish_date
        in: body
        type: string
        description: The target publish date.
      steps:
      - name: get-source-footage
        type: call
        call: s3.get-object-list
        with:
          bucket: cn-video-raw
          prefix: '{{project_id}}/'
      - name: transcode-video
        type: call
        call: mediaconvert.create-job
        with:
          source_key: '{{get-source-footage.objects[0].key}}'
          output_preset: web-hd
      - name: upload-to-youtube
        type: call
        call: youtube.upload-video
        with:
          title: '{{project_id}}'
          channel_id: '{{brand}}_channel'
      - name: schedule-social-posts
        type: call
        call: sprout-social.create-post
        with:
          text: 'New video from {{brand}}: {{upload-to-youtube.video_url}}'
          scheduled_time: '{{publish_date}}'
  consumes:
  - type: http
    namespace: s3
    baseUri: https://s3.amazonaws.com
    authentication:
      type: bearer
      token: $secrets.aws_access_token
    resources:
    - name: objects
      path: /{{bucket}}
      inputParameters:
      - name: bucket
        in: path
      operations:
      - name: get-object-list
        method: GET
  - type: http
    namespace: mediaconvert
    baseUri: https://mediaconvert.us-east-1.amazonaws.com/2017-08-29
    authentication:
      type: bearer
      token: $secrets.aws_mediaconvert_token
    resources:
    - name: jobs
      path: /jobs
      operations:
      - name: create-job
        method: POST
  - type: http
    namespace: youtube
    baseUri: https://www.googleapis.com/upload/youtube/v3
    authentication:
      type: bearer
      token: $secrets.youtube_token
    resources:
    - name: videos
      path: /videos?part=snippet,status
      operations:
      - name: upload-video
        method: POST
  - type: http
    namespace: sprout-social
    baseUri: https://api.sproutsocial.com/v1
    authentication:
      type: bearer
      token: $secrets.sprout_social_token
    resources:
    - name: posts
      path: /{{customer_id}}/messages
      operations:
      - name: create-post
        method: POST

Retrieves performance metrics for a Facebook Ads campaign, returning impressions, reach, clicks, and cost per result.

naftiko: '0.5'
info:
  label: Facebook Ads Campaign Performance
  description: Retrieves performance metrics for a Facebook Ads campaign, returning impressions, reach, clicks, and cost per result.
  tags:
  - advertising
  - facebook-ads
  - paid-media
capability:
  exposes:
  - type: mcp
    namespace: paid-media
    port: 8080
    tools:
    - name: get-fb-campaign-performance
      description: Look up Facebook Ads campaign performance. Returns impressions, reach, clicks, and cost per result.
      inputParameters:
      - name: campaign_id
        in: body
        type: string
        description: The Facebook Ads campaign ID.
      call: facebook-ads.get-insights
      with:
        campaign_id: '{{campaign_id}}'
      outputParameters:
      - name: impressions
        type: number
        mapping: $.data[0].impressions
      - name: reach
        type: number
        mapping: $.data[0].reach
      - name: clicks
        type: number
        mapping: $.data[0].clicks
      - name: cost_per_result
        type: number
        mapping: $.data[0].cost_per_action_type[0].value
  consumes:
  - type: http
    namespace: facebook-ads
    baseUri: https://graph.facebook.com/v18.0
    authentication:
      type: bearer
      token: $secrets.facebook_ads_token
    resources:
    - name: insights
      path: /{{campaign_id}}/insights
      inputParameters:
      - name: campaign_id
        in: path
      operations:
      - name: get-insights
        method: GET

Monitors subscription churn risk by querying Snowflake analytics, creating a Jira ticket for customer success, sending a retention email via Mailchimp, and logging the event in Salesforce.

naftiko: '0.5'
info:
  label: Digital Subscription Churn Alert Pipeline
  description: Monitors subscription churn risk by querying Snowflake analytics, creating a Jira ticket for customer success, sending a retention email via Mailchimp, and logging the event in Salesforce.
  tags:
  - subscriptions
  - snowflake
  - jira
  - mailchimp
  - salesforce
capability:
  exposes:
  - type: mcp
    namespace: churn-alert
    port: 8080
    tools:
    - name: handle-churn-risk
      description: Detect and respond to subscription churn risk signals.
      inputParameters:
      - name: subscriber_id
        in: body
        type: string
        description: The subscriber identifier.
      - name: risk_score
        in: body
        type: number
        description: The churn risk score (0-100).
      steps:
      - name: get-subscriber-data
        type: call
        call: snowflake.run-query
        with:
          query: SELECT * FROM subscribers WHERE id = '{{subscriber_id}}'
      - name: create-jira-ticket
        type: call
        call: jira.create-issue
        with:
          project: CS
          summary: 'Churn risk: {{subscriber_id}}'
          priority: High
      - name: send-retention-email
        type: call
        call: mailchimp.send-campaign
        with:
          list_id: retention
          subscriber_email: '{{get-subscriber-data.email}}'
      - name: log-in-salesforce
        type: call
        call: salesforce.create-activity
        with:
          contact_id: '{{subscriber_id}}'
          subject: Churn risk alert triggered
  consumes:
  - type: http
    namespace: snowflake
    baseUri: https://condenast.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: statements
      path: /statements
      operations:
      - name: run-query
        method: POST
  - type: http
    namespace: jira
    baseUri: https://condenast.atlassian.net/rest/api/3
    authentication:
      type: bearer
      token: $secrets.jira_token
    resources:
    - name: issues
      path: /issue
      operations:
      - name: create-issue
        method: POST
  - type: http
    namespace: mailchimp
    baseUri: https://us1.api.mailchimp.com/3.0
    authentication:
      type: bearer
      token: $secrets.mailchimp_api_key
    resources:
    - name: campaigns
      path: /campaigns
      operations:
      - name: send-campaign
        method: POST
  - type: http
    namespace: salesforce
    baseUri: https://condenast.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: activities
      path: /sobjects/Task
      operations:
      - name: create-activity
        method: POST

Processes GDPR data deletion requests by removing subscriber data from Snowflake, Salesforce, Mailchimp, and Google Analytics, then confirming completion via email to the requester.

naftiko: '0.5'
info:
  label: GDPR Data Deletion Request Pipeline
  description: Processes GDPR data deletion requests by removing subscriber data from Snowflake, Salesforce, Mailchimp, and Google Analytics, then confirming completion via email to the requester.
  tags:
  - compliance
  - gdpr
  - privacy
  - snowflake
  - salesforce
capability:
  exposes:
  - type: mcp
    namespace: gdpr-deletion
    port: 8080
    tools:
    - name: process-deletion-request
      description: Remove user data across all systems in compliance with GDPR deletion requests.
      inputParameters:
      - name: user_email
        in: body
        type: string
        description: The email of the user requesting deletion.
      - name: request_id
        in: body
        type: string
        description: The GDPR request tracking identifier.
      steps:
      - name: delete-from-snowflake
        type: call
        call: snowflake.run-query
        with:
          query: DELETE FROM subscribers WHERE email = '{{user_email}}'
      - name: delete-from-salesforce
        type: call
        call: salesforce.delete-contact
        with:
          email: '{{user_email}}'
      - name: delete-from-mailchimp
        type: call
        call: mailchimp.delete-member
        with:
          email: '{{user_email}}'
      - name: confirm-deletion
        type: call
        call: gmail.send-email
        with:
          to: '{{user_email}}'
          subject: Data Deletion Confirmation - Request {{request_id}}
  consumes:
  - type: http
    namespace: snowflake
    baseUri: https://condenast.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: statements
      path: /statements
      operations:
      - name: run-query
        method: POST
  - type: http
    namespace: salesforce
    baseUri: https://condenast.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: contacts
      path: /sobjects/Contact
      operations:
      - name: delete-contact
        method: DELETE
  - type: http
    namespace: mailchimp
    baseUri: https://us1.api.mailchimp.com/3.0
    authentication:
      type: bearer
      token: $secrets.mailchimp_api_key
    resources:
    - name: members
      path: /lists/{{list_id}}/members/{{subscriber_hash}}
      operations:
      - name: delete-member
        method: DELETE
  - type: http
    namespace: gmail
    baseUri: https://gmail.googleapis.com/gmail/v1
    authentication:
      type: bearer
      token: $secrets.gmail_token
    resources:
    - name: messages
      path: /users/me/messages/send
      operations:
      - name: send-email
        method: POST

When a podcast episode is finalized, uploads to the hosting platform, distributes to Apple Podcasts and Spotify, updates the show notes in the CMS, and notifies the audio team via Slack.

naftiko: '0.5'
info:
  label: Podcast Distribution Pipeline
  description: When a podcast episode is finalized, uploads to the hosting platform, distributes to Apple Podcasts and Spotify, updates the show notes in the CMS, and notifies the audio team via Slack.
  tags:
  - podcast
  - audio
  - distribution
  - slack
capability:
  exposes:
  - type: mcp
    namespace: podcast-ops
    port: 8080
    tools:
    - name: distribute-podcast-episode
      description: Given an episode file and metadata, upload to hosting, distribute to platforms, update CMS, and notify team.
      inputParameters:
      - name: episode_title
        in: body
        type: string
        description: The episode title.
      - name: audio_url
        in: body
        type: string
        description: The finalized audio file URL.
      - name: brand
        in: body
        type: string
        description: The Condé Nast brand.
      - name: show_notes
        in: body
        type: string
        description: The episode show notes.
      steps:
      - name: upload-episode
        type: call
        call: podcast-host.upload-episode
        with:
          title: '{{episode_title}}'
          audio_url: '{{audio_url}}'
          show_notes: '{{show_notes}}'
      - name: update-cms
        type: call
        call: cms.create-podcast-page
        with:
          title: '{{episode_title}}'
          embed_url: '{{upload-episode.embed_url}}'
          show_notes: '{{show_notes}}'
      - name: notify-team
        type: call
        call: slack.post-message
        with:
          channel: '#{{brand}}-audio'
          text: 'Podcast episode published: "{{episode_title}}". Listen: {{upload-episode.episode_url}}. CMS page: {{update-cms.url}}.'
  consumes:
  - type: http
    namespace: podcast-host
    baseUri: https://api.internal.condenast.com/podcasts/v1
    authentication:
      type: bearer
      token: $secrets.podcast_token
    resources:
    - name: episodes
      path: /episodes
      operations:
      - name: upload-episode
        method: POST
  - type: http
    namespace: cms
    baseUri: https://cms.condenast.com/api/v2
    authentication:
      type: bearer
      token: $secrets.cms_token
    resources:
    - name: podcasts
      path: /podcasts
      operations:
      - name: create-podcast-page
        method: POST
  - type: http
    namespace: slack
    baseUri: https://slack.com/api
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: messages
      path: /chat.postMessage
      operations:
      - name: post-message
        method: POST

Checks the health of a MuleSoft API integration, returning deployment status, request count, error rate, and average response time.

naftiko: '0.5'
info:
  label: MuleSoft API Integration Health
  description: Checks the health of a MuleSoft API integration, returning deployment status, request count, error rate, and average response time.
  tags:
  - integration
  - mulesoft
  - api-management
capability:
  exposes:
  - type: mcp
    namespace: integration-health
    port: 8080
    tools:
    - name: get-mulesoft-api-health
      description: Look up MuleSoft API health metrics. Returns deployment status, request count, error rate, and response time.
      inputParameters:
      - name: environment_id
        in: body
        type: string
        description: The Anypoint environment ID.
      - name: api_id
        in: body
        type: string
        description: The API instance ID.
      call: mulesoft.get-api-analytics
      with:
        environment_id: '{{environment_id}}'
        api_id: '{{api_id}}'
      outputParameters:
      - name: status
        type: string
        mapping: $.status
      - name: request_count
        type: number
        mapping: $.analytics.requestCount
      - name: error_rate
        type: number
        mapping: $.analytics.errorRate
  consumes:
  - type: http
    namespace: mulesoft
    baseUri: https://anypoint.mulesoft.com/analytics/1.0
    authentication:
      type: bearer
      token: $secrets.mulesoft_token
    resources:
    - name: analytics
      path: /{{organization_id}}/environments/{{environment_id}}/apis/{{api_id}}
      inputParameters:
      - name: environment_id
        in: path
      - name: api_id
        in: path
      operations:
      - name: get-api-analytics
        method: GET

Compiles a comprehensive advertising campaign report by pulling data from Google Ads, Facebook Ads, and Salesforce, then publishes the report to Tableau and emails the advertiser.

naftiko: '0.5'
info:
  label: Advertiser Campaign Report Pipeline
  description: Compiles a comprehensive advertising campaign report by pulling data from Google Ads, Facebook Ads, and Salesforce, then publishes the report to Tableau and emails the advertiser.
  tags:
  - advertising
  - google-ads
  - facebook-ads
  - salesforce
  - tableau
capability:
  exposes:
  - type: mcp
    namespace: ad-campaign-report
    port: 8080
    tools:
    - name: generate-campaign-report
      description: Generate a multi-platform advertising campaign report and distribute it.
      inputParameters:
      - name: campaign_id
        in: body
        type: string
        description: The internal campaign identifier.
      - name: advertiser_email
        in: body
        type: string
        description: The advertiser contact email.
      steps:
      - name: get-google-ads-data
        type: call
        call: google-ads.get-campaign-metrics
        with:
          campaign_id: '{{campaign_id}}'
      - name: get-facebook-ads-data
        type: call
        call: facebook-ads.get-campaign-insights
        with:
          campaign_id: '{{campaign_id}}'
      - name: get-salesforce-deal
        type: call
        call: salesforce.get-opportunity
        with:
          campaign_id: '{{campaign_id}}'
      - name: publish-to-tableau
        type: call
        call: tableau.refresh-datasource
        with:
          datasource_id: campaign_reports
      - name: send-report-email
        type: call
        call: sendgrid.send-email
        with:
          to: '{{advertiser_email}}'
          subject: Campaign Report - {{campaign_id}}
          template: campaign_report
  consumes:
  - type: http
    namespace: google-ads
    baseUri: https://googleads.googleapis.com/v14
    authentication:
      type: bearer
      token: $secrets.google_ads_token
    resources:
    - name: campaigns
      path: /customers/{{customer_id}}/campaigns/{{campaign_id}}
      inputParameters:
      - name: campaign_id
        in: path
      operations:
      - name: get-campaign-metrics
        method: GET
  - type: http
    namespace: facebook-ads
    baseUri: https://graph.facebook.com/v18.0
    authentication:
      type: bearer
      token: $secrets.facebook_ads_token
    resources:
    - name: insights
      path: /{{campaign_id}}/insights
      inputParameters:
      - name: campaign_id
        in: path
      operations:
      - name: get-campaign-insights
        method: GET
  - type: http
    namespace: salesforce
    baseUri: https://condenast.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: opportunities
      path: /sobjects/Opportunity
      operations:
      - name: get-opportunity
        method: GET
  - type: http
    namespace: tableau
    baseUri: https://tableau.condenast.com/api/3.19
    authentication:
      type: bearer
      token: $secrets.tableau_token
    resources:
    - name: datasources
      path: /sites/{{site_id}}/datasources/{{datasource_id}}/refresh
      operations:
      - name: refresh-datasource
        method: POST
  - type: http
    namespace: sendgrid
    baseUri: https://api.sendgrid.com/v3
    authentication:
      type: bearer
      token: $secrets.sendgrid_api_key
    resources:
    - name: mail
      path: /mail/send
      operations:
      - name: send-email
        method: POST

Reviews article content for brand voice compliance by fetching from CMS, analyzing tone via AI, flagging issues in Jira, and reporting results to the editorial team in Slack.

naftiko: '0.5'
info:
  label: Brand Voice Compliance Review Pipeline
  description: Reviews article content for brand voice compliance by fetching from CMS, analyzing tone via AI, flagging issues in Jira, and reporting results to the editorial team in Slack.
  tags:
  - editorial
  - compliance
  - ai
  - jira
  - slack
capability:
  exposes:
  - type: mcp
    namespace: brand-voice-compliance
    port: 8080
    tools:
    - name: review-brand-voice
      description: Analyze article content for brand voice compliance and flag issues.
      inputParameters:
      - name: article_id
        in: body
        type: string
        description: The CMS article identifier.
      - name: brand
        in: body
        type: string
        description: The brand whose voice guidelines apply.
      steps:
      - name: fetch-article
        type: call
        call: cms.get-article
        with:
          article_id: '{{article_id}}'
      - name: analyze-tone
        type: call
        call: openai.analyze-text
        with:
          text: '{{fetch-article.body}}'
          guidelines: '{{brand}}_voice_guide'
      - name: create-issues
        type: call
        call: jira.create-issue
        with:
          project: EDITORIAL
          summary: 'Brand voice issues: {{article_id}}'
          description: '{{analyze-tone.findings}}'
      - name: notify-editor
        type: call
        call: slack.post-message
        with:
          channel: '#{{brand}}-editorial'
          text: 'Brand voice review complete for {{article_id}}. Score: {{analyze-tone.score}}/100.'
  consumes:
  - type: http
    namespace: cms
    baseUri: https://cms.condenast.com/api/v2
    authentication:
      type: bearer
      token: $secrets.cms_token
    resources:
    - name: articles
      path: /articles/{{article_id}}
      inputParameters:
      - name: article_id
        in: path
      operations:
      - name: get-article
        method: GET
  - type: http
    namespace: openai
    baseUri: https://api.openai.com/v1
    authentication:
      type: bearer
      token: $secrets.openai_api_key
    resources:
    - name: completions
      path: /chat/completions
      operations:
      - name: analyze-text
        method: POST
  - type: http
    namespace: jira
    baseUri: https://condenast.atlassian.net/rest/api/3
    authentication:
      type: bearer
      token: $secrets.jira_token
    resources:
    - name: issues
      path: /issue
      operations:
      - name: create-issue
        method: POST
  - type: http
    namespace: slack
    baseUri: https://slack.com/api
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: messages
      path: /chat.postMessage
      operations:
      - name: post-message
        method: POST

Retrieves file metadata from Google Drive, returning file name, MIME type, size, and web view link.

naftiko: '0.5'
info:
  label: Google Drive File Lookup
  description: Retrieves file metadata from Google Drive, returning file name, MIME type, size, and web view link.
  tags:
  - document-management
  - google-drive
capability:
  exposes:
  - type: mcp
    namespace: file-management
    port: 8080
    tools:
    - name: get-drive-file
      description: Look up a Google Drive file. Returns name, MIME type, size, and web view link.
      inputParameters:
      - name: file_id
        in: body
        type: string
        description: The Google Drive file ID.
      call: gdrive.get-file
      with:
        file_id: '{{file_id}}'
      outputParameters:
      - name: name
        type: string
        mapping: $.name
      - name: mime_type
        type: string
        mapping: $.mimeType
      - name: size
        type: number
        mapping: $.size
      - name: web_view_link
        type: string
        mapping: $.webViewLink
  consumes:
  - type: http
    namespace: gdrive
    baseUri: https://www.googleapis.com/drive/v3
    authentication:
      type: bearer
      token: $secrets.google_drive_token
    resources:
    - name: files
      path: /files/{{file_id}}
      inputParameters:
      - name: file_id
        in: path
      operations:
      - name: get-file
        method: GET

Onboards a new influencer collaborator by creating their profile in Salesforce, setting up a Slack channel, configuring DocuSign for contract signing, and adding them to the content calendar.

naftiko: '0.5'
info:
  label: Influencer Collaboration Onboarding Pipeline
  description: Onboards a new influencer collaborator by creating their profile in Salesforce, setting up a Slack channel, configuring DocuSign for contract signing, and adding them to the content calendar.
  tags:
  - influencer
  - salesforce
  - slack
  - docusign
  - airtable
capability:
  exposes:
  - type: mcp
    namespace: influencer-onboarding
    port: 8080
    tools:
    - name: onboard-influencer
      description: Set up a new influencer collaboration across CRM, communications, contracts, and calendar.
      inputParameters:
      - name: influencer_name
        in: body
        type: string
        description: The influencer display name.
      - name: influencer_email
        in: body
        type: string
        description: The influencer email address.
      - name: brand
        in: body
        type: string
        description: The brand they will collaborate with.
      steps:
      - name: create-salesforce-contact
        type: call
        call: salesforce.create-contact
        with:
          name: '{{influencer_name}}'
          email: '{{influencer_email}}'
          type: Influencer
      - name: create-slack-channel
        type: call
        call: slack.create-channel
        with:
          name: collab-{{influencer_name}}
          is_private: 'true'
      - name: send-contract
        type: call
        call: docusign.create-envelope
        with:
          template_id: influencer_agreement
          signer_email: '{{influencer_email}}'
      - name: add-to-calendar
        type: call
        call: airtable.create-record
        with:
          base_id: content_calendar
          table_name: '{{brand}}_influencers'
          name: '{{influencer_name}}'
  consumes:
  - type: http
    namespace: salesforce
    baseUri: https://condenast.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: contacts
      path: /sobjects/Contact
      operations:
      - name: create-contact
        method: POST
  - type: http
    namespace: slack
    baseUri: https://slack.com/api
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: channels
      path: /conversations.create
      operations:
      - name: create-channel
        method: POST
  - type: http
    namespace: docusign
    baseUri: https://demo.docusign.net/restapi/v2.1
    authentication:
      type: bearer
      token: $secrets.docusign_token
    resources:
    - name: envelopes
      path: /accounts/{{account_id}}/envelopes
      operations:
      - name: create-envelope
        method: POST
  - type: http
    namespace: airtable
    baseUri: https://api.airtable.com/v0
    authentication:
      type: bearer
      token: $secrets.airtable_token
    resources:
    - name: records
      path: /{{base_id}}/{{table_name}}
      inputParameters:
      - name: base_id
        in: path
      - name: table_name
        in: path
      operations:
      - name: create-record
        method: POST

Localizes content for international editions by fetching the source article, translating via DeepL, adapting metadata, publishing to the regional WordPress site, and updating the global content tracker.

naftiko: '0.5'
info:
  label: Content Localization Pipeline
  description: Localizes content for international editions by fetching the source article, translating via DeepL, adapting metadata, publishing to the regional WordPress site, and updating the global content tracker.
  tags:
  - localization
  - translation
  - wordpress
  - airtable
capability:
  exposes:
  - type: mcp
    namespace: content-localization
    port: 8080
    tools:
    - name: localize-content
      description: Translate and publish content for international editions.
      inputParameters:
      - name: article_id
        in: body
        type: string
        description: The source article ID.
      - name: target_locale
        in: body
        type: string
        description: The target locale code (e.g., fr-FR, de-DE).
      - name: brand
        in: body
        type: string
        description: The brand name.
      steps:
      - name: fetch-source
        type: call
        call: cms.get-article
        with:
          article_id: '{{article_id}}'
      - name: translate-content
        type: call
        call: deepl.translate
        with:
          text: '{{fetch-source.body}}'
          target_lang: '{{target_locale}}'
      - name: publish-regional
        type: call
        call: wordpress.create-post
        with:
          title: '{{translate-content.translated_title}}'
          content: '{{translate-content.translated_text}}'
          status: draft
      - name: update-tracker
        type: call
        call: airtable.create-record
        with:
          base_id: global_content
          table_name: localizations
          article_id: '{{article_id}}'
          locale: '{{target_locale}}'
  consumes:
  - type: http
    namespace: cms
    baseUri: https://cms.condenast.com/api/v2
    authentication:
      type: bearer
      token: $secrets.cms_token
    resources:
    - name: articles
      path: /articles/{{article_id}}
      inputParameters:
      - name: article_id
        in: path
      operations:
      - name: get-article
        method: GET
  - type: http
    namespace: deepl
    baseUri: https://api-free.deepl.com/v2
    authentication:
      type: bearer
      token: $secrets.deepl_api_key
    resources:
    - name: translations
      path: /translate
      operations:
      - name: translate
        method: POST
  - type: http
    namespace: wordpress
    baseUri: https://{{target_locale}}.{{brand}}.condenast.com/wp-json/wp/v2
    authentication:
      type: bearer
      token: $secrets.wordpress_intl_token
    resources:
    - name: posts
      path: /posts
      operations:
      - name: create-post
        method: POST
  - type: http
    namespace: airtable
    baseUri: https://api.airtable.com/v0
    authentication:
      type: bearer
      token: $secrets.airtable_token
    resources:
    - name: records
      path: /{{base_id}}/{{table_name}}
      inputParameters:
      - name: base_id
        in: path
      - name: table_name
        in: path
      operations:
      - name: create-record
        method: POST

Sets up livestream coverage for events by creating a YouTube Live stream, scheduling social media teasers, and creating a Slack coordination channel.

naftiko: '0.5'
info:
  label: Event Coverage Livestream Pipeline
  description: Sets up livestream coverage for events by creating a YouTube Live stream, scheduling social media teasers, and creating a Slack coordination channel.
  tags:
  - events
  - youtube
  - social-media
  - slack
  - livestream
capability:
  exposes:
  - type: mcp
    namespace: event-livestream
    port: 8080
    tools:
    - name: setup-event-livestream
      description: Set up livestream infrastructure and social promotion for event coverage.
      inputParameters:
      - name: event_name
        in: body
        type: string
        description: The event name.
      - name: brand
        in: body
        type: string
        description: The brand covering the event.
      - name: stream_date
        in: body
        type: string
        description: The scheduled stream date.
      steps:
      - name: create-youtube-stream
        type: call
        call: youtube.create-live-broadcast
        with:
          title: '{{brand}} Live: {{event_name}}'
          scheduled_start: '{{stream_date}}'
      - name: create-social-teaser
        type: call
        call: instagram.create-post
        with:
          caption: Watch us LIVE at {{event_name}} on {{stream_date}}!
          brand: '{{brand}}'
      - name: create-coordination-channel
        type: call
        call: slack.create-channel
        with:
          name: live-{{event_name}}
          topic: Livestream coordination for {{event_name}}
  consumes:
  - type: http
    namespace: youtube
    baseUri: https://www.googleapis.com/youtube/v3
    authentication:
      type: bearer
      token: $secrets.youtube_token
    resources:
    - name: broadcasts
      path: /liveBroadcasts?part=snippet,status
      operations:
      - name: create-live-broadcast
        method: POST
  - type: http
    namespace: instagram
    baseUri: https://graph.facebook.com/v18.0
    authentication:
      type: bearer
      token: $secrets.instagram_token
    resources:
    - name: media
      path: /{{ig_user_id}}/media
      operations:
      - name: create-post
        method: POST
  - type: http
    namespace: slack
    baseUri: https://slack.com/api
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: channels
      path: /conversations.create
      operations:
      - name: create-channel
        method: POST

Processes freelancer payments by verifying completed assignments in Airtable, generating invoices in QuickBooks, processing payment via Stripe, and sending confirmation via email.

naftiko: '0.5'
info:
  label: Editorial Freelancer Payment Pipeline
  description: Processes freelancer payments by verifying completed assignments in Airtable, generating invoices in QuickBooks, processing payment via Stripe, and sending confirmation via email.
  tags:
  - finance
  - freelancer
  - airtable
  - quickbooks
  - stripe
capability:
  exposes:
  - type: mcp
    namespace: freelancer-payment
    port: 8080
    tools:
    - name: process-freelancer-payment
      description: Verify assignment completion, generate invoice, process payment, and send confirmation.
      inputParameters:
      - name: freelancer_id
        in: body
        type: string
        description: The freelancer identifier.
      - name: assignment_id
        in: body
        type: string
        description: The assignment record identifier.
      steps:
      - name: verify-assignment
        type: call
        call: airtable.get-record
        with:
          base_id: freelancers
          record_id: '{{assignment_id}}'
      - name: create-invoice
        type: call
        call: quickbooks.create-invoice
        with:
          vendor_id: '{{freelancer_id}}'
          amount: '{{verify-assignment.rate}}'
          description: '{{verify-assignment.assignment_title}}'
      - name: process-payment
        type: call
        call: stripe.create-payout
        with:
          amount: '{{verify-assignment.rate}}'
          destination: '{{verify-assignment.stripe_account}}'
      - name: send-confirmation
        type: call
        call: gmail.send-email
        with:
          to: '{{verify-assignment.email}}'
          subject: Payment processed for {{verify-assignment.assignment_title}}
  consumes:
  - type: http
    namespace: airtable
    baseUri: https://api.airtable.com/v0
    authentication:
      type: bearer
      token: $secrets.airtable_token
    resources:
    - name: records
      path: /{{base_id}}/freelancers/{{record_id}}
      inputParameters:
      - name: base_id
        in: path
      - name: record_id
        in: path
      operations:
      - name: get-record
        method: GET
  - type: http
    namespace: quickbooks
    baseUri: https://quickbooks.api.intuit.com/v3
    authentication:
      type: bearer
      token: $secrets.quickbooks_token
    resources:
    - name: invoices
      path: /company/{{company_id}}/invoice
      operations:
      - name: create-invoice
        method: POST
  - type: http
    namespace: stripe
    baseUri: https://api.stripe.com/v1
    authentication:
      type: bearer
      token: $secrets.stripe_secret_key
    resources:
    - name: payouts
      path: /payouts
      operations:
      - name: create-payout
        method: POST
  - type: http
    namespace: gmail
    baseUri: https://gmail.googleapis.com/gmail/v1
    authentication:
      type: bearer
      token: $secrets.gmail_token
    resources:
    - name: messages
      path: /users/me/messages/send
      operations:
      - name: send-email
        method: POST

Retrieves content performance metrics from Google Analytics for a given article URL, returning page views, average time on page, and bounce rate.

naftiko: '0.5'
info:
  label: Google Analytics Content Performance Lookup
  description: Retrieves content performance metrics from Google Analytics for a given article URL, returning page views, average time on page, and bounce rate.
  tags:
  - analytics
  - google-analytics
  - content-performance
capability:
  exposes:
  - type: mcp
    namespace: content-analytics
    port: 8080
    tools:
    - name: get-article-performance
      description: Look up Google Analytics performance for an article URL. Returns page views, avg time on page, and bounce rate.
      inputParameters:
      - name: property_id
        in: body
        type: string
        description: The Google Analytics 4 property ID.
      - name: article_url
        in: body
        type: string
        description: The article URL path.
      call: ga4.get-page-report
      with:
        property_id: '{{property_id}}'
        page_path: '{{article_url}}'
      outputParameters:
      - name: page_views
        type: number
        mapping: $.rows[0].metricValues[0].value
      - name: avg_time_on_page
        type: number
        mapping: $.rows[0].metricValues[1].value
      - name: bounce_rate
        type: number
        mapping: $.rows[0].metricValues[2].value
  consumes:
  - type: http
    namespace: ga4
    baseUri: https://analyticsdata.googleapis.com/v1beta
    authentication:
      type: bearer
      token: $secrets.google_analytics_token
    resources:
    - name: reports
      path: /properties/{{property_id}}:runReport
      inputParameters:
      - name: property_id
        in: path
      operations:
      - name: get-page-report
        method: POST

Pulls A/B test results from Google Optimize, calculates statistical significance, logs findings in Google Sheets, and posts the winner to Slack.

naftiko: '0.5'
info:
  label: A/B Test Results Pipeline
  description: Pulls A/B test results from Google Optimize, calculates statistical significance, logs findings in Google Sheets, and posts the winner to Slack.
  tags:
  - experimentation
  - google-optimize
  - google-sheets
  - slack
capability:
  exposes:
  - type: mcp
    namespace: experimentation
    port: 8080
    tools:
    - name: evaluate-ab-test
      description: Given a Google Optimize experiment ID, pull results, determine the winner, log to Sheets, and notify via Slack.
      inputParameters:
      - name: experiment_id
        in: body
        type: string
        description: The Google Optimize experiment ID.
      - name: brand
        in: body
        type: string
        description: The brand running the experiment.
      steps:
      - name: get-results
        type: call
        call: optimize.get-experiment
        with:
          experiment_id: '{{experiment_id}}'
      - name: log-results
        type: call
        call: gsheets.append-row
        with:
          spreadsheet_id: ab_test_results
          range: Results!A:E
          values:
          - '{{experiment_id}}'
          - '{{brand}}'
          - '{{get-results.winner_variant}}'
          - '{{get-results.improvement_pct}}'
          - '{{get-results.confidence}}'
      - name: notify-team
        type: call
        call: slack.post-message
        with:
          channel: '#{{brand}}-growth'
          text: 'A/B Test {{experiment_id}} results: Winner is variant {{get-results.winner_variant}} with {{get-results.improvement_pct}}% improvement ({{get-results.confidence}}% confidence).'
  consumes:
  - type: http
    namespace: optimize
    baseUri: https://www.googleapis.com/analytics/v3
    authentication:
      type: bearer
      token: $secrets.google_optimize_token
    resources:
    - name: experiments
      path: /management/accounts/{{account_id}}/webproperties/{{property_id}}/experiments/{{experiment_id}}
      inputParameters:
      - name: experiment_id
        in: path
      operations:
      - name: get-experiment
        method: GET
  - type: http
    namespace: gsheets
    baseUri: https://sheets.googleapis.com/v4/spreadsheets
    authentication:
      type: bearer
      token: $secrets.google_sheets_token
    resources:
    - name: values
      path: /{{spreadsheet_id}}/values/{{range}}:append
      inputParameters:
      - name: spreadsheet_id
        in: path
      - name: range
        in: path
      operations:
      - name: append-row
        method: POST
  - type: http
    namespace: slack
    baseUri: https://slack.com/api
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: messages
      path: /chat.postMessage
      operations:
      - name: post-message
        method: POST

Retrieves the deployment status of a Condé Nast brand website on Vercel, returning deployment state, URL, and build duration.

naftiko: '0.5'
info:
  label: Vercel Deployment Status
  description: Retrieves the deployment status of a Condé Nast brand website on Vercel, returning deployment state, URL, and build duration.
  tags:
  - deployment
  - vercel
  - web-platform
capability:
  exposes:
  - type: mcp
    namespace: web-deployments
    port: 8080
    tools:
    - name: get-vercel-deployment
      description: Look up a Vercel deployment. Returns state, URL, and build duration.
      inputParameters:
      - name: deployment_id
        in: body
        type: string
        description: The Vercel deployment ID.
      call: vercel.get-deployment
      with:
        deployment_id: '{{deployment_id}}'
      outputParameters:
      - name: state
        type: string
        mapping: $.state
      - name: url
        type: string
        mapping: $.url
      - name: build_duration_ms
        type: number
        mapping: $.buildDuration
  consumes:
  - type: http
    namespace: vercel
    baseUri: https://api.vercel.com/v13
    authentication:
      type: bearer
      token: $secrets.vercel_token
    resources:
    - name: deployments
      path: /deployments/{{deployment_id}}
      inputParameters:
      - name: deployment_id
        in: path
      operations:
      - name: get-deployment
        method: GET

Retrieves error details from Sentry for a brand website, returning error title, count, affected users, and first/last seen timestamps.

naftiko: '0.5'
info:
  label: Sentry Error Tracking Lookup
  description: Retrieves error details from Sentry for a brand website, returning error title, count, affected users, and first/last seen timestamps.
  tags:
  - monitoring
  - sentry-system
  - error-tracking
capability:
  exposes:
  - type: mcp
    namespace: error-tracking
    port: 8080
    tools:
    - name: get-sentry-issue
      description: Look up a Sentry error issue. Returns title, count, affected users, and timestamps.
      inputParameters:
      - name: issue_id
        in: body
        type: string
        description: The Sentry issue ID.
      call: sentry.get-issue
      with:
        issue_id: '{{issue_id}}'
      outputParameters:
      - name: title
        type: string
        mapping: $.title
      - name: count
        type: number
        mapping: $.count
      - name: users_affected
        type: number
        mapping: $.userCount
  consumes:
  - type: http
    namespace: sentry
    baseUri: https://sentry.io/api/0
    authentication:
      type: bearer
      token: $secrets.sentry_token
    resources:
    - name: issues
      path: /issues/{{issue_id}}/
      inputParameters:
      - name: issue_id
        in: path
      operations:
      - name: get-issue
        method: GET

Retrieves trending interest data for a topic from Google Trends to inform editorial planning.

naftiko: '0.5'
info:
  label: Google Trends Topic Interest
  description: Retrieves trending interest data for a topic from Google Trends to inform editorial planning.
  tags:
  - analytics
  - google-trends
  - editorial
capability:
  exposes:
  - type: mcp
    namespace: google-trends
    port: 8080
    tools:
    - name: get-topic-interest
      description: Fetch Google Trends interest over time for a topic.
      inputParameters:
      - name: keyword
        in: body
        type: string
        description: The keyword or topic to query.
      - name: geo
        in: body
        type: string
        description: The geographic region code (e.g., US).
      call: trends.get-interest
      with:
        keyword: '{{keyword}}'
        geo: '{{geo}}'
      outputParameters:
      - name: interest_score
        type: number
        mapping: $.default.timelineData[-1].value[0]
      - name: trend_direction
        type: string
        mapping: $.default.trend
  consumes:
  - type: http
    namespace: trends
    baseUri: https://trends.googleapis.com/trends/api
    authentication:
      type: bearer
      token: $secrets.google_trends_token
    resources:
    - name: explore
      path: /widgetdata/multiline
      operations:
      - name: get-interest
        method: GET

Republishes an article across multiple brand sites by fetching from CMS, adapting for each brand, publishing to WordPress, and notifying editors via Slack.

naftiko: '0.5'
info:
  label: Brand Content Republication Pipeline
  description: Republishes an article across multiple brand sites by fetching from CMS, adapting for each brand, publishing to WordPress, and notifying editors via Slack.
  tags:
  - editorial
  - publishing
  - wordpress
  - slack
capability:
  exposes:
  - type: mcp
    namespace: content-republication
    port: 8080
    tools:
    - name: republish-article
      description: Republish a CMS article across multiple Conde Nast brand sites.
      inputParameters:
      - name: article_id
        in: body
        type: string
        description: The source article ID in the CMS.
      - name: target_brands
        in: body
        type: string
        description: Comma-separated brand slugs to publish to.
      steps:
      - name: fetch-article
        type: call
        call: cms.get-article
        with:
          article_id: '{{article_id}}'
      - name: publish-to-brands
        type: call
        call: wordpress.create-post
        with:
          title: '{{fetch-article.title}}'
          content: '{{fetch-article.body}}'
          status: publish
      - name: notify-editors
        type: call
        call: slack.post-message
        with:
          channel: '#cross-brand-publishing'
          text: Article '{{fetch-article.title}}' republished to {{target_brands}}.
  consumes:
  - type: http
    namespace: cms
    baseUri: https://cms.condenast.com/api/v2
    authentication:
      type: bearer
      token: $secrets.cms_token
    resources:
    - name: articles
      path: /articles/{{article_id}}
      inputParameters:
      - name: article_id
        in: path
      operations:
      - name: get-article
        method: GET
  - type: http
    namespace: wordpress
    baseUri: https://publish.condenast.com/wp-json/wp/v2
    authentication:
      type: bearer
      token: $secrets.wordpress_token
    resources:
    - name: posts
      path: /posts
      operations:
      - name: create-post
        method: POST
  - type: http
    namespace: slack
    baseUri: https://slack.com/api
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: messages
      path: /chat.postMessage
      operations:
      - name: post-message
        method: POST

Triggers a Tableau dashboard refresh for editorial content reporting and returns the refresh status and last data update time.

naftiko: '0.5'
info:
  label: Tableau Content Dashboard Refresh
  description: Triggers a Tableau dashboard refresh for editorial content reporting and returns the refresh status and last data update time.
  tags:
  - analytics
  - tableau
  - reporting
capability:
  exposes:
  - type: mcp
    namespace: bi-reporting
    port: 8080
    tools:
    - name: refresh-content-dashboard
      description: Trigger a Tableau dashboard refresh. Returns refresh status and last update time.
      inputParameters:
      - name: workbook_id
        in: body
        type: string
        description: The Tableau workbook ID.
      call: tableau.refresh-workbook
      with:
        workbook_id: '{{workbook_id}}'
      outputParameters:
      - name: status
        type: string
        mapping: $.extractRefreshJob.status
      - name: last_updated
        type: string
        mapping: $.extractRefreshJob.endedAt
  consumes:
  - type: http
    namespace: tableau
    baseUri: https://tableau.internal.condenast.com/api/3.19
    authentication:
      type: bearer
      token: $secrets.tableau_token
    resources:
    - name: workbooks
      path: /sites/{{site_id}}/workbooks/{{workbook_id}}/refresh
      inputParameters:
      - name: workbook_id
        in: path
      operations:
      - name: refresh-workbook
        method: POST

Retrieves product details from a Conde Nast brand Shopify storefront including price and availability.

naftiko: '0.5'
info:
  label: Shopify Storefront Product Lookup
  description: Retrieves product details from a Conde Nast brand Shopify storefront including price and availability.
  tags:
  - e-commerce
  - shopify
  - retail
capability:
  exposes:
  - type: mcp
    namespace: shopify-products
    port: 8080
    tools:
    - name: get-product
      description: Look up a product by handle from Shopify storefront.
      inputParameters:
      - name: product_handle
        in: body
        type: string
        description: The product handle slug.
      call: shopify.get-product-by-handle
      with:
        handle: '{{product_handle}}'
      outputParameters:
      - name: title
        type: string
        mapping: $.product.title
      - name: price
        type: string
        mapping: $.product.variants[0].price
      - name: available
        type: boolean
        mapping: $.product.variants[0].available
  consumes:
  - type: http
    namespace: shopify
    baseUri: https://shop.condenast.com/admin/api/2024-01
    authentication:
      type: bearer
      token: $secrets.shopify_access_token
    resources:
    - name: products
      path: /products.json?handle={{product_handle}}
      inputParameters:
      - name: product_handle
        in: path
      operations:
      - name: get-product-by-handle
        method: GET

Syndicates content to partner platforms by fetching from CMS, transforming to partner format, pushing via API, and tracking syndication in Airtable.

naftiko: '0.5'
info:
  label: Content Syndication Partner Pipeline
  description: Syndicates content to partner platforms by fetching from CMS, transforming to partner format, pushing via API, and tracking syndication in Airtable.
  tags:
  - syndication
  - content-management
  - partnerships
  - airtable
capability:
  exposes:
  - type: mcp
    namespace: content-syndication
    port: 8080
    tools:
    - name: syndicate-content
      description: Push content to syndication partners and track distribution.
      inputParameters:
      - name: article_id
        in: body
        type: string
        description: The source article identifier.
      - name: partner_slug
        in: body
        type: string
        description: The syndication partner slug.
      steps:
      - name: fetch-article
        type: call
        call: cms.get-article
        with:
          article_id: '{{article_id}}'
      - name: transform-content
        type: call
        call: content-transform.adapt-for-partner
        with:
          content: '{{fetch-article.body}}'
          partner: '{{partner_slug}}'
      - name: push-to-partner
        type: call
        call: syndication-api.submit-content
        with:
          partner: '{{partner_slug}}'
          content: '{{transform-content.adapted_content}}'
      - name: track-syndication
        type: call
        call: airtable.create-record
        with:
          base_id: syndication_tracker
          table_name: distributions
          article_id: '{{article_id}}'
          partner: '{{partner_slug}}'
  consumes:
  - type: http
    namespace: cms
    baseUri: https://cms.condenast.com/api/v2
    authentication:
      type: bearer
      token: $secrets.cms_token
    resources:
    - name: articles
      path: /articles/{{article_id}}
      inputParameters:
      - name: article_id
        in: path
      operations:
      - name: get-article
        method: GET
  - type: http
    namespace: content-transform
    baseUri: https://transform.condenast.com/api/v1
    authentication:
      type: bearer
      token: $secrets.content_transform_token
    resources:
    - name: adaptations
      path: /adapt
      operations:
      - name: adapt-for-partner
        method: POST
  - type: http
    namespace: syndication-api
    baseUri: https://syndication.condenast.com/api/v1
    authentication:
      type: bearer
      token: $secrets.syndication_token
    resources:
    - name: submissions
      path: /submit
      operations:
      - name: submit-content
        method: POST
  - type: http
    namespace: airtable
    baseUri: https://api.airtable.com/v0
    authentication:
      type: bearer
      token: $secrets.airtable_token
    resources:
    - name: records
      path: /{{base_id}}/{{table_name}}
      inputParameters:
      - name: base_id
        in: path
      - name: table_name
        in: path
      operations:
      - name: create-record
        method: POST

Retrieves an audience segment report from Adobe Analytics, returning segment size, engagement score, and top content categories.

naftiko: '0.5'
info:
  label: Adobe Analytics Audience Report
  description: Retrieves an audience segment report from Adobe Analytics, returning segment size, engagement score, and top content categories.
  tags:
  - analytics
  - adobe-analytics
  - audience
capability:
  exposes:
  - type: mcp
    namespace: audience-analytics
    port: 8080
    tools:
    - name: get-audience-report
      description: Look up an Adobe Analytics audience segment report. Returns segment size, engagement score, and top categories.
      inputParameters:
      - name: report_suite_id
        in: body
        type: string
        description: The Adobe Analytics report suite ID.
      - name: segment_id
        in: body
        type: string
        description: The audience segment ID.
      call: adobe-analytics.get-report
      with:
        rsid: '{{report_suite_id}}'
        segment_id: '{{segment_id}}'
      outputParameters:
      - name: segment_size
        type: number
        mapping: $.report.totals[0]
      - name: engagement_score
        type: number
        mapping: $.report.totals[1]
  consumes:
  - type: http
    namespace: adobe-analytics
    baseUri: https://analytics.adobe.io/api
    authentication:
      type: bearer
      token: $secrets.adobe_analytics_token
    inputParameters:
    - name: x-api-key
      in: header
      value: $secrets.adobe_api_key
    resources:
    - name: reports
      path: /{{company_id}}/reports
      operations:
      - name: get-report
        method: POST

Retrieves an IT incident from ServiceNow, returning short description, priority, state, and assigned group.

naftiko: '0.5'
info:
  label: ServiceNow IT Incident Lookup
  description: Retrieves an IT incident from ServiceNow, returning short description, priority, state, and assigned group.
  tags:
  - it-service
  - servicenow
  - incident-management
capability:
  exposes:
  - type: mcp
    namespace: it-service
    port: 8080
    tools:
    - name: get-it-incident
      description: Look up a ServiceNow IT incident. Returns description, priority, state, and assigned group.
      inputParameters:
      - name: incident_number
        in: body
        type: string
        description: The ServiceNow incident number.
      call: servicenow.get-incident
      with:
        number: '{{incident_number}}'
      outputParameters:
      - name: short_description
        type: string
        mapping: $.result.short_description
      - name: priority
        type: string
        mapping: $.result.priority
      - name: state
        type: string
        mapping: $.result.state
      - name: assigned_group
        type: string
        mapping: $.result.assignment_group.display_value
  consumes:
  - type: http
    namespace: servicenow
    baseUri: https://condenast.service-now.com/api/now
    authentication:
      type: basic
      username: $secrets.servicenow_user
      password: $secrets.servicenow_password
    resources:
    - name: incidents
      path: /table/incident
      operations:
      - name: get-incident
        method: GET

Retrieves LinkedIn company page analytics for a brand, returning follower count, post impressions, and engagement rate.

naftiko: '0.5'
info:
  label: LinkedIn Company Page Analytics
  description: Retrieves LinkedIn company page analytics for a brand, returning follower count, post impressions, and engagement rate.
  tags:
  - social-media
  - linkedin
  - analytics
capability:
  exposes:
  - type: mcp
    namespace: linkedin-analytics
    port: 8080
    tools:
    - name: get-linkedin-analytics
      description: Look up LinkedIn company page analytics. Returns follower count, impressions, and engagement rate.
      inputParameters:
      - name: organization_id
        in: body
        type: string
        description: The LinkedIn organization ID.
      call: linkedin.get-page-stats
      with:
        organization_id: '{{organization_id}}'
      outputParameters:
      - name: follower_count
        type: number
        mapping: $.elements[0].followerCounts.organicFollowerCount
      - name: impressions
        type: number
        mapping: $.elements[0].totalShareStatistics.impressionCount
      - name: engagement_rate
        type: number
        mapping: $.elements[0].totalShareStatistics.engagement
  consumes:
  - type: http
    namespace: linkedin
    baseUri: https://api.linkedin.com/v2
    authentication:
      type: bearer
      token: $secrets.linkedin_token
    resources:
    - name: statistics
      path: /organizationalEntityShareStatistics
      operations:
      - name: get-page-stats
        method: GET

Pulls subscription metrics from the billing system, enriches with Google Analytics engagement data, generates a Looker dashboard refresh, and emails the summary to leadership via Gmail.

naftiko: '0.5'
info:
  label: Subscription Revenue Dashboard Pipeline
  description: Pulls subscription metrics from the billing system, enriches with Google Analytics engagement data, generates a Looker dashboard refresh, and emails the summary to leadership via Gmail.
  tags:
  - subscriptions
  - revenue
  - looker
  - google-analytics
  - gmail
capability:
  exposes:
  - type: mcp
    namespace: subscription-analytics
    port: 8080
    tools:
    - name: refresh-subscription-dashboard
      description: Pull subscription data, combine with engagement metrics, refresh the Looker dashboard, and email leadership.
      inputParameters:
      - name: brand
        in: body
        type: string
        description: The Condé Nast brand.
      - name: period
        in: body
        type: string
        description: The reporting period (e.g., last30days).
      steps:
      - name: get-subscription-metrics
        type: call
        call: billing.get-metrics
        with:
          brand: '{{brand}}'
          period: '{{period}}'
      - name: get-engagement
        type: call
        call: ga4.get-engagement
        with:
          brand: '{{brand}}'
          period: '{{period}}'
      - name: refresh-looker
        type: call
        call: looker.run-look
        with:
          look_id: subscription_overview_{{brand}}
      - name: send-email
        type: call
        call: gmail.send-email
        with:
          to: leadership-{{brand}}@condenast.com
          subject: 'Subscription Dashboard: {{brand}} - {{period}}'
          body: 'Active subscribers: {{get-subscription-metrics.active_count}}. MRR: ${{get-subscription-metrics.mrr}}. Churn: {{get-subscription-metrics.churn_rate}}%. Engagement: {{get-engagement.avg_session_duration}}s avg session. Dashboard: {{refresh-looker.url}}.'
  consumes:
  - type: http
    namespace: billing
    baseUri: https://billing.internal.condenast.com/api/v1
    authentication:
      type: bearer
      token: $secrets.billing_token
    resources:
    - name: metrics
      path: /metrics
      operations:
      - name: get-metrics
        method: GET
  - type: http
    namespace: ga4
    baseUri: https://analyticsdata.googleapis.com/v1beta
    authentication:
      type: bearer
      token: $secrets.google_analytics_token
    resources:
    - name: reports
      path: /properties/{{property_id}}:runReport
      operations:
      - name: get-engagement
        method: POST
  - type: http
    namespace: looker
    baseUri: https://condenast.cloud.looker.com/api/4.0
    authentication:
      type: bearer
      token: $secrets.looker_token
    resources:
    - name: looks
      path: /looks/{{look_id}}/run/json
      inputParameters:
      - name: look_id
        in: path
      operations:
      - name: run-look
        method: GET
  - type: http
    namespace: gmail
    baseUri: https://gmail.googleapis.com/gmail/v1
    authentication:
      type: bearer
      token: $secrets.gmail_token
    resources:
    - name: messages
      path: /users/me/messages/send
      operations:
      - name: send-email
        method: POST

Queries Splunk for CDN performance metrics related to content delivery, returning cache hit rate, origin response time, and error rate.

naftiko: '0.5'
info:
  label: Splunk Content Delivery Monitoring
  description: Queries Splunk for CDN performance metrics related to content delivery, returning cache hit rate, origin response time, and error rate.
  tags:
  - monitoring
  - splunk
  - cdn
  - performance
capability:
  exposes:
  - type: mcp
    namespace: cdn-monitoring
    port: 8080
    tools:
    - name: get-cdn-metrics
      description: Query Splunk for CDN performance metrics. Returns cache hit rate, origin response time, and error rate.
      inputParameters:
      - name: domain
        in: body
        type: string
        description: The domain to query metrics for.
      - name: time_range
        in: body
        type: string
        description: The time range (e.g., -1h, -24h).
      call: splunk.search-cdn
      with:
        search: index=cdn sourcetype=cloudflare host={{domain}}
        earliest_time: '{{time_range}}'
      outputParameters:
      - name: cache_hit_rate
        type: number
        mapping: $.results.cache_hit_rate
      - name: origin_response_ms
        type: number
        mapping: $.results.origin_response_time
      - name: error_rate
        type: number
        mapping: $.results.error_rate
  consumes:
  - type: http
    namespace: splunk
    baseUri: https://splunk.internal.condenast.com:8089/services
    authentication:
      type: bearer
      token: $secrets.splunk_token
    resources:
    - name: search
      path: /search/jobs/export
      operations:
      - name: search-cdn
        method: POST

Retrieves current follower count and engagement rate for a Conde Nast brand Twitter account.

naftiko: '0.5'
info:
  label: Twitter Follower Count Lookup
  description: Retrieves current follower count and engagement rate for a Conde Nast brand Twitter account.
  tags:
  - social-media
  - twitter
  - analytics
capability:
  exposes:
  - type: mcp
    namespace: twitter-analytics
    port: 8080
    tools:
    - name: get-follower-count
      description: Look up Twitter follower count and engagement rate for a brand handle.
      inputParameters:
      - name: handle
        in: body
        type: string
        description: The Twitter handle for the brand.
      call: twitter.get-user-metrics
      with:
        handle: '{{handle}}'
      outputParameters:
      - name: followers_count
        type: number
        mapping: $.data.public_metrics.followers_count
      - name: engagement_rate
        type: number
        mapping: $.data.engagement_rate
  consumes:
  - type: http
    namespace: twitter
    baseUri: https://api.twitter.com/2
    authentication:
      type: bearer
      token: $secrets.twitter_bearer_token
    resources:
    - name: users
      path: /users/by/username/{{handle}}
      inputParameters:
      - name: handle
        in: path
      operations:
      - name: get-user-metrics
        method: GET

Evaluates brand ambassador performance by pulling Instagram engagement data, YouTube metrics, affiliate sales from Shopify, and compiling a report in Google Sheets.

naftiko: '0.5'
info:
  label: Brand Ambassador Performance Pipeline
  description: Evaluates brand ambassador performance by pulling Instagram engagement data, YouTube metrics, affiliate sales from Shopify, and compiling a report in Google Sheets.
  tags:
  - influencer
  - instagram
  - youtube
  - shopify
  - google-sheets
capability:
  exposes:
  - type: mcp
    namespace: ambassador-performance
    port: 8080
    tools:
    - name: evaluate-ambassador
      description: Compile brand ambassador performance across social and sales channels.
      inputParameters:
      - name: ambassador_handle
        in: body
        type: string
        description: The ambassador social media handle.
      - name: affiliate_code
        in: body
        type: string
        description: The ambassador affiliate code.
      steps:
      - name: get-ig-engagement
        type: call
        call: instagram.get-user-insights
        with:
          handle: '{{ambassador_handle}}'
      - name: get-yt-metrics
        type: call
        call: youtube.get-channel-stats
        with:
          handle: '{{ambassador_handle}}'
      - name: get-affiliate-sales
        type: call
        call: shopify.get-orders-by-discount
        with:
          discount_code: '{{affiliate_code}}'
      - name: compile-report
        type: call
        call: google-sheets.append-rows
        with:
          spreadsheet_id: ambassador_reports
          data: '{{ambassador_handle}},{{get-ig-engagement.reach}},{{get-yt-metrics.views}},{{get-affiliate-sales.total}}'
  consumes:
  - type: http
    namespace: instagram
    baseUri: https://graph.facebook.com/v18.0
    authentication:
      type: bearer
      token: $secrets.instagram_token
    resources:
    - name: insights
      path: /{{ig_user_id}}/insights
      operations:
      - name: get-user-insights
        method: GET
  - type: http
    namespace: youtube
    baseUri: https://www.googleapis.com/youtube/v3
    authentication:
      type: bearer
      token: $secrets.youtube_token
    resources:
    - name: channels
      path: /channels?part=statistics
      operations:
      - name: get-channel-stats
        method: GET
  - type: http
    namespace: shopify
    baseUri: https://shop.condenast.com/admin/api/2024-01
    authentication:
      type: bearer
      token: $secrets.shopify_access_token
    resources:
    - name: orders
      path: /orders.json?discount_code={{discount_code}}
      operations:
      - name: get-orders-by-discount
        method: GET
  - type: http
    namespace: google-sheets
    baseUri: https://sheets.googleapis.com/v4
    authentication:
      type: bearer
      token: $secrets.google_sheets_token
    resources:
    - name: spreadsheets
      path: /spreadsheets/{{spreadsheet_id}}/values/Sheet1:append
      inputParameters:
      - name: spreadsheet_id
        in: path
      operations:
      - name: append-rows
        method: POST

Retrieves the editorial calendar from Notion for a given brand, returning upcoming article titles, authors, publish dates, and statuses.

naftiko: '0.5'
info:
  label: Notion Editorial Calendar Lookup
  description: Retrieves the editorial calendar from Notion for a given brand, returning upcoming article titles, authors, publish dates, and statuses.
  tags:
  - editorial
  - notion
  - planning
capability:
  exposes:
  - type: mcp
    namespace: editorial-calendar
    port: 8080
    tools:
    - name: get-editorial-calendar
      description: Look up the editorial calendar in Notion for a brand. Returns upcoming articles with titles, authors, and dates.
      inputParameters:
      - name: database_id
        in: body
        type: string
        description: The Notion database ID for the editorial calendar.
      - name: brand
        in: body
        type: string
        description: The brand to filter by.
      call: notion.query-database
      with:
        database_id: '{{database_id}}'
        filter_brand: '{{brand}}'
      outputParameters:
      - name: results
        type: string
        mapping: $.results
  consumes:
  - type: http
    namespace: notion
    baseUri: https://api.notion.com/v1
    authentication:
      type: bearer
      token: $secrets.notion_token
    inputParameters:
    - name: Notion-Version
      in: header
      value: '2022-06-28'
    resources:
    - name: databases
      path: /databases/{{database_id}}/query
      inputParameters:
      - name: database_id
        in: path
      operations:
      - name: query-database
        method: POST

Retrieves headcount by department from Workday for organizational planning, returning total headcount, open positions, and attrition rate.

naftiko: '0.5'
info:
  label: Workday Headcount Report
  description: Retrieves headcount by department from Workday for organizational planning, returning total headcount, open positions, and attrition rate.
  tags:
  - hr
  - headcount
  - workday
  - workforce-planning
capability:
  exposes:
  - type: mcp
    namespace: hr-analytics
    port: 8080
    tools:
    - name: get-headcount-report
      description: Look up department headcount in Workday. Returns total, open positions, and attrition rate.
      inputParameters:
      - name: department
        in: body
        type: string
        description: The department name.
      call: workday.get-headcount
      with:
        department: '{{department}}'
      outputParameters:
      - name: total_headcount
        type: number
        mapping: $.department.totalHeadcount
      - name: open_positions
        type: number
        mapping: $.department.openPositions
      - name: attrition_rate
        type: number
        mapping: $.department.attritionRate
  consumes:
  - type: http
    namespace: workday
    baseUri: https://wd2-impl-services1.workday.com/ccx/api/v1
    authentication:
      type: bearer
      token: $secrets.workday_token
    resources:
    - name: headcount
      path: /departments/{{department}}/headcount
      inputParameters:
      - name: department
        in: path
      operations:
      - name: get-headcount
        method: GET

Retrieves website performance metrics from Datadog for a brand domain, returning page load time, error count, and largest contentful paint.

naftiko: '0.5'
info:
  label: Datadog Website Performance Check
  description: Retrieves website performance metrics from Datadog for a brand domain, returning page load time, error count, and largest contentful paint.
  tags:
  - monitoring
  - datadog
  - web-performance
capability:
  exposes:
  - type: mcp
    namespace: web-performance
    port: 8080
    tools:
    - name: get-site-performance
      description: Look up website performance in Datadog. Returns page load time, error count, and LCP.
      inputParameters:
      - name: domain
        in: body
        type: string
        description: The brand website domain.
      call: datadog.get-rum-metrics
      with:
        domain: '{{domain}}'
      outputParameters:
      - name: page_load_ms
        type: number
        mapping: $.series[0].page_load
      - name: error_count
        type: number
        mapping: $.series[0].error_count
      - name: lcp_ms
        type: number
        mapping: $.series[0].lcp
  consumes:
  - type: http
    namespace: datadog
    baseUri: https://api.datadoghq.com/api/v2
    authentication:
      type: apiKey
      key: $secrets.datadog_api_key
    resources:
    - name: rum
      path: /rum/analytics/aggregate
      operations:
      - name: get-rum-metrics
        method: POST

Retrieves performance analytics for a TikTok video including views, likes, and shares.

naftiko: '0.5'
info:
  label: TikTok Video Analytics
  description: Retrieves performance analytics for a TikTok video including views, likes, and shares.
  tags:
  - social-media
  - tiktok
  - video-analytics
capability:
  exposes:
  - type: mcp
    namespace: tiktok-analytics
    port: 8080
    tools:
    - name: get-video-stats
      description: Look up TikTok video performance by video ID.
      inputParameters:
      - name: video_id
        in: body
        type: string
        description: The TikTok video identifier.
      call: tiktok.get-video-data
      with:
        video_id: '{{video_id}}'
      outputParameters:
      - name: views
        type: number
        mapping: $.data.videos[0].statistics.play_count
      - name: likes
        type: number
        mapping: $.data.videos[0].statistics.digg_count
      - name: shares
        type: number
        mapping: $.data.videos[0].statistics.share_count
  consumes:
  - type: http
    namespace: tiktok
    baseUri: https://open.tiktokapis.com/v2
    authentication:
      type: bearer
      token: $secrets.tiktok_access_token
    resources:
    - name: videos
      path: /video/query
      operations:
      - name: get-video-data
        method: POST

Creates a newsletter campaign in MailChimp, populates it with curated content from the CMS, schedules delivery, and logs the campaign in Google Sheets for tracking.

naftiko: '0.5'
info:
  label: MailChimp Newsletter Campaign Pipeline
  description: Creates a newsletter campaign in MailChimp, populates it with curated content from the CMS, schedules delivery, and logs the campaign in Google Sheets for tracking.
  tags:
  - email-marketing
  - mailchimp
  - newsletter
  - google-sheets
capability:
  exposes:
  - type: mcp
    namespace: email-campaigns
    port: 8080
    tools:
    - name: create-newsletter
      description: Given content IDs and audience segment, create and schedule a MailChimp newsletter campaign.
      inputParameters:
      - name: brand
        in: body
        type: string
        description: The Condé Nast brand.
      - name: subject_line
        in: body
        type: string
        description: The email subject line.
      - name: segment_id
        in: body
        type: string
        description: The MailChimp audience segment ID.
      - name: send_time
        in: body
        type: string
        description: The scheduled send time in ISO 8601 format.
      steps:
      - name: create-campaign
        type: call
        call: mailchimp.create-campaign
        with:
          type: regular
          list_id: '{{brand}}_subscribers'
          segment_id: '{{segment_id}}'
          subject_line: '{{subject_line}}'
      - name: schedule-campaign
        type: call
        call: mailchimp.schedule-campaign
        with:
          campaign_id: '{{create-campaign.id}}'
          send_time: '{{send_time}}'
      - name: log-campaign
        type: call
        call: gsheets.append-row
        with:
          spreadsheet_id: newsletter_tracking
          range: Campaigns!A:D
          values:
          - '{{brand}}'
          - '{{subject_line}}'
          - '{{create-campaign.id}}'
          - '{{send_time}}'
  consumes:
  - type: http
    namespace: mailchimp
    baseUri: https://us1.api.mailchimp.com/3.0
    authentication:
      type: basic
      username: anystring
      password: $secrets.mailchimp_api_key
    resources:
    - name: campaigns
      path: /campaigns
      operations:
      - name: create-campaign
        method: POST
    - name: schedule
      path: /campaigns/{{campaign_id}}/actions/schedule
      inputParameters:
      - name: campaign_id
        in: path
      operations:
      - name: schedule-campaign
        method: POST
  - type: http
    namespace: gsheets
    baseUri: https://sheets.googleapis.com/v4/spreadsheets
    authentication:
      type: bearer
      token: $secrets.google_sheets_token
    resources:
    - name: values
      path: /{{spreadsheet_id}}/values/{{range}}:append
      inputParameters:
      - name: spreadsheet_id
        in: path
      - name: range
        in: path
      operations:
      - name: append-row
        method: POST

Pulls paywall conversion data from the subscription system, combines with Google Analytics content engagement, and generates a report in Looker for the revenue team.

naftiko: '0.5'
info:
  label: Content Paywall Analytics Pipeline
  description: Pulls paywall conversion data from the subscription system, combines with Google Analytics content engagement, and generates a report in Looker for the revenue team.
  tags:
  - subscriptions
  - paywall
  - google-analytics
  - looker
  - revenue
capability:
  exposes:
  - type: mcp
    namespace: paywall-analytics
    port: 8080
    tools:
    - name: generate-paywall-report
      description: Given a brand and date range, pull paywall conversions, engagement data, and generate a Looker report.
      inputParameters:
      - name: brand
        in: body
        type: string
        description: The Condé Nast brand.
      - name: start_date
        in: body
        type: string
        description: Start date in YYYY-MM-DD format.
      - name: end_date
        in: body
        type: string
        description: End date in YYYY-MM-DD format.
      steps:
      - name: get-conversions
        type: call
        call: billing.get-paywall-conversions
        with:
          brand: '{{brand}}'
          start_date: '{{start_date}}'
          end_date: '{{end_date}}'
      - name: get-engagement
        type: call
        call: ga4.get-content-engagement
        with:
          brand: '{{brand}}'
          start_date: '{{start_date}}'
          end_date: '{{end_date}}'
      - name: refresh-report
        type: call
        call: looker.run-look
        with:
          look_id: paywall_report_{{brand}}
  consumes:
  - type: http
    namespace: billing
    baseUri: https://billing.internal.condenast.com/api/v1
    authentication:
      type: bearer
      token: $secrets.billing_token
    resources:
    - name: paywall
      path: /paywall/conversions
      operations:
      - name: get-paywall-conversions
        method: GET
  - type: http
    namespace: ga4
    baseUri: https://analyticsdata.googleapis.com/v1beta
    authentication:
      type: bearer
      token: $secrets.google_analytics_token
    resources:
    - name: reports
      path: /properties/{{property_id}}:runReport
      operations:
      - name: get-content-engagement
        method: POST
  - type: http
    namespace: looker
    baseUri: https://condenast.cloud.looker.com/api/4.0
    authentication:
      type: bearer
      token: $secrets.looker_token
    resources:
    - name: looks
      path: /looks/{{look_id}}/run/json
      inputParameters:
      - name: look_id
        in: path
      operations:
      - name: run-look
        method: GET

Exports design assets from a Figma file, returning the exported image URLs, file format, and dimensions for use in editorial layouts.

naftiko: '0.5'
info:
  label: Figma Design Asset Export
  description: Exports design assets from a Figma file, returning the exported image URLs, file format, and dimensions for use in editorial layouts.
  tags:
  - design
  - figma
  - creative
capability:
  exposes:
  - type: mcp
    namespace: design-ops
    port: 8080
    tools:
    - name: export-figma-assets
      description: Export design assets from a Figma file. Returns image URLs, format, and dimensions.
      inputParameters:
      - name: file_key
        in: body
        type: string
        description: The Figma file key.
      - name: node_ids
        in: body
        type: string
        description: Comma-separated node IDs to export.
      - name: format
        in: body
        type: string
        description: Export format (png, jpg, svg, pdf).
      call: figma.export-images
      with:
        file_key: '{{file_key}}'
        ids: '{{node_ids}}'
        format: '{{format}}'
      outputParameters:
      - name: images
        type: string
        mapping: $.images
  consumes:
  - type: http
    namespace: figma
    baseUri: https://api.figma.com/v1
    authentication:
      type: bearer
      token: $secrets.figma_token
    resources:
    - name: images
      path: /images/{{file_key}}
      inputParameters:
      - name: file_key
        in: path
      operations:
      - name: export-images
        method: GET

Clears content rights for global distribution by checking the rights database, requesting clearance from Getty Images, logging in the legal tracker, and updating publication permissions.

naftiko: '0.5'
info:
  label: Global Content Rights Clearance Pipeline
  description: Clears content rights for global distribution by checking the rights database, requesting clearance from Getty Images, logging in the legal tracker, and updating publication permissions.
  tags:
  - legal
  - rights-management
  - content-management
capability:
  exposes:
  - type: mcp
    namespace: rights-clearance
    port: 8080
    tools:
    - name: clear-content-rights
      description: Verify and clear content rights for global distribution across brands.
      inputParameters:
      - name: asset_id
        in: body
        type: string
        description: The content asset identifier.
      - name: target_territories
        in: body
        type: string
        description: Comma-separated target territory codes.
      steps:
      - name: check-rights-db
        type: call
        call: rights-db.get-asset-rights
        with:
          asset_id: '{{asset_id}}'
      - name: request-getty-clearance
        type: call
        call: getty.check-license
        with:
          asset_id: '{{asset_id}}'
          territories: '{{target_territories}}'
      - name: log-in-tracker
        type: call
        call: airtable.create-record
        with:
          base_id: legal_rights
          table_name: clearance_requests
          asset: '{{asset_id}}'
          territories: '{{target_territories}}'
      - name: update-permissions
        type: call
        call: cms.update-asset-permissions
        with:
          asset_id: '{{asset_id}}'
          territories: '{{target_territories}}'
  consumes:
  - type: http
    namespace: rights-db
    baseUri: https://rights.condenast.com/api/v1
    authentication:
      type: bearer
      token: $secrets.rights_db_token
    resources:
    - name: assets
      path: /assets/{{asset_id}}/rights
      inputParameters:
      - name: asset_id
        in: path
      operations:
      - name: get-asset-rights
        method: GET
  - type: http
    namespace: getty
    baseUri: https://api.gettyimages.com/v3
    authentication:
      type: bearer
      token: $secrets.getty_api_key
    resources:
    - name: licenses
      path: /images/{{asset_id}}/license
      inputParameters:
      - name: asset_id
        in: path
      operations:
      - name: check-license
        method: GET
  - type: http
    namespace: airtable
    baseUri: https://api.airtable.com/v0
    authentication:
      type: bearer
      token: $secrets.airtable_token
    resources:
    - name: records
      path: /{{base_id}}/{{table_name}}
      inputParameters:
      - name: base_id
        in: path
      - name: table_name
        in: path
      operations:
      - name: create-record
        method: POST
  - type: http
    namespace: cms
    baseUri: https://cms.condenast.com/api/v2
    authentication:
      type: bearer
      token: $secrets.cms_token
    resources:
    - name: assets
      path: /assets/{{asset_id}}/permissions
      inputParameters:
      - name: asset_id
        in: path
      operations:
      - name: update-asset-permissions
        method: PATCH

Manages print magazine production by collecting approved layouts from InDesign, generating print-ready PDFs, uploading to the print vendor portal, and updating the production schedule in Airtable.

naftiko: '0.5'
info:
  label: Print Magazine Production Pipeline
  description: Manages print magazine production by collecting approved layouts from InDesign, generating print-ready PDFs, uploading to the print vendor portal, and updating the production schedule in Airtable.
  tags:
  - production
  - print
  - adobe
  - airtable
capability:
  exposes:
  - type: mcp
    namespace: print-production
    port: 8080
    tools:
    - name: process-print-issue
      description: Collect layouts, generate PDFs, submit to print vendor, and update schedule.
      inputParameters:
      - name: issue_id
        in: body
        type: string
        description: The magazine issue identifier.
      - name: brand
        in: body
        type: string
        description: The magazine brand.
      steps:
      - name: get-approved-layouts
        type: call
        call: indesign-server.export-layouts
        with:
          issue_id: '{{issue_id}}'
          format: pdf
      - name: upload-to-print-vendor
        type: call
        call: ftp.upload-file
        with:
          host: print.vendor.com
          path: /issues/{{issue_id}}/
      - name: update-production-schedule
        type: call
        call: airtable.update-record
        with:
          base_id: production
          table_name: '{{brand}}_schedule'
          status: Sent to Print
      - name: notify-team
        type: call
        call: slack.post-message
        with:
          channel: '#{{brand}}-production'
          text: Issue {{issue_id}} sent to print vendor.
  consumes:
  - type: http
    namespace: indesign-server
    baseUri: https://indesign-server.condenast.com/api/v1
    authentication:
      type: bearer
      token: $secrets.indesign_server_token
    resources:
    - name: exports
      path: /documents/{{issue_id}}/export
      inputParameters:
      - name: issue_id
        in: path
      operations:
      - name: export-layouts
        method: POST
  - type: http
    namespace: ftp
    baseUri: https://ftp-gateway.condenast.com/api/v1
    authentication:
      type: bearer
      token: $secrets.ftp_gateway_token
    resources:
    - name: uploads
      path: /upload
      operations:
      - name: upload-file
        method: POST
  - type: http
    namespace: airtable
    baseUri: https://api.airtable.com/v0
    authentication:
      type: bearer
      token: $secrets.airtable_token
    resources:
    - name: records
      path: /{{base_id}}/{{table_name}}
      inputParameters:
      - name: base_id
        in: path
      - name: table_name
        in: path
      operations:
      - name: update-record
        method: PATCH
  - type: http
    namespace: slack
    baseUri: https://slack.com/api
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: messages
      path: /chat.postMessage
      operations:
      - name: post-message
        method: POST

Audits website accessibility by running automated scans, logging issues in Jira, generating compliance reports in Google Sheets, and notifying the engineering team via Slack.

naftiko: '0.5'
info:
  label: Accessibility Compliance Audit Pipeline
  description: Audits website accessibility by running automated scans, logging issues in Jira, generating compliance reports in Google Sheets, and notifying the engineering team via Slack.
  tags:
  - accessibility
  - compliance
  - jira
  - google-sheets
  - slack
capability:
  exposes:
  - type: mcp
    namespace: accessibility-audit
    port: 8080
    tools:
    - name: run-accessibility-audit
      description: Scan website for accessibility issues, log findings, and generate compliance report.
      inputParameters:
      - name: site_url
        in: body
        type: string
        description: The website URL to audit.
      - name: brand
        in: body
        type: string
        description: The brand being audited.
      steps:
      - name: run-scan
        type: call
        call: axe-api.scan-page
        with:
          url: '{{site_url}}'
      - name: log-issues
        type: call
        call: jira.create-issue
        with:
          project: A11Y
          summary: 'Accessibility issues on {{brand}}: {{run-scan.violation_count}} violations'
      - name: generate-report
        type: call
        call: google-sheets.append-rows
        with:
          spreadsheet_id: a11y_reports
          sheet: '{{brand}}'
          data: '{{run-scan.summary}}'
      - name: notify-engineering
        type: call
        call: slack.post-message
        with:
          channel: '#{{brand}}-engineering'
          text: 'Accessibility audit complete: {{run-scan.violation_count}} issues found.'
  consumes:
  - type: http
    namespace: axe-api
    baseUri: https://axe-scanner.condenast.com/api/v1
    authentication:
      type: bearer
      token: $secrets.axe_api_token
    resources:
    - name: scans
      path: /scan
      operations:
      - name: scan-page
        method: POST
  - type: http
    namespace: jira
    baseUri: https://condenast.atlassian.net/rest/api/3
    authentication:
      type: bearer
      token: $secrets.jira_token
    resources:
    - name: issues
      path: /issue
      operations:
      - name: create-issue
        method: POST
  - type: http
    namespace: google-sheets
    baseUri: https://sheets.googleapis.com/v4
    authentication:
      type: bearer
      token: $secrets.google_sheets_token
    resources:
    - name: spreadsheets
      path: /spreadsheets/{{spreadsheet_id}}/values/{{sheet}}:append
      inputParameters:
      - name: spreadsheet_id
        in: path
      operations:
      - name: append-rows
        method: POST
  - type: http
    namespace: slack
    baseUri: https://slack.com/api
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: messages
      path: /chat.postMessage
      operations:
      - name: post-message
        method: POST

Creates audience segments by pulling subscriber data from Snowflake, enriching with behavioral data from Adobe Analytics, building segments in Salesforce Marketing Cloud, and activating in Google Ads.

naftiko: '0.5'
info:
  label: Audience Segmentation Pipeline
  description: Creates audience segments by pulling subscriber data from Snowflake, enriching with behavioral data from Adobe Analytics, building segments in Salesforce Marketing Cloud, and activating in Google Ads.
  tags:
  - audience
  - segmentation
  - snowflake
  - adobe-analytics
  - salesforce
  - google-ads
capability:
  exposes:
  - type: mcp
    namespace: audience-segmentation
    port: 8080
    tools:
    - name: create-audience-segment
      description: Build and activate audience segments across analytics and advertising platforms.
      inputParameters:
      - name: segment_name
        in: body
        type: string
        description: The audience segment name.
      - name: criteria
        in: body
        type: string
        description: The segmentation criteria query.
      steps:
      - name: pull-subscriber-data
        type: call
        call: snowflake.run-query
        with:
          query: '{{criteria}}'
      - name: enrich-with-behavior
        type: call
        call: adobe-analytics.get-segment-data
        with:
          segment: '{{segment_name}}'
      - name: create-sfmc-segment
        type: call
        call: sfmc.create-data-extension
        with:
          name: '{{segment_name}}'
          data: '{{pull-subscriber-data.results}}'
      - name: activate-google-ads
        type: call
        call: google-ads.create-audience
        with:
          audience_name: '{{segment_name}}'
          members: '{{pull-subscriber-data.results}}'
  consumes:
  - type: http
    namespace: snowflake
    baseUri: https://condenast.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: statements
      path: /statements
      operations:
      - name: run-query
        method: POST
  - type: http
    namespace: adobe-analytics
    baseUri: https://analytics.adobe.io/api/v2.0
    authentication:
      type: bearer
      token: $secrets.adobe_analytics_token
    resources:
    - name: segments
      path: /segments
      operations:
      - name: get-segment-data
        method: GET
  - type: http
    namespace: sfmc
    baseUri: https://rest.marketingcloudapis.com/v1
    authentication:
      type: bearer
      token: $secrets.sfmc_token
    resources:
    - name: data-extensions
      path: /data/v1/customobjects
      operations:
      - name: create-data-extension
        method: POST
  - type: http
    namespace: google-ads
    baseUri: https://googleads.googleapis.com/v14
    authentication:
      type: bearer
      token: $secrets.google_ads_token
    resources:
    - name: audiences
      path: /customers/{{customer_id}}/userLists
      operations:
      - name: create-audience
        method: POST

Retrieves DNS records for a Condé Nast domain from Cloudflare, returning record type, value, TTL, and proxy status.

naftiko: '0.5'
info:
  label: Cloudflare DNS Record Lookup
  description: Retrieves DNS records for a Condé Nast domain from Cloudflare, returning record type, value, TTL, and proxy status.
  tags:
  - infrastructure
  - cloudflare
  - dns
capability:
  exposes:
  - type: mcp
    namespace: dns-management
    port: 8080
    tools:
    - name: get-dns-records
      description: Look up Cloudflare DNS records for a domain. Returns record type, value, TTL, and proxy status.
      inputParameters:
      - name: zone_id
        in: body
        type: string
        description: The Cloudflare zone ID.
      - name: record_name
        in: body
        type: string
        description: The DNS record name to look up.
      call: cloudflare.get-dns-record
      with:
        zone_id: '{{zone_id}}'
        name: '{{record_name}}'
      outputParameters:
      - name: type
        type: string
        mapping: $.result[0].type
      - name: content
        type: string
        mapping: $.result[0].content
      - name: ttl
        type: number
        mapping: $.result[0].ttl
      - name: proxied
        type: boolean
        mapping: $.result[0].proxied
  consumes:
  - type: http
    namespace: cloudflare
    baseUri: https://api.cloudflare.com/client/v4
    authentication:
      type: bearer
      token: $secrets.cloudflare_token
    resources:
    - name: dns-records
      path: /zones/{{zone_id}}/dns_records
      inputParameters:
      - name: zone_id
        in: path
      operations:
      - name: get-dns-record
        method: GET

Retrieves Instagram audience demographics and engagement metrics for a brand account, returning follower count, engagement rate, and top audience demographics.

naftiko: '0.5'
info:
  label: Instagram Audience Insights Lookup
  description: Retrieves Instagram audience demographics and engagement metrics for a brand account, returning follower count, engagement rate, and top audience demographics.
  tags:
  - social-media
  - instagram
  - audience-insights
capability:
  exposes:
  - type: mcp
    namespace: social-insights
    port: 8080
    tools:
    - name: get-instagram-insights
      description: Look up Instagram audience insights. Returns follower count, engagement rate, and demographics.
      inputParameters:
      - name: account_id
        in: body
        type: string
        description: The Instagram business account ID.
      call: instagram.get-insights
      with:
        account_id: '{{account_id}}'
      outputParameters:
      - name: follower_count
        type: number
        mapping: $.data.followers_count
      - name: engagement_rate
        type: number
        mapping: $.data.engagement_rate
  consumes:
  - type: http
    namespace: instagram
    baseUri: https://graph.facebook.com/v18.0
    authentication:
      type: bearer
      token: $secrets.instagram_token
    resources:
    - name: insights
      path: /{{account_id}}/insights
      inputParameters:
      - name: account_id
        in: path
      operations:
      - name: get-insights
        method: GET

Retrieves subscription revenue data from Stripe for a given product, returning MRR and active subscriber count.

naftiko: '0.5'
info:
  label: Stripe Subscription Revenue Lookup
  description: Retrieves subscription revenue data from Stripe for a given product, returning MRR and active subscriber count.
  tags:
  - revenue
  - stripe
  - subscriptions
capability:
  exposes:
  - type: mcp
    namespace: stripe-revenue
    port: 8080
    tools:
    - name: get-subscription-revenue
      description: Look up subscription revenue for a Stripe product.
      inputParameters:
      - name: product_id
        in: body
        type: string
        description: The Stripe product identifier.
      call: stripe.get-subscriptions
      with:
        product_id: '{{product_id}}'
      outputParameters:
      - name: mrr
        type: number
        mapping: $.data.mrr
      - name: active_subscribers
        type: number
        mapping: $.data.active_count
  consumes:
  - type: http
    namespace: stripe
    baseUri: https://api.stripe.com/v1
    authentication:
      type: bearer
      token: $secrets.stripe_secret_key
    resources:
    - name: subscriptions
      path: /subscriptions?product={{product_id}}
      inputParameters:
      - name: product_id
        in: path
      operations:
      - name: get-subscriptions
        method: GET

Triggers a video export from Adobe Premiere Pro, uploads the rendered file to YouTube, updates the video library in Airtable, and notifies the video team via Slack.

naftiko: '0.5'
info:
  label: Adobe Premiere Pro Video Export Pipeline
  description: Triggers a video export from Adobe Premiere Pro, uploads the rendered file to YouTube, updates the video library in Airtable, and notifies the video team via Slack.
  tags:
  - video
  - adobe-premiere-pro
  - youtube
  - airtable
  - slack
capability:
  exposes:
  - type: mcp
    namespace: video-production
    port: 8080
    tools:
    - name: export-and-publish-video
      description: Given a Premiere Pro project ID, export the video, upload to YouTube, and update tracking.
      inputParameters:
      - name: project_id
        in: body
        type: string
        description: The Premiere Pro project identifier.
      - name: title
        in: body
        type: string
        description: The video title.
      - name: brand
        in: body
        type: string
        description: The Condé Nast brand.
      steps:
      - name: export-video
        type: call
        call: premiere-api.export
        with:
          project_id: '{{project_id}}'
          format: h264
          quality: high
      - name: upload-youtube
        type: call
        call: youtube.upload-video
        with:
          title: '{{title}}'
          video_url: '{{export-video.output_url}}'
          channel_id: '{{brand}}_channel'
      - name: update-library
        type: call
        call: airtable.create-record
        with:
          base_id: video_library
          table_name: Videos
          fields:
            title: '{{title}}'
            youtube_id: '{{upload-youtube.video_id}}'
            brand: '{{brand}}'
      - name: notify-team
        type: call
        call: slack.post-message
        with:
          channel: '#{{brand}}-video'
          text: 'Video published: "{{title}}" - https://youtube.com/watch?v={{upload-youtube.video_id}}'
  consumes:
  - type: http
    namespace: premiere-api
    baseUri: https://video.adobe.io/api/v1
    authentication:
      type: bearer
      token: $secrets.adobe_premiere_token
    resources:
    - name: exports
      path: /projects/{{project_id}}/export
      inputParameters:
      - name: project_id
        in: path
      operations:
      - name: export
        method: POST
  - type: http
    namespace: youtube
    baseUri: https://www.googleapis.com/upload/youtube/v3
    authentication:
      type: bearer
      token: $secrets.youtube_upload_token
    resources:
    - name: videos
      path: /videos
      operations:
      - name: upload-video
        method: POST
  - type: http
    namespace: airtable
    baseUri: https://api.airtable.com/v0
    authentication:
      type: bearer
      token: $secrets.airtable_token
    resources:
    - name: records
      path: /{{base_id}}/{{table_name}}
      inputParameters:
      - name: base_id
        in: path
      - name: table_name
        in: path
      operations:
      - name: create-record
        method: POST
  - type: http
    namespace: slack
    baseUri: https://slack.com/api
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: messages
      path: /chat.postMessage
      operations:
      - name: post-message
        method: POST

Returns the total number of design components in a Figma file for a brand design system.

naftiko: '0.5'
info:
  label: Figma Design Component Count
  description: Returns the total number of design components in a Figma file for a brand design system.
  tags:
  - design
  - figma
  - design-systems
capability:
  exposes:
  - type: mcp
    namespace: figma-components
    port: 8080
    tools:
    - name: get-component-count
      description: Count the design components in a Figma file.
      inputParameters:
      - name: file_key
        in: body
        type: string
        description: The Figma file key.
      call: figma.get-file-components
      with:
        file_key: '{{file_key}}'
      outputParameters:
      - name: component_count
        type: number
        mapping: $.meta.components_count
  consumes:
  - type: http
    namespace: figma
    baseUri: https://api.figma.com/v1
    authentication:
      type: bearer
      token: $secrets.figma_token
    resources:
    - name: files
      path: /files/{{file_key}}/components
      inputParameters:
      - name: file_key
        in: path
      operations:
      - name: get-file-components
        method: GET

Screens job applicants by pulling candidate data from Greenhouse ATS, running background checks, scheduling interviews via Calendly, and notifying the hiring manager via Slack.

naftiko: '0.5'
info:
  label: Talent Acquisition Screening Pipeline
  description: Screens job applicants by pulling candidate data from Greenhouse ATS, running background checks, scheduling interviews via Calendly, and notifying the hiring manager via Slack.
  tags:
  - hr
  - talent-acquisition
  - greenhouse
  - slack
capability:
  exposes:
  - type: mcp
    namespace: talent-screening
    port: 8080
    tools:
    - name: screen-candidate
      description: Pull candidate data, run checks, schedule interviews, and notify hiring manager.
      inputParameters:
      - name: candidate_id
        in: body
        type: string
        description: The Greenhouse candidate identifier.
      - name: hiring_manager_slack
        in: body
        type: string
        description: The hiring manager Slack user ID.
      steps:
      - name: get-candidate
        type: call
        call: greenhouse.get-candidate
        with:
          candidate_id: '{{candidate_id}}'
      - name: schedule-interview
        type: call
        call: calendly.create-event
        with:
          event_type: screening_interview
          invitee_email: '{{get-candidate.email}}'
      - name: notify-hiring-manager
        type: call
        call: slack.post-message
        with:
          channel: '{{hiring_manager_slack}}'
          text: 'Candidate {{get-candidate.name}} screened for {{get-candidate.position}}. Interview scheduled: {{schedule-interview.event_url}}'
  consumes:
  - type: http
    namespace: greenhouse
    baseUri: https://harvest.greenhouse.io/v1
    authentication:
      type: bearer
      token: $secrets.greenhouse_api_key
    resources:
    - name: candidates
      path: /candidates/{{candidate_id}}
      inputParameters:
      - name: candidate_id
        in: path
      operations:
      - name: get-candidate
        method: GET
  - type: http
    namespace: calendly
    baseUri: https://api.calendly.com
    authentication:
      type: bearer
      token: $secrets.calendly_token
    resources:
    - name: events
      path: /scheduled_events
      operations:
      - name: create-event
        method: POST
  - type: http
    namespace: slack
    baseUri: https://slack.com/api
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: messages
      path: /chat.postMessage
      operations:
      - name: post-message
        method: POST

Retrieves a Salesforce contact by ID, returning name, email, account name, and title.

naftiko: '0.5'
info:
  label: Salesforce Contact Lookup
  description: Retrieves a Salesforce contact by ID, returning name, email, account name, and title.
  tags:
  - crm
  - salesforce
capability:
  exposes:
  - type: mcp
    namespace: crm
    port: 8080
    tools:
    - name: get-contact
      description: Look up a Salesforce contact by ID. Returns name, email, account name, and title.
      inputParameters:
      - name: contact_id
        in: body
        type: string
        description: The Salesforce contact ID.
      call: salesforce.get-contact
      with:
        contact_id: '{{contact_id}}'
      outputParameters:
      - name: name
        type: string
        mapping: $.Name
      - name: email
        type: string
        mapping: $.Email
      - name: account_name
        type: string
        mapping: $.Account.Name
      - name: title
        type: string
        mapping: $.Title
  consumes:
  - type: http
    namespace: salesforce
    baseUri: https://condenast.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: contacts
      path: /sobjects/Contact/{{contact_id}}
      inputParameters:
      - name: contact_id
        in: path
      operations:
      - name: get-contact
        method: GET

Retrieves website application performance from New Relic, returning Apdex score, throughput, and error rate.

naftiko: '0.5'
info:
  label: New Relic Website Performance Check
  description: Retrieves website application performance from New Relic, returning Apdex score, throughput, and error rate.
  tags:
  - monitoring
  - new-relic
  - apm
capability:
  exposes:
  - type: mcp
    namespace: apm
    port: 8080
    tools:
    - name: get-newrelic-performance
      description: Look up New Relic application performance. Returns Apdex score, throughput, and error rate.
      inputParameters:
      - name: app_id
        in: body
        type: string
        description: The New Relic application ID.
      call: newrelic.get-app-summary
      with:
        app_id: '{{app_id}}'
      outputParameters:
      - name: apdex_score
        type: number
        mapping: $.application_summary.apdex_score
      - name: throughput
        type: number
        mapping: $.application_summary.throughput
      - name: error_rate
        type: number
        mapping: $.application_summary.error_rate
  consumes:
  - type: http
    namespace: newrelic
    baseUri: https://api.newrelic.com/v2
    authentication:
      type: apiKey
      key: $secrets.newrelic_api_key
    resources:
    - name: applications
      path: /applications/{{app_id}}.json
      inputParameters:
      - name: app_id
        in: path
      operations:
      - name: get-app-summary
        method: GET

Retrieves readership metrics for an article published on Apple News.

naftiko: '0.5'
info:
  label: Apple News Article Metrics
  description: Retrieves readership metrics for an article published on Apple News.
  tags:
  - publishing
  - apple-news
  - analytics
capability:
  exposes:
  - type: mcp
    namespace: apple-news-metrics
    port: 8080
    tools:
    - name: get-article-metrics
      description: Look up Apple News article performance metrics.
      inputParameters:
      - name: article_id
        in: body
        type: string
        description: The Apple News article identifier.
      call: apple-news.get-article-metrics
      with:
        article_id: '{{article_id}}'
      outputParameters:
      - name: unique_visitors
        type: number
        mapping: $.data.uniqueVisitors
      - name: shares
        type: number
        mapping: $.data.shares
  consumes:
  - type: http
    namespace: apple-news
    baseUri: https://news-api.apple.com
    authentication:
      type: bearer
      token: $secrets.apple_news_token
    resources:
    - name: articles
      path: /articles/{{article_id}}/metrics
      inputParameters:
      - name: article_id
        in: path
      operations:
      - name: get-article-metrics
        method: GET

When a photo shoot is completed, imports raw assets from cloud storage, processes them in Adobe Lightroom, uploads finals to AEM, and updates the editorial calendar in Airtable.

naftiko: '0.5'
info:
  label: Photo Shoot Asset Delivery Pipeline
  description: When a photo shoot is completed, imports raw assets from cloud storage, processes them in Adobe Lightroom, uploads finals to AEM, and updates the editorial calendar in Airtable.
  tags:
  - photography
  - adobe
  - airtable
  - content-management
capability:
  exposes:
  - type: mcp
    namespace: photo-asset-delivery
    port: 8080
    tools:
    - name: deliver-photo-assets
      description: Import, process, and deliver photo shoot assets to AEM and update editorial calendar.
      inputParameters:
      - name: shoot_id
        in: body
        type: string
        description: The photo shoot identifier.
      - name: brand
        in: body
        type: string
        description: The brand the shoot is for.
      steps:
      - name: fetch-raw-assets
        type: call
        call: cloud-storage.list-assets
        with:
          folder: shoots/{{shoot_id}}
      - name: process-images
        type: call
        call: lightroom.batch-edit
        with:
          preset: editorial-standard
          source_folder: shoots/{{shoot_id}}
      - name: upload-to-aem
        type: call
        call: aem.upload-assets
        with:
          destination: /content/dam/{{brand}}/{{shoot_id}}
      - name: update-calendar
        type: call
        call: airtable.update-record
        with:
          base_id: editorial_calendar
          table_name: '{{brand}}_shoots'
          fields_status: Assets Delivered
  consumes:
  - type: http
    namespace: cloud-storage
    baseUri: https://storage.googleapis.com/storage/v1
    authentication:
      type: bearer
      token: $secrets.gcs_token
    resources:
    - name: objects
      path: /b/condenast-shoots/o
      operations:
      - name: list-assets
        method: GET
  - type: http
    namespace: lightroom
    baseUri: https://lr.adobe.io/v2
    authentication:
      type: bearer
      token: $secrets.adobe_lightroom_token
    resources:
    - name: edits
      path: /catalogs/{{catalog_id}}/assets
      operations:
      - name: batch-edit
        method: POST
  - type: http
    namespace: aem
    baseUri: https://aem.condenast.com/api/assets
    authentication:
      type: bearer
      token: $secrets.aem_token
    resources:
    - name: assets
      path: /upload
      operations:
      - name: upload-assets
        method: POST
  - type: http
    namespace: airtable
    baseUri: https://api.airtable.com/v0
    authentication:
      type: bearer
      token: $secrets.airtable_token
    resources:
    - name: records
      path: /{{base_id}}/{{table_name}}
      inputParameters:
      - name: base_id
        in: path
      - name: table_name
        in: path
      operations:
      - name: update-record
        method: PATCH

Retrieves Google Ads campaign metrics for programmatic advertising, returning impressions, clicks, CTR, and average CPC.

naftiko: '0.5'
info:
  label: Google Ads Campaign Lookup
  description: Retrieves Google Ads campaign metrics for programmatic advertising, returning impressions, clicks, CTR, and average CPC.
  tags:
  - advertising
  - google-ads
  - programmatic
capability:
  exposes:
  - type: mcp
    namespace: programmatic-ads
    port: 8080
    tools:
    - name: get-google-ads-performance
      description: Look up Google Ads campaign performance. Returns impressions, clicks, CTR, and average CPC.
      inputParameters:
      - name: customer_id
        in: body
        type: string
        description: The Google Ads customer ID.
      - name: campaign_id
        in: body
        type: string
        description: The Google Ads campaign ID.
      call: google-ads.get-campaign-metrics
      with:
        customer_id: '{{customer_id}}'
        campaign_id: '{{campaign_id}}'
      outputParameters:
      - name: impressions
        type: number
        mapping: $.results[0].metrics.impressions
      - name: clicks
        type: number
        mapping: $.results[0].metrics.clicks
      - name: ctr
        type: number
        mapping: $.results[0].metrics.ctr
      - name: avg_cpc
        type: number
        mapping: $.results[0].metrics.averageCpc
  consumes:
  - type: http
    namespace: google-ads
    baseUri: https://googleads.googleapis.com/v14
    authentication:
      type: bearer
      token: $secrets.google_ads_token
    resources:
    - name: campaigns
      path: /customers/{{customer_id}}/googleAds:searchStream
      inputParameters:
      - name: customer_id
        in: path
      operations:
      - name: get-campaign-metrics
        method: POST

Retrieves a Canva design template by ID, returning template name, dimensions, page count, and thumbnail URL.

naftiko: '0.5'
info:
  label: Canva Template Lookup
  description: Retrieves a Canva design template by ID, returning template name, dimensions, page count, and thumbnail URL.
  tags:
  - design
  - canva
  - creative
capability:
  exposes:
  - type: mcp
    namespace: design-templates
    port: 8080
    tools:
    - name: get-canva-template
      description: Look up a Canva design template by ID. Returns name, dimensions, page count, and thumbnail.
      inputParameters:
      - name: design_id
        in: body
        type: string
        description: The Canva design ID.
      call: canva.get-design
      with:
        design_id: '{{design_id}}'
      outputParameters:
      - name: title
        type: string
        mapping: $.design.title
      - name: width
        type: number
        mapping: $.design.width
      - name: height
        type: number
        mapping: $.design.height
      - name: thumbnail_url
        type: string
        mapping: $.design.thumbnail.url
  consumes:
  - type: http
    namespace: canva
    baseUri: https://api.canva.com/rest/v1
    authentication:
      type: bearer
      token: $secrets.canva_token
    resources:
    - name: designs
      path: /designs/{{design_id}}
      inputParameters:
      - name: design_id
        in: path
      operations:
      - name: get-design
        method: GET

Synchronizes digital advertising inventory from Google Ad Manager to Salesforce, updates pricing in the rate card system, and notifies the sales team via Microsoft Teams.

naftiko: '0.5'
info:
  label: Digital Ad Inventory Sync Pipeline
  description: Synchronizes digital advertising inventory from Google Ad Manager to Salesforce, updates pricing in the rate card system, and notifies the sales team via Microsoft Teams.
  tags:
  - advertising
  - google-ad-manager
  - salesforce
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: ad-inventory-sync
    port: 8080
    tools:
    - name: sync-ad-inventory
      description: Sync digital ad inventory from Ad Manager to CRM and notify sales.
      inputParameters:
      - name: order_id
        in: body
        type: string
        description: The Ad Manager order identifier.
      - name: sales_team_channel
        in: body
        type: string
        description: The Teams channel for notifications.
      steps:
      - name: get-ad-inventory
        type: call
        call: gam.get-order-details
        with:
          order_id: '{{order_id}}'
      - name: update-salesforce
        type: call
        call: salesforce.update-opportunity
        with:
          opportunity_id: '{{get-ad-inventory.opportunity_id}}'
          inventory_status: '{{get-ad-inventory.status}}'
      - name: notify-sales
        type: call
        call: teams.send-message
        with:
          channel: '{{sales_team_channel}}'
          text: 'Ad inventory updated for order {{order_id}}: {{get-ad-inventory.status}}'
  consumes:
  - type: http
    namespace: gam
    baseUri: https://admanager.googleapis.com/v202308
    authentication:
      type: bearer
      token: $secrets.gam_token
    resources:
    - name: orders
      path: /orders/{{order_id}}
      inputParameters:
      - name: order_id
        in: path
      operations:
      - name: get-order-details
        method: GET
  - type: http
    namespace: salesforce
    baseUri: https://condenast.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: opportunities
      path: /sobjects/Opportunity/{{opportunity_id}}
      inputParameters:
      - name: opportunity_id
        in: path
      operations:
      - name: update-opportunity
        method: PATCH
  - type: http
    namespace: teams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.microsoft_graph_token
    resources:
    - name: messages
      path: /teams/{{team_id}}/channels/{{channel_id}}/messages
      operations:
      - name: send-message
        method: POST

Retrieves the configuration of an Adobe Launch property, returning extension count, rule count, and publishing status.

naftiko: '0.5'
info:
  label: Adobe Launch Tag Configuration Lookup
  description: Retrieves the configuration of an Adobe Launch property, returning extension count, rule count, and publishing status.
  tags:
  - analytics
  - adobe-launch
  - tag-management
capability:
  exposes:
  - type: mcp
    namespace: tag-ops
    port: 8080
    tools:
    - name: get-launch-property
      description: Look up an Adobe Launch property configuration. Returns extension count, rule count, and publish status.
      inputParameters:
      - name: property_id
        in: body
        type: string
        description: The Adobe Launch property ID.
      call: adobe-launch.get-property
      with:
        property_id: '{{property_id}}'
      outputParameters:
      - name: name
        type: string
        mapping: $.data.attributes.name
      - name: extension_count
        type: number
        mapping: $.data.relationships.extensions.meta.count
      - name: rule_count
        type: number
        mapping: $.data.relationships.rules.meta.count
  consumes:
  - type: http
    namespace: adobe-launch
    baseUri: https://reactor.adobe.io
    authentication:
      type: bearer
      token: $secrets.adobe_launch_token
    inputParameters:
    - name: x-api-key
      in: header
      value: $secrets.adobe_api_key
    resources:
    - name: properties
      path: /properties/{{property_id}}
      inputParameters:
      - name: property_id
        in: path
      operations:
      - name: get-property
        method: GET

Monitors GitHub Actions deployments, validates build status, runs post-deployment health checks via Datadog, and notifies engineering teams via Slack with deployment details.

naftiko: '0.5'
info:
  label: CI/CD Deployment Notification Pipeline
  description: Monitors GitHub Actions deployments, validates build status, runs post-deployment health checks via Datadog, and notifies engineering teams via Slack with deployment details.
  tags:
  - devops
  - github
  - datadog
  - slack
capability:
  exposes:
  - type: mcp
    namespace: deployment-notification
    port: 8080
    tools:
    - name: notify-deployment
      description: Check deployment status, run health checks, and notify engineering teams.
      inputParameters:
      - name: repo
        in: body
        type: string
        description: The GitHub repository name.
      - name: run_id
        in: body
        type: string
        description: The GitHub Actions workflow run ID.
      steps:
      - name: get-workflow-status
        type: call
        call: github.get-workflow-run
        with:
          repo: '{{repo}}'
          run_id: '{{run_id}}'
      - name: run-health-check
        type: call
        call: datadog.check-monitor
        with:
          monitor_tag: deployment:{{repo}}
      - name: notify-engineering
        type: call
        call: slack.post-message
        with:
          channel: '#deployments'
          text: 'Deployment of {{repo}} (run {{run_id}}): {{get-workflow-status.conclusion}}. Health: {{run-health-check.status}}.'
  consumes:
  - type: http
    namespace: github
    baseUri: https://api.github.com
    authentication:
      type: bearer
      token: $secrets.github_token
    resources:
    - name: workflow-runs
      path: /repos/condenast/{{repo}}/actions/runs/{{run_id}}
      inputParameters:
      - name: repo
        in: path
      - name: run_id
        in: path
      operations:
      - name: get-workflow-run
        method: GET
  - type: http
    namespace: datadog
    baseUri: https://api.datadoghq.com/api/v1
    authentication:
      type: bearer
      token: $secrets.datadog_api_key
    resources:
    - name: monitors
      path: /monitor/search
      operations:
      - name: check-monitor
        method: GET
  - type: http
    namespace: slack
    baseUri: https://slack.com/api
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: messages
      path: /chat.postMessage
      operations:
      - name: post-message
        method: POST

Takes an uploaded photo, processes it through Adobe Photoshop API for color correction and resizing, stores the result in Google Drive, and notifies the photo editor via Slack.

naftiko: '0.5'
info:
  label: Adobe Photoshop Image Processing Pipeline
  description: Takes an uploaded photo, processes it through Adobe Photoshop API for color correction and resizing, stores the result in Google Drive, and notifies the photo editor via Slack.
  tags:
  - creative
  - adobe-photoshop
  - google-drive
  - slack
  - image-processing
capability:
  exposes:
  - type: mcp
    namespace: creative-ops
    port: 8080
    tools:
    - name: process-editorial-image
      description: Given a source image URL, apply Photoshop processing, store result in Google Drive, and notify the editor.
      inputParameters:
      - name: source_url
        in: body
        type: string
        description: The source image URL.
      - name: preset
        in: body
        type: string
        description: The processing preset (e.g., cover, feature, thumbnail).
      - name: brand
        in: body
        type: string
        description: The brand the image is for.
      steps:
      - name: process-image
        type: call
        call: photoshop-api.apply-preset
        with:
          input_url: '{{source_url}}'
          preset: '{{preset}}'
      - name: upload-result
        type: call
        call: gdrive.upload-file
        with:
          name: processed_{{preset}}_{{brand}}
          content_url: '{{process-image.output_url}}'
          parent_id: '{{brand}}_images_folder'
      - name: notify-editor
        type: call
        call: slack.post-message
        with:
          channel: '#{{brand}}-photo'
          text: 'Image processed ({{preset}}): {{upload-result.webViewLink}}'
  consumes:
  - type: http
    namespace: photoshop-api
    baseUri: https://image.adobe.io/sensei
    authentication:
      type: bearer
      token: $secrets.adobe_photoshop_token
    inputParameters:
    - name: x-api-key
      in: header
      value: $secrets.adobe_api_key
    resources:
    - name: presets
      path: /cutout
      operations:
      - name: apply-preset
        method: POST
  - type: http
    namespace: gdrive
    baseUri: https://www.googleapis.com/upload/drive/v3
    authentication:
      type: bearer
      token: $secrets.google_drive_token
    resources:
    - name: files
      path: /files
      operations:
      - name: upload-file
        method: POST
  - type: http
    namespace: slack
    baseUri: https://slack.com/api
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: messages
      path: /chat.postMessage
      operations:
      - name: post-message
        method: POST

Retrieves an employee's current compensation details from Workday, returning base pay, bonus target, and total compensation.

naftiko: '0.5'
info:
  label: Workday Compensation Lookup
  description: Retrieves an employee's current compensation details from Workday, returning base pay, bonus target, and total compensation.
  tags:
  - hr
  - compensation
  - workday
capability:
  exposes:
  - type: mcp
    namespace: hr-compensation
    port: 8080
    tools:
    - name: get-employee-compensation
      description: Look up an employee's compensation in Workday. Returns base pay, bonus target, and total compensation.
      inputParameters:
      - name: employee_id
        in: body
        type: string
        description: The Workday employee ID.
      call: workday.get-compensation
      with:
        worker_id: '{{employee_id}}'
      outputParameters:
      - name: base_pay
        type: number
        mapping: $.compensationPlans[0].amount
      - name: bonus_target
        type: number
        mapping: $.compensationPlans[1].targetAmount
      - name: total_compensation
        type: number
        mapping: $.totalBasePayAnnualized
  consumes:
  - type: http
    namespace: workday
    baseUri: https://wd2-impl-services1.workday.com/ccx/api/v1
    authentication:
      type: bearer
      token: $secrets.workday_token
    resources:
    - name: compensation
      path: /workers/{{worker_id}}/compensation
      inputParameters:
      - name: worker_id
        in: path
      operations:
      - name: get-compensation
        method: GET

Routes sponsored content through the approval process by submitting to legal review in Jira, collecting brand safety scores, obtaining client sign-off via DocuSign, and publishing the approved content.

naftiko: '0.5'
info:
  label: Sponsored Content Approval Pipeline
  description: Routes sponsored content through the approval process by submitting to legal review in Jira, collecting brand safety scores, obtaining client sign-off via DocuSign, and publishing the approved content.
  tags:
  - sponsored-content
  - legal
  - jira
  - docusign
  - publishing
capability:
  exposes:
  - type: mcp
    namespace: sponsored-content-approval
    port: 8080
    tools:
    - name: approve-sponsored-content
      description: Route sponsored content through legal, brand safety, client approval, and publication.
      inputParameters:
      - name: content_id
        in: body
        type: string
        description: The sponsored content identifier.
      - name: client_email
        in: body
        type: string
        description: The client approver email.
      - name: brand
        in: body
        type: string
        description: The publishing brand.
      steps:
      - name: submit-legal-review
        type: call
        call: jira.create-issue
        with:
          project: LEGAL
          summary: 'Sponsored content review: {{content_id}}'
          priority: High
      - name: check-brand-safety
        type: call
        call: brand-safety.analyze-content
        with:
          content_id: '{{content_id}}'
      - name: request-client-signoff
        type: call
        call: docusign.create-envelope
        with:
          template_id: sponsored_content_approval
          signer_email: '{{client_email}}'
      - name: schedule-publication
        type: call
        call: cms.update-article-status
        with:
          article_id: '{{content_id}}'
          status: approved_for_publish
  consumes:
  - type: http
    namespace: jira
    baseUri: https://condenast.atlassian.net/rest/api/3
    authentication:
      type: bearer
      token: $secrets.jira_token
    resources:
    - name: issues
      path: /issue
      operations:
      - name: create-issue
        method: POST
  - type: http
    namespace: brand-safety
    baseUri: https://brand-safety.condenast.com/api/v1
    authentication:
      type: bearer
      token: $secrets.brand_safety_token
    resources:
    - name: analysis
      path: /analyze
      operations:
      - name: analyze-content
        method: POST
  - type: http
    namespace: docusign
    baseUri: https://demo.docusign.net/restapi/v2.1
    authentication:
      type: bearer
      token: $secrets.docusign_token
    resources:
    - name: envelopes
      path: /accounts/{{account_id}}/envelopes
      operations:
      - name: create-envelope
        method: POST
  - type: http
    namespace: cms
    baseUri: https://cms.condenast.com/api/v2
    authentication:
      type: bearer
      token: $secrets.cms_token
    resources:
    - name: articles
      path: /articles/{{content_id}}
      inputParameters:
      - name: content_id
        in: path
      operations:
      - name: update-article-status
        method: PATCH

Manages vendor contract renewals by checking expiration dates in SAP Ariba, generating renewal documents in DocuSign, updating records in Salesforce, and alerting procurement via Slack.

naftiko: '0.5'
info:
  label: Vendor Contract Renewal Pipeline
  description: Manages vendor contract renewals by checking expiration dates in SAP Ariba, generating renewal documents in DocuSign, updating records in Salesforce, and alerting procurement via Slack.
  tags:
  - procurement
  - sap-ariba
  - docusign
  - salesforce
  - slack
capability:
  exposes:
  - type: mcp
    namespace: vendor-renewal
    port: 8080
    tools:
    - name: process-vendor-renewal
      description: Check vendor contract expiry, generate renewal docs, and update CRM.
      inputParameters:
      - name: vendor_id
        in: body
        type: string
        description: The vendor identifier.
      - name: contract_id
        in: body
        type: string
        description: The contract identifier.
      steps:
      - name: get-contract-details
        type: call
        call: ariba.get-contract
        with:
          contract_id: '{{contract_id}}'
      - name: create-renewal-doc
        type: call
        call: docusign.create-envelope
        with:
          template_id: vendor_renewal
          vendor_id: '{{vendor_id}}'
      - name: update-salesforce
        type: call
        call: salesforce.update-account
        with:
          account_id: '{{vendor_id}}'
          renewal_status: In Progress
      - name: alert-procurement
        type: call
        call: slack.post-message
        with:
          channel: '#procurement'
          text: Vendor {{vendor_id}} contract {{contract_id}} renewal initiated.
  consumes:
  - type: http
    namespace: ariba
    baseUri: https://openapi.ariba.com/api/v1
    authentication:
      type: bearer
      token: $secrets.ariba_token
    resources:
    - name: contracts
      path: /contracts/{{contract_id}}
      inputParameters:
      - name: contract_id
        in: path
      operations:
      - name: get-contract
        method: GET
  - type: http
    namespace: docusign
    baseUri: https://demo.docusign.net/restapi/v2.1
    authentication:
      type: bearer
      token: $secrets.docusign_token
    resources:
    - name: envelopes
      path: /accounts/{{account_id}}/envelopes
      operations:
      - name: create-envelope
        method: POST
  - type: http
    namespace: salesforce
    baseUri: https://condenast.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: accounts
      path: /sobjects/Account/{{account_id}}
      inputParameters:
      - name: account_id
        in: path
      operations:
      - name: update-account
        method: PATCH
  - type: http
    namespace: slack
    baseUri: https://slack.com/api
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: messages
      path: /chat.postMessage
      operations:
      - name: post-message
        method: POST

Responds to website incidents by checking status in Datadog, creating a PagerDuty incident, posting updates to Slack, and creating a Jira post-mortem ticket.

naftiko: '0.5'
info:
  label: Website Incident Response Pipeline
  description: Responds to website incidents by checking status in Datadog, creating a PagerDuty incident, posting updates to Slack, and creating a Jira post-mortem ticket.
  tags:
  - incident-response
  - datadog
  - pagerduty
  - slack
  - jira
capability:
  exposes:
  - type: mcp
    namespace: website-incident
    port: 8080
    tools:
    - name: handle-website-incident
      description: Detect, escalate, communicate, and track website incidents.
      inputParameters:
      - name: alert_id
        in: body
        type: string
        description: The Datadog alert identifier.
      - name: severity
        in: body
        type: string
        description: The incident severity level (P1-P4).
      steps:
      - name: get-alert-details
        type: call
        call: datadog.get-alert
        with:
          alert_id: '{{alert_id}}'
      - name: create-pagerduty-incident
        type: call
        call: pagerduty.create-incident
        with:
          title: 'Website incident: {{get-alert-details.title}}'
          urgency: '{{severity}}'
      - name: notify-slack
        type: call
        call: slack.post-message
        with:
          channel: '#incident-response'
          text: 'INCIDENT {{severity}}: {{get-alert-details.title}}. PagerDuty: {{create-pagerduty-incident.incident_url}}'
      - name: create-postmortem-ticket
        type: call
        call: jira.create-issue
        with:
          project: SRE
          summary: 'Post-mortem: {{get-alert-details.title}}'
          priority: '{{severity}}'
  consumes:
  - type: http
    namespace: datadog
    baseUri: https://api.datadoghq.com/api/v1
    authentication:
      type: bearer
      token: $secrets.datadog_api_key
    resources:
    - name: alerts
      path: /monitor/{{alert_id}}
      inputParameters:
      - name: alert_id
        in: path
      operations:
      - name: get-alert
        method: GET
  - type: http
    namespace: pagerduty
    baseUri: https://api.pagerduty.com
    authentication:
      type: bearer
      token: $secrets.pagerduty_token
    resources:
    - name: incidents
      path: /incidents
      operations:
      - name: create-incident
        method: POST
  - type: http
    namespace: slack
    baseUri: https://slack.com/api
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: messages
      path: /chat.postMessage
      operations:
      - name: post-message
        method: POST
  - type: http
    namespace: jira
    baseUri: https://condenast.atlassian.net/rest/api/3
    authentication:
      type: bearer
      token: $secrets.jira_token
    resources:
    - name: issues
      path: /issue
      operations:
      - name: create-issue
        method: POST

Retrieves contact details from HubSpot CRM for advertising and partnership relationship management.

naftiko: '0.5'
info:
  label: HubSpot Contact Lookup
  description: Retrieves contact details from HubSpot CRM for advertising and partnership relationship management.
  tags:
  - crm
  - hubspot
  - advertising
capability:
  exposes:
  - type: mcp
    namespace: hubspot-crm
    port: 8080
    tools:
    - name: get-contact
      description: Look up a HubSpot contact by email address.
      inputParameters:
      - name: email
        in: body
        type: string
        description: The contact email address.
      call: hubspot.get-contact-by-email
      with:
        email: '{{email}}'
      outputParameters:
      - name: contact_id
        type: string
        mapping: $.vid
      - name: company
        type: string
        mapping: $.properties.company.value
      - name: lifecycle_stage
        type: string
        mapping: $.properties.lifecyclestage.value
  consumes:
  - type: http
    namespace: hubspot
    baseUri: https://api.hubapi.com
    authentication:
      type: bearer
      token: $secrets.hubspot_api_key
    resources:
    - name: contacts
      path: /contacts/v1/contact/email/{{email}}/profile
      inputParameters:
      - name: email
        in: path
      operations:
      - name: get-contact-by-email
        method: GET

Automates expense report approval by fetching from SAP Concur, validating against budget in Workday Financials, routing for manager approval via Slack, and recording the decision.

naftiko: '0.5'
info:
  label: SAP Concur Expense Approval Pipeline
  description: Automates expense report approval by fetching from SAP Concur, validating against budget in Workday Financials, routing for manager approval via Slack, and recording the decision.
  tags:
  - finance
  - sap-concur
  - workday
  - slack
capability:
  exposes:
  - type: mcp
    namespace: expense-approval
    port: 8080
    tools:
    - name: approve-expense-report
      description: Validate and route expense reports through budget check and manager approval.
      inputParameters:
      - name: report_id
        in: body
        type: string
        description: The SAP Concur expense report ID.
      - name: approver_slack_id
        in: body
        type: string
        description: The Slack user ID of the approver.
      steps:
      - name: get-expense-report
        type: call
        call: concur.get-report
        with:
          report_id: '{{report_id}}'
      - name: check-budget
        type: call
        call: workday.get-budget-remaining
        with:
          cost_center: '{{get-expense-report.cost_center}}'
      - name: request-approval
        type: call
        call: slack.post-message
        with:
          channel: '{{approver_slack_id}}'
          text: 'Expense report {{report_id}} for ${{get-expense-report.total}} needs approval. Budget remaining: ${{check-budget.remaining}}.'
  consumes:
  - type: http
    namespace: concur
    baseUri: https://us.api.concursolutions.com/api/v3.0
    authentication:
      type: bearer
      token: $secrets.concur_token
    resources:
    - name: reports
      path: /expense/reports/{{report_id}}
      inputParameters:
      - name: report_id
        in: path
      operations:
      - name: get-report
        method: GET
  - type: http
    namespace: workday
    baseUri: https://wd5-services.condenast.com/ccx/api/v1
    authentication:
      type: bearer
      token: $secrets.workday_token
    resources:
    - name: budgets
      path: /budgets
      operations:
      - name: get-budget-remaining
        method: GET
  - type: http
    namespace: slack
    baseUri: https://slack.com/api
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: messages
      path: /chat.postMessage
      operations:
      - name: post-message
        method: POST

Updates a GTM container with new tracking tags, creates a workspace version, publishes the container, and notifies the analytics team via Slack.

naftiko: '0.5'
info:
  label: Google Tag Manager Container Update Pipeline
  description: Updates a GTM container with new tracking tags, creates a workspace version, publishes the container, and notifies the analytics team via Slack.
  tags:
  - analytics
  - google-tag-manager
  - tracking
  - slack
capability:
  exposes:
  - type: mcp
    namespace: tag-management
    port: 8080
    tools:
    - name: publish-gtm-container
      description: Given a GTM account and container, create a new version and publish, then notify the analytics team.
      inputParameters:
      - name: account_id
        in: body
        type: string
        description: The GTM account ID.
      - name: container_id
        in: body
        type: string
        description: The GTM container ID.
      - name: workspace_id
        in: body
        type: string
        description: The GTM workspace ID.
      steps:
      - name: create-version
        type: call
        call: gtm.create-version
        with:
          account_id: '{{account_id}}'
          container_id: '{{container_id}}'
          workspace_id: '{{workspace_id}}'
      - name: publish-version
        type: call
        call: gtm.publish-version
        with:
          account_id: '{{account_id}}'
          container_id: '{{container_id}}'
          version_id: '{{create-version.containerVersionId}}'
      - name: notify-analytics
        type: call
        call: slack.post-message
        with:
          channel: '#analytics-ops'
          text: 'GTM container {{container_id}} published. Version: {{create-version.containerVersionId}}.'
  consumes:
  - type: http
    namespace: gtm
    baseUri: https://www.googleapis.com/tagmanager/v2
    authentication:
      type: bearer
      token: $secrets.gtm_token
    resources:
    - name: versions
      path: /accounts/{{account_id}}/containers/{{container_id}}/workspaces/{{workspace_id}}:create_version
      inputParameters:
      - name: account_id
        in: path
      - name: container_id
        in: path
      - name: workspace_id
        in: path
      operations:
      - name: create-version
        method: POST
    - name: publish
      path: /accounts/{{account_id}}/containers/{{container_id}}/versions/{{version_id}}:publish
      inputParameters:
      - name: account_id
        in: path
      - name: container_id
        in: path
      - name: version_id
        in: path
      operations:
      - name: publish-version
        method: POST
  - type: http
    namespace: slack
    baseUri: https://slack.com/api
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: messages
      path: /chat.postMessage
      operations:
      - name: post-message
        method: POST

Executes a SQL query against the Snowflake content data warehouse and returns the result set and execution time.

naftiko: '0.5'
info:
  label: Snowflake Content Warehouse Query
  description: Executes a SQL query against the Snowflake content data warehouse and returns the result set and execution time.
  tags:
  - data-warehouse
  - snowflake
  - content-analytics
capability:
  exposes:
  - type: mcp
    namespace: content-warehouse
    port: 8080
    tools:
    - name: run-content-query
      description: Execute a SQL query on the Snowflake content warehouse. Returns row count and execution time.
      inputParameters:
      - name: sql
        in: body
        type: string
        description: The SQL query.
      call: snowflake.execute-query
      with:
        statement: '{{sql}}'
      outputParameters:
      - name: rows_returned
        type: number
        mapping: $.resultSetMetaData.numRows
  consumes:
  - type: http
    namespace: snowflake
    baseUri: https://condenast.us-east-1.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: statements
      path: /statements
      operations:
      - name: execute-query
        method: POST

Retrieves the latest GitHub Actions workflow run status for a given repository, returning conclusion, duration, and commit SHA.

naftiko: '0.5'
info:
  label: GitHub Actions Build Status
  description: Retrieves the latest GitHub Actions workflow run status for a given repository, returning conclusion, duration, and commit SHA.
  tags:
  - ci-cd
  - github-actions
  - engineering
capability:
  exposes:
  - type: mcp
    namespace: ci-cd
    port: 8080
    tools:
    - name: get-build-status
      description: Look up the latest GitHub Actions workflow run. Returns conclusion, duration, and commit SHA.
      inputParameters:
      - name: repo
        in: body
        type: string
        description: The repository in owner/repo format.
      - name: workflow_id
        in: body
        type: string
        description: The workflow file name or ID.
      call: github.get-workflow-run
      with:
        repo: '{{repo}}'
        workflow_id: '{{workflow_id}}'
      outputParameters:
      - name: conclusion
        type: string
        mapping: $.workflow_runs[0].conclusion
      - name: duration_seconds
        type: number
        mapping: $.workflow_runs[0].run_duration
      - name: head_sha
        type: string
        mapping: $.workflow_runs[0].head_sha
  consumes:
  - type: http
    namespace: github
    baseUri: https://api.github.com
    authentication:
      type: bearer
      token: $secrets.github_token
    resources:
    - name: workflow-runs
      path: /repos/{{repo}}/actions/workflows/{{workflow_id}}/runs
      inputParameters:
      - name: repo
        in: path
      - name: workflow_id
        in: path
      operations:
      - name: get-workflow-run
        method: GET

Manages podcast episode release by uploading audio to Megaphone, creating show notes in WordPress, distributing to Apple Podcasts and Spotify, and promoting on social media.

naftiko: '0.5'
info:
  label: Podcast Episode Release Pipeline
  description: Manages podcast episode release by uploading audio to Megaphone, creating show notes in WordPress, distributing to Apple Podcasts and Spotify, and promoting on social media.
  tags:
  - podcast
  - audio
  - wordpress
  - social-media
capability:
  exposes:
  - type: mcp
    namespace: podcast-release
    port: 8080
    tools:
    - name: release-podcast-episode
      description: Upload, distribute, and promote a podcast episode across platforms.
      inputParameters:
      - name: episode_id
        in: body
        type: string
        description: The podcast episode identifier.
      - name: show_name
        in: body
        type: string
        description: The podcast show name.
      - name: release_date
        in: body
        type: string
        description: The release date in YYYY-MM-DD.
      steps:
      - name: upload-audio
        type: call
        call: megaphone.upload-episode
        with:
          episode_id: '{{episode_id}}'
          show: '{{show_name}}'
      - name: create-show-notes
        type: call
        call: wordpress.create-post
        with:
          title: '{{show_name}} - Episode {{episode_id}}'
          status: publish
          categories: podcasts
      - name: distribute-apple
        type: call
        call: apple-podcasts.submit-episode
        with:
          episode_id: '{{episode_id}}'
      - name: promote-social
        type: call
        call: sprout-social.create-post
        with:
          text: New episode of {{show_name}} is live! Listen now.
          scheduled_time: '{{release_date}}'
  consumes:
  - type: http
    namespace: megaphone
    baseUri: https://cms.megaphone.fm/api/v1
    authentication:
      type: bearer
      token: $secrets.megaphone_token
    resources:
    - name: episodes
      path: /podcasts/{{podcast_id}}/episodes
      operations:
      - name: upload-episode
        method: POST
  - type: http
    namespace: wordpress
    baseUri: https://podcasts.condenast.com/wp-json/wp/v2
    authentication:
      type: bearer
      token: $secrets.wordpress_token
    resources:
    - name: posts
      path: /posts
      operations:
      - name: create-post
        method: POST
  - type: http
    namespace: apple-podcasts
    baseUri: https://api.podcastsconnect.apple.com/v1
    authentication:
      type: bearer
      token: $secrets.apple_podcasts_token
    resources:
    - name: episodes
      path: /episodes
      operations:
      - name: submit-episode
        method: POST
  - type: http
    namespace: sprout-social
    baseUri: https://api.sproutsocial.com/v1
    authentication:
      type: bearer
      token: $secrets.sprout_social_token
    resources:
    - name: posts
      path: /{{customer_id}}/messages
      operations:
      - name: create-post
        method: POST

Pulls top-performing pages from Google Search Console, cross-references with content freshness from the CMS, identifies stale content, and creates Jira tasks for content updates.

naftiko: '0.5'
info:
  label: SEO Content Audit Pipeline
  description: Pulls top-performing pages from Google Search Console, cross-references with content freshness from the CMS, identifies stale content, and creates Jira tasks for content updates.
  tags:
  - seo
  - google
  - cms
  - jira
  - content-strategy
capability:
  exposes:
  - type: mcp
    namespace: seo-ops
    port: 8080
    tools:
    - name: audit-seo-content
      description: Given a brand's Search Console property, identify stale high-traffic content and create Jira tasks for updates.
      inputParameters:
      - name: site_url
        in: body
        type: string
        description: The Google Search Console site URL.
      - name: brand
        in: body
        type: string
        description: The Condé Nast brand.
      - name: stale_days
        in: body
        type: number
        description: Number of days before content is considered stale.
      steps:
      - name: get-top-pages
        type: call
        call: search-console.get-analytics
        with:
          site_url: '{{site_url}}'
          dimensions: page
          row_limit: 50
      - name: check-freshness
        type: call
        call: cms.check-content-freshness
        with:
          urls: '{{get-top-pages.rows}}'
          stale_days: '{{stale_days}}'
      - name: create-tasks
        type: call
        call: jira.create-issue
        with:
          project: CONTENT
          summary: 'SEO content refresh: {{check-freshness.stale_count}} stale articles for {{brand}}'
          description: 'Top stale pages: {{check-freshness.stale_urls}}. These pages have not been updated in {{stale_days}} days but receive significant search traffic.'
          issue_type: Task
  consumes:
  - type: http
    namespace: search-console
    baseUri: https://www.googleapis.com/webmasters/v3
    authentication:
      type: bearer
      token: $secrets.search_console_token
    resources:
    - name: analytics
      path: /sites/{{site_url}}/searchAnalytics/query
      inputParameters:
      - name: site_url
        in: path
      operations:
      - name: get-analytics
        method: POST
  - type: http
    namespace: cms
    baseUri: https://cms.condenast.com/api/v2
    authentication:
      type: bearer
      token: $secrets.cms_token
    resources:
    - name: freshness
      path: /content/freshness
      operations:
      - name: check-content-freshness
        method: POST
  - type: http
    namespace: jira
    baseUri: https://condenast.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - name: issues
      path: /issue
      operations:
      - name: create-issue
        method: POST

Launches a new e-commerce product by creating the listing in Shopify, creating promotional content in WordPress, sending launch email via Mailchimp, and announcing via Instagram.

naftiko: '0.5'
info:
  label: E-Commerce Product Launch Pipeline
  description: Launches a new e-commerce product by creating the listing in Shopify, creating promotional content in WordPress, sending launch email via Mailchimp, and announcing via Instagram.
  tags:
  - e-commerce
  - shopify
  - wordpress
  - marketing
capability:
  exposes:
  - type: mcp
    namespace: product-launch
    port: 8080
    tools:
    - name: launch-ecommerce-product
      description: Create product listing, publish content, and promote across channels.
      inputParameters:
      - name: product_name
        in: body
        type: string
        description: The product name.
      - name: product_price
        in: body
        type: string
        description: The product price.
      - name: brand
        in: body
        type: string
        description: The brand selling the product.
      steps:
      - name: create-shopify-product
        type: call
        call: shopify.create-product
        with:
          title: '{{product_name}}'
          price: '{{product_price}}'
          vendor: '{{brand}}'
      - name: create-promo-post
        type: call
        call: wordpress.create-post
        with:
          title: Introducing {{product_name}}
          status: publish
          categories: shop
      - name: send-launch-email
        type: call
        call: mailchimp.send-campaign
        with:
          list_id: shoppers
          subject: 'New: {{product_name}} from {{brand}}'
      - name: post-to-instagram
        type: call
        call: instagram.create-post
        with:
          caption: 'Now available: {{product_name}}. Shop link in bio.'
          brand: '{{brand}}'
  consumes:
  - type: http
    namespace: shopify
    baseUri: https://shop.condenast.com/admin/api/2024-01
    authentication:
      type: bearer
      token: $secrets.shopify_access_token
    resources:
    - name: products
      path: /products.json
      operations:
      - name: create-product
        method: POST
  - type: http
    namespace: wordpress
    baseUri: https://{{brand}}.condenast.com/wp-json/wp/v2
    authentication:
      type: bearer
      token: $secrets.wordpress_token
    resources:
    - name: posts
      path: /posts
      operations:
      - name: create-post
        method: POST
  - type: http
    namespace: mailchimp
    baseUri: https://us1.api.mailchimp.com/3.0
    authentication:
      type: bearer
      token: $secrets.mailchimp_api_key
    resources:
    - name: campaigns
      path: /campaigns
      operations:
      - name: send-campaign
        method: POST
  - type: http
    namespace: instagram
    baseUri: https://graph.facebook.com/v18.0
    authentication:
      type: bearer
      token: $secrets.instagram_token
    resources:
    - name: media
      path: /{{ig_user_id}}/media
      operations:
      - name: create-post
        method: POST

When a new photo or video asset is licensed, records the rights in the DAM system, sets usage restrictions, updates the rights database in Airtable, and notifies the legal team via Slack.

naftiko: '0.5'
info:
  label: Content Rights Management Pipeline
  description: When a new photo or video asset is licensed, records the rights in the DAM system, sets usage restrictions, updates the rights database in Airtable, and notifies the legal team via Slack.
  tags:
  - rights-management
  - dam
  - legal
  - airtable
  - slack
capability:
  exposes:
  - type: mcp
    namespace: rights-management
    port: 8080
    tools:
    - name: register-content-rights
      description: Given an asset and license details, register rights, set restrictions, update tracking, and notify legal.
      inputParameters:
      - name: asset_id
        in: body
        type: string
        description: The DAM asset identifier.
      - name: license_type
        in: body
        type: string
        description: The license type (exclusive, non-exclusive, royalty-free).
      - name: usage_territory
        in: body
        type: string
        description: The licensed usage territory.
      - name: expiry_date
        in: body
        type: string
        description: The license expiry date.
      steps:
      - name: register-rights
        type: call
        call: dam.register-license
        with:
          asset_id: '{{asset_id}}'
          license_type: '{{license_type}}'
          territory: '{{usage_territory}}'
          expiry: '{{expiry_date}}'
      - name: update-tracking
        type: call
        call: airtable.create-record
        with:
          base_id: rights_management
          table_name: Licenses
          fields:
            asset_id: '{{asset_id}}'
            license_type: '{{license_type}}'
            territory: '{{usage_territory}}'
            expiry: '{{expiry_date}}'
      - name: notify-legal
        type: call
        call: slack.post-message
        with:
          channel: '#legal-rights'
          text: 'New license registered: Asset {{asset_id}}. Type: {{license_type}}. Territory: {{usage_territory}}. Expires: {{expiry_date}}.'
  consumes:
  - type: http
    namespace: dam
    baseUri: https://dam.internal.condenast.com/api/v1
    authentication:
      type: bearer
      token: $secrets.dam_token
    resources:
    - name: licenses
      path: /assets/{{asset_id}}/licenses
      inputParameters:
      - name: asset_id
        in: path
      operations:
      - name: register-license
        method: POST
  - type: http
    namespace: airtable
    baseUri: https://api.airtable.com/v0
    authentication:
      type: bearer
      token: $secrets.airtable_token
    resources:
    - name: records
      path: /{{base_id}}/{{table_name}}
      inputParameters:
      - name: base_id
        in: path
      - name: table_name
        in: path
      operations:
      - name: create-record
        method: POST
  - type: http
    namespace: slack
    baseUri: https://slack.com/api
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: messages
      path: /chat.postMessage
      operations:
      - name: post-message
        method: POST

Runs a New Relic Synthetics availability check for a brand website and returns uptime percentage and response time.

naftiko: '0.5'
info:
  label: New Relic Synthetics Site Check
  description: Runs a New Relic Synthetics availability check for a brand website and returns uptime percentage and response time.
  tags:
  - monitoring
  - new-relic
  - website-performance
capability:
  exposes:
  - type: mcp
    namespace: synthetics-check
    port: 8080
    tools:
    - name: check-site-availability
      description: Check website availability via New Relic Synthetics.
      inputParameters:
      - name: monitor_id
        in: body
        type: string
        description: The New Relic Synthetics monitor identifier.
      call: new-relic.get-monitor-results
      with:
        monitor_id: '{{monitor_id}}'
      outputParameters:
      - name: uptime_pct
        type: number
        mapping: $.data.uptime_percentage
      - name: avg_response_ms
        type: number
        mapping: $.data.avg_response_time
  consumes:
  - type: http
    namespace: new-relic
    baseUri: https://synthetics.newrelic.com/synthetics/api/v3
    authentication:
      type: bearer
      token: $secrets.new_relic_api_key
    resources:
    - name: monitors
      path: /monitors/{{monitor_id}}/results
      inputParameters:
      - name: monitor_id
        in: path
      operations:
      - name: get-monitor-results
        method: GET

Retrieves the current editorial sprint status from Jira, returning completed stories, remaining story points, and sprint burndown status.

naftiko: '0.5'
info:
  label: Jira Editorial Sprint Status
  description: Retrieves the current editorial sprint status from Jira, returning completed stories, remaining story points, and sprint burndown status.
  tags:
  - project-management
  - jira
  - editorial
capability:
  exposes:
  - type: mcp
    namespace: editorial-pm
    port: 8080
    tools:
    - name: get-editorial-sprint
      description: Look up the current editorial sprint in Jira. Returns completed stories, remaining points, and burndown status.
      inputParameters:
      - name: board_id
        in: body
        type: string
        description: The Jira board ID for the editorial team.
      call: jira.get-sprint
      with:
        board_id: '{{board_id}}'
      outputParameters:
      - name: completed_stories
        type: number
        mapping: $.sprint.completedIssues
      - name: remaining_points
        type: number
        mapping: $.sprint.remainingPoints
      - name: burndown_status
        type: string
        mapping: $.sprint.burndownStatus
  consumes:
  - type: http
    namespace: jira
    baseUri: https://condenast.atlassian.net/rest/agile/1.0
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - name: sprints
      path: /board/{{board_id}}/sprint
      inputParameters:
      - name: board_id
        in: path
      operations:
      - name: get-sprint
        method: GET

When an article is approved in the CMS, publishes to WordPress, triggers SEO indexing via Google Search Console, updates the social media calendar in Airtable, and notifies the editorial team via Slack.

naftiko: '0.5'
info:
  label: Editorial Content Publishing Pipeline
  description: When an article is approved in the CMS, publishes to WordPress, triggers SEO indexing via Google Search Console, updates the social media calendar in Airtable, and notifies the editorial team via Slack.
  tags:
  - editorial
  - publishing
  - wordpress
  - google
  - slack
  - airtable
capability:
  exposes:
  - type: mcp
    namespace: editorial-publishing
    port: 8080
    tools:
    - name: publish-article
      description: Given a CMS article ID, publish to WordPress, trigger SEO indexing, update social calendar, and notify editorial.
      inputParameters:
      - name: article_id
        in: body
        type: string
        description: The CMS article identifier.
      - name: brand
        in: body
        type: string
        description: The Condé Nast brand (e.g., Vogue, GQ, Wired, Vanity Fair).
      - name: publish_date
        in: body
        type: string
        description: The target publish date in YYYY-MM-DD format.
      steps:
      - name: get-article
        type: call
        call: cms.get-article
        with:
          article_id: '{{article_id}}'
      - name: publish-wp
        type: call
        call: wordpress.create-post
        with:
          title: '{{get-article.title}}'
          content: '{{get-article.body}}'
          status: publish
          categories: '{{get-article.categories}}'
      - name: request-indexing
        type: call
        call: google-search.request-indexing
        with:
          url: '{{publish-wp.link}}'
      - name: update-social-calendar
        type: call
        call: airtable.create-record
        with:
          base_id: social_calendar
          table_name: '{{brand}}_posts'
          fields:
            title: '{{get-article.title}}'
            url: '{{publish-wp.link}}'
            publish_date: '{{publish_date}}'
      - name: notify-editorial
        type: call
        call: slack.post-message
        with:
          channel: '#{{brand}}-editorial'
          text: 'Published: "{{get-article.title}}" - {{publish-wp.link}}. Social calendar updated.'
  consumes:
  - type: http
    namespace: cms
    baseUri: https://cms.condenast.com/api/v2
    authentication:
      type: bearer
      token: $secrets.cms_token
    resources:
    - name: articles
      path: /articles/{{article_id}}
      inputParameters:
      - name: article_id
        in: path
      operations:
      - name: get-article
        method: GET
  - type: http
    namespace: wordpress
    baseUri: https://{{brand}}.condenast.com/wp-json/wp/v2
    authentication:
      type: bearer
      token: $secrets.wordpress_token
    resources:
    - name: posts
      path: /posts
      operations:
      - name: create-post
        method: POST
  - type: http
    namespace: google-search
    baseUri: https://indexing.googleapis.com/v3
    authentication:
      type: bearer
      token: $secrets.google_indexing_token
    resources:
    - name: url-notifications
      path: /urlNotifications:publish
      operations:
      - name: request-indexing
        method: POST
  - type: http
    namespace: airtable
    baseUri: https://api.airtable.com/v0
    authentication:
      type: bearer
      token: $secrets.airtable_token
    resources:
    - name: records
      path: /{{base_id}}/{{table_name}}
      inputParameters:
      - name: base_id
        in: path
      - name: table_name
        in: path
      operations:
      - name: create-record
        method: POST
  - type: http
    namespace: slack
    baseUri: https://slack.com/api
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: messages
      path: /chat.postMessage
      operations:
      - name: post-message
        method: POST

When a time-off request is submitted in Workday, checks team coverage in Google Calendar, approves or flags the request, and notifies the manager via Slack.

naftiko: '0.5'
info:
  label: Workday Time-Off Request Pipeline
  description: When a time-off request is submitted in Workday, checks team coverage in Google Calendar, approves or flags the request, and notifies the manager via Slack.
  tags:
  - hr
  - time-off
  - workday
  - google-workspace
  - slack
capability:
  exposes:
  - type: mcp
    namespace: hr-time-off
    port: 8080
    tools:
    - name: process-time-off-request
      description: Given a Workday time-off request, check team coverage and notify the manager.
      inputParameters:
      - name: request_id
        in: body
        type: string
        description: The Workday time-off request ID.
      - name: employee_id
        in: body
        type: string
        description: The Workday employee ID.
      steps:
      - name: get-request
        type: call
        call: workday.get-time-off-request
        with:
          request_id: '{{request_id}}'
      - name: get-employee
        type: call
        call: workday.get-worker
        with:
          worker_id: '{{employee_id}}'
      - name: check-calendar
        type: call
        call: gcalendar.get-events
        with:
          calendar_id: '{{get-employee.team_calendar}}'
          time_min: '{{get-request.start_date}}'
          time_max: '{{get-request.end_date}}'
      - name: notify-manager
        type: call
        call: slack.post-message
        with:
          channel: '{{get-employee.manager_slack_id}}'
          text: 'Time-off request from {{get-employee.full_name}}: {{get-request.start_date}} to {{get-request.end_date}}. Team members already off: {{check-calendar.conflict_count}}.'
  consumes:
  - type: http
    namespace: workday
    baseUri: https://wd2-impl-services1.workday.com/ccx/api/v1
    authentication:
      type: bearer
      token: $secrets.workday_token
    resources:
    - name: time-off
      path: /workers/{{worker_id}}/timeOffRequests/{{request_id}}
      inputParameters:
      - name: worker_id
        in: path
      - name: request_id
        in: path
      operations:
      - name: get-time-off-request
        method: GET
    - name: workers
      path: /workers/{{worker_id}}
      inputParameters:
      - name: worker_id
        in: path
      operations:
      - name: get-worker
        method: GET
  - type: http
    namespace: gcalendar
    baseUri: https://www.googleapis.com/calendar/v3
    authentication:
      type: bearer
      token: $secrets.google_calendar_token
    resources:
    - name: events
      path: /calendars/{{calendar_id}}/events
      inputParameters:
      - name: calendar_id
        in: path
      operations:
      - name: get-events
        method: GET
  - type: http
    namespace: slack
    baseUri: https://slack.com/api
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: messages
      path: /chat.postMessage
      operations:
      - name: post-message
        method: POST

Creates a marketing journey in Salesforce Marketing Cloud for a subscriber segment, configures email and push touchpoints, and logs the journey in Airtable for tracking.

naftiko: '0.5'
info:
  label: Salesforce Marketing Cloud Journey Pipeline
  description: Creates a marketing journey in Salesforce Marketing Cloud for a subscriber segment, configures email and push touchpoints, and logs the journey in Airtable for tracking.
  tags:
  - marketing
  - salesforce-marketing-cloud
  - email-marketing
  - airtable
capability:
  exposes:
  - type: mcp
    namespace: marketing-automation
    port: 8080
    tools:
    - name: create-marketing-journey
      description: Given a segment and journey configuration, create a Salesforce Marketing Cloud journey and log for tracking.
      inputParameters:
      - name: journey_name
        in: body
        type: string
        description: The marketing journey name.
      - name: segment_id
        in: body
        type: string
        description: The audience segment ID.
      - name: brand
        in: body
        type: string
        description: The Condé Nast brand.
      steps:
      - name: create-journey
        type: call
        call: sfmc.create-journey
        with:
          name: '{{journey_name}}'
          segment_id: '{{segment_id}}'
      - name: activate-journey
        type: call
        call: sfmc.activate-journey
        with:
          journey_id: '{{create-journey.id}}'
      - name: log-journey
        type: call
        call: airtable.create-record
        with:
          base_id: marketing_tracking
          table_name: Journeys
          fields:
            name: '{{journey_name}}'
            brand: '{{brand}}'
            journey_id: '{{create-journey.id}}'
            status: active
  consumes:
  - type: http
    namespace: sfmc
    baseUri: https://condenast.rest.marketingcloudapis.com/interaction/v1
    authentication:
      type: bearer
      token: $secrets.sfmc_token
    resources:
    - name: journeys
      path: /interactions
      operations:
      - name: create-journey
        method: POST
    - name: activation
      path: /interactions/{{journey_id}}/start
      inputParameters:
      - name: journey_id
        in: path
      operations:
      - name: activate-journey
        method: POST
  - type: http
    namespace: airtable
    baseUri: https://api.airtable.com/v0
    authentication:
      type: bearer
      token: $secrets.airtable_token
    resources:
    - name: records
      path: /{{base_id}}/{{table_name}}
      inputParameters:
      - name: base_id
        in: path
      - name: table_name
        in: path
      operations:
      - name: create-record
        method: POST

On new hire creation in Workday, opens a ServiceNow onboarding ticket, provisions a Google Drive folder, and sends a Slack welcome message to the new employee.

naftiko: '0.5'
info:
  label: Employee Onboarding Orchestrator
  description: On new hire creation in Workday, opens a ServiceNow onboarding ticket, provisions a Google Drive folder, and sends a Slack welcome message to the new employee.
  tags:
  - hr
  - onboarding
  - workday
  - servicenow
  - google-drive
  - slack
capability:
  exposes:
  - type: mcp
    namespace: hr-onboarding
    port: 8080
    tools:
    - name: trigger-onboarding
      description: Given a Workday employee ID, orchestrate onboarding across ServiceNow, Google Drive, and Slack.
      inputParameters:
      - name: workday_employee_id
        in: body
        type: string
        description: The Workday worker ID for the new hire.
      - name: start_date
        in: body
        type: string
        description: The employee start date in YYYY-MM-DD format.
      - name: department
        in: body
        type: string
        description: The department the new hire is joining.
      steps:
      - name: get-employee
        type: call
        call: workday.get-worker
        with:
          worker_id: '{{workday_employee_id}}'
      - name: open-ticket
        type: call
        call: servicenow.create-incident
        with:
          short_description: 'New hire onboarding: {{get-employee.full_name}}'
          category: hr_onboarding
          assigned_group: IT_Onboarding
      - name: provision-folder
        type: call
        call: gdrive.create-folder
        with:
          name: '{{get-employee.full_name}}_{{start_date}}'
          parent_id: onboarding_root_folder
      - name: send-welcome
        type: call
        call: slack.post-message
        with:
          channel: '#new-hires'
          text: Welcome to Condé Nast, {{get-employee.first_name}}! Your IT ticket is {{open-ticket.number}} and your docs folder is ready at {{provision-folder.webViewLink}}.
  consumes:
  - type: http
    namespace: workday
    baseUri: https://wd2-impl-services1.workday.com/ccx/api/v1
    authentication:
      type: bearer
      token: $secrets.workday_token
    resources:
    - name: workers
      path: /workers/{{worker_id}}
      inputParameters:
      - name: worker_id
        in: path
      operations:
      - name: get-worker
        method: GET
  - type: http
    namespace: servicenow
    baseUri: https://condenast.service-now.com/api/now
    authentication:
      type: basic
      username: $secrets.servicenow_user
      password: $secrets.servicenow_password
    resources:
    - name: incidents
      path: /table/incident
      operations:
      - name: create-incident
        method: POST
  - type: http
    namespace: gdrive
    baseUri: https://www.googleapis.com/drive/v3
    authentication:
      type: bearer
      token: $secrets.google_drive_token
    resources:
    - name: files
      path: /files
      operations:
      - name: create-folder
        method: POST
  - type: http
    namespace: slack
    baseUri: https://slack.com/api
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: messages
      path: /chat.postMessage
      operations:
      - name: post-message
        method: POST

Retrieves Slack channel usage analytics, returning message count, active members, and files shared for a given channel.

naftiko: '0.5'
info:
  label: Slack Channel Analytics
  description: Retrieves Slack channel usage analytics, returning message count, active members, and files shared for a given channel.
  tags:
  - collaboration
  - slack
  - analytics
capability:
  exposes:
  - type: mcp
    namespace: collaboration-analytics
    port: 8080
    tools:
    - name: get-channel-stats
      description: Look up Slack channel usage statistics. Returns message count, active members, and files shared.
      inputParameters:
      - name: channel_id
        in: body
        type: string
        description: The Slack channel ID.
      call: slack.get-channel-info
      with:
        channel: '{{channel_id}}'
      outputParameters:
      - name: message_count
        type: number
        mapping: $.channel.num_messages
      - name: member_count
        type: number
        mapping: $.channel.num_members
  consumes:
  - type: http
    namespace: slack
    baseUri: https://slack.com/api
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: channels
      path: /conversations.info
      operations:
      - name: get-channel-info
        method: GET

When a freelance contributor is contracted, creates a profile in Workday, provisions Google Workspace access, shares an NDA via Adobe Acrobat Sign, and notifies the editor via Slack.

naftiko: '0.5'
info:
  label: Freelancer Onboarding Pipeline
  description: When a freelance contributor is contracted, creates a profile in Workday, provisions Google Workspace access, shares an NDA via Adobe Acrobat Sign, and notifies the editor via Slack.
  tags:
  - hr
  - freelancer
  - workday
  - google-workspace
  - adobe-acrobat
  - slack
capability:
  exposes:
  - type: mcp
    namespace: freelancer-ops
    port: 8080
    tools:
    - name: onboard-freelancer
      description: Given freelancer details, create a Workday profile, provision Google Workspace, send NDA, and notify the editor.
      inputParameters:
      - name: full_name
        in: body
        type: string
        description: The freelancer's full name.
      - name: email
        in: body
        type: string
        description: The freelancer's email address.
      - name: editor_slack_id
        in: body
        type: string
        description: The assigning editor's Slack user ID.
      - name: brand
        in: body
        type: string
        description: The brand the freelancer will contribute to.
      steps:
      - name: create-worker
        type: call
        call: workday.create-contingent-worker
        with:
          full_name: '{{full_name}}'
          email: '{{email}}'
          worker_type: freelancer
      - name: provision-workspace
        type: call
        call: google-admin.create-user
        with:
          email: '{{email}}'
          org_unit: /Freelancers/{{brand}}
      - name: send-nda
        type: call
        call: adobe-sign.send-agreement
        with:
          recipient_email: '{{email}}'
          template_id: freelancer_nda
      - name: notify-editor
        type: call
        call: slack.post-message
        with:
          channel: '{{editor_slack_id}}'
          text: Freelancer {{full_name}} onboarded for {{brand}}. Workspace provisioned. NDA sent ({{send-nda.agreement_id}}).
  consumes:
  - type: http
    namespace: workday
    baseUri: https://wd2-impl-services1.workday.com/ccx/api/v1
    authentication:
      type: bearer
      token: $secrets.workday_token
    resources:
    - name: contingent-workers
      path: /contingentWorkers
      operations:
      - name: create-contingent-worker
        method: POST
  - type: http
    namespace: google-admin
    baseUri: https://admin.googleapis.com/admin/directory/v1
    authentication:
      type: bearer
      token: $secrets.google_admin_token
    resources:
    - name: users
      path: /users
      operations:
      - name: create-user
        method: POST
  - type: http
    namespace: adobe-sign
    baseUri: https://api.na1.adobesign.com/api/rest/v6
    authentication:
      type: bearer
      token: $secrets.adobe_sign_token
    resources:
    - name: agreements
      path: /agreements
      operations:
      - name: send-agreement
        method: POST
  - type: http
    namespace: slack
    baseUri: https://slack.com/api
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: messages
      path: /chat.postMessage
      operations:
      - name: post-message
        method: POST

When a new advertising deal is created in Salesforce, pulls advertiser details, creates a campaign setup task in Jira, provisions ad tags via Google Ad Manager, and notifies sales via Slack.

naftiko: '0.5'
info:
  label: Salesforce Advertising Deal Pipeline
  description: When a new advertising deal is created in Salesforce, pulls advertiser details, creates a campaign setup task in Jira, provisions ad tags via Google Ad Manager, and notifies sales via Slack.
  tags:
  - advertising
  - salesforce
  - jira
  - google-ads
  - slack
capability:
  exposes:
  - type: mcp
    namespace: ad-ops
    port: 8080
    tools:
    - name: setup-ad-deal
      description: Given a Salesforce opportunity ID, set up the advertising campaign across Jira, ad server, and notify sales.
      inputParameters:
      - name: opportunity_id
        in: body
        type: string
        description: The Salesforce opportunity ID for the ad deal.
      steps:
      - name: get-deal
        type: call
        call: salesforce.get-opportunity
        with:
          opportunity_id: '{{opportunity_id}}'
      - name: create-jira-task
        type: call
        call: jira.create-issue
        with:
          project: ADOPS
          summary: 'Campaign setup: {{get-deal.Name}}'
          description: 'Advertiser: {{get-deal.Account.Name}}. Budget: {{get-deal.Amount}}. Start: {{get-deal.CloseDate}}.'
          issue_type: Task
      - name: setup-ad-tags
        type: call
        call: google-ads.create-campaign
        with:
          name: '{{get-deal.Name}}'
          budget: '{{get-deal.Amount}}'
      - name: notify-sales
        type: call
        call: slack.post-message
        with:
          channel: '#ad-sales'
          text: 'New ad deal setup: {{get-deal.Name}} (${{get-deal.Amount}}). Jira: {{create-jira-task.key}}. Ad tags provisioned.'
  consumes:
  - type: http
    namespace: salesforce
    baseUri: https://condenast.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: opportunities
      path: /sobjects/Opportunity/{{opportunity_id}}
      inputParameters:
      - name: opportunity_id
        in: path
      operations:
      - name: get-opportunity
        method: GET
  - type: http
    namespace: jira
    baseUri: https://condenast.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - name: issues
      path: /issue
      operations:
      - name: create-issue
        method: POST
  - type: http
    namespace: google-ads
    baseUri: https://googleads.googleapis.com/v14
    authentication:
      type: bearer
      token: $secrets.google_ads_token
    resources:
    - name: campaigns
      path: /customers/{{customer_id}}/campaigns
      operations:
      - name: create-campaign
        method: POST
  - type: http
    namespace: slack
    baseUri: https://slack.com/api
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: messages
      path: /chat.postMessage
      operations:
      - name: post-message
        method: POST

Checks the publication status of a content entry in Contentful CMS.

naftiko: '0.5'
info:
  label: Contentful Entry Status
  description: Checks the publication status of a content entry in Contentful CMS.
  tags:
  - content-management
  - contentful
  - publishing
capability:
  exposes:
  - type: mcp
    namespace: contentful-cms
    port: 8080
    tools:
    - name: get-entry-status
      description: Look up a Contentful entry status by entry ID.
      inputParameters:
      - name: space_id
        in: body
        type: string
        description: The Contentful space identifier.
      - name: entry_id
        in: body
        type: string
        description: The content entry identifier.
      call: contentful.get-entry
      with:
        space_id: '{{space_id}}'
        entry_id: '{{entry_id}}'
      outputParameters:
      - name: status
        type: string
        mapping: $.sys.publishedVersion
      - name: updated_at
        type: string
        mapping: $.sys.updatedAt
  consumes:
  - type: http
    namespace: contentful
    baseUri: https://cdn.contentful.com
    authentication:
      type: bearer
      token: $secrets.contentful_access_token
    resources:
    - name: entries
      path: /spaces/{{space_id}}/entries/{{entry_id}}
      inputParameters:
      - name: space_id
        in: path
      - name: entry_id
        in: path
      operations:
      - name: get-entry
        method: GET

Checks the current publication status of a WordPress post for a specified brand site.

naftiko: '0.5'
info:
  label: WordPress Post Status Check
  description: Checks the current publication status of a WordPress post for a specified brand site.
  tags:
  - publishing
  - wordpress
  - content-management
capability:
  exposes:
  - type: mcp
    namespace: wp-status
    port: 8080
    tools:
    - name: get-post-status
      description: Look up the status of a WordPress post by post ID.
      inputParameters:
      - name: brand
        in: body
        type: string
        description: The brand slug (e.g., vogue, gq, wired).
      - name: post_id
        in: body
        type: string
        description: The WordPress post ID.
      call: wordpress.get-post
      with:
        post_id: '{{post_id}}'
      outputParameters:
      - name: status
        type: string
        mapping: $.status
      - name: title
        type: string
        mapping: $.title.rendered
      - name: modified
        type: string
        mapping: $.modified
  consumes:
  - type: http
    namespace: wordpress
    baseUri: https://{{brand}}.condenast.com/wp-json/wp/v2
    authentication:
      type: bearer
      token: $secrets.wordpress_token
    resources:
    - name: posts
      path: /posts/{{post_id}}
      inputParameters:
      - name: post_id
        in: path
      operations:
      - name: get-post
        method: GET

Retrieves the status of a content recommendation ML model in Databricks MLflow, returning version, stage, and last transition date.

naftiko: '0.5'
info:
  label: Databricks Content Recommendation Model
  description: Retrieves the status of a content recommendation ML model in Databricks MLflow, returning version, stage, and last transition date.
  tags:
  - machine-learning
  - databricks
  - content-recommendations
capability:
  exposes:
  - type: mcp
    namespace: ml-ops
    port: 8080
    tools:
    - name: get-recommendation-model
      description: Look up a content recommendation model in Databricks. Returns version, stage, and last transition.
      inputParameters:
      - name: model_name
        in: body
        type: string
        description: The registered model name.
      call: databricks.get-model-version
      with:
        model_name: '{{model_name}}'
      outputParameters:
      - name: version
        type: string
        mapping: $.model_version.version
      - name: stage
        type: string
        mapping: $.model_version.current_stage
  consumes:
  - type: http
    namespace: databricks
    baseUri: https://condenast.cloud.databricks.com/api/2.0/mlflow
    authentication:
      type: bearer
      token: $secrets.databricks_token
    resources:
    - name: model-versions
      path: /registered-models/get-latest-versions
      operations:
      - name: get-model-version
        method: POST

Checks the indexing status of a URL in Google Search Console to verify article visibility.

naftiko: '0.5'
info:
  label: Google Search Console Indexing Status
  description: Checks the indexing status of a URL in Google Search Console to verify article visibility.
  tags:
  - seo
  - google-search-console
  - content-performance
capability:
  exposes:
  - type: mcp
    namespace: gsc-index
    port: 8080
    tools:
    - name: get-indexing-status
      description: Check if a URL is indexed in Google Search Console.
      inputParameters:
      - name: site_url
        in: body
        type: string
        description: The site URL registered in Search Console.
      - name: page_url
        in: body
        type: string
        description: The page URL to check indexing for.
      call: gsc.get-url-inspection
      with:
        site_url: '{{site_url}}'
        inspection_url: '{{page_url}}'
      outputParameters:
      - name: coverage_state
        type: string
        mapping: $.inspectionResult.indexStatusResult.coverageState
      - name: last_crawl_time
        type: string
        mapping: $.inspectionResult.indexStatusResult.lastCrawlTime
  consumes:
  - type: http
    namespace: gsc
    baseUri: https://searchconsole.googleapis.com/v1
    authentication:
      type: bearer
      token: $secrets.google_search_console_token
    resources:
    - name: url-inspection
      path: /urlInspection/index:inspect
      operations:
      - name: get-url-inspection
        method: POST

Coordinates fashion week coverage by assigning photographers in Airtable, creating Slack war-room channels, setting up live blogs in WordPress, and scheduling Instagram Stories.

naftiko: '0.5'
info:
  label: Fashion Week Coverage Orchestrator
  description: Coordinates fashion week coverage by assigning photographers in Airtable, creating Slack war-room channels, setting up live blogs in WordPress, and scheduling Instagram Stories.
  tags:
  - editorial
  - fashion
  - airtable
  - slack
  - wordpress
  - instagram
capability:
  exposes:
  - type: mcp
    namespace: fashion-week-coverage
    port: 8080
    tools:
    - name: setup-fashion-week
      description: Set up full coverage infrastructure for a fashion week event.
      inputParameters:
      - name: event_name
        in: body
        type: string
        description: The fashion week event name.
      - name: brand
        in: body
        type: string
        description: The covering brand.
      - name: start_date
        in: body
        type: string
        description: Event start date in YYYY-MM-DD.
      steps:
      - name: create-assignment-board
        type: call
        call: airtable.create-record
        with:
          base_id: fashion_events
          table_name: assignments
          event: '{{event_name}}'
      - name: create-war-room
        type: call
        call: slack.create-channel
        with:
          name: fw-{{brand}}-{{event_name}}
          topic: 'Fashion Week Coverage: {{event_name}}'
      - name: setup-live-blog
        type: call
        call: wordpress.create-post
        with:
          title: '{{event_name}} Live Coverage'
          status: draft
          categories: fashion-week
      - name: schedule-ig-stories
        type: call
        call: instagram.create-story-draft
        with:
          brand: '{{brand}}'
          event: '{{event_name}}'
          scheduled_date: '{{start_date}}'
  consumes:
  - type: http
    namespace: airtable
    baseUri: https://api.airtable.com/v0
    authentication:
      type: bearer
      token: $secrets.airtable_token
    resources:
    - name: records
      path: /{{base_id}}/{{table_name}}
      inputParameters:
      - name: base_id
        in: path
      - name: table_name
        in: path
      operations:
      - name: create-record
        method: POST
  - type: http
    namespace: slack
    baseUri: https://slack.com/api
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: channels
      path: /conversations.create
      operations:
      - name: create-channel
        method: POST
  - type: http
    namespace: wordpress
    baseUri: https://{{brand}}.condenast.com/wp-json/wp/v2
    authentication:
      type: bearer
      token: $secrets.wordpress_token
    resources:
    - name: posts
      path: /posts
      operations:
      - name: create-post
        method: POST
  - type: http
    namespace: instagram
    baseUri: https://graph.facebook.com/v18.0
    authentication:
      type: bearer
      token: $secrets.instagram_token
    resources:
    - name: stories
      path: /{{ig_user_id}}/stories
      operations:
      - name: create-story-draft
        method: POST

When a new digital subscription is created, provisions the subscription in SAP BRIM, creates a billing document, and syncs the subscriber to MailChimp for onboarding emails.

naftiko: '0.5'
info:
  label: SAP BRIM Subscription Billing Pipeline
  description: When a new digital subscription is created, provisions the subscription in SAP BRIM, creates a billing document, and syncs the subscriber to MailChimp for onboarding emails.
  tags:
  - subscriptions
  - billing
  - sap-brim
  - mailchimp
capability:
  exposes:
  - type: mcp
    namespace: subscription-billing
    port: 8080
    tools:
    - name: provision-subscription
      description: Given subscriber details and plan, create the subscription in SAP BRIM, generate a billing document, and add to MailChimp.
      inputParameters:
      - name: subscriber_email
        in: body
        type: string
        description: The subscriber's email address.
      - name: plan_id
        in: body
        type: string
        description: The subscription plan identifier.
      - name: brand
        in: body
        type: string
        description: The Condé Nast brand.
      steps:
      - name: create-subscription
        type: call
        call: sap-brim.create-subscription
        with:
          email: '{{subscriber_email}}'
          plan_id: '{{plan_id}}'
          brand: '{{brand}}'
      - name: create-billing-doc
        type: call
        call: sap-brim.create-billing-document
        with:
          subscription_id: '{{create-subscription.subscription_id}}'
      - name: add-to-mailchimp
        type: call
        call: mailchimp.add-subscriber
        with:
          list_id: '{{brand}}_subscribers'
          email: '{{subscriber_email}}'
          tags:
          - '{{plan_id}}'
          - new_subscriber
  consumes:
  - type: http
    namespace: sap-brim
    baseUri: https://condenast-brim.sap.com/api/v1
    authentication:
      type: basic
      username: $secrets.sap_brim_user
      password: $secrets.sap_brim_password
    resources:
    - name: subscriptions
      path: /subscriptions
      operations:
      - name: create-subscription
        method: POST
    - name: billing
      path: /billing-documents
      operations:
      - name: create-billing-document
        method: POST
  - type: http
    namespace: mailchimp
    baseUri: https://us1.api.mailchimp.com/3.0
    authentication:
      type: basic
      username: anystring
      password: $secrets.mailchimp_api_key
    resources:
    - name: members
      path: /lists/{{list_id}}/members
      inputParameters:
      - name: list_id
        in: path
      operations:
      - name: add-subscriber
        method: POST

Retrieves performance metrics for a Pinterest pin including impressions, saves, and clicks.

naftiko: '0.5'
info:
  label: Pinterest Pin Performance
  description: Retrieves performance metrics for a Pinterest pin including impressions, saves, and clicks.
  tags:
  - social-media
  - pinterest
  - analytics
capability:
  exposes:
  - type: mcp
    namespace: pinterest-analytics
    port: 8080
    tools:
    - name: get-pin-metrics
      description: Look up Pinterest pin performance metrics.
      inputParameters:
      - name: pin_id
        in: body
        type: string
        description: The Pinterest pin identifier.
      call: pinterest.get-pin-analytics
      with:
        pin_id: '{{pin_id}}'
      outputParameters:
      - name: impressions
        type: number
        mapping: $.data.impressions
      - name: saves
        type: number
        mapping: $.data.saves
      - name: clicks
        type: number
        mapping: $.data.clicks
  consumes:
  - type: http
    namespace: pinterest
    baseUri: https://api.pinterest.com/v5
    authentication:
      type: bearer
      token: $secrets.pinterest_token
    resources:
    - name: pins
      path: /pins/{{pin_id}}/analytics
      inputParameters:
      - name: pin_id
        in: path
      operations:
      - name: get-pin-analytics
        method: GET

Retrieves an invoice from Workday Financials, returning invoice number, vendor, amount, payment status, and due date.

naftiko: '0.5'
info:
  label: Workday Financials Invoice Lookup
  description: Retrieves an invoice from Workday Financials, returning invoice number, vendor, amount, payment status, and due date.
  tags:
  - finance
  - workday-financials
  - accounts-payable
capability:
  exposes:
  - type: mcp
    namespace: finance-ap
    port: 8080
    tools:
    - name: get-invoice
      description: Look up a Workday Financials invoice. Returns invoice number, vendor, amount, payment status, and due date.
      inputParameters:
      - name: invoice_id
        in: body
        type: string
        description: The Workday invoice identifier.
      call: workday-fin.get-invoice
      with:
        invoice_id: '{{invoice_id}}'
      outputParameters:
      - name: invoice_number
        type: string
        mapping: $.invoiceNumber
      - name: vendor
        type: string
        mapping: $.vendor.name
      - name: amount
        type: number
        mapping: $.totalAmount
      - name: payment_status
        type: string
        mapping: $.paymentStatus
      - name: due_date
        type: string
        mapping: $.dueDate
  consumes:
  - type: http
    namespace: workday-fin
    baseUri: https://wd2-impl-services1.workday.com/ccx/api/financialManagement/v1
    authentication:
      type: bearer
      token: $secrets.workday_financials_token
    resources:
    - name: invoices
      path: /invoices/{{invoice_id}}
      inputParameters:
      - name: invoice_id
        in: path
      operations:
      - name: get-invoice
        method: GET

Retrieves the number of members in a specified Slack channel for team coordination.

naftiko: '0.5'
info:
  label: Slack Channel Member Count
  description: Retrieves the number of members in a specified Slack channel for team coordination.
  tags:
  - communications
  - slack
  - team-management
capability:
  exposes:
  - type: mcp
    namespace: slack-info
    port: 8080
    tools:
    - name: get-channel-members
      description: Look up the member count for a Slack channel.
      inputParameters:
      - name: channel_id
        in: body
        type: string
        description: The Slack channel identifier.
      call: slack.get-channel-info
      with:
        channel_id: '{{channel_id}}'
      outputParameters:
      - name: member_count
        type: number
        mapping: $.channel.num_members
      - name: channel_name
        type: string
        mapping: $.channel.name
  consumes:
  - type: http
    namespace: slack
    baseUri: https://slack.com/api
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: channels
      path: /conversations.info?channel={{channel_id}}
      inputParameters:
      - name: channel_id
        in: path
      operations:
      - name: get-channel-info
        method: GET

Aggregates content performance across all Conde Nast brands by querying Snowflake data warehouse, refreshing Tableau dashboards, and emailing the executive summary.

naftiko: '0.5'
info:
  label: Cross-Brand Content Analytics Pipeline
  description: Aggregates content performance across all Conde Nast brands by querying Snowflake data warehouse, refreshing Tableau dashboards, and emailing the executive summary.
  tags:
  - analytics
  - snowflake
  - tableau
  - reporting
capability:
  exposes:
  - type: mcp
    namespace: cross-brand-analytics
    port: 8080
    tools:
    - name: generate-cross-brand-report
      description: Aggregate multi-brand content performance and generate executive dashboards.
      inputParameters:
      - name: report_period
        in: body
        type: string
        description: The reporting period (e.g., Q1-2026).
      - name: distribution_list
        in: body
        type: string
        description: Comma-separated email addresses for distribution.
      steps:
      - name: query-snowflake
        type: call
        call: snowflake.run-query
        with:
          query: SELECT brand, SUM(page_views) as views FROM content_metrics WHERE period = '{{report_period}}' GROUP BY brand
      - name: refresh-tableau
        type: call
        call: tableau.refresh-workbook
        with:
          workbook_id: cross_brand_performance
      - name: distribute-report
        type: call
        call: gmail.send-email
        with:
          to: '{{distribution_list}}'
          subject: Cross-Brand Performance Report - {{report_period}}
  consumes:
  - type: http
    namespace: snowflake
    baseUri: https://condenast.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: statements
      path: /statements
      operations:
      - name: run-query
        method: POST
  - type: http
    namespace: tableau
    baseUri: https://tableau.condenast.com/api/3.19
    authentication:
      type: bearer
      token: $secrets.tableau_token
    resources:
    - name: workbooks
      path: /sites/{{site_id}}/workbooks/{{workbook_id}}/refresh
      operations:
      - name: refresh-workbook
        method: POST
  - type: http
    namespace: gmail
    baseUri: https://gmail.googleapis.com/gmail/v1
    authentication:
      type: bearer
      token: $secrets.gmail_token
    resources:
    - name: messages
      path: /users/me/messages/send
      operations:
      - name: send-email
        method: POST

Retrieves traffic analytics from Cloudflare for a brand domain, returning total requests, cached percentage, and threat count.

naftiko: '0.5'
info:
  label: Cloudflare Traffic Analytics Lookup
  description: Retrieves traffic analytics from Cloudflare for a brand domain, returning total requests, cached percentage, and threat count.
  tags:
  - infrastructure
  - cloudflare
  - analytics
capability:
  exposes:
  - type: mcp
    namespace: cloudflare-analytics
    port: 8080
    tools:
    - name: get-traffic-analytics
      description: Look up Cloudflare traffic analytics for a domain zone.
      inputParameters:
      - name: zone_id
        in: body
        type: string
        description: The Cloudflare zone identifier.
      call: cloudflare.get-zone-analytics
      with:
        zone_id: '{{zone_id}}'
      outputParameters:
      - name: total_requests
        type: number
        mapping: $.result.totals.requests.all
      - name: cached_pct
        type: number
        mapping: $.result.totals.requests.cached_pct
      - name: threats
        type: number
        mapping: $.result.totals.threats.all
  consumes:
  - type: http
    namespace: cloudflare
    baseUri: https://api.cloudflare.com/client/v4
    authentication:
      type: bearer
      token: $secrets.cloudflare_api_token
    resources:
    - name: analytics
      path: /zones/{{zone_id}}/analytics/dashboard
      inputParameters:
      - name: zone_id
        in: path
      operations:
      - name: get-zone-analytics
        method: GET

Searches the Workday employee directory by name or department, returning employee details including title, manager, and location.

naftiko: '0.5'
info:
  label: Workday Employee Directory Search
  description: Searches the Workday employee directory by name or department, returning employee details including title, manager, and location.
  tags:
  - hr
  - workday
  - employee-directory
capability:
  exposes:
  - type: mcp
    namespace: workday-directory
    port: 8080
    tools:
    - name: search-employees
      description: Search the Workday employee directory.
      inputParameters:
      - name: search_term
        in: body
        type: string
        description: The name or department to search for.
      call: workday.search-workers
      with:
        search: '{{search_term}}'
      outputParameters:
      - name: employee_name
        type: string
        mapping: $.workers[0].name
      - name: title
        type: string
        mapping: $.workers[0].title
      - name: department
        type: string
        mapping: $.workers[0].department
  consumes:
  - type: http
    namespace: workday
    baseUri: https://wd5-services.condenast.com/ccx/api/v1
    authentication:
      type: bearer
      token: $secrets.workday_token
    resources:
    - name: workers
      path: /workers?search={{search}}
      inputParameters:
      - name: search
        in: path
      operations:
      - name: search-workers
        method: GET

Retrieves a specific editorial record from an Airtable base, returning story status, assigned editor, and deadline.

naftiko: '0.5'
info:
  label: Airtable Editorial Record Lookup
  description: Retrieves a specific editorial record from an Airtable base, returning story status, assigned editor, and deadline.
  tags:
  - editorial
  - airtable
  - content-management
capability:
  exposes:
  - type: mcp
    namespace: airtable-editorial
    port: 8080
    tools:
    - name: get-editorial-record
      description: Fetch an editorial record from Airtable by record ID.
      inputParameters:
      - name: base_id
        in: body
        type: string
        description: The Airtable base identifier.
      - name: record_id
        in: body
        type: string
        description: The Airtable record identifier.
      call: airtable.get-record
      with:
        base_id: '{{base_id}}'
        record_id: '{{record_id}}'
      outputParameters:
      - name: story_status
        type: string
        mapping: $.fields.Status
      - name: editor
        type: string
        mapping: $.fields.Editor
      - name: deadline
        type: string
        mapping: $.fields.Deadline
  consumes:
  - type: http
    namespace: airtable
    baseUri: https://api.airtable.com/v0
    authentication:
      type: bearer
      token: $secrets.airtable_token
    resources:
    - name: records
      path: /{{base_id}}/Editorial/{{record_id}}
      inputParameters:
      - name: base_id
        in: path
      - name: record_id
        in: path
      operations:
      - name: get-record
        method: GET

Retrieves video performance metrics from YouTube Analytics for a given video ID, returning views, watch time, likes, and subscriber gain.

naftiko: '0.5'
info:
  label: YouTube Video Performance Lookup
  description: Retrieves video performance metrics from YouTube Analytics for a given video ID, returning views, watch time, likes, and subscriber gain.
  tags:
  - video
  - youtube
  - analytics
capability:
  exposes:
  - type: mcp
    namespace: video-analytics
    port: 8080
    tools:
    - name: get-video-performance
      description: Look up YouTube video performance. Returns views, watch time, likes, and subscriber gain.
      inputParameters:
      - name: video_id
        in: body
        type: string
        description: The YouTube video ID.
      call: youtube.get-video-analytics
      with:
        video_id: '{{video_id}}'
      outputParameters:
      - name: views
        type: number
        mapping: $.rows[0][0]
      - name: watch_time_minutes
        type: number
        mapping: $.rows[0][1]
      - name: likes
        type: number
        mapping: $.rows[0][2]
      - name: subscriber_gain
        type: number
        mapping: $.rows[0][3]
  consumes:
  - type: http
    namespace: youtube
    baseUri: https://youtubeanalytics.googleapis.com/v2
    authentication:
      type: bearer
      token: $secrets.youtube_token
    resources:
    - name: reports
      path: /reports
      operations:
      - name: get-video-analytics
        method: GET

Collects reader survey responses from Typeform, analyzes sentiment via natural language processing, generates a summary report in Google Sheets, and shares insights with editorial leadership via email.

naftiko: '0.5'
info:
  label: Reader Survey Analysis Pipeline
  description: Collects reader survey responses from Typeform, analyzes sentiment via natural language processing, generates a summary report in Google Sheets, and shares insights with editorial leadership via email.
  tags:
  - analytics
  - typeform
  - google-sheets
  - sentiment-analysis
capability:
  exposes:
  - type: mcp
    namespace: survey-analysis
    port: 8080
    tools:
    - name: analyze-reader-survey
      description: Collect survey responses, analyze sentiment, and generate insights report.
      inputParameters:
      - name: survey_id
        in: body
        type: string
        description: The Typeform survey identifier.
      - name: brand
        in: body
        type: string
        description: The brand the survey pertains to.
      steps:
      - name: get-responses
        type: call
        call: typeform.get-responses
        with:
          form_id: '{{survey_id}}'
      - name: analyze-sentiment
        type: call
        call: openai.analyze-sentiment
        with:
          responses: '{{get-responses.items}}'
      - name: create-report
        type: call
        call: google-sheets.append-rows
        with:
          spreadsheet_id: survey_reports
          sheet: '{{brand}}'
          data: '{{analyze-sentiment.summary}}'
      - name: email-leadership
        type: call
        call: gmail.send-email
        with:
          to: editorial-leadership@condenast.com
          subject: '{{brand}} Reader Survey Results'
          body: '{{analyze-sentiment.executive_summary}}'
  consumes:
  - type: http
    namespace: typeform
    baseUri: https://api.typeform.com
    authentication:
      type: bearer
      token: $secrets.typeform_token
    resources:
    - name: responses
      path: /forms/{{form_id}}/responses
      inputParameters:
      - name: form_id
        in: path
      operations:
      - name: get-responses
        method: GET
  - type: http
    namespace: openai
    baseUri: https://api.openai.com/v1
    authentication:
      type: bearer
      token: $secrets.openai_api_key
    resources:
    - name: completions
      path: /chat/completions
      operations:
      - name: analyze-sentiment
        method: POST
  - type: http
    namespace: google-sheets
    baseUri: https://sheets.googleapis.com/v4
    authentication:
      type: bearer
      token: $secrets.google_sheets_token
    resources:
    - name: spreadsheets
      path: /spreadsheets/{{spreadsheet_id}}/values/{{sheet}}:append
      inputParameters:
      - name: spreadsheet_id
        in: path
      operations:
      - name: append-rows
        method: POST
  - type: http
    namespace: gmail
    baseUri: https://gmail.googleapis.com/gmail/v1
    authentication:
      type: bearer
      token: $secrets.gmail_token
    resources:
    - name: messages
      path: /users/me/messages/send
      operations:
      - name: send-email
        method: POST

Releases new design system components by exporting from Figma, publishing to the NPM registry, updating Storybook documentation, and notifying development teams via Slack.

naftiko: '0.5'
info:
  label: Design System Component Release Pipeline
  description: Releases new design system components by exporting from Figma, publishing to the NPM registry, updating Storybook documentation, and notifying development teams via Slack.
  tags:
  - design-systems
  - figma
  - npm
  - documentation
  - slack
capability:
  exposes:
  - type: mcp
    namespace: design-system-release
    port: 8080
    tools:
    - name: release-design-component
      description: Export design tokens from Figma, publish to NPM, update docs, and notify teams.
      inputParameters:
      - name: component_name
        in: body
        type: string
        description: The design component name.
      - name: version
        in: body
        type: string
        description: The semantic version number.
      steps:
      - name: export-figma-tokens
        type: call
        call: figma.get-file-styles
        with:
          file_key: design_system_master
      - name: publish-npm-package
        type: call
        call: npm.publish
        with:
          package: '@condenast/{{component_name}}'
          version: '{{version}}'
      - name: update-storybook
        type: call
        call: github.trigger-workflow
        with:
          repo: design-system
          workflow: deploy-storybook.yml
      - name: notify-teams
        type: call
        call: slack.post-message
        with:
          channel: '#design-system-updates'
          text: Released @condenast/{{component_name}}@{{version}}. Storybook updated.
  consumes:
  - type: http
    namespace: figma
    baseUri: https://api.figma.com/v1
    authentication:
      type: bearer
      token: $secrets.figma_token
    resources:
    - name: files
      path: /files/{{file_key}}/styles
      inputParameters:
      - name: file_key
        in: path
      operations:
      - name: get-file-styles
        method: GET
  - type: http
    namespace: npm
    baseUri: https://registry.npmjs.org
    authentication:
      type: bearer
      token: $secrets.npm_token
    resources:
    - name: packages
      path: /@condenast/{{component_name}}
      inputParameters:
      - name: component_name
        in: path
      operations:
      - name: publish
        method: PUT
  - type: http
    namespace: github
    baseUri: https://api.github.com
    authentication:
      type: bearer
      token: $secrets.github_token
    resources:
    - name: workflows
      path: /repos/condenast/{{repo}}/actions/workflows/{{workflow}}/dispatches
      inputParameters:
      - name: repo
        in: path
      - name: workflow
        in: path
      operations:
      - name: trigger-workflow
        method: POST
  - type: http
    namespace: slack
    baseUri: https://slack.com/api
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: messages
      path: /chat.postMessage
      operations:
      - name: post-message
        method: POST

Retrieves metadata and rendition URLs for a digital asset stored in Adobe Experience Manager.

naftiko: '0.5'
info:
  label: Adobe Experience Manager Asset Lookup
  description: Retrieves metadata and rendition URLs for a digital asset stored in Adobe Experience Manager.
  tags:
  - content-management
  - adobe
  - digital-assets
capability:
  exposes:
  - type: mcp
    namespace: aem-assets
    port: 8080
    tools:
    - name: get-asset-metadata
      description: Look up an AEM asset by its path and return metadata.
      inputParameters:
      - name: asset_path
        in: body
        type: string
        description: The asset path in AEM.
      call: aem.get-asset
      with:
        asset_path: '{{asset_path}}'
      outputParameters:
      - name: title
        type: string
        mapping: $.properties.dc:title
      - name: format
        type: string
        mapping: $.properties.dc:format
      - name: size
        type: number
        mapping: $.properties.dam:size
  consumes:
  - type: http
    namespace: aem
    baseUri: https://aem.condenast.com/api/assets
    authentication:
      type: bearer
      token: $secrets.aem_token
    resources:
    - name: assets
      path: /{{asset_path}}.json
      inputParameters:
      - name: asset_path
        in: path
      operations:
      - name: get-asset
        method: GET

Migrates archived content from legacy CMS to the current platform by extracting articles, transforming metadata, uploading assets to AEM, and publishing to WordPress.

naftiko: '0.5'
info:
  label: Content Archive Migration Pipeline
  description: Migrates archived content from legacy CMS to the current platform by extracting articles, transforming metadata, uploading assets to AEM, and publishing to WordPress.
  tags:
  - migration
  - content-management
  - wordpress
  - adobe
capability:
  exposes:
  - type: mcp
    namespace: archive-migration
    port: 8080
    tools:
    - name: migrate-archived-content
      description: Extract, transform, and migrate archived content to the current CMS platform.
      inputParameters:
      - name: legacy_article_id
        in: body
        type: string
        description: The article ID in the legacy CMS.
      - name: brand
        in: body
        type: string
        description: The target brand for migration.
      steps:
      - name: extract-legacy-article
        type: call
        call: legacy-cms.get-article
        with:
          article_id: '{{legacy_article_id}}'
      - name: upload-assets
        type: call
        call: aem.upload-assets
        with:
          source: '{{extract-legacy-article.assets}}'
          destination: /content/dam/{{brand}}/archive
      - name: publish-to-wordpress
        type: call
        call: wordpress.create-post
        with:
          title: '{{extract-legacy-article.title}}'
          content: '{{extract-legacy-article.body}}'
          status: publish
          categories: archive
      - name: log-migration
        type: call
        call: airtable.create-record
        with:
          base_id: migration_tracker
          table_name: '{{brand}}_migrations'
          legacy_id: '{{legacy_article_id}}'
          status: completed
  consumes:
  - type: http
    namespace: legacy-cms
    baseUri: https://legacy-cms.condenast.com/api/v1
    authentication:
      type: bearer
      token: $secrets.legacy_cms_token
    resources:
    - name: articles
      path: /articles/{{article_id}}
      inputParameters:
      - name: article_id
        in: path
      operations:
      - name: get-article
        method: GET
  - type: http
    namespace: aem
    baseUri: https://aem.condenast.com/api/assets
    authentication:
      type: bearer
      token: $secrets.aem_token
    resources:
    - name: assets
      path: /upload
      operations:
      - name: upload-assets
        method: POST
  - type: http
    namespace: wordpress
    baseUri: https://{{brand}}.condenast.com/wp-json/wp/v2
    authentication:
      type: bearer
      token: $secrets.wordpress_token
    resources:
    - name: posts
      path: /posts
      operations:
      - name: create-post
        method: POST
  - type: http
    namespace: airtable
    baseUri: https://api.airtable.com/v0
    authentication:
      type: bearer
      token: $secrets.airtable_token
    resources:
    - name: records
      path: /{{base_id}}/{{table_name}}
      inputParameters:
      - name: base_id
        in: path
      - name: table_name
        in: path
      operations:
      - name: create-record
        method: POST

When a new article is published, creates social media posts for Instagram, Twitter, LinkedIn, and Facebook with brand-appropriate messaging and tracks campaign in Google Sheets.

naftiko: '0.5'
info:
  label: Social Media Cross-Post Pipeline
  description: When a new article is published, creates social media posts for Instagram, Twitter, LinkedIn, and Facebook with brand-appropriate messaging and tracks campaign in Google Sheets.
  tags:
  - social-media
  - instagram
  - twitter
  - linkedin
  - facebook
  - google-sheets
capability:
  exposes:
  - type: mcp
    namespace: social-distribution
    port: 8080
    tools:
    - name: cross-post-article
      description: Given an article URL and headline, create social posts across Instagram, Twitter, LinkedIn, and Facebook and log to tracking sheet.
      inputParameters:
      - name: article_url
        in: body
        type: string
        description: The published article URL.
      - name: headline
        in: body
        type: string
        description: The article headline.
      - name: brand
        in: body
        type: string
        description: The Condé Nast brand.
      - name: image_url
        in: body
        type: string
        description: The hero image URL for social cards.
      steps:
      - name: post-twitter
        type: call
        call: twitter.create-tweet
        with:
          text: '{{headline}} {{article_url}}'
      - name: post-linkedin
        type: call
        call: linkedin.create-post
        with:
          text: '{{headline}}'
          url: '{{article_url}}'
      - name: post-facebook
        type: call
        call: facebook.create-post
        with:
          message: '{{headline}}'
          link: '{{article_url}}'
      - name: log-to-sheet
        type: call
        call: gsheets.append-row
        with:
          spreadsheet_id: social_tracking_{{brand}}
          range: Posts!A:F
          values:
          - '{{headline}}'
          - '{{article_url}}'
          - '{{post-twitter.id}}'
          - '{{post-linkedin.id}}'
          - '{{post-facebook.id}}'
  consumes:
  - type: http
    namespace: twitter
    baseUri: https://api.twitter.com/2
    authentication:
      type: bearer
      token: $secrets.twitter_token
    resources:
    - name: tweets
      path: /tweets
      operations:
      - name: create-tweet
        method: POST
  - type: http
    namespace: linkedin
    baseUri: https://api.linkedin.com/v2
    authentication:
      type: bearer
      token: $secrets.linkedin_token
    resources:
    - name: posts
      path: /ugcPosts
      operations:
      - name: create-post
        method: POST
  - type: http
    namespace: facebook
    baseUri: https://graph.facebook.com/v18.0
    authentication:
      type: bearer
      token: $secrets.facebook_token
    resources:
    - name: feed
      path: /{{page_id}}/feed
      operations:
      - name: create-post
        method: POST
  - type: http
    namespace: gsheets
    baseUri: https://sheets.googleapis.com/v4/spreadsheets
    authentication:
      type: bearer
      token: $secrets.google_sheets_token
    resources:
    - name: values
      path: /{{spreadsheet_id}}/values/{{range}}:append
      inputParameters:
      - name: spreadsheet_id
        in: path
      - name: range
        in: path
      operations:
      - name: append-row
        method: POST

Generates a weekly content performance digest by aggregating metrics from Google Analytics, social engagement from Sprout Social, subscription impact from Stripe, and delivering via Slack and email.

naftiko: '0.5'
info:
  label: Content Performance Weekly Digest Pipeline
  description: Generates a weekly content performance digest by aggregating metrics from Google Analytics, social engagement from Sprout Social, subscription impact from Stripe, and delivering via Slack and email.
  tags:
  - analytics
  - reporting
  - google-analytics
  - slack
capability:
  exposes:
  - type: mcp
    namespace: weekly-digest
    port: 8080
    tools:
    - name: generate-weekly-digest
      description: Aggregate content metrics and deliver a weekly performance digest.
      inputParameters:
      - name: brand
        in: body
        type: string
        description: The brand to generate the digest for.
      - name: week_ending
        in: body
        type: string
        description: The week ending date in YYYY-MM-DD.
      steps:
      - name: get-ga-metrics
        type: call
        call: ga4.get-weekly-report
        with:
          brand: '{{brand}}'
          week_ending: '{{week_ending}}'
      - name: get-social-metrics
        type: call
        call: sprout-social.get-report
        with:
          brand: '{{brand}}'
          date_range: last_7_days
      - name: get-subscription-metrics
        type: call
        call: stripe.get-subscription-summary
        with:
          product: '{{brand}}_digital'
      - name: post-digest
        type: call
        call: slack.post-message
        with:
          channel: '#{{brand}}-performance'
          text: 'Weekly Digest ({{week_ending}}): {{get-ga-metrics.total_views}} views, {{get-social-metrics.total_engagement}} social engagements.'
  consumes:
  - type: http
    namespace: ga4
    baseUri: https://analyticsdata.googleapis.com/v1beta
    authentication:
      type: bearer
      token: $secrets.google_analytics_token
    resources:
    - name: reports
      path: /properties/{{property_id}}:runReport
      operations:
      - name: get-weekly-report
        method: POST
  - type: http
    namespace: sprout-social
    baseUri: https://api.sproutsocial.com/v1
    authentication:
      type: bearer
      token: $secrets.sprout_social_token
    resources:
    - name: reports
      path: /{{customer_id}}/analytics
      operations:
      - name: get-report
        method: GET
  - type: http
    namespace: stripe
    baseUri: https://api.stripe.com/v1
    authentication:
      type: bearer
      token: $secrets.stripe_secret_key
    resources:
    - name: subscriptions
      path: /subscriptions
      operations:
      - name: get-subscription-summary
        method: GET
  - type: http
    namespace: slack
    baseUri: https://slack.com/api
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: messages
      path: /chat.postMessage
      operations:
      - name: post-message
        method: POST

Identifies expiring passes in Snowflake, creates Salesforce campaign, tracks in Jira, and reports to parks revenue via Microsoft Teams.

naftiko: '0.5'
info:
  label: Annual Pass Renewal Campaign Pipeline
  description: Identifies expiring passes in Snowflake, creates Salesforce campaign, tracks in Jira, and reports to parks revenue via Microsoft Teams.
  tags:
  - parks-revenue
  - snowflake
  - salesforce
  - jira
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-annual-pass-renewal-
    port: 8080
    tools:
    - name: annual-pass-renewal
      description: Identifies expiring passes in Snowflake.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: find-expiring
        call: snowflake.execute-statement
        with:
          statement: SELECT pass_holder_id, expiry_date FROM PARKS.ANNUAL_PASSES WHERE expiry_date BETWEEN CURRENT_DATE() AND DATEADD(day, 60, CURRENT_DATE())
      - name: create-campaign
        call: salesforce.createCampaign
        with:
          name: AP Renewal
          type: Retention
      - name: create-tracker
        call: jira.createIssue
        with:
          project: PARKS
          summary: 'AP Renewal: {{find-expiring.row_count}} holders'
      - name: report
        call: msteams.sendMessage
        with:
          channel_id: $secrets.parks_revenue_channel
          text: 'AP Renewal launched: {{find-expiring.row_count}} targets.'
  consumes:
  - namespace: snowflake
    type: http
    baseUri: https://disney.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - path: /statements
      operations:
      - name: execute-statement
        method: POST
  - namespace: salesforce
    type: http
    baseUri: https://disney.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - path: /sobjects
      operations:
      - name: createRecord
        method: POST
  - namespace: jira
    type: http
    baseUri: https://disney.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - path: /issue
      operations:
      - name: createIssue
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Retrieves guest support ticket details from Zendesk for Disney parks and experiences.

naftiko: '0.5'
info:
  label: Zendesk Guest Support Ticket Lookup
  description: Retrieves guest support ticket details from Zendesk for Disney parks and experiences.
  tags:
  - support
  - zendesk
  - guest-services
capability:
  exposes:
  - type: mcp
    namespace: guest-support
    port: 8080
    tools:
    - name: get-ticket
      description: Look up a guest support ticket.
      inputParameters:
      - name: ticket_id
        in: body
        type: string
        description: Zendesk ticket ID.
      call: zendesk.get-ticket
      with:
        ticket_id: '{{ticket_id}}'
      outputParameters:
      - name: subject
        type: string
        mapping: $.ticket.subject
      - name: status
        type: string
        mapping: $.ticket.status
      - name: priority
        type: string
        mapping: $.ticket.priority
  consumes:
  - namespace: zendesk
    type: http
    baseUri: https://disney.zendesk.com/api/v2
    authentication:
      type: basic
      username: $secrets.zendesk_user
      password: $secrets.zendesk_api_token
    resources:
    - path: /tickets/{{ticket_id}}.json
      operations:
      - name: get-ticket
        method: GET

Detects a production incident from Datadog, creates a P1 ticket in ServiceNow, pages on-call engineers via PagerDuty, and posts a war-room link to Teams.

naftiko: '0.5'
info:
  label: P1 Production Incident Response
  description: Detects a production incident from Datadog, creates a P1 ticket in ServiceNow, pages on-call engineers via PagerDuty, and posts a war-room link to Teams.
  tags:
  - incident-response
  - datadog
  - servicenow
  - pagerduty
  - teams
  - observability
capability:
  exposes:
    type: mcp
    namespace: disney-p1-incident-response
    port: 8080
    tools:
    - name: trigger-p1-incident
      description: Opens a P1 incident in ServiceNow, triggers a PagerDuty alert, and notifies the engineering war-room channel in Teams.
      inputParameters:
      - name: monitor_id
        type: string
        description: Datadog monitor ID that triggered the alert
        required: true
        in: body
      - name: service_name
        type: string
        description: Affected service name
        required: true
        in: body
      - name: summary
        type: string
        description: Short description of the incident
        required: true
        in: body
      steps:
      - name: get-monitor-details
        call: datadog.getMonitor
        with:
          monitor_id: '{{input.monitor_id}}'
      - name: create-p1-ticket
        call: servicenow.createIncident
        with:
          urgency: '1'
          impact: '1'
          short_description: '[P1] {{input.summary}}'
          service: '{{input.service_name}}'
      - name: page-on-call
        call: pagerduty.createIncident
        with:
          title: '[P1] {{input.summary}}'
          service_id: $secrets.pagerduty_service_id
          escalation_policy_id: $secrets.pagerduty_escalation_policy
      - name: notify-war-room
        call: microsoft-teams.sendMessage
        with:
          channel: engineering-incidents
          message: 'P1 INCIDENT: {{input.summary}} | ServiceNow: {{create-p1-ticket.ticketNumber}} | PagerDuty: {{page-on-call.incidentId}}'
  consumes:
  - namespace: datadog
    type: http
    baseUri: https://api.datadoghq.com/api/v1
    authentication:
      type: apikey
      key: $secrets.datadog_api_key
      placement: header
      name: DD-API-KEY
    resources:
    - path: /monitor/{monitor_id}
      operations:
      - name: getMonitor
        method: GET
  - namespace: servicenow
    type: http
    baseUri: https://disney.service-now.com/api/now/v1
    authentication:
      type: basic
      username: $secrets.servicenow_user
      password: $secrets.servicenow_password
    resources:
    - path: /table/incident
      operations:
      - name: createIncident
        method: POST
  - namespace: pagerduty
    type: http
    baseUri: https://api.pagerduty.com
    authentication:
      type: bearer
      token: $secrets.pagerduty_token
    resources:
    - path: /incidents
      operations:
      - name: createIncident
        method: POST
  - namespace: microsoft-teams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Pulls ad performance from Adobe Analytics, optimizes bids in Snowflake, updates Salesforce campaign records, and reports to media buying team via Microsoft Teams.

naftiko: '0.5'
info:
  label: Advertising Campaign Optimization Pipeline
  description: Pulls ad performance from Adobe Analytics, optimizes bids in Snowflake, updates Salesforce campaign records, and reports to media buying team via Microsoft Teams.
  tags:
  - advertising
  - adobe-analytics
  - snowflake
  - salesforce
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-ad-optimization
    port: 8080
    tools:
    - name: optimize-campaign
      description: Orchestrate advertising campaign optimization.
      inputParameters:
      - name: campaign_id
        type: string
        description: Campaign identifier
        in: body
      steps:
      - name: get-performance
        call: adobe-analytics.getReport
        with:
          campaign_id: '{{campaign_id}}'
      - name: optimize-bids
        call: snowflake.execute-statement
        with:
          statement: CALL MARKETING.OPTIMIZE_BIDS('{{campaign_id}}')
      - name: update-sf
        call: salesforce.createRecord
        with:
          object: Campaign
          status: optimized
      - name: report
        call: msteams.sendMessage
        with:
          channel_id: $secrets.media_buying_channel
          text: Campaign {{campaign_id}} optimized. Performance updated.
  consumes:
  - namespace: adobe-analytics
    type: http
    baseUri: https://analytics.adobe.io/api
    authentication:
      type: bearer
      token: $secrets.adobe_analytics_token
    resources:
    - path: /reports
      operations:
      - name: getReport
        method: POST
  - namespace: snowflake
    type: http
    baseUri: https://disney.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - path: /statements
      operations:
      - name: execute-statement
        method: POST
  - namespace: salesforce
    type: http
    baseUri: https://disney.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - path: /sobjects
      operations:
      - name: createRecord
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Retrieves the status of an Azure Databricks job run for Disney data pipelines.

naftiko: '0.5'
info:
  label: Azure Databricks Pipeline Status
  description: Retrieves the status of an Azure Databricks job run for Disney data pipelines.
  tags:
  - data-engineering
  - azure-databricks
  - pipelines
capability:
  exposes:
  - type: mcp
    namespace: databricks-status
    port: 8080
    tools:
    - name: get-job-status
      description: Check Databricks job run status.
      inputParameters:
      - name: run_id
        in: body
        type: string
        description: Databricks run ID.
      call: databricks.get-run
      with:
        run_id: '{{run_id}}'
      outputParameters:
      - name: state
        type: string
        mapping: $.state.life_cycle_state
      - name: result
        type: string
        mapping: $.state.result_state
  consumes:
  - namespace: databricks
    type: http
    baseUri: https://adb-disney.azuredatabricks.net/api/2.1
    authentication:
      type: bearer
      token: $secrets.databricks_token
    resources:
    - path: /jobs/runs/get
      operations:
      - name: get-run
        method: GET

Pulls open requisitions and candidate pipeline counts from Workday and posts a recruiting digest to the HR Slack channel.

naftiko: '0.5'
info:
  label: Recruiting Pipeline Digest
  description: Pulls open requisitions and candidate pipeline counts from Workday and posts a recruiting digest to the HR Slack channel.
  tags:
  - recruiting
  - workday
  - slack
  - hr
  - talent-acquisition
capability:
  exposes:
    type: mcp
    namespace: disney-recruiting-pipeline
    port: 8080
    tools:
    - name: post-recruiting-pipeline-digest
      description: Fetches open job requisitions and candidate counts from Workday and posts a weekly recruiting digest to Slack.
      inputParameters:
      - name: department
        type: string
        description: Department to filter requisitions by
        required: false
        in: body
      steps:
      - name: get-open-requisitions
        call: workday.getJobRequisitions
        with:
          status: Open
          department: '{{input.department}}'
      - name: post-digest
        call: slack.postMessage
        with:
          channel: '#talent-acquisition'
          text: 'Recruiting digest: {{get-open-requisitions.total}} open requisitions. Top priority roles: {{get-open-requisitions.topRoles}}'
  consumes:
  - namespace: workday
    type: http
    baseUri: https://wd2-impl-services1.workday.com/ccx/api/v1
    authentication:
      type: bearer
      token: $secrets.workday_token
    resources:
    - path: /jobRequisitions
      operations:
      - name: getJobRequisitions
        method: GET
  - namespace: slack
    type: http
    baseUri: https://slack.com/api
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - path: /chat.postMessage
      operations:
      - name: postMessage
        method: POST

Deactivates a departing Disney employee in Workday, revokes Microsoft 365 access, closes open IT tickets, and notifies HR leadership via Teams.

naftiko: '0.5'
info:
  label: Employee Offboarding Orchestrator
  description: Deactivates a departing Disney employee in Workday, revokes Microsoft 365 access, closes open IT tickets, and notifies HR leadership via Teams.
  tags:
  - hr
  - offboarding
  - workday
  - microsoft-365
  - servicenow
  - teams
capability:
  exposes:
    type: mcp
    namespace: disney-employee-offboarding
    port: 8080
    tools:
    - name: offboard-employee
      description: Terminates the employee record in Workday, revokes M365 licenses, resolves open ServiceNow tickets, and notifies HR via Teams.
      inputParameters:
      - name: employee_id
        type: string
        description: Workday employee ID
        required: true
        in: body
      - name: termination_date
        type: string
        description: Termination date in YYYY-MM-DD format
        required: true
        in: body
      - name: reason
        type: string
        description: Reason for termination
        required: true
        in: body
      steps:
      - name: terminate-workday
        call: workday.terminateWorker
        with:
          workerId: '{{input.employee_id}}'
          terminationDate: '{{input.termination_date}}'
          reason: '{{input.reason}}'
      - name: revoke-m365
        call: microsoft-graph.removeLicense
        with:
          workerId: '{{input.employee_id}}'
      - name: close-it-tickets
        call: servicenow.closeEmployeeTickets
        with:
          employee_id: '{{input.employee_id}}'
      - name: notify-hr
        call: microsoft-teams.sendMessage
        with:
          channel: hr-operations
          message: Employee {{input.employee_id}} has been offboarded as of {{input.termination_date}}. M365 revoked, tickets closed.
  consumes:
  - namespace: workday
    type: http
    baseUri: https://wd2-impl-services1.workday.com/ccx/api/v1
    authentication:
      type: bearer
      token: $secrets.workday_token
    resources:
    - path: /workers/{workerId}/terminate
      operations:
      - name: terminateWorker
        method: POST
  - namespace: microsoft-graph
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /users/{workerId}/removeLicense
      operations:
      - name: removeLicense
        method: POST
  - namespace: servicenow
    type: http
    baseUri: https://disney.service-now.com/api/now/v1
    authentication:
      type: basic
      username: $secrets.servicenow_user
      password: $secrets.servicenow_password
    resources:
    - path: /table/incident
      operations:
      - name: closeEmployeeTickets
        method: PATCH
  - namespace: microsoft-teams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Retrieves the current on-call engineer for a Disney service from PagerDuty.

naftiko: '0.5'
info:
  label: PagerDuty On-Call Schedule
  description: Retrieves the current on-call engineer for a Disney service from PagerDuty.
  tags:
  - incident-management
  - pagerduty
  - on-call
capability:
  exposes:
  - type: mcp
    namespace: pagerduty-oncall
    port: 8080
    tools:
    - name: get-oncall
      description: Look up who is on-call for a service.
      inputParameters:
      - name: escalation_policy_id
        in: body
        type: string
        description: PagerDuty escalation policy ID.
      call: pagerduty.get-oncalls
      with:
        escalation_policy_ids: '{{escalation_policy_id}}'
      outputParameters:
      - name: name
        type: string
        mapping: $.oncalls[0].user.name
      - name: email
        type: string
        mapping: $.oncalls[0].user.email
  consumes:
  - namespace: pagerduty
    type: http
    baseUri: https://api.pagerduty.com
    authentication:
      type: bearer
      token: $secrets.pagerduty_token
    resources:
    - path: /oncalls
      operations:
      - name: get-oncalls
        method: GET

Retrieves the latest GitHub Actions workflow run status for a Disney repository.

naftiko: '0.5'
info:
  label: GitHub Actions Workflow Status
  description: Retrieves the latest GitHub Actions workflow run status for a Disney repository.
  tags:
  - ci-cd
  - github-actions
  - development
capability:
  exposes:
  - type: mcp
    namespace: workflow-status
    port: 8080
    tools:
    - name: get-workflow-status
      description: Check the latest workflow run status.
      inputParameters:
      - name: repo
        in: body
        type: string
        description: Repository in owner/repo format.
      - name: workflow_name
        in: body
        type: string
        description: Workflow file name.
      call: github.get-workflow-runs
      with:
        repo: '{{repo}}'
        workflow: '{{workflow_name}}'
      outputParameters:
      - name: status
        type: string
        mapping: $.workflow_runs[0].status
      - name: conclusion
        type: string
        mapping: $.workflow_runs[0].conclusion
  consumes:
  - namespace: github
    type: http
    baseUri: https://api.github.com
    authentication:
      type: bearer
      token: $secrets.github_token
    resources:
    - path: /repos/{{repo}}/actions/workflows/{{workflow}}/runs
      operations:
      - name: get-workflow-runs
        method: GET

Creates Workday profile setup, provisions ServiceNow IT assets, sets up Microsoft Teams access, and creates a Jira onboarding checklist.

naftiko: '0.5'
info:
  label: Disney New Employee Onboarding Pipeline
  description: Creates Workday profile setup, provisions ServiceNow IT assets, sets up Microsoft Teams access, and creates a Jira onboarding checklist.
  tags:
  - hr-onboarding
  - workday
  - servicenow
  - microsoft-teams
  - jira
capability:
  exposes:
    type: mcp
    namespace: disney-new-employee-onboard
    port: 8080
    tools:
    - name: new-employee-onboarding
      description: Creates Workday profile setup.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: get-employee
        call: workday.getWorker
        with:
          employee_id: '{{employee_id}}'
      - name: provision-it
        call: servicenow.createIncident
        with:
          short_description: 'IT setup: {{get-employee.name}}'
          category: New Hire
      - name: create-checklist
        call: jira.createIssue
        with:
          project: HR
          summary: 'Onboarding: {{get-employee.name}}'
      - name: welcome
        call: msteams.sendMessage
        with:
          channel_id: $secrets.hr_onboarding_channel
          text: 'New hire onboarded: {{get-employee.name}}. IT: {{provision-it.number}}.'
  consumes:
  - namespace: workday
    type: http
    baseUri: https://wd5-impl-services1.workday.com/ccx/service/disney
    authentication:
      type: basic
      username: $secrets.workday_user
      password: $secrets.workday_password
    resources:
    - path: /Human_Resources
      operations:
      - name: getWorker
        method: GET
  - namespace: servicenow
    type: http
    baseUri: https://disney.service-now.com/api/now/v1
    authentication:
      type: basic
      username: $secrets.servicenow_user
      password: $secrets.servicenow_password
    resources:
    - path: /table/incident
      operations:
      - name: createIncident
        method: POST
  - namespace: jira
    type: http
    baseUri: https://disney.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - path: /issue
      operations:
      - name: createIssue
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Pulls access logs from Splunk, verifies with Workday, creates Jira remediation tickets, and notifies security via Microsoft Teams.

naftiko: '0.5'
info:
  label: Studio Security Access Review Pipeline
  description: Pulls access logs from Splunk, verifies with Workday, creates Jira remediation tickets, and notifies security via Microsoft Teams.
  tags:
  - security
  - splunk
  - workday
  - jira
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-studio-security-acce
    port: 8080
    tools:
    - name: studio-security-access-review
      description: Pulls access logs from Splunk.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: get-logs
        call: splunk.search
        with:
          query: index=physical_access facility={{facility}} earliest=-7d | stats count by badge_id
      - name: verify
        call: workday.getWorker
        with:
          badge_ids: '{{get-logs.results}}'
      - name: create-remediation
        call: jira.createIssue
        with:
          project: SEC
          summary: 'Access review: {{facility}}'
      - name: notify
        call: msteams.sendMessage
        with:
          channel_id: $secrets.security_channel
          text: 'Access review: {{facility}}. Jira: {{create-remediation.key}}.'
  consumes:
  - namespace: splunk
    type: http
    baseUri: https://splunk.disney.com:8089/services
    authentication:
      type: bearer
      token: $secrets.splunk_token
    resources:
    - path: /search/jobs
      operations:
      - name: search
        method: POST
  - namespace: workday
    type: http
    baseUri: https://wd5-impl-services1.workday.com/ccx/service/disney
    authentication:
      type: basic
      username: $secrets.workday_user
      password: $secrets.workday_password
    resources:
    - path: /Human_Resources
      operations:
      - name: getWorker
        method: GET
  - namespace: jira
    type: http
    baseUri: https://disney.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - path: /issue
      operations:
      - name: createIssue
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Configures test in Snowflake, tracks in Adobe Analytics, analyzes in Azure Databricks, and publishes results in Confluence.

naftiko: '0.5'
info:
  label: Disney+ A/B Test Pipeline
  description: Configures test in Snowflake, tracks in Adobe Analytics, analyzes in Azure Databricks, and publishes results in Confluence.
  tags:
  - experimentation
  - snowflake
  - adobe-analytics
  - databricks
  - confluence
capability:
  exposes:
    type: mcp
    namespace: disney-disney-plus-ab-test-
    port: 8080
    tools:
    - name: disney-plus-ab-test
      description: Configures test in Snowflake.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: setup-test
        call: snowflake.execute-statement
        with:
          statement: INSERT INTO EXPERIMENTS.AB_TESTS (test_name, start_date) VALUES ('{{test_name}}', CURRENT_DATE())
      - name: setup-tracking
        call: adobe-analytics.getReport
        with:
          segment: abtest-{{test_name}}
      - name: run-analysis
        call: databricks.runJob
        with:
          job_id: $secrets.ab_test_job_id
      - name: publish
        call: confluence.createPage
        with:
          space: PRODUCT
          title: 'A/B Test: {{test_name}}'
  consumes:
  - namespace: snowflake
    type: http
    baseUri: https://disney.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - path: /statements
      operations:
      - name: execute-statement
        method: POST
  - namespace: adobe-analytics
    type: http
    baseUri: https://analytics.adobe.io/api
    authentication:
      type: bearer
      token: $secrets.adobe_analytics_token
    resources:
    - path: /reports
      operations:
      - name: getReport
        method: POST
  - namespace: databricks
    type: http
    baseUri: https://adb-disney.azuredatabricks.net/api/2.1
    authentication:
      type: bearer
      token: $secrets.databricks_token
    resources:
    - path: /jobs/runs/submit
      operations:
      - name: runJob
        method: POST
  - namespace: confluence
    type: http
    baseUri: https://disney.atlassian.net/wiki/rest/api
    authentication:
      type: basic
      username: $secrets.confluence_user
      password: $secrets.confluence_api_token
    resources:
    - path: /content
      operations:
      - name: createPage
        method: POST

Pulls license usage from ServiceNow, compares with Salesforce contracts, creates Jira tickets, and reports to IT finance via Microsoft Teams.

naftiko: '0.5'
info:
  label: Enterprise Software License Audit Pipeline
  description: Pulls license usage from ServiceNow, compares with Salesforce contracts, creates Jira tickets, and reports to IT finance via Microsoft Teams.
  tags:
  - license-management
  - servicenow
  - salesforce
  - jira
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-software-license-aud
    port: 8080
    tools:
    - name: software-license-audit
      description: Pulls license usage from ServiceNow.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: get-usage
        call: servicenow.createIncident
        with:
          category: software
          type: '{{software_name}}'
      - name: get-contract
        call: salesforce.getOpportunity
        with:
          software: '{{software_name}}'
      - name: create-audit
        call: jira.createIssue
        with:
          project: ITFIN
          summary: 'License audit: {{software_name}}'
      - name: report
        call: msteams.sendMessage
        with:
          channel_id: $secrets.it_finance_channel
          text: 'License audit: {{software_name}}. Jira: {{create-audit.key}}.'
  consumes:
  - namespace: servicenow
    type: http
    baseUri: https://disney.service-now.com/api/now/v1
    authentication:
      type: basic
      username: $secrets.servicenow_user
      password: $secrets.servicenow_password
    resources:
    - path: /table/incident
      operations:
      - name: createIncident
        method: POST
  - namespace: salesforce
    type: http
    baseUri: https://disney.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - path: /sobjects
      operations:
      - name: createRecord
        method: POST
  - namespace: jira
    type: http
    baseUri: https://disney.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - path: /issue
      operations:
      - name: createIssue
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Runs quality checks on media in Amazon S3, logs in Snowflake, creates Jira bugs, and notifies QA via Microsoft Teams.

naftiko: '0.5'
info:
  label: Disney+ Content Quality Pipeline
  description: Runs quality checks on media in Amazon S3, logs in Snowflake, creates Jira bugs, and notifies QA via Microsoft Teams.
  tags:
  - quality-assurance
  - s3
  - snowflake
  - jira
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-content-quality-assu
    port: 8080
    tools:
    - name: content-quality-assurance
      description: Runs quality checks on media in Amazon S3.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: check-assets
        call: s3.putObject
        with:
          bucket: disney-plus-content
          key: '{{title}}/quality-check'
      - name: log-results
        call: snowflake.execute-statement
        with:
          statement: INSERT INTO QA.CONTENT_CHECKS (title, check_date) VALUES ('{{title}}', CURRENT_DATE())
      - name: create-bug
        call: jira.createIssue
        with:
          project: QA
          summary: 'Content quality: {{title}}'
      - name: notify
        call: msteams.sendMessage
        with:
          channel_id: $secrets.qa_channel
          text: 'Content QA: {{title}}. Jira: {{create-bug.key}}.'
  consumes:
  - namespace: s3
    type: http
    baseUri: https://s3.us-east-1.amazonaws.com
    authentication:
      type: awsSigV4
      accessKeyId: $secrets.aws_access_key_id
      secretAccessKey: $secrets.aws_secret_access_key
    resources:
    - path: /bucket/key
      operations:
      - name: putObject
        method: PUT
  - namespace: snowflake
    type: http
    baseUri: https://disney.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - path: /statements
      operations:
      - name: execute-statement
        method: POST
  - namespace: jira
    type: http
    baseUri: https://disney.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - path: /issue
      operations:
      - name: createIssue
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Queries Workday for a current payroll headcount snapshot by department and returns summary figures.

naftiko: '0.5'
info:
  label: Payroll Headcount Snapshot
  description: Queries Workday for a current payroll headcount snapshot by department and returns summary figures.
  tags:
  - hr
  - payroll
  - workday
  - headcount
  - finance
capability:
  exposes:
    type: mcp
    namespace: disney-payroll-headcount
    port: 8080
    tools:
    - name: get-payroll-headcount
      description: Returns active employee headcount by department from Workday payroll data.
      inputParameters:
      - name: department
        type: string
        description: Department to filter by (leave blank for all)
        required: false
        in: query
      - name: as_of_date
        type: string
        description: Effective date in YYYY-MM-DD format
        required: true
        in: query
      call: workday.getHeadcount
      outputParameters:
      - name: headcount_data
        mapping: $.data
  consumes:
  - namespace: workday
    type: http
    baseUri: https://wd2-impl-services1.workday.com/ccx/api/v1
    authentication:
      type: bearer
      token: $secrets.workday_token
    resources:
    - path: /workers
      operations:
      - name: getHeadcount
        method: GET

Searches Splunk for security events across Disney infrastructure by severity and source.

naftiko: '0.5'
info:
  label: Splunk Security Event Search
  description: Searches Splunk for security events across Disney infrastructure by severity and source.
  tags:
  - security
  - splunk
  - siem
capability:
  exposes:
  - type: mcp
    namespace: security-events
    port: 8080
    tools:
    - name: search-events
      description: Search for security events in Splunk.
      inputParameters:
      - name: severity
        in: body
        type: string
        description: Event severity level.
      - name: source_system
        in: body
        type: string
        description: Source system name.
      call: splunk.search
      with:
        query: index=security severity={{severity}} source={{source_system}} earliest=-24h | stats count by event_type
      outputParameters:
      - name: results
        type: array
        mapping: $.results
  consumes:
  - namespace: splunk
    type: http
    baseUri: https://splunk.disney.com:8089/services
    authentication:
      type: bearer
      token: $secrets.splunk_token
    resources:
    - path: /search/jobs
      operations:
      - name: search
        method: POST

Submits a new position approval request in Workday, routes it to the finance team via Microsoft 365, and tracks approval status in Jira.

naftiko: '0.5'
info:
  label: Position Approval Request Orchestrator
  description: Submits a new position approval request in Workday, routes it to the finance team via Microsoft 365, and tracks approval status in Jira.
  tags:
  - hr
  - workday
  - microsoft-365
  - jira
  - headcount-planning
capability:
  exposes:
    type: mcp
    namespace: disney-position-approval
    port: 8080
    tools:
    - name: submit-position-approval
      description: Creates a new position in Workday, sends an approval email via Microsoft 365, and tracks the request in Jira.
      inputParameters:
      - name: job_title
        type: string
        description: Title for the new position
        required: true
        in: body
      - name: department
        type: string
        description: Requesting department
        required: true
        in: body
      - name: budget_code
        type: string
        description: Budget code for the position
        required: true
        in: body
      - name: finance_approver_email
        type: string
        description: Finance approver email address
        required: true
        in: body
      steps:
      - name: create-workday-position
        call: workday.createPosition
        with:
          jobTitle: '{{input.job_title}}'
          department: '{{input.department}}'
          budgetCode: '{{input.budget_code}}'
      - name: create-jira-tracking
        call: jira.createIssue
        with:
          project: HR
          issuetype: Task
          summary: 'Position approval: {{input.job_title}} in {{input.department}}'
          description: 'Workday position ID: {{create-workday-position.positionId}}. Budget code: {{input.budget_code}}'
      - name: send-approval-email
        call: microsoft-365.sendEmail
        with:
          to: '{{input.finance_approver_email}}'
          subject: 'Position Approval Required: {{input.job_title}}'
          body: 'Please approve new position {{input.job_title}} in {{input.department}}. Workday ID: {{create-workday-position.positionId}}. Jira tracking: {{create-jira-tracking.key}}'
  consumes:
  - namespace: workday
    type: http
    baseUri: https://wd2-impl-services1.workday.com/ccx/api/v1
    authentication:
      type: bearer
      token: $secrets.workday_token
    resources:
    - path: /positions
      operations:
      - name: createPosition
        method: POST
  - namespace: jira
    type: http
    baseUri: https://disney.atlassian.net/rest/api/3
    authentication:
      type: bearer
      token: $secrets.jira_token
    resources:
    - path: /issue
      operations:
      - name: createIssue
        method: POST
  - namespace: microsoft-365
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /me/sendMail
      operations:
      - name: sendEmail
        method: POST

Retrieves IT change request details from ServiceNow by change number.

naftiko: '0.5'
info:
  label: ServiceNow IT Change Lookup
  description: Retrieves IT change request details from ServiceNow by change number.
  tags:
  - itsm
  - servicenow
  - change-management
capability:
  exposes:
  - type: mcp
    namespace: change-lookup
    port: 8080
    tools:
    - name: get-change
      description: Look up a change request in ServiceNow.
      inputParameters:
      - name: change_number
        in: body
        type: string
        description: Change request number.
      call: servicenow.get-change
      with:
        number: '{{change_number}}'
      outputParameters:
      - name: state
        type: string
        mapping: $.result[0].state
      - name: description
        type: string
        mapping: $.result[0].short_description
  consumes:
  - namespace: servicenow
    type: http
    baseUri: https://disney.service-now.com/api/now/v1
    authentication:
      type: basic
      username: $secrets.servicenow_user
      password: $secrets.servicenow_password
    resources:
    - path: /table/change_request
      operations:
      - name: get-change
        method: GET

Updates content ratings in Snowflake, syncs to Amazon S3 config, creates Jira release task, and notifies product team via Microsoft Teams.

naftiko: '0.5'
info:
  label: Disney+ Parental Controls Update Pipeline
  description: Updates content ratings in Snowflake, syncs to Amazon S3 config, creates Jira release task, and notifies product team via Microsoft Teams.
  tags:
  - content-safety
  - snowflake
  - s3
  - jira
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-disney-plus-parental
    port: 8080
    tools:
    - name: disney-plus-parental-controls-update
      description: Updates content ratings in Snowflake.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: update-ratings
        call: snowflake.execute-statement
        with:
          statement: UPDATE CONTENT.RATINGS SET parental_rating = '{{new_rating}}' WHERE title = '{{title}}'
      - name: sync-config
        call: s3.putObject
        with:
          bucket: streaming-config
          key: parental-controls/latest.json
      - name: create-task
        call: jira.createIssue
        with:
          project: PRODUCT
          summary: 'Parental controls update: {{title}}'
      - name: notify
        call: msteams.sendMessage
        with:
          channel_id: $secrets.product_channel
          text: 'Parental controls updated: {{title}} to {{new_rating}}.'
  consumes:
  - namespace: snowflake
    type: http
    baseUri: https://disney.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - path: /statements
      operations:
      - name: execute-statement
        method: POST
  - namespace: s3
    type: http
    baseUri: https://s3.us-east-1.amazonaws.com
    authentication:
      type: awsSigV4
      accessKeyId: $secrets.aws_access_key_id
      secretAccessKey: $secrets.aws_secret_access_key
    resources:
    - path: /bucket/key
      operations:
      - name: putObject
        method: PUT
  - namespace: jira
    type: http
    baseUri: https://disney.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - path: /issue
      operations:
      - name: createIssue
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Triggers a Tableau extract refresh for box office performance dashboards.

naftiko: '0.5'
info:
  label: Tableau Box Office Dashboard Refresh
  description: Triggers a Tableau extract refresh for box office performance dashboards.
  tags:
  - analytics
  - tableau
  - box-office
capability:
  exposes:
  - type: mcp
    namespace: box-office-analytics
    port: 8080
    tools:
    - name: refresh-dashboard
      description: Trigger Tableau extract refresh for box office data.
      inputParameters:
      - name: workbook_id
        in: body
        type: string
        description: Tableau workbook ID.
      call: tableau.refresh-extract
      with:
        workbook_id: '{{workbook_id}}'
      outputParameters:
      - name: job_id
        type: string
        mapping: $.job.id
  consumes:
  - namespace: tableau
    type: http
    baseUri: https://tableau.disney.com/api/3.19
    authentication:
      type: bearer
      token: $secrets.tableau_token
    resources:
    - path: /sites/default/workbooks/{{workbook_id}}/refresh
      operations:
      - name: refresh-extract
        method: POST

Queries Snowflake for subscriber churn metrics and posts a summary to the product analytics Slack channel.

naftiko: '0.5'
info:
  label: Disney+ Subscriber Churn Analytics
  description: Queries Snowflake for subscriber churn metrics and posts a summary to the product analytics Slack channel.
  tags:
  - analytics
  - streaming
  - snowflake
  - slack
  - churn
  - disney-plus
capability:
  exposes:
    type: mcp
    namespace: disney-plus-churn-analytics
    port: 8080
    tools:
    - name: post-churn-analytics-digest
      description: Retrieves 30-day subscriber churn and cancellation metrics from Snowflake and posts a digest to Slack.
      inputParameters:
      - name: time_period_days
        type: number
        description: Number of days to analyze for churn
        required: true
        in: body
      steps:
      - name: query-churn-metrics
        call: snowflake.executeQuery
        with:
          query: SELECT COUNT(*) AS churned_subscribers, AVG(tenure_days) AS avg_tenure, subscription_tier FROM disney_plus.churn_events WHERE event_date >= DATEADD(day, -{{input.time_period_days}}, CURRENT_DATE) GROUP BY subscription_tier
      - name: post-churn-digest
        call: slack.postMessage
        with:
          channel: '#product-analytics'
          text: 'Disney+ churn report ({{input.time_period_days}} days): {{query-churn-metrics.churned_subscribers}} churned subscribers. Avg tenure: {{query-churn-metrics.avg_tenure}} days.'
  consumes:
  - namespace: snowflake
    type: http
    baseUri: https://disney.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - path: /statements
      operations:
      - name: executeQuery
        method: POST
  - namespace: slack
    type: http
    baseUri: https://slack.com/api
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - path: /chat.postMessage
      operations:
      - name: postMessage
        method: POST

Collects feedback from Zendesk, analyzes in Snowflake, creates Salesforce follow-up, and notifies guest relations via Microsoft Teams.

naftiko: '0.5'
info:
  label: Park Guest Feedback Response Pipeline
  description: Collects feedback from Zendesk, analyzes in Snowflake, creates Salesforce follow-up, and notifies guest relations via Microsoft Teams.
  tags:
  - guest-relations
  - zendesk
  - snowflake
  - salesforce
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-guest-feedback-respo
    port: 8080
    tools:
    - name: guest-feedback-response
      description: Collects feedback from Zendesk.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: get-feedback
        call: zendesk.getTicket
        with:
          ticket_id: '{{ticket_id}}'
      - name: analyze
        call: snowflake.execute-statement
        with:
          statement: SELECT sentiment_score FROM ML.SENTIMENT WHERE text = '{{get-feedback.description}}'
      - name: create-followup
        call: salesforce.createRecord
        with:
          object: Case
          subject: 'Guest feedback: {{ticket_id}}'
      - name: notify
        call: msteams.sendMessage
        with:
          channel_id: $secrets.guest_relations_channel
          text: 'Guest feedback: Ticket {{ticket_id}}. Case: {{create-followup.id}}.'
  consumes:
  - namespace: zendesk
    type: http
    baseUri: https://disney.zendesk.com/api/v2
    authentication:
      type: basic
      username: $secrets.zendesk_user
      password: $secrets.zendesk_api_token
    resources:
    - path: /tickets
      operations:
      - name: getTicket
        method: GET
  - namespace: snowflake
    type: http
    baseUri: https://disney.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - path: /statements
      operations:
      - name: execute-statement
        method: POST
  - namespace: salesforce
    type: http
    baseUri: https://disney.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - path: /sobjects
      operations:
      - name: createRecord
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Submits a role change request in Workday and notifies the employee and their manager via Microsoft Teams when approval is complete.

naftiko: '0.5'
info:
  label: Workday Role Change Approval Workflow
  description: Submits a role change request in Workday and notifies the employee and their manager via Microsoft Teams when approval is complete.
  tags:
  - hr
  - workday
  - teams
  - role-change
  - approval
capability:
  exposes:
    type: mcp
    namespace: disney-role-change-approval
    port: 8080
    tools:
    - name: submit-role-change
      description: Creates a role change business process in Workday and sends Teams notifications to the employee and manager.
      inputParameters:
      - name: employee_id
        type: string
        description: Workday employee ID
        required: true
        in: body
      - name: new_job_profile
        type: string
        description: New job profile/title
        required: true
        in: body
      - name: effective_date
        type: string
        description: Effective date in YYYY-MM-DD format
        required: true
        in: body
      - name: manager_email
        type: string
        description: Manager email for notification
        required: true
        in: body
      steps:
      - name: submit-workday-change
        call: workday.submitJobChange
        with:
          workerId: '{{input.employee_id}}'
          jobProfile: '{{input.new_job_profile}}'
          effectiveDate: '{{input.effective_date}}'
      - name: notify-manager
        call: microsoft-teams.sendMessage
        with:
          recipient: '{{input.manager_email}}'
          message: 'Role change submitted for employee {{input.employee_id}} to {{input.new_job_profile}}, effective {{input.effective_date}}. Workday reference: {{submit-workday-change.eventId}}'
  consumes:
  - namespace: workday
    type: http
    baseUri: https://wd2-impl-services1.workday.com/ccx/api/v1
    authentication:
      type: bearer
      token: $secrets.workday_token
    resources:
    - path: /workers/{workerId}/jobChange
      operations:
      - name: submitJobChange
        method: POST
  - namespace: microsoft-teams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /chats/sendMessage
      operations:
      - name: sendMessage
        method: POST

Runs Terraform via GitHub Actions, creates ServiceNow change request, deploys, and notifies SRE via Microsoft Teams.

naftiko: '0.5'
info:
  label: Infrastructure Change Deployment Pipeline
  description: Runs Terraform via GitHub Actions, creates ServiceNow change request, deploys, and notifies SRE via Microsoft Teams.
  tags:
  - infrastructure
  - github
  - servicenow
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-infrastructure-chang
    port: 8080
    tools:
    - name: infrastructure-change-deployment
      description: Runs Terraform via GitHub Actions.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: run-plan
        call: github.createWorkflowDispatch
        with:
          repo: '{{repo}}'
          workflow: terraform-plan.yml
      - name: create-change
        call: servicenow.createIncident
        with:
          short_description: 'Infra change: {{description}}'
      - name: notify
        call: msteams.sendMessage
        with:
          channel_id: $secrets.sre_channel
          text: 'Infra deployed: {{description}}. Change: {{create-change.number}}.'
  consumes:
  - namespace: github
    type: http
    baseUri: https://api.github.com
    authentication:
      type: bearer
      token: $secrets.github_token
    resources:
    - path: /repos/actions/workflows/dispatches
      operations:
      - name: createWorkflowDispatch
        method: POST
  - namespace: servicenow
    type: http
    baseUri: https://disney.service-now.com/api/now/v1
    authentication:
      type: basic
      username: $secrets.servicenow_user
      password: $secrets.servicenow_password
    resources:
    - path: /table/incident
      operations:
      - name: createIncident
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Runs a Looker report for Disney merchandise sales by product line and region.

naftiko: '0.5'
info:
  label: Looker Merchandise Sales Report
  description: Runs a Looker report for Disney merchandise sales by product line and region.
  tags:
  - analytics
  - looker
  - merchandise
capability:
  exposes:
  - type: mcp
    namespace: merch-sales
    port: 8080
    tools:
    - name: get-sales-report
      description: Run a merchandise sales Look in Looker.
      inputParameters:
      - name: look_id
        in: body
        type: string
        description: Looker Look ID.
      call: looker.run-look
      with:
        look_id: '{{look_id}}'
      outputParameters:
      - name: data
        type: array
        mapping: $.data
  consumes:
  - namespace: looker
    type: http
    baseUri: https://disney.looker.com/api/4.0
    authentication:
      type: bearer
      token: $secrets.looker_token
    resources:
    - path: /looks/{{look_id}}/run/json
      operations:
      - name: run-look
        method: GET

Retrieves top-tier Salesforce accounts with open cases or at-risk health scores and posts a daily digest to the sales Teams channel.

naftiko: '0.5'
info:
  label: Salesforce Account Health Digest
  description: Retrieves top-tier Salesforce accounts with open cases or at-risk health scores and posts a daily digest to the sales Teams channel.
  tags:
  - crm
  - salesforce
  - teams
  - account-health
  - sales
capability:
  exposes:
    type: mcp
    namespace: disney-account-health-digest
    port: 8080
    tools:
    - name: post-account-health-digest
      description: Queries Salesforce for at-risk accounts and posts a digest to the sales Teams channel.
      inputParameters:
      - name: health_score_threshold
        type: number
        description: Health score below which accounts are considered at-risk
        required: true
        in: body
      - name: teams_channel
        type: string
        description: Teams channel name to post the digest
        required: true
        in: body
      steps:
      - name: query-at-risk-accounts
        call: salesforce.queryAccounts
        with:
          health_score_lt: '{{input.health_score_threshold}}'
      - name: post-digest
        call: microsoft-teams.sendMessage
        with:
          channel: '{{input.teams_channel}}'
          message: 'Account Health Digest: {{query-at-risk-accounts.totalSize}} accounts below health threshold. Top accounts: {{query-at-risk-accounts.records}}'
  consumes:
  - namespace: salesforce
    type: http
    baseUri: https://disney.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - path: /query
      operations:
      - name: queryAccounts
        method: GET
  - namespace: microsoft-teams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Checks rights in Snowflake, creates Salesforce licensing case, generates documents in SharePoint, and notifies music team via Microsoft Teams.

naftiko: '0.5'
info:
  label: Music Licensing Clearance Pipeline
  description: Checks rights in Snowflake, creates Salesforce licensing case, generates documents in SharePoint, and notifies music team via Microsoft Teams.
  tags:
  - music-licensing
  - snowflake
  - salesforce
  - sharepoint
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-music-licensing-clea
    port: 8080
    tools:
    - name: music-licensing-clearance
      description: Checks rights in Snowflake.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: check-rights
        call: snowflake.execute-statement
        with:
          statement: SELECT rights_holder, territory, expiry_date FROM MUSIC.RIGHTS WHERE track_id = '{{track_id}}'
      - name: create-case
        call: salesforce.createRecord
        with:
          object: Case
          subject: 'Music clearance: {{track_id}}'
      - name: create-doc
        call: sharepoint.createDocument
        with:
          site: music-licensing
          name: clearance-{{track_id}}.docx
      - name: notify
        call: msteams.sendMessage
        with:
          channel_id: $secrets.music_channel
          text: 'Music clearance initiated: {{track_id}}. Case: {{create-case.id}}.'
  consumes:
  - namespace: snowflake
    type: http
    baseUri: https://disney.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - path: /statements
      operations:
      - name: execute-statement
        method: POST
  - namespace: salesforce
    type: http
    baseUri: https://disney.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - path: /sobjects
      operations:
      - name: createRecord
        method: POST
  - namespace: sharepoint
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /sites/drive/items
      operations:
      - name: createDocument
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Ingests content metadata into Snowflake, uploads media assets to Amazon S3, creates a QA task in Jira, and notifies the content team via Microsoft Teams.

naftiko: '0.5'
info:
  label: Disney+ Content Onboarding Pipeline
  description: Ingests content metadata into Snowflake, uploads media assets to Amazon S3, creates a QA task in Jira, and notifies the content team via Microsoft Teams.
  tags:
  - content-management
  - snowflake
  - amazon-s3
  - jira
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-content-onboarding
    port: 8080
    tools:
    - name: onboard-content
      description: Orchestrate Disney+ content onboarding workflow.
      inputParameters:
      - name: title
        type: string
        description: Content title
        in: body
      - name: content_type
        type: string
        description: Movie, series, or short
        in: body
      steps:
      - name: store-metadata
        call: snowflake.execute-statement
        with:
          statement: INSERT INTO CONTENT.CATALOG (title, content_type, status) VALUES ('{{title}}', '{{content_type}}', 'pending_qa')
      - name: upload-assets
        call: s3.putObject
        with:
          bucket: disney-plus-content
          key: '{{content_type}}/{{title}}/master'
      - name: create-qa-task
        call: jira.createIssue
        with:
          project: CONTENT
          summary: 'QA: {{title}} ({{content_type}})'
      - name: notify-team
        call: msteams.sendMessage
        with:
          channel_id: $secrets.content_ops_channel
          text: 'Content onboarded: {{title}}. QA: {{create-qa-task.key}}.'
  consumes:
  - namespace: snowflake
    type: http
    baseUri: https://disney.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - path: /statements
      operations:
      - name: execute-statement
        method: POST
  - namespace: s3
    type: http
    baseUri: https://s3.us-east-1.amazonaws.com
    authentication:
      type: awsSigV4
      accessKeyId: $secrets.aws_access_key_id
      secretAccessKey: $secrets.aws_secret_access_key
    resources:
    - path: /bucket/key
      operations:
      - name: putObject
        method: PUT
  - namespace: jira
    type: http
    baseUri: https://disney.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - path: /issue
      operations:
      - name: createIssue
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Queries Snowflake for real-time theme park attendance data and sends a Twilio SMS alert to park operations managers when capacity thresholds are exceeded.

naftiko: '0.5'
info:
  label: Theme Park Capacity Alert and Staffing Notification
  description: Queries Snowflake for real-time theme park attendance data and sends a Twilio SMS alert to park operations managers when capacity thresholds are exceeded.
  tags:
  - theme-parks
  - operations
  - snowflake
  - twilio
  - capacity-management
capability:
  exposes:
    type: mcp
    namespace: disney-park-capacity-alert
    port: 8080
    tools:
    - name: send-capacity-alert
      description: Checks attendance data against capacity thresholds and sends an SMS alert to park operations managers.
      inputParameters:
      - name: park_id
        type: string
        description: Park identifier (e.g., magic-kingdom, epcot)
        required: true
        in: body
      - name: capacity_threshold_pct
        type: number
        description: Percentage threshold to trigger alert (e.g., 95)
        required: true
        in: body
      - name: manager_phone
        type: string
        description: Park manager phone number for SMS alert
        required: true
        in: body
      steps:
      - name: query-attendance
        call: snowflake.executeQuery
        with:
          query: SELECT park_id, current_attendance, max_capacity, ROUND(current_attendance/max_capacity*100,1) AS pct_full FROM parks.capacity WHERE park_id = '{{input.park_id}}'
      - name: send-sms-alert
        call: twilio.sendSms
        with:
          to: '{{input.manager_phone}}'
          from: $secrets.twilio_from_number
          body: 'CAPACITY ALERT: {{input.park_id}} is at {{query-attendance.pct_full}}% capacity. Immediate staffing review required.'
  consumes:
  - namespace: snowflake
    type: http
    baseUri: https://disney.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - path: /statements
      operations:
      - name: executeQuery
        method: POST
  - namespace: twilio
    type: http
    baseUri: https://api.twilio.com/2010-04-01
    authentication:
      type: basic
      username: $secrets.twilio_account_sid
      password: $secrets.twilio_auth_token
    resources:
    - path: /Accounts/{AccountSid}/Messages.json
      operations:
      - name: sendSms
        method: POST

Updates schedule in Snowflake, configures Adobe Analytics tracking, creates Jira content prep tasks, and distributes via Microsoft Teams.

naftiko: '0.5'
info:
  label: Disney Channel Programming Schedule Pipeline
  description: Updates schedule in Snowflake, configures Adobe Analytics tracking, creates Jira content prep tasks, and distributes via Microsoft Teams.
  tags:
  - programming
  - snowflake
  - adobe-analytics
  - jira
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-programming-schedule
    port: 8080
    tools:
    - name: programming-schedule
      description: Updates schedule in Snowflake.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: update-schedule
        call: snowflake.execute-statement
        with:
          statement: INSERT INTO PROGRAMMING.SCHEDULE (channel, title, air_date) VALUES ('{{channel}}', '{{title}}', '{{air_date}}')
      - name: setup-tracking
        call: adobe-analytics.getReport
        with:
          segment: schedule-{{title}}
      - name: create-prep
        call: jira.createIssue
        with:
          project: PROG
          summary: 'Content prep: {{title}} on {{channel}}'
      - name: distribute
        call: msteams.sendMessage
        with:
          channel_id: $secrets.programming_channel
          text: 'Schedule: {{title}} on {{channel}} ({{air_date}}).'
  consumes:
  - namespace: snowflake
    type: http
    baseUri: https://disney.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - path: /statements
      operations:
      - name: execute-statement
        method: POST
  - namespace: adobe-analytics
    type: http
    baseUri: https://analytics.adobe.io/api
    authentication:
      type: bearer
      token: $secrets.adobe_analytics_token
    resources:
    - path: /reports
      operations:
      - name: getReport
        method: POST
  - namespace: jira
    type: http
    baseUri: https://disney.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - path: /issue
      operations:
      - name: createIssue
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Retrieves license request from Salesforce, generates agreement in SharePoint, creates approval in Jira, and notifies legal via Microsoft Teams.

naftiko: '0.5'
info:
  label: Merchandise Licensing Approval Pipeline
  description: Retrieves license request from Salesforce, generates agreement in SharePoint, creates approval in Jira, and notifies legal via Microsoft Teams.
  tags:
  - licensing
  - salesforce
  - sharepoint
  - jira
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-merchandise-licensin
    port: 8080
    tools:
    - name: merchandise-licensing-approval
      description: Retrieves license request from Salesforce.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: get-request
        call: salesforce.getOpportunity
        with:
          id: '{{request_id}}'
      - name: create-agreement
        call: sharepoint.createDocument
        with:
          site: licensing
          name: '{{get-request.name}}-agreement.docx'
      - name: create-approval
        call: jira.createIssue
        with:
          project: LEGAL
          summary: 'License approval: {{get-request.name}}'
      - name: notify-legal
        call: msteams.sendMessage
        with:
          channel_id: $secrets.legal_channel
          text: 'License approval needed. Jira: {{create-approval.key}}.'
  consumes:
  - namespace: salesforce
    type: http
    baseUri: https://disney.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - path: /sobjects
      operations:
      - name: createRecord
        method: POST
  - namespace: sharepoint
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /sites/drive/items
      operations:
      - name: createDocument
        method: POST
  - namespace: jira
    type: http
    baseUri: https://disney.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - path: /issue
      operations:
      - name: createIssue
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Triggers a GitHub Advanced Security scan on a specified repository and posts vulnerability findings to Teams.

naftiko: '0.5'
info:
  label: GitHub Repository Security Scan
  description: Triggers a GitHub Advanced Security scan on a specified repository and posts vulnerability findings to Teams.
  tags:
  - security
  - github
  - teams
  - devops
  - vulnerability-scanning
capability:
  exposes:
    type: mcp
    namespace: disney-github-security-scan
    port: 8080
    tools:
    - name: scan-repository-security
      description: Initiates a GitHub code scanning analysis and posts a summary of critical and high vulnerabilities to the security Teams channel.
      inputParameters:
      - name: org
        type: string
        description: GitHub organization name
        required: true
        in: body
      - name: repo
        type: string
        description: Repository name
        required: true
        in: body
      steps:
      - name: get-code-scanning-alerts
        call: github.getCodeScanningAlerts
        with:
          org: '{{input.org}}'
          repo: '{{input.repo}}'
          severity: critical,high
          state: open
      - name: post-security-summary
        call: microsoft-teams.sendMessage
        with:
          channel: security-engineering
          message: 'Security scan for {{input.org}}/{{input.repo}}: {{get-code-scanning-alerts.total_count}} critical/high alerts. Review: https://github.com/{{input.org}}/{{input.repo}}/security/code-scanning'
  consumes:
  - namespace: github
    type: http
    baseUri: https://api.github.com
    authentication:
      type: bearer
      token: $secrets.github_token
    resources:
    - path: /repos/{org}/{repo}/code-scanning/alerts
      operations:
      - name: getCodeScanningAlerts
        method: GET
  - namespace: microsoft-teams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Publishes content metadata to Snowflake, updates Adobe Analytics tracking, creates a Salesforce marketing campaign, and announces on social media via LinkedIn.

naftiko: '0.5'
info:
  label: Content Release Pipeline
  description: Publishes content metadata to Snowflake, updates Adobe Analytics tracking, creates a Salesforce marketing campaign, and announces on social media via LinkedIn.
  tags:
  - content-release
  - snowflake
  - adobe-analytics
  - salesforce
  - linkedin
capability:
  exposes:
  - type: mcp
    namespace: content-release
    port: 8080
    tools:
    - name: release-content
      description: Orchestrate content release across Disney platforms.
      inputParameters:
      - name: title
        in: body
        type: string
        description: Content title.
      - name: release_date
        in: body
        type: string
        description: Release date.
      - name: platform
        in: body
        type: string
        description: Release platform.
      steps:
      - name: publish-metadata
        call: snowflake.execute-statement
        with:
          statement: INSERT INTO CONTENT.RELEASES (title, release_date, platform, status) VALUES ('{{title}}', '{{release_date}}', '{{platform}}', 'published')
      - name: setup-tracking
        call: adobe-analytics.createSegment
        with:
          name: release-{{title}}
          definition: content_title = '{{title}}'
      - name: create-campaign
        call: salesforce.create-campaign
        with:
          name: 'Release: {{title}}'
          start_date: '{{release_date}}'
          type: Content Release
      - name: announce
        call: linkedin.create-post
        with:
          text: 'Now streaming on {{platform}}: {{title}}! Watch today on Disney+.'
  consumes:
  - namespace: snowflake
    type: http
    baseUri: https://disney.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - path: /statements
      operations:
      - name: execute-statement
        method: POST
  - namespace: adobe-analytics
    type: http
    baseUri: https://analytics.adobe.io/api
    authentication:
      type: bearer
      token: $secrets.adobe_analytics_token
    resources:
    - path: /segments
      operations:
      - name: createSegment
        method: POST
  - namespace: salesforce
    type: http
    baseUri: https://disney.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - path: /sobjects/Campaign
      operations:
      - name: create-campaign
        method: POST
  - namespace: linkedin
    type: http
    baseUri: https://api.linkedin.com/v2
    authentication:
      type: bearer
      token: $secrets.linkedin_token
    resources:
    - path: /ugcPosts
      operations:
      - name: create-post
        method: POST

Identifies churned subscribers in Snowflake, creates marketing campaign, tracks in Jira, and reports via Microsoft Teams.

naftiko: '0.5'
info:
  label: Disney+ Subscriber Win-Back Pipeline
  description: Identifies churned subscribers in Snowflake, creates marketing campaign, tracks in Jira, and reports via Microsoft Teams.
  tags:
  - subscriber-retention
  - snowflake
  - salesforce
  - jira
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-subscriber-win-back-
    port: 8080
    tools:
    - name: subscriber-win-back
      description: Identifies churned subscribers in Snowflake.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: find-churned
        call: snowflake.execute-statement
        with:
          statement: SELECT subscriber_id FROM STREAMING.CHURNED WHERE churn_date >= DATEADD(day, -30, CURRENT_DATE())
      - name: create-campaign
        call: salesforce.createCampaign
        with:
          name: Win-Back Campaign
          type: Retention
      - name: create-tracker
        call: jira.createIssue
        with:
          project: GROWTH
          summary: 'Win-back: {{find-churned.row_count}} targets'
      - name: report
        call: msteams.sendMessage
        with:
          channel_id: $secrets.growth_channel
          text: 'Win-back launched: {{find-churned.row_count}} targets. Jira: {{create-tracker.key}}.'
  consumes:
  - namespace: snowflake
    type: http
    baseUri: https://disney.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - path: /statements
      operations:
      - name: execute-statement
        method: POST
  - namespace: salesforce
    type: http
    baseUri: https://disney.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - path: /sobjects
      operations:
      - name: createRecord
        method: POST
  - namespace: jira
    type: http
    baseUri: https://disney.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - path: /issue
      operations:
      - name: createIssue
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Monitors brand mentions via Splunk, stores results in Snowflake, creates Jira action items, and alerts marketing via Microsoft Teams.

naftiko: '0.5'
info:
  label: Social Media Brand Monitoring Pipeline
  description: Monitors brand mentions via Splunk, stores results in Snowflake, creates Jira action items, and alerts marketing via Microsoft Teams.
  tags:
  - brand-monitoring
  - splunk
  - snowflake
  - jira
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-social-media-brand-m
    port: 8080
    tools:
    - name: social-media-brand-monitoring
      description: Monitors brand mentions via Splunk.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: search-mentions
        call: splunk.search
        with:
          query: index=social brand={{brand}} earliest=-24h | stats count by platform
      - name: store-results
        call: snowflake.execute-statement
        with:
          statement: INSERT INTO MARKETING.BRAND_MENTIONS VALUES ('{{brand}}', CURRENT_DATE(), '{{search-mentions.count}}')
      - name: create-actions
        call: jira.createIssue
        with:
          project: MKT
          summary: 'Brand monitoring: {{brand}} - {{search-mentions.count}} mentions'
      - name: alert
        call: msteams.sendMessage
        with:
          channel_id: $secrets.marketing_channel
          text: 'Brand monitoring: {{brand}}. {{search-mentions.count}} mentions. Jira: {{create-actions.key}}.'
  consumes:
  - namespace: splunk
    type: http
    baseUri: https://splunk.disney.com:8089/services
    authentication:
      type: bearer
      token: $secrets.splunk_token
    resources:
    - path: /search/jobs
      operations:
      - name: search
        method: POST
  - namespace: snowflake
    type: http
    baseUri: https://disney.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - path: /statements
      operations:
      - name: execute-statement
        method: POST
  - namespace: jira
    type: http
    baseUri: https://disney.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - path: /issue
      operations:
      - name: createIssue
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Retrieves the current on-call schedule from PagerDuty for a given service and returns the primary and secondary engineers.

naftiko: '0.5'
info:
  label: On-Call Schedule Lookup
  description: Retrieves the current on-call schedule from PagerDuty for a given service and returns the primary and secondary engineers.
  tags:
  - oncall
  - pagerduty
  - devops
  - incident-response
capability:
  exposes:
    type: mcp
    namespace: disney-oncall-lookup
    port: 8080
    tools:
    - name: get-oncall-schedule
      description: Returns the current primary and secondary on-call engineers for a given PagerDuty schedule.
      inputParameters:
      - name: schedule_id
        type: string
        description: PagerDuty schedule ID
        required: true
        in: query
      call: pagerduty.getOncalls
      outputParameters:
      - name: oncall_list
        mapping: $.oncalls
  consumes:
  - namespace: pagerduty
    type: http
    baseUri: https://api.pagerduty.com
    authentication:
      type: bearer
      token: $secrets.pagerduty_token
    resources:
    - path: /oncalls
      operations:
      - name: getOncalls
        method: GET

Queries Grafana for infrastructure metrics across Disney data centers and cloud environments.

naftiko: '0.5'
info:
  label: Grafana Infrastructure Dashboard Query
  description: Queries Grafana for infrastructure metrics across Disney data centers and cloud environments.
  tags:
  - monitoring
  - grafana
  - infrastructure
capability:
  exposes:
  - type: mcp
    namespace: infra-dashboard
    port: 8080
    tools:
    - name: query-dashboard
      description: Query a Grafana dashboard for infrastructure metrics.
      inputParameters:
      - name: dashboard_uid
        in: body
        type: string
        description: Grafana dashboard UID.
      call: grafana.get-dashboard
      with:
        uid: '{{dashboard_uid}}'
      outputParameters:
      - name: dashboard
        type: object
        mapping: $.dashboard
  consumes:
  - namespace: grafana
    type: http
    baseUri: https://grafana.disney.com/api
    authentication:
      type: bearer
      token: $secrets.grafana_token
    resources:
    - path: /dashboards/uid/{{uid}}
      operations:
      - name: get-dashboard
        method: GET

Retrieves an open guest complaint from Salesforce and escalates it via ServiceNow to the park operations team when SLA breach is imminent.

naftiko: '0.5'
info:
  label: Theme Park Guest Complaint Case Escalation
  description: Retrieves an open guest complaint from Salesforce and escalates it via ServiceNow to the park operations team when SLA breach is imminent.
  tags:
  - guest-experience
  - salesforce
  - servicenow
  - theme-parks
  - sla
capability:
  exposes:
    type: mcp
    namespace: disney-case-escalation
    port: 8080
    tools:
    - name: escalate-guest-complaint
      description: Fetches the Salesforce case, assesses SLA breach risk, and creates a ServiceNow escalation ticket for park operations.
      inputParameters:
      - name: case_id
        type: string
        description: Salesforce case ID
        required: true
        in: body
      - name: escalation_reason
        type: string
        description: Reason for escalation
        required: true
        in: body
      steps:
      - name: get-salesforce-case
        call: salesforce.getCase
        with:
          caseId: '{{input.case_id}}'
      - name: create-escalation-ticket
        call: servicenow.createIncident
        with:
          short_description: 'Guest complaint escalation: {{get-salesforce-case.Subject}}'
          description: '{{get-salesforce-case.Description}} | Reason: {{input.escalation_reason}}'
          urgency: '2'
          assignment_group: Park Operations
      - name: update-salesforce-case
        call: salesforce-update.updateCase
        with:
          caseId: '{{input.case_id}}'
          status: Escalated
          escalation_ticket: '{{create-escalation-ticket.ticketNumber}}'
  consumes:
  - namespace: salesforce
    type: http
    baseUri: https://disney.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - path: /sobjects/Case/{caseId}
      operations:
      - name: getCase
        method: GET
  - namespace: salesforce-update
    type: http
    baseUri: https://disney.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - path: /sobjects/Case/{caseId}
      operations:
      - name: updateCase
        method: PATCH
  - namespace: servicenow
    type: http
    baseUri: https://disney.service-now.com/api/now/v1
    authentication:
      type: basic
      username: $secrets.servicenow_user
      password: $secrets.servicenow_password
    resources:
    - path: /table/incident
      operations:
      - name: createIncident
        method: POST

Pulls inventory from SAP, syncs to Snowflake, creates Jira tasks for low stock, and alerts merchandising via Microsoft Teams.

naftiko: '0.5'
info:
  label: Disney Store Inventory Sync Pipeline
  description: Pulls inventory from SAP, syncs to Snowflake, creates Jira tasks for low stock, and alerts merchandising via Microsoft Teams.
  tags:
  - retail
  - sap
  - snowflake
  - jira
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-disney-store-invento
    port: 8080
    tools:
    - name: disney-store-inventory-sync
      description: Pulls inventory from SAP.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: get-inventory
        call: sap.getInventory
        with:
          plant: '{{store_id}}'
      - name: sync
        call: snowflake.execute-statement
        with:
          statement: MERGE INTO RETAIL.INVENTORY USING (VALUES ('{{store_id}}'))
      - name: flag-low
        call: jira.createIssue
        with:
          project: MERCH
          summary: 'Low stock: Store {{store_id}}'
      - name: notify
        call: msteams.sendMessage
        with:
          channel_id: $secrets.merch_channel
          text: 'Inventory synced: Store {{store_id}}. Low stock flagged.'
  consumes:
  - namespace: sap
    type: http
    baseUri: https://disney-s4.sap.com/sap/opu/odata/sap/API_SRV
    authentication:
      type: basic
      username: $secrets.sap_user
      password: $secrets.sap_password
    resources:
    - path: /resource
      operations:
      - name: operation
        method: POST
  - namespace: snowflake
    type: http
    baseUri: https://disney.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - path: /statements
      operations:
      - name: execute-statement
        method: POST
  - namespace: jira
    type: http
    baseUri: https://disney.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - path: /issue
      operations:
      - name: createIssue
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Retrieves the status and details of a ServiceNow IT ticket by ticket number.

naftiko: '0.5'
info:
  label: ServiceNow IT Ticket Lookup
  description: Retrieves the status and details of a ServiceNow IT ticket by ticket number.
  tags:
  - itsm
  - servicenow
  - it-support
capability:
  exposes:
    type: mcp
    namespace: disney-ticket-lookup
    port: 8080
    tools:
    - name: lookup-it-ticket
      description: Fetches the current status, priority, and assignment of a ServiceNow incident ticket.
      inputParameters:
      - name: ticket_number
        type: string
        description: ServiceNow ticket number (e.g., INC0012345)
        required: true
        in: query
      call: servicenow.getIncident
      outputParameters:
      - name: ticket
        mapping: $.result
  consumes:
  - namespace: servicenow
    type: http
    baseUri: https://disney.service-now.com/api/now/v1
    authentication:
      type: basic
      username: $secrets.servicenow_user
      password: $secrets.servicenow_password
    resources:
    - path: /table/incident
      operations:
      - name: getIncident
        method: GET

Queries Snowflake bookings, updates Salesforce pipeline, refreshes Power BI dashboards, and alerts revenue team via Microsoft Teams.

naftiko: '0.5'
info:
  label: Cruise Line Booking Analytics Pipeline
  description: Queries Snowflake bookings, updates Salesforce pipeline, refreshes Power BI dashboards, and alerts revenue team via Microsoft Teams.
  tags:
  - cruise-line
  - snowflake
  - salesforce
  - power-bi
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-cruise-booking-analy
    port: 8080
    tools:
    - name: cruise-booking-analytics
      description: Queries Snowflake bookings.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: get-bookings
        call: snowflake.execute-statement
        with:
          statement: SELECT voyage, bookings, revenue FROM CRUISE.BOOKING_SUMMARY WHERE voyage_date >= CURRENT_DATE()
      - name: update-pipeline
        call: salesforce.createRecord
        with:
          object: Opportunity
          data: '{{get-bookings.results}}'
      - name: refresh
        call: powerbi.refreshDataset
        with:
          group_id: $secrets.powerbi_workspace_id
          dataset_id: $secrets.cruise_dataset_id
      - name: notify
        call: msteams.sendMessage
        with:
          channel_id: $secrets.cruise_channel
          text: 'Booking update: {{get-bookings.row_count}} voyages tracked.'
  consumes:
  - namespace: snowflake
    type: http
    baseUri: https://disney.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - path: /statements
      operations:
      - name: execute-statement
        method: POST
  - namespace: salesforce
    type: http
    baseUri: https://disney.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - path: /sobjects
      operations:
      - name: createRecord
        method: POST
  - namespace: powerbi
    type: http
    baseUri: https://api.powerbi.com/v1.0/myorg
    authentication:
      type: bearer
      token: $secrets.powerbi_token
    resources:
    - path: /groups/datasets/refreshes
      operations:
      - name: refreshDataset
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Retrieves health metrics for Disney+ streaming infrastructure from Datadog including latency, error rates, and uptime.

naftiko: '0.5'
info:
  label: Datadog Streaming Service Health
  description: Retrieves health metrics for Disney+ streaming infrastructure from Datadog including latency, error rates, and uptime.
  tags:
  - monitoring
  - datadog
  - streaming
capability:
  exposes:
  - type: mcp
    namespace: streaming-health
    port: 8080
    tools:
    - name: get-service-health
      description: Look up streaming service health metrics from Datadog.
      inputParameters:
      - name: service_name
        in: body
        type: string
        description: Streaming service name.
      call: datadog.query-metrics
      with:
        query: avg:streaming.health{service:{{service_name}}}
      outputParameters:
      - name: latency_ms
        type: number
        mapping: $.series[0].pointlist[-1][1]
      - name: error_rate
        type: number
        mapping: $.series[1].pointlist[-1][1]
  consumes:
  - type: http
    namespace: datadog
    baseUri: https://api.datadoghq.com/api/v1
    authentication:
      type: apikey
      key: $secrets.datadog_api_key
      placement: header
      name: DD-API-KEY
    resources:
    - path: /query
      operations:
      - name: query-metrics
        method: GET

Queries the Snowflake content catalog for Disney titles by genre, release year, or franchise.

naftiko: '0.5'
info:
  label: Snowflake Content Catalog Query
  description: Queries the Snowflake content catalog for Disney titles by genre, release year, or franchise.
  tags:
  - analytics
  - snowflake
  - content-catalog
capability:
  exposes:
  - type: mcp
    namespace: content-catalog
    port: 8080
    tools:
    - name: search-catalog
      description: Search the content catalog in Snowflake.
      inputParameters:
      - name: genre
        in: body
        type: string
        description: Content genre.
      - name: franchise
        in: body
        type: string
        description: Franchise name.
      call: snowflake.execute-statement
      with:
        statement: SELECT title, genre, release_date, franchise, rating FROM CONTENT.CATALOG WHERE genre = '{{genre}}' AND franchise LIKE '%{{franchise}}%' ORDER BY release_date DESC
      outputParameters:
      - name: titles
        type: array
        mapping: $.data
  consumes:
  - namespace: snowflake
    type: http
    baseUri: https://disney.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - path: /statements
      operations:
      - name: execute-statement
        method: POST

Transfers assets from Amazon S3, updates Jira tracker, creates Confluence handoff notes, and notifies post-production via Microsoft Teams.

naftiko: '0.5'
info:
  label: Studio Post-Production Handoff Pipeline
  description: Transfers assets from Amazon S3, updates Jira tracker, creates Confluence handoff notes, and notifies post-production via Microsoft Teams.
  tags:
  - post-production
  - s3
  - jira
  - confluence
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-post-production-hand
    port: 8080
    tools:
    - name: post-production-handoff
      description: Transfers assets from Amazon S3.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: transfer
        call: s3.putObject
        with:
          bucket: post-production
          key: '{{production_id}}/final'
      - name: update-tracker
        call: jira.createIssue
        with:
          project: PROD
          summary: 'Handoff: {{production_name}}'
      - name: create-handoff
        call: confluence.createPage
        with:
          space: PROD
          title: 'Handoff: {{production_name}}'
      - name: notify
        call: msteams.sendMessage
        with:
          channel_id: $secrets.post_prod_channel
          text: 'Handoff: {{production_name}}. Notes: {{create-handoff.web_url}}.'
  consumes:
  - namespace: s3
    type: http
    baseUri: https://s3.us-east-1.amazonaws.com
    authentication:
      type: awsSigV4
      accessKeyId: $secrets.aws_access_key_id
      secretAccessKey: $secrets.aws_secret_access_key
    resources:
    - path: /bucket/key
      operations:
      - name: putObject
        method: PUT
  - namespace: jira
    type: http
    baseUri: https://disney.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - path: /issue
      operations:
      - name: createIssue
        method: POST
  - namespace: confluence
    type: http
    baseUri: https://disney.atlassian.net/wiki/rest/api
    authentication:
      type: basic
      username: $secrets.confluence_user
      password: $secrets.confluence_api_token
    resources:
    - path: /content
      operations:
      - name: createPage
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Runs demand forecasting in Snowflake, creates SAP purchase requisitions, updates Jira supply chain tracker, and notifies merchandising via Microsoft Teams.

naftiko: '0.5'
info:
  label: Consumer Products Demand Forecast Pipeline
  description: Runs demand forecasting in Snowflake, creates SAP purchase requisitions, updates Jira supply chain tracker, and notifies merchandising via Microsoft Teams.
  tags:
  - consumer-products
  - snowflake
  - sap
  - jira
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-demand-forecast
    port: 8080
    tools:
    - name: run-forecast
      description: Orchestrate consumer products demand forecasting.
      inputParameters:
      - name: product_line
        type: string
        description: Product line name
        in: body
      - name: season
        type: string
        description: Target season
        in: body
      steps:
      - name: forecast
        call: snowflake.execute-statement
        with:
          statement: SELECT sku, predicted_demand, confidence FROM MERCH.DEMAND_FORECAST WHERE product_line = '{{product_line}}' AND season = '{{season}}'
      - name: create-reqs
        call: sap.createEvent
        with:
          type: PR
          product_line: '{{product_line}}'
          items: '{{forecast.results}}'
      - name: update-tracker
        call: jira.createIssue
        with:
          project: SUPPLY
          summary: 'Demand forecast: {{product_line}} - {{season}}'
      - name: notify
        call: msteams.sendMessage
        with:
          channel_id: $secrets.merch_planning_channel
          text: 'Demand forecast: {{product_line}} ({{season}}). {{forecast.row_count}} SKUs. Jira: {{update-tracker.key}}.'
  consumes:
  - namespace: snowflake
    type: http
    baseUri: https://disney.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - path: /statements
      operations:
      - name: execute-statement
        method: POST
  - namespace: sap
    type: http
    baseUri: https://disney-s4.sap.com/sap/opu/odata/sap/API_SRV
    authentication:
      type: basic
      username: $secrets.sap_user
      password: $secrets.sap_password
    resources:
    - path: /resource
      operations:
      - name: createEvent
        method: POST
  - namespace: jira
    type: http
    baseUri: https://disney.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - path: /issue
      operations:
      - name: createIssue
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Queries expiring rights in Snowflake, creates Jira renewal tasks, alerts legal via Microsoft Outlook, and updates Salesforce.

naftiko: '0.5'
info:
  label: Content Rights Expiration Pipeline
  description: Queries expiring rights in Snowflake, creates Jira renewal tasks, alerts legal via Microsoft Outlook, and updates Salesforce.
  tags:
  - rights-management
  - snowflake
  - jira
  - outlook
  - salesforce
capability:
  exposes:
    type: mcp
    namespace: disney-content-rights-expir
    port: 8080
    tools:
    - name: content-rights-expiration
      description: Queries expiring rights in Snowflake.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: find-expiring
        call: snowflake.execute-statement
        with:
          statement: SELECT title, expiration_date FROM RIGHTS.CONTENT_RIGHTS WHERE expiration_date BETWEEN CURRENT_DATE() AND DATEADD(day, 90, CURRENT_DATE())
      - name: create-tasks
        call: jira.createIssue
        with:
          project: RIGHTS
          summary: 'Expiring rights: {{find-expiring.row_count}} titles'
      - name: alert-legal
        call: outlook.sendEmail
        with:
          to: $secrets.rights_legal_email
          subject: Content Rights Expiring
      - name: update-sf
        call: salesforce.createRecord
        with:
          object: Task
          subject: Rights renewal review
  consumes:
  - namespace: snowflake
    type: http
    baseUri: https://disney.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - path: /statements
      operations:
      - name: execute-statement
        method: POST
  - namespace: jira
    type: http
    baseUri: https://disney.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - path: /issue
      operations:
      - name: createIssue
        method: POST
  - namespace: outlook
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /me/sendMail
      operations:
      - name: sendEmail
        method: POST
  - namespace: salesforce
    type: http
    baseUri: https://disney.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - path: /sobjects
      operations:
      - name: createRecord
        method: POST

Pulls Disney+ streaming engagement metrics from Snowflake and refreshes the executive Power BI dashboard.

naftiko: '0.5'
info:
  label: Streaming Content Performance Dashboard Refresh
  description: Pulls Disney+ streaming engagement metrics from Snowflake and refreshes the executive Power BI dashboard.
  tags:
  - analytics
  - streaming
  - snowflake
  - power-bi
  - disney-plus
capability:
  exposes:
    type: mcp
    namespace: disney-streaming-dashboard
    port: 8080
    tools:
    - name: refresh-streaming-dashboard
      description: Queries Snowflake for Disney+ content performance metrics and triggers a Power BI dataset refresh.
      inputParameters:
      - name: report_date
        type: string
        description: Date for the report in YYYY-MM-DD format
        required: true
        in: body
      - name: dataset_id
        type: string
        description: Power BI dataset ID to refresh
        required: true
        in: body
      steps:
      - name: query-streaming-metrics
        call: snowflake.executeQuery
        with:
          query: SELECT content_id, title, total_streams, watch_time_minutes, unique_viewers FROM disney_plus.content_performance WHERE report_date = '{{input.report_date}}'
      - name: refresh-powerbi
        call: power-bi.refreshDataset
        with:
          datasetId: '{{input.dataset_id}}'
          notifyOption: MailOnFailure
  consumes:
  - namespace: snowflake
    type: http
    baseUri: https://disney.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - path: /statements
      operations:
      - name: executeQuery
        method: POST
  - namespace: power-bi
    type: http
    baseUri: https://api.powerbi.com/v1.0/myorg
    authentication:
      type: bearer
      token: $secrets.powerbi_token
    resources:
    - path: /datasets/{datasetId}/refreshes
      operations:
      - name: refreshDataset
        method: POST

Sends surveys via Salesforce Marketing Cloud, collects responses in Snowflake, generates analysis in Confluence, and reports via Microsoft Teams.

naftiko: '0.5'
info:
  label: Park Visitor Experience Survey Pipeline
  description: Sends surveys via Salesforce Marketing Cloud, collects responses in Snowflake, generates analysis in Confluence, and reports via Microsoft Teams.
  tags:
  - guest-experience
  - salesforce-marketing-cloud
  - snowflake
  - confluence
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-park-visitor-survey-
    port: 8080
    tools:
    - name: park-visitor-survey
      description: Sends surveys via Salesforce Marketing Cloud.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: send-survey
        call: sfmc.sendEmail
        with:
          campaign: park-survey
          segment: '{{park}}-visitors'
      - name: collect-responses
        call: snowflake.execute-statement
        with:
          statement: SELECT rating, COUNT(*) FROM SURVEY.RESPONSES WHERE park = '{{park}}' GROUP BY rating
      - name: create-report
        call: confluence.createPage
        with:
          space: PARKS
          title: 'Survey: {{park}}'
      - name: notify
        call: msteams.sendMessage
        with:
          channel_id: $secrets.parks_channel
          text: 'Survey results published. Report: {{create-report.web_url}}.'
  consumes:
  - namespace: sfmc
    type: http
    baseUri: https://disney.rest.marketingcloudapis.com
    authentication:
      type: bearer
      token: $secrets.sfmc_token
    resources:
    - path: /messaging/v1/email/messages
      operations:
      - name: sendEmail
        method: POST
  - namespace: snowflake
    type: http
    baseUri: https://disney.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - path: /statements
      operations:
      - name: execute-statement
        method: POST
  - namespace: confluence
    type: http
    baseUri: https://disney.atlassian.net/wiki/rest/api
    authentication:
      type: basic
      username: $secrets.confluence_user
      password: $secrets.confluence_api_token
    resources:
    - path: /content
      operations:
      - name: createPage
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Generates presigned URLs for media assets stored in Amazon S3 for Disney content distribution.

naftiko: '0.5'
info:
  label: Amazon S3 Media Asset Retrieval
  description: Generates presigned URLs for media assets stored in Amazon S3 for Disney content distribution.
  tags:
  - storage
  - amazon-s3
  - media-assets
capability:
  exposes:
  - type: mcp
    namespace: media-assets
    port: 8080
    tools:
    - name: get-asset-url
      description: Generate a presigned URL for an S3 media asset.
      inputParameters:
      - name: bucket
        in: body
        type: string
        description: S3 bucket name.
      - name: key
        in: body
        type: string
        description: S3 object key.
      call: s3.get-presigned-url
      with:
        bucket: '{{bucket}}'
        key: '{{key}}'
      outputParameters:
      - name: presigned_url
        type: string
        mapping: $.url
  consumes:
  - namespace: s3
    type: http
    baseUri: https://s3.us-east-1.amazonaws.com
    authentication:
      type: awsSigV4
      accessKeyId: $secrets.aws_access_key_id
      secretAccessKey: $secrets.aws_secret_access_key
    resources:
    - path: /{{bucket}}/{{key}}
      operations:
      - name: get-presigned-url
        method: GET

Uploads dailies to Amazon S3, creates review tasks in Jira, documents notes in Confluence, and notifies the director and producers via Microsoft Teams.

naftiko: '0.5'
info:
  label: Studio Dailies Review Pipeline
  description: Uploads dailies to Amazon S3, creates review tasks in Jira, documents notes in Confluence, and notifies the director and producers via Microsoft Teams.
  tags:
  - production
  - amazon-s3
  - jira
  - confluence
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-dailies
    port: 8080
    tools:
    - name: process-dailies
      description: Orchestrate studio dailies review workflow.
      inputParameters:
      - name: production_id
        type: string
        description: Production identifier
        in: body
      - name: shoot_date
        type: string
        description: Shooting date
        in: body
      steps:
      - name: upload-dailies
        call: s3.putObject
        with:
          bucket: production-dailies
          key: '{{production_id}}/{{shoot_date}}'
      - name: create-review
        call: jira.createIssue
        with:
          project: PROD
          summary: 'Dailies review: {{production_id}} - {{shoot_date}}'
      - name: create-notes
        call: confluence.createPage
        with:
          space: PROD
          title: 'Dailies: {{production_id}} - {{shoot_date}}'
      - name: notify
        call: msteams.sendMessage
        with:
          channel_id: $secrets.production_channel
          text: 'Dailies uploaded: {{production_id}} ({{shoot_date}}). Review: {{create-review.key}}.'
  consumes:
  - namespace: s3
    type: http
    baseUri: https://s3.us-east-1.amazonaws.com
    authentication:
      type: awsSigV4
      accessKeyId: $secrets.aws_access_key_id
      secretAccessKey: $secrets.aws_secret_access_key
    resources:
    - path: /bucket/key
      operations:
      - name: putObject
        method: PUT
  - namespace: jira
    type: http
    baseUri: https://disney.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - path: /issue
      operations:
      - name: createIssue
        method: POST
  - namespace: confluence
    type: http
    baseUri: https://disney.atlassian.net/wiki/rest/api
    authentication:
      type: basic
      username: $secrets.confluence_user
      password: $secrets.confluence_api_token
    resources:
    - path: /content
      operations:
      - name: createPage
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Monitors render queue in Datadog, scales AWS instances, updates Jira tracker, and notifies animation team via Microsoft Teams.

naftiko: '0.5'
info:
  label: Animation Render Farm Scaling Pipeline
  description: Monitors render queue in Datadog, scales AWS instances, updates Jira tracker, and notifies animation team via Microsoft Teams.
  tags:
  - animation
  - datadog
  - jira
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-animation-render-sca
    port: 8080
    tools:
    - name: animation-render-scaling
      description: Monitors render queue in Datadog.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: check-queue
        call: datadog.queryMetrics
        with:
          query: avg:render.queue_depth{studio:animation}
      - name: update-tracker
        call: jira.createIssue
        with:
          project: ANIM
          summary: 'Render farm scaling: queue {{check-queue.value}}'
      - name: notify
        call: msteams.sendMessage
        with:
          channel_id: $secrets.animation_channel
          text: 'Render farm scaled. Queue: {{check-queue.value}} jobs.'
  consumes:
  - namespace: datadog
    type: http
    baseUri: https://api.datadoghq.com/api/v1
    authentication:
      type: apikey
      key: $secrets.datadog_api_key
    resources:
    - path: /query
      operations:
      - name: queryMetrics
        method: GET
  - namespace: jira
    type: http
    baseUri: https://disney.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - path: /issue
      operations:
      - name: createIssue
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Creates partner in Salesforce, provisions API access, documents in Confluence, and notifies partnerships via Microsoft Teams.

naftiko: '0.5'
info:
  label: Media Distribution Partner Onboarding Pipeline
  description: Creates partner in Salesforce, provisions API access, documents in Confluence, and notifies partnerships via Microsoft Teams.
  tags:
  - distribution
  - salesforce
  - confluence
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-media-distribution-p
    port: 8080
    tools:
    - name: media-distribution-partner-onboarding
      description: Creates partner in Salesforce.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: create-partner
        call: salesforce.createRecord
        with:
          object: Account
          name: '{{partner_name}}'
          type: Distribution Partner
      - name: create-docs
        call: confluence.createPage
        with:
          space: DIST
          title: 'Partner: {{partner_name}}'
      - name: notify
        call: msteams.sendMessage
        with:
          channel_id: $secrets.partnerships_channel
          text: 'New partner: {{partner_name}}. Docs: {{create-docs.web_url}}.'
  consumes:
  - namespace: salesforce
    type: http
    baseUri: https://disney.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - path: /sobjects
      operations:
      - name: createRecord
        method: POST
  - namespace: confluence
    type: http
    baseUri: https://disney.atlassian.net/wiki/rest/api
    authentication:
      type: basic
      username: $secrets.confluence_user
      password: $secrets.confluence_api_token
    resources:
    - path: /content
      operations:
      - name: createPage
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Retrieves a purchase order from SAP S/4HANA by PO number and returns the line item details.

naftiko: '0.5'
info:
  label: SAP Purchase Order Lookup
  description: Retrieves a purchase order from SAP S/4HANA by PO number and returns the line item details.
  tags:
  - erp
  - sap
  - procurement
  - finance
capability:
  exposes:
    type: mcp
    namespace: disney-sap-po-lookup
    port: 8080
    tools:
    - name: lookup-purchase-order
      description: Fetches a purchase order and its line items from SAP S/4HANA.
      inputParameters:
      - name: po_number
        type: string
        description: SAP purchase order number
        required: true
        in: query
      call: sap.getPurchaseOrder
      outputParameters:
      - name: po_details
        mapping: $.value
  consumes:
  - namespace: sap
    type: http
    baseUri: https://disney.s4hana.ondemand.com/sap/opu/odata/sap/API_PURCHASEORDER_PROCESS_SRV
    authentication:
      type: basic
      username: $secrets.sap_user
      password: $secrets.sap_password
    resources:
    - path: /A_PurchaseOrder('{po_number}')
      operations:
      - name: getPurchaseOrder
        method: GET

Pulls project milestones from Jira, generates a review document in Confluence, refreshes Tableau dashboards, and notifies Imagineering leadership via Microsoft Teams.

naftiko: '0.5'
info:
  label: Imagineering Project Review Pipeline
  description: Pulls project milestones from Jira, generates a review document in Confluence, refreshes Tableau dashboards, and notifies Imagineering leadership via Microsoft Teams.
  tags:
  - imagineering
  - jira
  - confluence
  - tableau
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-imagineering
    port: 8080
    tools:
    - name: generate-review
      description: Orchestrate Imagineering project review.
      inputParameters:
      - name: project_key
        type: string
        description: Jira project key
        in: body
      steps:
      - name: get-milestones
        call: jira.createIssue
        with:
          project: '{{project_key}}'
          summary: Milestone review
      - name: create-review
        call: confluence.createPage
        with:
          space: IMAGINE
          title: 'Project Review: {{project_key}}'
      - name: refresh-dashboard
        call: tableau.refreshExtract
        with:
          workbook_id: $secrets.imagineering_workbook_id
      - name: notify
        call: msteams.sendMessage
        with:
          channel_id: $secrets.imagineering_channel
          text: 'Project review: {{project_key}}. Report: {{create-review.web_url}}.'
  consumes:
  - namespace: jira
    type: http
    baseUri: https://disney.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - path: /issue
      operations:
      - name: createIssue
        method: POST
  - namespace: confluence
    type: http
    baseUri: https://disney.atlassian.net/wiki/rest/api
    authentication:
      type: basic
      username: $secrets.confluence_user
      password: $secrets.confluence_api_token
    resources:
    - path: /content
      operations:
      - name: createPage
        method: POST
  - namespace: tableau
    type: http
    baseUri: https://tableau.disney.com/api/3.19
    authentication:
      type: bearer
      token: $secrets.tableau_token
    resources:
    - path: /sites/default/workbooks/refresh
      operations:
      - name: refreshExtract
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Retrieves content performance metrics from Adobe Analytics for a specified time range and content asset.

naftiko: '0.5'
info:
  label: Adobe Analytics Content Performance Lookup
  description: Retrieves content performance metrics from Adobe Analytics for a specified time range and content asset.
  tags:
  - analytics
  - adobe-analytics
  - content
  - media
capability:
  exposes:
    type: mcp
    namespace: disney-content-performance
    port: 8080
    tools:
    - name: get-content-performance
      description: Fetches page views, time on page, and engagement metrics from Adobe Analytics for a content asset.
      inputParameters:
      - name: report_suite_id
        type: string
        description: Adobe Analytics report suite ID
        required: true
        in: query
      - name: asset_id
        type: string
        description: Content asset identifier
        required: true
        in: query
      - name: date_range
        type: string
        description: Date range in ISO 8601 interval format
        required: true
        in: query
      call: adobe-analytics.getReport
      outputParameters:
      - name: metrics
        mapping: $.rows
  consumes:
  - namespace: adobe-analytics
    type: http
    baseUri: https://analytics.adobe.io/api
    authentication:
      type: bearer
      token: $secrets.adobe_analytics_token
    resources:
    - path: /{report_suite_id}/reports
      operations:
      - name: getReport
        method: POST

Retrieves employee profile information from Workday including department, title, and manager.

naftiko: '0.5'
info:
  label: Workday Employee Directory Lookup
  description: Retrieves employee profile information from Workday including department, title, and manager.
  tags:
  - hr
  - workday
  - directory
capability:
  exposes:
  - type: mcp
    namespace: employee-directory
    port: 8080
    tools:
    - name: lookup-employee
      description: Look up employee details in Workday.
      inputParameters:
      - name: employee_id
        in: body
        type: string
        description: Workday employee ID.
      call: workday.get-worker
      with:
        employee_id: '{{employee_id}}'
      outputParameters:
      - name: name
        type: string
        mapping: $.Worker[0].Name
      - name: department
        type: string
        mapping: $.Worker[0].Department
      - name: title
        type: string
        mapping: $.Worker[0].Job_Title
  consumes:
  - namespace: workday
    type: http
    baseUri: https://wd5-impl-services1.workday.com/ccx/service/disney
    authentication:
      type: basic
      username: $secrets.workday_user
      password: $secrets.workday_password
    resources:
    - path: /Human_Resources/Worker/{{employee_id}}
      operations:
      - name: get-worker
        method: GET

Retrieves a pending expense report from SAP Concur and routes it for manager approval via Microsoft 365 email.

naftiko: '0.5'
info:
  label: Expense Report Approval Workflow
  description: Retrieves a pending expense report from SAP Concur and routes it for manager approval via Microsoft 365 email.
  tags:
  - finance
  - sap-concur
  - microsoft-365
  - expense-management
  - approval
capability:
  exposes:
    type: mcp
    namespace: disney-expense-approval
    port: 8080
    tools:
    - name: route-expense-for-approval
      description: Fetches a pending expense report from SAP Concur and sends an approval request to the manager via email.
      inputParameters:
      - name: expense_report_id
        type: string
        description: SAP Concur expense report ID
        required: true
        in: body
      - name: manager_email
        type: string
        description: Manager email address for approval routing
        required: true
        in: body
      steps:
      - name: get-expense-report
        call: sap-concur.getExpenseReport
        with:
          reportId: '{{input.expense_report_id}}'
      - name: send-approval-request
        call: microsoft-365.sendEmail
        with:
          to: '{{input.manager_email}}'
          subject: 'Expense Approval Required: {{get-expense-report.Name}} — ${{get-expense-report.Total}}'
          body: 'Please approve expense report {{input.expense_report_id}} submitted by {{get-expense-report.OwnerName}} for ${{get-expense-report.Total}}. Policy: {{get-expense-report.PolicyName}}'
  consumes:
  - namespace: sap-concur
    type: http
    baseUri: https://www.concursolutions.com/api/v3.0
    authentication:
      type: bearer
      token: $secrets.concur_token
    resources:
    - path: /expense/reports/{reportId}
      operations:
      - name: getExpenseReport
        method: GET
  - namespace: microsoft-365
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /me/sendMail
      operations:
      - name: sendEmail
        method: POST

Exports creative assets from a Figma file for Disney marketing and merchandising use.

naftiko: '0.5'
info:
  label: Figma Creative Asset Export
  description: Exports creative assets from a Figma file for Disney marketing and merchandising use.
  tags:
  - design
  - figma
  - creative
capability:
  exposes:
  - type: mcp
    namespace: figma-export
    port: 8080
    tools:
    - name: export-assets
      description: Export images from a Figma file.
      inputParameters:
      - name: file_key
        in: body
        type: string
        description: Figma file key.
      - name: node_ids
        in: body
        type: string
        description: Comma-separated node IDs to export.
      call: figma.get-images
      with:
        file_key: '{{file_key}}'
        ids: '{{node_ids}}'
      outputParameters:
      - name: images
        type: object
        mapping: $.images
  consumes:
  - namespace: figma
    type: http
    baseUri: https://api.figma.com/v1
    authentication:
      type: bearer
      token: $secrets.figma_token
    resources:
    - path: /images/{{file_key}}
      operations:
      - name: get-images
        method: GET

Triggers a Power BI dataset refresh for Disney audience analytics dashboards.

naftiko: '0.5'
info:
  label: Power BI Audience Analytics Refresh
  description: Triggers a Power BI dataset refresh for Disney audience analytics dashboards.
  tags:
  - analytics
  - power-bi
  - audience
capability:
  exposes:
  - type: mcp
    namespace: audience-analytics
    port: 8080
    tools:
    - name: refresh-audience-dashboard
      description: Trigger Power BI refresh for audience analytics.
      inputParameters:
      - name: dataset_id
        in: body
        type: string
        description: Power BI dataset ID.
      call: powerbi.refresh-dataset
      with:
        group_id: $secrets.powerbi_workspace_id
        dataset_id: '{{dataset_id}}'
      outputParameters:
      - name: request_id
        type: string
        mapping: $.requestId
  consumes:
  - namespace: powerbi
    type: http
    baseUri: https://api.powerbi.com/v1.0/myorg
    authentication:
      type: bearer
      token: $secrets.powerbi_token
    resources:
    - path: /groups/{{group_id}}/datasets/{{dataset_id}}/refreshes
      operations:
      - name: refresh-dataset
        method: POST

Checks inventory in SAP, creates purchase orders, updates Snowflake analytics, and notifies F&B managers via Microsoft Teams.

naftiko: '0.5'
info:
  label: Park Food and Beverage Ordering Pipeline
  description: Checks inventory in SAP, creates purchase orders, updates Snowflake analytics, and notifies F&B managers via Microsoft Teams.
  tags:
  - food-beverage
  - sap
  - snowflake
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-park-food-beverage-o
    port: 8080
    tools:
    - name: park-food-beverage-ordering
      description: Checks inventory in SAP.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: check-inv
        call: sap.getInventory
        with:
          plant: '{{park}}'
          category: food_beverage
      - name: create-orders
        call: sap.createEvent
        with:
          type: PO
          plant: '{{park}}'
      - name: update
        call: snowflake.execute-statement
        with:
          statement: INSERT INTO PARKS.FB_ORDERS VALUES ('{{park}}', CURRENT_DATE())
      - name: notify
        call: msteams.sendMessage
        with:
          channel_id: $secrets.fb_channel
          text: F&B orders placed for {{park}}.
  consumes:
  - namespace: sap
    type: http
    baseUri: https://disney-s4.sap.com/sap/opu/odata/sap/API_SRV
    authentication:
      type: basic
      username: $secrets.sap_user
      password: $secrets.sap_password
    resources:
    - path: /resource
      operations:
      - name: operation
        method: POST
  - namespace: snowflake
    type: http
    baseUri: https://disney.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - path: /statements
      operations:
      - name: execute-statement
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Checks render status in Datadog, pulls shot completion from Snowflake, updates Jira board, and notifies VFX supervisor via Microsoft Teams.

naftiko: '0.5'
info:
  label: VFX Pipeline Status Pipeline
  description: Checks render status in Datadog, pulls shot completion from Snowflake, updates Jira board, and notifies VFX supervisor via Microsoft Teams.
  tags:
  - vfx
  - datadog
  - snowflake
  - jira
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-vfx-pipeline-status-
    port: 8080
    tools:
    - name: vfx-status
      description: Checks render status in Datadog.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: check-renders
        call: datadog.queryMetrics
        with:
          query: sum:vfx.render.completed{production:{{production_id}}}
      - name: get-shots
        call: snowflake.execute-statement
        with:
          statement: SELECT shot_name, status FROM VFX.SHOT_TRACKER WHERE production_id = '{{production_id}}'
      - name: update-board
        call: jira.createIssue
        with:
          project: VFX
          summary: 'VFX status: {{production_id}}'
      - name: notify
        call: msteams.sendMessage
        with:
          channel_id: $secrets.vfx_channel
          text: 'VFX update: {{production_id}}. Renders: {{check-renders.value}}.'
  consumes:
  - namespace: datadog
    type: http
    baseUri: https://api.datadoghq.com/api/v1
    authentication:
      type: apikey
      key: $secrets.datadog_api_key
    resources:
    - path: /query
      operations:
      - name: queryMetrics
        method: GET
  - namespace: snowflake
    type: http
    baseUri: https://disney.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - path: /statements
      operations:
      - name: execute-statement
        method: POST
  - namespace: jira
    type: http
    baseUri: https://disney.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - path: /issue
      operations:
      - name: createIssue
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Creates contract in Salesforce, generates documents in SharePoint, sends for signature via DocuSign, and notifies talent relations via Microsoft Teams.

naftiko: '0.5'
info:
  label: Celebrity Talent Contract Pipeline
  description: Creates contract in Salesforce, generates documents in SharePoint, sends for signature via DocuSign, and notifies talent relations via Microsoft Teams.
  tags:
  - talent
  - salesforce
  - sharepoint
  - docusign
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-celebrity-talent-con
    port: 8080
    tools:
    - name: celebrity-talent-contract
      description: Creates contract in Salesforce.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: create-contract
        call: salesforce.createRecord
        with:
          object: Contract
          talent: '{{talent_name}}'
          production: '{{production}}'
      - name: generate-doc
        call: sharepoint.createDocument
        with:
          site: talent-contracts
          name: '{{talent_name}}-contract.docx'
      - name: send-signature
        call: docusign.createEnvelope
        with:
          document_url: '{{generate-doc.web_url}}'
          signer_email: '{{talent_email}}'
      - name: notify
        call: msteams.sendMessage
        with:
          channel_id: $secrets.talent_channel
          text: 'Contract sent: {{talent_name}}. DocuSign: {{send-signature.envelope_id}}.'
  consumes:
  - namespace: salesforce
    type: http
    baseUri: https://disney.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - path: /sobjects
      operations:
      - name: createRecord
        method: POST
  - namespace: sharepoint
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /sites/drive/items
      operations:
      - name: createDocument
        method: POST
  - namespace: docusign
    type: http
    baseUri: https://na3.docusign.net/restapi/v2.1
    authentication:
      type: bearer
      token: $secrets.docusign_token
    resources:
    - path: /accounts/envelopes
      operations:
      - name: createEnvelope
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Creates travel request in SAP Concur, checks policy in Workday, creates Jira approval, and notifies manager via Microsoft Teams.

naftiko: '0.5'
info:
  label: Corporate Travel Booking Pipeline
  description: Creates travel request in SAP Concur, checks policy in Workday, creates Jira approval, and notifies manager via Microsoft Teams.
  tags:
  - travel
  - concur
  - workday
  - jira
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-corporate-travel-boo
    port: 8080
    tools:
    - name: corporate-travel-booking
      description: Creates travel request in SAP Concur.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: create-request
        call: concur.createRequest
        with:
          employee_id: '{{employee_id}}'
          destination: '{{destination}}'
      - name: check-policy
        call: workday.getWorker
        with:
          employee_id: '{{employee_id}}'
      - name: create-approval
        call: jira.createIssue
        with:
          project: TRAVEL
          summary: 'Travel: {{employee_id}} to {{destination}}'
      - name: notify
        call: msteams.sendMessage
        with:
          channel_id: $secrets.travel_channel
          text: 'Travel request: {{destination}}. Approval: {{create-approval.key}}.'
  consumes:
  - namespace: concur
    type: http
    baseUri: https://us.api.concursolutions.com/api/v3.0
    authentication:
      type: bearer
      token: $secrets.concur_token
    resources:
    - path: /travelrequest
      operations:
      - name: createRequest
        method: POST
  - namespace: workday
    type: http
    baseUri: https://wd5-impl-services1.workday.com/ccx/service/disney
    authentication:
      type: basic
      username: $secrets.workday_user
      password: $secrets.workday_password
    resources:
    - path: /Human_Resources
      operations:
      - name: getWorker
        method: GET
  - namespace: jira
    type: http
    baseUri: https://disney.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - path: /issue
      operations:
      - name: createIssue
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Retrieves unestimated backlog items from Jira and posts a grooming digest to the product team Slack channel.

naftiko: '0.5'
info:
  label: Jira Backlog Grooming Digest
  description: Retrieves unestimated backlog items from Jira and posts a grooming digest to the product team Slack channel.
  tags:
  - jira
  - agile
  - backlog
  - slack
  - product-management
capability:
  exposes:
    type: mcp
    namespace: disney-backlog-digest
    port: 8080
    tools:
    - name: post-backlog-grooming-digest
      description: Fetches unestimated Jira backlog items and posts a grooming digest to the product Slack channel.
      inputParameters:
      - name: project_key
        type: string
        description: Jira project key
        required: true
        in: body
      steps:
      - name: get-unestimated-backlog
        call: jira.searchIssues
        with:
          jql: project = {{input.project_key}} AND status = Backlog AND story_points is EMPTY ORDER BY priority DESC
          maxResults: 20
      - name: post-backlog-digest
        call: slack.postMessage
        with:
          channel: '#product-backlog'
          text: 'Backlog grooming needed for {{input.project_key}}: {{get-unestimated-backlog.total}} unestimated items. Top items: {{get-unestimated-backlog.issues}}'
  consumes:
  - namespace: jira
    type: http
    baseUri: https://disney.atlassian.net/rest/api/3
    authentication:
      type: bearer
      token: $secrets.jira_token
    resources:
    - path: /search
      operations:
      - name: searchIssues
        method: GET
  - namespace: slack
    type: http
    baseUri: https://slack.com/api
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - path: /chat.postMessage
      operations:
      - name: postMessage
        method: POST

Detects cloud cost anomalies from Datadog, creates a Jira ticket for cost review, and notifies the FinOps team in Slack.

naftiko: '0.5'
info:
  label: Azure Cloud Cost Anomaly Responder
  description: Detects cloud cost anomalies from Datadog, creates a Jira ticket for cost review, and notifies the FinOps team in Slack.
  tags:
  - finops
  - cloud-cost
  - datadog
  - jira
  - slack
capability:
  exposes:
    type: mcp
    namespace: disney-cloud-cost-anomaly
    port: 8080
    tools:
    - name: respond-to-cost-anomaly
      description: Fetches cost anomaly events from Datadog, opens a Jira cost review ticket, and alerts the FinOps Slack channel.
      inputParameters:
      - name: alert_id
        type: string
        description: Datadog cost anomaly alert ID
        required: true
        in: body
      - name: jira_project_key
        type: string
        description: Jira project key for cost review tickets
        required: true
        in: body
      steps:
      - name: get-cost-alert
        call: datadog.getEvent
        with:
          event_id: '{{input.alert_id}}'
      - name: create-cost-review-ticket
        call: jira.createIssue
        with:
          project: '{{input.jira_project_key}}'
          issuetype: Task
          summary: 'Cloud cost anomaly detected: {{get-cost-alert.title}}'
          description: '{{get-cost-alert.text}}'
      - name: notify-finops
        call: slack.postMessage
        with:
          channel: '#finops-alerts'
          text: 'Cost anomaly detected: {{get-cost-alert.title}}. Jira review ticket: {{create-cost-review-ticket.key}}'
  consumes:
  - namespace: datadog
    type: http
    baseUri: https://api.datadoghq.com/api/v1
    authentication:
      type: apikey
      key: $secrets.datadog_api_key
      placement: header
      name: DD-API-KEY
    resources:
    - path: /events/{event_id}
      operations:
      - name: getEvent
        method: GET
  - namespace: jira
    type: http
    baseUri: https://disney.atlassian.net/rest/api/3
    authentication:
      type: bearer
      token: $secrets.jira_token
    resources:
    - path: /issue
      operations:
      - name: createIssue
        method: POST
  - namespace: slack
    type: http
    baseUri: https://slack.com/api
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - path: /chat.postMessage
      operations:
      - name: postMessage
        method: POST

Monitors reservations in Snowflake, adjusts capacity limits, updates ServiceNow alerts, and notifies park operations via Microsoft Teams.

naftiko: '0.5'
info:
  label: Theme Park Reservation Capacity Pipeline
  description: Monitors reservations in Snowflake, adjusts capacity limits, updates ServiceNow alerts, and notifies park operations via Microsoft Teams.
  tags:
  - parks-reservations
  - snowflake
  - servicenow
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-theme-park-reservati
    port: 8080
    tools:
    - name: theme-park-reservation-capacity
      description: Monitors reservations in Snowflake.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: check-reservations
        call: snowflake.execute-statement
        with:
          statement: SELECT park, reservation_count, capacity FROM PARKS.RESERVATIONS WHERE date = '{{target_date}}'
      - name: adjust-capacity
        call: snowflake.execute-statement
        with:
          statement: UPDATE PARKS.CAPACITY SET available = max_capacity - {{check-reservations.results[0].reservation_count}} WHERE park = '{{park}}'
      - name: create-alert
        call: servicenow.createIncident
        with:
          short_description: 'Capacity alert: {{park}} on {{target_date}}'
      - name: notify
        call: msteams.sendMessage
        with:
          channel_id: $secrets.park_ops_channel
          text: 'Capacity update: {{park}} on {{target_date}}. Reservations: {{check-reservations.results[0].reservation_count}}.'
  consumes:
  - namespace: snowflake
    type: http
    baseUri: https://disney.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - path: /statements
      operations:
      - name: execute-statement
        method: POST
  - namespace: servicenow
    type: http
    baseUri: https://disney.service-now.com/api/now/v1
    authentication:
      type: basic
      username: $secrets.servicenow_user
      password: $secrets.servicenow_password
    resources:
    - path: /table/incident
      operations:
      - name: createIncident
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Assigns Pluralsight courses based on Workday role, creates Jira development plan, and notifies via Microsoft Teams.

naftiko: '0.5'
info:
  label: Employee Learning Path Pipeline
  description: Assigns Pluralsight courses based on Workday role, creates Jira development plan, and notifies via Microsoft Teams.
  tags:
  - learning
  - workday
  - pluralsight
  - jira
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-employee-learning-pa
    port: 8080
    tools:
    - name: employee-learning-path
      description: Assigns Pluralsight courses based on Workday role.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: get-role
        call: workday.getWorker
        with:
          employee_id: '{{employee_id}}'
      - name: assign
        call: pluralsight.assignPath
        with:
          email: '{{get-role.email}}'
          path: '{{learning_path}}'
      - name: create-plan
        call: jira.createIssue
        with:
          project: LEARN
          summary: 'Dev plan: {{get-role.name}}'
      - name: notify
        call: msteams.sendMessage
        with:
          channel_id: $secrets.hr_channel
          text: 'Learning path assigned: {{get-role.name}}. Jira: {{create-plan.key}}.'
  consumes:
  - namespace: workday
    type: http
    baseUri: https://wd5-impl-services1.workday.com/ccx/service/disney
    authentication:
      type: basic
      username: $secrets.workday_user
      password: $secrets.workday_password
    resources:
    - path: /Human_Resources
      operations:
      - name: getWorker
        method: GET
  - namespace: pluralsight
    type: http
    baseUri: https://api.pluralsight.com/v1
    authentication:
      type: bearer
      token: $secrets.pluralsight_token
    resources:
    - path: /paths
      operations:
      - name: assignPath
        method: POST
  - namespace: jira
    type: http
    baseUri: https://disney.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - path: /issue
      operations:
      - name: createIssue
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Runs a data quality validation query on a Snowflake table and posts results to the data engineering Slack channel.

naftiko: '0.5'
info:
  label: Snowflake Data Quality Check
  description: Runs a data quality validation query on a Snowflake table and posts results to the data engineering Slack channel.
  tags:
  - data-quality
  - snowflake
  - slack
  - analytics
capability:
  exposes:
    type: mcp
    namespace: disney-data-quality-check
    port: 8080
    tools:
    - name: run-data-quality-check
      description: Executes a null/duplicate check query on a Snowflake table and posts the results to Slack.
      inputParameters:
      - name: table_name
        type: string
        description: Fully qualified Snowflake table name (db.schema.table)
        required: true
        in: body
      - name: check_column
        type: string
        description: Column to check for nulls or duplicates
        required: true
        in: body
      steps:
      - name: run-quality-query
        call: snowflake.executeQuery
        with:
          query: SELECT COUNT(*) AS total_rows, COUNT(DISTINCT {{input.check_column}}) AS distinct_vals, SUM(CASE WHEN {{input.check_column}} IS NULL THEN 1 ELSE 0 END) AS null_count FROM {{input.table_name}}
      - name: post-results
        call: slack.postMessage
        with:
          channel: '#data-engineering'
          text: 'Data quality check on {{input.table_name}}: {{run-quality-query.total_rows}} rows, {{run-quality-query.null_count}} nulls, {{run-quality-query.distinct_vals}} distinct values.'
  consumes:
  - namespace: snowflake
    type: http
    baseUri: https://disney.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - path: /statements
      operations:
      - name: executeQuery
        method: POST
  - namespace: slack
    type: http
    baseUri: https://slack.com/api
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - path: /chat.postMessage
      operations:
      - name: postMessage
        method: POST

Triggers ML model update in Azure Databricks, validates in Snowflake, updates weights in Amazon S3, and notifies data science via Microsoft Teams.

naftiko: '0.5'
info:
  label: Streaming Content Recommendation Update Pipeline
  description: Triggers ML model update in Azure Databricks, validates in Snowflake, updates weights in Amazon S3, and notifies data science via Microsoft Teams.
  tags:
  - recommendations
  - databricks
  - snowflake
  - s3
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-streaming-recommenda
    port: 8080
    tools:
    - name: streaming-recommendation-update
      description: Triggers ML model update in Azure Databricks.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: trigger-model
        call: databricks.runJob
        with:
          job_id: $secrets.recommendation_job_id
      - name: validate
        call: snowflake.execute-statement
        with:
          statement: SELECT f1_score FROM ML.MODEL_METRICS WHERE run_id = '{{trigger-model.run_id}}'
      - name: update-weights
        call: s3.putObject
        with:
          bucket: recommendation-models
          key: latest/weights.json
      - name: notify
        call: msteams.sendMessage
        with:
          channel_id: $secrets.ds_channel
          text: 'Recommendation model updated. F1: {{validate.results[0].f1_score}}.'
  consumes:
  - namespace: databricks
    type: http
    baseUri: https://adb-disney.azuredatabricks.net/api/2.1
    authentication:
      type: bearer
      token: $secrets.databricks_token
    resources:
    - path: /jobs/runs/submit
      operations:
      - name: runJob
        method: POST
  - namespace: snowflake
    type: http
    baseUri: https://disney.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - path: /statements
      operations:
      - name: execute-statement
        method: POST
  - namespace: s3
    type: http
    baseUri: https://s3.us-east-1.amazonaws.com
    authentication:
      type: awsSigV4
      accessKeyId: $secrets.aws_access_key_id
      secretAccessKey: $secrets.aws_secret_access_key
    resources:
    - path: /bucket/key
      operations:
      - name: putObject
        method: PUT
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Queries Amazon Redshift for Disney+ viewership analytics by title, region, and time period.

naftiko: '0.5'
info:
  label: Amazon Redshift Viewership Query
  description: Queries Amazon Redshift for Disney+ viewership analytics by title, region, and time period.
  tags:
  - analytics
  - amazon-redshift
  - streaming
capability:
  exposes:
  - type: mcp
    namespace: viewership-analytics
    port: 8080
    tools:
    - name: query-viewership
      description: Run a viewership query in Redshift.
      inputParameters:
      - name: title_id
        in: body
        type: string
        description: Content title ID.
      - name: region
        in: body
        type: string
        description: Geographic region.
      call: redshift.execute-query
      with:
        query: SELECT view_date, unique_viewers, total_hours, completion_rate FROM streaming.viewership WHERE title_id = '{{title_id}}' AND region = '{{region}}' ORDER BY view_date DESC LIMIT 30
      outputParameters:
      - name: data
        type: array
        mapping: $.Records
  consumes:
  - namespace: redshift
    type: http
    baseUri: https://redshift-data.us-east-1.amazonaws.com
    authentication:
      type: awsSigV4
      accessKeyId: $secrets.aws_access_key_id
      secretAccessKey: $secrets.aws_secret_access_key
    resources:
    - path: /
      operations:
      - name: execute-query
        method: POST

Retrieves vendor payment status and outstanding invoices from SAP.

naftiko: '0.5'
info:
  label: SAP Vendor Payment Status
  description: Retrieves vendor payment status and outstanding invoices from SAP.
  tags:
  - finance
  - sap
  - accounts-payable
capability:
  exposes:
  - type: mcp
    namespace: vendor-payments
    port: 8080
    tools:
    - name: get-payment-status
      description: Look up vendor payment status in SAP.
      inputParameters:
      - name: vendor_id
        in: body
        type: string
        description: SAP vendor ID.
      call: sap.get-vendor-items
      with:
        vendor_id: '{{vendor_id}}'
      outputParameters:
      - name: outstanding_amount
        type: number
        mapping: $.d.results[0].OutstandingAmount
      - name: last_payment_date
        type: string
        mapping: $.d.results[0].LastPaymentDate
  consumes:
  - namespace: sap
    type: http
    baseUri: https://disney-s4.sap.com/sap/opu/odata/sap/FI_VENDOR_LINE_ITEMS_SRV
    authentication:
      type: basic
      username: $secrets.sap_user
      password: $secrets.sap_password
    resources:
    - path: /A_VendorLineItems
      operations:
      - name: get-vendor-items
        method: GET

Checks weather data in Snowflake, adjusts park capacity, creates ServiceNow alerts, and notifies park operations via Microsoft Teams.

naftiko: '0.5'
info:
  label: Theme Park Weather Response Pipeline
  description: Checks weather data in Snowflake, adjusts park capacity, creates ServiceNow alerts, and notifies park operations via Microsoft Teams.
  tags:
  - parks-operations
  - snowflake
  - servicenow
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-theme-park-weather-r
    port: 8080
    tools:
    - name: theme-park-weather-response
      description: Checks weather data in Snowflake.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: check-weather
        call: snowflake.execute-statement
        with:
          statement: SELECT precipitation_pct, wind_speed FROM PARKS.WEATHER_FORECAST WHERE park = '{{park}}' AND forecast_date = CURRENT_DATE()
      - name: update-capacity
        call: snowflake.execute-statement
        with:
          statement: UPDATE PARKS.CAPACITY SET adjusted = max_capacity * 0.7 WHERE park = '{{park}}'
      - name: create-alert
        call: servicenow.createIncident
        with:
          short_description: 'Weather alert: {{park}}'
          urgency: '2'
      - name: notify
        call: msteams.sendMessage
        with:
          channel_id: $secrets.park_ops_channel
          text: 'Weather alert: {{park}}. Capacity adjusted.'
  consumes:
  - namespace: snowflake
    type: http
    baseUri: https://disney.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - path: /statements
      operations:
      - name: execute-statement
        method: POST
  - namespace: servicenow
    type: http
    baseUri: https://disney.service-now.com/api/now/v1
    authentication:
      type: basic
      username: $secrets.servicenow_user
      password: $secrets.servicenow_password
    resources:
    - path: /table/incident
      operations:
      - name: createIncident
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Sends a notification message to a Microsoft Teams channel for Disney internal communications.

naftiko: '0.5'
info:
  label: Microsoft Teams Channel Notification
  description: Sends a notification message to a Microsoft Teams channel for Disney internal communications.
  tags:
  - communications
  - microsoft-teams
  - notifications
capability:
  exposes:
  - type: mcp
    namespace: teams-notification
    port: 8080
    tools:
    - name: send-notification
      description: Post a notification to a Teams channel.
      inputParameters:
      - name: channel_id
        in: body
        type: string
        description: Teams channel ID.
      - name: message
        in: body
        type: string
        description: Notification message.
      call: msteams.post-message
      with:
        channel_id: '{{channel_id}}'
        text: '{{message}}'
      outputParameters:
      - name: message_id
        type: string
        mapping: $.id
  consumes:
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/{{channel_id}}/channels/general/messages
      operations:
      - name: post-message
        method: POST

Drafts and publishes a talent acquisition post to the Disney LinkedIn Company Page to support employer brand campaigns.

naftiko: '0.5'
info:
  label: LinkedIn Talent Brand Post Publisher
  description: Drafts and publishes a talent acquisition post to the Disney LinkedIn Company Page to support employer brand campaigns.
  tags:
  - recruiting
  - linkedin
  - employer-brand
  - hr
capability:
  exposes:
    type: mcp
    namespace: disney-linkedin-post
    port: 8080
    tools:
    - name: publish-talent-brand-post
      description: Publishes a LinkedIn company page post for Disney talent brand and recruitment campaigns.
      inputParameters:
      - name: post_text
        type: string
        description: Post copy text
        required: true
        in: body
      - name: media_url
        type: string
        description: Optional image or video URL to attach
        required: false
        in: body
      call: linkedin.createPost
      outputParameters:
      - name: post_id
        mapping: $.id
  consumes:
  - namespace: linkedin
    type: http
    baseUri: https://api.linkedin.com/v2
    authentication:
      type: bearer
      token: $secrets.linkedin_token
    resources:
    - path: /ugcPosts
      operations:
      - name: createPost
        method: POST

Queries Datadog for latency anomalies in a streaming service and posts an alert to Teams with a dashboard link.

naftiko: '0.5'
info:
  label: Datadog Latency Anomaly Alert
  description: Queries Datadog for latency anomalies in a streaming service and posts an alert to Teams with a dashboard link.
  tags:
  - observability
  - datadog
  - teams
  - latency
  - streaming
capability:
  exposes:
    type: mcp
    namespace: disney-latency-anomaly
    port: 8080
    tools:
    - name: alert-latency-anomaly
      description: Fetches open latency anomaly events from Datadog and posts an alert to the engineering Teams channel.
      inputParameters:
      - name: service_name
        type: string
        description: Service name tag in Datadog
        required: true
        in: query
      call: datadog.getEvents
      outputParameters:
      - name: events
        mapping: $.events
  consumes:
  - namespace: datadog
    type: http
    baseUri: https://api.datadoghq.com/api/v1
    authentication:
      type: apikey
      key: $secrets.datadog_api_key
      placement: header
      name: DD-API-KEY
    resources:
    - path: /events
      operations:
      - name: getEvents
        method: GET

Matches invoices in SAP with POs, flags discrepancies in Jira, updates Snowflake records, and notifies AP via Microsoft Teams.

naftiko: '0.5'
info:
  label: Vendor Invoice Processing Pipeline
  description: Matches invoices in SAP with POs, flags discrepancies in Jira, updates Snowflake records, and notifies AP via Microsoft Teams.
  tags:
  - accounts-payable
  - sap
  - jira
  - snowflake
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-vendor-invoice-proce
    port: 8080
    tools:
    - name: vendor-invoice-processing
      description: Matches invoices in SAP with POs.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: match
        call: sap.getInventory
        with:
          invoice: '{{invoice_number}}'
          po: '{{po_number}}'
      - name: flag
        call: jira.createIssue
        with:
          project: FIN
          summary: 'Invoice discrepancy: {{invoice_number}}'
      - name: update
        call: snowflake.execute-statement
        with:
          statement: UPDATE FINANCE.INVOICES SET status = 'reviewed' WHERE invoice_number = '{{invoice_number}}'
      - name: notify
        call: msteams.sendMessage
        with:
          channel_id: $secrets.ap_channel
          text: 'Invoice {{invoice_number}} processed. Jira: {{flag.key}}.'
  consumes:
  - namespace: sap
    type: http
    baseUri: https://disney-s4.sap.com/sap/opu/odata/sap/API_SRV
    authentication:
      type: basic
      username: $secrets.sap_user
      password: $secrets.sap_password
    resources:
    - path: /resource
      operations:
      - name: operation
        method: POST
  - namespace: jira
    type: http
    baseUri: https://disney.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - path: /issue
      operations:
      - name: createIssue
        method: POST
  - namespace: snowflake
    type: http
    baseUri: https://disney.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - path: /statements
      operations:
      - name: execute-statement
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Pulls data from Adobe Analytics, enriches with Salesforce leads, stores in Snowflake, and refreshes Tableau dashboards.

naftiko: '0.5'
info:
  label: Marketing Campaign Performance Pipeline
  description: Pulls data from Adobe Analytics, enriches with Salesforce leads, stores in Snowflake, and refreshes Tableau dashboards.
  tags:
  - marketing
  - adobe-analytics
  - salesforce
  - snowflake
  - tableau
capability:
  exposes:
    type: mcp
    namespace: disney-marketing-campaign-p
    port: 8080
    tools:
    - name: marketing-campaign-performance
      description: Pulls data from Adobe Analytics.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: get-metrics
        call: adobe-analytics.getReport
        with:
          campaign_id: '{{campaign_id}}'
      - name: get-leads
        call: salesforce.getOpportunity
        with:
          campaign: '{{campaign_id}}'
      - name: store
        call: snowflake.execute-statement
        with:
          statement: INSERT INTO MARKETING.CAMPAIGN_PERF VALUES ('{{campaign_id}}', '{{get-metrics.impressions}}')
      - name: refresh
        call: tableau.refreshExtract
        with:
          workbook_id: $secrets.marketing_workbook_id
  consumes:
  - namespace: adobe-analytics
    type: http
    baseUri: https://analytics.adobe.io/api
    authentication:
      type: bearer
      token: $secrets.adobe_analytics_token
    resources:
    - path: /reports
      operations:
      - name: getReport
        method: POST
  - namespace: salesforce
    type: http
    baseUri: https://disney.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - path: /sobjects
      operations:
      - name: createRecord
        method: POST
  - namespace: snowflake
    type: http
    baseUri: https://disney.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - path: /statements
      operations:
      - name: execute-statement
        method: POST
  - namespace: tableau
    type: http
    baseUri: https://tableau.disney.com/api/3.19
    authentication:
      type: bearer
      token: $secrets.tableau_token
    resources:
    - path: /sites/default/workbooks/refresh
      operations:
      - name: refreshExtract
        method: POST

Pulls budget data from SAP, compares with actuals in Snowflake, creates a Jira tracking issue, and sends summary to finance via Microsoft Teams.

naftiko: '0.5'
info:
  label: Film Production Budget Tracking Pipeline
  description: Pulls budget data from SAP, compares with actuals in Snowflake, creates a Jira tracking issue, and sends summary to finance via Microsoft Teams.
  tags:
  - finance
  - sap
  - snowflake
  - jira
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-production-budget
    port: 8080
    tools:
    - name: track-budget
      description: Orchestrate production budget tracking and variance reporting.
      inputParameters:
      - name: production_id
        type: string
        description: Production identifier
        in: body
      - name: period
        type: string
        description: Budget period
        in: body
      steps:
      - name: get-budget
        call: sap.getBudget
        with:
          production_id: '{{production_id}}'
          period: '{{period}}'
      - name: get-actuals
        call: snowflake.execute-statement
        with:
          statement: SELECT SUM(amount) as total_spend, category FROM FINANCE.PRODUCTION_ACTUALS WHERE production_id = '{{production_id}}' AND period = '{{period}}' GROUP BY category
      - name: create-tracker
        call: jira.createIssue
        with:
          project: PROD
          summary: 'Budget review: Production {{production_id}} - {{period}}'
      - name: notify-finance
        call: msteams.sendMessage
        with:
          channel_id: $secrets.finance_channel
          text: 'Budget report: Production {{production_id}}. Jira: {{create-tracker.key}}.'
  consumes:
  - namespace: sap
    type: http
    baseUri: https://disney-s4.sap.com/sap/opu/odata/sap/FI_BUDGET_SRV
    authentication:
      type: basic
      username: $secrets.sap_user
      password: $secrets.sap_password
    resources:
    - path: /A_Budget
      operations:
      - name: getBudget
        method: GET
  - namespace: snowflake
    type: http
    baseUri: https://disney.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - path: /statements
      operations:
      - name: execute-statement
        method: POST
  - namespace: jira
    type: http
    baseUri: https://disney.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - path: /issue
      operations:
      - name: createIssue
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Detects a CI/CD pipeline failure in GitHub Actions, creates a Jira bug ticket, and sends a Slack notification to the engineering team.

naftiko: '0.5'
info:
  label: CI/CD Pipeline Failure to Jira Bug
  description: Detects a CI/CD pipeline failure in GitHub Actions, creates a Jira bug ticket, and sends a Slack notification to the engineering team.
  tags:
  - devops
  - github
  - jira
  - slack
  - ci-cd
capability:
  exposes:
    type: mcp
    namespace: disney-cicd-failure-response
    port: 8080
    tools:
    - name: handle-pipeline-failure
      description: Opens a Jira bug for a failed GitHub Actions workflow and alerts the engineering channel in Slack.
      inputParameters:
      - name: workflow_run_id
        type: string
        description: GitHub Actions workflow run ID
        required: true
        in: body
      - name: repo
        type: string
        description: GitHub repository full name (org/repo)
        required: true
        in: body
      - name: jira_project_key
        type: string
        description: Jira project key for the bug ticket
        required: true
        in: body
      steps:
      - name: get-workflow-run
        call: github.getWorkflowRun
        with:
          repo: '{{input.repo}}'
          run_id: '{{input.workflow_run_id}}'
      - name: create-jira-bug
        call: jira.createIssue
        with:
          project: '{{input.jira_project_key}}'
          issuetype: Bug
          summary: 'CI/CD failure: {{get-workflow-run.name}} on {{get-workflow-run.head_branch}}'
          description: 'Workflow run {{input.workflow_run_id}} failed. URL: {{get-workflow-run.html_url}}'
      - name: notify-slack
        call: slack.postMessage
        with:
          channel: '#engineering-alerts'
          text: 'Pipeline failure in {{input.repo}}: {{get-workflow-run.name}}. Jira bug created: {{create-jira-bug.key}}'
  consumes:
  - namespace: github
    type: http
    baseUri: https://api.github.com
    authentication:
      type: bearer
      token: $secrets.github_token
    resources:
    - path: /repos/{repo}/actions/runs/{run_id}
      operations:
      - name: getWorkflowRun
        method: GET
  - namespace: jira
    type: http
    baseUri: https://disney.atlassian.net/rest/api/3
    authentication:
      type: bearer
      token: $secrets.jira_token
    resources:
    - path: /issue
      operations:
      - name: createIssue
        method: POST
  - namespace: slack
    type: http
    baseUri: https://slack.com/api
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - path: /chat.postMessage
      operations:
      - name: postMessage
        method: POST

Creates event in SAP, sets up ticketing in Salesforce, publishes tracking, and announces via LinkedIn.

naftiko: '0.5'
info:
  label: Theme Park Event Planning Pipeline
  description: Creates event in SAP, sets up ticketing in Salesforce, publishes tracking, and announces via LinkedIn.
  tags:
  - events
  - sap
  - salesforce
  - linkedin
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-theme-park-event-pla
    port: 8080
    tools:
    - name: theme-park-event-planning
      description: Creates event in SAP.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: create-event
        call: sap.createEvent
        with:
          name: '{{event_name}}'
          park: '{{park}}'
          date: '{{event_date}}'
      - name: setup-ticketing
        call: salesforce.createCampaign
        with:
          name: '{{event_name}} Tickets'
          type: Event
      - name: announce
        call: linkedin.createPost
        with:
          text: Join us for {{event_name}} at {{park}} on {{event_date}}!
      - name: notify
        call: msteams.sendMessage
        with:
          channel_id: $secrets.events_channel
          text: 'Event created: {{event_name}}. SF Campaign: {{setup-ticketing.id}}.'
  consumes:
  - namespace: sap
    type: http
    baseUri: https://disney-s4.sap.com/sap/opu/odata/sap/API_SRV
    authentication:
      type: basic
      username: $secrets.sap_user
      password: $secrets.sap_password
    resources:
    - path: /resource
      operations:
      - name: operation
        method: POST
  - namespace: salesforce
    type: http
    baseUri: https://disney.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - path: /sobjects
      operations:
      - name: createRecord
        method: POST
  - namespace: linkedin
    type: http
    baseUri: https://api.linkedin.com/v2
    authentication:
      type: bearer
      token: $secrets.linkedin_token
    resources:
    - path: /ugcPosts
      operations:
      - name: createPost
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Searches web mentions via Splunk, creates Salesforce legal cases, files Jira tickets, and alerts IP team via Microsoft Teams.

naftiko: '0.5'
info:
  label: IP Protection Monitoring Pipeline
  description: Searches web mentions via Splunk, creates Salesforce legal cases, files Jira tickets, and alerts IP team via Microsoft Teams.
  tags:
  - ip-protection
  - splunk
  - salesforce
  - jira
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-ip-protection-monito
    port: 8080
    tools:
    - name: ip-protection-monitoring
      description: Searches web mentions via Splunk.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: scan
        call: splunk.search
        with:
          query: index=web_monitoring ip_match=true brand={{brand}} earliest=-24h
      - name: create-case
        call: salesforce.createRecord
        with:
          object: Case
          subject: 'IP violation: {{brand}}'
      - name: create-ticket
        call: jira.createIssue
        with:
          project: LEGAL
          summary: 'IP investigation: {{brand}}'
      - name: notify
        call: msteams.sendMessage
        with:
          channel_id: $secrets.ip_channel
          text: 'IP alert: {{brand}}. {{scan.count}} violations. Case: {{create-case.id}}.'
  consumes:
  - namespace: splunk
    type: http
    baseUri: https://splunk.disney.com:8089/services
    authentication:
      type: bearer
      token: $secrets.splunk_token
    resources:
    - path: /search/jobs
      operations:
      - name: search
        method: POST
  - namespace: salesforce
    type: http
    baseUri: https://disney.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - path: /sobjects
      operations:
      - name: createRecord
        method: POST
  - namespace: jira
    type: http
    baseUri: https://disney.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - path: /issue
      operations:
      - name: createIssue
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Queries Datadog for CDN metrics, checks Cloudflare analytics, creates Jira optimization tickets, and notifies platform engineering via Microsoft Teams.

naftiko: '0.5'
info:
  label: Streaming CDN Performance Pipeline
  description: Queries Datadog for CDN metrics, checks Cloudflare analytics, creates Jira optimization tickets, and notifies platform engineering via Microsoft Teams.
  tags:
  - cdn
  - datadog
  - jira
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-streaming-cdn-perfor
    port: 8080
    tools:
    - name: streaming-cdn-performance
      description: Queries Datadog for CDN metrics.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: get-metrics
        call: datadog.queryMetrics
        with:
          query: avg:cdn.latency{service:disney-plus} by {region}
      - name: create-ticket
        call: jira.createIssue
        with:
          project: PLATFORM
          summary: 'CDN optimization: {{get-metrics.worst_region}}'
      - name: notify
        call: msteams.sendMessage
        with:
          channel_id: $secrets.platform_channel
          text: 'CDN alert: Worst region {{get-metrics.worst_region}}. Jira: {{create-ticket.key}}.'
  consumes:
  - namespace: datadog
    type: http
    baseUri: https://api.datadoghq.com/api/v1
    authentication:
      type: apikey
      key: $secrets.datadog_api_key
    resources:
    - path: /query
      operations:
      - name: queryMetrics
        method: GET
  - namespace: jira
    type: http
    baseUri: https://disney.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - path: /issue
      operations:
      - name: createIssue
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Scans for unauthorized content via Splunk, files takedown notices in Salesforce, creates Jira legal tickets, and notifies content protection via Microsoft Teams.

naftiko: '0.5'
info:
  label: Digital Content Piracy Detection Pipeline
  description: Scans for unauthorized content via Splunk, files takedown notices in Salesforce, creates Jira legal tickets, and notifies content protection via Microsoft Teams.
  tags:
  - content-protection
  - splunk
  - salesforce
  - jira
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-digital-piracy-detec
    port: 8080
    tools:
    - name: digital-piracy-detection
      description: Scans for unauthorized content via Splunk.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: scan
        call: splunk.search
        with:
          query: index=content_protection title={{title}} piracy_match=true earliest=-24h
      - name: file-takedown
        call: salesforce.createRecord
        with:
          object: Case
          subject: 'Takedown: {{title}}'
          type: DMCA
      - name: create-ticket
        call: jira.createIssue
        with:
          project: LEGAL
          summary: 'Piracy takedown: {{title}}'
      - name: notify
        call: msteams.sendMessage
        with:
          channel_id: $secrets.protection_channel
          text: 'Piracy detected: {{title}}. {{scan.count}} instances.'
  consumes:
  - namespace: splunk
    type: http
    baseUri: https://splunk.disney.com:8089/services
    authentication:
      type: bearer
      token: $secrets.splunk_token
    resources:
    - path: /search/jobs
      operations:
      - name: search
        method: POST
  - namespace: salesforce
    type: http
    baseUri: https://disney.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - path: /sobjects
      operations:
      - name: createRecord
        method: POST
  - namespace: jira
    type: http
    baseUri: https://disney.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - path: /issue
      operations:
      - name: createIssue
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Checks Pluralsight completion, updates Workday learning records, creates Jira follow-ups, and reports to compliance via Microsoft Teams.

naftiko: '0.5'
info:
  label: Compliance Training Tracking Pipeline
  description: Checks Pluralsight completion, updates Workday learning records, creates Jira follow-ups, and reports to compliance via Microsoft Teams.
  tags:
  - compliance
  - pluralsight
  - workday
  - jira
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-compliance-training-
    port: 8080
    tools:
    - name: compliance-training-tracking
      description: Checks Pluralsight completion.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: check
        call: pluralsight.assignPath
        with:
          course_id: '{{course_id}}'
          group: '{{department}}'
      - name: update
        call: workday.getWorker
        with:
          course: '{{course_id}}'
      - name: create-followups
        call: jira.createIssue
        with:
          project: COMPLY
          summary: 'Training overdue: {{course_id}} - {{department}}'
      - name: report
        call: msteams.sendMessage
        with:
          channel_id: $secrets.compliance_channel
          text: 'Training report: {{department}}. Follow-ups: {{create-followups.key}}.'
  consumes:
  - namespace: pluralsight
    type: http
    baseUri: https://api.pluralsight.com/v1
    authentication:
      type: bearer
      token: $secrets.pluralsight_token
    resources:
    - path: /paths
      operations:
      - name: assignPath
        method: POST
  - namespace: workday
    type: http
    baseUri: https://wd5-impl-services1.workday.com/ccx/service/disney
    authentication:
      type: basic
      username: $secrets.workday_user
      password: $secrets.workday_password
    resources:
    - path: /Human_Resources
      operations:
      - name: getWorker
        method: GET
  - namespace: jira
    type: http
    baseUri: https://disney.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - path: /issue
      operations:
      - name: createIssue
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Creates a casting call in Workday, posts to LinkedIn, tracks candidates in Jira, and coordinates via Microsoft Teams.

naftiko: '0.5'
info:
  label: Talent Casting Workflow Pipeline
  description: Creates a casting call in Workday, posts to LinkedIn, tracks candidates in Jira, and coordinates via Microsoft Teams.
  tags:
  - talent
  - workday
  - linkedin
  - jira
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-talent-casting-workf
    port: 8080
    tools:
    - name: talent-casting-workflow
      description: Creates a casting call in Workday.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: create-req
        call: workday.createRequisition
        with:
          title: '{{role_name}}'
          production: '{{production}}'
      - name: post-linkedin
        call: linkedin.createPost
        with:
          text: 'Casting: {{role_name}} for {{production}}. Apply now!'
      - name: create-tracker
        call: jira.createIssue
        with:
          project: CASTING
          summary: 'Casting: {{role_name}} - {{production}}'
      - name: notify
        call: msteams.sendMessage
        with:
          channel_id: $secrets.casting_channel
          text: 'Casting opened: {{role_name}}. Jira: {{create-tracker.key}}.'
  consumes:
  - namespace: workday
    type: http
    baseUri: https://wd5-impl-services1.workday.com/ccx/service/disney
    authentication:
      type: basic
      username: $secrets.workday_user
      password: $secrets.workday_password
    resources:
    - path: /Human_Resources
      operations:
      - name: getWorker
        method: GET
  - namespace: linkedin
    type: http
    baseUri: https://api.linkedin.com/v2
    authentication:
      type: bearer
      token: $secrets.linkedin_token
    resources:
    - path: /ugcPosts
      operations:
      - name: createPost
        method: POST
  - namespace: jira
    type: http
    baseUri: https://disney.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - path: /issue
      operations:
      - name: createIssue
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Scans data stores via Snowflake, checks retention policies, creates Jira compliance tickets, and reports to DPO via Microsoft Outlook.

naftiko: '0.5'
info:
  label: Data Privacy Compliance Audit Pipeline
  description: Scans data stores via Snowflake, checks retention policies, creates Jira compliance tickets, and reports to DPO via Microsoft Outlook.
  tags:
  - privacy
  - snowflake
  - jira
  - outlook
capability:
  exposes:
    type: mcp
    namespace: disney-data-privacy-audit-p
    port: 8080
    tools:
    - name: data-privacy-audit
      description: Scans data stores via Snowflake.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: scan
        call: snowflake.execute-statement
        with:
          statement: SELECT table_name, pii_columns FROM GOVERNANCE.DATA_CATALOG WHERE retention_days < DATEDIFF(day, last_purge_date, CURRENT_DATE())
      - name: create-ticket
        call: jira.createIssue
        with:
          project: PRIVACY
          summary: 'Data retention audit: {{scan.row_count}} tables overdue'
      - name: report
        call: outlook.sendEmail
        with:
          to: $secrets.dpo_email
          subject: Privacy Audit Report
  consumes:
  - namespace: snowflake
    type: http
    baseUri: https://disney.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - path: /statements
      operations:
      - name: execute-statement
        method: POST
  - namespace: jira
    type: http
    baseUri: https://disney.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - path: /issue
      operations:
      - name: createIssue
        method: POST
  - namespace: outlook
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /me/sendMail
      operations:
      - name: sendEmail
        method: POST

Pulls financials from SAP, generates analytics in Snowflake, creates Confluence report, and distributes via Microsoft Outlook.

naftiko: '0.5'
info:
  label: Corporate Quarterly Review Pipeline
  description: Pulls financials from SAP, generates analytics in Snowflake, creates Confluence report, and distributes via Microsoft Outlook.
  tags:
  - finance
  - sap
  - snowflake
  - confluence
  - outlook
capability:
  exposes:
    type: mcp
    namespace: disney-corporate-quarterly-
    port: 8080
    tools:
    - name: corporate-quarterly-review
      description: Pulls financials from SAP.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: get-financials
        call: sap.getBudget
        with:
          period: '{{quarter}}'
          scope: corporate
      - name: run-analytics
        call: snowflake.execute-statement
        with:
          statement: SELECT business_unit, revenue, expenses, margin FROM FINANCE.QUARTERLY_SUMMARY WHERE quarter = '{{quarter}}'
      - name: create-report
        call: confluence.createPage
        with:
          space: FINANCE
          title: Q{{quarter}} Review
      - name: distribute
        call: outlook.sendEmail
        with:
          to: $secrets.executive_dl
          subject: Q{{quarter}} Review Published
  consumes:
  - namespace: sap
    type: http
    baseUri: https://disney-s4.sap.com/sap/opu/odata/sap/API_SRV
    authentication:
      type: basic
      username: $secrets.sap_user
      password: $secrets.sap_password
    resources:
    - path: /resource
      operations:
      - name: operation
        method: POST
  - namespace: snowflake
    type: http
    baseUri: https://disney.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - path: /statements
      operations:
      - name: execute-statement
        method: POST
  - namespace: confluence
    type: http
    baseUri: https://disney.atlassian.net/wiki/rest/api
    authentication:
      type: basic
      username: $secrets.confluence_user
      password: $secrets.confluence_api_token
    resources:
    - path: /content
      operations:
      - name: createPage
        method: POST
  - namespace: outlook
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /me/sendMail
      operations:
      - name: sendEmail
        method: POST

Retrieves website traffic metrics from Google Analytics for Disney theme park web properties.

naftiko: '0.5'
info:
  label: Google Analytics Park Website Traffic
  description: Retrieves website traffic metrics from Google Analytics for Disney theme park web properties.
  tags:
  - analytics
  - google-analytics
  - theme-parks
capability:
  exposes:
  - type: mcp
    namespace: park-website-traffic
    port: 8080
    tools:
    - name: get-traffic
      description: Retrieve park website traffic metrics.
      inputParameters:
      - name: property_id
        in: body
        type: string
        description: GA4 property ID.
      - name: date_range
        in: body
        type: string
        description: Date range.
      call: ga.run-report
      with:
        property: '{{property_id}}'
        dateRange: '{{date_range}}'
      outputParameters:
      - name: sessions
        type: number
        mapping: $.rows[0].metricValues[0].value
      - name: users
        type: number
        mapping: $.rows[0].metricValues[1].value
  consumes:
  - namespace: ga
    type: http
    baseUri: https://analyticsdata.googleapis.com/v1beta
    authentication:
      type: bearer
      token: $secrets.google_analytics_token
    resources:
    - path: /properties/{{property}}:runReport
      operations:
      - name: run-report
        method: POST

Schedules broadcast in Snowflake, creates Jira production checklist, updates Adobe Analytics tracking, and notifies broadcast team via Microsoft Teams.

naftiko: '0.5'
info:
  label: ESPN+ Esports Tournament Broadcast Pipeline
  description: Schedules broadcast in Snowflake, creates Jira production checklist, updates Adobe Analytics tracking, and notifies broadcast team via Microsoft Teams.
  tags:
  - esports
  - snowflake
  - jira
  - adobe-analytics
  - microsoft-teams
capability:
  exposes:
    type: mcp
    namespace: disney-esports-tournament-b
    port: 8080
    tools:
    - name: esports-tournament-broadcast
      description: Schedules broadcast in Snowflake.
      inputParameters:
      - name: input_id
        type: string
        description: Primary input identifier
        in: body
      steps:
      - name: schedule
        call: snowflake.execute-statement
        with:
          statement: INSERT INTO BROADCAST.SCHEDULE (event, start_time, channel) VALUES ('{{event_name}}', '{{start_time}}', 'ESPN+')
      - name: create-checklist
        call: jira.createIssue
        with:
          project: BROADCAST
          summary: 'Broadcast: {{event_name}}'
      - name: setup-tracking
        call: adobe-analytics.getReport
        with:
          segment: broadcast-{{event_name}}
      - name: notify
        call: msteams.sendMessage
        with:
          channel_id: $secrets.broadcast_channel
          text: 'Broadcast scheduled: {{event_name}} at {{start_time}} on ESPN+.'
  consumes:
  - namespace: snowflake
    type: http
    baseUri: https://disney.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - path: /statements
      operations:
      - name: execute-statement
        method: POST
  - namespace: jira
    type: http
    baseUri: https://disney.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - path: /issue
      operations:
      - name: createIssue
        method: POST
  - namespace: adobe-analytics
    type: http
    baseUri: https://analytics.adobe.io/api
    authentication:
      type: bearer
      token: $secrets.adobe_analytics_token
    resources:
    - path: /reports
      operations:
      - name: getReport
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Creates a ServiceNow work order for ride maintenance, schedules vendor via SAP, notifies park operations in Microsoft Teams, and logs in Jira.

naftiko: '0.5'
info:
  label: Theme Park Ride Maintenance Pipeline
  description: Creates a ServiceNow work order for ride maintenance, schedules vendor via SAP, notifies park operations in Microsoft Teams, and logs in Jira.
  tags:
  - theme-parks
  - servicenow
  - sap
  - microsoft-teams
  - jira
capability:
  exposes:
  - type: mcp
    namespace: ride-maintenance
    port: 8080
    tools:
    - name: schedule-maintenance
      description: Orchestrate ride maintenance scheduling and notifications.
      inputParameters:
      - name: ride_name
        in: body
        type: string
        description: Ride name.
      - name: park
        in: body
        type: string
        description: Park name.
      - name: issue_description
        in: body
        type: string
        description: Maintenance issue.
      steps:
      - name: create-work-order
        call: servicenow.createRecord
        with:
          table: wm_order
          short_description: 'Ride maintenance: {{ride_name}} at {{park}}'
          description: '{{issue_description}}'
      - name: schedule-vendor
        call: sap.createMaintenanceOrder
        with:
          equipment: '{{ride_name}}'
          plant: '{{park}}'
          description: '{{issue_description}}'
      - name: create-tracker
        call: jira.createIssue
        with:
          project: PARKS
          summary: 'Ride maintenance: {{ride_name}} - {{park}}'
          description: 'ServiceNow: {{create-work-order.number}}. SAP: {{schedule-vendor.order_number}}.'
          issuetype: Task
      - name: notify-ops
        call: msteams.sendMessage
        with:
          channel_id: $secrets.park_ops_channel
          text: 'Ride maintenance: {{ride_name}} at {{park}}. Work order: {{create-work-order.number}}.'
  consumes:
  - namespace: servicenow
    type: http
    baseUri: https://disney.service-now.com/api/now/v1
    authentication:
      type: basic
      username: $secrets.servicenow_user
      password: $secrets.servicenow_password
    resources:
    - path: /table/{table}
      operations:
      - name: createRecord
        method: POST
  - namespace: sap
    type: http
    baseUri: https://disney-s4.sap.com/sap/opu/odata/sap/PM_ORDER_SRV
    authentication:
      type: basic
      username: $secrets.sap_user
      password: $secrets.sap_password
    resources:
    - path: /A_MaintenanceOrder
      operations:
      - name: createMaintenanceOrder
        method: POST
  - namespace: jira
    type: http
    baseUri: https://disney.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - path: /issue
      operations:
      - name: createIssue
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Looks up a new Salesforce lead and enriches the record with LinkedIn company and contact data before syncing back to Salesforce.

naftiko: '0.5'
info:
  label: Salesforce Lead Enrichment from LinkedIn
  description: Looks up a new Salesforce lead and enriches the record with LinkedIn company and contact data before syncing back to Salesforce.
  tags:
  - crm
  - salesforce
  - linkedin
  - lead-enrichment
  - sales
capability:
  exposes:
    type: mcp
    namespace: disney-lead-enrichment
    port: 8080
    tools:
    - name: enrich-salesforce-lead
      description: Fetches lead details from Salesforce, queries LinkedIn for company data, and updates the lead record with enriched information.
      inputParameters:
      - name: lead_id
        type: string
        description: Salesforce lead ID
        required: true
        in: body
      steps:
      - name: get-lead
        call: salesforce.getLead
        with:
          leadId: '{{input.lead_id}}'
      - name: lookup-linkedin-company
        call: linkedin.getCompany
        with:
          companyName: '{{get-lead.Company}}'
      - name: update-lead-record
        call: salesforce-update.updateLead
        with:
          leadId: '{{input.lead_id}}'
          linkedin_company_id: '{{lookup-linkedin-company.id}}'
          employee_count: '{{lookup-linkedin-company.employeeCount}}'
          industry: '{{lookup-linkedin-company.industries}}'
  consumes:
  - namespace: salesforce
    type: http
    baseUri: https://disney.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - path: /sobjects/Lead/{leadId}
      operations:
      - name: getLead
        method: GET
  - namespace: linkedin
    type: http
    baseUri: https://api.linkedin.com/v2
    authentication:
      type: bearer
      token: $secrets.linkedin_token
    resources:
    - path: /organizations
      operations:
      - name: getCompany
        method: GET
  - namespace: salesforce-update
    type: http
    baseUri: https://disney.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - path: /sobjects/Lead/{leadId}
      operations:
      - name: updateLead
        method: PATCH

Detects streaming outages via Datadog, creates a ServiceNow P1 incident, pages on-call via PagerDuty, and posts to the war room in Microsoft Teams.

naftiko: '0.5'
info:
  label: Streaming Outage Response Pipeline
  description: Detects streaming outages via Datadog, creates a ServiceNow P1 incident, pages on-call via PagerDuty, and posts to the war room in Microsoft Teams.
  tags:
  - incident-response
  - datadog
  - servicenow
  - pagerduty
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: streaming-outage
    port: 8080
    tools:
    - name: respond-to-outage
      description: Orchestrate streaming outage incident response.
      inputParameters:
      - name: monitor_id
        in: body
        type: string
        description: Datadog monitor ID.
      - name: service_name
        in: body
        type: string
        description: Affected streaming service.
      steps:
      - name: get-alert
        call: datadog.getMonitor
        with:
          monitor_id: '{{monitor_id}}'
      - name: create-incident
        call: servicenow.createIncident
        with:
          urgency: '1'
          impact: '1'
          short_description: '[P1] Streaming outage: {{service_name}}'
      - name: page-oncall
        call: pagerduty.createIncident
        with:
          title: '[P1] {{service_name}} streaming outage'
          service_id: $secrets.streaming_pagerduty_service
      - name: notify-war-room
        call: msteams.sendMessage
        with:
          channel_id: $secrets.streaming_war_room_channel
          text: 'STREAMING OUTAGE: {{service_name}}. ServiceNow: {{create-incident.number}}. PagerDuty: {{page-oncall.id}}.'
  consumes:
  - namespace: datadog
    type: http
    baseUri: https://api.datadoghq.com/api/v1
    authentication:
      type: apikey
      key: $secrets.datadog_api_key
    resources:
    - path: /monitor/{monitor_id}
      operations:
      - name: getMonitor
        method: GET
  - namespace: servicenow
    type: http
    baseUri: https://disney.service-now.com/api/now/v1
    authentication:
      type: basic
      username: $secrets.servicenow_user
      password: $secrets.servicenow_password
    resources:
    - path: /table/incident
      operations:
      - name: createIncident
        method: POST
  - namespace: pagerduty
    type: http
    baseUri: https://api.pagerduty.com
    authentication:
      type: bearer
      token: $secrets.pagerduty_token
    resources:
    - path: /incidents
      operations:
      - name: createIncident
        method: POST
  - namespace: msteams
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /teams/channels/messages
      operations:
      - name: sendMessage
        method: POST

Runs revenue forecasts in Snowflake, updates SAP financial projections, creates Jira review tasks, and distributes to leadership via Microsoft Outlook.

naftiko: '0.5'
info:
  label: Resort Revenue Forecasting Pipeline
  description: Runs revenue forecasts in Snowflake, updates SAP financial projections, creates Jira review tasks, and distributes to leadership via Microsoft Outlook.
  tags:
  - revenue
  - snowflake
  - sap
  - jira
  - microsoft-outlook
capability:
  exposes:
    type: mcp
    namespace: disney-resort-revenue
    port: 8080
    tools:
    - name: forecast-revenue
      description: Orchestrate resort revenue forecasting.
      inputParameters:
      - name: resort
        type: string
        description: Resort name
        in: body
      - name: quarter
        type: string
        description: Target quarter
        in: body
      steps:
      - name: run-forecast
        call: snowflake.execute-statement
        with:
          statement: CALL FINANCE.FORECAST_REVENUE('{{resort}}', '{{quarter}}')
      - name: update-sap
        call: sap.getBudget
        with:
          resort: '{{resort}}'
          quarter: '{{quarter}}'
      - name: create-review
        call: jira.createIssue
        with:
          project: FIN
          summary: 'Revenue forecast: {{resort}} Q{{quarter}}'
      - name: distribute
        call: outlook.sendEmail
        with:
          to: $secrets.resort_leadership_email
          subject: 'Revenue Forecast: {{resort}} Q{{quarter}}'
  consumes:
  - namespace: snowflake
    type: http
    baseUri: https://disney.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - path: /statements
      operations:
      - name: execute-statement
        method: POST
  - namespace: sap
    type: http
    baseUri: https://disney-s4.sap.com/sap/opu/odata/sap/FI_BUDGET_SRV
    authentication:
      type: basic
      username: $secrets.sap_user
      password: $secrets.sap_password
    resources:
    - path: /A_Budget
      operations:
      - name: getBudget
        method: GET
  - namespace: jira
    type: http
    baseUri: https://disney.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - path: /issue
      operations:
      - name: createIssue
        method: POST
  - namespace: outlook
    type: http
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - path: /me/sendMail
      operations:
      - name: sendEmail
        method: POST

Retrieves partner account details from Salesforce including licensing status and deal value.

naftiko: '0.5'
info:
  label: Salesforce Partner Account Lookup
  description: Retrieves partner account details from Salesforce including licensing status and deal value.
  tags:
  - partnerships
  - salesforce
  - licensing
capability:
  exposes:
  - type: mcp
    namespace: partner-accounts
    port: 8080
    tools:
    - name: get-partner
      description: Look up a partner account in Salesforce.
      inputParameters:
      - name: partner_name
        in: body
        type: string
        description: Partner company name.
      call: salesforce.query-account
      with:
        query: SELECT Id, Name, License_Status__c, Annual_Deal_Value__c FROM Account WHERE Name = '{{partner_name}}' AND Type = 'Partner'
      outputParameters:
      - name: account
        type: object
        mapping: $.records[0]
  consumes:
  - namespace: salesforce
    type: http
    baseUri: https://disney.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - path: /query
      operations:
      - name: query-account
        method: GET

Pulls ad metrics from Google Ads, aggregates in Snowflake, refreshes Power BI dashboards, and alerts sales via Slack.

naftiko: '0.5'
info:
  label: Digital Ad Performance Pipeline
  description: Pulls ad metrics from Google Ads, aggregates in Snowflake, refreshes Power BI dashboards, and alerts sales via Slack.
  tags:
  - advertising
  - google-ads
  - snowflake
  - power-bi
  - slack
capability:
  exposes:
  - type: mcp
    namespace: digital-ad-performance-pipeline
    port: 8080
    tools:
    - name: execute
      description: Pulls ad metrics from Google Ads, aggregates in Snowflake, refreshes Power BI dashboards, and alerts sales via Slack.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: google-ads.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: snowflake.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: power-bi.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: slack.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: google-ads
    baseUri: https://api.googleads.com/v1
    authentication:
      type: bearer
      token: $secrets.google_ads_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: snowflake
    baseUri: https://api.snowflake.com/v1
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: power-bi
    baseUri: https://api.powerbi.com/v1
    authentication:
      type: bearer
      token: $secrets.power_bi_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: slack
    baseUri: https://api.slack.com/v1
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST

Creates event in Airtable, assigns reporters via Asana, sets up live blog in Confluence, and promotes on Twitter.

naftiko: '0.5'
info:
  label: Event Coverage Coordination Pipeline
  description: Creates event in Airtable, assigns reporters via Asana, sets up live blog in Confluence, and promotes on Twitter.
  tags:
  - editorial
  - airtable
  - asana
  - confluence
  - twitter
capability:
  exposes:
  - type: mcp
    namespace: event-coverage-coordination-pipeline
    port: 8080
    tools:
    - name: execute
      description: Creates event in Airtable, assigns reporters via Asana, sets up live blog in Confluence, and promotes on Twitter.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: airtable.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: asana.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: confluence.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: twitter.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: airtable
    baseUri: https://api.airtable.com/v1
    authentication:
      type: bearer
      token: $secrets.airtable_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: asana
    baseUri: https://api.asana.com/v1
    authentication:
      type: bearer
      token: $secrets.asana_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: confluence
    baseUri: https://api.confluence.com/v1
    authentication:
      type: bearer
      token: $secrets.confluence_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: twitter
    baseUri: https://api.twitter.com/v1
    authentication:
      type: bearer
      token: $secrets.twitter_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST

Creates advertiser campaign in Salesforce, sets up ad inventory in Google Ads, configures tracking in Google Analytics, and sends confirmation via Microsoft Outlook.

naftiko: '0.5'
info:
  label: Advertiser Campaign Onboarding Pipeline
  description: Creates advertiser campaign in Salesforce, sets up ad inventory in Google Ads, configures tracking in Google Analytics, and sends confirmation via Microsoft Outlook.
  tags:
  - advertising
  - salesforce
  - google-ads
  - google-analytics
  - microsoft-outlook
capability:
  exposes:
  - type: mcp
    namespace: advertiser-campaign-onboarding-pipeline
    port: 8080
    tools:
    - name: execute
      description: Creates advertiser campaign in Salesforce, sets up ad inventory in Google Ads, configures tracking in Google Analytics, and sends confirmation via Microsoft Outlook.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: salesforce.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: google-ads.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: google-analytics.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: microsoft-outlook.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: salesforce
    baseUri: https://api.salesforce.com/v1
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: google-ads
    baseUri: https://api.googleads.com/v1
    authentication:
      type: bearer
      token: $secrets.google_ads_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: google-analytics
    baseUri: https://api.googleanalytics.com/v1
    authentication:
      type: bearer
      token: $secrets.google_analytics_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: microsoft-outlook
    baseUri: https://api.microsoftoutlook.com/v1
    authentication:
      type: bearer
      token: $secrets.microsoft_outlook_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST

Pulls Google Ads campaign revenue for Hearst digital properties and syncs to SAP for finance reconciliation.

naftiko: '0.5'
info:
  label: Google Ads Revenue Tracker
  description: Pulls Google Ads campaign revenue for Hearst digital properties and syncs to SAP for finance reconciliation.
  tags:
  - advertising
  - revenue
  - google-ads
  - sap
capability:
  exposes:
  - type: mcp
    namespace: ad-revenue
    port: 8080
    tools:
    - name: sync-ad-revenue
      description: Pull Google Ads revenue and sync to SAP.
      inputParameters:
      - name: period
        in: body
        type: string
        description: The revenue period.
      steps:
      - name: get-revenue
        type: call
        call: googleads.get-campaign-revenue
        with:
          period: '{{period}}'
      - name: post-to-sap
        type: call
        call: sap.post-ad-revenue
        with:
          period: '{{period}}'
          total_revenue: '{{get-revenue.total_revenue}}'
          campaign_count: '{{get-revenue.campaign_count}}'
  consumes:
  - type: http
    namespace: googleads
    baseUri: https://googleads.googleapis.com/v14
    authentication:
      type: bearer
      token: $secrets.google_ads_token
    resources:
    - name: reports
      path: /customers/{{customer_id}}/googleAds:searchStream
      operations:
      - name: get-campaign-revenue
        method: POST
  - type: http
    namespace: sap
    baseUri: https://hearst-s4.sap.com/sap/opu/odata/sap/ZFI_AD_REVENUE_SRV
    authentication:
      type: basic
      username: $secrets.sap_user
      password: $secrets.sap_password
    resources:
    - name: revenue
      path: /AdRevenueSet
      operations:
      - name: post-ad-revenue
        method: POST

Retrieves the status of editorial tasks from a Jira project.

naftiko: '0.5'
info:
  label: Jira Editorial Task Tracker
  description: Retrieves the status of editorial tasks from a Jira project.
  tags:
  - editorial
  - jira
  - project-management
capability:
  exposes:
  - type: mcp
    namespace: editorial-tasks
    port: 8080
    tools:
    - name: get-editorial-status
      description: Get editorial task status from Jira.
      inputParameters:
      - name: project_key
        in: body
        type: string
        description: The Jira project key.
      call: jira.get-project-summary
      with:
        project_key: '{{project_key}}'
      outputParameters:
      - name: total_issues
        type: integer
        mapping: $.total
      - name: open_issues
        type: integer
        mapping: $.open_count
  consumes:
  - type: http
    namespace: jira
    baseUri: https://hearst.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - name: search
      path: /search?jql=project={{project_key}}
      inputParameters:
      - name: project_key
        in: path
      operations:
      - name: get-project-summary
        method: GET

Pulls completions from Pluralsight, syncs with Workday, generates reports in Google Sheets, and alerts managers via Slack.

naftiko: '0.5'
info:
  label: Training Compliance Pipeline
  description: Pulls completions from Pluralsight, syncs with Workday, generates reports in Google Sheets, and alerts managers via Slack.
  tags:
  - training
  - pluralsight
  - workday
  - google-sheets
  - slack
capability:
  exposes:
  - type: mcp
    namespace: training-compliance-pipeline
    port: 8080
    tools:
    - name: execute
      description: Pulls completions from Pluralsight, syncs with Workday, generates reports in Google Sheets, and alerts managers via Slack.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: pluralsight.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: workday.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: google-sheets.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: slack.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: pluralsight
    baseUri: https://api.pluralsight.com/v1
    authentication:
      type: bearer
      token: $secrets.pluralsight_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: workday
    baseUri: https://api.workday.com/v1
    authentication:
      type: bearer
      token: $secrets.workday_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: google-sheets
    baseUri: https://api.googlesheets.com/v1
    authentication:
      type: bearer
      token: $secrets.google_sheets_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: slack
    baseUri: https://api.slack.com/v1
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST

Creates photo assignments in Asana, uploads to Google Drive, routes approvals via Slack, and publishes to CMS via SharePoint.

naftiko: '0.5'
info:
  label: Photo Editorial Workflow Pipeline
  description: Creates photo assignments in Asana, uploads to Google Drive, routes approvals via Slack, and publishes to CMS via SharePoint.
  tags:
  - editorial
  - asana
  - google-drive
  - slack
  - sharepoint
capability:
  exposes:
  - type: mcp
    namespace: photo-editorial-workflow-pipeline
    port: 8080
    tools:
    - name: execute
      description: Creates photo assignments in Asana, uploads to Google Drive, routes approvals via Slack, and publishes to CMS via SharePoint.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: asana.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: google-drive.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: slack.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: sharepoint.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: asana
    baseUri: https://api.asana.com/v1
    authentication:
      type: bearer
      token: $secrets.asana_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: google-drive
    baseUri: https://api.googledrive.com/v1
    authentication:
      type: bearer
      token: $secrets.google_drive_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: slack
    baseUri: https://api.slack.com/v1
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: sharepoint
    baseUri: https://api.sharepoint.com/v1
    authentication:
      type: bearer
      token: $secrets.sharepoint_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST

Creates a Google Ads campaign linked to a Salesforce opportunity, sets up tracking in Google Tag Manager, and notifies the ad ops team in Microsoft Teams.

naftiko: '0.5'
info:
  label: Advertising Campaign Creator
  description: Creates a Google Ads campaign linked to a Salesforce opportunity, sets up tracking in Google Tag Manager, and notifies the ad ops team in Microsoft Teams.
  tags:
  - advertising
  - google-ads
  - salesforce
  - google-tag-manager
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: ad-campaigns
    port: 8080
    tools:
    - name: create-ad-campaign
      description: Set up a Google Ads campaign linked to Salesforce and GTM.
      inputParameters:
      - name: opportunity_id
        in: body
        type: string
        description: The Salesforce opportunity ID.
      - name: budget_amount
        in: body
        type: number
        description: The daily budget in USD.
      steps:
      - name: get-opportunity
        type: call
        call: salesforce.get-opportunity
        with:
          opportunity_id: '{{opportunity_id}}'
      - name: create-campaign
        type: call
        call: googleads.create-campaign
        with:
          name: '{{get-opportunity.Name}}'
          budget: '{{budget_amount}}'
          advertiser: '{{get-opportunity.Account.Name}}'
      - name: setup-tracking
        type: call
        call: gtm.create-tag
        with:
          campaign_id: '{{create-campaign.id}}'
          tag_name: GA_{{create-campaign.id}}
      - name: notify-adops
        type: call
        call: msteams.send-message
        with:
          channel_id: ad-ops
          text: 'New ad campaign created: {{get-opportunity.Name}}. Google Ads ID: {{create-campaign.id}}. Budget: ${{budget_amount}}/day. GTM tag: {{setup-tracking.tag_id}}.'
  consumes:
  - type: http
    namespace: salesforce
    baseUri: https://hearst.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: opportunities
      path: /sobjects/Opportunity/{{opportunity_id}}
      inputParameters:
      - name: opportunity_id
        in: path
      operations:
      - name: get-opportunity
        method: GET
  - type: http
    namespace: googleads
    baseUri: https://googleads.googleapis.com/v14
    authentication:
      type: bearer
      token: $secrets.google_ads_token
    resources:
    - name: campaigns
      path: /customers/{{customer_id}}/campaigns
      operations:
      - name: create-campaign
        method: POST
  - type: http
    namespace: gtm
    baseUri: https://www.googleapis.com/tagmanager/v2
    authentication:
      type: bearer
      token: $secrets.gtm_token
    resources:
    - name: tags
      path: /accounts/{{account_id}}/containers/{{container_id}}/workspaces/{{workspace_id}}/tags
      operations:
      - name: create-tag
        method: POST
  - type: http
    namespace: msteams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - name: channel-messages
      path: /teams/{{channel_id}}/channels/general/messages
      inputParameters:
      - name: channel_id
        in: path
      operations:
      - name: send-message
        method: POST

Aggregates content metrics from Snowflake, generates Power BI reports, creates Confluence summaries, and distributes via Slack.

naftiko: '0.5'
info:
  label: Weekly Editorial Digest Pipeline
  description: Aggregates content metrics from Snowflake, generates Power BI reports, creates Confluence summaries, and distributes via Slack.
  tags:
  - editorial
  - snowflake
  - power-bi
  - confluence
  - slack
capability:
  exposes:
  - type: mcp
    namespace: weekly-editorial-digest-pipeline
    port: 8080
    tools:
    - name: execute
      description: Aggregates content metrics from Snowflake, generates Power BI reports, creates Confluence summaries, and distributes via Slack.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: snowflake.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: power-bi.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: confluence.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: slack.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: snowflake
    baseUri: https://api.snowflake.com/v1
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: power-bi
    baseUri: https://api.powerbi.com/v1
    authentication:
      type: bearer
      token: $secrets.power_bi_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: confluence
    baseUri: https://api.confluence.com/v1
    authentication:
      type: bearer
      token: $secrets.confluence_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: slack
    baseUri: https://api.slack.com/v1
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST

When an article reaches high engagement on Google Analytics, automatically syndicates to partner outlets via WordPress multisite, posts to all social channels via HubSpot, and logs syndication in Salesforce.

naftiko: '0.5'
info:
  label: Content Syndication Pipeline
  description: When an article reaches high engagement on Google Analytics, automatically syndicates to partner outlets via WordPress multisite, posts to all social channels via HubSpot, and logs syndication in Salesforce.
  tags:
  - publishing
  - syndication
  - google-analytics
  - wordpress
  - hubspot
  - salesforce
capability:
  exposes:
  - type: mcp
    namespace: content-syndication
    port: 8080
    tools:
    - name: syndicate-content
      description: Syndicate high-performing content to partner outlets and social channels.
      inputParameters:
      - name: article_id
        in: body
        type: string
        description: The WordPress article ID.
      - name: partner_site_ids
        in: body
        type: array
        description: List of partner WordPress site IDs.
      steps:
      - name: get-article
        type: call
        call: wordpress.get-post
        with:
          post_id: '{{article_id}}'
      - name: syndicate-post
        type: call
        call: wordpress.create-post
        with:
          site_id: '{{partner_site_ids[0]}}'
          title: '{{get-article.title}}'
          content: '{{get-article.content}}'
          source_url: '{{get-article.url}}'
      - name: social-broadcast
        type: call
        call: hubspot.create-broadcast
        with:
          content: '{{get-article.title}} - Read more: {{get-article.url}} #Hearst'
      - name: log-syndication
        type: call
        call: salesforce.create-syndication-record
        with:
          article_id: '{{article_id}}'
          partner_count: '{{partner_site_ids.length}}'
          status: Syndicated
  consumes:
  - type: http
    namespace: wordpress
    baseUri: https://hearst.com/wp-json/wp/v2
    authentication:
      type: bearer
      token: $secrets.wordpress_token
    resources:
    - name: posts
      path: /posts/{{post_id}}
      inputParameters:
      - name: post_id
        in: path
      operations:
      - name: get-post
        method: GET
      - name: create-post
        method: POST
  - type: http
    namespace: hubspot
    baseUri: https://api.hubapi.com
    authentication:
      type: bearer
      token: $secrets.hubspot_token
    resources:
    - name: broadcasts
      path: /broadcast/v1/broadcasts
      operations:
      - name: create-broadcast
        method: POST
  - type: http
    namespace: salesforce
    baseUri: https://hearst.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: syndication
      path: /sobjects/Content_Syndication__c
      operations:
      - name: create-syndication-record
        method: POST

Sends a formatted email via Microsoft Outlook.

naftiko: '0.5'
info:
  label: Microsoft Outlook Email Sender
  description: Sends a formatted email via Microsoft Outlook.
  tags:
  - communications
  - email
  - microsoft-outlook
capability:
  exposes:
  - type: mcp
    namespace: email-sending
    port: 8080
    tools:
    - name: send-email
      description: Send an email via Microsoft Outlook.
      inputParameters:
      - name: to_address
        in: body
        type: string
        description: Recipient email.
      - name: subject
        in: body
        type: string
        description: Email subject.
      - name: body_text
        in: body
        type: string
        description: Email body.
      call: outlook.send-mail
      with:
        to: '{{to_address}}'
        subject: '{{subject}}'
        body: '{{body_text}}'
  consumes:
  - type: http
    namespace: outlook
    baseUri: https://graph.microsoft.com/v1.0/me
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - name: mail
      path: /sendMail
      operations:
      - name: send-mail
        method: POST

Pulls subscription revenue data from SAP, enriches with Salesforce subscriber counts, and pushes to Power BI for finance visibility.

naftiko: '0.5'
info:
  label: Subscription Revenue Dashboard Sync
  description: Pulls subscription revenue data from SAP, enriches with Salesforce subscriber counts, and pushes to Power BI for finance visibility.
  tags:
  - subscriptions
  - finance
  - sap
  - salesforce
  - power-bi
capability:
  exposes:
  - type: mcp
    namespace: subscription-revenue
    port: 8080
    tools:
    - name: sync-subscription-revenue
      description: Sync subscription revenue from SAP and Salesforce to Power BI.
      inputParameters:
      - name: period
        in: body
        type: string
        description: The revenue period (e.g. 2026-03).
      steps:
      - name: get-revenue
        type: call
        call: sap.get-subscription-revenue
        with:
          period: '{{period}}'
      - name: get-subscribers
        type: call
        call: salesforce.get-subscriber-count
        with:
          period: '{{period}}'
      - name: push-to-bi
        type: call
        call: powerbi.push-rows
        with:
          dataset_id: subscription_revenue_ds
          table_name: Revenue
          rows:
          - period: '{{period}}'
            revenue: '{{get-revenue.total_revenue}}'
            subscribers: '{{get-subscribers.active_count}}'
            churn_rate: '{{get-subscribers.churn_rate}}'
            arpu: '{{get-revenue.arpu}}'
  consumes:
  - type: http
    namespace: sap
    baseUri: https://hearst-s4.sap.com/sap/opu/odata/sap/ZFI_SUBSCRIPTION_SRV
    authentication:
      type: basic
      username: $secrets.sap_user
      password: $secrets.sap_password
    resources:
    - name: revenue
      path: /SubscriptionRevenueSet('{{period}}')
      inputParameters:
      - name: period
        in: path
      operations:
      - name: get-subscription-revenue
        method: GET
  - type: http
    namespace: salesforce
    baseUri: https://hearst.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: subscribers
      path: /sobjects/Subscriber_Metrics__c?period={{period}}
      inputParameters:
      - name: period
        in: query
      operations:
      - name: get-subscriber-count
        method: GET
  - type: http
    namespace: powerbi
    baseUri: https://api.powerbi.com/v1.0/myorg
    authentication:
      type: bearer
      token: $secrets.powerbi_token
    resources:
    - name: datasets
      path: /datasets/{{dataset_id}}/tables/{{table_name}}/rows
      inputParameters:
      - name: dataset_id
        in: path
      - name: table_name
        in: path
      operations:
      - name: push-rows
        method: POST

Creates ad booking in Salesforce, routes creative approval via Asana, archives assets in Box, and tracks revenue in Google Sheets.

naftiko: '0.5'
info:
  label: Print Advertising Pipeline
  description: Creates ad booking in Salesforce, routes creative approval via Asana, archives assets in Box, and tracks revenue in Google Sheets.
  tags:
  - advertising
  - salesforce
  - asana
  - box
  - google-sheets
capability:
  exposes:
  - type: mcp
    namespace: print-advertising-pipeline
    port: 8080
    tools:
    - name: execute
      description: Creates ad booking in Salesforce, routes creative approval via Asana, archives assets in Box, and tracks revenue in Google Sheets.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: salesforce.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: asana.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: box.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: google-sheets.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: salesforce
    baseUri: https://api.salesforce.com/v1
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: asana
    baseUri: https://api.asana.com/v1
    authentication:
      type: bearer
      token: $secrets.asana_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: box
    baseUri: https://api.box.com/v1
    authentication:
      type: bearer
      token: $secrets.box_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: google-sheets
    baseUri: https://api.googlesheets.com/v1
    authentication:
      type: bearer
      token: $secrets.google_sheets_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST

Pulls subscriber churn data from Salesforce, analyzes engagement patterns from Adobe Analytics, and publishes a retention report to Confluence.

naftiko: '0.5'
info:
  label: Subscriber Churn Analysis
  description: Pulls subscriber churn data from Salesforce, analyzes engagement patterns from Adobe Analytics, and publishes a retention report to Confluence.
  tags:
  - subscriptions
  - analytics
  - salesforce
  - adobe-analytics
  - confluence
capability:
  exposes:
  - type: mcp
    namespace: churn-analysis
    port: 8080
    tools:
    - name: analyze-churn
      description: Analyze subscriber churn patterns and publish a retention report.
      inputParameters:
      - name: publication
        in: body
        type: string
        description: The publication name.
      - name: period
        in: body
        type: string
        description: The analysis period.
      steps:
      - name: get-churn-data
        type: call
        call: salesforce.get-churn-metrics
        with:
          publication: '{{publication}}'
          period: '{{period}}'
      - name: get-engagement
        type: call
        call: adobe-analytics.get-engagement
        with:
          publication: '{{publication}}'
      - name: publish-report
        type: call
        call: confluence.create-page
        with:
          space_key: SUB
          title: 'Churn Analysis: {{publication}} - {{period}}'
          body: 'Churn rate: {{get-churn-data.churn_rate}}. Churned subscribers: {{get-churn-data.churned_count}}. Avg engagement before churn: {{get-engagement.avg_sessions}}. Top churn reason: {{get-churn-data.top_reason}}.'
  consumes:
  - type: http
    namespace: salesforce
    baseUri: https://hearst.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: churn
      path: /sobjects/Churn_Metrics__c?publication={{publication}}&period={{period}}
      inputParameters:
      - name: publication
        in: query
      - name: period
        in: query
      operations:
      - name: get-churn-metrics
        method: GET
  - type: http
    namespace: adobe-analytics
    baseUri: https://analytics.adobe.io/api
    authentication:
      type: bearer
      token: $secrets.adobe_analytics_token
    resources:
    - name: reports
      path: /hearst/reports
      operations:
      - name: get-engagement
        method: POST
  - type: http
    namespace: confluence
    baseUri: https://hearst.atlassian.net/wiki/api/v2
    authentication:
      type: basic
      username: $secrets.confluence_user
      password: $secrets.confluence_api_token
    resources:
    - name: pages
      path: /pages
      operations:
      - name: create-page
        method: POST

Queries historical data in Snowflake, generates forecasts, updates Salesforce inventory, and alerts sales via Microsoft Teams.

naftiko: '0.5'
info:
  label: Ad Inventory Forecasting Pipeline
  description: Queries historical data in Snowflake, generates forecasts, updates Salesforce inventory, and alerts sales via Microsoft Teams.
  tags:
  - advertising
  - snowflake
  - salesforce
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: ad-inventory-forecasting-pipeline
    port: 8080
    tools:
    - name: execute
      description: Queries historical data in Snowflake, generates forecasts, updates Salesforce inventory, and alerts sales via Microsoft Teams.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: snowflake.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: salesforce.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: microsoft-teams.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: microsoft-teams.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: snowflake
    baseUri: https://api.snowflake.com/v1
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: salesforce
    baseUri: https://api.salesforce.com/v1
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: microsoft-teams
    baseUri: https://api.microsoftteams.com/v1
    authentication:
      type: bearer
      token: $secrets.microsoft_teams_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST

Pulls metrics from Google Analytics, identifies issues via New Relic, creates optimization tickets in Jira, and notifies via Slack.

naftiko: '0.5'
info:
  label: Website Performance Optimization Pipeline
  description: Pulls metrics from Google Analytics, identifies issues via New Relic, creates optimization tickets in Jira, and notifies via Slack.
  tags:
  - performance
  - google-analytics
  - new-relic
  - jira
  - slack
capability:
  exposes:
  - type: mcp
    namespace: website-performance-optimization-pipeline
    port: 8080
    tools:
    - name: execute
      description: Pulls metrics from Google Analytics, identifies issues via New Relic, creates optimization tickets in Jira, and notifies via Slack.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: google-analytics.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: new-relic.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: jira.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: slack.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: google-analytics
    baseUri: https://api.googleanalytics.com/v1
    authentication:
      type: bearer
      token: $secrets.google_analytics_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: new-relic
    baseUri: https://api.newrelic.com/v1
    authentication:
      type: bearer
      token: $secrets.new_relic_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: jira
    baseUri: https://api.jira.com/v1
    authentication:
      type: bearer
      token: $secrets.jira_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: slack
    baseUri: https://api.slack.com/v1
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST

Creates campaign in HubSpot, generates contract in DocuSign, tracks deliverables in Asana, and monitors metrics via Instagram.

naftiko: '0.5'
info:
  label: Influencer Partnership Pipeline
  description: Creates campaign in HubSpot, generates contract in DocuSign, tracks deliverables in Asana, and monitors metrics via Instagram.
  tags:
  - marketing
  - hubspot
  - docusign
  - asana
  - instagram
capability:
  exposes:
  - type: mcp
    namespace: influencer-partnership-pipeline
    port: 8080
    tools:
    - name: execute
      description: Creates campaign in HubSpot, generates contract in DocuSign, tracks deliverables in Asana, and monitors metrics via Instagram.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: hubspot.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: docusign.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: asana.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: instagram.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: hubspot
    baseUri: https://api.hubspot.com/v1
    authentication:
      type: bearer
      token: $secrets.hubspot_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: docusign
    baseUri: https://api.docusign.com/v1
    authentication:
      type: bearer
      token: $secrets.docusign_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: asana
    baseUri: https://api.asana.com/v1
    authentication:
      type: bearer
      token: $secrets.asana_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: instagram
    baseUri: https://api.instagram.com/v1
    authentication:
      type: bearer
      token: $secrets.instagram_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST

Retrieves service health metrics from Datadog.

naftiko: '0.5'
info:
  label: Datadog Service Health Check
  description: Retrieves service health metrics from Datadog.
  tags:
  - it-operations
  - monitoring
  - datadog
capability:
  exposes:
  - type: mcp
    namespace: infra-monitoring
    port: 8080
    tools:
    - name: get-service-health
      description: Get Datadog health metrics for a service.
      inputParameters:
      - name: service_name
        in: body
        type: string
        description: The Datadog service name.
      call: datadog.get-metrics
      with:
        service: '{{service_name}}'
      outputParameters:
      - name: cpu_usage
        type: string
        mapping: $.series[0].pointlist[-1][1]
      - name: error_rate
        type: string
        mapping: $.series[1].pointlist[-1][1]
  consumes:
  - type: http
    namespace: datadog
    baseUri: https://api.datadoghq.com/api/v1
    authentication:
      type: apiKey
      key: $secrets.datadog_api_key
      headerName: DD-API-KEY
    resources:
    - name: metrics
      path: /query?query=avg:system.cpu.user{service:{{service}}}
      inputParameters:
      - name: service
        in: path
      operations:
      - name: get-metrics
        method: GET

Looks up a SAP purchase order and returns status, vendor, total value, and delivery date.

naftiko: '0.5'
info:
  label: SAP Purchase Order Status
  description: Looks up a SAP purchase order and returns status, vendor, total value, and delivery date.
  tags:
  - procurement
  - sap
  - purchase-order
capability:
  exposes:
  - type: mcp
    namespace: erp-procurement
    port: 8080
    tools:
    - name: get-purchase-order
      description: Look up a SAP purchase order by PO number.
      inputParameters:
      - name: po_number
        in: body
        type: string
        description: The SAP purchase order number.
      call: sap.get-po
      with:
        po_number: '{{po_number}}'
      outputParameters:
      - name: status
        type: string
        mapping: $.d.OverallStatus
      - name: vendor
        type: string
        mapping: $.d.Supplier.CompanyName
      - name: total_value
        type: string
        mapping: $.d.TotalAmount
      - name: delivery_date
        type: string
        mapping: $.d.DeliveryDate
  consumes:
  - type: http
    namespace: sap
    baseUri: https://hearst-s4.sap.com/sap/opu/odata/sap/MM_PUR_PO_MAINT_V2_SRV
    authentication:
      type: basic
      username: $secrets.sap_user
      password: $secrets.sap_password
    resources:
    - name: purchase-orders
      path: /A_PurchaseOrder('{{po_number}}')
      inputParameters:
      - name: po_number
        in: path
      operations:
      - name: get-po
        method: GET

Aggregates metrics from Google Analytics across publications, stores in Snowflake, generates dashboards in Tableau, and distributes via Microsoft Teams.

naftiko: '0.5'
info:
  label: Cross-Publication Analytics Pipeline
  description: Aggregates metrics from Google Analytics across publications, stores in Snowflake, generates dashboards in Tableau, and distributes via Microsoft Teams.
  tags:
  - analytics
  - google-analytics
  - snowflake
  - tableau
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: cross-publication-analytics-pipeline
    port: 8080
    tools:
    - name: execute
      description: Aggregates metrics from Google Analytics across publications, stores in Snowflake, generates dashboards in Tableau, and distributes via Microsoft Teams.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: google-analytics.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: snowflake.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: tableau.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: microsoft-teams.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: google-analytics
    baseUri: https://api.googleanalytics.com/v1
    authentication:
      type: bearer
      token: $secrets.google_analytics_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: snowflake
    baseUri: https://api.snowflake.com/v1
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: tableau
    baseUri: https://api.tableau.com/v1
    authentication:
      type: bearer
      token: $secrets.tableau_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: microsoft-teams
    baseUri: https://api.microsoftteams.com/v1
    authentication:
      type: bearer
      token: $secrets.microsoft_teams_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST

Enrolls new subscriber in Stripe, creates contact in Salesforce, triggers welcome series in MailChimp, and logs in Snowflake.

naftiko: '0.5'
info:
  label: Subscriber Onboarding Pipeline
  description: Enrolls new subscriber in Stripe, creates contact in Salesforce, triggers welcome series in MailChimp, and logs in Snowflake.
  tags:
  - subscriptions
  - stripe
  - salesforce
  - mailchimp
  - snowflake
capability:
  exposes:
  - type: mcp
    namespace: subscriber-onboarding-pipeline
    port: 8080
    tools:
    - name: execute
      description: Enrolls new subscriber in Stripe, creates contact in Salesforce, triggers welcome series in MailChimp, and logs in Snowflake.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: stripe.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: salesforce.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: mailchimp.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: snowflake.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: stripe
    baseUri: https://api.stripe.com/v1
    authentication:
      type: bearer
      token: $secrets.stripe_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: salesforce
    baseUri: https://api.salesforce.com/v1
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: mailchimp
    baseUri: https://api.mailchimp.com/v1
    authentication:
      type: bearer
      token: $secrets.mailchimp_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: snowflake
    baseUri: https://api.snowflake.com/v1
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST

Manages contracts in Salesforce, routes signatures via DocuSign, archives in SharePoint, and tracks in Google Sheets.

naftiko: '0.5'
info:
  label: Contract Lifecycle Management Pipeline
  description: Manages contracts in Salesforce, routes signatures via DocuSign, archives in SharePoint, and tracks in Google Sheets.
  tags:
  - legal
  - salesforce
  - docusign
  - sharepoint
  - google-sheets
capability:
  exposes:
  - type: mcp
    namespace: contract-lifecycle-management-pipeline
    port: 8080
    tools:
    - name: execute
      description: Manages contracts in Salesforce, routes signatures via DocuSign, archives in SharePoint, and tracks in Google Sheets.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: salesforce.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: docusign.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: sharepoint.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: google-sheets.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: salesforce
    baseUri: https://api.salesforce.com/v1
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: docusign
    baseUri: https://api.docusign.com/v1
    authentication:
      type: bearer
      token: $secrets.docusign_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: sharepoint
    baseUri: https://api.sharepoint.com/v1
    authentication:
      type: bearer
      token: $secrets.sharepoint_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: google-sheets
    baseUri: https://api.googlesheets.com/v1
    authentication:
      type: bearer
      token: $secrets.google_sheets_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST

Aggregates revenue from Snowflake, generates reports in Google Sheets, uploads to SharePoint, and distributes via Microsoft Outlook.

naftiko: '0.5'
info:
  label: Quarterly Revenue Reporting Pipeline
  description: Aggregates revenue from Snowflake, generates reports in Google Sheets, uploads to SharePoint, and distributes via Microsoft Outlook.
  tags:
  - finance
  - snowflake
  - google-sheets
  - sharepoint
  - microsoft-outlook
capability:
  exposes:
  - type: mcp
    namespace: quarterly-revenue-reporting-pipeline
    port: 8080
    tools:
    - name: execute
      description: Aggregates revenue from Snowflake, generates reports in Google Sheets, uploads to SharePoint, and distributes via Microsoft Outlook.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: snowflake.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: google-sheets.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: sharepoint.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: microsoft-outlook.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: snowflake
    baseUri: https://api.snowflake.com/v1
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: google-sheets
    baseUri: https://api.googlesheets.com/v1
    authentication:
      type: bearer
      token: $secrets.google_sheets_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: sharepoint
    baseUri: https://api.sharepoint.com/v1
    authentication:
      type: bearer
      token: $secrets.sharepoint_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: microsoft-outlook
    baseUri: https://api.microsoftoutlook.com/v1
    authentication:
      type: bearer
      token: $secrets.microsoft_outlook_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST

Collects reviews from Zendesk, analyzes sentiment via Azure ML, stores in Snowflake, and publishes to Confluence.

naftiko: '0.5'
info:
  label: Customer Feedback Analysis Pipeline
  description: Collects reviews from Zendesk, analyzes sentiment via Azure ML, stores in Snowflake, and publishes to Confluence.
  tags:
  - feedback
  - zendesk
  - azure-machine-learning
  - snowflake
  - confluence
capability:
  exposes:
  - type: mcp
    namespace: customer-feedback-analysis-pipeline
    port: 8080
    tools:
    - name: execute
      description: Collects reviews from Zendesk, analyzes sentiment via Azure ML, stores in Snowflake, and publishes to Confluence.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: zendesk.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: azure-machine-learning.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: snowflake.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: confluence.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: zendesk
    baseUri: https://api.zendesk.com/v1
    authentication:
      type: bearer
      token: $secrets.zendesk_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: azure-machine-learning
    baseUri: https://api.azuremachinelearning.com/v1
    authentication:
      type: bearer
      token: $secrets.azure_machine_learning_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: snowflake
    baseUri: https://api.snowflake.com/v1
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: confluence
    baseUri: https://api.confluence.com/v1
    authentication:
      type: bearer
      token: $secrets.confluence_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST

Executes a parameterized query against Snowflake to retrieve audience engagement metrics by content vertical and date range.

naftiko: '0.5'
info:
  label: Snowflake Audience Data Query
  description: Executes a parameterized query against Snowflake to retrieve audience engagement metrics by content vertical and date range.
  tags:
  - analytics
  - snowflake
capability:
  exposes:
  - type: mcp
    namespace: snowflake-audience
    port: 8080
    tools:
    - name: query-audience
      description: Query audience data from Snowflake by content vertical.
      inputParameters:
      - name: vertical
        in: body
        type: string
        description: The content vertical.
      call: snowflake.run-query
      with:
        vertical: '{{vertical}}'
      outputParameters:
      - name: total_pageviews
        type: string
        mapping: $.data[0].TOTAL_PAGEVIEWS
      - name: unique_visitors
        type: string
        mapping: $.data[0].UNIQUE_VISITORS
  consumes:
  - type: http
    namespace: snowflake
    baseUri: https://hearst.snowflakecomputing.com/api/v2
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: statements
      path: /statements
      operations:
      - name: run-query
        method: POST

Posts jobs to LinkedIn, syncs applicants to Workday, schedules interviews via Zoom, and notifies hiring managers via Slack.

naftiko: '0.5'
info:
  label: Talent Acquisition Pipeline
  description: Posts jobs to LinkedIn, syncs applicants to Workday, schedules interviews via Zoom, and notifies hiring managers via Slack.
  tags:
  - recruiting
  - linkedin
  - workday
  - zoom
  - slack
capability:
  exposes:
  - type: mcp
    namespace: talent-acquisition-pipeline
    port: 8080
    tools:
    - name: execute
      description: Posts jobs to LinkedIn, syncs applicants to Workday, schedules interviews via Zoom, and notifies hiring managers via Slack.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: linkedin.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: workday.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: zoom.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: slack.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: linkedin
    baseUri: https://api.linkedin.com/v1
    authentication:
      type: bearer
      token: $secrets.linkedin_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: workday
    baseUri: https://api.workday.com/v1
    authentication:
      type: bearer
      token: $secrets.workday_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: zoom
    baseUri: https://api.zoom.com/v1
    authentication:
      type: bearer
      token: $secrets.zoom_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: slack
    baseUri: https://api.slack.com/v1
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST

Retrieves editorial project status from Asana by project GID, returning name and deadline.

naftiko: '0.5'
info:
  label: Asana Editorial Project Lookup
  description: Retrieves editorial project status from Asana by project GID, returning name and deadline.
  tags:
  - project-management
  - asana
capability:
  exposes:
  - type: mcp
    namespace: asana-editorial
    port: 8080
    tools:
    - name: get-data
      description: Retrieves editorial project status from Asana by project GID, returning name and deadline.
      inputParameters:
      - name: query_id
        in: body
        type: string
        description: The lookup identifier.
      call: asana-editorial.get-data
      with:
        id: '{{query_id}}'
      outputParameters:
      - name: result
        type: string
        mapping: $.data
  consumes:
  - type: http
    namespace: asana-editorial
    baseUri: https://app.asana.com/api/1.0
    authentication:
      type: bearer
      token: $secrets.asana_token
    resources:
    - name: data
      path: /{{id}}
      inputParameters:
      - name: id
        in: path
      operations:
      - name: get-data
        method: GET

On breaking news event, publishes article via CMS, distributes to social channels via Facebook and Twitter, sends push notifications via Slack, and updates Google Analytics tracking.

naftiko: '0.5'
info:
  label: Breaking News Distribution Pipeline
  description: On breaking news event, publishes article via CMS, distributes to social channels via Facebook and Twitter, sends push notifications via Slack, and updates Google Analytics tracking.
  tags:
  - editorial
  - facebook
  - twitter
  - slack
  - google-analytics
capability:
  exposes:
  - type: mcp
    namespace: breaking-news-distribution-pipeline
    port: 8080
    tools:
    - name: execute
      description: On breaking news event, publishes article via CMS, distributes to social channels via Facebook and Twitter, sends push notifications via Slack, and updates Google Analytics tracking.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: facebook.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: twitter.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: slack.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: google-analytics.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: facebook
    baseUri: https://api.facebook.com/v1
    authentication:
      type: bearer
      token: $secrets.facebook_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: twitter
    baseUri: https://api.twitter.com/v1
    authentication:
      type: bearer
      token: $secrets.twitter_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: slack
    baseUri: https://api.slack.com/v1
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: google-analytics
    baseUri: https://api.googleanalytics.com/v1
    authentication:
      type: bearer
      token: $secrets.google_analytics_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST

Retrieves editorial calendar entries from Airtable by publication and date range, returning article titles, authors, and deadlines.

naftiko: '0.5'
info:
  label: Airtable Editorial Calendar Lookup
  description: Retrieves editorial calendar entries from Airtable by publication and date range, returning article titles, authors, and deadlines.
  tags:
  - editorial
  - airtable
capability:
  exposes:
  - type: mcp
    namespace: airtable-editorial
    port: 8080
    tools:
    - name: get-calendar
      description: Look up editorial calendar entries in Airtable.
      inputParameters:
      - name: publication
        in: body
        type: string
        description: The publication name.
      call: airtable.list-records
      with:
        filter: '{{publication}}'
      outputParameters:
      - name: title
        type: string
        mapping: $.records[0].fields.Title
      - name: author
        type: string
        mapping: $.records[0].fields.Author
  consumes:
  - type: http
    namespace: airtable
    baseUri: https://api.airtable.com/v0/appHearst
    authentication:
      type: bearer
      token: $secrets.airtable_token
    resources:
    - name: calendar
      path: /EditorialCalendar?filterByFormula={Publication}='{{filter}}'
      inputParameters:
      - name: filter
        in: path
      operations:
      - name: list-records
        method: GET

Builds audience segments in Snowflake, syncs to Salesforce, creates targeted campaigns in MailChimp, and tracks in Google Sheets.

naftiko: '0.5'
info:
  label: Audience Segmentation Campaign Pipeline
  description: Builds audience segments in Snowflake, syncs to Salesforce, creates targeted campaigns in MailChimp, and tracks in Google Sheets.
  tags:
  - marketing
  - snowflake
  - salesforce
  - mailchimp
  - google-sheets
capability:
  exposes:
  - type: mcp
    namespace: audience-segmentation-campaign-pipeline
    port: 8080
    tools:
    - name: execute
      description: Builds audience segments in Snowflake, syncs to Salesforce, creates targeted campaigns in MailChimp, and tracks in Google Sheets.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: snowflake.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: salesforce.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: mailchimp.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: google-sheets.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: snowflake
    baseUri: https://api.snowflake.com/v1
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: salesforce
    baseUri: https://api.salesforce.com/v1
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: mailchimp
    baseUri: https://api.mailchimp.com/v1
    authentication:
      type: bearer
      token: $secrets.mailchimp_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: google-sheets
    baseUri: https://api.googlesheets.com/v1
    authentication:
      type: bearer
      token: $secrets.google_sheets_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST

Retrieves search performance data from Google Search Console for Hearst properties.

naftiko: '0.5'
info:
  label: Google Search Console SEO Lookup
  description: Retrieves search performance data from Google Search Console for Hearst properties.
  tags:
  - seo
  - google-search-console
capability:
  exposes:
  - type: mcp
    namespace: gsc-seo
    port: 8080
    tools:
    - name: get-data
      description: Retrieves search performance data from Google Search Console for Hearst properties.
      inputParameters:
      - name: query_id
        in: body
        type: string
        description: The lookup identifier.
      call: gsc-seo.get-data
      with:
        id: '{{query_id}}'
      outputParameters:
      - name: result
        type: string
        mapping: $.data
  consumes:
  - type: http
    namespace: gsc-seo
    baseUri: https://www.googleapis.com/webmasters/v3
    authentication:
      type: bearer
      token: $secrets.google_token
    resources:
    - name: data
      path: /{{id}}
      inputParameters:
      - name: id
        in: path
      operations:
      - name: get-data
        method: GET

Creates or updates a Confluence page for editorial guidelines and SOPs.

naftiko: '0.5'
info:
  label: Confluence Knowledge Base Publisher
  description: Creates or updates a Confluence page for editorial guidelines and SOPs.
  tags:
  - knowledge-management
  - confluence
capability:
  exposes:
  - type: mcp
    namespace: knowledge-base
    port: 8080
    tools:
    - name: publish-kb-article
      description: Publish a knowledge base page to Confluence.
      inputParameters:
      - name: space_key
        in: body
        type: string
        description: The Confluence space key.
      - name: title
        in: body
        type: string
        description: The page title.
      - name: content
        in: body
        type: string
        description: The page content.
      call: confluence.create-page
      with:
        space_key: '{{space_key}}'
        title: '{{title}}'
        body: '{{content}}'
  consumes:
  - type: http
    namespace: confluence
    baseUri: https://hearst.atlassian.net/wiki/api/v2
    authentication:
      type: basic
      username: $secrets.confluence_user
      password: $secrets.confluence_api_token
    resources:
    - name: pages
      path: /pages
      operations:
      - name: create-page
        method: POST

Retrieves a Stripe subscription by ID, returning plan name, status, billing cycle, and next payment date.

naftiko: '0.5'
info:
  label: Stripe Subscription Payment Lookup
  description: Retrieves a Stripe subscription by ID, returning plan name, status, billing cycle, and next payment date.
  tags:
  - payments
  - stripe
capability:
  exposes:
  - type: mcp
    namespace: stripe-subscriptions
    port: 8080
    tools:
    - name: get-subscription
      description: Look up a Stripe subscription by ID.
      inputParameters:
      - name: subscription_id
        in: body
        type: string
        description: The Stripe subscription ID.
      call: stripe.get-subscription
      with:
        id: '{{subscription_id}}'
      outputParameters:
      - name: status
        type: string
        mapping: $.status
      - name: plan
        type: string
        mapping: $.plan.nickname
  consumes:
  - type: http
    namespace: stripe
    baseUri: https://api.stripe.com/v1
    authentication:
      type: bearer
      token: $secrets.stripe_secret_key
    resources:
    - name: subscriptions
      path: /subscriptions/{{id}}
      inputParameters:
      - name: id
        in: path
      operations:
      - name: get-subscription
        method: GET

Publishes a content teaser to the Hearst Facebook page with link back to the article.

naftiko: '0.5'
info:
  label: Facebook Content Distribution
  description: Publishes a content teaser to the Hearst Facebook page with link back to the article.
  tags:
  - social-media
  - content
  - facebook
capability:
  exposes:
  - type: mcp
    namespace: facebook-publishing
    port: 8080
    tools:
    - name: post-to-facebook
      description: Publish a post to the Hearst Facebook page.
      inputParameters:
      - name: message
        in: body
        type: string
        description: The post message.
      - name: link
        in: body
        type: string
        description: The article URL.
      call: facebook.create-post
      with:
        message: '{{message}}'
        link: '{{link}}'
  consumes:
  - type: http
    namespace: facebook
    baseUri: https://graph.facebook.com/v18.0
    authentication:
      type: bearer
      token: $secrets.facebook_page_token
    resources:
    - name: posts
      path: /{{page_id}}/feed
      operations:
      - name: create-post
        method: POST

Checks content rights in Salesforce, creates clearance request in Jira, routes contract via DocuSign, and archives in SharePoint.

naftiko: '0.5'
info:
  label: Content Rights Clearance Pipeline
  description: Checks content rights in Salesforce, creates clearance request in Jira, routes contract via DocuSign, and archives in SharePoint.
  tags:
  - legal
  - salesforce
  - jira
  - docusign
  - sharepoint
capability:
  exposes:
  - type: mcp
    namespace: content-rights-clearance-pipeline
    port: 8080
    tools:
    - name: execute
      description: Checks content rights in Salesforce, creates clearance request in Jira, routes contract via DocuSign, and archives in SharePoint.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: salesforce.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: jira.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: docusign.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: sharepoint.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: salesforce
    baseUri: https://api.salesforce.com/v1
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: jira
    baseUri: https://api.jira.com/v1
    authentication:
      type: bearer
      token: $secrets.jira_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: docusign
    baseUri: https://api.docusign.com/v1
    authentication:
      type: bearer
      token: $secrets.docusign_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: sharepoint
    baseUri: https://api.sharepoint.com/v1
    authentication:
      type: bearer
      token: $secrets.sharepoint_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST

Queries the Teradata data warehouse for audience demographics and behavior data for content personalization.

naftiko: '0.5'
info:
  label: Teradata Audience Data Query
  description: Queries the Teradata data warehouse for audience demographics and behavior data for content personalization.
  tags:
  - analytics
  - data-warehouse
  - teradata
  - audience
capability:
  exposes:
  - type: mcp
    namespace: audience-dwh
    port: 8080
    tools:
    - name: query-audience-data
      description: Query Teradata for audience demographics and behavior.
      inputParameters:
      - name: publication
        in: body
        type: string
        description: The publication name.
      - name: segment
        in: body
        type: string
        description: The audience segment.
      call: teradata.query-audience
      with:
        publication: '{{publication}}'
        segment: '{{segment}}'
      outputParameters:
      - name: total_readers
        type: integer
        mapping: $.results.total_readers
      - name: avg_age
        type: number
        mapping: $.results.avg_age
      - name: top_interests
        type: array
        mapping: $.results.top_interests
  consumes:
  - type: http
    namespace: teradata
    baseUri: https://hearst-td.teradata.com/api/query/v1
    authentication:
      type: bearer
      token: $secrets.teradata_token
    resources:
    - name: queries
      path: /execute
      operations:
      - name: query-audience
        method: POST

Checks ad inventory availability from Google Campaign Manager for a given publication, date range, and ad unit.

naftiko: '0.5'
info:
  label: Ad Inventory Availability Checker
  description: Checks ad inventory availability from Google Campaign Manager for a given publication, date range, and ad unit.
  tags:
  - advertising
  - inventory
  - google-campaign-manager
capability:
  exposes:
  - type: mcp
    namespace: ad-inventory
    port: 8080
    tools:
    - name: check-ad-inventory
      description: Check available ad inventory for a publication.
      inputParameters:
      - name: publication_id
        in: body
        type: string
        description: The publication identifier.
      - name: start_date
        in: body
        type: string
        description: Campaign start date.
      - name: end_date
        in: body
        type: string
        description: Campaign end date.
      - name: ad_unit
        in: body
        type: string
        description: The ad unit type.
      call: gcm.get-availability
      with:
        publication_id: '{{publication_id}}'
        start_date: '{{start_date}}'
        end_date: '{{end_date}}'
        ad_unit: '{{ad_unit}}'
      outputParameters:
      - name: available_impressions
        type: integer
        mapping: $.availableImpressions
      - name: sold_pct
        type: string
        mapping: $.soldPercentage
      - name: rate_card
        type: string
        mapping: $.rateCard
  consumes:
  - type: http
    namespace: gcm
    baseUri: https://dfareporting.googleapis.com/dfareporting/v4
    authentication:
      type: bearer
      token: $secrets.google_campaign_manager_token
    resources:
    - name: inventory
      path: /userprofiles/{{profile_id}}/reports
      inputParameters:
      - name: profile_id
        in: path
      operations:
      - name: get-availability
        method: POST

On new hire from Workday, provisions Azure AD account, creates ServiceNow equipment request, and sends welcome via Microsoft Outlook.

naftiko: '0.5'
info:
  label: New Hire IT Provisioning Pipeline
  description: On new hire from Workday, provisions Azure AD account, creates ServiceNow equipment request, and sends welcome via Microsoft Outlook.
  tags:
  - it
  - workday
  - azure-active-directory
  - servicenow
  - microsoft-outlook
capability:
  exposes:
  - type: mcp
    namespace: new-hire-it-provisioning-pipeline
    port: 8080
    tools:
    - name: execute
      description: On new hire from Workday, provisions Azure AD account, creates ServiceNow equipment request, and sends welcome via Microsoft Outlook.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: workday.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: azure-active-directory.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: servicenow.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: microsoft-outlook.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: workday
    baseUri: https://api.workday.com/v1
    authentication:
      type: bearer
      token: $secrets.workday_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: azure-active-directory
    baseUri: https://api.azureactivedirectory.com/v1
    authentication:
      type: bearer
      token: $secrets.azure_active_directory_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: servicenow
    baseUri: https://api.servicenow.com/v1
    authentication:
      type: bearer
      token: $secrets.servicenow_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: microsoft-outlook
    baseUri: https://api.microsoftoutlook.com/v1
    authentication:
      type: bearer
      token: $secrets.microsoft_outlook_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST

Publishes a branded post to the Hearst LinkedIn company page.

naftiko: '0.5'
info:
  label: LinkedIn Brand Post Publisher
  description: Publishes a branded post to the Hearst LinkedIn company page.
  tags:
  - marketing
  - social-media
  - linkedin
capability:
  exposes:
  - type: mcp
    namespace: linkedin-publishing
    port: 8080
    tools:
    - name: publish-linkedin-post
      description: Publish a post to the Hearst LinkedIn page.
      inputParameters:
      - name: post_text
        in: body
        type: string
        description: The post content.
      call: linkedin.create-post
      with:
        author: urn:li:organization:hearst
        text: '{{post_text}}'
  consumes:
  - type: http
    namespace: linkedin
    baseUri: https://api.linkedin.com/v2
    authentication:
      type: bearer
      token: $secrets.linkedin_token
    resources:
    - name: posts
      path: /ugcPosts
      operations:
      - name: create-post
        method: POST

Publishes a visual story to the Hearst Instagram account with a linked article.

naftiko: '0.5'
info:
  label: Instagram Story Publisher
  description: Publishes a visual story to the Hearst Instagram account with a linked article.
  tags:
  - social-media
  - visual-content
  - instagram
capability:
  exposes:
  - type: mcp
    namespace: instagram-publishing
    port: 8080
    tools:
    - name: post-instagram-story
      description: Publish visual content to Instagram.
      inputParameters:
      - name: image_url
        in: body
        type: string
        description: The image URL.
      - name: caption
        in: body
        type: string
        description: The post caption.
      call: instagram.create-media
      with:
        image_url: '{{image_url}}'
        caption: '{{caption}}'
  consumes:
  - type: http
    namespace: instagram
    baseUri: https://graph.facebook.com/v18.0
    authentication:
      type: bearer
      token: $secrets.instagram_token
    resources:
    - name: media
      path: /{{ig_user_id}}/media
      operations:
      - name: create-media
        method: POST

Pulls search performance data from Google Search Console, enriches with Google Analytics traffic, and publishes an SEO report to Confluence.

naftiko: '0.5'
info:
  label: SEO Performance Tracker
  description: Pulls search performance data from Google Search Console, enriches with Google Analytics traffic, and publishes an SEO report to Confluence.
  tags:
  - seo
  - analytics
  - google-search-console
  - google-analytics
  - confluence
capability:
  exposes:
  - type: mcp
    namespace: seo-tracking
    port: 8080
    tools:
    - name: track-seo-performance
      description: Track SEO performance and publish a report.
      inputParameters:
      - name: site_url
        in: body
        type: string
        description: The site URL for Search Console.
      - name: period
        in: body
        type: string
        description: The analysis period.
      steps:
      - name: get-search-data
        type: call
        call: gsc.get-search-analytics
        with:
          site_url: '{{site_url}}'
          period: '{{period}}'
      - name: get-traffic
        type: call
        call: ga.get-organic-traffic
        with:
          site_url: '{{site_url}}'
      - name: publish-report
        type: call
        call: confluence.create-page
        with:
          space_key: SEO
          title: 'SEO Report: {{site_url}} - {{period}}'
          body: 'Total clicks: {{get-search-data.total_clicks}}. Impressions: {{get-search-data.total_impressions}}. Avg position: {{get-search-data.avg_position}}. Organic sessions: {{get-traffic.organic_sessions}}.'
  consumes:
  - type: http
    namespace: gsc
    baseUri: https://www.googleapis.com/webmasters/v3
    authentication:
      type: bearer
      token: $secrets.google_search_console_token
    resources:
    - name: search-analytics
      path: /sites/{{site_url}}/searchAnalytics/query
      inputParameters:
      - name: site_url
        in: path
      operations:
      - name: get-search-analytics
        method: POST
  - type: http
    namespace: ga
    baseUri: https://analyticsdata.googleapis.com/v1beta
    authentication:
      type: bearer
      token: $secrets.google_analytics_token
    resources:
    - name: reports
      path: /properties/{{property_id}}:runReport
      inputParameters:
      - name: property_id
        in: path
      operations:
      - name: get-organic-traffic
        method: POST
  - type: http
    namespace: confluence
    baseUri: https://hearst.atlassian.net/wiki/api/v2
    authentication:
      type: basic
      username: $secrets.confluence_user
      password: $secrets.confluence_api_token
    resources:
    - name: pages
      path: /pages
      operations:
      - name: create-page
        method: POST

Retrieves a Zendesk subscriber support ticket by ID, returning status, priority, assignee, and resolution details.

naftiko: '0.5'
info:
  label: Zendesk Subscriber Ticket Lookup
  description: Retrieves a Zendesk subscriber support ticket by ID, returning status, priority, assignee, and resolution details.
  tags:
  - support
  - zendesk
capability:
  exposes:
  - type: mcp
    namespace: zendesk-tickets
    port: 8080
    tools:
    - name: get-ticket
      description: Look up a Zendesk subscriber ticket by ID.
      inputParameters:
      - name: ticket_id
        in: body
        type: string
        description: The Zendesk ticket ID.
      call: zendesk.get-ticket
      with:
        id: '{{ticket_id}}'
      outputParameters:
      - name: status
        type: string
        mapping: $.ticket.status
      - name: priority
        type: string
        mapping: $.ticket.priority
  consumes:
  - type: http
    namespace: zendesk
    baseUri: https://hearst.zendesk.com/api/v2
    authentication:
      type: bearer
      token: $secrets.zendesk_token
    resources:
    - name: tickets
      path: /tickets/{{id}}
      inputParameters:
      - name: id
        in: path
      operations:
      - name: get-ticket
        method: GET

Uploads editorial assets to Google Drive.

naftiko: '0.5'
info:
  label: Google Drive Editorial Asset Upload
  description: Uploads editorial assets to Google Drive.
  tags:
  - document-management
  - google-drive
capability:
  exposes:
  - type: mcp
    namespace: gdrive-assets
    port: 8080
    tools:
    - name: upload-asset
      description: Upload an editorial asset to Google Drive.
      inputParameters:
      - name: folder_id
        in: body
        type: string
        description: The Google Drive folder ID.
      - name: file_name
        in: body
        type: string
        description: The file name.
      - name: content
        in: body
        type: string
        description: The file content.
      call: gdrive.upload-file
      with:
        folder_id: '{{folder_id}}'
        name: '{{file_name}}'
        content: '{{content}}'
      outputParameters:
      - name: file_id
        type: string
        mapping: $.id
      - name: web_view_link
        type: string
        mapping: $.webViewLink
  consumes:
  - type: http
    namespace: gdrive
    baseUri: https://www.googleapis.com/upload/drive/v3
    authentication:
      type: bearer
      token: $secrets.google_drive_token
    resources:
    - name: files
      path: /files?uploadType=multipart
      operations:
      - name: upload-file
        method: POST

Audits data usage in Snowflake, generates compliance reports in Google Sheets, archives in SharePoint, and notifies legal via Slack.

naftiko: '0.5'
info:
  label: Data Privacy Compliance Pipeline
  description: Audits data usage in Snowflake, generates compliance reports in Google Sheets, archives in SharePoint, and notifies legal via Slack.
  tags:
  - compliance
  - snowflake
  - google-sheets
  - sharepoint
  - slack
capability:
  exposes:
  - type: mcp
    namespace: data-privacy-compliance-pipeline
    port: 8080
    tools:
    - name: execute
      description: Audits data usage in Snowflake, generates compliance reports in Google Sheets, archives in SharePoint, and notifies legal via Slack.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: snowflake.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: google-sheets.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: sharepoint.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: slack.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: snowflake
    baseUri: https://api.snowflake.com/v1
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: google-sheets
    baseUri: https://api.googlesheets.com/v1
    authentication:
      type: bearer
      token: $secrets.google_sheets_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: sharepoint
    baseUri: https://api.sharepoint.com/v1
    authentication:
      type: bearer
      token: $secrets.sharepoint_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: slack
    baseUri: https://api.slack.com/v1
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST

Matches invoices from SAP, validates against contracts in Salesforce, processes payments, and logs in Google Sheets.

naftiko: '0.5'
info:
  label: Vendor Invoice Reconciliation Pipeline
  description: Matches invoices from SAP, validates against contracts in Salesforce, processes payments, and logs in Google Sheets.
  tags:
  - finance
  - sap
  - salesforce
  - google-sheets
capability:
  exposes:
  - type: mcp
    namespace: vendor-invoice-reconciliation-pipeline
    port: 8080
    tools:
    - name: execute
      description: Matches invoices from SAP, validates against contracts in Salesforce, processes payments, and logs in Google Sheets.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: sap.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: salesforce.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: google-sheets.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: google-sheets.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: sap
    baseUri: https://api.sap.com/v1
    authentication:
      type: bearer
      token: $secrets.sap_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: salesforce
    baseUri: https://api.salesforce.com/v1
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: google-sheets
    baseUri: https://api.googlesheets.com/v1
    authentication:
      type: bearer
      token: $secrets.google_sheets_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST

Pulls search data from Google Search Console, identifies opportunities in Snowflake, updates CMS, and reports via Google Sheets.

naftiko: '0.5'
info:
  label: SEO Content Optimization Pipeline
  description: Pulls search data from Google Search Console, identifies opportunities in Snowflake, updates CMS, and reports via Google Sheets.
  tags:
  - seo
  - google-search-console
  - snowflake
  - google-sheets
capability:
  exposes:
  - type: mcp
    namespace: seo-content-optimization-pipeline
    port: 8080
    tools:
    - name: execute
      description: Pulls search data from Google Search Console, identifies opportunities in Snowflake, updates CMS, and reports via Google Sheets.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: google-search-console.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: snowflake.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: google-sheets.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: google-sheets.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: google-search-console
    baseUri: https://api.googlesearchconsole.com/v1
    authentication:
      type: bearer
      token: $secrets.google_search_console_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: snowflake
    baseUri: https://api.snowflake.com/v1
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: google-sheets
    baseUri: https://api.googlesheets.com/v1
    authentication:
      type: bearer
      token: $secrets.google_sheets_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST

Pulls bid data from Google Ads, optimizes using Snowflake models, updates campaigns, and reports via Google Sheets.

naftiko: '0.5'
info:
  label: Programmatic Ad Optimization Pipeline
  description: Pulls bid data from Google Ads, optimizes using Snowflake models, updates campaigns, and reports via Google Sheets.
  tags:
  - advertising
  - google-ads
  - snowflake
  - google-sheets
capability:
  exposes:
  - type: mcp
    namespace: programmatic-ad-optimization-pipeline
    port: 8080
    tools:
    - name: execute
      description: Pulls bid data from Google Ads, optimizes using Snowflake models, updates campaigns, and reports via Google Sheets.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: google-ads.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: snowflake.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: google-sheets.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: google-sheets.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: google-ads
    baseUri: https://api.googleads.com/v1
    authentication:
      type: bearer
      token: $secrets.google_ads_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: snowflake
    baseUri: https://api.snowflake.com/v1
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: google-sheets
    baseUri: https://api.googlesheets.com/v1
    authentication:
      type: bearer
      token: $secrets.google_sheets_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST

Retrieves spend from SAP, builds forecasts in Snowflake, creates templates in Google Sheets, and submits via Microsoft Teams.

naftiko: '0.5'
info:
  label: Annual Budget Planning Pipeline
  description: Retrieves spend from SAP, builds forecasts in Snowflake, creates templates in Google Sheets, and submits via Microsoft Teams.
  tags:
  - finance
  - sap
  - snowflake
  - google-sheets
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: annual-budget-planning-pipeline
    port: 8080
    tools:
    - name: execute
      description: Retrieves spend from SAP, builds forecasts in Snowflake, creates templates in Google Sheets, and submits via Microsoft Teams.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: sap.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: snowflake.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: google-sheets.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: microsoft-teams.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: sap
    baseUri: https://api.sap.com/v1
    authentication:
      type: bearer
      token: $secrets.sap_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: snowflake
    baseUri: https://api.snowflake.com/v1
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: google-sheets
    baseUri: https://api.googlesheets.com/v1
    authentication:
      type: bearer
      token: $secrets.google_sheets_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: microsoft-teams
    baseUri: https://api.microsoftteams.com/v1
    authentication:
      type: bearer
      token: $secrets.microsoft_teams_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST

Queries expiring rights from Salesforce, creates renewal tasks in Jira, sends reminders via Microsoft Outlook, and logs in Google Sheets.

naftiko: '0.5'
info:
  label: Content Rights Renewal Pipeline
  description: Queries expiring rights from Salesforce, creates renewal tasks in Jira, sends reminders via Microsoft Outlook, and logs in Google Sheets.
  tags:
  - legal
  - salesforce
  - jira
  - microsoft-outlook
  - google-sheets
capability:
  exposes:
  - type: mcp
    namespace: content-rights-renewal-pipeline
    port: 8080
    tools:
    - name: execute
      description: Queries expiring rights from Salesforce, creates renewal tasks in Jira, sends reminders via Microsoft Outlook, and logs in Google Sheets.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: salesforce.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: jira.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: microsoft-outlook.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: google-sheets.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: salesforce
    baseUri: https://api.salesforce.com/v1
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: jira
    baseUri: https://api.jira.com/v1
    authentication:
      type: bearer
      token: $secrets.jira_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: microsoft-outlook
    baseUri: https://api.microsoftoutlook.com/v1
    authentication:
      type: bearer
      token: $secrets.microsoft_outlook_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: google-sheets
    baseUri: https://api.googlesheets.com/v1
    authentication:
      type: bearer
      token: $secrets.google_sheets_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST

Pulls editorial calendar entries from Jira, syncs deadlines to Microsoft Planner, and notifies editors in Microsoft Teams.

naftiko: '0.5'
info:
  label: Content Editorial Calendar Sync
  description: Pulls editorial calendar entries from Jira, syncs deadlines to Microsoft Planner, and notifies editors in Microsoft Teams.
  tags:
  - publishing
  - editorial
  - jira
  - microsoft-planner
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: editorial-calendar
    port: 8080
    tools:
    - name: sync-editorial-calendar
      description: Sync Jira editorial tasks to Microsoft Planner and notify editors.
      inputParameters:
      - name: project_key
        in: body
        type: string
        description: The Jira project key for editorial content.
      - name: plan_id
        in: body
        type: string
        description: The Microsoft Planner plan ID.
      steps:
      - name: get-editorial-tasks
        type: call
        call: jira.get-issues
        with:
          project_key: '{{project_key}}'
          status: In Progress
      - name: create-planner-tasks
        type: call
        call: planner.create-task
        with:
          plan_id: '{{plan_id}}'
          title: '{{get-editorial-tasks.issues[0].summary}}'
          due_date: '{{get-editorial-tasks.issues[0].due_date}}'
      - name: notify-editors
        type: call
        call: msteams.send-message
        with:
          channel_id: editorial-team
          text: 'Editorial calendar synced. {{get-editorial-tasks.total}} active stories. Next deadline: {{get-editorial-tasks.issues[0].due_date}} - {{get-editorial-tasks.issues[0].summary}}.'
  consumes:
  - type: http
    namespace: jira
    baseUri: https://hearst.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - name: issues
      path: /search?jql=project={{project_key}} AND status='In Progress'
      inputParameters:
      - name: project_key
        in: path
      operations:
      - name: get-issues
        method: GET
  - type: http
    namespace: planner
    baseUri: https://graph.microsoft.com/v1.0/planner
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - name: tasks
      path: /tasks
      operations:
      - name: create-task
        method: POST
  - type: http
    namespace: msteams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - name: channel-messages
      path: /teams/{{channel_id}}/channels/general/messages
      inputParameters:
      - name: channel_id
        in: path
      operations:
      - name: send-message
        method: POST

Sends a formatted message to a Microsoft Teams channel.

naftiko: '0.5'
info:
  label: Microsoft Teams Channel Notifier
  description: Sends a formatted message to a Microsoft Teams channel.
  tags:
  - communications
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: team-notifications
    port: 8080
    tools:
    - name: send-channel-notification
      description: Send a message to a Microsoft Teams channel.
      inputParameters:
      - name: channel_id
        in: body
        type: string
        description: The Teams channel ID.
      - name: message_text
        in: body
        type: string
        description: The message text.
      call: msteams.send-channel-message
      with:
        channel_id: '{{channel_id}}'
        text: '{{message_text}}'
  consumes:
  - type: http
    namespace: msteams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - name: channel-messages
      path: /teams/{{channel_id}}/channels/general/messages
      inputParameters:
      - name: channel_id
        in: path
      operations:
      - name: send-channel-message
        method: POST

Retrieves the Power BI advertising revenue dashboard status and last refresh time.

naftiko: '0.5'
info:
  label: Power BI Revenue Dashboard
  description: Retrieves the Power BI advertising revenue dashboard status and last refresh time.
  tags:
  - analytics
  - power-bi
capability:
  exposes:
  - type: mcp
    namespace: powerbi-revenue
    port: 8080
    tools:
    - name: get-data
      description: Retrieves the Power BI advertising revenue dashboard status and last refresh time.
      inputParameters:
      - name: query_id
        in: body
        type: string
        description: The lookup identifier.
      call: powerbi-revenue.get-data
      with:
        id: '{{query_id}}'
      outputParameters:
      - name: result
        type: string
        mapping: $.data
  consumes:
  - type: http
    namespace: powerbi-revenue
    baseUri: https://api.powerbi.com/v1.0/myorg
    authentication:
      type: bearer
      token: $secrets.powerbi_token
    resources:
    - name: data
      path: /{{id}}
      inputParameters:
      - name: id
        in: path
      operations:
      - name: get-data
        method: GET

Retrieves security event logs from Splunk by event ID for Hearst infrastructure.

naftiko: '0.5'
info:
  label: Splunk Security Event Lookup
  description: Retrieves security event logs from Splunk by event ID for Hearst infrastructure.
  tags:
  - security
  - splunk
capability:
  exposes:
  - type: mcp
    namespace: splunk-events
    port: 8080
    tools:
    - name: get-data
      description: Retrieves security event logs from Splunk by event ID for Hearst infrastructure.
      inputParameters:
      - name: query_id
        in: body
        type: string
        description: The lookup identifier.
      call: splunk-events.get-data
      with:
        id: '{{query_id}}'
      outputParameters:
      - name: result
        type: string
        mapping: $.data
  consumes:
  - type: http
    namespace: splunk-events
    baseUri: https://hearst.splunkcloud.com:8089/services
    authentication:
      type: bearer
      token: $secrets.splunk_token
    resources:
    - name: data
      path: /{{id}}
      inputParameters:
      - name: id
        in: path
      operations:
      - name: get-data
        method: GET

Retrieves the latest build status for an Azure DevOps pipeline.

naftiko: '0.5'
info:
  label: Azure DevOps Build Status
  description: Retrieves the latest build status for an Azure DevOps pipeline.
  tags:
  - devops
  - ci-cd
  - azure-devops
capability:
  exposes:
  - type: mcp
    namespace: cicd-status
    port: 8080
    tools:
    - name: get-build-status
      description: Get the latest build status for an Azure DevOps pipeline.
      inputParameters:
      - name: project_name
        in: body
        type: string
        description: The Azure DevOps project name.
      - name: pipeline_id
        in: body
        type: string
        description: The pipeline definition ID.
      call: azdo.get-builds
      with:
        project: '{{project_name}}'
        definition_id: '{{pipeline_id}}'
      outputParameters:
      - name: build_number
        type: string
        mapping: $.value[0].buildNumber
      - name: result
        type: string
        mapping: $.value[0].result
  consumes:
  - type: http
    namespace: azdo
    baseUri: https://dev.azure.com/hearst
    authentication:
      type: basic
      username: ''
      password: $secrets.azdo_pat
    resources:
    - name: builds
      path: /{{project}}/_apis/build/builds?definitions={{definition_id}}&$top=1&api-version=7.0
      inputParameters:
      - name: project
        in: path
      - name: definition_id
        in: query
      operations:
      - name: get-builds
        method: GET

Creates a Zoom meeting and sends calendar invites via Microsoft Outlook.

naftiko: '0.5'
info:
  label: Zoom Meeting Scheduler
  description: Creates a Zoom meeting and sends calendar invites via Microsoft Outlook.
  tags:
  - communications
  - meetings
  - zoom
  - microsoft-outlook
capability:
  exposes:
  - type: mcp
    namespace: meeting-scheduler
    port: 8080
    tools:
    - name: schedule-meeting
      description: Create a Zoom meeting and send invites.
      inputParameters:
      - name: topic
        in: body
        type: string
        description: Meeting topic.
      - name: start_time
        in: body
        type: string
        description: Start time in ISO 8601.
      - name: attendee_emails
        in: body
        type: array
        description: Attendee email list.
      steps:
      - name: create-meeting
        type: call
        call: zoom.create-meeting
        with:
          topic: '{{topic}}'
          start_time: '{{start_time}}'
      - name: send-invite
        type: call
        call: outlook.send-email
        with:
          to: '{{attendee_emails}}'
          subject: 'Meeting: {{topic}}'
          body: 'Join Zoom: {{create-meeting.join_url}}'
  consumes:
  - type: http
    namespace: zoom
    baseUri: https://api.zoom.us/v2
    authentication:
      type: bearer
      token: $secrets.zoom_token
    resources:
    - name: meetings
      path: /users/me/meetings
      operations:
      - name: create-meeting
        method: POST
  - type: http
    namespace: outlook
    baseUri: https://graph.microsoft.com/v1.0/me
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - name: mail
      path: /sendMail
      operations:
      - name: send-email
        method: POST

Retrieves a travel expense report from SAP Concur and creates a Jira approval task.

naftiko: '0.5'
info:
  label: SAP Concur Travel Expense Processor
  description: Retrieves a travel expense report from SAP Concur and creates a Jira approval task.
  tags:
  - finance
  - travel
  - sap-concur
  - jira
capability:
  exposes:
  - type: mcp
    namespace: travel-expenses
    port: 8080
    tools:
    - name: process-expense-report
      description: Validate a Concur expense report and route for approval.
      inputParameters:
      - name: report_id
        in: body
        type: string
        description: The SAP Concur expense report ID.
      steps:
      - name: get-report
        type: call
        call: concur.get-expense-report
        with:
          report_id: '{{report_id}}'
      - name: create-approval
        type: call
        call: jira.create-issue
        with:
          project_key: FIN
          summary: 'Expense review: {{get-report.employee_name}} - {{get-report.total_amount}} {{get-report.currency}}'
          issue_type: Task
  consumes:
  - type: http
    namespace: concur
    baseUri: https://us.api.concursolutions.com/api/v3.0
    authentication:
      type: bearer
      token: $secrets.concur_token
    resources:
    - name: reports
      path: /expense/reports/{{report_id}}
      inputParameters:
      - name: report_id
        in: path
      operations:
      - name: get-expense-report
        method: GET
  - type: http
    namespace: jira
    baseUri: https://hearst.atlassian.net/rest/api/3
    authentication:
      type: basic
      username: $secrets.jira_user
      password: $secrets.jira_api_token
    resources:
    - name: issues
      path: /issue
      operations:
      - name: create-issue
        method: POST

On critical alert from Datadog, creates ServiceNow incident, pages on-call via Slack, and opens Zoom bridge.

naftiko: '0.5'
info:
  label: IT Incident Response Pipeline
  description: On critical alert from Datadog, creates ServiceNow incident, pages on-call via Slack, and opens Zoom bridge.
  tags:
  - incident
  - datadog
  - servicenow
  - slack
  - zoom
capability:
  exposes:
  - type: mcp
    namespace: it-incident-response-pipeline
    port: 8080
    tools:
    - name: execute
      description: On critical alert from Datadog, creates ServiceNow incident, pages on-call via Slack, and opens Zoom bridge.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: datadog.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: servicenow.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: slack.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: zoom.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: datadog
    baseUri: https://api.datadog.com/v1
    authentication:
      type: bearer
      token: $secrets.datadog_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: servicenow
    baseUri: https://api.servicenow.com/v1
    authentication:
      type: bearer
      token: $secrets.servicenow_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: slack
    baseUri: https://api.slack.com/v1
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: zoom
    baseUri: https://api.zoom.com/v1
    authentication:
      type: bearer
      token: $secrets.zoom_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST

Checks Cloudflare CDN performance metrics for Hearst digital properties.

naftiko: '0.5'
info:
  label: Cloudflare CDN Performance Monitor
  description: Checks Cloudflare CDN performance metrics for Hearst digital properties.
  tags:
  - performance
  - cdn
  - cloudflare
capability:
  exposes:
  - type: mcp
    namespace: cdn-monitoring
    port: 8080
    tools:
    - name: check-cdn-performance
      description: Check CDN performance for a Cloudflare zone.
      inputParameters:
      - name: zone_id
        in: body
        type: string
        description: The Cloudflare zone ID.
      call: cloudflare.get-zone-analytics
      with:
        zone_id: '{{zone_id}}'
      outputParameters:
      - name: cache_hit_rate
        type: string
        mapping: $.result.totals.requests.cached
      - name: bandwidth_saved
        type: string
        mapping: $.result.totals.bandwidth.cached
      - name: total_requests
        type: integer
        mapping: $.result.totals.requests.all
  consumes:
  - type: http
    namespace: cloudflare
    baseUri: https://api.cloudflare.com/client/v4
    authentication:
      type: bearer
      token: $secrets.cloudflare_token
    resources:
    - name: analytics
      path: /zones/{{zone_id}}/analytics/dashboard
      inputParameters:
      - name: zone_id
        in: path
      operations:
      - name: get-zone-analytics
        method: GET

Uploads episode to Amazon S3, updates RSS feed, promotes on Instagram, and tracks downloads in Google Analytics.

naftiko: '0.5'
info:
  label: Podcast Episode Publishing Pipeline
  description: Uploads episode to Amazon S3, updates RSS feed, promotes on Instagram, and tracks downloads in Google Analytics.
  tags:
  - content
  - amazon-s3
  - instagram
  - google-analytics
capability:
  exposes:
  - type: mcp
    namespace: podcast-episode-publishing-pipeline
    port: 8080
    tools:
    - name: execute
      description: Uploads episode to Amazon S3, updates RSS feed, promotes on Instagram, and tracks downloads in Google Analytics.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: amazon-s3.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: instagram.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: google-analytics.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: google-analytics.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: amazon-s3
    baseUri: https://api.amazons3.com/v1
    authentication:
      type: bearer
      token: $secrets.amazon_s3_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: instagram
    baseUri: https://api.instagram.com/v1
    authentication:
      type: bearer
      token: $secrets.instagram_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: google-analytics
    baseUri: https://api.googleanalytics.com/v1
    authentication:
      type: bearer
      token: $secrets.google_analytics_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST

Pulls revenue data from SAP and writes to a Google Sheets dashboard.

naftiko: '0.5'
info:
  label: Google Sheets Revenue Dashboard Sync
  description: Pulls revenue data from SAP and writes to a Google Sheets dashboard.
  tags:
  - reporting
  - google-sheets
  - sap
capability:
  exposes:
  - type: mcp
    namespace: sheets-revenue
    port: 8080
    tools:
    - name: sync-revenue-dashboard
      description: Sync SAP revenue data to Google Sheets.
      inputParameters:
      - name: spreadsheet_id
        in: body
        type: string
        description: The Google Sheets ID.
      - name: period
        in: body
        type: string
        description: The revenue period.
      steps:
      - name: get-revenue
        type: call
        call: sap.get-revenue-summary
        with:
          period: '{{period}}'
      - name: update-sheet
        type: call
        call: gsheets.update-values
        with:
          spreadsheet_id: '{{spreadsheet_id}}'
          range: Revenue!A2:D2
          values:
          - - '{{period}}'
            - '{{get-revenue.ad_revenue}}'
            - '{{get-revenue.subscription_revenue}}'
            - '{{get-revenue.total_revenue}}'
  consumes:
  - type: http
    namespace: sap
    baseUri: https://hearst-s4.sap.com/sap/opu/odata/sap/ZFI_REVENUE_SRV
    authentication:
      type: basic
      username: $secrets.sap_user
      password: $secrets.sap_password
    resources:
    - name: revenue
      path: /RevenueSummarySet('{{period}}')
      inputParameters:
      - name: period
        in: path
      operations:
      - name: get-revenue-summary
        method: GET
  - type: http
    namespace: gsheets
    baseUri: https://sheets.googleapis.com/v4/spreadsheets
    authentication:
      type: bearer
      token: $secrets.google_sheets_token
    resources:
    - name: values
      path: /{{spreadsheet_id}}/values/{{range}}
      inputParameters:
      - name: spreadsheet_id
        in: path
      - name: range
        in: path
      operations:
      - name: update-values
        method: PUT

Creates partnership record in Salesforce, generates contract in DocuSign, sets up tracking in Google Sheets, and notifies via Microsoft Teams.

naftiko: '0.5'
info:
  label: Brand Partnership Pipeline
  description: Creates partnership record in Salesforce, generates contract in DocuSign, sets up tracking in Google Sheets, and notifies via Microsoft Teams.
  tags:
  - partnerships
  - salesforce
  - docusign
  - google-sheets
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: brand-partnership-pipeline
    port: 8080
    tools:
    - name: execute
      description: Creates partnership record in Salesforce, generates contract in DocuSign, sets up tracking in Google Sheets, and notifies via Microsoft Teams.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: salesforce.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: docusign.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: google-sheets.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: microsoft-teams.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: salesforce
    baseUri: https://api.salesforce.com/v1
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: docusign
    baseUri: https://api.docusign.com/v1
    authentication:
      type: bearer
      token: $secrets.docusign_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: google-sheets
    baseUri: https://api.googlesheets.com/v1
    authentication:
      type: bearer
      token: $secrets.google_sheets_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: microsoft-teams
    baseUri: https://api.microsoftteams.com/v1
    authentication:
      type: bearer
      token: $secrets.microsoft_teams_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST

Retrieves digital platform performance metrics from New Relic by application ID, returning response time and error rate.

naftiko: '0.5'
info:
  label: New Relic Platform Health Lookup
  description: Retrieves digital platform performance metrics from New Relic by application ID, returning response time and error rate.
  tags:
  - monitoring
  - new-relic
capability:
  exposes:
  - type: mcp
    namespace: newrelic-health
    port: 8080
    tools:
    - name: get-platform-health
      description: Look up platform health metrics in New Relic.
      inputParameters:
      - name: app_id
        in: body
        type: string
        description: The New Relic application ID.
      call: newrelic.get-app
      with:
        id: '{{app_id}}'
      outputParameters:
      - name: response_time
        type: string
        mapping: $.application.application_summary.response_time
      - name: error_rate
        type: string
        mapping: $.application.application_summary.error_rate
  consumes:
  - type: http
    namespace: newrelic
    baseUri: https://api.newrelic.com/v2
    authentication:
      type: bearer
      token: $secrets.newrelic_api_key
    resources:
    - name: applications
      path: /applications/{{id}}.json
      inputParameters:
      - name: id
        in: path
      operations:
      - name: get-app
        method: GET

When a new article is approved in the CMS, publishes to WordPress, pushes to Google Analytics for tracking, distributes via MailChimp to subscribers, and posts a teaser to LinkedIn.

naftiko: '0.5'
info:
  label: Article Publishing Orchestrator
  description: When a new article is approved in the CMS, publishes to WordPress, pushes to Google Analytics for tracking, distributes via MailChimp to subscribers, and posts a teaser to LinkedIn.
  tags:
  - publishing
  - content
  - wordpress
  - google-analytics
  - mailchimp
  - linkedin
capability:
  exposes:
  - type: mcp
    namespace: article-publishing
    port: 8080
    tools:
    - name: publish-article
      description: Publish an article across website, email, and social channels.
      inputParameters:
      - name: article_id
        in: body
        type: string
        description: The CMS article ID.
      - name: subscriber_list_id
        in: body
        type: string
        description: The MailChimp subscriber list ID.
      steps:
      - name: get-article
        type: call
        call: wordpress.get-post
        with:
          post_id: '{{article_id}}'
      - name: send-newsletter
        type: call
        call: mailchimp.create-campaign
        with:
          list_id: '{{subscriber_list_id}}'
          subject: '{{get-article.title}}'
          body: '{{get-article.excerpt}} Read more: {{get-article.url}}'
      - name: send-campaign
        type: call
        call: mailchimp.send-campaign
        with:
          campaign_id: '{{send-newsletter.id}}'
      - name: post-social
        type: call
        call: linkedin.create-post
        with:
          author: urn:li:organization:hearst
          text: '{{get-article.title}} - {{get-article.excerpt}} Read more: {{get-article.url}} #Hearst #Media'
  consumes:
  - type: http
    namespace: wordpress
    baseUri: https://hearst.com/wp-json/wp/v2
    authentication:
      type: bearer
      token: $secrets.wordpress_token
    resources:
    - name: posts
      path: /posts/{{post_id}}
      inputParameters:
      - name: post_id
        in: path
      operations:
      - name: get-post
        method: GET
  - type: http
    namespace: mailchimp
    baseUri: https://us1.api.mailchimp.com/3.0
    authentication:
      type: basic
      username: anystring
      password: $secrets.mailchimp_api_key
    resources:
    - name: campaigns
      path: /campaigns
      operations:
      - name: create-campaign
        method: POST
    - name: campaign-actions
      path: /campaigns/{{campaign_id}}/actions/send
      inputParameters:
      - name: campaign_id
        in: path
      operations:
      - name: send-campaign
        method: POST
  - type: http
    namespace: linkedin
    baseUri: https://api.linkedin.com/v2
    authentication:
      type: bearer
      token: $secrets.linkedin_token
    resources:
    - name: posts
      path: /ugcPosts
      operations:
      - name: create-post
        method: POST

Retrieves payroll summary from ADP for a given pay period.

naftiko: '0.5'
info:
  label: ADP Payroll Summary
  description: Retrieves payroll summary from ADP for a given pay period.
  tags:
  - hr
  - payroll
  - adp
capability:
  exposes:
  - type: mcp
    namespace: hr-payroll
    port: 8080
    tools:
    - name: get-payroll-summary
      description: Get payroll summary from ADP.
      inputParameters:
      - name: pay_period
        in: body
        type: string
        description: The pay period identifier.
      call: adp.get-payroll
      with:
        pay_period: '{{pay_period}}'
      outputParameters:
      - name: total_gross
        type: string
        mapping: $.payrollSummary.totalGross
      - name: total_net
        type: string
        mapping: $.payrollSummary.totalNet
      - name: employee_count
        type: integer
        mapping: $.payrollSummary.headcount
  consumes:
  - type: http
    namespace: adp
    baseUri: https://api.adp.com/hr/v2
    authentication:
      type: bearer
      token: $secrets.adp_token
    resources:
    - name: payroll
      path: /payroll-outputs?payPeriod={{pay_period}}
      inputParameters:
      - name: pay_period
        in: query
      operations:
      - name: get-payroll
        method: GET

Identifies expiring subscriptions in Stripe, creates renewal campaigns in MailChimp, tracks in Salesforce, and logs in Snowflake.

naftiko: '0.5'
info:
  label: Subscription Renewal Campaign Pipeline
  description: Identifies expiring subscriptions in Stripe, creates renewal campaigns in MailChimp, tracks in Salesforce, and logs in Snowflake.
  tags:
  - subscriptions
  - stripe
  - mailchimp
  - salesforce
  - snowflake
capability:
  exposes:
  - type: mcp
    namespace: subscription-renewal-campaign-pipeline
    port: 8080
    tools:
    - name: execute
      description: Identifies expiring subscriptions in Stripe, creates renewal campaigns in MailChimp, tracks in Salesforce, and logs in Snowflake.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: stripe.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: mailchimp.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: salesforce.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: snowflake.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: stripe
    baseUri: https://api.stripe.com/v1
    authentication:
      type: bearer
      token: $secrets.stripe_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: mailchimp
    baseUri: https://api.mailchimp.com/v1
    authentication:
      type: bearer
      token: $secrets.mailchimp_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: salesforce
    baseUri: https://api.salesforce.com/v1
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: snowflake
    baseUri: https://api.snowflake.com/v1
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST

Retrieves an advertiser account from Salesforce by ID, returning company name, industry, annual spend, and account manager.

naftiko: '0.5'
info:
  label: Salesforce Advertiser Account Lookup
  description: Retrieves an advertiser account from Salesforce by ID, returning company name, industry, annual spend, and account manager.
  tags:
  - advertising
  - crm
  - salesforce
capability:
  exposes:
  - type: mcp
    namespace: advertiser-accounts
    port: 8080
    tools:
    - name: get-advertiser-account
      description: Look up a Salesforce advertiser account.
      inputParameters:
      - name: account_id
        in: body
        type: string
        description: The Salesforce account ID.
      call: salesforce.get-account
      with:
        account_id: '{{account_id}}'
      outputParameters:
      - name: company_name
        type: string
        mapping: $.Name
      - name: industry
        type: string
        mapping: $.Industry
      - name: annual_spend
        type: string
        mapping: $.Annual_Ad_Spend__c
      - name: account_manager
        type: string
        mapping: $.Owner.Name
  consumes:
  - type: http
    namespace: salesforce
    baseUri: https://hearst.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: accounts
      path: /sobjects/Account/{{account_id}}
      inputParameters:
      - name: account_id
        in: path
      operations:
      - name: get-account
        method: GET

Posts article teasers and breaking news alerts to the Hearst Twitter account.

naftiko: '0.5'
info:
  label: Twitter Content Amplifier
  description: Posts article teasers and breaking news alerts to the Hearst Twitter account.
  tags:
  - social-media
  - content
  - twitter
capability:
  exposes:
  - type: mcp
    namespace: twitter-publishing
    port: 8080
    tools:
    - name: post-tweet
      description: Post a tweet to the Hearst Twitter account.
      inputParameters:
      - name: tweet_text
        in: body
        type: string
        description: The tweet content.
      call: twitter.create-tweet
      with:
        text: '{{tweet_text}}'
  consumes:
  - type: http
    namespace: twitter
    baseUri: https://api.twitter.com/2
    authentication:
      type: bearer
      token: $secrets.twitter_bearer_token
    resources:
    - name: tweets
      path: /tweets
      operations:
      - name: create-tweet
        method: POST

Archives completed editorial content from SharePoint to Box for long-term storage.

naftiko: '0.5'
info:
  label: Box Editorial Archive
  description: Archives completed editorial content from SharePoint to Box for long-term storage.
  tags:
  - document-management
  - archival
  - sharepoint
  - box
capability:
  exposes:
  - type: mcp
    namespace: editorial-archive
    port: 8080
    tools:
    - name: archive-to-box
      description: Archive editorial content to Box.
      inputParameters:
      - name: site_id
        in: body
        type: string
        description: SharePoint site ID.
      - name: file_path
        in: body
        type: string
        description: File path.
      - name: box_folder_id
        in: body
        type: string
        description: Box folder ID.
      steps:
      - name: get-file
        type: call
        call: sharepoint.get-file-content
        with:
          site_id: '{{site_id}}'
          file_path: '{{file_path}}'
      - name: upload-to-box
        type: call
        call: box.upload-file
        with:
          folder_id: '{{box_folder_id}}'
          file_name: '{{file_path}}'
  consumes:
  - type: http
    namespace: sharepoint
    baseUri: https://graph.microsoft.com/v1.0/sites
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - name: drive-items
      path: /{{site_id}}/drive/root:/{{file_path}}:/content
      inputParameters:
      - name: site_id
        in: path
      - name: file_path
        in: path
      operations:
      - name: get-file-content
        method: GET
  - type: http
    namespace: box
    baseUri: https://upload.box.com/api/2.0
    authentication:
      type: bearer
      token: $secrets.box_token
    resources:
    - name: files
      path: /files/content
      operations:
      - name: upload-file
        method: POST

Detects negative sentiment via Snowflake, pauses campaigns in Facebook, alerts PR team via Slack, and creates Jira incident.

naftiko: '0.5'
info:
  label: Social Media Crisis Response Pipeline
  description: Detects negative sentiment via Snowflake, pauses campaigns in Facebook, alerts PR team via Slack, and creates Jira incident.
  tags:
  - crisis
  - snowflake
  - facebook
  - slack
  - jira
capability:
  exposes:
  - type: mcp
    namespace: social-media-crisis-response-pipeline
    port: 8080
    tools:
    - name: execute
      description: Detects negative sentiment via Snowflake, pauses campaigns in Facebook, alerts PR team via Slack, and creates Jira incident.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: snowflake.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: facebook.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: slack.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: jira.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: snowflake
    baseUri: https://api.snowflake.com/v1
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: facebook
    baseUri: https://api.facebook.com/v1
    authentication:
      type: bearer
      token: $secrets.facebook_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: slack
    baseUri: https://api.slack.com/v1
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: jira
    baseUri: https://api.jira.com/v1
    authentication:
      type: bearer
      token: $secrets.jira_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST

Detects vulnerabilities via Splunk, creates Jira tickets, notifies security team via Slack, and triggers patches in Azure DevOps.

naftiko: '0.5'
info:
  label: Security Vulnerability Pipeline
  description: Detects vulnerabilities via Splunk, creates Jira tickets, notifies security team via Slack, and triggers patches in Azure DevOps.
  tags:
  - security
  - splunk
  - jira
  - slack
  - azure-devops
capability:
  exposes:
  - type: mcp
    namespace: security-vulnerability-pipeline
    port: 8080
    tools:
    - name: execute
      description: Detects vulnerabilities via Splunk, creates Jira tickets, notifies security team via Slack, and triggers patches in Azure DevOps.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: splunk.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: jira.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: slack.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: azure-devops.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: splunk
    baseUri: https://api.splunk.com/v1
    authentication:
      type: bearer
      token: $secrets.splunk_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: jira
    baseUri: https://api.jira.com/v1
    authentication:
      type: bearer
      token: $secrets.jira_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: slack
    baseUri: https://api.slack.com/v1
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: azure-devops
    baseUri: https://api.azuredevops.com/v1
    authentication:
      type: bearer
      token: $secrets.azure_devops_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST

Retrieves a Figma editorial layout design file by key, returning file name, last modified date, and thumbnail URL.

naftiko: '0.5'
info:
  label: Figma Editorial Design Lookup
  description: Retrieves a Figma editorial layout design file by key, returning file name, last modified date, and thumbnail URL.
  tags:
  - design
  - figma
capability:
  exposes:
  - type: mcp
    namespace: figma-editorial
    port: 8080
    tools:
    - name: get-design
      description: Look up a Figma editorial design file by key.
      inputParameters:
      - name: file_key
        in: body
        type: string
        description: The Figma file key.
      call: figma.get-file
      with:
        key: '{{file_key}}'
      outputParameters:
      - name: file_name
        type: string
        mapping: $.name
      - name: last_modified
        type: string
        mapping: $.lastModified
  consumes:
  - type: http
    namespace: figma
    baseUri: https://api.figma.com/v1
    authentication:
      type: bearer
      token: $secrets.figma_token
    resources:
    - name: files
      path: /files/{{key}}
      inputParameters:
      - name: key
        in: path
      operations:
      - name: get-file
        method: GET

Retrieves vendor master data from SAP by vendor number for Hearst procurement.

naftiko: '0.5'
info:
  label: SAP Vendor Master Lookup
  description: Retrieves vendor master data from SAP by vendor number for Hearst procurement.
  tags:
  - procurement
  - sap
capability:
  exposes:
  - type: mcp
    namespace: sap-vendors
    port: 8080
    tools:
    - name: get-data
      description: Retrieves vendor master data from SAP by vendor number for Hearst procurement.
      inputParameters:
      - name: query_id
        in: body
        type: string
        description: The lookup identifier.
      call: sap-vendors.get-data
      with:
        id: '{{query_id}}'
      outputParameters:
      - name: result
        type: string
        mapping: $.data
  consumes:
  - type: http
    namespace: sap-vendors
    baseUri: https://hearst-s4.sap.com/sap/opu/odata/sap/ZVENDOR_SRV
    authentication:
      type: bearer
      token: $secrets.sap_token
    resources:
    - name: data
      path: /{{id}}
      inputParameters:
      - name: id
        in: path
      operations:
      - name: get-data
        method: GET

When a video is uploaded to YouTube, creates a content record in Salesforce, embeds in WordPress, and shares via Microsoft Teams.

naftiko: '0.5'
info:
  label: Video Content Workflow
  description: When a video is uploaded to YouTube, creates a content record in Salesforce, embeds in WordPress, and shares via Microsoft Teams.
  tags:
  - video
  - publishing
  - youtube
  - salesforce
  - wordpress
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: video-workflow
    port: 8080
    tools:
    - name: process-video-upload
      description: Process a new video by linking to CMS, CRM, and notifying teams.
      inputParameters:
      - name: video_id
        in: body
        type: string
        description: The YouTube video ID.
      - name: article_id
        in: body
        type: string
        description: The WordPress article to embed in.
      steps:
      - name: get-video
        type: call
        call: youtube.get-video
        with:
          video_id: '{{video_id}}'
      - name: create-content-record
        type: call
        call: salesforce.create-content
        with:
          title: '{{get-video.title}}'
          type: Video
          url: https://www.youtube.com/watch?v={{video_id}}
      - name: update-article
        type: call
        call: wordpress.update-post
        with:
          post_id: '{{article_id}}'
          video_embed: '{{video_id}}'
      - name: notify-team
        type: call
        call: msteams.send-message
        with:
          channel_id: content-team
          text: 'New video published: {{get-video.title}}. Embedded in article {{article_id}}. Watch: https://www.youtube.com/watch?v={{video_id}}'
  consumes:
  - type: http
    namespace: youtube
    baseUri: https://www.googleapis.com/youtube/v3
    authentication:
      type: bearer
      token: $secrets.youtube_token
    resources:
    - name: videos
      path: /videos?id={{video_id}}&part=snippet
      inputParameters:
      - name: video_id
        in: query
      operations:
      - name: get-video
        method: GET
  - type: http
    namespace: salesforce
    baseUri: https://hearst.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: content
      path: /sobjects/Content__c
      operations:
      - name: create-content
        method: POST
  - type: http
    namespace: wordpress
    baseUri: https://hearst.com/wp-json/wp/v2
    authentication:
      type: bearer
      token: $secrets.wordpress_token
    resources:
    - name: posts
      path: /posts/{{post_id}}
      inputParameters:
      - name: post_id
        in: path
      operations:
      - name: update-post
        method: PATCH
  - type: http
    namespace: msteams
    baseUri: https://graph.microsoft.com/v1.0
    authentication:
      type: bearer
      token: $secrets.msgraph_token
    resources:
    - name: channel-messages
      path: /teams/{{channel_id}}/channels/general/messages
      inputParameters:
      - name: channel_id
        in: path
      operations:
      - name: send-message
        method: POST

Retrieves content performance metrics from Google Analytics for a page, returning page views, time on page, and bounce rate.

naftiko: '0.5'
info:
  label: Google Analytics Content Performance
  description: Retrieves content performance metrics from Google Analytics for a page, returning page views, time on page, and bounce rate.
  tags:
  - analytics
  - content
  - google-analytics
capability:
  exposes:
  - type: mcp
    namespace: content-analytics
    port: 8080
    tools:
    - name: get-content-performance
      description: Get Google Analytics metrics for a content page.
      inputParameters:
      - name: page_path
        in: body
        type: string
        description: The page URL path.
      call: ga.get-page-metrics
      with:
        page_path: '{{page_path}}'
      outputParameters:
      - name: page_views
        type: integer
        mapping: $.rows[0].metricValues[0].value
      - name: avg_time_on_page
        type: string
        mapping: $.rows[0].metricValues[1].value
      - name: bounce_rate
        type: string
        mapping: $.rows[0].metricValues[2].value
  consumes:
  - type: http
    namespace: ga
    baseUri: https://analyticsdata.googleapis.com/v1beta
    authentication:
      type: bearer
      token: $secrets.google_analytics_token
    resources:
    - name: reports
      path: /properties/{{property_id}}:runReport
      inputParameters:
      - name: property_id
        in: path
      operations:
      - name: get-page-metrics
        method: POST

Combines paywall conversion data from Adobe Analytics with subscriber data from Salesforce, and pushes to Power BI for paywall optimization insights.

naftiko: '0.5'
info:
  label: Paywall Analytics Pipeline
  description: Combines paywall conversion data from Adobe Analytics with subscriber data from Salesforce, and pushes to Power BI for paywall optimization insights.
  tags:
  - subscriptions
  - analytics
  - adobe-analytics
  - salesforce
  - power-bi
capability:
  exposes:
  - type: mcp
    namespace: paywall-analytics
    port: 8080
    tools:
    - name: analyze-paywall
      description: Analyze paywall performance and push insights to Power BI.
      inputParameters:
      - name: publication
        in: body
        type: string
        description: The publication name.
      - name: period
        in: body
        type: string
        description: The analysis period.
      steps:
      - name: get-paywall-data
        type: call
        call: adobe-analytics.get-paywall-metrics
        with:
          publication: '{{publication}}'
          period: '{{period}}'
      - name: get-subscriber-data
        type: call
        call: salesforce.get-subscriber-metrics
        with:
          publication: '{{publication}}'
      - name: push-to-bi
        type: call
        call: powerbi.push-rows
        with:
          dataset_id: paywall_analytics_ds
          table_name: Paywall
          rows:
          - publication: '{{publication}}'
            period: '{{period}}'
            paywall_hits: '{{get-paywall-data.paywall_hits}}'
            conversion_rate: '{{get-paywall-data.conversion_rate}}'
            new_subscribers: '{{get-subscriber-data.new_count}}'
  consumes:
  - type: http
    namespace: adobe-analytics
    baseUri: https://analytics.adobe.io/api
    authentication:
      type: bearer
      token: $secrets.adobe_analytics_token
    resources:
    - name: reports
      path: /hearst/reports
      operations:
      - name: get-paywall-metrics
        method: POST
  - type: http
    namespace: salesforce
    baseUri: https://hearst.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: subscribers
      path: /sobjects/Subscriber_Metrics__c
      operations:
      - name: get-subscriber-metrics
        method: GET
  - type: http
    namespace: powerbi
    baseUri: https://api.powerbi.com/v1.0/myorg
    authentication:
      type: bearer
      token: $secrets.powerbi_token
    resources:
    - name: datasets
      path: /datasets/{{dataset_id}}/tables/{{table_name}}/rows
      inputParameters:
      - name: dataset_id
        in: path
      - name: table_name
        in: path
      operations:
      - name: push-rows
        method: POST

Sends a message to a specified Slack editorial channel, returning the message timestamp and confirmation.

naftiko: '0.5'
info:
  label: Slack Editorial Channel Sender
  description: Sends a message to a specified Slack editorial channel, returning the message timestamp and confirmation.
  tags:
  - communications
  - slack
capability:
  exposes:
  - type: mcp
    namespace: slack-editorial
    port: 8080
    tools:
    - name: send-message
      description: Send a message to a Slack editorial channel.
      inputParameters:
      - name: channel_name
        in: body
        type: string
        description: The Slack channel name.
      - name: message_text
        in: body
        type: string
        description: The message content.
      call: slack.post-message
      with:
        channel: '{{channel_name}}'
        text: '{{message_text}}'
      outputParameters:
      - name: timestamp
        type: string
        mapping: $.ts
  consumes:
  - type: http
    namespace: slack
    baseUri: https://slack.com/api
    authentication:
      type: bearer
      token: $secrets.slack_bot_token
    resources:
    - name: messages
      path: /chat.postMessage
      operations:
      - name: post-message
        method: POST

Collects public records data, stores in Snowflake, creates research project in Confluence, and assigns tasks in Jira.

naftiko: '0.5'
info:
  label: Investigative Story Research Pipeline
  description: Collects public records data, stores in Snowflake, creates research project in Confluence, and assigns tasks in Jira.
  tags:
  - editorial
  - snowflake
  - confluence
  - jira
capability:
  exposes:
  - type: mcp
    namespace: investigative-story-research-pipeline
    port: 8080
    tools:
    - name: execute
      description: Collects public records data, stores in Snowflake, creates research project in Confluence, and assigns tasks in Jira.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: snowflake.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: confluence.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: jira.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: jira.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: snowflake
    baseUri: https://api.snowflake.com/v1
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: confluence
    baseUri: https://api.confluence.com/v1
    authentication:
      type: bearer
      token: $secrets.confluence_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: jira
    baseUri: https://api.jira.com/v1
    authentication:
      type: bearer
      token: $secrets.jira_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST

Triggers SAP period close, generates Power BI reports, archives in Box, and notifies leadership via Microsoft Teams.

naftiko: '0.5'
info:
  label: Financial Close Pipeline
  description: Triggers SAP period close, generates Power BI reports, archives in Box, and notifies leadership via Microsoft Teams.
  tags:
  - finance
  - sap
  - power-bi
  - box
  - microsoft-teams
capability:
  exposes:
  - type: mcp
    namespace: financial-close-pipeline
    port: 8080
    tools:
    - name: execute
      description: Triggers SAP period close, generates Power BI reports, archives in Box, and notifies leadership via Microsoft Teams.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: sap.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: power-bi.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: box.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: microsoft-teams.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: sap
    baseUri: https://api.sap.com/v1
    authentication:
      type: bearer
      token: $secrets.sap_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: power-bi
    baseUri: https://api.powerbi.com/v1
    authentication:
      type: bearer
      token: $secrets.power_bi_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: box
    baseUri: https://api.box.com/v1
    authentication:
      type: bearer
      token: $secrets.box_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: microsoft-teams
    baseUri: https://api.microsoftteams.com/v1
    authentication:
      type: bearer
      token: $secrets.microsoft_teams_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST

Retrieves a Canva brand template by ID for Hearst editorial design teams.

naftiko: '0.5'
info:
  label: Canva Brand Template Lookup
  description: Retrieves a Canva brand template by ID for Hearst editorial design teams.
  tags:
  - design
  - canva
capability:
  exposes:
  - type: mcp
    namespace: canva-templates
    port: 8080
    tools:
    - name: get-data
      description: Retrieves a Canva brand template by ID for Hearst editorial design teams.
      inputParameters:
      - name: query_id
        in: body
        type: string
        description: The lookup identifier.
      call: canva-templates.get-data
      with:
        id: '{{query_id}}'
      outputParameters:
      - name: result
        type: string
        mapping: $.data
  consumes:
  - type: http
    namespace: canva-templates
    baseUri: https://api.canva.com/rest/v1
    authentication:
      type: bearer
      token: $secrets.canva_token
    resources:
    - name: data
      path: /{{id}}
      inputParameters:
      - name: id
        in: path
      operations:
      - name: get-data
        method: GET

Retrieves a ServiceNow incident by number, returning state, priority, and assigned group.

naftiko: '0.5'
info:
  label: ServiceNow IT Ticket Status
  description: Retrieves a ServiceNow incident by number, returning state, priority, and assigned group.
  tags:
  - it-service
  - servicenow
capability:
  exposes:
  - type: mcp
    namespace: itsm-tickets
    port: 8080
    tools:
    - name: get-ticket-status
      description: Look up a ServiceNow incident by number.
      inputParameters:
      - name: incident_number
        in: body
        type: string
        description: The ServiceNow incident number.
      call: servicenow.get-incident
      with:
        incident_number: '{{incident_number}}'
      outputParameters:
      - name: state
        type: string
        mapping: $.result[0].state
      - name: priority
        type: string
        mapping: $.result[0].priority
      - name: assigned_group
        type: string
        mapping: $.result[0].assignment_group.display_value
  consumes:
  - type: http
    namespace: servicenow
    baseUri: https://hearst.service-now.com/api/now
    authentication:
      type: basic
      username: $secrets.servicenow_user
      password: $secrets.servicenow_password
    resources:
    - name: incidents
      path: /table/incident?sysparm_query=number={{incident_number}}
      inputParameters:
      - name: incident_number
        in: path
      operations:
      - name: get-incident
        method: GET

Aggregates reader behavior from Snowflake, scores engagement via Azure ML, syncs to Salesforce, and reports in Tableau.

naftiko: '0.5'
info:
  label: Reader Engagement Scoring Pipeline
  description: Aggregates reader behavior from Snowflake, scores engagement via Azure ML, syncs to Salesforce, and reports in Tableau.
  tags:
  - engagement
  - snowflake
  - azure-machine-learning
  - salesforce
  - tableau
capability:
  exposes:
  - type: mcp
    namespace: reader-engagement-scoring-pipeline
    port: 8080
    tools:
    - name: execute
      description: Aggregates reader behavior from Snowflake, scores engagement via Azure ML, syncs to Salesforce, and reports in Tableau.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: snowflake.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: azure-machine-learning.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: salesforce.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: tableau.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: snowflake
    baseUri: https://api.snowflake.com/v1
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: azure-machine-learning
    baseUri: https://api.azuremachinelearning.com/v1
    authentication:
      type: bearer
      token: $secrets.azure_machine_learning_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: salesforce
    baseUri: https://api.salesforce.com/v1
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: tableau
    baseUri: https://api.tableau.com/v1
    authentication:
      type: bearer
      token: $secrets.tableau_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST

Retrieves an employee benefits enrollment summary from Workday by employee ID, returning plan name and coverage level.

naftiko: '0.5'
info:
  label: Workday Employee Benefits Lookup
  description: Retrieves an employee benefits enrollment summary from Workday by employee ID, returning plan name and coverage level.
  tags:
  - hr
  - workday
capability:
  exposes:
  - type: mcp
    namespace: workday-benefits
    port: 8080
    tools:
    - name: get-benefits
      description: Look up employee benefits in Workday.
      inputParameters:
      - name: employee_id
        in: body
        type: string
        description: The Workday employee ID.
      call: workday.get-benefits
      with:
        id: '{{employee_id}}'
      outputParameters:
      - name: plan_name
        type: string
        mapping: $.Benefit_Plan
      - name: coverage_level
        type: string
        mapping: $.Coverage_Level
  consumes:
  - type: http
    namespace: workday
    baseUri: https://wd5-impl-services1.workday.com/ccx/service/hearst
    authentication:
      type: bearer
      token: $secrets.workday_token
    resources:
    - name: benefits
      path: /Benefits/{{id}}
      inputParameters:
      - name: id
        in: path
      operations:
      - name: get-benefits
        method: GET

Coordinates magazine production by syncing editorial calendar from Airtable, tracking layouts in Figma, uploading to SharePoint, and notifying editors via Slack.

naftiko: '0.5'
info:
  label: Magazine Issue Production Pipeline
  description: Coordinates magazine production by syncing editorial calendar from Airtable, tracking layouts in Figma, uploading to SharePoint, and notifying editors via Slack.
  tags:
  - editorial
  - airtable
  - figma
  - sharepoint
  - slack
capability:
  exposes:
  - type: mcp
    namespace: magazine-issue-production-pipeline
    port: 8080
    tools:
    - name: execute
      description: Coordinates magazine production by syncing editorial calendar from Airtable, tracking layouts in Figma, uploading to SharePoint, and notifying editors via Slack.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: airtable.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: figma.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: sharepoint.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: slack.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: airtable
    baseUri: https://api.airtable.com/v1
    authentication:
      type: bearer
      token: $secrets.airtable_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: figma
    baseUri: https://api.figma.com/v1
    authentication:
      type: bearer
      token: $secrets.figma_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: sharepoint
    baseUri: https://api.sharepoint.com/v1
    authentication:
      type: bearer
      token: $secrets.sharepoint_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: slack
    baseUri: https://api.slack.com/v1
    authentication:
      type: bearer
      token: $secrets.slack_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST

Retrieves a Salesforce advertising opportunity by ID, returning deal stage, amount, close date, and account name.

naftiko: '0.5'
info:
  label: Salesforce Opportunity Lookup
  description: Retrieves a Salesforce advertising opportunity by ID, returning deal stage, amount, close date, and account name.
  tags:
  - sales
  - salesforce
capability:
  exposes:
  - type: mcp
    namespace: salesforce-opps
    port: 8080
    tools:
    - name: get-opportunity
      description: Look up a Salesforce advertising opportunity by ID.
      inputParameters:
      - name: opportunity_id
        in: body
        type: string
        description: The Salesforce opportunity ID.
      call: salesforce.get-opportunity
      with:
        id: '{{opportunity_id}}'
      outputParameters:
      - name: stage
        type: string
        mapping: $.StageName
      - name: amount
        type: string
        mapping: $.Amount
  consumes:
  - type: http
    namespace: salesforce
    baseUri: https://hearst.my.salesforce.com/services/data/v58.0
    authentication:
      type: bearer
      token: $secrets.salesforce_token
    resources:
    - name: opportunities
      path: /sobjects/Opportunity/{{id}}
      inputParameters:
      - name: id
        in: path
      operations:
      - name: get-opportunity
        method: GET

Collects environmental data from SAP, aggregates in Snowflake, generates reports in Google Sheets, and publishes to Confluence.

naftiko: '0.5'
info:
  label: Sustainability Reporting Pipeline
  description: Collects environmental data from SAP, aggregates in Snowflake, generates reports in Google Sheets, and publishes to Confluence.
  tags:
  - sustainability
  - sap
  - snowflake
  - google-sheets
  - confluence
capability:
  exposes:
  - type: mcp
    namespace: sustainability-reporting-pipeline
    port: 8080
    tools:
    - name: execute
      description: Collects environmental data from SAP, aggregates in Snowflake, generates reports in Google Sheets, and publishes to Confluence.
      inputParameters:
      - name: input_id
        in: body
        type: string
        description: The primary input identifier.
      - name: context
        in: body
        type: string
        description: Additional context parameter.
      steps:
      - name: step-1
        type: call
        call: sap.execute-step-1
        with:
          input: '{{input_id}}'
          context: '{{context}}'
      - name: step-2
        type: call
        call: snowflake.execute-step-2
        with:
          data: '{{step-1.result}}'
      - name: step-3
        type: call
        call: google-sheets.execute-step-3
        with:
          data: '{{step-2.result}}'
      - name: step-4
        type: call
        call: confluence.execute-step-4
        with:
          data: '{{step-3.result}}'
          id: '{{input_id}}'
  consumes:
  - type: http
    namespace: sap
    baseUri: https://api.sap.com/v1
    authentication:
      type: bearer
      token: $secrets.sap_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: snowflake
    baseUri: https://api.snowflake.com/v1
    authentication:
      type: bearer
      token: $secrets.snowflake_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: google-sheets
    baseUri: https://api.googlesheets.com/v1
    authentication:
      type: bearer
      token: $secrets.google_sheets_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST
  - type: http
    namespace: confluence
    baseUri: https://api.confluence.com/v1
    authentication:
      type: bearer
      token: $secrets.confluence_token
    resources:
    - name: resources
      path: /{{id}}
      operations:
      - name: execute
        method: POST