Freeport-McMoRan Capabilities

Reviews access at Freeport-McMoRan via Okta, IAM, and Jira.

naftiko: "0.5"
info:
  label: "Access Review Pipeline"
  description: "Reviews access at Freeport-McMoRan via Okta, IAM, and Jira."
  tags:
    - security
    - access-management
    - okta
    - compliance
capability:
  exposes:
    - type: mcp
      namespace: access-rev
      port: 8080
      tools:
        - name: review
          description: "Review access at Freeport-McMoRan."
          inputParameters:
            - name: dept
              in: body
              type: string
              description: "Department."
          steps:
            - name: ent
              type: call
              call: "okta.get-users"
              with:
                dept: "{{dept}}"
            - name: compare
              type: call
              call: "iam.compare"
              with:
                data: "{{ent.data}}"
            - name: flag
              type: call
              call: "iam.flag"
              with:
                violations: "{{compare.violations}}"
            - name: fix
              type: call
              call: "jira.create-issue"
              with:
                project: "IAM"
                summary: "Violations in {{dept}}"
  consumes:
    - type: http
      namespace: okta
      baseUri: "https://fcx.com.okta.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.okta_api_token"
      resources:
        - name: users
          path: "/users"
          operations:
            - name: get-users
              method: GET
    - type: http
      namespace: iam
      baseUri: "https://iam.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.iam_token"
      resources:
        - name: reviews
          path: "/compare"
          operations:
            - name: compare
              method: POST
    - type: http
      namespace: jira
      baseUri: "https://fcx.com.atlassian.net/rest/api/3"
      authentication:
        type: bearer
        token: "$secrets.jira_token"
      resources:
        - name: issues
          path: "/issue"
          operations:
            - name: create-issue
              method: POST

Manages API deprecation at Freeport-McMoRan via consumer identification, notices, and tracking.

naftiko: "0.5"
info:
  label: "API Deprecation Pipeline"
  description: "Manages API deprecation at Freeport-McMoRan via consumer identification, notices, and tracking."
  tags:
    - api-management
    - communications
    - governance
capability:
  exposes:
    - type: mcp
      namespace: api-sunset
      port: 8080
      tools:
        - name: notify-sunset
          description: "Manage API sunset at Freeport-McMoRan."
          inputParameters:
            - name: api
              in: body
              type: string
              description: "API name."
            - name: date
              in: body
              type: string
              description: "Sunset date."
          steps:
            - name: consumers
              type: call
              call: "api-gw.consumers"
              with:
                api: "{{api}}"
            - name: notify
              type: call
              call: "email.batch"
              with:
                to: "{{consumers.emails}}"
                subject: "{{api}} sunset: {{date}}"
            - name: track
              type: call
              call: "analytics.usage"
              with:
                api: "{{api}}"
            - name: ticket
              type: call
              call: "jira.create-issue"
              with:
                project: "API"
                summary: "Sunset {{api}} by {{date}}"
  consumes:
    - type: http
      namespace: api-gw
      baseUri: "https://api-gw.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.api_gw_token"
      resources:
        - name: consumers
          path: "/apis/{{api}}/consumers"
          inputParameters:
            - name: api
              in: path
          operations:
            - name: consumers
              method: GET
    - type: http
      namespace: email
      baseUri: "https://email.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.email_token"
      resources:
        - name: batch
          path: "/send-batch"
          operations:
            - name: batch
              method: POST
    - type: http
      namespace: analytics
      baseUri: "https://analytics.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.analytics_token"
      resources:
        - name: usage
          path: "/api-usage"
          operations:
            - name: usage
              method: GET
    - type: http
      namespace: jira
      baseUri: "https://fcx.com.atlassian.net/rest/api/3"
      authentication:
        type: bearer
        token: "$secrets.jira_token"
      resources:
        - name: issues
          path: "/issue"
          operations:
            - name: create-issue
              method: POST

Fetches an AutoCAD mine plan drawing from SharePoint.

naftiko: "0.5"
info:
  label: "AutoCAD Mine Plan Retrieval"
  description: "Fetches an AutoCAD mine plan drawing from SharePoint."
  tags:
    - engineering
    - autocad
    - sharepoint
capability:
  exposes:
    - type: mcp
      namespace: mine-plans
      port: 8080
      tools:
        - name: get-mine-plan
          description: "Retrieve a mine plan drawing from SharePoint."
          inputParameters:
            - name: plan_number
              in: body
              type: string
              description: "The mine plan drawing number."
            - name: mine_site
              in: body
              type: string
              description: "Mine site identifier."
          call: "sharepoint.get-file"
          with:
            site_id: "engineering_site"
            file_path: "MinePlans/{{mine_site}}/{{plan_number}}.dwg"
  consumes:
    - type: http
      namespace: sharepoint
      baseUri: "https://graph.microsoft.com/v1.0/sites"
      authentication:
        type: bearer
        token: "$secrets.msgraph_token"
      resources:
        - name: files
          path: "/{{site_id}}/drive/root:/{{file_path}}"
          inputParameters:
            - name: site_id
              in: path
            - name: file_path
              in: path
          operations:
            - name: get-file
              method: GET

Looks up a user in Azure Active Directory by UPN.

naftiko: "0.5"
info:
  label: "Azure Active Directory User Lookup"
  description: "Looks up a user in Azure Active Directory by UPN."
  tags:
    - identity
    - azure-active-directory
capability:
  exposes:
    - type: mcp
      namespace: identity
      port: 8080
      tools:
        - name: lookup-user
          description: "Look up an Azure AD user by UPN."
          inputParameters:
            - name: upn
              in: body
              type: string
              description: "User principal name (email)."
          call: "azuread.get-user"
          with:
            upn: "{{upn}}"
  consumes:
    - type: http
      namespace: azuread
      baseUri: "https://graph.microsoft.com/v1.0"
      authentication:
        type: bearer
        token: "$secrets.msgraph_token"
      resources:
        - name: users
          path: "/users/{{upn}}"
          inputParameters:
            - name: upn
              in: path
          operations:
            - name: get-user
              method: GET

Checks build at Freeport-McMoRan.

naftiko: "0.5"
info:
  label: "Azure DevOps Build Check"
  description: "Checks build at Freeport-McMoRan."
  tags:
    - devops
    - azure-devops
    - ci-cd
capability:
  exposes:
    - type: mcp
      namespace: azdo-build
      port: 8080
      tools:
        - name: check-build
          description: "Check build at Freeport-McMoRan."
          inputParameters:
            - name: project
              in: body
              type: string
              description: "Project."
            - name: build_id
              in: body
              type: string
              description: "Build ID."
          call: "azdo.get-build"
          with:
            project: "{{project}}"
            build_id: "{{build_id}}"
          outputParameters:
            - name: status
              type: string
              mapping: "$.status"
  consumes:
    - type: http
      namespace: azdo
      baseUri: "https://dev.azure.com/fcx.com"
      authentication:
        type: bearer
        token: "$secrets.azdo_token"
      resources:
        - name: builds
          path: "/{{project}}/_apis/build/builds/{{build_id}}"
          inputParameters:
            - name: project
              in: path
            - name: build_id
              in: path
          operations:
            - name: get-build
              method: GET

Retrieves the latest build pipeline status from Azure DevOps.

naftiko: "0.5"
info:
  label: "Azure DevOps Build Pipeline Status"
  description: "Retrieves the latest build pipeline status from Azure DevOps."
  tags:
    - development
    - azure-devops
capability:
  exposes:
    - type: mcp
      namespace: build-status
      port: 8080
      tools:
        - name: get-build-status
          description: "Fetch Azure DevOps build status."
          inputParameters:
            - name: project
              in: body
              type: string
              description: "Azure DevOps project name."
            - name: pipeline_id
              in: body
              type: string
              description: "Pipeline identifier."
          call: "azdo.get-build"
          with:
            project: "{{project}}"
            pipeline_id: "{{pipeline_id}}"
  consumes:
    - type: http
      namespace: azdo
      baseUri: "https://dev.azure.com/freeport"
      authentication:
        type: bearer
        token: "$secrets.azdo_token"
      resources:
        - name: builds
          path: "/{{project}}/_apis/build/builds"
          inputParameters:
            - name: project
              in: path
          operations:
            - name: get-build
              method: GET

Retrieves AKS cluster health and node status for mine site container workloads.

naftiko: "0.5"
info:
  label: "Azure Kubernetes Service Cluster Status"
  description: "Retrieves AKS cluster health and node status for mine site container workloads."
  tags:
    - infrastructure
    - azure-kubernetes-service
capability:
  exposes:
    - type: mcp
      namespace: aks-status
      port: 8080
      tools:
        - name: get-cluster-status
          description: "Fetch AKS cluster health by cluster name."
          inputParameters:
            - name: resource_group
              in: body
              type: string
              description: "Azure resource group."
            - name: cluster_name
              in: body
              type: string
              description: "AKS cluster name."
          call: "aks.get-cluster"
          with:
            resource_group: "{{resource_group}}"
            cluster_name: "{{cluster_name}}"
  consumes:
    - type: http
      namespace: aks
      baseUri: "https://management.azure.com/subscriptions/{{subscription_id}}/resourceGroups"
      authentication:
        type: bearer
        token: "$secrets.azure_token"
      resources:
        - name: clusters
          path: "/{{resource_group}}/providers/Microsoft.ContainerService/managedClusters/{{cluster_name}}"
          inputParameters:
            - name: resource_group
              in: path
            - name: cluster_name
              in: path
          operations:
            - name: get-cluster
              method: GET

Verifies backups at Freeport-McMoRan.

naftiko: "0.5"
info:
  label: "Backup Verification Pipeline"
  description: "Verifies backups at Freeport-McMoRan."
  tags:
    - database
    - backup
    - operations
capability:
  exposes:
    - type: mcp
      namespace: backup-verify
      port: 8080
      tools:
        - name: verify-backups
          description: "Verify backups at Freeport-McMoRan."
          inputParameters:
            - name: db
              in: body
              type: string
              description: "Database."
            - name: date
              in: body
              type: string
              description: "Backup date."
          steps:
            - name: status
              type: call
              call: "backup.get-status"
              with:
                db: "{{db}}"
                date: "{{date}}"
            - name: verify
              type: call
              call: "backup.verify"
              with:
                id: "{{status.backup_id}}"
            - name: log
              type: call
              call: "snowflake.query"
              with:
                query: "INSERT INTO backup_log VALUES ('{{db}}','{{date}}','{{verify.status}}')"
            - name: alert
              type: call
              call: "slack.post-message"
              with:
                channel: "#dba"
                text: "Backup {{db}}: {{verify.status}}"
  consumes:
    - type: http
      namespace: backup
      baseUri: "https://backup.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.backup_token"
      resources:
        - name: backups
          path: "/databases/{{db}}/status"
          inputParameters:
            - name: db
              in: path
          operations:
            - name: get-status
              method: GET
    - type: http
      namespace: snowflake
      baseUri: "https://fcx.com.snowflakecomputing.com/api/v2"
      authentication:
        type: bearer
        token: "$secrets.snowflake_token"
      resources:
        - name: statements
          path: "/statements"
          operations:
            - name: query
              method: POST
    - type: http
      namespace: slack
      baseUri: "https://slack.com/api"
      authentication:
        type: bearer
        token: "$secrets.slack_token"
      resources:
        - name: messages
          path: "/chat.postMessage"
          operations:
            - name: post-message
              method: POST

Submits a blasting plan for approval in ServiceNow, validates safety clearances in Workday, and notifies the mine operations team in Microsoft Teams.

naftiko: "0.5"
info:
  label: "Blasting Plan Approval Workflow"
  description: "Submits a blasting plan for approval in ServiceNow, validates safety clearances in Workday, and notifies the mine operations team in Microsoft Teams."
  tags:
    - mining-ops
    - safety
    - servicenow
    - workday
    - microsoft-teams
capability:
  exposes:
    - type: mcp
      namespace: blasting-ops
      port: 8080
      tools:
        - name: submit-blasting-plan
          description: "Submit blasting plan for approval with safety validation."
          inputParameters:
            - name: plan_id
              in: body
              type: string
              description: "The blasting plan identifier."
            - name: mine_site
              in: body
              type: string
              description: "Mine site identifier."
            - name: blast_date
              in: body
              type: string
              description: "Planned blast date YYYY-MM-DD."
            - name: blast_engineer_id
              in: body
              type: string
              description: "Workday ID of the blast engineer."
          steps:
            - name: validate-engineer
              type: call
              call: "workday.get-worker"
              with:
                worker_id: "{{blast_engineer_id}}"
            - name: create-approval
              type: call
              call: "servicenow.create-task"
              with:
                short_description: "Blast plan approval: {{plan_id}} at {{mine_site}}"
                description: "Blast date: {{blast_date}}. Engineer: {{validate-engineer.full_name}}. Certifications: {{validate-engineer.certifications}}."
                assigned_group: "Mine_Safety"
                category: "blasting_approval"
            - name: notify-ops
              type: call
              call: "msteams.send-message"
              with:
                channel_id: "mine_ops_{{mine_site}}"
                text: "Blasting plan {{plan_id}} submitted for {{blast_date}} at {{mine_site}}. Engineer: {{validate-engineer.full_name}}. Approval: {{create-approval.number}}"
  consumes:
    - type: http
      namespace: workday
      baseUri: "https://wd2-impl-services1.workday.com/ccx/api/v1"
      authentication:
        type: bearer
        token: "$secrets.workday_token"
      resources:
        - name: workers
          path: "/workers/{{worker_id}}"
          inputParameters:
            - name: worker_id
              in: path
          operations:
            - name: get-worker
              method: GET
    - type: http
      namespace: servicenow
      baseUri: "https://freeport.service-now.com/api/now"
      authentication:
        type: basic
        username: "$secrets.servicenow_user"
        password: "$secrets.servicenow_password"
      resources:
        - name: tasks
          path: "/table/task"
          operations:
            - name: create-task
              method: POST
    - type: http
      namespace: msteams
      baseUri: "https://graph.microsoft.com/v1.0"
      authentication:
        type: bearer
        token: "$secrets.msgraph_token"
      resources:
        - name: channels
          path: "/teams/{{channel_id}}/channels/general/messages"
          inputParameters:
            - name: channel_id
              in: path
          operations:
            - name: send-message
              method: POST

Analyzes budget variance at Freeport-McMoRan via Oracle, Workday, and Slack.

naftiko: "0.5"
info:
  label: "Budget Variance Pipeline"
  description: "Analyzes budget variance at Freeport-McMoRan via Oracle, Workday, and Slack."
  tags:
    - finance
    - budget
    - oracle
    - workday
capability:
  exposes:
    - type: mcp
      namespace: budget-var
      port: 8080
      tools:
        - name: analyze-variance
          description: "Check budget variance at Freeport-McMoRan."
          inputParameters:
            - name: cc
              in: body
              type: string
              description: "Cost center."
            - name: period
              in: body
              type: string
              description: "Period."
          steps:
            - name: actuals
              type: call
              call: "oracle.get-actuals"
              with:
                cc: "{{cc}}"
                period: "{{period}}"
            - name: budget
              type: call
              call: "workday.get-budget"
              with:
                cc: "{{cc}}"
            - name: compute
              type: call
              call: "analytics.variance"
              with:
                a: "{{actuals.total}}"
                b: "{{budget.total}}"
            - name: alert
              type: call
              call: "slack.post-message"
              with:
                channel: "#finance"
                text: "Variance {{cc}}: ${{compute.variance}}"
  consumes:
    - type: http
      namespace: oracle
      baseUri: "https://oracle.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.oracle_token"
      resources:
        - name: fin
          path: "/actuals"
          operations:
            - name: get-actuals
              method: GET
    - type: http
      namespace: workday
      baseUri: "https://wd5.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.workday_token"
      resources:
        - name: budgets
          path: "/budgets"
          operations:
            - name: get-budget
              method: GET
    - type: http
      namespace: analytics
      baseUri: "https://analytics.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.analytics_token"
      resources:
        - name: var
          path: "/compute"
          operations:
            - name: variance
              method: POST
    - type: http
      namespace: slack
      baseUri: "https://slack.com/api"
      authentication:
        type: bearer
        token: "$secrets.slack_token"
      resources:
        - name: messages
          path: "/chat.postMessage"
          operations:
            - name: post-message
              method: POST

Plans capacity at Freeport-McMoRan by collecting utilization and forecasting.

naftiko: "0.5"
info:
  label: "Capacity Planning Pipeline"
  description: "Plans capacity at Freeport-McMoRan by collecting utilization and forecasting."
  tags:
    - infrastructure
    - capacity-planning
    - forecasting
capability:
  exposes:
    - type: mcp
      namespace: capacity
      port: 8080
      tools:
        - name: plan-capacity
          description: "Plan capacity at Freeport-McMoRan."
          inputParameters:
            - name: resource
              in: body
              type: string
              description: "Resource type."
            - name: months
              in: body
              type: number
              description: "Forecast months."
          steps:
            - name: util
              type: call
              call: "monitoring.get-util"
              with:
                resource: "{{resource}}"
            - name: forecast
              type: call
              call: "analytics.forecast"
              with:
                current: "{{util.pct}}"
                months: "{{months}}"
            - name: procure
              type: call
              call: "servicenow.create-request"
              with:
                type: "capacity"
                resource: "{{resource}}"
            - name: dashboard
              type: call
              call: "power-bi.refresh"
              with:
                dataset: "capacity"
  consumes:
    - type: http
      namespace: monitoring
      baseUri: "https://monitoring.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.monitoring_token"
      resources:
        - name: util
          path: "/resources/{{resource}}/util"
          inputParameters:
            - name: resource
              in: path
          operations:
            - name: get-util
              method: GET
    - type: http
      namespace: analytics
      baseUri: "https://analytics.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.analytics_token"
      resources:
        - name: forecast
          path: "/demand"
          operations:
            - name: forecast
              method: POST
    - type: http
      namespace: servicenow
      baseUri: "https://fcx.com.service-now.com/api/now"
      authentication:
        type: bearer
        token: "$secrets.servicenow_token"
      resources:
        - name: requests
          path: "/table/sc_request"
          operations:
            - name: create-request
              method: POST
    - type: http
      namespace: power-bi
      baseUri: "https://api.powerbi.com/v1.0/myorg"
      authentication:
        type: bearer
        token: "$secrets.power_bi_token"
      resources:
        - name: datasets
          path: "/datasets/{{dataset}}/refreshes"
          inputParameters:
            - name: dataset
              in: path
          operations:
            - name: refresh
              method: POST

Monitors cert expiry at Freeport-McMoRan.

naftiko: "0.5"
info:
  label: "Certificate Expiry Pipeline"
  description: "Monitors cert expiry at Freeport-McMoRan."
  tags:
    - security
    - certificates
    - monitoring
capability:
  exposes:
    - type: mcp
      namespace: cert-monitor
      port: 8080
      tools:
        - name: check-certs
          description: "Monitor certs at Freeport-McMoRan."
          inputParameters:
            - name: domains
              in: body
              type: string
              description: "Domains to check."
          steps:
            - name: scan
              type: call
              call: "cert-scanner.scan"
              with:
                domains: "{{domains}}"
            - name: filter
              type: call
              call: "analytics.filter-expiring"
              with:
                certs: "{{scan.results}}"
            - name: ticket
              type: call
              call: "jira.create-issue"
              with:
                project: "SEC"
                summary: "{{filter.count}} certs expiring"
            - name: alert
              type: call
              call: "slack.post-message"
              with:
                channel: "#security"
                text: "Cert alert: {{filter.count}} expiring"
  consumes:
    - type: http
      namespace: cert-scanner
      baseUri: "https://certs.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.cert_token"
      resources:
        - name: scans
          path: "/scan"
          operations:
            - name: scan
              method: POST
    - type: http
      namespace: jira
      baseUri: "https://fcx.com.atlassian.net/rest/api/3"
      authentication:
        type: bearer
        token: "$secrets.jira_token"
      resources:
        - name: issues
          path: "/issue"
          operations:
            - name: create-issue
              method: POST
    - type: http
      namespace: slack
      baseUri: "https://slack.com/api"
      authentication:
        type: bearer
        token: "$secrets.slack_token"
      resources:
        - name: messages
          path: "/chat.postMessage"
          operations:
            - name: post-message
              method: POST

Routes changes at Freeport-McMoRan through ServiceNow and CAB approval.

naftiko: "0.5"
info:
  label: "Change Management Pipeline"
  description: "Routes changes at Freeport-McMoRan through ServiceNow and CAB approval."
  tags:
    - change-management
    - servicenow
    - itil
capability:
  exposes:
    - type: mcp
      namespace: change-mgmt
      port: 8080
      tools:
        - name: process-change
          description: "Process changes at Freeport-McMoRan."
          inputParameters:
            - name: change_id
              in: body
              type: string
              description: "Change ID."
            - name: date
              in: body
              type: string
              description: "Date."
          steps:
            - name: get
              type: call
              call: "servicenow.get-change"
              with:
                id: "{{change_id}}"
            - name: conflicts
              type: call
              call: "servicenow.check-conflicts"
              with:
                date: "{{date}}"
            - name: submit
              type: call
              call: "servicenow.update"
              with:
                id: "{{change_id}}"
                state: "approval"
            - name: notify
              type: call
              call: "email.send"
              with:
                to: "cab@co.com"
                subject: "CAB: {{change_id}}"
  consumes:
    - type: http
      namespace: servicenow
      baseUri: "https://fcx.com.service-now.com/api/now"
      authentication:
        type: bearer
        token: "$secrets.servicenow_token"
      resources:
        - name: changes
          path: "/table/change_request/{{id}}"
          inputParameters:
            - name: id
              in: path
          operations:
            - name: get-change
              method: GET
    - type: http
      namespace: email
      baseUri: "https://email.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.email_token"
      resources:
        - name: messages
          path: "/send"
          operations:
            - name: send
              method: POST

Queries Cisco network devices at mine sites for connectivity status.

naftiko: "0.5"
info:
  label: "Cisco Network Device Status"
  description: "Queries Cisco network devices at mine sites for connectivity status."
  tags:
    - infrastructure
    - cisco
capability:
  exposes:
    - type: mcp
      namespace: site-network
      port: 8080
      tools:
        - name: get-device-status
          description: "Fetch Cisco device status at a mine site."
          inputParameters:
            - name: device_id
              in: body
              type: string
              description: "Cisco device hostname or IP."
          call: "cisco.get-device"
          with:
            device_id: "{{device_id}}"
  consumes:
    - type: http
      namespace: cisco
      baseUri: "https://dnac.freeport.com/dna/intent/api/v1"
      authentication:
        type: bearer
        token: "$secrets.cisco_token"
      resources:
        - name: devices
          path: "/network-device/{{device_id}}"
          inputParameters:
            - name: device_id
              in: path
          operations:
            - name: get-device
              method: GET

Optimizes cloud costs at Freeport-McMoRan via Azure, FinOps, Jira, and Power BI.

naftiko: "0.5"
info:
  label: "Cloud Cost Optimization Pipeline"
  description: "Optimizes cloud costs at Freeport-McMoRan via Azure, FinOps, Jira, and Power BI."
  tags:
    - cloud
    - cost-management
    - finops
capability:
  exposes:
    - type: mcp
      namespace: cloud-opt
      port: 8080
      tools:
        - name: optimize
          description: "Optimize cloud costs at Freeport-McMoRan."
          inputParameters:
            - name: provider
              in: body
              type: string
              description: "Provider."
            - name: range
              in: body
              type: string
              description: "Range."
          steps:
            - name: spend
              type: call
              call: "cloud.get-costs"
              with:
                provider: "{{provider}}"
                range: "{{range}}"
            - name: savings
              type: call
              call: "finops.analyze"
              with:
                data: "{{spend.data}}"
            - name: action
              type: call
              call: "jira.create-issue"
              with:
                project: "FINOPS"
                summary: "Save ${{savings.potential}}"
            - name: report
              type: call
              call: "power-bi.refresh"
              with:
                dataset: "cloud"
  consumes:
    - type: http
      namespace: cloud
      baseUri: "https://management.azure.com"
      authentication:
        type: bearer
        token: "$secrets.azure_token"
      resources:
        - name: costs
          path: "/providers/Microsoft.CostManagement/query"
          operations:
            - name: get-costs
              method: POST
    - type: http
      namespace: finops
      baseUri: "https://finops.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.finops_token"
      resources:
        - name: analysis
          path: "/savings"
          operations:
            - name: analyze
              method: POST
    - type: http
      namespace: jira
      baseUri: "https://fcx.com.atlassian.net/rest/api/3"
      authentication:
        type: bearer
        token: "$secrets.jira_token"
      resources:
        - name: issues
          path: "/issue"
          operations:
            - name: create-issue
              method: POST
    - type: http
      namespace: power-bi
      baseUri: "https://api.powerbi.com/v1.0/myorg"
      authentication:
        type: bearer
        token: "$secrets.power_bi_token"
      resources:
        - name: datasets
          path: "/datasets/{{dataset}}/refreshes"
          inputParameters:
            - name: dataset
              in: path
          operations:
            - name: refresh
              method: POST

Retrieves DNS records for mine site web infrastructure.

naftiko: "0.5"
info:
  label: "Cloudflare DNS Management"
  description: "Retrieves DNS records for mine site web infrastructure."
  tags:
    - infrastructure
    - cloudflare
capability:
  exposes:
    - type: mcp
      namespace: dns-mgmt
      port: 8080
      tools:
        - name: lookup-dns-record
          description: "Look up Cloudflare DNS records."
          inputParameters:
            - name: zone_id
              in: body
              type: string
              description: "Cloudflare zone ID."
            - name: record_name
              in: body
              type: string
              description: "DNS record name."
          call: "cloudflare.get-dns-records"
          with:
            zone_id: "{{zone_id}}"
            record_name: "{{record_name}}"
  consumes:
    - type: http
      namespace: cloudflare
      baseUri: "https://api.cloudflare.com/client/v4"
      authentication:
        type: bearer
        token: "$secrets.cloudflare_token"
      resources:
        - name: dns-records
          path: "/zones/{{zone_id}}/dns_records"
          inputParameters:
            - name: zone_id
              in: path
          operations:
            - name: get-dns-records
              method: GET

Tracks copper concentrate shipments in SAP, maps vessel locations via Google Maps, and notifies the logistics team in Microsoft Teams with ETA updates.

naftiko: "0.5"
info:
  label: "Concentrate Shipping Logistics"
  description: "Tracks copper concentrate shipments in SAP, maps vessel locations via Google Maps, and notifies the logistics team in Microsoft Teams with ETA updates."
  tags:
    - supply-chain
    - logistics
    - sap
    - google-maps
    - microsoft-teams
capability:
  exposes:
    - type: mcp
      namespace: shipping-logistics
      port: 8080
      tools:
        - name: track-concentrate-shipment
          description: "Track concentrate shipment, map vessel, and notify logistics team."
          inputParameters:
            - name: shipment_id
              in: body
              type: string
              description: "SAP shipment document number."
          steps:
            - name: get-shipment
              type: call
              call: "sap.get-shipment"
              with:
                shipment_id: "{{shipment_id}}"
            - name: map-vessel
              type: call
              call: "googlemaps.geocode"
              with:
                address: "{{get-shipment.vessel_port}}"
            - name: notify-logistics
              type: call
              call: "msteams.send-message"
              with:
                channel_id: "shipping_logistics"
                text: "Shipment {{shipment_id}}: {{get-shipment.tons}} tons of {{get-shipment.commodity}}. Vessel: {{get-shipment.vessel_name}}. ETA: {{get-shipment.eta}}. Port: {{get-shipment.destination_port}}"
  consumes:
    - type: http
      namespace: sap
      baseUri: "https://freeport-sap.s4hana.cloud/api/v1"
      authentication:
        type: basic
        username: "$secrets.sap_user"
        password: "$secrets.sap_password"
      resources:
        - name: shipments
          path: "/logistics/shipments/{{shipment_id}}"
          inputParameters:
            - name: shipment_id
              in: path
          operations:
            - name: get-shipment
              method: GET
    - type: http
      namespace: googlemaps
      baseUri: "https://maps.googleapis.com/maps/api"
      authentication:
        type: bearer
        token: "$secrets.google_maps_key"
      resources:
        - name: geocoding
          path: "/geocode/json"
          operations:
            - name: geocode
              method: GET
    - type: http
      namespace: msteams
      baseUri: "https://graph.microsoft.com/v1.0"
      authentication:
        type: bearer
        token: "$secrets.msgraph_token"
      resources:
        - name: channels
          path: "/teams/{{channel_id}}/channels/general/messages"
          inputParameters:
            - name: channel_id
              in: path
          operations:
            - name: send-message
              method: POST

Searches Confluence at Freeport-McMoRan.

naftiko: "0.5"
info:
  label: "Confluence Article Search"
  description: "Searches Confluence at Freeport-McMoRan."
  tags:
    - knowledge-management
    - confluence
    - documentation
capability:
  exposes:
    - type: mcp
      namespace: confluence-search
      port: 8080
      tools:
        - name: search-articles
          description: "Search Confluence at Freeport-McMoRan."
          inputParameters:
            - name: query
              in: body
              type: string
              description: "Query."
          call: "confluence.search"
          with:
            query: "{{query}}"
          outputParameters:
            - name: title
              type: string
              mapping: "$.results[0].title"
  consumes:
    - type: http
      namespace: confluence
      baseUri: "https://fcx.com.atlassian.net/wiki/rest/api"
      authentication:
        type: bearer
        token: "$secrets.confluence_token"
      resources:
        - name: content
          path: "/content/search"
          operations:
            - name: search
              method: GET

Searches the Freeport-McMoRan Confluence knowledge base for mining standards and procedures.

naftiko: "0.5"
info:
  label: "Confluence Knowledge Base Search"
  description: "Searches the Freeport-McMoRan Confluence knowledge base for mining standards and procedures."
  tags:
    - knowledge
    - confluence
capability:
  exposes:
    - type: mcp
      namespace: knowledge-base
      port: 8080
      tools:
        - name: search-knowledge-base
          description: "Search Confluence by keyword."
          inputParameters:
            - name: query
              in: body
              type: string
              description: "Search query string."
          call: "confluence.search"
          with:
            query: "{{query}}"
  consumes:
    - type: http
      namespace: confluence
      baseUri: "https://freeport.atlassian.net/wiki/rest/api"
      authentication:
        type: basic
        username: "$secrets.confluence_user"
        password: "$secrets.confluence_token"
      resources:
        - name: search
          path: "/search"
          operations:
            - name: search
              method: GET

Tracks contract renewals at Freeport-McMoRan via contracts system, email, Jira, and Salesforce.

naftiko: "0.5"
info:
  label: "Contract Renewal Pipeline"
  description: "Tracks contract renewals at Freeport-McMoRan via contracts system, email, Jira, and Salesforce."
  tags:
    - procurement
    - contracts
    - salesforce
    - jira
capability:
  exposes:
    - type: mcp
      namespace: contract-renew
      port: 8080
      tools:
        - name: track
          description: "Track renewals at Freeport-McMoRan."
          inputParameters:
            - name: contract_id
              in: body
              type: string
              description: "Contract ID."
            - name: owner
              in: body
              type: string
              description: "Owner email."
          steps:
            - name: get
              type: call
              call: "contracts.get"
              with:
                id: "{{contract_id}}"
            - name: remind
              type: call
              call: "email.send"
              with:
                to: "{{owner}}"
                subject: "Renewal: {{contract_id}}"
            - name: task
              type: call
              call: "jira.create-issue"
              with:
                project: "PROC"
                summary: "Renew {{contract_id}}"
            - name: crm
              type: call
              call: "salesforce.update"
              with:
                id: "{{contract_id}}"
                stage: "Renewal"
  consumes:
    - type: http
      namespace: contracts
      baseUri: "https://contracts.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.contracts_token"
      resources:
        - name: contracts
          path: "/contracts/{{id}}"
          inputParameters:
            - name: id
              in: path
          operations:
            - name: get
              method: GET
    - type: http
      namespace: email
      baseUri: "https://email.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.email_token"
      resources:
        - name: messages
          path: "/send"
          operations:
            - name: send
              method: POST
    - type: http
      namespace: jira
      baseUri: "https://fcx.com.atlassian.net/rest/api/3"
      authentication:
        type: bearer
        token: "$secrets.jira_token"
      resources:
        - name: issues
          path: "/issue"
          operations:
            - name: create-issue
              method: POST
    - type: http
      namespace: salesforce
      baseUri: "https://fcx.com.my.salesforce.com/services/data/v58.0"
      authentication:
        type: bearer
        token: "$secrets.salesforce_token"
      resources:
        - name: opps
          path: "/sobjects/Opportunity"
          operations:
            - name: update
              method: PATCH

Fetches real-time copper and molybdenum prices from Bloomberg Enterprise Data, compares against SAP cost assumptions, and alerts the trading team in Microsoft Teams.

naftiko: "0.5"
info:
  label: "Copper Price and Commodity Tracking"
  description: "Fetches real-time copper and molybdenum prices from Bloomberg Enterprise Data, compares against SAP cost assumptions, and alerts the trading team in Microsoft Teams."
  tags:
    - supply-chain
    - trading
    - bloomberg-enterprise-data
    - sap
    - microsoft-teams
capability:
  exposes:
    - type: mcp
      namespace: commodity-tracking
      port: 8080
      tools:
        - name: track-commodity-prices
          description: "Fetch commodity prices, compare against cost assumptions, and alert on deviations."
          inputParameters:
            - name: commodity
              in: body
              type: string
              description: "Commodity symbol (copper, molybdenum, gold)."
            - name: date
              in: body
              type: string
              description: "Price date YYYY-MM-DD."
          steps:
            - name: get-market-price
              type: call
              call: "bloomberg.get-commodity-price"
              with:
                commodity: "{{commodity}}"
                date: "{{date}}"
            - name: get-assumptions
              type: call
              call: "sap.get-cost-assumptions"
              with:
                commodity: "{{commodity}}"
            - name: alert-trading
              type: call
              call: "msteams.send-message"
              with:
                channel_id: "commodity_trading"
                text: "{{commodity}} price ({{date}}): ${{get-market-price.price}}/lb (assumption: ${{get-assumptions.price}}/lb). Variance: {{get-market-price.variance_pct}}%."
  consumes:
    - type: http
      namespace: bloomberg
      baseUri: "https://api.bloomberg.com/eap/v1"
      authentication:
        type: bearer
        token: "$secrets.bloomberg_token"
      resources:
        - name: commodities
          path: "/data/{{commodity}}"
          inputParameters:
            - name: commodity
              in: path
          operations:
            - name: get-commodity-price
              method: GET
    - type: http
      namespace: sap
      baseUri: "https://freeport-sap.s4hana.cloud/api/v1"
      authentication:
        type: basic
        username: "$secrets.sap_user"
        password: "$secrets.sap_password"
      resources:
        - name: assumptions
          path: "/commodities/assumptions"
          operations:
            - name: get-cost-assumptions
              method: GET
    - type: http
      namespace: msteams
      baseUri: "https://graph.microsoft.com/v1.0"
      authentication:
        type: bearer
        token: "$secrets.msgraph_token"
      resources:
        - name: channels
          path: "/teams/{{channel_id}}/channels/general/messages"
          inputParameters:
            - name: channel_id
              in: path
          operations:
            - name: send-message
              method: POST

Reallocates costs at Freeport-McMoRan.

naftiko: "0.5"
info:
  label: "Cost Reallocation Pipeline"
  description: "Reallocates costs at Freeport-McMoRan."
  tags:
    - finance
    - cost-allocation
    - oracle
capability:
  exposes:
    - type: mcp
      namespace: cost-realloc
      port: 8080
      tools:
        - name: reallocate
          description: "Reallocate costs at Freeport-McMoRan."
          inputParameters:
            - name: source
              in: body
              type: string
              description: "Source CC."
            - name: target
              in: body
              type: string
              description: "Target CC."
            - name: amount
              in: body
              type: number
              description: "Amount."
          steps:
            - name: current
              type: call
              call: "oracle.get-alloc"
              with:
                cc: "{{source}}"
            - name: compute
              type: call
              call: "analytics.realloc"
              with:
                source: "{{source}}"
                target: "{{target}}"
                amount: "{{amount}}"
            - name: post
              type: call
              call: "oracle.post-journal"
              with:
                entries: "{{compute.entries}}"
            - name: notify
              type: call
              call: "slack.post-message"
              with:
                channel: "#finance"
                text: "Reallocated ${{amount}} from {{source}} to {{target}}"
  consumes:
    - type: http
      namespace: oracle
      baseUri: "https://oracle.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.oracle_token"
      resources:
        - name: allocations
          path: "/cost-centers/{{cc}}/allocations"
          inputParameters:
            - name: cc
              in: path
          operations:
            - name: get-alloc
              method: GET
    - type: http
      namespace: analytics
      baseUri: "https://analytics.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.analytics_token"
      resources:
        - name: realloc
          path: "/compute"
          operations:
            - name: realloc
              method: POST
    - type: http
      namespace: slack
      baseUri: "https://slack.com/api"
      authentication:
        type: bearer
        token: "$secrets.slack_token"
      resources:
        - name: messages
          path: "/chat.postMessage"
          operations:
            - name: post-message
              method: POST

Generates a Crystal Reports mine operations summary and uploads to SharePoint.

naftiko: "0.5"
info:
  label: "Crystal Reports Mine Operations Report"
  description: "Generates a Crystal Reports mine operations summary and uploads to SharePoint."
  tags:
    - reporting
    - crystal-reports
    - sharepoint
capability:
  exposes:
    - type: mcp
      namespace: operations-reporting
      port: 8080
      tools:
        - name: generate-ops-report
          description: "Generate a mine operations report and store in SharePoint."
          inputParameters:
            - name: mine_site
              in: body
              type: string
              description: "Mine site identifier."
            - name: period
              in: body
              type: string
              description: "Reporting period."
            - name: parameters
              in: body
              type: string
              description: "JSON report parameters."
          steps:
            - name: generate-report
              type: call
              call: "crystal.generate-report"
              with:
                template_id: "mine_operations"
                parameters: "{{parameters}}"
            - name: upload-report
              type: call
              call: "sharepoint.upload-file"
              with:
                site_id: "operations_site"
                folder_path: "Reports/{{mine_site}}/{{period}}"
                file_name: "operations_report.pdf"
                content: "{{generate-report.output_url}}"
  consumes:
    - type: http
      namespace: crystal
      baseUri: "https://reports.freeport.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.crystal_reports_token"
      resources:
        - name: reports
          path: "/reports/generate"
          operations:
            - name: generate-report
              method: POST
    - type: http
      namespace: sharepoint
      baseUri: "https://graph.microsoft.com/v1.0/sites"
      authentication:
        type: bearer
        token: "$secrets.msgraph_token"
      resources:
        - name: files
          path: "/{{site_id}}/drive/root:/{{folder_path}}/{{file_name}}:/content"
          inputParameters:
            - name: site_id
              in: path
            - name: folder_path
              in: path
            - name: file_name
              in: path
          operations:
            - name: upload-file
              method: PUT

Monitors data pipelines at Freeport-McMoRan via Databricks, Snowflake, Slack, and ServiceNow.

naftiko: "0.5"
info:
  label: "Data Pipeline Monitor Pipeline"
  description: "Monitors data pipelines at Freeport-McMoRan via Databricks, Snowflake, Slack, and ServiceNow."
  tags:
    - data-engineering
    - databricks
    - monitoring
    - slack
capability:
  exposes:
    - type: mcp
      namespace: pipeline-mon
      port: 8080
      tools:
        - name: monitor
          description: "Monitor pipelines at Freeport-McMoRan."
          inputParameters:
            - name: pipeline_id
              in: body
              type: string
              description: "Pipeline ID."
          steps:
            - name: status
              type: call
              call: "databricks.get-run"
              with:
                id: "{{pipeline_id}}"
            - name: quality
              type: call
              call: "snowflake.query"
              with:
                query: "SELECT COUNT(*) FROM out WHERE p='{{pipeline_id}}'"
            - name: alert
              type: call
              call: "slack.post-message"
              with:
                channel: "#data"
                text: "Pipeline {{pipeline_id}}: {{status.state}}"
            - name: incident
              type: call
              call: "servicenow.create-incident"
              with:
                desc: "Pipeline {{pipeline_id}} issue"
  consumes:
    - type: http
      namespace: databricks
      baseUri: "https://fcx.com.cloud.databricks.com/api/2.1"
      authentication:
        type: bearer
        token: "$secrets.databricks_token"
      resources:
        - name: jobs
          path: "/jobs/runs/get"
          operations:
            - name: get-run
              method: GET
    - type: http
      namespace: snowflake
      baseUri: "https://fcx.com.snowflakecomputing.com/api/v2"
      authentication:
        type: bearer
        token: "$secrets.snowflake_token"
      resources:
        - name: statements
          path: "/statements"
          operations:
            - name: query
              method: POST
    - type: http
      namespace: slack
      baseUri: "https://slack.com/api"
      authentication:
        type: bearer
        token: "$secrets.slack_token"
      resources:
        - name: messages
          path: "/chat.postMessage"
          operations:
            - name: post-message
              method: POST
    - type: http
      namespace: servicenow
      baseUri: "https://fcx.com.service-now.com/api/now"
      authentication:
        type: bearer
        token: "$secrets.servicenow_token"
      resources:
        - name: incidents
          path: "/table/incident"
          operations:
            - name: create-incident
              method: POST

Queries Datadog for infrastructure metrics used in mine site IT monitoring.

naftiko: "0.5"
info:
  label: "Datadog Metric Query"
  description: "Queries Datadog for infrastructure metrics used in mine site IT monitoring."
  tags:
    - monitoring
    - datadog
capability:
  exposes:
    - type: mcp
      namespace: metrics
      port: 8080
      tools:
        - name: query-metric
          description: "Query a Datadog metric by name and time range."
          inputParameters:
            - name: metric_name
              in: body
              type: string
              description: "Metric name."
            - name: from_ts
              in: body
              type: string
              description: "Start timestamp."
            - name: to_ts
              in: body
              type: string
              description: "End timestamp."
          call: "datadog.query-metric"
          with:
            query: "{{metric_name}}"
            from: "{{from_ts}}"
            to: "{{to_ts}}"
  consumes:
    - type: http
      namespace: datadog
      baseUri: "https://api.datadoghq.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.datadog_api_key"
      resources:
        - name: metrics
          path: "/query"
          operations:
            - name: query-metric
              method: GET

Checks Datadog monitor at Freeport-McMoRan.

naftiko: "0.5"
info:
  label: "Datadog Monitor Check"
  description: "Checks Datadog monitor at Freeport-McMoRan."
  tags:
    - monitoring
    - datadog
    - observability
capability:
  exposes:
    - type: mcp
      namespace: dd-monitor
      port: 8080
      tools:
        - name: check-monitor
          description: "Check monitor at Freeport-McMoRan."
          inputParameters:
            - name: monitor_id
              in: body
              type: string
              description: "Monitor ID."
          call: "datadog.get-monitor"
          with:
            monitor_id: "{{monitor_id}}"
          outputParameters:
            - name: status
              type: string
              mapping: "$.overall_state"
  consumes:
    - type: http
      namespace: datadog
      baseUri: "https://api.datadoghq.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.datadog_api_key"
      resources:
        - name: monitors
          path: "/monitor/{{monitor_id}}"
          inputParameters:
            - name: monitor_id
              in: path
          operations:
            - name: get-monitor
              method: GET

Tests disaster recovery at Freeport-McMoRan via failover, health checks, and reporting.

naftiko: "0.5"
info:
  label: "DR Test Pipeline"
  description: "Tests disaster recovery at Freeport-McMoRan via failover, health checks, and reporting."
  tags:
    - disaster-recovery
    - business-continuity
    - testing
capability:
  exposes:
    - type: mcp
      namespace: dr-test
      port: 8080
      tools:
        - name: test-dr
          description: "Test DR at Freeport-McMoRan."
          inputParameters:
            - name: plan_id
              in: body
              type: string
              description: "Plan ID."
            - name: type
              in: body
              type: string
              description: "Test type."
          steps:
            - name: failover
              type: call
              call: "dr.failover"
              with:
                plan: "{{plan_id}}"
                type: "{{type}}"
            - name: validate
              type: call
              call: "monitoring.check"
              with:
                scope: "critical"
            - name: measure
              type: call
              call: "dr.metrics"
              with:
                id: "{{failover.id}}"
            - name: report
              type: call
              call: "confluence.create-page"
              with:
                title: "DR - {{plan_id}}"
                body: "RTO:{{measure.rto}}m RPO:{{measure.rpo}}m"
  consumes:
    - type: http
      namespace: dr
      baseUri: "https://dr.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.dr_token"
      resources:
        - name: failovers
          path: "/failovers"
          operations:
            - name: failover
              method: POST
    - type: http
      namespace: monitoring
      baseUri: "https://monitoring.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.monitoring_token"
      resources:
        - name: health
          path: "/checks"
          operations:
            - name: check
              method: POST
    - type: http
      namespace: confluence
      baseUri: "https://fcx.com.atlassian.net/wiki/rest/api"
      authentication:
        type: bearer
        token: "$secrets.confluence_token"
      resources:
        - name: pages
          path: "/content"
          operations:
            - name: create-page
              method: POST

Detects infrastructure drift at Freeport-McMoRan via Terraform, Slack, and Jira.

naftiko: "0.5"
info:
  label: "Drift Detection Pipeline"
  description: "Detects infrastructure drift at Freeport-McMoRan via Terraform, Slack, and Jira."
  tags:
    - infrastructure
    - terraform
    - drift-detection
    - devops
capability:
  exposes:
    - type: mcp
      namespace: drift-det
      port: 8080
      tools:
        - name: detect
          description: "Detect drift at Freeport-McMoRan."
          inputParameters:
            - name: ws_id
              in: body
              type: string
              description: "Workspace ID."
            - name: env
              in: body
              type: string
              description: "Environment."
          steps:
            - name: plan
              type: call
              call: "terraform.run"
              with:
                ws: "{{ws_id}}"
            - name: check
              type: call
              call: "terraform.get-plan"
              with:
                run: "{{plan.id}}"
            - name: alert
              type: call
              call: "slack.post-message"
              with:
                channel: "#infra"
                text: "Drift {{env}}: {{check.changes}} changes"
            - name: ticket
              type: call
              call: "jira.create-issue"
              with:
                project: "INFRA"
                summary: "Drift in {{env}}"
  consumes:
    - type: http
      namespace: terraform
      baseUri: "https://app.terraform.io/api/v2"
      authentication:
        type: bearer
        token: "$secrets.terraform_token"
      resources:
        - name: runs
          path: "/runs"
          operations:
            - name: run
              method: POST
    - type: http
      namespace: slack
      baseUri: "https://slack.com/api"
      authentication:
        type: bearer
        token: "$secrets.slack_token"
      resources:
        - name: messages
          path: "/chat.postMessage"
          operations:
            - name: post-message
              method: POST
    - type: http
      namespace: jira
      baseUri: "https://fcx.com.atlassian.net/rest/api/3"
      authentication:
        type: bearer
        token: "$secrets.jira_token"
      resources:
        - name: issues
          path: "/issue"
          operations:
            - name: create-issue
              method: POST

Retrieves Dynatrace host health metrics for mine site data center monitoring.

naftiko: "0.5"
info:
  label: "Dynatrace Host Health"
  description: "Retrieves Dynatrace host health metrics for mine site data center monitoring."
  tags:
    - monitoring
    - dynatrace
capability:
  exposes:
    - type: mcp
      namespace: host-health
      port: 8080
      tools:
        - name: get-host-health
          description: "Fetch Dynatrace host health."
          inputParameters:
            - name: entity_id
              in: body
              type: string
              description: "Dynatrace host entity ID."
          call: "dynatrace.get-host"
          with:
            entity_id: "{{entity_id}}"
  consumes:
    - type: http
      namespace: dynatrace
      baseUri: "https://freeport.live.dynatrace.com/api/v2"
      authentication:
        type: bearer
        token: "$secrets.dynatrace_token"
      resources:
        - name: hosts
          path: "/entities/{{entity_id}}"
          inputParameters:
            - name: entity_id
              in: path
          operations:
            - name: get-host
              method: GET

Checks ES index at Freeport-McMoRan.

naftiko: "0.5"
info:
  label: "ES Index Health"
  description: "Checks ES index at Freeport-McMoRan."
  tags:
    - search
    - elasticsearch
    - infrastructure
capability:
  exposes:
    - type: mcp
      namespace: es-health
      port: 8080
      tools:
        - name: check-index
          description: "Check ES index at Freeport-McMoRan."
          inputParameters:
            - name: index
              in: body
              type: string
              description: "Index name."
          call: "es.get-health"
          with:
            index: "{{index}}"
          outputParameters:
            - name: status
              type: string
              mapping: "$.status"
            - name: docs
              type: number
              mapping: "$.docs.count"
  consumes:
    - type: http
      namespace: es
      baseUri: "https://es.fcx.com:9200"
      authentication:
        type: bearer
        token: "$secrets.es_token"
      resources:
        - name: indices
          path: "/{{index}}/_stats"
          inputParameters:
            - name: index
              in: path
          operations:
            - name: get-health
              method: GET

Offboards employees at Freeport-McMoRan via Okta, Slack, ServiceNow, and storage.

naftiko: "0.5"
info:
  label: "Employee Offboarding Pipeline"
  description: "Offboards employees at Freeport-McMoRan via Okta, Slack, ServiceNow, and storage."
  tags:
    - hr
    - offboarding
    - okta
    - servicenow
capability:
  exposes:
    - type: mcp
      namespace: offboarding
      port: 8080
      tools:
        - name: offboard
          description: "Offboard employees at Freeport-McMoRan."
          inputParameters:
            - name: emp_id
              in: body
              type: string
              description: "Employee ID."
            - name: last_day
              in: body
              type: string
              description: "Last day."
          steps:
            - name: disable
              type: call
              call: "okta.deactivate"
              with:
                user: "{{emp_id}}"
            - name: revoke
              type: call
              call: "slack.remove"
              with:
                user: "{{emp_id}}"
            - name: return
              type: call
              call: "servicenow.create-request"
              with:
                type: "return"
                emp: "{{emp_id}}"
            - name: archive
              type: call
              call: "storage.archive"
              with:
                user: "{{emp_id}}"
  consumes:
    - type: http
      namespace: okta
      baseUri: "https://fcx.com.okta.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.okta_api_token"
      resources:
        - name: users
          path: "/users/{{user}}/lifecycle/deactivate"
          inputParameters:
            - name: user
              in: path
          operations:
            - name: deactivate
              method: POST
    - type: http
      namespace: slack
      baseUri: "https://slack.com/api"
      authentication:
        type: bearer
        token: "$secrets.slack_token"
      resources:
        - name: users
          path: "/users.admin.remove"
          operations:
            - name: remove
              method: POST
    - type: http
      namespace: servicenow
      baseUri: "https://fcx.com.service-now.com/api/now"
      authentication:
        type: bearer
        token: "$secrets.servicenow_token"
      resources:
        - name: requests
          path: "/table/sc_request"
          operations:
            - name: create-request
              method: POST
    - type: http
      namespace: storage
      baseUri: "https://storage.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.storage_token"
      resources:
        - name: archives
          path: "/archive"
          operations:
            - name: archive
              method: POST

On new hire in Workday, creates a ServiceNow onboarding ticket, provisions Azure AD access, assigns mine safety training in Pluralsight, and sends welcome message in Microsoft Teams.

naftiko: "0.5"
info:
  label: "Employee Onboarding Orchestrator"
  description: "On new hire in Workday, creates a ServiceNow onboarding ticket, provisions Azure AD access, assigns mine safety training in Pluralsight, and sends welcome message in Microsoft Teams."
  tags:
    - hr
    - onboarding
    - workday
    - servicenow
    - azure-active-directory
    - pluralsight
    - microsoft-teams
capability:
  exposes:
    - type: mcp
      namespace: hr-onboarding
      port: 8080
      tools:
        - name: trigger-onboarding
          description: "Orchestrate full onboarding for a new Freeport-McMoRan employee."
          inputParameters:
            - name: worker_id
              in: body
              type: string
              description: "Workday worker ID."
            - name: start_date
              in: body
              type: string
              description: "Start date YYYY-MM-DD."
            - name: mine_site
              in: body
              type: string
              description: "Assigned mine site."
          steps:
            - name: get-employee
              type: call
              call: "workday.get-worker"
              with:
                worker_id: "{{worker_id}}"
            - name: open-ticket
              type: call
              call: "servicenow.create-incident"
              with:
                short_description: "Onboarding: {{get-employee.full_name}} at {{mine_site}}"
                category: "hr_onboarding"
                assigned_group: "IT_Onboarding"
            - name: provision-ad
              type: call
              call: "azuread.create-user"
              with:
                email: "{{get-employee.work_email}}"
                display_name: "{{get-employee.full_name}}"
                group: "site_{{mine_site}}"
            - name: assign-training
              type: call
              call: "pluralsight.assign-path"
              with:
                path_id: "mine_safety_fundamentals"
                emails: "{{get-employee.work_email}}"
            - name: send-welcome
              type: call
              call: "msteams.send-message"
              with:
                recipient_upn: "{{get-employee.work_email}}"
                text: "Welcome to Freeport-McMoRan, {{get-employee.first_name}}! Site: {{mine_site}}. IT ticket: {{open-ticket.number}}. Complete mine safety training in Pluralsight before your first shift."
  consumes:
    - type: http
      namespace: workday
      baseUri: "https://wd2-impl-services1.workday.com/ccx/api/v1"
      authentication:
        type: bearer
        token: "$secrets.workday_token"
      resources:
        - name: workers
          path: "/workers/{{worker_id}}"
          inputParameters:
            - name: worker_id
              in: path
          operations:
            - name: get-worker
              method: GET
    - type: http
      namespace: servicenow
      baseUri: "https://freeport.service-now.com/api/now"
      authentication:
        type: basic
        username: "$secrets.servicenow_user"
        password: "$secrets.servicenow_password"
      resources:
        - name: incidents
          path: "/table/incident"
          operations:
            - name: create-incident
              method: POST
    - type: http
      namespace: azuread
      baseUri: "https://graph.microsoft.com/v1.0"
      authentication:
        type: bearer
        token: "$secrets.msgraph_token"
      resources:
        - name: users
          path: "/users"
          operations:
            - name: create-user
              method: POST
    - type: http
      namespace: pluralsight
      baseUri: "https://api.pluralsight.com/v1"
      authentication:
        type: bearer
        token: "$secrets.pluralsight_token"
      resources:
        - name: assignments
          path: "/assignments"
          operations:
            - name: assign-path
              method: POST
    - type: http
      namespace: msteams
      baseUri: "https://graph.microsoft.com/v1.0"
      authentication:
        type: bearer
        token: "$secrets.msgraph_token"
      resources:
        - name: messages
          path: "/users/{{recipient_upn}}/sendMail"
          inputParameters:
            - name: recipient_upn
              in: path
          operations:
            - name: send-message
              method: POST

Collects environmental monitoring data from Azure Databricks, checks against EPA permit limits in SAP, generates a compliance report in Crystal Reports, and files it to SharePoint.

naftiko: "0.5"
info:
  label: "Environmental Compliance Monitoring"
  description: "Collects environmental monitoring data from Azure Databricks, checks against EPA permit limits in SAP, generates a compliance report in Crystal Reports, and files it to SharePoint."
  tags:
    - safety
    - compliance
    - azure-databricks
    - sap
    - crystal-reports
    - sharepoint
capability:
  exposes:
    - type: mcp
      namespace: environmental-compliance
      port: 8080
      tools:
        - name: generate-compliance-report
          description: "Collect monitoring data, check limits, and generate compliance report."
          inputParameters:
            - name: mine_site
              in: body
              type: string
              description: "The mine site identifier."
            - name: reporting_period
              in: body
              type: string
              description: "Reporting period (e.g., 2026-Q1)."
          steps:
            - name: collect-data
              type: call
              call: "databricks.submit-job"
              with:
                job_name: "environmental_monitoring"
                parameters: '{"site":"{{mine_site}}","period":"{{reporting_period}}"}'
            - name: get-limits
              type: call
              call: "sap.get-permit-limits"
              with:
                site: "{{mine_site}}"
            - name: generate-report
              type: call
              call: "crystal.generate-report"
              with:
                template_id: "environmental_compliance"
                parameters: '{"site":"{{mine_site}}","data":"{{collect-data.totals}}","limits":"{{get-limits.limits}}"}'
            - name: file-report
              type: call
              call: "sharepoint.upload-file"
              with:
                site_id: "compliance_site"
                folder_path: "Environmental/{{mine_site}}/{{reporting_period}}"
                file_name: "compliance_report.pdf"
                content: "{{generate-report.output_url}}"
  consumes:
    - type: http
      namespace: databricks
      baseUri: "https://eastus.azuredatabricks.net/api/2.1"
      authentication:
        type: bearer
        token: "$secrets.databricks_token"
      resources:
        - name: jobs
          path: "/jobs/run-now"
          operations:
            - name: submit-job
              method: POST
    - type: http
      namespace: sap
      baseUri: "https://freeport-sap.s4hana.cloud/api/v1"
      authentication:
        type: basic
        username: "$secrets.sap_user"
        password: "$secrets.sap_password"
      resources:
        - name: permits
          path: "/compliance/permit-limits/{{site}}"
          inputParameters:
            - name: site
              in: path
          operations:
            - name: get-permit-limits
              method: GET
    - type: http
      namespace: crystal
      baseUri: "https://reports.freeport.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.crystal_reports_token"
      resources:
        - name: reports
          path: "/reports/generate"
          operations:
            - name: generate-report
              method: POST
    - type: http
      namespace: sharepoint
      baseUri: "https://graph.microsoft.com/v1.0/sites"
      authentication:
        type: bearer
        token: "$secrets.msgraph_token"
      resources:
        - name: files
          path: "/{{site_id}}/drive/root:/{{folder_path}}/{{file_name}}:/content"
          inputParameters:
            - name: site_id
              in: path
            - name: folder_path
              in: path
            - name: file_name
              in: path
          operations:
            - name: upload-file
              method: PUT

Pulls equipment maintenance schedules from SAP Plant Maintenance, checks technician availability in Workday, creates ServiceNow work orders, and notifies the maintenance team in Microsoft Teams.

naftiko: "0.5"
info:
  label: "Equipment Maintenance Scheduling"
  description: "Pulls equipment maintenance schedules from SAP Plant Maintenance, checks technician availability in Workday, creates ServiceNow work orders, and notifies the maintenance team in Microsoft Teams."
  tags:
    - mining-ops
    - maintenance
    - sap
    - workday
    - servicenow
    - microsoft-teams
capability:
  exposes:
    - type: mcp
      namespace: equipment-maintenance
      port: 8080
      tools:
        - name: schedule-equipment-maintenance
          description: "Schedule equipment maintenance with technician assignment and notifications."
          inputParameters:
            - name: equipment_id
              in: body
              type: string
              description: "The SAP equipment identifier."
            - name: maintenance_type
              in: body
              type: string
              description: "Maintenance type (preventive, corrective, inspection)."
            - name: scheduled_date
              in: body
              type: string
              description: "Scheduled date YYYY-MM-DD."
          steps:
            - name: get-schedule
              type: call
              call: "sap.get-maintenance-order"
              with:
                equipment_id: "{{equipment_id}}"
                type: "{{maintenance_type}}"
            - name: check-technician
              type: call
              call: "workday.get-available-technician"
              with:
                skill: "{{maintenance_type}}"
                date: "{{scheduled_date}}"
                site: "{{get-schedule.site}}"
            - name: create-work-order
              type: call
              call: "servicenow.create-task"
              with:
                short_description: "{{maintenance_type}} maintenance: {{equipment_id}}"
                description: "Equipment: {{get-schedule.equipment_name}}. Technician: {{check-technician.full_name}}. Schedule: {{get-schedule.details}}."
                assigned_group: "Maintenance_Ops"
                due_date: "{{scheduled_date}}"
            - name: notify-team
              type: call
              call: "msteams.send-message"
              with:
                channel_id: "maintenance_{{get-schedule.site}}"
                text: "Maintenance scheduled: {{maintenance_type}} on {{equipment_id}} ({{get-schedule.equipment_name}}) for {{scheduled_date}}. Technician: {{check-technician.full_name}}. WO: {{create-work-order.number}}"
  consumes:
    - type: http
      namespace: sap
      baseUri: "https://freeport-sap.s4hana.cloud/api/v1"
      authentication:
        type: basic
        username: "$secrets.sap_user"
        password: "$secrets.sap_password"
      resources:
        - name: maintenance
          path: "/plant-maintenance/orders"
          operations:
            - name: get-maintenance-order
              method: GET
    - type: http
      namespace: workday
      baseUri: "https://wd2-impl-services1.workday.com/ccx/api/v1"
      authentication:
        type: bearer
        token: "$secrets.workday_token"
      resources:
        - name: workers
          path: "/workers/search"
          operations:
            - name: get-available-technician
              method: POST
    - type: http
      namespace: servicenow
      baseUri: "https://freeport.service-now.com/api/now"
      authentication:
        type: basic
        username: "$secrets.servicenow_user"
        password: "$secrets.servicenow_password"
      resources:
        - name: tasks
          path: "/table/task"
          operations:
            - name: create-task
              method: POST
    - type: http
      namespace: msteams
      baseUri: "https://graph.microsoft.com/v1.0"
      authentication:
        type: bearer
        token: "$secrets.msgraph_token"
      resources:
        - name: channels
          path: "/teams/{{channel_id}}/channels/general/messages"
          inputParameters:
            - name: channel_id
              in: path
          operations:
            - name: send-message
              method: POST

Audits expenses at Freeport-McMoRan via Concur, compliance checks, and email.

naftiko: "0.5"
info:
  label: "Expense Audit Pipeline"
  description: "Audits expenses at Freeport-McMoRan via Concur, compliance checks, and email."
  tags:
    - finance
    - travel
    - sap-concur
    - compliance
capability:
  exposes:
    - type: mcp
      namespace: expense-audit
      port: 8080
      tools:
        - name: audit
          description: "Audit expenses at Freeport-McMoRan."
          inputParameters:
            - name: report_id
              in: body
              type: string
              description: "Report ID."
          steps:
            - name: get
              type: call
              call: "concur.get-report"
              with:
                id: "{{report_id}}"
            - name: check
              type: call
              call: "compliance.check"
              with:
                expenses: "{{get.entries}}"
            - name: flag
              type: call
              call: "workflow.flag"
              with:
                id: "{{report_id}}"
                violations: "{{check.violations}}"
            - name: notify
              type: call
              call: "email.send"
              with:
                to: "{{get.approver}}"
                subject: "Expense {{report_id}} violations"
  consumes:
    - type: http
      namespace: concur
      baseUri: "https://us.api.concursolutions.com/api/v3.0"
      authentication:
        type: bearer
        token: "$secrets.concur_token"
      resources:
        - name: reports
          path: "/expense/reports/{{id}}"
          inputParameters:
            - name: id
              in: path
          operations:
            - name: get-report
              method: GET
    - type: http
      namespace: compliance
      baseUri: "https://compliance.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.compliance_token"
      resources:
        - name: policies
          path: "/check"
          operations:
            - name: check
              method: POST
    - type: http
      namespace: workflow
      baseUri: "https://workflow.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.workflow_token"
      resources:
        - name: reviews
          path: "/flag"
          operations:
            - name: flag
              method: POST
    - type: http
      namespace: email
      baseUri: "https://email.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.email_token"
      resources:
        - name: messages
          path: "/send"
          operations:
            - name: send
              method: POST

Analyzes feedback at Freeport-McMoRan via surveys, AI sentiment, and Power BI.

naftiko: "0.5"
info:
  label: "Customer Feedback Pipeline"
  description: "Analyzes feedback at Freeport-McMoRan via surveys, AI sentiment, and Power BI."
  tags:
    - customer-experience
    - analytics
    - sentiment-analysis
capability:
  exposes:
    - type: mcp
      namespace: feedback
      port: 8080
      tools:
        - name: analyze
          description: "Analyze feedback at Freeport-McMoRan."
          inputParameters:
            - name: survey_id
              in: body
              type: string
              description: "Survey ID."
          steps:
            - name: collect
              type: call
              call: "survey.get"
              with:
                id: "{{survey_id}}"
            - name: sentiment
              type: call
              call: "ai.analyze"
              with:
                text: "{{collect.responses}}"
            - name: themes
              type: call
              call: "ai.themes"
              with:
                data: "{{collect.responses}}"
            - name: dashboard
              type: call
              call: "power-bi.refresh"
              with:
                dataset: "cx"
  consumes:
    - type: http
      namespace: survey
      baseUri: "https://surveys.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.survey_token"
      resources:
        - name: responses
          path: "/surveys/{{id}}/responses"
          inputParameters:
            - name: id
              in: path
          operations:
            - name: get
              method: GET
    - type: http
      namespace: ai
      baseUri: "https://api.openai.com/v1"
      authentication:
        type: bearer
        token: "$secrets.openai_api_key"
      resources:
        - name: completions
          path: "/chat/completions"
          operations:
            - name: analyze
              method: POST
    - type: http
      namespace: power-bi
      baseUri: "https://api.powerbi.com/v1.0/myorg"
      authentication:
        type: bearer
        token: "$secrets.power_bi_token"
      resources:
        - name: datasets
          path: "/datasets/{{dataset}}/refreshes"
          inputParameters:
            - name: dataset
              in: path
          operations:
            - name: refresh
              method: POST

Checks GitHub repo at Freeport-McMoRan.

naftiko: "0.5"
info:
  label: "GitHub Repo Check"
  description: "Checks GitHub repo at Freeport-McMoRan."
  tags:
    - devops
    - github
    - version-control
capability:
  exposes:
    - type: mcp
      namespace: gh-repo
      port: 8080
      tools:
        - name: get-branch
          description: "Check branch at Freeport-McMoRan."
          inputParameters:
            - name: repo
              in: body
              type: string
              description: "Repo."
            - name: branch
              in: body
              type: string
              description: "Branch."
          call: "github.get-branch"
          with:
            repo: "{{repo}}"
            branch: "{{branch}}"
          outputParameters:
            - name: sha
              type: string
              mapping: "$.commit.sha"
  consumes:
    - type: http
      namespace: github
      baseUri: "https://api.github.com"
      authentication:
        type: bearer
        token: "$secrets.github_token"
      resources:
        - name: branches
          path: "/repos/org/{{repo}}/branches/{{branch}}"
          inputParameters:
            - name: repo
              in: path
            - name: branch
              in: path
          operations:
            - name: get-branch
              method: GET

Fetches a file from Google Drive for mine operations documentation.

naftiko: "0.5"
info:
  label: "Google Drive Document Access"
  description: "Fetches a file from Google Drive for mine operations documentation."
  tags:
    - content
    - google-drive
capability:
  exposes:
    - type: mcp
      namespace: drive-files
      port: 8080
      tools:
        - name: get-drive-file
          description: "Retrieve a Google Drive file by ID."
          inputParameters:
            - name: file_id
              in: body
              type: string
              description: "Google Drive file ID."
          call: "gdrive.get-file"
          with:
            file_id: "{{file_id}}"
  consumes:
    - type: http
      namespace: gdrive
      baseUri: "https://www.googleapis.com/drive/v3"
      authentication:
        type: bearer
        token: "$secrets.google_drive_token"
      resources:
        - name: files
          path: "/files/{{file_id}}"
          inputParameters:
            - name: file_id
              in: path
          operations:
            - name: get-file
              method: GET

Geocodes mine site locations and generates maps for logistics planning.

naftiko: "0.5"
info:
  label: "Google Maps Mine Site Mapping"
  description: "Geocodes mine site locations and generates maps for logistics planning."
  tags:
    - logistics
    - google-maps
capability:
  exposes:
    - type: mcp
      namespace: site-mapping
      port: 8080
      tools:
        - name: map-mine-site
          description: "Geocode a mine site address and generate a map."
          inputParameters:
            - name: address
              in: body
              type: string
              description: "Mine site address."
          call: "googlemaps.geocode"
          with:
            address: "{{address}}"
  consumes:
    - type: http
      namespace: googlemaps
      baseUri: "https://maps.googleapis.com/maps/api"
      authentication:
        type: bearer
        token: "$secrets.google_maps_key"
      resources:
        - name: geocoding
          path: "/geocode/json"
          operations:
            - name: geocode
              method: GET

Checks Grafana dashboard at Freeport-McMoRan.

naftiko: "0.5"
info:
  label: "Grafana Dashboard Status"
  description: "Checks Grafana dashboard at Freeport-McMoRan."
  tags:
    - monitoring
    - grafana
    - dashboards
capability:
  exposes:
    - type: mcp
      namespace: grafana
      port: 8080
      tools:
        - name: check-dash
          description: "Check dashboard at Freeport-McMoRan."
          inputParameters:
            - name: uid
              in: body
              type: string
              description: "Dashboard UID."
          call: "grafana.get-dash"
          with:
            uid: "{{uid}}"
          outputParameters:
            - name: title
              type: string
              mapping: "$.dashboard.title"
  consumes:
    - type: http
      namespace: grafana
      baseUri: "https://grafana.fcx.com/api"
      authentication:
        type: bearer
        token: "$secrets.grafana_token"
      resources:
        - name: dashboards
          path: "/dashboards/uid/{{uid}}"
          inputParameters:
            - name: uid
              in: path
          operations:
            - name: get-dash
              method: GET

Collects haul truck telemetry from Azure Databricks, monitors fuel consumption and payload against targets, and flags underperforming trucks in ServiceNow.

naftiko: "0.5"
info:
  label: "Haul Truck Fleet Monitoring"
  description: "Collects haul truck telemetry from Azure Databricks, monitors fuel consumption and payload against targets, and flags underperforming trucks in ServiceNow."
  tags:
    - mining-ops
    - fleet
    - azure-databricks
    - servicenow
capability:
  exposes:
    - type: mcp
      namespace: fleet-monitoring
      port: 8080
      tools:
        - name: monitor-haul-fleet
          description: "Analyze haul truck fleet performance and flag issues."
          inputParameters:
            - name: mine_site
              in: body
              type: string
              description: "The mine site identifier."
            - name: shift_date
              in: body
              type: string
              description: "Shift date YYYY-MM-DD."
          steps:
            - name: get-fleet-data
              type: call
              call: "databricks.submit-job"
              with:
                job_name: "haul_truck_telemetry"
                parameters: '{"site":"{{mine_site}}","date":"{{shift_date}}"}'
            - name: flag-underperformers
              type: call
              call: "servicenow.create-task"
              with:
                short_description: "Fleet performance: {{mine_site}} ({{shift_date}})"
                description: "Underperforming trucks: {{get-fleet-data.flagged_count}}. Avg payload: {{get-fleet-data.avg_payload}} tons. Fuel efficiency: {{get-fleet-data.fuel_efficiency}} gal/ton."
                assigned_group: "Fleet_Operations"
  consumes:
    - type: http
      namespace: databricks
      baseUri: "https://eastus.azuredatabricks.net/api/2.1"
      authentication:
        type: bearer
        token: "$secrets.databricks_token"
      resources:
        - name: jobs
          path: "/jobs/run-now"
          operations:
            - name: submit-job
              method: POST
    - type: http
      namespace: servicenow
      baseUri: "https://freeport.service-now.com/api/now"
      authentication:
        type: basic
        username: "$secrets.servicenow_user"
        password: "$secrets.servicenow_password"
      resources:
        - name: tasks
          path: "/table/task"
          operations:
            - name: create-task
              method: POST

Retrieves HubSpot contact data for community stakeholder engagement.

naftiko: "0.5"
info:
  label: "HubSpot Community Engagement"
  description: "Retrieves HubSpot contact data for community stakeholder engagement."
  tags:
    - community
    - hubspot
capability:
  exposes:
    - type: mcp
      namespace: stakeholder-engagement
      port: 8080
      tools:
        - name: get-contact
          description: "Fetch HubSpot contact by email."
          inputParameters:
            - name: email
              in: body
              type: string
              description: "Contact email."
          call: "hubspot.get-contact"
          with:
            email: "{{email}}"
  consumes:
    - type: http
      namespace: hubspot
      baseUri: "https://api.hubapi.com"
      authentication:
        type: bearer
        token: "$secrets.hubspot_token"
      resources:
        - name: contacts
          path: "/crm/v3/objects/contacts/{{email}}"
          inputParameters:
            - name: email
              in: path
          operations:
            - name: get-contact
              method: GET

Escalates IT incidents at Freeport-McMoRan via ServiceNow, PagerDuty, and Slack.

naftiko: "0.5"
info:
  label: "IT Incident Escalation Pipeline"
  description: "Escalates IT incidents at Freeport-McMoRan via ServiceNow, PagerDuty, and Slack."
  tags:
    - incident-management
    - servicenow
    - pagerduty
    - slack
capability:
  exposes:
    - type: mcp
      namespace: incident-escalation
      port: 8080
      tools:
        - name: escalate-incident
          description: "Escalate incidents at Freeport-McMoRan."
          inputParameters:
            - name: incident_id
              in: body
              type: string
              description: "Incident ID."
            - name: severity
              in: body
              type: string
              description: "Severity."
          steps:
            - name: get-incident
              type: call
              call: "servicenow.get-incident"
              with:
                incident_id: "{{incident_id}}"
            - name: page
              type: call
              call: "pagerduty.create-incident"
              with:
                title: "{{get-incident.description}}"
                urgency: "{{severity}}"
            - name: channel
              type: call
              call: "slack.create-channel"
              with:
                name: "inc-{{incident_id}}"
            - name: notify
              type: call
              call: "slack.post-message"
              with:
                channel: "#inc-{{incident_id}}"
                text: "P{{severity}}: {{get-incident.description}}"
  consumes:
    - type: http
      namespace: servicenow
      baseUri: "https://fcx.com.service-now.com/api/now"
      authentication:
        type: bearer
        token: "$secrets.servicenow_token"
      resources:
        - name: incidents
          path: "/table/incident/{{incident_id}}"
          inputParameters:
            - name: incident_id
              in: path
          operations:
            - name: get-incident
              method: GET
    - type: http
      namespace: pagerduty
      baseUri: "https://api.pagerduty.com"
      authentication:
        type: bearer
        token: "$secrets.pagerduty_token"
      resources:
        - name: incidents
          path: "/incidents"
          operations:
            - name: create-incident
              method: POST
    - type: http
      namespace: slack
      baseUri: "https://slack.com/api"
      authentication:
        type: bearer
        token: "$secrets.slack_token"
      resources:
        - name: channels
          path: "/conversations.create"
          operations:
            - name: create-channel
              method: POST

Creates a Jira issue for mine operations task tracking.

naftiko: "0.5"
info:
  label: "Jira Issue Creation"
  description: "Creates a Jira issue for mine operations task tracking."
  tags:
    - operations
    - jira
capability:
  exposes:
    - type: mcp
      namespace: task-tracking
      port: 8080
      tools:
        - name: create-issue
          description: "Create a Jira issue."
          inputParameters:
            - name: project_key
              in: body
              type: string
              description: "Jira project key."
            - name: summary
              in: body
              type: string
              description: "Issue summary."
            - name: description
              in: body
              type: string
              description: "Issue description."
          call: "jira.create-issue"
          with:
            project_key: "{{project_key}}"
            summary: "{{summary}}"
            description: "{{description}}"
  consumes:
    - type: http
      namespace: jira
      baseUri: "https://freeport.atlassian.net/rest/api/3"
      authentication:
        type: basic
        username: "$secrets.jira_user"
        password: "$secrets.jira_token"
      resources:
        - name: issues
          path: "/issue"
          operations:
            - name: create-issue
              method: POST

Retrieves sprint progress at Freeport-McMoRan.

naftiko: "0.5"
info:
  label: "Jira Sprint Progress Lookup"
  description: "Retrieves sprint progress at Freeport-McMoRan."
  tags:
    - project-management
    - jira
    - agile
capability:
  exposes:
    - type: mcp
      namespace: jira-sprint
      port: 8080
      tools:
        - name: get-sprint
          description: "Look up sprint at Freeport-McMoRan."
          inputParameters:
            - name: project_key
              in: body
              type: string
              description: "Project key."
          call: "jira.get-sprints"
          with:
            project: "{{project_key}}"
          outputParameters:
            - name: name
              type: string
              mapping: "$.values[0].name"
            - name: state
              type: string
              mapping: "$.values[0].state"
  consumes:
    - type: http
      namespace: jira
      baseUri: "https://fcx.com.atlassian.net/rest/agile/1.0"
      authentication:
        type: bearer
        token: "$secrets.jira_token"
      resources:
        - name: sprints
          path: "/board/1/sprint"
          operations:
            - name: get-sprints
              method: GET

Maintains KB at Freeport-McMoRan by finding stale articles and notifying owners.

naftiko: "0.5"
info:
  label: "Knowledge Base Maintenance Pipeline"
  description: "Maintains KB at Freeport-McMoRan by finding stale articles and notifying owners."
  tags:
    - knowledge-management
    - confluence
    - maintenance
capability:
  exposes:
    - type: mcp
      namespace: kb-maint
      port: 8080
      tools:
        - name: maintain-kb
          description: "Maintain KB at Freeport-McMoRan."
          inputParameters:
            - name: space
              in: body
              type: string
              description: "Confluence space."
            - name: stale_days
              in: body
              type: number
              description: "Days threshold."
          steps:
            - name: find
              type: call
              call: "confluence.search-stale"
              with:
                space: "{{space}}"
                days: "{{stale_days}}"
            - name: notify
              type: call
              call: "email.batch"
              with:
                to: "{{find.owners}}"
                subject: "KB review needed"
            - name: flag
              type: call
              call: "confluence.add-label"
              with:
                pages: "{{find.ids}}"
                label: "needs-review"
            - name: report
              type: call
              call: "slack.post-message"
              with:
                channel: "#kb"
                text: "KB: {{find.count}} stale articles"
  consumes:
    - type: http
      namespace: confluence
      baseUri: "https://fcx.com.atlassian.net/wiki/rest/api"
      authentication:
        type: bearer
        token: "$secrets.confluence_token"
      resources:
        - name: content
          path: "/content/search"
          operations:
            - name: search-stale
              method: GET
    - type: http
      namespace: email
      baseUri: "https://email.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.email_token"
      resources:
        - name: batch
          path: "/send-batch"
          operations:
            - name: batch
              method: POST
    - type: http
      namespace: slack
      baseUri: "https://slack.com/api"
      authentication:
        type: bearer
        token: "$secrets.slack_token"
      resources:
        - name: messages
          path: "/chat.postMessage"
          operations:
            - name: post-message
              method: POST

Generates KPI digest at Freeport-McMoRan from Snowflake, Oracle, Power BI, and email.

naftiko: "0.5"
info:
  label: "Weekly KPI Digest Pipeline"
  description: "Generates KPI digest at Freeport-McMoRan from Snowflake, Oracle, Power BI, and email."
  tags:
    - reporting
    - kpi
    - snowflake
    - executive
capability:
  exposes:
    - type: mcp
      namespace: kpi-digest
      port: 8080
      tools:
        - name: gen-digest
          description: "Generate KPI digest at Freeport-McMoRan."
          inputParameters:
            - name: week
              in: body
              type: string
              description: "Week ending."
            - name: dist
              in: body
              type: string
              description: "Distribution list."
          steps:
            - name: ops
              type: call
              call: "snowflake.query"
              with:
                query: "SELECT * FROM kpis WHERE w='{{week}}'"
            - name: fin
              type: call
              call: "oracle.get-summary"
              with:
                period: "{{week}}"
            - name: refresh
              type: call
              call: "power-bi.refresh"
              with:
                dataset: "exec_kpis"
            - name: send
              type: call
              call: "email.send"
              with:
                to: "{{dist}}"
                subject: "KPIs - {{week}}"
  consumes:
    - type: http
      namespace: snowflake
      baseUri: "https://fcx.com.snowflakecomputing.com/api/v2"
      authentication:
        type: bearer
        token: "$secrets.snowflake_token"
      resources:
        - name: statements
          path: "/statements"
          operations:
            - name: query
              method: POST
    - type: http
      namespace: oracle
      baseUri: "https://oracle.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.oracle_token"
      resources:
        - name: fin
          path: "/summary"
          operations:
            - name: get-summary
              method: GET
    - type: http
      namespace: power-bi
      baseUri: "https://api.powerbi.com/v1.0/myorg"
      authentication:
        type: bearer
        token: "$secrets.power_bi_token"
      resources:
        - name: datasets
          path: "/datasets/{{dataset}}/refreshes"
          inputParameters:
            - name: dataset
              in: path
          operations:
            - name: refresh
              method: POST
    - type: http
      namespace: email
      baseUri: "https://email.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.email_token"
      resources:
        - name: messages
          path: "/send"
          operations:
            - name: send
              method: POST

Checks K8s pod health at Freeport-McMoRan.

naftiko: "0.5"
info:
  label: "K8s Pod Health"
  description: "Checks K8s pod health at Freeport-McMoRan."
  tags:
    - containers
    - kubernetes
    - infrastructure
capability:
  exposes:
    - type: mcp
      namespace: k8s-pod
      port: 8080
      tools:
        - name: check-pod
          description: "Check pod at Freeport-McMoRan."
          inputParameters:
            - name: namespace
              in: body
              type: string
              description: "Namespace."
            - name: pod
              in: body
              type: string
              description: "Pod name."
          call: "k8s.get-pod"
          with:
            namespace: "{{namespace}}"
            pod: "{{pod}}"
          outputParameters:
            - name: phase
              type: string
              mapping: "$.status.phase"
  consumes:
    - type: http
      namespace: k8s
      baseUri: "https://k8s.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.k8s_token"
      resources:
        - name: pods
          path: "/namespaces/{{namespace}}/pods/{{pod}}"
          inputParameters:
            - name: namespace
              in: path
            - name: pod
              in: path
          operations:
            - name: get-pod
              method: GET

Checks license compliance at Freeport-McMoRan via scanning, entitlements, and procurement.

naftiko: "0.5"
info:
  label: "License Compliance Pipeline"
  description: "Checks license compliance at Freeport-McMoRan via scanning, entitlements, and procurement."
  tags:
    - compliance
    - licensing
    - procurement
capability:
  exposes:
    - type: mcp
      namespace: license-comp
      port: 8080
      tools:
        - name: check-licenses
          description: "Check license compliance at Freeport-McMoRan."
          inputParameters:
            - name: software
              in: body
              type: string
              description: "Software."
            - name: vendor
              in: body
              type: string
              description: "Vendor."
          steps:
            - name: scan
              type: call
              call: "assets.installations"
              with:
                sw: "{{software}}"
            - name: entitlements
              type: call
              call: "licenses.get"
              with:
                sw: "{{software}}"
            - name: flag
              type: call
              call: "compliance.flag"
              with:
                installed: "{{scan.count}}"
                entitled: "{{entitlements.count}}"
            - name: procure
              type: call
              call: "servicenow.create-request"
              with:
                type: "license"
                sw: "{{software}}"
  consumes:
    - type: http
      namespace: assets
      baseUri: "https://assets.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.asset_token"
      resources:
        - name: installations
          path: "/installations"
          operations:
            - name: installations
              method: GET
    - type: http
      namespace: licenses
      baseUri: "https://licenses.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.license_token"
      resources:
        - name: ent
          path: "/entitlements"
          operations:
            - name: get
              method: GET
    - type: http
      namespace: compliance
      baseUri: "https://compliance.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.compliance_token"
      resources:
        - name: overages
          path: "/flag"
          operations:
            - name: flag
              method: POST
    - type: http
      namespace: servicenow
      baseUri: "https://fcx.com.service-now.com/api/now"
      authentication:
        type: bearer
        token: "$secrets.servicenow_token"
      resources:
        - name: requests
          path: "/table/sc_request"
          operations:
            - name: create-request
              method: POST

Runs a MATLAB geological model for ore body characterization and returns the analysis results.

naftiko: "0.5"
info:
  label: "MATLAB Geological Modeling"
  description: "Runs a MATLAB geological model for ore body characterization and returns the analysis results."
  tags:
    - engineering
    - matlab
capability:
  exposes:
    - type: mcp
      namespace: geological-modeling
      port: 8080
      tools:
        - name: run-geological-model
          description: "Execute a MATLAB geological modeling script."
          inputParameters:
            - name: model_name
              in: body
              type: string
              description: "Model script name."
            - name: parameters
              in: body
              type: string
              description: "JSON model parameters."
          call: "matlab.execute-script"
          with:
            script: "{{model_name}}"
            parameters: "{{parameters}}"
  consumes:
    - type: http
      namespace: matlab
      baseUri: "https://matlab.freeport.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.matlab_token"
      resources:
        - name: scripts
          path: "/execute"
          operations:
            - name: execute-script
              method: POST

Checks device compliance for mine worker devices in Microsoft Endpoint Manager.

naftiko: "0.5"
info:
  label: "Microsoft Endpoint Manager Device Compliance"
  description: "Checks device compliance for mine worker devices in Microsoft Endpoint Manager."
  tags:
    - security
    - microsoft-endpoint-manager
capability:
  exposes:
    - type: mcp
      namespace: device-compliance
      port: 8080
      tools:
        - name: check-device-compliance
          description: "Check Intune device compliance by device ID."
          inputParameters:
            - name: device_id
              in: body
              type: string
              description: "The managed device ID."
          call: "intune.get-device-compliance"
          with:
            device_id: "{{device_id}}"
  consumes:
    - type: http
      namespace: intune
      baseUri: "https://graph.microsoft.com/v1.0"
      authentication:
        type: bearer
        token: "$secrets.msgraph_token"
      resources:
        - name: devices
          path: "/deviceManagement/managedDevices/{{device_id}}"
          inputParameters:
            - name: device_id
              in: path
          operations:
            - name: get-device-compliance
              method: GET

Sends a message to a Microsoft Teams channel for mine operations communication.

naftiko: "0.5"
info:
  label: "Microsoft Teams Channel Message"
  description: "Sends a message to a Microsoft Teams channel for mine operations communication."
  tags:
    - communications
    - microsoft-teams
capability:
  exposes:
    - type: mcp
      namespace: team-messaging
      port: 8080
      tools:
        - name: send-team-message
          description: "Post a message to a Teams channel."
          inputParameters:
            - name: channel_id
              in: body
              type: string
              description: "Teams channel ID."
            - name: text
              in: body
              type: string
              description: "Message text."
          call: "msteams.send-message"
          with:
            channel_id: "{{channel_id}}"
            text: "{{text}}"
  consumes:
    - type: http
      namespace: msteams
      baseUri: "https://graph.microsoft.com/v1.0"
      authentication:
        type: bearer
        token: "$secrets.msgraph_token"
      resources:
        - name: channels
          path: "/teams/{{channel_id}}/channels/general/messages"
          inputParameters:
            - name: channel_id
              in: path
          operations:
            - name: send-message
              method: POST

When a safety incident is reported, creates a ServiceNow incident, assigns an investigator from Workday, uploads evidence photos to SharePoint, and alerts the HSE team in Microsoft Teams.

naftiko: "0.5"
info:
  label: "Mine Safety Incident Orchestrator"
  description: "When a safety incident is reported, creates a ServiceNow incident, assigns an investigator from Workday, uploads evidence photos to SharePoint, and alerts the HSE team in Microsoft Teams."
  tags:
    - safety
    - mining-ops
    - servicenow
    - workday
    - sharepoint
    - microsoft-teams
capability:
  exposes:
    - type: mcp
      namespace: safety-incidents
      port: 8080
      tools:
        - name: report-safety-incident
          description: "Create incident, assign investigator, upload evidence, and alert HSE."
          inputParameters:
            - name: mine_site
              in: body
              type: string
              description: "The mine site identifier."
            - name: description
              in: body
              type: string
              description: "Incident description."
            - name: severity
              in: body
              type: string
              description: "Severity level (minor, moderate, serious, critical)."
            - name: photo_urls
              in: body
              type: string
              description: "Comma-separated incident photo URLs."
          steps:
            - name: create-incident
              type: call
              call: "servicenow.create-incident"
              with:
                short_description: "Safety incident at {{mine_site}}: {{severity}}"
                description: "{{description}}"
                severity: "{{severity}}"
                assigned_group: "HSE_Investigations"
            - name: get-investigator
              type: call
              call: "workday.get-available-investigator"
              with:
                site: "{{mine_site}}"
                certification: "mine_safety_investigator"
            - name: upload-evidence
              type: call
              call: "sharepoint.upload-file"
              with:
                site_id: "safety_site"
                folder_path: "Incidents/{{create-incident.number}}"
                file_name: "evidence_photos.zip"
                content: "{{photo_urls}}"
            - name: alert-hse
              type: call
              call: "msteams.send-message"
              with:
                channel_id: "hse_alerts"
                text: "SAFETY INCIDENT ({{severity}}): {{mine_site}}. {{description}}. Investigator: {{get-investigator.full_name}}. Case: {{create-incident.number}}"
  consumes:
    - type: http
      namespace: servicenow
      baseUri: "https://freeport.service-now.com/api/now"
      authentication:
        type: basic
        username: "$secrets.servicenow_user"
        password: "$secrets.servicenow_password"
      resources:
        - name: incidents
          path: "/table/incident"
          operations:
            - name: create-incident
              method: POST
    - type: http
      namespace: workday
      baseUri: "https://wd2-impl-services1.workday.com/ccx/api/v1"
      authentication:
        type: bearer
        token: "$secrets.workday_token"
      resources:
        - name: workers
          path: "/workers/search"
          operations:
            - name: get-available-investigator
              method: POST
    - type: http
      namespace: sharepoint
      baseUri: "https://graph.microsoft.com/v1.0/sites"
      authentication:
        type: bearer
        token: "$secrets.msgraph_token"
      resources:
        - name: files
          path: "/{{site_id}}/drive/root:/{{folder_path}}/{{file_name}}:/content"
          inputParameters:
            - name: site_id
              in: path
            - name: folder_path
              in: path
            - name: file_name
              in: path
          operations:
            - name: upload-file
              method: PUT
    - type: http
      namespace: msteams
      baseUri: "https://graph.microsoft.com/v1.0"
      authentication:
        type: bearer
        token: "$secrets.msgraph_token"
      resources:
        - name: channels
          path: "/teams/{{channel_id}}/channels/general/messages"
          inputParameters:
            - name: channel_id
              in: path
          operations:
            - name: send-message
              method: POST

Monitors dust levels from environmental sensors via Azure Databricks and activates suppression systems when thresholds are exceeded, logging events in ServiceNow.

naftiko: "0.5"
info:
  label: "Mine Site Dust Suppression Monitoring"
  description: "Monitors dust levels from environmental sensors via Azure Databricks and activates suppression systems when thresholds are exceeded, logging events in ServiceNow."
  tags:
    - safety
    - mining-ops
    - azure-databricks
    - servicenow
capability:
  exposes:
    - type: mcp
      namespace: dust-monitoring
      port: 8080
      tools:
        - name: monitor-dust-levels
          description: "Check dust levels and log suppression events."
          inputParameters:
            - name: mine_site
              in: body
              type: string
              description: "Mine site identifier."
            - name: zone
              in: body
              type: string
              description: "Monitoring zone within the mine."
          steps:
            - name: get-dust-data
              type: call
              call: "databricks.submit-job"
              with:
                job_name: "dust_level_monitoring"
                parameters: '{"site":"{{mine_site}}","zone":"{{zone}}"}'
            - name: log-event
              type: call
              call: "servicenow.create-task"
              with:
                short_description: "Dust monitoring: {{mine_site}} Zone {{zone}}"
                description: "PM10: {{get-dust-data.pm10}} ug/m3. PM2.5: {{get-dust-data.pm25}} ug/m3. Suppression activated: {{get-dust-data.suppression_active}}."
                assigned_group: "Environmental_Ops"
  consumes:
    - type: http
      namespace: databricks
      baseUri: "https://eastus.azuredatabricks.net/api/2.1"
      authentication:
        type: bearer
        token: "$secrets.databricks_token"
      resources:
        - name: jobs
          path: "/jobs/run-now"
          operations:
            - name: submit-job
              method: POST
    - type: http
      namespace: servicenow
      baseUri: "https://freeport.service-now.com/api/now"
      authentication:
        type: basic
        username: "$secrets.servicenow_user"
        password: "$secrets.servicenow_password"
      resources:
        - name: tasks
          path: "/table/task"
          operations:
            - name: create-task
              method: POST

Generates monthly security reports at Freeport-McMoRan from Splunk and Qualys.

naftiko: "0.5"
info:
  label: "Monthly Security Report Pipeline"
  description: "Generates monthly security reports at Freeport-McMoRan from Splunk and Qualys."
  tags:
    - security
    - reporting
    - splunk
    - compliance
capability:
  exposes:
    - type: mcp
      namespace: sec-report
      port: 8080
      tools:
        - name: gen-sec-report
          description: "Generate security report at Freeport-McMoRan."
          inputParameters:
            - name: month
              in: body
              type: string
              description: "Month."
          steps:
            - name: splunk
              type: call
              call: "splunk.search"
              with:
                query: "index=security earliest=-30d"
            - name: scans
              type: call
              call: "qualys.results"
              with:
                month: "{{month}}"
            - name: compile
              type: call
              call: "analytics.compile-security"
              with:
                events: "{{splunk.count}}"
                vulns: "{{scans.critical}}"
            - name: send
              type: call
              call: "email.send"
              with:
                to: "ciso@co.com"
                subject: "Security - {{month}}"
  consumes:
    - type: http
      namespace: splunk
      baseUri: "https://splunk.fcx.com:8089/services"
      authentication:
        type: bearer
        token: "$secrets.splunk_token"
      resources:
        - name: search
          path: "/search/jobs"
          operations:
            - name: search
              method: POST
    - type: http
      namespace: qualys
      baseUri: "https://qualysapi.qualys.com/api/v2"
      authentication:
        type: bearer
        token: "$secrets.qualys_token"
      resources:
        - name: results
          path: "/fo/scan/results"
          operations:
            - name: results
              method: GET
    - type: http
      namespace: analytics
      baseUri: "https://analytics.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.analytics_token"
      resources:
        - name: security
          path: "/compile"
          operations:
            - name: compile-security
              method: POST
    - type: http
      namespace: email
      baseUri: "https://email.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.email_token"
      resources:
        - name: messages
          path: "/send"
          operations:
            - name: send
              method: POST

Onboards employees at Freeport-McMoRan with Okta, ServiceNow, Slack, and calendar.

naftiko: "0.5"
info:
  label: "New Employee IT Onboarding Pipeline"
  description: "Onboards employees at Freeport-McMoRan with Okta, ServiceNow, Slack, and calendar."
  tags:
    - hr
    - onboarding
    - okta
    - servicenow
    - slack
capability:
  exposes:
    - type: mcp
      namespace: it-onboarding
      port: 8080
      tools:
        - name: onboard-employee
          description: "Onboard employees at Freeport-McMoRan."
          inputParameters:
            - name: name
              in: body
              type: string
              description: "Name."
            - name: dept
              in: body
              type: string
              description: "Department."
            - name: start
              in: body
              type: string
              description: "Start date."
          steps:
            - name: okta
              type: call
              call: "okta.create-user"
              with:
                name: "{{name}}"
                department: "{{dept}}"
            - name: equip
              type: call
              call: "servicenow.create-request"
              with:
                type: "new_hire"
                for: "{{name}}"
            - name: slack
              type: call
              call: "slack.invite"
              with:
                email: "{{okta.email}}"
            - name: orient
              type: call
              call: "calendar.create-event"
              with:
                title: "Orientation - {{name}}"
                date: "{{start}}"
  consumes:
    - type: http
      namespace: okta
      baseUri: "https://fcx.com.okta.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.okta_api_token"
      resources:
        - name: users
          path: "/users"
          operations:
            - name: create-user
              method: POST
    - type: http
      namespace: servicenow
      baseUri: "https://fcx.com.service-now.com/api/now"
      authentication:
        type: bearer
        token: "$secrets.servicenow_token"
      resources:
        - name: requests
          path: "/table/sc_request"
          operations:
            - name: create-request
              method: POST
    - type: http
      namespace: slack
      baseUri: "https://slack.com/api"
      authentication:
        type: bearer
        token: "$secrets.slack_token"
      resources:
        - name: users
          path: "/users.admin.invite"
          operations:
            - name: invite
              method: POST
    - type: http
      namespace: calendar
      baseUri: "https://graph.microsoft.com/v1.0"
      authentication:
        type: bearer
        token: "$secrets.microsoft_graph_token"
      resources:
        - name: events
          path: "/users/hr/events"
          operations:
            - name: create-event
              method: POST

Checks New Relic APM at Freeport-McMoRan.

naftiko: "0.5"
info:
  label: "New Relic APM Check"
  description: "Checks New Relic APM at Freeport-McMoRan."
  tags:
    - monitoring
    - new-relic
    - apm
capability:
  exposes:
    - type: mcp
      namespace: nr-apm
      port: 8080
      tools:
        - name: check-apm
          description: "Check APM at Freeport-McMoRan."
          inputParameters:
            - name: app_id
              in: body
              type: string
              description: "App ID."
          call: "newrelic.get-app"
          with:
            app_id: "{{app_id}}"
          outputParameters:
            - name: health
              type: string
              mapping: "$.application.health_status"
  consumes:
    - type: http
      namespace: newrelic
      baseUri: "https://api.newrelic.com/v2"
      authentication:
        type: bearer
        token: "$secrets.new_relic_api_key"
      resources:
        - name: applications
          path: "/applications/{{app_id}}.json"
          inputParameters:
            - name: app_id
              in: path
          operations:
            - name: get-app
              method: GET

Retrieves New Relic APM metrics for mine operations systems.

naftiko: "0.5"
info:
  label: "New Relic Application Monitoring"
  description: "Retrieves New Relic APM metrics for mine operations systems."
  tags:
    - monitoring
    - new-relic
capability:
  exposes:
    - type: mcp
      namespace: apm
      port: 8080
      tools:
        - name: get-app-performance
          description: "Fetch New Relic APM metrics."
          inputParameters:
            - name: app_id
              in: body
              type: string
              description: "New Relic application ID."
          call: "newrelic.get-app-metrics"
          with:
            app_id: "{{app_id}}"
  consumes:
    - type: http
      namespace: newrelic
      baseUri: "https://api.newrelic.com/v2"
      authentication:
        type: bearer
        token: "$secrets.newrelic_api_key"
      resources:
        - name: applications
          path: "/applications/{{app_id}}/metrics/data.json"
          inputParameters:
            - name: app_id
              in: path
          operations:
            - name: get-app-metrics
              method: GET

Checks Okta user at Freeport-McMoRan.

naftiko: "0.5"
info:
  label: "Okta User Check"
  description: "Checks Okta user at Freeport-McMoRan."
  tags:
    - identity
    - okta
    - access-management
capability:
  exposes:
    - type: mcp
      namespace: okta-user
      port: 8080
      tools:
        - name: check-user
          description: "Check user at Freeport-McMoRan."
          inputParameters:
            - name: email
              in: body
              type: string
              description: "Email."
          call: "okta.get-user"
          with:
            email: "{{email}}"
          outputParameters:
            - name: status
              type: string
              mapping: "$.status"
  consumes:
    - type: http
      namespace: okta
      baseUri: "https://fcx.com.okta.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.okta_api_token"
      resources:
        - name: users
          path: "/users/{{email}}"
          inputParameters:
            - name: email
              in: path
          operations:
            - name: get-user
              method: GET

Retrieves cost and usage data from Oracle Cloud.

naftiko: "0.5"
info:
  label: "Oracle Cloud Cost Reporting"
  description: "Retrieves cost and usage data from Oracle Cloud."
  tags:
    - finance
    - cloud
    - oracle-cloud
capability:
  exposes:
    - type: mcp
      namespace: cloud-costs
      port: 8080
      tools:
        - name: get-cloud-costs
          description: "Fetch Oracle Cloud cost data."
          inputParameters:
            - name: compartment_id
              in: body
              type: string
              description: "Oracle Cloud compartment OCID."
            - name: start_date
              in: body
              type: string
              description: "Start date YYYY-MM-DD."
            - name: end_date
              in: body
              type: string
              description: "End date YYYY-MM-DD."
          call: "oraclecloud.get-usage"
          with:
            compartment_id: "{{compartment_id}}"
            start_date: "{{start_date}}"
            end_date: "{{end_date}}"
  consumes:
    - type: http
      namespace: oraclecloud
      baseUri: "https://usageapi.us-ashburn-1.oci.oraclecloud.com/20200107"
      authentication:
        type: bearer
        token: "$secrets.oracle_cloud_token"
      resources:
        - name: usage
          path: "/usage"
          operations:
            - name: get-usage
              method: POST

Retrieves Oracle Cloud compute instance status for mine site workloads.

naftiko: "0.5"
info:
  label: "Oracle Cloud Instance Status"
  description: "Retrieves Oracle Cloud compute instance status for mine site workloads."
  tags:
    - infrastructure
    - oracle-cloud
capability:
  exposes:
    - type: mcp
      namespace: oci-compute
      port: 8080
      tools:
        - name: get-instance-status
          description: "Fetch Oracle Cloud instance status."
          inputParameters:
            - name: instance_id
              in: body
              type: string
              description: "OCI instance OCID."
          call: "oraclecloud.get-instance"
          with:
            instance_id: "{{instance_id}}"
  consumes:
    - type: http
      namespace: oraclecloud
      baseUri: "https://iaas.us-ashburn-1.oraclecloud.com/20160918"
      authentication:
        type: bearer
        token: "$secrets.oracle_cloud_token"
      resources:
        - name: instances
          path: "/instances/{{instance_id}}"
          inputParameters:
            - name: instance_id
              in: path
          operations:
            - name: get-instance
              method: GET

Runs an Azure Machine Learning model to predict ore grade for a blast pattern, compares against geological survey data in SAP, and updates the mine plan in Microsoft Teams.

naftiko: "0.5"
info:
  label: "Ore Grade Prediction Pipeline"
  description: "Runs an Azure Machine Learning model to predict ore grade for a blast pattern, compares against geological survey data in SAP, and updates the mine plan in Microsoft Teams."
  tags:
    - mining-ops
    - azure-machine-learning
    - sap
    - microsoft-teams
capability:
  exposes:
    - type: mcp
      namespace: ore-grade-prediction
      port: 8080
      tools:
        - name: predict-ore-grade
          description: "Run grade prediction model and compare against survey data."
          inputParameters:
            - name: blast_pattern_id
              in: body
              type: string
              description: "The blast pattern identifier."
            - name: mine_site
              in: body
              type: string
              description: "Mine site identifier."
          steps:
            - name: run-prediction
              type: call
              call: "azureml.score-model"
              with:
                endpoint: "ore_grade_prediction_v2"
                data: '{"blast_pattern":"{{blast_pattern_id}}","site":"{{mine_site}}"}'
            - name: get-survey-data
              type: call
              call: "sap.get-geological-survey"
              with:
                blast_pattern_id: "{{blast_pattern_id}}"
            - name: notify-planning
              type: call
              call: "msteams.send-message"
              with:
                channel_id: "mine_planning"
                text: "Ore grade prediction for {{blast_pattern_id}} at {{mine_site}}: Predicted {{run-prediction.grade_pct}}% Cu (survey: {{get-survey-data.assay_grade}}%). Confidence: {{run-prediction.confidence_pct}}%."
  consumes:
    - type: http
      namespace: azureml
      baseUri: "https://freeport-ml.eastus.inference.ml.azure.com"
      authentication:
        type: bearer
        token: "$secrets.azureml_token"
      resources:
        - name: endpoints
          path: "/score"
          operations:
            - name: score-model
              method: POST
    - type: http
      namespace: sap
      baseUri: "https://freeport-sap.s4hana.cloud/api/v1"
      authentication:
        type: basic
        username: "$secrets.sap_user"
        password: "$secrets.sap_password"
      resources:
        - name: surveys
          path: "/geology/surveys"
          operations:
            - name: get-geological-survey
              method: GET
    - type: http
      namespace: msteams
      baseUri: "https://graph.microsoft.com/v1.0"
      authentication:
        type: bearer
        token: "$secrets.msgraph_token"
      resources:
        - name: channels
          path: "/teams/{{channel_id}}/channels/general/messages"
          inputParameters:
            - name: channel_id
              in: path
          operations:
            - name: send-message
              method: POST

Aggregates ore processing telemetry from Azure Databricks, compares against production targets in SAP, and posts a daily operations summary to Microsoft Teams.

naftiko: "0.5"
info:
  label: "Ore Processing Production Dashboard"
  description: "Aggregates ore processing telemetry from Azure Databricks, compares against production targets in SAP, and posts a daily operations summary to Microsoft Teams."
  tags:
    - mining-ops
    - production
    - azure-databricks
    - sap
    - microsoft-teams
capability:
  exposes:
    - type: mcp
      namespace: production-dashboard
      port: 8080
      tools:
        - name: build-production-summary
          description: "Aggregate processing data, compare to targets, and post daily summary."
          inputParameters:
            - name: plant_id
              in: body
              type: string
              description: "The processing plant identifier."
            - name: date
              in: body
              type: string
              description: "Production date YYYY-MM-DD."
          steps:
            - name: get-telemetry
              type: call
              call: "databricks.submit-job"
              with:
                job_name: "ore_processing_agg"
                parameters: '{"plant":"{{plant_id}}","date":"{{date}}"}'
            - name: get-targets
              type: call
              call: "sap.get-production-targets"
              with:
                plant_id: "{{plant_id}}"
                date: "{{date}}"
            - name: post-summary
              type: call
              call: "msteams.send-message"
              with:
                channel_id: "mining_operations"
                text: "Production ({{plant_id}}, {{date}}): Throughput {{get-telemetry.throughput_tons}} tons (target: {{get-targets.target_tons}}). Recovery: {{get-telemetry.recovery_pct}}%. Grade: {{get-telemetry.ore_grade}}%."
  consumes:
    - type: http
      namespace: databricks
      baseUri: "https://eastus.azuredatabricks.net/api/2.1"
      authentication:
        type: bearer
        token: "$secrets.databricks_token"
      resources:
        - name: jobs
          path: "/jobs/run-now"
          operations:
            - name: submit-job
              method: POST
    - type: http
      namespace: sap
      baseUri: "https://freeport-sap.s4hana.cloud/api/v1"
      authentication:
        type: basic
        username: "$secrets.sap_user"
        password: "$secrets.sap_password"
      resources:
        - name: targets
          path: "/production/targets"
          operations:
            - name: get-production-targets
              method: GET
    - type: http
      namespace: msteams
      baseUri: "https://graph.microsoft.com/v1.0"
      authentication:
        type: bearer
        token: "$secrets.msgraph_token"
      resources:
        - name: channels
          path: "/teams/{{channel_id}}/channels/general/messages"
          inputParameters:
            - name: channel_id
              in: path
          operations:
            - name: send-message
              method: POST

Checks on-call at Freeport-McMoRan.

naftiko: "0.5"
info:
  label: "PagerDuty On-Call Check"
  description: "Checks on-call at Freeport-McMoRan."
  tags:
    - incident-management
    - pagerduty
    - on-call
capability:
  exposes:
    - type: mcp
      namespace: pd-oncall
      port: 8080
      tools:
        - name: get-oncall
          description: "Check on-call at Freeport-McMoRan."
          inputParameters:
            - name: schedule_id
              in: body
              type: string
              description: "Schedule ID."
          call: "pagerduty.get-oncall"
          with:
            schedule_id: "{{schedule_id}}"
          outputParameters:
            - name: user
              type: string
              mapping: "$.oncalls[0].user.summary"
  consumes:
    - type: http
      namespace: pagerduty
      baseUri: "https://api.pagerduty.com"
      authentication:
        type: bearer
        token: "$secrets.pagerduty_token"
      resources:
        - name: oncalls
          path: "/oncalls"
          operations:
            - name: get-oncall
              method: GET

Queries Palo Alto Networks firewall for active threats at mine site networks.

naftiko: "0.5"
info:
  label: "Palo Alto Networks Firewall Status"
  description: "Queries Palo Alto Networks firewall for active threats at mine site networks."
  tags:
    - security
    - palo-alto-networks
capability:
  exposes:
    - type: mcp
      namespace: firewall-status
      port: 8080
      tools:
        - name: get-firewall-status
          description: "Fetch Palo Alto firewall threat summary."
          inputParameters:
            - name: device_id
              in: body
              type: string
              description: "Firewall device identifier."
          call: "paloalto.get-status"
          with:
            device_id: "{{device_id}}"
  consumes:
    - type: http
      namespace: paloalto
      baseUri: "https://firewall.freeport.com/restapi/v10.1"
      authentication:
        type: bearer
        token: "$secrets.paloalto_token"
      resources:
        - name: devices
          path: "/Device/SystemInfo"
          operations:
            - name: get-status
              method: GET

Collects slope monitoring sensor data from Azure Databricks and MATLAB, compares against stability thresholds, and creates alerts in ServiceNow with Microsoft Teams notifications.

naftiko: "0.5"
info:
  label: "Pit Slope Stability Monitoring"
  description: "Collects slope monitoring sensor data from Azure Databricks and MATLAB, compares against stability thresholds, and creates alerts in ServiceNow with Microsoft Teams notifications."
  tags:
    - mining-ops
    - safety
    - azure-databricks
    - matlab
    - servicenow
    - microsoft-teams
capability:
  exposes:
    - type: mcp
      namespace: slope-monitoring
      port: 8080
      tools:
        - name: monitor-pit-slope
          description: "Collect slope data, run stability analysis, and alert on deviations."
          inputParameters:
            - name: pit_id
              in: body
              type: string
              description: "The open pit identifier."
            - name: sector
              in: body
              type: string
              description: "Pit sector being monitored."
          steps:
            - name: get-sensor-data
              type: call
              call: "databricks.submit-job"
              with:
                job_name: "slope_sensor_analysis"
                parameters: '{"pit":"{{pit_id}}","sector":"{{sector}}"}'
            - name: run-analysis
              type: call
              call: "matlab.execute-script"
              with:
                script: "slope_stability"
                parameters: '{"displacement":"{{get-sensor-data.displacement_mm}}","velocity":"{{get-sensor-data.velocity_mm_day}}"}'
            - name: create-alert
              type: call
              call: "servicenow.create-incident"
              with:
                short_description: "Slope monitoring: Pit {{pit_id}}, Sector {{sector}}"
                description: "Displacement: {{get-sensor-data.displacement_mm}} mm. Velocity: {{get-sensor-data.velocity_mm_day}} mm/day. FoS: {{run-analysis.factor_of_safety}}."
                severity: "{{run-analysis.alert_level}}"
                assigned_group: "Geotechnical_Engineering"
            - name: notify-team
              type: call
              call: "msteams.send-message"
              with:
                channel_id: "geotechnical"
                text: "Slope Alert: Pit {{pit_id}}, Sector {{sector}}. FoS: {{run-analysis.factor_of_safety}}. Displacement: {{get-sensor-data.displacement_mm}} mm. Alert: {{create-alert.number}}"
  consumes:
    - type: http
      namespace: databricks
      baseUri: "https://eastus.azuredatabricks.net/api/2.1"
      authentication:
        type: bearer
        token: "$secrets.databricks_token"
      resources:
        - name: jobs
          path: "/jobs/run-now"
          operations:
            - name: submit-job
              method: POST
    - type: http
      namespace: matlab
      baseUri: "https://matlab.freeport.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.matlab_token"
      resources:
        - name: scripts
          path: "/execute"
          operations:
            - name: execute-script
              method: POST
    - type: http
      namespace: servicenow
      baseUri: "https://freeport.service-now.com/api/now"
      authentication:
        type: basic
        username: "$secrets.servicenow_user"
        password: "$secrets.servicenow_password"
      resources:
        - name: incidents
          path: "/table/incident"
          operations:
            - name: create-incident
              method: POST
    - type: http
      namespace: msteams
      baseUri: "https://graph.microsoft.com/v1.0"
      authentication:
        type: bearer
        token: "$secrets.msgraph_token"
      resources:
        - name: channels
          path: "/teams/{{channel_id}}/channels/general/messages"
          inputParameters:
            - name: channel_id
              in: path
          operations:
            - name: send-message
              method: POST

Assigns mandatory mine safety training via Pluralsight to workers based on Workday site assignments.

naftiko: "0.5"
info:
  label: "Pluralsight Mine Safety Training"
  description: "Assigns mandatory mine safety training via Pluralsight to workers based on Workday site assignments."
  tags:
    - safety
    - learning
    - pluralsight
    - workday
capability:
  exposes:
    - type: mcp
      namespace: safety-training
      port: 8080
      tools:
        - name: assign-safety-training
          description: "Assign safety training to workers at a mine site."
          inputParameters:
            - name: mine_site
              in: body
              type: string
              description: "Mine site identifier."
            - name: training_path_id
              in: body
              type: string
              description: "Pluralsight learning path ID."
          steps:
            - name: get-site-workers
              type: call
              call: "workday.get-site-workers"
              with:
                site: "{{mine_site}}"
            - name: assign-training
              type: call
              call: "pluralsight.assign-path"
              with:
                path_id: "{{training_path_id}}"
                emails: "{{get-site-workers.emails}}"
  consumes:
    - type: http
      namespace: workday
      baseUri: "https://wd2-impl-services1.workday.com/ccx/api/v1"
      authentication:
        type: bearer
        token: "$secrets.workday_token"
      resources:
        - name: sites
          path: "/sites/{{site}}/workers"
          inputParameters:
            - name: site
              in: path
          operations:
            - name: get-site-workers
              method: GET
    - type: http
      namespace: pluralsight
      baseUri: "https://api.pluralsight.com/v1"
      authentication:
        type: bearer
        token: "$secrets.pluralsight_token"
      resources:
        - name: assignments
          path: "/assignments"
          operations:
            - name: assign-path
              method: POST

Creates postmortems at Freeport-McMoRan.

naftiko: "0.5"
info:
  label: "Incident Postmortem Pipeline"
  description: "Creates postmortems at Freeport-McMoRan."
  tags:
    - incident-management
    - postmortem
    - pagerduty
    - confluence
capability:
  exposes:
    - type: mcp
      namespace: postmortem
      port: 8080
      tools:
        - name: create-postmortem
          description: "Create postmortem at Freeport-McMoRan."
          inputParameters:
            - name: incident_id
              in: body
              type: string
              description: "Incident ID."
          steps:
            - name: timeline
              type: call
              call: "pagerduty.get-log"
              with:
                id: "{{incident_id}}"
            - name: metrics
              type: call
              call: "datadog.get-metrics"
              with:
                incident: "{{incident_id}}"
            - name: doc
              type: call
              call: "confluence.create-page"
              with:
                title: "Postmortem: {{timeline.title}}"
                body: "Impact: {{metrics.impact}}"
            - name: review
              type: call
              call: "calendar.create-event"
              with:
                title: "Review: {{timeline.title}}"
  consumes:
    - type: http
      namespace: pagerduty
      baseUri: "https://api.pagerduty.com"
      authentication:
        type: bearer
        token: "$secrets.pagerduty_token"
      resources:
        - name: incidents
          path: "/incidents/{{id}}/log_entries"
          inputParameters:
            - name: id
              in: path
          operations:
            - name: get-log
              method: GET
    - type: http
      namespace: datadog
      baseUri: "https://api.datadoghq.com/api/v2"
      authentication:
        type: bearer
        token: "$secrets.datadog_api_key"
      resources:
        - name: incidents
          path: "/incidents"
          operations:
            - name: get-metrics
              method: GET
    - type: http
      namespace: confluence
      baseUri: "https://fcx.com.atlassian.net/wiki/rest/api"
      authentication:
        type: bearer
        token: "$secrets.confluence_token"
      resources:
        - name: pages
          path: "/content"
          operations:
            - name: create-page
              method: POST
    - type: http
      namespace: calendar
      baseUri: "https://graph.microsoft.com/v1.0"
      authentication:
        type: bearer
        token: "$secrets.microsoft_graph_token"
      resources:
        - name: events
          path: "/users/sre/events"
          operations:
            - name: create-event
              method: POST

Triggers a Power BI dataset refresh for mine operations dashboards.

naftiko: "0.5"
info:
  label: "Power BI Operations Dashboard Refresh"
  description: "Triggers a Power BI dataset refresh for mine operations dashboards."
  tags:
    - analytics
    - power-bi
capability:
  exposes:
    - type: mcp
      namespace: bi-refresh
      port: 8080
      tools:
        - name: refresh-dashboard
          description: "Trigger a Power BI dataset refresh."
          inputParameters:
            - name: group_id
              in: body
              type: string
              description: "Power BI workspace ID."
            - name: dataset_id
              in: body
              type: string
              description: "Dataset ID."
          call: "powerbi.refresh-dataset"
          with:
            group_id: "{{group_id}}"
            dataset_id: "{{dataset_id}}"
  consumes:
    - type: http
      namespace: powerbi
      baseUri: "https://api.powerbi.com/v1.0/myorg"
      authentication:
        type: bearer
        token: "$secrets.powerbi_token"
      resources:
        - name: datasets
          path: "/groups/{{group_id}}/datasets/{{dataset_id}}/refreshes"
          inputParameters:
            - name: group_id
              in: path
            - name: dataset_id
              in: path
          operations:
            - name: refresh-dataset
              method: POST

Checks Power BI refresh at Freeport-McMoRan.

naftiko: "0.5"
info:
  label: "Power BI Refresh Check"
  description: "Checks Power BI refresh at Freeport-McMoRan."
  tags:
    - analytics
    - power-bi
    - dashboards
capability:
  exposes:
    - type: mcp
      namespace: pbi-refresh
      port: 8080
      tools:
        - name: check-refresh
          description: "Check refresh at Freeport-McMoRan."
          inputParameters:
            - name: dataset_id
              in: body
              type: string
              description: "Dataset ID."
          call: "power-bi.get-refresh"
          with:
            dataset_id: "{{dataset_id}}"
          outputParameters:
            - name: status
              type: string
              mapping: "$.value[0].status"
  consumes:
    - type: http
      namespace: power-bi
      baseUri: "https://api.powerbi.com/v1.0/myorg"
      authentication:
        type: bearer
        token: "$secrets.power_bi_token"
      resources:
        - name: datasets
          path: "/datasets/{{dataset_id}}/refreshes"
          inputParameters:
            - name: dataset_id
              in: path
          operations:
            - name: get-refresh
              method: GET

Triggers a Qlik Sense app reload for mine operations dashboards.

naftiko: "0.5"
info:
  label: "Qlik Sense Mine Operations Dashboard"
  description: "Triggers a Qlik Sense app reload for mine operations dashboards."
  tags:
    - analytics
    - qlik-sense
capability:
  exposes:
    - type: mcp
      namespace: qlik-ops
      port: 8080
      tools:
        - name: reload-app
          description: "Trigger a Qlik Sense app reload."
          inputParameters:
            - name: app_id
              in: body
              type: string
              description: "Qlik Sense app ID."
          call: "qlik.reload-app"
          with:
            app_id: "{{app_id}}"
  consumes:
    - type: http
      namespace: qlik
      baseUri: "https://qlik.freeport.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.qlik_token"
      resources:
        - name: reloads
          path: "/reloads"
          operations:
            - name: reload-app
              method: POST

Generates compliance reports at Freeport-McMoRan from Snowflake, Power BI, and email.

naftiko: "0.5"
info:
  label: "Quarterly Compliance Report Pipeline"
  description: "Generates compliance reports at Freeport-McMoRan from Snowflake, Power BI, and email."
  tags:
    - compliance
    - reporting
    - snowflake
    - power-bi
capability:
  exposes:
    - type: mcp
      namespace: compliance-rpt
      port: 8080
      tools:
        - name: gen-report
          description: "Generate compliance reports at Freeport-McMoRan."
          inputParameters:
            - name: quarter
              in: body
              type: string
              description: "Quarter."
            - name: type
              in: body
              type: string
              description: "Type."
          steps:
            - name: data
              type: call
              call: "snowflake.query"
              with:
                query: "SELECT * FROM compliance WHERE q='{{quarter}}'"
            - name: metrics
              type: call
              call: "analytics.compute"
              with:
                data: "{{data.results}}"
            - name: refresh
              type: call
              call: "power-bi.refresh"
              with:
                dataset: "compliance"
            - name: send
              type: call
              call: "email.send"
              with:
                to: "compliance@co.com"
                subject: "{{type}} - {{quarter}}"
  consumes:
    - type: http
      namespace: snowflake
      baseUri: "https://fcx.com.snowflakecomputing.com/api/v2"
      authentication:
        type: bearer
        token: "$secrets.snowflake_token"
      resources:
        - name: statements
          path: "/statements"
          operations:
            - name: query
              method: POST
    - type: http
      namespace: analytics
      baseUri: "https://analytics.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.analytics_token"
      resources:
        - name: metrics
          path: "/compute"
          operations:
            - name: compute
              method: POST
    - type: http
      namespace: power-bi
      baseUri: "https://api.powerbi.com/v1.0/myorg"
      authentication:
        type: bearer
        token: "$secrets.power_bi_token"
      resources:
        - name: datasets
          path: "/datasets/{{dataset}}/refreshes"
          inputParameters:
            - name: dataset
              in: path
          operations:
            - name: refresh
              method: POST
    - type: http
      namespace: email
      baseUri: "https://email.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.email_token"
      resources:
        - name: messages
          path: "/send"
          operations:
            - name: send
              method: POST

Checks Redis at Freeport-McMoRan.

naftiko: "0.5"
info:
  label: "Redis Cache Status"
  description: "Checks Redis at Freeport-McMoRan."
  tags:
    - caching
    - redis
    - infrastructure
capability:
  exposes:
    - type: mcp
      namespace: redis
      port: 8080
      tools:
        - name: check-cache
          description: "Check Redis at Freeport-McMoRan."
          inputParameters:
            - name: instance
              in: body
              type: string
              description: "Instance ID."
          call: "redis.get-info"
          with:
            instance: "{{instance}}"
          outputParameters:
            - name: memory
              type: string
              mapping: "$.used_memory_human"
  consumes:
    - type: http
      namespace: redis
      baseUri: "https://redis.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.redis_token"
      resources:
        - name: instances
          path: "/instances/{{instance}}/info"
          inputParameters:
            - name: instance
              in: path
          operations:
            - name: get-info
              method: GET

Checks release readiness at Freeport-McMoRan.

naftiko: "0.5"
info:
  label: "Release Readiness Pipeline"
  description: "Checks release readiness at Freeport-McMoRan."
  tags:
    - release-management
    - devops
    - quality
capability:
  exposes:
    - type: mcp
      namespace: release-ready
      port: 8080
      tools:
        - name: check-release
          description: "Check release at Freeport-McMoRan."
          inputParameters:
            - name: release_id
              in: body
              type: string
              description: "Release ID."
            - name: project
              in: body
              type: string
              description: "Project."
          steps:
            - name: tests
              type: call
              call: "azdo.get-tests"
              with:
                project: "{{project}}"
                release: "{{release_id}}"
            - name: quality
              type: call
              call: "sonarqube.get-gate"
              with:
                project: "{{project}}"
            - name: security
              type: call
              call: "security.get-scan"
              with:
                project: "{{project}}"
            - name: doc
              type: call
              call: "confluence.create-page"
              with:
                title: "Release - {{release_id}}"
                body: "Tests: {{tests.pass_rate}}% Quality: {{quality.status}}"
  consumes:
    - type: http
      namespace: azdo
      baseUri: "https://dev.azure.com/fcx.com"
      authentication:
        type: bearer
        token: "$secrets.azdo_token"
      resources:
        - name: tests
          path: "/{{project}}/_apis/test/runs"
          inputParameters:
            - name: project
              in: path
          operations:
            - name: get-tests
              method: GET
    - type: http
      namespace: sonarqube
      baseUri: "https://sonarqube.fcx.com/api"
      authentication:
        type: bearer
        token: "$secrets.sonarqube_token"
      resources:
        - name: quality
          path: "/qualitygates/project_status"
          operations:
            - name: get-gate
              method: GET
    - type: http
      namespace: security
      baseUri: "https://security.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.security_token"
      resources:
        - name: scans
          path: "/results"
          operations:
            - name: get-scan
              method: GET
    - type: http
      namespace: confluence
      baseUri: "https://fcx.com.atlassian.net/wiki/rest/api"
      authentication:
        type: bearer
        token: "$secrets.confluence_token"
      resources:
        - name: pages
          path: "/content"
          operations:
            - name: create-page
              method: POST

Retrieves a Salesforce customer account for concentrate buyer management.

naftiko: "0.5"
info:
  label: "Salesforce Customer Account Lookup"
  description: "Retrieves a Salesforce customer account for concentrate buyer management."
  tags:
    - sales
    - salesforce
capability:
  exposes:
    - type: mcp
      namespace: customer-mgmt
      port: 8080
      tools:
        - name: get-customer-account
          description: "Fetch a Salesforce customer account by ID."
          inputParameters:
            - name: account_id
              in: body
              type: string
              description: "Salesforce account ID."
          call: "salesforce.get-account"
          with:
            account_id: "{{account_id}}"
  consumes:
    - type: http
      namespace: salesforce
      baseUri: "https://freeport.my.salesforce.com/services/data/v58.0"
      authentication:
        type: bearer
        token: "$secrets.salesforce_token"
      resources:
        - name: accounts
          path: "/sobjects/Account/{{account_id}}"
          inputParameters:
            - name: account_id
              in: path
          operations:
            - name: get-account
              method: GET

Initiates the SAP monthly financial close for a mine site and generates the close report in Crystal Reports.

naftiko: "0.5"
info:
  label: "SAP Financial Close"
  description: "Initiates the SAP monthly financial close for a mine site and generates the close report in Crystal Reports."
  tags:
    - finance
    - sap
    - crystal-reports
    - sharepoint
capability:
  exposes:
    - type: mcp
      namespace: financial-close
      port: 8080
      tools:
        - name: run-financial-close
          description: "Execute monthly close and generate finance report."
          inputParameters:
            - name: period
              in: body
              type: string
              description: "Fiscal period (e.g., 2026-03)."
            - name: mine_site
              in: body
              type: string
              description: "Mine site company code."
          steps:
            - name: close-period
              type: call
              call: "sap.close-period"
              with:
                period: "{{period}}"
                company_code: "{{mine_site}}"
            - name: generate-report
              type: call
              call: "crystal.generate-report"
              with:
                template_id: "monthly_close"
                parameters: '{"period":"{{period}}","site":"{{mine_site}}","balance":"{{close-period.balance}}"}'
            - name: upload-report
              type: call
              call: "sharepoint.upload-file"
              with:
                site_id: "finance_site"
                folder_path: "MonthlyClose/{{mine_site}}/{{period}}"
                file_name: "close_report.pdf"
                content: "{{generate-report.output_url}}"
  consumes:
    - type: http
      namespace: sap
      baseUri: "https://freeport-sap.s4hana.cloud/api/v1"
      authentication:
        type: basic
        username: "$secrets.sap_user"
        password: "$secrets.sap_password"
      resources:
        - name: periods
          path: "/financial-close"
          operations:
            - name: close-period
              method: POST
    - type: http
      namespace: crystal
      baseUri: "https://reports.freeport.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.crystal_reports_token"
      resources:
        - name: reports
          path: "/reports/generate"
          operations:
            - name: generate-report
              method: POST
    - type: http
      namespace: sharepoint
      baseUri: "https://graph.microsoft.com/v1.0/sites"
      authentication:
        type: bearer
        token: "$secrets.msgraph_token"
      resources:
        - name: files
          path: "/{{site_id}}/drive/root:/{{folder_path}}/{{file_name}}:/content"
          inputParameters:
            - name: site_id
              in: path
            - name: folder_path
              in: path
            - name: file_name
              in: path
          operations:
            - name: upload-file
              method: PUT

Checks SAP PO at Freeport-McMoRan.

naftiko: "0.5"
info:
  label: "SAP PO Check"
  description: "Checks SAP PO at Freeport-McMoRan."
  tags:
    - procurement
    - sap
    - purchase-orders
capability:
  exposes:
    - type: mcp
      namespace: sap-po
      port: 8080
      tools:
        - name: get-po
          description: "Check PO at Freeport-McMoRan."
          inputParameters:
            - name: po_number
              in: body
              type: string
              description: "PO number."
          call: "sap.get-po"
          with:
            po_number: "{{po_number}}"
          outputParameters:
            - name: vendor
              type: string
              mapping: "$.order.vendor"
            - name: status
              type: string
              mapping: "$.order.status"
  consumes:
    - type: http
      namespace: sap
      baseUri: "https://sap.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.sap_token"
      resources:
        - name: purchase-orders
          path: "/purchase-orders/{{po_number}}"
          inputParameters:
            - name: po_number
              in: path
          operations:
            - name: get-po
              method: GET

Looks up a SAP purchase order by number and returns header status, vendor, total value, and delivery date.

naftiko: "0.5"
info:
  label: "SAP Purchase Order Status"
  description: "Looks up a SAP purchase order by number and returns header status, vendor, total value, and delivery date."
  tags:
    - supply-chain
    - procurement
    - sap
capability:
  exposes:
    - type: mcp
      namespace: procurement
      port: 8080
      tools:
        - name: get-purchase-order
          description: "Look up a SAP purchase order by PO number."
          inputParameters:
            - name: po_number
              in: body
              type: string
              description: "The SAP purchase order number."
          call: "sap.get-po"
          with:
            po_number: "{{po_number}}"
  consumes:
    - type: http
      namespace: sap
      baseUri: "https://freeport-sap.s4hana.cloud/sap/opu/odata/sap/MM_PUR_PO_MAINT_V2_SRV"
      authentication:
        type: basic
        username: "$secrets.sap_user"
        password: "$secrets.sap_password"
      resources:
        - name: purchase-orders
          path: "/A_PurchaseOrder('{{po_number}}')"
          inputParameters:
            - name: po_number
              in: path
          operations:
            - name: get-po
              method: GET

Remediates vulnerabilities at Freeport-McMoRan via scanning, Jira, and Slack.

naftiko: "0.5"
info:
  label: "Security Vulnerability Remediation Pipeline"
  description: "Remediates vulnerabilities at Freeport-McMoRan via scanning, Jira, and Slack."
  tags:
    - security
    - vulnerability-management
    - jira
capability:
  exposes:
    - type: mcp
      namespace: vuln-fix
      port: 8080
      tools:
        - name: remediate
          description: "Fix vulnerabilities at Freeport-McMoRan."
          inputParameters:
            - name: target
              in: body
              type: string
              description: "Target."
            - name: policy
              in: body
              type: string
              description: "Policy."
          steps:
            - name: scan
              type: call
              call: "qualys.scan"
              with:
                target: "{{target}}"
                policy: "{{policy}}"
            - name: prioritize
              type: call
              call: "security.prioritize"
              with:
                scan: "{{scan.id}}"
            - name: ticket
              type: call
              call: "jira.create-issue"
              with:
                project: "SEC"
                summary: "Vulns: {{prioritize.critical}} critical"
            - name: notify
              type: call
              call: "slack.post-message"
              with:
                channel: "#security"
                text: "Scan: {{prioritize.critical}} critical"
  consumes:
    - type: http
      namespace: qualys
      baseUri: "https://qualysapi.qualys.com/api/v2"
      authentication:
        type: bearer
        token: "$secrets.qualys_token"
      resources:
        - name: scans
          path: "/fo/scan"
          operations:
            - name: scan
              method: POST
    - type: http
      namespace: security
      baseUri: "https://security.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.security_token"
      resources:
        - name: vulns
          path: "/prioritize"
          operations:
            - name: prioritize
              method: POST
    - type: http
      namespace: jira
      baseUri: "https://fcx.com.atlassian.net/rest/api/3"
      authentication:
        type: bearer
        token: "$secrets.jira_token"
      resources:
        - name: issues
          path: "/issue"
          operations:
            - name: create-issue
              method: POST
    - type: http
      namespace: slack
      baseUri: "https://slack.com/api"
      authentication:
        type: bearer
        token: "$secrets.slack_token"
      resources:
        - name: messages
          path: "/chat.postMessage"
          operations:
            - name: post-message
              method: POST

Checks IT incident in ServiceNow for Freeport-McMoRan.

naftiko: "0.5"
info:
  label: "ServiceNow Incident Detail Check"
  description: "Checks IT incident in ServiceNow for Freeport-McMoRan."
  tags:
    - it-service
    - servicenow
    - incident-management
capability:
  exposes:
    - type: mcp
      namespace: snow-incident
      port: 8080
      tools:
        - name: check-incident
          description: "Check incident at Freeport-McMoRan."
          inputParameters:
            - name: incident_number
              in: body
              type: string
              description: "Incident number."
          call: "servicenow.get-incident"
          with:
            number: "{{incident_number}}"
          outputParameters:
            - name: state
              type: string
              mapping: "$.result.state"
            - name: priority
              type: string
              mapping: "$.result.priority"
  consumes:
    - type: http
      namespace: servicenow
      baseUri: "https://fcx.com.service-now.com/api/now"
      authentication:
        type: bearer
        token: "$secrets.servicenow_token"
      resources:
        - name: incidents
          path: "/table/incident"
          operations:
            - name: get-incident
              method: GET

Retrieves the current status of a ServiceNow incident by number.

naftiko: "0.5"
info:
  label: "ServiceNow Incident Status"
  description: "Retrieves the current status of a ServiceNow incident by number."
  tags:
    - operations
    - servicenow
capability:
  exposes:
    - type: mcp
      namespace: incident-mgmt
      port: 8080
      tools:
        - name: get-incident-status
          description: "Fetch a ServiceNow incident by number."
          inputParameters:
            - name: incident_number
              in: body
              type: string
              description: "The ServiceNow incident number."
          call: "servicenow.get-incident"
          with:
            number: "{{incident_number}}"
  consumes:
    - type: http
      namespace: servicenow
      baseUri: "https://freeport.service-now.com/api/now"
      authentication:
        type: basic
        username: "$secrets.servicenow_user"
        password: "$secrets.servicenow_password"
      resources:
        - name: incidents
          path: "/table/incident"
          operations:
            - name: get-incident
              method: GET

Fetches a document from SharePoint by site and file path.

naftiko: "0.5"
info:
  label: "SharePoint Document Retrieval"
  description: "Fetches a document from SharePoint by site and file path."
  tags:
    - content
    - sharepoint
capability:
  exposes:
    - type: mcp
      namespace: document-mgmt
      port: 8080
      tools:
        - name: get-document
          description: "Retrieve a SharePoint document by site and file path."
          inputParameters:
            - name: site_id
              in: body
              type: string
              description: "SharePoint site identifier."
            - name: file_path
              in: body
              type: string
              description: "Path to the document."
          call: "sharepoint.get-file"
          with:
            site_id: "{{site_id}}"
            file_path: "{{file_path}}"
  consumes:
    - type: http
      namespace: sharepoint
      baseUri: "https://graph.microsoft.com/v1.0/sites"
      authentication:
        type: bearer
        token: "$secrets.msgraph_token"
      resources:
        - name: files
          path: "/{{site_id}}/drive/root:/{{file_path}}"
          inputParameters:
            - name: site_id
              in: path
            - name: file_path
              in: path
          operations:
            - name: get-file
              method: GET

Retrieves SharePoint metadata at Freeport-McMoRan.

naftiko: "0.5"
info:
  label: "SharePoint File Metadata"
  description: "Retrieves SharePoint metadata at Freeport-McMoRan."
  tags:
    - document-management
    - sharepoint
    - collaboration
capability:
  exposes:
    - type: mcp
      namespace: sp-docs
      port: 8080
      tools:
        - name: get-file
          description: "Look up file at Freeport-McMoRan."
          inputParameters:
            - name: site_id
              in: body
              type: string
              description: "Site ID."
            - name: file_path
              in: body
              type: string
              description: "Path."
          call: "sharepoint.get-file"
          with:
            site_id: "{{site_id}}"
            path: "{{file_path}}"
          outputParameters:
            - name: name
              type: string
              mapping: "$.name"
            - name: size
              type: number
              mapping: "$.size"
  consumes:
    - type: http
      namespace: sharepoint
      baseUri: "https://graph.microsoft.com/v1.0"
      authentication:
        type: bearer
        token: "$secrets.microsoft_graph_token"
      resources:
        - name: files
          path: "/sites/{{site_id}}/drive/root:/{{path}}"
          inputParameters:
            - name: site_id
              in: path
            - name: path
              in: path
          operations:
            - name: get-file
              method: GET

Monitors SLAs at Freeport-McMoRan via Datadog and Slack.

naftiko: "0.5"
info:
  label: "SLA Monitoring Pipeline"
  description: "Monitors SLAs at Freeport-McMoRan via Datadog and Slack."
  tags:
    - operations
    - sla
    - datadog
    - slack
capability:
  exposes:
    - type: mcp
      namespace: sla-monitor
      port: 8080
      tools:
        - name: check-sla
          description: "Monitor SLAs at Freeport-McMoRan."
          inputParameters:
            - name: service
              in: body
              type: string
              description: "Service."
            - name: target
              in: body
              type: number
              description: "SLA target %."
          steps:
            - name: metrics
              type: call
              call: "datadog.get-sla"
              with:
                service: "{{service}}"
            - name: check
              type: call
              call: "analytics.check-sla"
              with:
                uptime: "{{metrics.uptime}}"
                target: "{{target}}"
            - name: alert
              type: call
              call: "slack.post-message"
              with:
                channel: "#ops"
                text: "SLA: {{service}} at {{metrics.uptime}}% (target: {{target}}%)"
            - name: log
              type: call
              call: "servicenow.create-incident"
              with:
                desc: "SLA breach: {{service}}"
  consumes:
    - type: http
      namespace: datadog
      baseUri: "https://api.datadoghq.com/api/v2"
      authentication:
        type: bearer
        token: "$secrets.datadog_api_key"
      resources:
        - name: metrics
          path: "/metrics"
          operations:
            - name: get-sla
              method: GET
    - type: http
      namespace: slack
      baseUri: "https://slack.com/api"
      authentication:
        type: bearer
        token: "$secrets.slack_token"
      resources:
        - name: messages
          path: "/chat.postMessage"
          operations:
            - name: post-message
              method: POST
    - type: http
      namespace: servicenow
      baseUri: "https://fcx.com.service-now.com/api/now"
      authentication:
        type: bearer
        token: "$secrets.servicenow_token"
      resources:
        - name: incidents
          path: "/table/incident"
          operations:
            - name: create-incident
              method: POST

Retrieves SolarWinds alerts for mine site IT infrastructure.

naftiko: "0.5"
info:
  label: "SolarWinds Mine Site Monitoring"
  description: "Retrieves SolarWinds alerts for mine site IT infrastructure."
  tags:
    - monitoring
    - solarwinds
capability:
  exposes:
    - type: mcp
      namespace: site-monitoring
      port: 8080
      tools:
        - name: get-site-alerts
          description: "Fetch SolarWinds alerts for a mine site."
          inputParameters:
            - name: site_name
              in: body
              type: string
              description: "Mine site name."
          call: "solarwinds.get-alerts"
          with:
            site: "{{site_name}}"
  consumes:
    - type: http
      namespace: solarwinds
      baseUri: "https://solarwinds.freeport.com:17778/SolarWinds/InformationService/v3/Json"
      authentication:
        type: basic
        username: "$secrets.solarwinds_user"
        password: "$secrets.solarwinds_password"
      resources:
        - name: alerts
          path: "/Query"
          operations:
            - name: get-alerts
              method: POST

Exports a Sparx EA mine systems architecture model and uploads to SharePoint.

naftiko: "0.5"
info:
  label: "Sparx Enterprise Architect Model Export"
  description: "Exports a Sparx EA mine systems architecture model and uploads to SharePoint."
  tags:
    - engineering
    - sparx-enterprise-architect
    - sharepoint
capability:
  exposes:
    - type: mcp
      namespace: architecture-models
      port: 8080
      tools:
        - name: export-model
          description: "Export a Sparx EA model and store in SharePoint."
          inputParameters:
            - name: package_id
              in: body
              type: string
              description: "Sparx EA package GUID."
            - name: mine_site
              in: body
              type: string
              description: "Mine site identifier."
          steps:
            - name: export-package
              type: call
              call: "sparxea.export-package"
              with:
                package_id: "{{package_id}}"
            - name: upload-export
              type: call
              call: "sharepoint.upload-file"
              with:
                site_id: "engineering_site"
                folder_path: "Architecture/{{mine_site}}"
                file_name: "{{export-package.file_name}}"
                content: "{{export-package.xmi_url}}"
  consumes:
    - type: http
      namespace: sparxea
      baseUri: "https://sparxea.freeport.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.sparxea_token"
      resources:
        - name: packages
          path: "/packages/{{package_id}}/export"
          inputParameters:
            - name: package_id
              in: path
          operations:
            - name: export-package
              method: POST
    - type: http
      namespace: sharepoint
      baseUri: "https://graph.microsoft.com/v1.0/sites"
      authentication:
        type: bearer
        token: "$secrets.msgraph_token"
      resources:
        - name: files
          path: "/{{site_id}}/drive/root:/{{folder_path}}/{{file_name}}:/content"
          inputParameters:
            - name: site_id
              in: path
            - name: folder_path
              in: path
            - name: file_name
              in: path
          operations:
            - name: upload-file
              method: PUT

Searches Splunk at Freeport-McMoRan.

naftiko: "0.5"
info:
  label: "Splunk Log Search"
  description: "Searches Splunk at Freeport-McMoRan."
  tags:
    - security
    - splunk
    - logging
capability:
  exposes:
    - type: mcp
      namespace: splunk-search
      port: 8080
      tools:
        - name: search-logs
          description: "Search logs at Freeport-McMoRan."
          inputParameters:
            - name: query
              in: body
              type: string
              description: "SPL query."
          call: "splunk.search"
          with:
            query: "{{query}}"
          outputParameters:
            - name: count
              type: number
              mapping: "$.results.count"
  consumes:
    - type: http
      namespace: splunk
      baseUri: "https://splunk.fcx.com:8089/services"
      authentication:
        type: bearer
        token: "$secrets.splunk_token"
      resources:
        - name: search
          path: "/search/jobs"
          operations:
            - name: search
              method: POST

Creates a material requisition in SAP for mine site supplies, validates vendor availability, and notifies the supply chain team in Microsoft Teams.

naftiko: "0.5"
info:
  label: "Supply Chain Material Requisition"
  description: "Creates a material requisition in SAP for mine site supplies, validates vendor availability, and notifies the supply chain team in Microsoft Teams."
  tags:
    - supply-chain
    - sap
    - microsoft-teams
capability:
  exposes:
    - type: mcp
      namespace: material-requisitions
      port: 8080
      tools:
        - name: create-requisition
          description: "Create a material requisition and notify the supply chain team."
          inputParameters:
            - name: material_id
              in: body
              type: string
              description: "SAP material number."
            - name: quantity
              in: body
              type: number
              description: "Requested quantity."
            - name: mine_site
              in: body
              type: string
              description: "Delivery mine site."
            - name: urgency
              in: body
              type: string
              description: "Urgency (standard, urgent, emergency)."
          steps:
            - name: check-stock
              type: call
              call: "sap.check-inventory"
              with:
                material_id: "{{material_id}}"
                plant: "{{mine_site}}"
            - name: create-req
              type: call
              call: "sap.create-requisition"
              with:
                material_id: "{{material_id}}"
                quantity: "{{quantity}}"
                plant: "{{mine_site}}"
                urgency: "{{urgency}}"
            - name: notify-supply-chain
              type: call
              call: "msteams.send-message"
              with:
                channel_id: "supply_chain"
                text: "Material requisition: {{material_id}} x{{quantity}} for {{mine_site}} ({{urgency}}). Current stock: {{check-stock.on_hand}}. Req: {{create-req.number}}"
  consumes:
    - type: http
      namespace: sap
      baseUri: "https://freeport-sap.s4hana.cloud/api/v1"
      authentication:
        type: basic
        username: "$secrets.sap_user"
        password: "$secrets.sap_password"
      resources:
        - name: inventory
          path: "/materials/{{material_id}}/stock"
          inputParameters:
            - name: material_id
              in: path
          operations:
            - name: check-inventory
              method: GET
        - name: requisitions
          path: "/requisitions"
          operations:
            - name: create-requisition
              method: POST
    - type: http
      namespace: msteams
      baseUri: "https://graph.microsoft.com/v1.0"
      authentication:
        type: bearer
        token: "$secrets.msgraph_token"
      resources:
        - name: channels
          path: "/teams/{{channel_id}}/channels/general/messages"
          inputParameters:
            - name: channel_id
              in: path
          operations:
            - name: send-message
              method: POST

Collects tailings dam sensor data from Azure Databricks, runs stability analysis in MATLAB, and creates ServiceNow alerts if thresholds are exceeded, notifying the safety team in Microsoft Teams.

naftiko: "0.5"
info:
  label: "Tailings Dam Monitoring Pipeline"
  description: "Collects tailings dam sensor data from Azure Databricks, runs stability analysis in MATLAB, and creates ServiceNow alerts if thresholds are exceeded, notifying the safety team in Microsoft Teams."
  tags:
    - safety
    - mining-ops
    - azure-databricks
    - matlab
    - servicenow
    - microsoft-teams
capability:
  exposes:
    - type: mcp
      namespace: tailings-monitoring
      port: 8080
      tools:
        - name: monitor-tailings-dam
          description: "Collect sensor data, run stability analysis, and alert on threshold breaches."
          inputParameters:
            - name: dam_id
              in: body
              type: string
              description: "The tailings dam identifier."
            - name: reading_date
              in: body
              type: string
              description: "Sensor reading date YYYY-MM-DD."
          steps:
            - name: get-sensor-data
              type: call
              call: "databricks.submit-job"
              with:
                job_name: "tailings_sensor_agg"
                parameters: '{"dam":"{{dam_id}}","date":"{{reading_date}}"}'
            - name: run-stability
              type: call
              call: "matlab.execute-script"
              with:
                script: "tailings_stability_analysis"
                parameters: '{"dam":"{{dam_id}}","piezometer":"{{get-sensor-data.piezometer_readings}}","inclinometer":"{{get-sensor-data.inclinometer_readings}}"}'
            - name: create-alert
              type: call
              call: "servicenow.create-incident"
              with:
                short_description: "Tailings monitoring: {{dam_id}} ({{reading_date}})"
                description: "Stability factor: {{run-stability.factor_of_safety}}. Pore pressure: {{get-sensor-data.max_pore_pressure}}. Status: {{run-stability.status}}"
                severity: "{{run-stability.alert_level}}"
                assigned_group: "Tailings_Safety"
            - name: notify-safety
              type: call
              call: "msteams.send-message"
              with:
                channel_id: "tailings_safety"
                text: "Tailings Dam {{dam_id}} ({{reading_date}}): FoS {{run-stability.factor_of_safety}}. Status: {{run-stability.status}}. Alert: {{create-alert.number}}"
  consumes:
    - type: http
      namespace: databricks
      baseUri: "https://eastus.azuredatabricks.net/api/2.1"
      authentication:
        type: bearer
        token: "$secrets.databricks_token"
      resources:
        - name: jobs
          path: "/jobs/run-now"
          operations:
            - name: submit-job
              method: POST
    - type: http
      namespace: matlab
      baseUri: "https://matlab.freeport.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.matlab_token"
      resources:
        - name: scripts
          path: "/execute"
          operations:
            - name: execute-script
              method: POST
    - type: http
      namespace: servicenow
      baseUri: "https://freeport.service-now.com/api/now"
      authentication:
        type: basic
        username: "$secrets.servicenow_user"
        password: "$secrets.servicenow_password"
      resources:
        - name: incidents
          path: "/table/incident"
          operations:
            - name: create-incident
              method: POST
    - type: http
      namespace: msteams
      baseUri: "https://graph.microsoft.com/v1.0"
      authentication:
        type: bearer
        token: "$secrets.msgraph_token"
      resources:
        - name: channels
          path: "/teams/{{channel_id}}/channels/general/messages"
          inputParameters:
            - name: channel_id
              in: path
          operations:
            - name: send-message
              method: POST

Retrieves Teams activity at Freeport-McMoRan.

naftiko: "0.5"
info:
  label: "Teams Channel Activity"
  description: "Retrieves Teams activity at Freeport-McMoRan."
  tags:
    - communications
    - microsoft-teams
    - analytics
capability:
  exposes:
    - type: mcp
      namespace: teams-activity
      port: 8080
      tools:
        - name: get-activity
          description: "Check Teams activity at Freeport-McMoRan."
          inputParameters:
            - name: team_id
              in: body
              type: string
              description: "Team ID."
            - name: channel_id
              in: body
              type: string
              description: "Channel ID."
          call: "teams.get-messages"
          with:
            team_id: "{{team_id}}"
            channel_id: "{{channel_id}}"
          outputParameters:
            - name: count
              type: number
              mapping: "$.value.length"
  consumes:
    - type: http
      namespace: teams
      baseUri: "https://graph.microsoft.com/v1.0"
      authentication:
        type: bearer
        token: "$secrets.microsoft_graph_token"
      resources:
        - name: messages
          path: "/teams/{{team_id}}/channels/{{channel_id}}/messages"
          inputParameters:
            - name: team_id
              in: path
            - name: channel_id
              in: path
          operations:
            - name: get-messages
              method: GET

Triggers a Terraform plan for mine site IT infrastructure and posts the plan to Microsoft Teams for approval.

naftiko: "0.5"
info:
  label: "Terraform Infrastructure Deployment"
  description: "Triggers a Terraform plan for mine site IT infrastructure and posts the plan to Microsoft Teams for approval."
  tags:
    - infrastructure
    - terraform
    - microsoft-teams
capability:
  exposes:
    - type: mcp
      namespace: infra-automation
      port: 8080
      tools:
        - name: run-terraform-plan
          description: "Trigger a Terraform plan and post summary to Teams."
          inputParameters:
            - name: workspace_id
              in: body
              type: string
              description: "Terraform Cloud workspace ID."
            - name: team_channel
              in: body
              type: string
              description: "Teams channel for plan review."
          steps:
            - name: create-run
              type: call
              call: "terraform.create-run"
              with:
                workspace_id: "{{workspace_id}}"
                plan_only: true
            - name: notify-team
              type: call
              call: "msteams.send-message"
              with:
                channel_id: "{{team_channel}}"
                text: "Terraform plan: {{create-run.resource_additions}} additions, {{create-run.resource_changes}} changes. Run: {{create-run.id}}"
  consumes:
    - type: http
      namespace: terraform
      baseUri: "https://app.terraform.io/api/v2"
      authentication:
        type: bearer
        token: "$secrets.terraform_token"
      resources:
        - name: runs
          path: "/runs"
          operations:
            - name: create-run
              method: POST
    - type: http
      namespace: msteams
      baseUri: "https://graph.microsoft.com/v1.0"
      authentication:
        type: bearer
        token: "$secrets.msgraph_token"
      resources:
        - name: channels
          path: "/teams/{{channel_id}}/channels/general/messages"
          inputParameters:
            - name: channel_id
              in: path
          operations:
            - name: send-message
              method: POST

Checks Terraform workspace at Freeport-McMoRan.

naftiko: "0.5"
info:
  label: "Terraform Workspace Check"
  description: "Checks Terraform workspace at Freeport-McMoRan."
  tags:
    - infrastructure
    - terraform
    - iac
capability:
  exposes:
    - type: mcp
      namespace: tf-ws
      port: 8080
      tools:
        - name: check-ws
          description: "Check workspace at Freeport-McMoRan."
          inputParameters:
            - name: workspace_id
              in: body
              type: string
              description: "Workspace ID."
          call: "terraform.get-ws"
          with:
            workspace_id: "{{workspace_id}}"
          outputParameters:
            - name: name
              type: string
              mapping: "$.data.attributes.name"
  consumes:
    - type: http
      namespace: terraform
      baseUri: "https://app.terraform.io/api/v2"
      authentication:
        type: bearer
        token: "$secrets.terraform_token"
      resources:
        - name: workspaces
          path: "/workspaces/{{workspace_id}}"
          inputParameters:
            - name: workspace_id
              in: path
          operations:
            - name: get-ws
              method: GET

Checks Vault secret at Freeport-McMoRan.

naftiko: "0.5"
info:
  label: "Vault Secret Metadata"
  description: "Checks Vault secret at Freeport-McMoRan."
  tags:
    - security
    - vault
    - secrets-management
capability:
  exposes:
    - type: mcp
      namespace: vault
      port: 8080
      tools:
        - name: check-secret
          description: "Check secret at Freeport-McMoRan."
          inputParameters:
            - name: path
              in: body
              type: string
              description: "Secret path."
          call: "vault.get-metadata"
          with:
            path: "{{path}}"
          outputParameters:
            - name: version
              type: number
              mapping: "$.data.current_version"
  consumes:
    - type: http
      namespace: vault
      baseUri: "https://vault.fcx.com/v1"
      authentication:
        type: bearer
        token: "$secrets.vault_token"
      resources:
        - name: secrets
          path: "/secret/metadata/{{path}}"
          inputParameters:
            - name: path
              in: path
          operations:
            - name: get-metadata
              method: GET

Processes invoices at Freeport-McMoRan via OCR, SAP matching, approval, and Oracle recording.

naftiko: "0.5"
info:
  label: "Vendor Invoice Processing Pipeline"
  description: "Processes invoices at Freeport-McMoRan via OCR, SAP matching, approval, and Oracle recording."
  tags:
    - finance
    - accounts-payable
    - sap
    - oracle
capability:
  exposes:
    - type: mcp
      namespace: invoice-proc
      port: 8080
      tools:
        - name: process-invoice
          description: "Process invoices at Freeport-McMoRan."
          inputParameters:
            - name: invoice_id
              in: body
              type: string
              description: "Invoice ID."
            - name: vendor_id
              in: body
              type: string
              description: "Vendor ID."
          steps:
            - name: extract
              type: call
              call: "ocr.extract"
              with:
                doc: "{{invoice_id}}"
            - name: match
              type: call
              call: "sap.match-po"
              with:
                vendor: "{{vendor_id}}"
                amount: "{{extract.total}}"
            - name: approve
              type: call
              call: "workflow.submit"
              with:
                invoice: "{{invoice_id}}"
            - name: record
              type: call
              call: "oracle.create-payment"
              with:
                invoice: "{{invoice_id}}"
  consumes:
    - type: http
      namespace: ocr
      baseUri: "https://ocr.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.ocr_token"
      resources:
        - name: invoices
          path: "/extract"
          operations:
            - name: extract
              method: POST
    - type: http
      namespace: sap
      baseUri: "https://sap.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.sap_token"
      resources:
        - name: pos
          path: "/match"
          operations:
            - name: match-po
              method: POST
    - type: http
      namespace: workflow
      baseUri: "https://workflow.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.workflow_token"
      resources:
        - name: approvals
          path: "/submit"
          operations:
            - name: submit
              method: POST
    - type: http
      namespace: oracle
      baseUri: "https://oracle.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.oracle_token"
      resources:
        - name: payments
          path: "/payments"
          operations:
            - name: create-payment
              method: POST

Reviews vendors at Freeport-McMoRan.

naftiko: "0.5"
info:
  label: "Quarterly Vendor Review Pipeline"
  description: "Reviews vendors at Freeport-McMoRan."
  tags:
    - procurement
    - vendor-management
    - review
capability:
  exposes:
    - type: mcp
      namespace: vendor-review
      port: 8080
      tools:
        - name: review-vendor
          description: "Review vendors at Freeport-McMoRan."
          inputParameters:
            - name: vendor_id
              in: body
              type: string
              description: "Vendor ID."
            - name: quarter
              in: body
              type: string
              description: "Quarter."
          steps:
            - name: perf
              type: call
              call: "procurement.get-metrics"
              with:
                vendor: "{{vendor_id}}"
                q: "{{quarter}}"
            - name: scorecard
              type: call
              call: "analytics.scorecard"
              with:
                data: "{{perf.data}}"
            - name: invite
              type: call
              call: "email.send"
              with:
                to: "{{perf.contact}}"
                subject: "QBR - {{quarter}}"
            - name: schedule
              type: call
              call: "calendar.create-event"
              with:
                title: "QBR - {{perf.name}}"
  consumes:
    - type: http
      namespace: procurement
      baseUri: "https://procurement.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.procurement_token"
      resources:
        - name: vendors
          path: "/vendors/{{vendor}}/metrics"
          inputParameters:
            - name: vendor
              in: path
          operations:
            - name: get-metrics
              method: GET
    - type: http
      namespace: analytics
      baseUri: "https://analytics.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.analytics_token"
      resources:
        - name: scorecards
          path: "/compute"
          operations:
            - name: scorecard
              method: POST
    - type: http
      namespace: email
      baseUri: "https://email.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.email_token"
      resources:
        - name: messages
          path: "/send"
          operations:
            - name: send
              method: POST
    - type: http
      namespace: calendar
      baseUri: "https://graph.microsoft.com/v1.0"
      authentication:
        type: bearer
        token: "$secrets.microsoft_graph_token"
      resources:
        - name: events
          path: "/users/proc/events"
          operations:
            - name: create-event
              method: POST

Checks the latest Veritas InfoScale backup status for mine data storage.

naftiko: "0.5"
info:
  label: "Veritas InfoScale Backup Status"
  description: "Checks the latest Veritas InfoScale backup status for mine data storage."
  tags:
    - infrastructure
    - backup
    - veritas-infoscale
capability:
  exposes:
    - type: mcp
      namespace: backup-status
      port: 8080
      tools:
        - name: get-backup-status
          description: "Fetch backup status for a volume group."
          inputParameters:
            - name: volume_group
              in: body
              type: string
              description: "Volume group name."
          call: "veritas.get-backup-status"
          with:
            volume_group: "{{volume_group}}"
  consumes:
    - type: http
      namespace: veritas
      baseUri: "https://veritas.freeport.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.veritas_token"
      resources:
        - name: backups
          path: "/volume-groups/{{volume_group}}/backups/latest"
          inputParameters:
            - name: volume_group
              in: path
          operations:
            - name: get-backup-status
              method: GET

Collects water usage and discharge data from Azure Databricks, validates against permit limits in SAP, and flags violations in ServiceNow.

naftiko: "0.5"
info:
  label: "Water Management Monitoring"
  description: "Collects water usage and discharge data from Azure Databricks, validates against permit limits in SAP, and flags violations in ServiceNow."
  tags:
    - safety
    - compliance
    - azure-databricks
    - sap
    - servicenow
capability:
  exposes:
    - type: mcp
      namespace: water-management
      port: 8080
      tools:
        - name: monitor-water-usage
          description: "Check water usage and discharge against permits and flag violations."
          inputParameters:
            - name: mine_site
              in: body
              type: string
              description: "Mine site identifier."
            - name: date
              in: body
              type: string
              description: "Monitoring date YYYY-MM-DD."
          steps:
            - name: get-water-data
              type: call
              call: "databricks.submit-job"
              with:
                job_name: "water_usage_monitoring"
                parameters: '{"site":"{{mine_site}}","date":"{{date}}"}'
            - name: get-permit-limits
              type: call
              call: "sap.get-water-permits"
              with:
                site: "{{mine_site}}"
            - name: flag-violations
              type: call
              call: "servicenow.create-task"
              with:
                short_description: "Water compliance: {{mine_site}} ({{date}})"
                description: "Usage: {{get-water-data.total_usage}} gal. Discharge: {{get-water-data.discharge_volume}} gal. pH: {{get-water-data.ph_level}}. Permit limits: {{get-permit-limits.max_discharge}} gal."
                assigned_group: "Environmental_Compliance"
  consumes:
    - type: http
      namespace: databricks
      baseUri: "https://eastus.azuredatabricks.net/api/2.1"
      authentication:
        type: bearer
        token: "$secrets.databricks_token"
      resources:
        - name: jobs
          path: "/jobs/run-now"
          operations:
            - name: submit-job
              method: POST
    - type: http
      namespace: sap
      baseUri: "https://freeport-sap.s4hana.cloud/api/v1"
      authentication:
        type: basic
        username: "$secrets.sap_user"
        password: "$secrets.sap_password"
      resources:
        - name: permits
          path: "/compliance/water-permits/{{site}}"
          inputParameters:
            - name: site
              in: path
          operations:
            - name: get-water-permits
              method: GET
    - type: http
      namespace: servicenow
      baseUri: "https://freeport.service-now.com/api/now"
      authentication:
        type: basic
        username: "$secrets.servicenow_user"
        password: "$secrets.servicenow_password"
      resources:
        - name: tasks
          path: "/table/task"
          operations:
            - name: create-task
              method: POST

Retrieves employee profile data from Workday by worker ID including role, site assignment, and certifications.

naftiko: "0.5"
info:
  label: "Workday Employee Lookup"
  description: "Retrieves employee profile data from Workday by worker ID including role, site assignment, and certifications."
  tags:
    - hr
    - workday
capability:
  exposes:
    - type: mcp
      namespace: hr-directory
      port: 8080
      tools:
        - name: get-employee
          description: "Look up a Workday employee by worker ID."
          inputParameters:
            - name: worker_id
              in: body
              type: string
              description: "The Workday worker ID."
          call: "workday.get-worker"
          with:
            worker_id: "{{worker_id}}"
  consumes:
    - type: http
      namespace: workday
      baseUri: "https://wd2-impl-services1.workday.com/ccx/api/v1"
      authentication:
        type: bearer
        token: "$secrets.workday_token"
      resources:
        - name: workers
          path: "/workers/{{worker_id}}"
          inputParameters:
            - name: worker_id
              in: path
          operations:
            - name: get-worker
              method: GET

Retrieves employee profile from Workday for Freeport-McMoRan.

naftiko: "0.5"
info:
  label: "Workday Employee Profile Lookup"
  description: "Retrieves employee profile from Workday for Freeport-McMoRan."
  tags:
    - hr
    - workday
    - employee-directory
capability:
  exposes:
    - type: mcp
      namespace: workday-profile
      port: 8080
      tools:
        - name: get-employee-profile
          description: "Look up Freeport-McMoRan employee in Workday."
          inputParameters:
            - name: employee_id
              in: body
              type: string
              description: "Employee ID."
          call: "workday.get-worker"
          with:
            employee_id: "{{employee_id}}"
          outputParameters:
            - name: name
              type: string
              mapping: "$.worker.name"
            - name: title
              type: string
              mapping: "$.worker.title"
  consumes:
    - type: http
      namespace: workday
      baseUri: "https://wd5.fcx.com/api/v1"
      authentication:
        type: bearer
        token: "$secrets.workday_token"
      resources:
        - name: workers
          path: "/workers/{{employee_id}}"
          inputParameters:
            - name: employee_id
              in: path
          operations:
            - name: get-worker
              method: GET

Posts a journal entry to Workday Financials for mine site cost allocation.

naftiko: "0.5"
info:
  label: "Workday Financials Journal Entry"
  description: "Posts a journal entry to Workday Financials for mine site cost allocation."
  tags:
    - finance
    - workday
capability:
  exposes:
    - type: mcp
      namespace: financials
      port: 8080
      tools:
        - name: post-journal-entry
          description: "Post a journal entry to Workday Financials."
          inputParameters:
            - name: account
              in: body
              type: string
              description: "GL account."
            - name: amount
              in: body
              type: number
              description: "Entry amount."
            - name: mine_site
              in: body
              type: string
              description: "Mine site cost center."
          call: "workday.post-journal"
          with:
            account: "{{account}}"
            amount: "{{amount}}"
            cost_center: "{{mine_site}}"
  consumes:
    - type: http
      namespace: workday
      baseUri: "https://wd2-impl-services1.workday.com/ccx/api/v1"
      authentication:
        type: bearer
        token: "$secrets.workday_token"
      resources:
        - name: journals
          path: "/journal-entries"
          operations:
            - name: post-journal
              method: POST