Indykite · Arazzo Workflow

Capture graph data then make an authorization decision

Version 1.0.0

Upsert nodes and a relationship into the Identity Knowledge Graph, then ask AuthZEN/KBAC whether a subject may act on a resource.

1 workflow 1 source API 1 provider
View Spec View on GitHub CompanyIdentityAuthorizationAccess ControlKnowledge GraphAgentic AIMCPSecurityAuthZENArazzoWorkflows

Provider

indykite

Workflows

captureAndAuthorize
Batch-upsert nodes, connect them with a relationship, and evaluate a KBAC decision.
3 steps inputs: decision, nodes, relationship outputs: decision
1
upsertNodes
createCaptureV1Node
2
upsertRelationship
createCaptureV1Relationship
3
evaluateAccess
createAccessV1Evaluation

Source API Descriptions

openapi
rest https://raw.githubusercontent.com/api-evangelist/indykite/refs/heads/main/openapi/indykite-rest-openapi.yml

Arazzo Workflow Specification

Raw ↑ 
arazzo: 1.0.1
info:
  title: Capture graph data then make an authorization decision
  version: 1.0.0
  summary: Upsert nodes and a relationship into the Identity Knowledge Graph, then ask AuthZEN/KBAC whether a subject may act on a resource.
sourceDescriptions:
  - name: rest
    url: ../openapi/indykite-rest-openapi.yml
    type: openapi
workflows:
  - workflowId: captureAndAuthorize
    summary: Batch-upsert nodes, connect them with a relationship, and evaluate a KBAC decision.
    inputs:
      type: object
      properties:
        nodes:
          type: array
        relationship:
          type: object
        decision:
          type: object
    steps:
      - stepId: upsertNodes
        operationId: createCaptureV1Node
        requestBody:
          contentType: application/json
          payload: $inputs.nodes
      - stepId: upsertRelationship
        operationId: createCaptureV1Relationship
        requestBody:
          contentType: application/json
          payload: $inputs.relationship
      - stepId: evaluateAccess
        operationId: createAccessV1Evaluation
        requestBody:
          contentType: application/json
          payload: $inputs.decision
        outputs:
          decision: $response.body#/decision
    outputs:
      decision: $steps.evaluateAccess.outputs.decision