{
  "openapi": "3.0.0",
  "info": {
    "title": "sh-mcp G16 identity probe",
    "version": "1.2.0",
    "description": "Returns the identity claims (sub, client_id, scope) seen at the MCP endpoint. Uses a 'note' QUERY parameter (a primitive String input) so the generated action has one flat, typed input — avoids the complex request-body object that Flow/Agentforce cannot map."
  },
  "servers": [
    { "url": "https://ex1v1x1hqc.execute-api.us-east-1.amazonaws.com" }
  ],
  "paths": {
    "/probe": {
      "get": {
        "operationId": "identityProbe",
        "summary": "Report the caller identity seen at the endpoint",
        "description": "Pass a short 'note' (e.g. the invoking user's name); it is echoed back. The response reports the decoded bearer claims observed at the MCP endpoint.",
        "parameters": [
          {
            "name": "note",
            "in": "query",
            "required": true,
            "description": "A short label for this call, e.g. the invoking user's name. Echoed back for correlation.",
            "schema": { "type": "string" }
          }
        ],
        "responses": {
          "200": {
            "description": "Probe result",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "properties": {
                    "message": { "type": "string" },
                    "note": { "type": "string" },
                    "authorization_header_present": { "type": "boolean" },
                    "looks_like_bearer_jwt": { "type": "boolean" },
                    "sub": { "type": "string" },
                    "client_id": { "type": "string" },
                    "scope": { "type": "string" },
                    "token_use": { "type": "string" },
                    "iss": { "type": "string" }
                  }
                }
              }
            }
          }
        }
      }
    }
  }
}