@celigo/api-specs 0.2.89 → 0.2.91

package/dist/api.yml

@@ -5907,6 +5907,9 @@ components:
             to authorize the application.
             Handlebars expressions are supported for tenant-specific endpoints — e.g.
             "https://{{{connection.settings.storeName}}}.myshopify.com/admin/oauth/authorize".
+
+            Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol; data sent
+            to an HTTP endpoint is not encrypted and may be intercepted or modified in transit.
           examples:
             - https://login.example.com/oauth2/authorize
         tokenURI:
@@ -5916,6 +5919,9 @@ components:
             Required for "authorizecode", "clientcredentials", and "password" grant types.
             The system exchanges credentials or authorization codes for access tokens at this URL.
             Handlebars expressions are supported for tenant-specific endpoints.
+
+            Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol; data sent
+            to an HTTP endpoint is not encrypted and may be intercepted or modified in transit.
           examples:
             - https://login.example.com/oauth2/token
         skipOauthValidations:
@@ -6399,6 +6405,9 @@ components:
             "https://{{{connection.settings.subdomain}}}.example.com".
 
             Do NOT include trailing slashes — relative URIs in exports/imports should start with "/".
+
+            Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol; data sent
+            to an HTTP endpoint is not encrypted and may be intercepted or modified in transit.
           examples:
             - https://api.example.com/v2
             - https://{{{connection.settings.subdomain}}}.zendesk.com
@@ -6958,6 +6967,10 @@ components:
                   description: |
                     Login endpoint URI for cookie authentication. Required.
                     The system sends a request to this URI to obtain session cookies.
+
+                    Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol;
+                    data sent to an HTTP endpoint is not encrypted and may be intercepted or
+                    modified in transit.
                   examples:
                     - https://api.example.com/login
                 body:
@@ -8275,7 +8288,11 @@ components:
             as2URI:
               type: string
               format: uri
-              description: Partner's AS2 endpoint that integrator.io posts outbound messages to.
+              description: |-
+                Partner's AS2 endpoint that integrator.io posts outbound messages to.
+
+                Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol; data
+                sent to an HTTP endpoint is not encrypted and may be intercepted or modified in transit.
               examples:
                 - https://partner.example.com/as2
               x-celigo-ui-override: Required by the connection form (as2.partnerStationInfo.as2URI).
@@ -8288,7 +8305,13 @@ components:
                 mdnURL:
                   type: string
                   format: uri
-                  description: Endpoint the partner posts asynchronous MDNs to. Set only when the partner returns MDNs asynchronously rather than on the same connection.
+                  description: |-
+                    Endpoint the partner posts asynchronous MDNs to. Set only when the partner
+                    returns MDNs asynchronously rather than on the same connection.
+
+                    Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol;
+                    data sent to an HTTP endpoint is not encrypted and may be intercepted or
+                    modified in transit.
                   examples:
                     - https://partner.example.com/as2/mdn
                 signatureProtocol:
@@ -8606,6 +8629,10 @@ components:
                   description: |-
                     Partner's endpoint this station posts asynchronous MDNs to. Set only when
                     the partner requires asynchronous MDNs; stored as an empty string otherwise.
+
+                    Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol;
+                    data sent to an HTTP endpoint is not encrypted and may be intercepted or
+                    modified in transit.
                   examples:
                     - https://partner.example.com/as2/async-mdn
                 signatureProtocol:
@@ -9074,6 +9101,9 @@ components:
           description: |-
             MCP server endpoint URL. Must be a valid absolute URL
             (e.g. "https://mcp-server.example.com/mcp").
+
+            Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol; data sent
+            to an HTTP endpoint is not encrypted and may be intercepted or modified in transit.
           examples:
             - https://mcp-server.example.com/mcp
           x-celigo-ai-guidance:
@@ -9081,6 +9111,9 @@ components:
               MCP server endpoint URL. REQUIRED.
               Must be a valid absolute URL (e.g., "https://mcp-server.example.com/mcp").
               The system validates this as a proper URL.
+
+              Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol; data
+              sent to an HTTP endpoint is not encrypted and may be intercepted or modified in transit.
         timeout:
           type: number
           default: 600000

package/dist/connection.yml

@@ -4514,6 +4514,9 @@ components:
             to authorize the application.
             Handlebars expressions are supported for tenant-specific endpoints — e.g.
             "https://{{{connection.settings.storeName}}}.myshopify.com/admin/oauth/authorize".
+
+            Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol; data sent
+            to an HTTP endpoint is not encrypted and may be intercepted or modified in transit.
           examples:
             - https://login.example.com/oauth2/authorize
         tokenURI:
@@ -4523,6 +4526,9 @@ components:
             Required for "authorizecode", "clientcredentials", and "password" grant types.
             The system exchanges credentials or authorization codes for access tokens at this URL.
             Handlebars expressions are supported for tenant-specific endpoints.
+
+            Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol; data sent
+            to an HTTP endpoint is not encrypted and may be intercepted or modified in transit.
           examples:
             - https://login.example.com/oauth2/token
         skipOauthValidations:
@@ -5006,6 +5012,9 @@ components:
             "https://{{{connection.settings.subdomain}}}.example.com".
 
             Do NOT include trailing slashes — relative URIs in exports/imports should start with "/".
+
+            Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol; data sent
+            to an HTTP endpoint is not encrypted and may be intercepted or modified in transit.
           examples:
             - https://api.example.com/v2
             - https://{{{connection.settings.subdomain}}}.zendesk.com
@@ -5565,6 +5574,10 @@ components:
                   description: |
                     Login endpoint URI for cookie authentication. Required.
                     The system sends a request to this URI to obtain session cookies.
+
+                    Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol;
+                    data sent to an HTTP endpoint is not encrypted and may be intercepted or
+                    modified in transit.
                   examples:
                     - https://api.example.com/login
                 body:
@@ -6882,7 +6895,11 @@ components:
             as2URI:
               type: string
               format: uri
-              description: Partner's AS2 endpoint that integrator.io posts outbound messages to.
+              description: |-
+                Partner's AS2 endpoint that integrator.io posts outbound messages to.
+
+                Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol; data
+                sent to an HTTP endpoint is not encrypted and may be intercepted or modified in transit.
               examples:
                 - https://partner.example.com/as2
               x-celigo-ui-override: Required by the connection form (as2.partnerStationInfo.as2URI).
@@ -6895,7 +6912,13 @@ components:
                 mdnURL:
                   type: string
                   format: uri
-                  description: Endpoint the partner posts asynchronous MDNs to. Set only when the partner returns MDNs asynchronously rather than on the same connection.
+                  description: |-
+                    Endpoint the partner posts asynchronous MDNs to. Set only when the partner
+                    returns MDNs asynchronously rather than on the same connection.
+
+                    Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol;
+                    data sent to an HTTP endpoint is not encrypted and may be intercepted or
+                    modified in transit.
                   examples:
                     - https://partner.example.com/as2/mdn
                 signatureProtocol:
@@ -7213,6 +7236,10 @@ components:
                   description: |-
                     Partner's endpoint this station posts asynchronous MDNs to. Set only when
                     the partner requires asynchronous MDNs; stored as an empty string otherwise.
+
+                    Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol;
+                    data sent to an HTTP endpoint is not encrypted and may be intercepted or
+                    modified in transit.
                   examples:
                     - https://partner.example.com/as2/async-mdn
                 signatureProtocol:
@@ -7681,6 +7708,9 @@ components:
           description: |-
             MCP server endpoint URL. Must be a valid absolute URL
             (e.g. "https://mcp-server.example.com/mcp").
+
+            Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol; data sent
+            to an HTTP endpoint is not encrypted and may be intercepted or modified in transit.
           examples:
             - https://mcp-server.example.com/mcp
           x-celigo-ai-guidance:
@@ -7688,6 +7718,9 @@ components:
               MCP server endpoint URL. REQUIRED.
               Must be a valid absolute URL (e.g., "https://mcp-server.example.com/mcp").
               The system validates this as a proper URL.
+
+              Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol; data
+              sent to an HTTP endpoint is not encrypted and may be intercepted or modified in transit.
         timeout:
           type: number
           default: 600000

package/dist/enduser.yml

@@ -3153,6 +3153,9 @@ components:
             to authorize the application.
             Handlebars expressions are supported for tenant-specific endpoints — e.g.
             "https://{{{connection.settings.storeName}}}.myshopify.com/admin/oauth/authorize".
+
+            Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol; data sent
+            to an HTTP endpoint is not encrypted and may be intercepted or modified in transit.
           examples:
             - https://login.example.com/oauth2/authorize
         tokenURI:
@@ -3162,6 +3165,9 @@ components:
             Required for "authorizecode", "clientcredentials", and "password" grant types.
             The system exchanges credentials or authorization codes for access tokens at this URL.
             Handlebars expressions are supported for tenant-specific endpoints.
+
+            Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol; data sent
+            to an HTTP endpoint is not encrypted and may be intercepted or modified in transit.
           examples:
             - https://login.example.com/oauth2/token
         skipOauthValidations:
@@ -3645,6 +3651,9 @@ components:
             "https://{{{connection.settings.subdomain}}}.example.com".
 
             Do NOT include trailing slashes — relative URIs in exports/imports should start with "/".
+
+            Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol; data sent
+            to an HTTP endpoint is not encrypted and may be intercepted or modified in transit.
           examples:
             - https://api.example.com/v2
             - https://{{{connection.settings.subdomain}}}.zendesk.com
@@ -4204,6 +4213,10 @@ components:
                   description: |
                     Login endpoint URI for cookie authentication. Required.
                     The system sends a request to this URI to obtain session cookies.
+
+                    Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol;
+                    data sent to an HTTP endpoint is not encrypted and may be intercepted or
+                    modified in transit.
                   examples:
                     - https://api.example.com/login
                 body:
@@ -5521,7 +5534,11 @@ components:
             as2URI:
               type: string
               format: uri
-              description: Partner's AS2 endpoint that integrator.io posts outbound messages to.
+              description: |-
+                Partner's AS2 endpoint that integrator.io posts outbound messages to.
+
+                Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol; data
+                sent to an HTTP endpoint is not encrypted and may be intercepted or modified in transit.
               examples:
                 - https://partner.example.com/as2
               x-celigo-ui-override: Required by the connection form (as2.partnerStationInfo.as2URI).
@@ -5534,7 +5551,13 @@ components:
                 mdnURL:
                   type: string
                   format: uri
-                  description: Endpoint the partner posts asynchronous MDNs to. Set only when the partner returns MDNs asynchronously rather than on the same connection.
+                  description: |-
+                    Endpoint the partner posts asynchronous MDNs to. Set only when the partner
+                    returns MDNs asynchronously rather than on the same connection.
+
+                    Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol;
+                    data sent to an HTTP endpoint is not encrypted and may be intercepted or
+                    modified in transit.
                   examples:
                     - https://partner.example.com/as2/mdn
                 signatureProtocol:
@@ -5852,6 +5875,10 @@ components:
                   description: |-
                     Partner's endpoint this station posts asynchronous MDNs to. Set only when
                     the partner requires asynchronous MDNs; stored as an empty string otherwise.
+
+                    Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol;
+                    data sent to an HTTP endpoint is not encrypted and may be intercepted or
+                    modified in transit.
                   examples:
                     - https://partner.example.com/as2/async-mdn
                 signatureProtocol:
@@ -6320,6 +6347,9 @@ components:
           description: |-
             MCP server endpoint URL. Must be a valid absolute URL
             (e.g. "https://mcp-server.example.com/mcp").
+
+            Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol; data sent
+            to an HTTP endpoint is not encrypted and may be intercepted or modified in transit.
           examples:
             - https://mcp-server.example.com/mcp
           x-celigo-ai-guidance:
@@ -6327,6 +6357,9 @@ components:
               MCP server endpoint URL. REQUIRED.
               Must be a valid absolute URL (e.g., "https://mcp-server.example.com/mcp").
               The system validates this as a proper URL.
+
+              Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol; data
+              sent to an HTTP endpoint is not encrypted and may be intercepted or modified in transit.
         timeout:
           type: number
           default: 600000

package/dist/mcp-server.yml

@@ -4963,6 +4963,9 @@ components:
             to authorize the application.
             Handlebars expressions are supported for tenant-specific endpoints — e.g.
             "https://{{{connection.settings.storeName}}}.myshopify.com/admin/oauth/authorize".
+
+            Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol; data sent
+            to an HTTP endpoint is not encrypted and may be intercepted or modified in transit.
           examples:
             - https://login.example.com/oauth2/authorize
         tokenURI:
@@ -4972,6 +4975,9 @@ components:
             Required for "authorizecode", "clientcredentials", and "password" grant types.
             The system exchanges credentials or authorization codes for access tokens at this URL.
             Handlebars expressions are supported for tenant-specific endpoints.
+
+            Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol; data sent
+            to an HTTP endpoint is not encrypted and may be intercepted or modified in transit.
           examples:
             - https://login.example.com/oauth2/token
         skipOauthValidations:
@@ -5455,6 +5461,9 @@ components:
             "https://{{{connection.settings.subdomain}}}.example.com".
 
             Do NOT include trailing slashes — relative URIs in exports/imports should start with "/".
+
+            Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol; data sent
+            to an HTTP endpoint is not encrypted and may be intercepted or modified in transit.
           examples:
             - https://api.example.com/v2
             - https://{{{connection.settings.subdomain}}}.zendesk.com
@@ -6014,6 +6023,10 @@ components:
                   description: |
                     Login endpoint URI for cookie authentication. Required.
                     The system sends a request to this URI to obtain session cookies.
+
+                    Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol;
+                    data sent to an HTTP endpoint is not encrypted and may be intercepted or
+                    modified in transit.
                   examples:
                     - https://api.example.com/login
                 body:
@@ -7331,7 +7344,11 @@ components:
             as2URI:
               type: string
               format: uri
-              description: Partner's AS2 endpoint that integrator.io posts outbound messages to.
+              description: |-
+                Partner's AS2 endpoint that integrator.io posts outbound messages to.
+
+                Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol; data
+                sent to an HTTP endpoint is not encrypted and may be intercepted or modified in transit.
               examples:
                 - https://partner.example.com/as2
               x-celigo-ui-override: Required by the connection form (as2.partnerStationInfo.as2URI).
@@ -7344,7 +7361,13 @@ components:
                 mdnURL:
                   type: string
                   format: uri
-                  description: Endpoint the partner posts asynchronous MDNs to. Set only when the partner returns MDNs asynchronously rather than on the same connection.
+                  description: |-
+                    Endpoint the partner posts asynchronous MDNs to. Set only when the partner
+                    returns MDNs asynchronously rather than on the same connection.
+
+                    Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol;
+                    data sent to an HTTP endpoint is not encrypted and may be intercepted or
+                    modified in transit.
                   examples:
                     - https://partner.example.com/as2/mdn
                 signatureProtocol:
@@ -7662,6 +7685,10 @@ components:
                   description: |-
                     Partner's endpoint this station posts asynchronous MDNs to. Set only when
                     the partner requires asynchronous MDNs; stored as an empty string otherwise.
+
+                    Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol;
+                    data sent to an HTTP endpoint is not encrypted and may be intercepted or
+                    modified in transit.
                   examples:
                     - https://partner.example.com/as2/async-mdn
                 signatureProtocol:
@@ -8130,6 +8157,9 @@ components:
           description: |-
             MCP server endpoint URL. Must be a valid absolute URL
             (e.g. "https://mcp-server.example.com/mcp").
+
+            Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol; data sent
+            to an HTTP endpoint is not encrypted and may be intercepted or modified in transit.
           examples:
             - https://mcp-server.example.com/mcp
           x-celigo-ai-guidance:
@@ -8137,6 +8167,9 @@ components:
               MCP server endpoint URL. REQUIRED.
               Must be a valid absolute URL (e.g., "https://mcp-server.example.com/mcp").
               The system validates this as a proper URL.
+
+              Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol; data
+              sent to an HTTP endpoint is not encrypted and may be intercepted or modified in transit.
         timeout:
           type: number
           default: 600000

package/dist/tool.yml

@@ -8112,6 +8112,9 @@ components:
             to authorize the application.
             Handlebars expressions are supported for tenant-specific endpoints — e.g.
             "https://{{{connection.settings.storeName}}}.myshopify.com/admin/oauth/authorize".
+
+            Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol; data sent
+            to an HTTP endpoint is not encrypted and may be intercepted or modified in transit.
           examples:
             - https://login.example.com/oauth2/authorize
         tokenURI:
@@ -8121,6 +8124,9 @@ components:
             Required for "authorizecode", "clientcredentials", and "password" grant types.
             The system exchanges credentials or authorization codes for access tokens at this URL.
             Handlebars expressions are supported for tenant-specific endpoints.
+
+            Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol; data sent
+            to an HTTP endpoint is not encrypted and may be intercepted or modified in transit.
           examples:
             - https://login.example.com/oauth2/token
         skipOauthValidations:
@@ -8604,6 +8610,9 @@ components:
             "https://{{{connection.settings.subdomain}}}.example.com".
 
             Do NOT include trailing slashes — relative URIs in exports/imports should start with "/".
+
+            Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol; data sent
+            to an HTTP endpoint is not encrypted and may be intercepted or modified in transit.
           examples:
             - https://api.example.com/v2
             - https://{{{connection.settings.subdomain}}}.zendesk.com
@@ -9163,6 +9172,10 @@ components:
                   description: |
                     Login endpoint URI for cookie authentication. Required.
                     The system sends a request to this URI to obtain session cookies.
+
+                    Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol;
+                    data sent to an HTTP endpoint is not encrypted and may be intercepted or
+                    modified in transit.
                   examples:
                     - https://api.example.com/login
                 body:
@@ -10480,7 +10493,11 @@ components:
             as2URI:
               type: string
               format: uri
-              description: Partner's AS2 endpoint that integrator.io posts outbound messages to.
+              description: |-
+                Partner's AS2 endpoint that integrator.io posts outbound messages to.
+
+                Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol; data
+                sent to an HTTP endpoint is not encrypted and may be intercepted or modified in transit.
               examples:
                 - https://partner.example.com/as2
               x-celigo-ui-override: Required by the connection form (as2.partnerStationInfo.as2URI).
@@ -10493,7 +10510,13 @@ components:
                 mdnURL:
                   type: string
                   format: uri
-                  description: Endpoint the partner posts asynchronous MDNs to. Set only when the partner returns MDNs asynchronously rather than on the same connection.
+                  description: |-
+                    Endpoint the partner posts asynchronous MDNs to. Set only when the partner
+                    returns MDNs asynchronously rather than on the same connection.
+
+                    Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol;
+                    data sent to an HTTP endpoint is not encrypted and may be intercepted or
+                    modified in transit.
                   examples:
                     - https://partner.example.com/as2/mdn
                 signatureProtocol:
@@ -10811,6 +10834,10 @@ components:
                   description: |-
                     Partner's endpoint this station posts asynchronous MDNs to. Set only when
                     the partner requires asynchronous MDNs; stored as an empty string otherwise.
+
+                    Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol;
+                    data sent to an HTTP endpoint is not encrypted and may be intercepted or
+                    modified in transit.
                   examples:
                     - https://partner.example.com/as2/async-mdn
                 signatureProtocol:
@@ -11279,6 +11306,9 @@ components:
           description: |-
             MCP server endpoint URL. Must be a valid absolute URL
             (e.g. "https://mcp-server.example.com/mcp").
+
+            Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol; data sent
+            to an HTTP endpoint is not encrypted and may be intercepted or modified in transit.
           examples:
             - https://mcp-server.example.com/mcp
           x-celigo-ai-guidance:
@@ -11286,6 +11316,9 @@ components:
               MCP server endpoint URL. REQUIRED.
               Must be a valid absolute URL (e.g., "https://mcp-server.example.com/mcp").
               The system validates this as a proper URL.
+
+              Use an HTTPS URL whenever possible. HTTP is not considered a secure protocol; data
+              sent to an HTTP endpoint is not encrypted and may be intercepted or modified in transit.
         timeout:
           type: number
           default: 600000

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@celigo/api-specs",
-  "version": "0.2.89",
+  "version": "0.2.91",
   "private": false,
   "description": "Public OpenAPI bundles (dist/) and the celigo-cli lint schema pack (schemas.json).",
   "keywords": [

package/schemas.json

@@ -1,7 +1,7 @@
 {
 	"provenance": {
 		"repo": "celigo/integrator-api-specs",
-		"iasCommit": "2e26fe6e",
+		"iasCommit": "66a138d3",
 		"generatedAt": "2026-10-12"
 	},
 	"roots": {