@W-22137880 add protect mcp skill (#23)

* Fix double scroll

* Add MCP asset type

* Add protect-mcp-server-with-policies skill and fix duplicate YAML key

New 9-step JTBD skill for protecting MCP servers with policies on Flex
Gateway. Searches Exchange with types=mcp (no org filter) and includes
a list-instances step for the apply-policy-only path.

Also fixes a duplicate environmentId key in the deploy step YAML block
of both skills, which caused ruamel.yaml to silently drop the block
and render the step as prose-only without the interactive panel.

* Add apply-policy-to-mcp-instance skill

Simplified 4-step skill for applying a policy to an existing MCP server
instance in API Manager. Assumes the user is already authenticated.
Steps: list environments, list instances, browse policy templates, apply.

* Revert "Add apply-policy-to-mcp-instance skill"

This reverts commit 42e5f1e.

* Add family query parameter to API Manager and use it in MCP skill

Add undocumented `family` enum parameter (api, agentic, llm) to the
listOrganizationsEnvironmentsApis operation in the API Manager spec.

Use `family=agentic` as a hardcoded filter in protect-mcp-server Step 7
to list only MCP server instances instead of all API instances.

* Hide auth panel for prose-only skill pages

Wrap auth-panel-right and auth modal in prose_only conditional so
prose-only skills (like Anypoint Platform Operations) show the header
bar with logo and title but not the authentication controls.

Add prose-only skill fixture and 6 smoke tests verifying the header
bar is present, auth panel right is absent, no auth modal, no
interactive mode toggle, and Guide badge is shown.

* Hide step count badge for prose-only skills on homepage and sidebar

Prose-only skills (0 steps) no longer show "0 steps" on homepage
cards or API detail page sidebar. The badge is simply omitted.

Author: Ferticidio

apis/api-manager/api.yaml

@@ -105,6 +105,15 @@ paths:
         allowReserved: true
         schema:
           type: string
+      - name: family
+        in: query
+        description: Filter API instances by family type. Use "agentic" to list MCP server instances, "llm" for LLM-based APIs, or "api" for standard APIs.
+        schema:
+          type: string
+          enum:
+            - api
+            - agentic
+            - llm
       - name: filters
         in: query
         allowReserved: true

apis/exchange-experience/api.yaml

@@ -72,6 +72,7 @@ paths:
             - template
             - example
             - custom
+            - mcp
       - name: rootOrganizationId
         description: Root organization ID to scope the asset search
         in: query

scripts/portal_generator/assets/styles.css

@@ -6330,7 +6330,6 @@ details[open] .examples-toggle-icon {
     flex-direction: column;
     flex: 1;
     min-height: 200px;
-    /* Ensure content area has minimum height */
 }
 
 .try-response-body,
@@ -6343,14 +6342,12 @@ details[open] .examples-toggle-icon {
     font-family: 'Monaco', 'Menlo', 'Ubuntu Mono', 'Consolas', 'source-code-pro', monospace;
     font-size: var(--font-size-3);
     color: var(--color-text-primary);
-    overflow-x: auto;
-    overflow-y: auto;
+    overflow: hidden;
     margin: 0;
     white-space: pre-wrap;
     word-break: break-word;
     flex: 1;
     min-height: 200px;
-    /* Ensure ACE editor has minimum height */
 }
 
 .try-response-body.active,

scripts/portal_generator/templates/homepage/skill_card.html

@@ -11,7 +11,9 @@ <h3 class="catalog-card-title">{{ skill_name }}</h3>
         <div class="catalog-card-footer">
             <span class="card-version-badge card-version-list">Skill</span>
             <span class="badge badge-skills">Skill</span>
-            <span class="badge badge-count">{{ skill.step_count|default(0) }} step{{ 's' if skill.step_count != 1 else '' }}</span>
+            {% if skill.step_count|default(0) > 0 %}
+            <span class="badge badge-count">{{ skill.step_count }} step{{ 's' if skill.step_count != 1 else '' }}</span>
+            {% endif %}
         </div>
     </article>
 </a>

scripts/portal_generator/templates/partials/auth_panel.html

@@ -18,6 +18,7 @@ <h1 class="api-title"><a href="#overview" class="api-title-link">{{ api_name }}<
         </div>
         {% endif %}
     </div>
+    {% if not prose_only|default(false) %}
     <div class="auth-panel-right">
         <button class="auth-panel-status" onclick="openAuthModal()" aria-label="Open authentication modal">
             <span class="auth-status-container" id="authStatusContainer">
@@ -38,8 +39,10 @@ <h1 class="api-title"><a href="#overview" class="api-title-link">{{ api_name }}<
             </span>
         </button>
     </div>
+    {% endif %}
 </div>
 
+{% if not prose_only|default(false) %}
 <div class="auth-modal" id="authModal" style="display:none" role="dialog" aria-modal="true" aria-labelledby="authModalTitle">
     <div class="auth-modal-overlay" onclick="closeAuthModal()"></div>
     <div class="auth-modal-content">
@@ -103,3 +106,4 @@ <h4>Context Variables</h4>
         </div>
     </div>
 </div>
+{% endif %}

scripts/portal_generator/templates/partials/sidebar.html

@@ -91,7 +91,9 @@
                 <li>
                     <a href="../skills/{{ skill.slug }}.html" class="nav-link nav-operation-flat">
                         <span class="op-name">{{ skill_name }}</span>
+                        {% if step_count > 0 %}
                         <span class="group-count">({{ step_count }} steps)</span>
+                        {% endif %}
                     </a>
                 </li>
                 {% endfor %}

scripts/tests/conftest.py

@@ -284,6 +284,22 @@ def sample_api_data_with_skills(sample_api_data):
 })
 
 
+PROSE_ONLY_SKILL_MD = textwrap.dedent("""\
+    ---
+    name: platform-guide
+    description: Navigate the Anypoint Platform developer portal.
+    ---
+    ## Overview
+    This is a prose-only guide with no steps.
+
+    ## Tips and Best Practices
+    Start with registry.json for programmatic discovery.
+
+    ## Troubleshooting
+    Check network connectivity if portal files are not accessible.
+""")
+
+
 def setup_schema_docs(repo_root: Path):
     """Create minimal schema doc files under a repo root for testing."""
     schemas_dir = repo_root / 'docs' / 'schemas'

scripts/tests/test_smoke.py

@@ -9,7 +9,7 @@
 from portal_generator import PortalGenerator
 from tests.conftest import (
     MINIMAL_OAS_YAML, MINIMAL_EXCHANGE_JSON, MINIMAL_SKILL_MD,
-    PRIVATE_EXCHANGE_JSON, setup_schema_docs,
+    PRIVATE_EXCHANGE_JSON, PROSE_ONLY_SKILL_MD, setup_schema_docs,
 )
 
 
@@ -32,6 +32,10 @@ def generated_portal(tmp_path):
     skill_dir.mkdir(parents=True)
     (skill_dir / 'SKILL.md').write_text(MINIMAL_SKILL_MD)
 
+    prose_skill_dir = repo / 'skills' / 'platform-guide'
+    prose_skill_dir.mkdir(parents=True)
+    (prose_skill_dir / 'SKILL.md').write_text(PROSE_ONLY_SKILL_MD)
+
     setup_schema_docs(repo)
 
     output = tmp_path / 'portal_output'
@@ -141,6 +145,37 @@ def test_has_api_link_prefix(self):
         assert "__API_LINK_PREFIX__" in script_text
 
 
+class TestProseOnlySkillPage:
+    """Prose-only skills render the header but hide auth panel and interactive elements."""
+    @pytest.fixture(autouse=True)
+    def _parse_prose_skill_page(self, generated_portal):
+        html = (generated_portal / 'skills' / 'platform-guide.html').read_text(encoding='utf-8')
+        self.soup = BeautifulSoup(html, 'html.parser')
+
+    def test_prose_skill_page_exists(self, generated_portal):
+        assert (generated_portal / 'skills' / 'platform-guide.html').exists()
+
+    def test_has_header_bar(self):
+        header = self.soup.find('div', class_='auth-panel-header-bar')
+        assert header is not None
+
+    def test_no_auth_panel_right(self):
+        right = self.soup.find('div', class_='auth-panel-right')
+        assert right is None
+
+    def test_no_auth_modal(self):
+        modal = self.soup.find('div', class_='auth-modal')
+        assert modal is None
+
+    def test_no_interactive_mode_toggle(self):
+        toggle = self.soup.find('div', class_='skill-mode-toggle-container')
+        assert toggle is None
+
+    def test_has_guide_badge(self):
+        badge = self.soup.find('span', class_='badge-version', string='Guide')
+        assert badge is not None
+
+
 class TestHomepageSkillLinks:
     @pytest.fixture(autouse=True)
     def _parse_homepage(self, generated_portal):

skills/protect-api-with-policies/SKILL.md

@@ -253,7 +253,7 @@ inputs:
   environmentId:
     from:
       variable: environmentId
-    description: Environment ID from Step 2
+    description: Environment ID from Step 2 (used in both the URL path and the request body for HY deployment type)
   environmentApiId:
     from:
       variable: environmentApiId
@@ -272,10 +272,6 @@ inputs:
   gatewayVersion:
     value: "1.0.0"
     description: "Gateway version for deployment. Use \"1.0.0\" as the default."
-  environmentId:
-    from:
-      variable: environmentId
-    description: Environment ID (required in the deployment body for HY type)
   overwrite:
     value: false
     description: "Whether to overwrite an existing deployment"