API Evangelist Trend Report
The State of API Authentication
40 authentication, identity and authorization providers scored — the strongest-publishing market in this series. Composite 50.4 against a catalog average of 22.8, seven Exemplars, and 97.5% ship a machine-readable contract. Six run a public MCP server, the most of any area measured. And then the sharpest finding in the series: delegated identity and consent signal appears once in forty, in the market whose entire product is letting one party act on another’s behalf.
Read the report →
$500
· PDF + Word + AI data bundle, instant download
Authentication & Identity
Grouped by Kin Score band and ranked by composite score within each, with the separate agent-readiness score alongside. Click the scores on any row to open the full facet and dimension breakdown behind both numbers, and click again to close it.
search
40 providers
Exemplar 2 66+ Reference-quality API operations across every facet.
1
Kinde Exemplar agent ready Developer-First CIAM
Kinde is a developer-first authentication and customer identity platform that bundles authentication (passwords, passwordless, social, enterprise SSO), autho...
Composite
70.3
Agent
41.0
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 70.3/100 · exemplar
Contract Quality
17.3 / 25
Developer Ergonomics
12.2 / 20
Commercial Clarity
16.3 / 20
Operational Transparency
9.6 / 13
Governance
8.3 / 12
Discoverability
6.7 / 10
Agent readiness — 41/100 · agent ready
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
0 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
8.0 / 8
Request/Response Examples partial
3.5 / 7
Rate-Limit Signaling documented
3.5 / 7
Typed Event Surface
0 / 6
Agent Skills
0 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
2
PropelAuth Exemplar agent aware Developer-First CIAM
PropelAuth is a B2B SaaS authentication and multi-tenant user management platform purpose-built for organizations that sell to other organizations. It provid...
Composite
69.8
Agent
33.8
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 69.8/100 · exemplar
Contract Quality
17.7 / 25
Developer Ergonomics
12.2 / 20
Commercial Clarity
18.4 / 20
Operational Transparency
6.8 / 13
Governance
8.3 / 12
Discoverability
6.5 / 10
Agent readiness — 34/100 · agent aware
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
0 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
0 / 8
Request/Response Examples partial
3.5 / 7
Rate-Limit Signaling documented
3.5 / 7
Typed Event Surface
0 / 6
Agent Skills
0 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
Strong 9 56 – 65.9 Solid contracts, transparent operations, and an easy start.
3
Stytch Strong agent ready Developer-First CIAM
Stytch is an authentication and identity infrastructure provider. Its Consumer and B2B APIs cover passwordless authentication (Magic Links, OTP, OAuth, WebAu...
Composite
63.6
Agent
53.2
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 63.6/100 · strong
Contract Quality
17.8 / 25
Developer Ergonomics
14.3 / 20
Commercial Clarity
11.6 / 20
Operational Transparency
4.8 / 13
Governance
8.3 / 12
Discoverability
6.9 / 10
Agent readiness — 53/100 · agent ready
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
12 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
0 / 8
Request/Response Examples
7.0 / 7
Rate-Limit Signaling documented
3.5 / 7
Typed Event Surface
6 / 6
Agent Skills
0 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
4
Okta Strong agent ready Enterprise IAM & Workforce Identity
Okta is the workforce identity incumbent — its Identity Cloud platform (also called the Okta Workforce Identity Platform) covers Single Sign-On, Adaptive MFA...
Composite
63.5
Agent
42.8
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 63.5/100 · strong
Contract Quality
19.3 / 25
Developer Ergonomics
15.2 / 20
Commercial Clarity
11.6 / 20
Operational Transparency
5.8 / 13
Governance
5.7 / 12
Discoverability
5.9 / 10
Agent readiness — 43/100 · agent ready
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
12 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
0 / 8
Request/Response Examples
0 / 7
Rate-Limit Signaling documented
3.5 / 7
Typed Event Surface derived
1.5 / 6
Agent Skills
0 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
5
Beyond Identity Strong agent ready Developer-First CIAM
Beyond Identity is a zero-trust passwordless authentication platform that eliminates passwords by binding credentials to physical devices using platform auth...
Composite
62.1
Agent
47.3
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 62.1/100 · strong
Contract Quality
19.9 / 25
Developer Ergonomics
6.1 / 20
Commercial Clarity
11.6 / 20
Operational Transparency
8.9 / 13
Governance
8.3 / 12
Discoverability
7.4 / 10
Agent readiness — 47/100 · agent ready
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
0 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
8.0 / 8
Request/Response Examples
7.0 / 7
Rate-Limit Signaling
7.0 / 7
Typed Event Surface
0 / 6
Agent Skills
0 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
6
Auth0 Strong agent ready Developer-First CIAM
Auth0 (now part of Okta) is a leading identity-as-a-service platform providing authentication and authorization for applications, APIs, and AI agents. It imp...
Composite
61.8
Agent
50.5
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 61.8/100 · strong
Contract Quality
17.2 / 25
Developer Ergonomics
12.6 / 20
Commercial Clarity
13.7 / 20
Operational Transparency
5.8 / 13
Governance
7.5 / 12
Discoverability
5.0 / 10
Agent readiness — 51/100 · agent ready
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
12 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
0 / 8
Request/Response Examples partial
3.5 / 7
Rate-Limit Signaling documented
3.5 / 7
Typed Event Surface derived
1.5 / 6
Agent Skills
5 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
7
Frontegg Strong agent ready Developer-First CIAM
Frontegg is a customer identity and access management (CIAM) platform for B2B SaaS. It provides self-serve authentication, multi-tenancy, role-based access c...
Composite
61.3
Agent
35.1
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 61.3/100 · strong
Contract Quality
17.2 / 25
Developer Ergonomics
12.6 / 20
Commercial Clarity
10.5 / 20
Operational Transparency
8.9 / 13
Governance
4.5 / 12
Discoverability
7.6 / 10
Agent readiness — 35/100 · agent ready
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
0 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
0 / 8
Request/Response Examples partial
3.5 / 7
Rate-Limit Signaling documented
3.5 / 7
Typed Event Surface derived
1.5 / 6
Agent Skills
0 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
8
WorkOS Strong agent ready Developer-First CIAM
WorkOS is the "Enterprise Ready" identity platform for B2B SaaS — providing AuthKit user management, enterprise SSO (SAML/OIDC), Directory Sync (SCIM 2.0), M...
Composite
59.2
Agent
60.4
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 59.2/100 · strong
Contract Quality
17.5 / 25
Developer Ergonomics
13.9 / 20
Commercial Clarity
6.8 / 20
Operational Transparency
5.8 / 13
Governance
8.3 / 12
Discoverability
6.9 / 10
Agent readiness — 60/100 · agent ready
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
12 / 12
Machine-Readable Auth
10 / 10
Idempotency
9.0 / 9
Stable Error Semantics
0 / 8
Request/Response Examples
7.0 / 7
Rate-Limit Signaling documented
3.5 / 7
Typed Event Surface
0 / 6
Agent Skills
5 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
9
Transmit Security Strong agent ready Developer-First CIAM
Transmit Security provides the Mosaic platform, a comprehensive CIAM (Customer Identity and Access Management) solution offering REST APIs for passkey and We...
Composite
58.0
Agent
41.0
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 58.0/100 · strong
Contract Quality
16.9 / 25
Developer Ergonomics
6.5 / 20
Commercial Clarity
10.0 / 20
Operational Transparency
8.9 / 13
Governance
8.3 / 12
Discoverability
7.4 / 10
Agent readiness — 41/100 · agent ready
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
0 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
8.0 / 8
Request/Response Examples partial
3.5 / 7
Rate-Limit Signaling documented
3.5 / 7
Typed Event Surface
0 / 6
Agent Skills
0 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
10
Amazon Cognito Strong agent ready Cloud Platform Identity
Amazon Cognito is an AWS service that provides authentication, authorization, and user management for web and mobile applications. It supports OAuth2, OIDC, ...
Composite
57.6
Agent
44.1
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 57.6/100 · strong
Contract Quality
18.1 / 25
Developer Ergonomics
9.6 / 20
Commercial Clarity
11.1 / 20
Operational Transparency
3.8 / 13
Governance
8.3 / 12
Discoverability
6.9 / 10
Agent readiness — 44/100 · agent ready
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
0 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
8.0 / 8
Request/Response Examples
7.0 / 7
Rate-Limit Signaling documented
3.5 / 7
Typed Event Surface
0 / 6
Agent Skills
0 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
11
SailPoint Strong agent ready Enterprise IAM & Workforce Identity
Enterprise identity security and governance platform providing identity management, access governance, and compliance solutions for workforce and non-employe...
Composite
57.3
Agent
40.1
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 57.3/100 · strong
Contract Quality
18.9 / 25
Developer Ergonomics
12.6 / 20
Commercial Clarity
6.8 / 20
Operational Transparency
5.5 / 13
Governance
7.0 / 12
Discoverability
6.5 / 10
Agent readiness — 40/100 · agent ready
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
0 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
0 / 8
Request/Response Examples
7.0 / 7
Rate-Limit Signaling
7.0 / 7
Typed Event Surface
0 / 6
Agent Skills
0 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
Developing 12 42 – 55.9 Real signal across most facets with visible, nameable gaps.
12
ForgeRock Developing agent ready Enterprise IAM & Workforce Identity
ForgeRock, now part of Ping Identity, provides digital identity and access management solutions for secure authentication, authorization, and identity govern...
Composite
54.2
Agent
41.0
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 54.2/100 · developing
Contract Quality
15.9 / 25
Developer Ergonomics
11.3 / 20
Commercial Clarity
10.0 / 20
Operational Transparency
3.4 / 13
Governance
7.0 / 12
Discoverability
6.7 / 10
Agent readiness — 41/100 · agent ready
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
0 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
8.0 / 8
Request/Response Examples partial
3.5 / 7
Rate-Limit Signaling documented
3.5 / 7
Typed Event Surface
0 / 6
Agent Skills
0 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
13
Hanko Developing agent aware Developer-First CIAM
Hanko is a passkey-first, open-source authentication platform that serves as a modern alternative to Auth0, Clerk, and WorkOS. It provides a REST API coverin...
Composite
54.2
Agent
33.8
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 54.2/100 · developing
Contract Quality
17.4 / 25
Developer Ergonomics
4.3 / 20
Commercial Clarity
10.0 / 20
Operational Transparency
6.8 / 13
Governance
8.3 / 12
Discoverability
7.4 / 10
Agent readiness — 34/100 · agent aware
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
0 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
0 / 8
Request/Response Examples partial
3.5 / 7
Rate-Limit Signaling documented
3.5 / 7
Typed Event Surface
0 / 6
Agent Skills
0 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
14
Authzed Developing agent aware Authorization & Policy Engines
Authzed is a SpiceDB-based authorization platform providing REST and gRPC APIs for Zanzibar-style relationship-based access control. It enables developers to...
Composite
54.1
Agent
30.6
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 54.1/100 · developing
Contract Quality
14.9 / 25
Developer Ergonomics
4.3 / 20
Commercial Clarity
11.6 / 20
Operational Transparency
8.9 / 13
Governance
7.0 / 12
Discoverability
7.4 / 10
Agent readiness — 31/100 · agent aware
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
0 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
0 / 8
Request/Response Examples
0 / 7
Rate-Limit Signaling documented
3.5 / 7
Typed Event Surface
0 / 6
Agent Skills
0 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
15
Zitadel Developing agent aware Open Source Identity Servers
Zitadel is an open source identity infrastructure platform providing secure authentication and user management with built-in support for OAuth 2.0, OpenID Co...
Composite
53.7
Agent
30.6
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 53.7/100 · developing
Contract Quality
19.0 / 25
Developer Ergonomics
6.5 / 20
Commercial Clarity
12.1 / 20
Operational Transparency
1.4 / 13
Governance
8.3 / 12
Discoverability
6.5 / 10
Agent readiness — 31/100 · agent aware
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
0 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
0 / 8
Request/Response Examples
0 / 7
Rate-Limit Signaling documented
3.5 / 7
Typed Event Surface
0 / 6
Agent Skills
0 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
16
Descope Developing agent aware Developer-First CIAM
Descope is a customer and agentic identity access management (CIAM) platform founded in 2022 by veterans of Sentrigo and Demisto (acquired by Palo Alto Netwo...
Composite
50.3
Agent
27.5
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 50.3/100 · developing
Contract Quality
13.6 / 25
Developer Ergonomics
16.1 / 20
Commercial Clarity
10.5 / 20
Operational Transparency
2.7 / 13
Governance
0.0 / 12
Discoverability
7.4 / 10
Agent readiness — 28/100 · agent aware
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
0 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
0 / 8
Request/Response Examples
0 / 7
Rate-Limit Signaling
0 / 7
Typed Event Surface
0 / 6
Agent Skills
0 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
17
Oso Cloud Developing agent aware Authorization & Policy Engines
Oso Cloud is an authorization-as-a-service platform that provides a REST API for defining and enforcing relationship-based access control policies. It enable...
Composite
50.1
Agent
30.6
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 50.1/100 · developing
Contract Quality
13.9 / 25
Developer Ergonomics
4.3 / 20
Commercial Clarity
11.6 / 20
Operational Transparency
8.9 / 13
Governance
7.0 / 12
Discoverability
7.4 / 10
Regulatory · Insurance
5.0 / 15
Agent readiness — 31/100 · agent aware
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
0 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
0 / 8
Request/Response Examples
0 / 7
Rate-Limit Signaling documented
3.5 / 7
Typed Event Surface
0 / 6
Agent Skills
0 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
18
Clerk Developing agent aware Developer-First CIAM
Clerk is a drop-in authentication and user management platform for web and mobile applications. The product spans sign-up / sign-in flows, user profiles, mul...
Composite
48.8
Agent
32.0
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 48.8/100 · developing
Contract Quality
16.6 / 25
Developer Ergonomics
4.3 / 20
Commercial Clarity
7.9 / 20
Operational Transparency
6.8 / 13
Governance
5.0 / 12
Discoverability
8.2 / 10
Agent readiness — 32/100 · agent aware
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
0 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
0 / 8
Request/Response Examples
0 / 7
Rate-Limit Signaling documented
3.5 / 7
Typed Event Surface derived
1.5 / 6
Agent Skills
0 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
19
Keycloak Developing agent ready Open Source Identity Servers
Keycloak is an open source identity and access management solution for modern applications and services, providing single sign-on, identity brokering, user f...
Composite
47.5
Agent
36.0
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 47.5/100 · developing
Contract Quality
14.7 / 25
Developer Ergonomics
9.1 / 20
Commercial Clarity
3.2 / 20
Operational Transparency
3.8 / 13
Governance
9.5 / 12
Discoverability
7.2 / 10
Agent readiness — 36/100 · agent ready
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server derived
3.0 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
0 / 8
Request/Response Examples
0 / 7
Rate-Limit Signaling documented
3.5 / 7
Typed Event Surface
0 / 6
Agent Skills
0 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
3 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
20
FusionAuth Developing agent ready Developer-First CIAM
FusionAuth is a developer-focused customer identity and access management (CIAM) platform that delivers authentication, authorization, registration, multi-fa...
Composite
44.8
Agent
49.5
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 44.8/100 · developing
Contract Quality
12.1 / 25
Developer Ergonomics
9.1 / 20
Commercial Clarity
11.6 / 20
Operational Transparency
3.8 / 13
Governance
0.0 / 12
Discoverability
8.2 / 10
Agent readiness — 50/100 · agent ready
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
12 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
0 / 8
Request/Response Examples
0 / 7
Rate-Limit Signaling documented
3.5 / 7
Typed Event Surface
0 / 6
Agent Skills
5 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
4 / 4
21
CyberArk Developing agent aware Enterprise IAM & Workforce Identity
CyberArk is the global leader in identity security, providing a unified Identity Security Platform that protects human, machine, and application identities a...
Composite
44.6
Agent
30.6
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 44.6/100 · developing
Contract Quality
15.3 / 25
Developer Ergonomics
5.7 / 20
Commercial Clarity
8.9 / 20
Operational Transparency
3.8 / 13
Governance
3.8 / 12
Discoverability
7.2 / 10
Agent readiness — 31/100 · agent aware
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
0 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
0 / 8
Request/Response Examples
0 / 7
Rate-Limit Signaling documented
3.5 / 7
Typed Event Surface
0 / 6
Agent Skills
0 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
22
Cerbos Developing agent ready Authorization & Policy Engines
Cerbos is an open-core, language-agnostic, scalable authorization platform that decouples access control from application code by externalizing fine-grained,...
Composite
43.6
Agent
35.1
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 43.6/100 · developing
Contract Quality
12.8 / 25
Developer Ergonomics
11.3 / 20
Commercial Clarity
9.5 / 20
Operational Transparency
5.1 / 13
Governance
0.0 / 12
Discoverability
7.2 / 10
Regulatory · Insurance
4.5 / 15
Agent readiness — 35/100 · agent ready
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
0 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
0 / 8
Request/Response Examples
0 / 7
Rate-Limit Signaling documented
3.5 / 7
Typed Event Surface
0 / 6
Agent Skills
5 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
23
Aserto Developing agent aware Authorization & Policy Engines
Aserto is a cloud-native authorization platform providing fine-grained, policy-based access control for applications and APIs. Built on Open Policy Agent (OP...
Composite
42.5
Agent
30.6
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 42.5/100 · developing
Contract Quality
13.9 / 25
Developer Ergonomics
4.3 / 20
Commercial Clarity
10.0 / 20
Operational Transparency
2.7 / 13
Governance
7.0 / 12
Discoverability
7.4 / 10
Regulatory · Insurance
3.9 / 15
Agent readiness — 31/100 · agent aware
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
0 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
0 / 8
Request/Response Examples
0 / 7
Rate-Limit Signaling documented
3.5 / 7
Typed Event Surface
0 / 6
Agent Skills
0 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
Thin 15 28 – 41.9 Limited machine-readable signal beyond documentation a human can read.
24
Casdoor Thin agent ready Open Source Identity Servers
Casdoor is an open-source, AI-first identity and access management (IAM) and MCP gateway authentication server with a web UI. Built in Go (Beego) with a Reac...
Composite
41.9
Agent
41.4
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 41.9/100 · thin
Contract Quality
13.8 / 25
Developer Ergonomics
9.1 / 20
Commercial Clarity
7.4 / 20
Operational Transparency
5.1 / 13
Governance
0.0 / 12
Discoverability
6.5 / 10
Agent readiness — 41/100 · agent ready
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
12 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
0 / 8
Request/Response Examples
0 / 7
Rate-Limit Signaling documented
3.5 / 7
Typed Event Surface
0 / 6
Agent Skills
0 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
25
Corbado Thin agent aware Developer-First CIAM
Corbado is a passkey-first authentication platform that helps companies add WebAuthn passkeys to their products. The Corbado Backend API manages users, login...
Composite
40.2
Agent
30.6
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 40.2/100 · thin
Contract Quality
14.2 / 25
Developer Ergonomics
4.3 / 20
Commercial Clarity
9.5 / 20
Operational Transparency
4.8 / 13
Governance
0.0 / 12
Discoverability
7.4 / 10
Agent readiness — 31/100 · agent aware
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
0 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
0 / 8
Request/Response Examples
0 / 7
Rate-Limit Signaling documented
3.5 / 7
Typed Event Surface
0 / 6
Agent Skills
0 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
26
Permit.io Thin agent ready Authorization & Policy Engines
Permit.io is an authorization-as-a-service platform that helps developers build, manage, and enforce fine-grained access control in their applications. It pr...
Composite
39.2
Agent
44.1
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 39.2/100 · thin
Contract Quality
13.7 / 25
Developer Ergonomics
5.7 / 20
Commercial Clarity
9.5 / 20
Operational Transparency
3.8 / 13
Governance
0.0 / 12
Discoverability
7.4 / 10
Regulatory · Insurance
5.2 / 15
Agent readiness — 44/100 · agent ready
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
0 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
8.0 / 8
Request/Response Examples
7.0 / 7
Rate-Limit Signaling documented
3.5 / 7
Typed Event Surface
0 / 6
Agent Skills
0 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
27
Ping Identity Thin agent aware Enterprise IAM & Workforce Identity
Identity for enterprises - flawless user experience with fortified enterprise protection. Ping Identity's PingOne platform provides cloud-based identity and ...
Composite
39.2
Agent
33.8
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 39.2/100 · thin
Contract Quality
12.7 / 25
Developer Ergonomics
4.3 / 20
Commercial Clarity
11.1 / 20
Operational Transparency
3.8 / 13
Governance
0.0 / 12
Discoverability
7.4 / 10
Agent readiness — 34/100 · agent aware
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
0 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
0 / 8
Request/Response Examples
0 / 7
Rate-Limit Signaling
7.0 / 7
Typed Event Surface
0 / 6
Agent Skills
0 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
28
Authentik Thin agent aware Open Source Identity Servers
Authentik is an open source identity provider with a comprehensive REST API for managing users, groups, flows, providers, sources, policies, and outposts. It...
Composite
35.9
Agent
30.6
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 35.9/100 · thin
Contract Quality
12.9 / 25
Developer Ergonomics
5.2 / 20
Commercial Clarity
5.3 / 20
Operational Transparency
5.1 / 13
Governance
0.0 / 12
Discoverability
7.4 / 10
Agent readiness — 31/100 · agent aware
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
0 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
0 / 8
Request/Response Examples
0 / 7
Rate-Limit Signaling documented
3.5 / 7
Typed Event Surface
0 / 6
Agent Skills
0 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
29
Gluu Thin agent aware Open Source Identity Servers
Gluu is a technology company that specializes in providing identity and access management solutions for businesses. Their platform allows organizations to ce...
Composite
33.6
Agent
30.6
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 33.6/100 · thin
Contract Quality
12.9 / 25
Developer Ergonomics
5.2 / 20
Commercial Clarity
5.3 / 20
Operational Transparency
3.8 / 13
Governance
0.0 / 12
Discoverability
6.5 / 10
Agent readiness — 31/100 · agent aware
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
0 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
0 / 8
Request/Response Examples
0 / 7
Rate-Limit Signaling documented
3.5 / 7
Typed Event Surface
0 / 6
Agent Skills
0 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
30
Authelia Thin agent aware Open Source Identity Servers
Authelia is an open source authentication and authorization server providing multi-factor authentication and single sign-on for applications behind a reverse...
Composite
33.5
Agent
30.6
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 33.5/100 · thin
Contract Quality
13.0 / 25
Developer Ergonomics
4.8 / 20
Commercial Clarity
3.2 / 20
Operational Transparency
5.1 / 13
Governance
0.0 / 12
Discoverability
7.4 / 10
Agent readiness — 31/100 · agent aware
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
0 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
0 / 8
Request/Response Examples
0 / 7
Rate-Limit Signaling documented
3.5 / 7
Typed Event Surface
0 / 6
Agent Skills
0 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
31
JumpCloud Thin agent aware Enterprise IAM & Workforce Identity
JumpCloud is an open directory platform that unifies identity, access, and device management across users, devices, networks, and SaaS applications. Its clou...
Composite
33.3
Agent
27.5
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 33.3/100 · thin
Contract Quality
14.6 / 25
Developer Ergonomics
5.2 / 20
Commercial Clarity
4.7 / 20
Operational Transparency
0.7 / 13
Governance
0.0 / 12
Discoverability
8.2 / 10
Agent readiness — 28/100 · agent aware
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
0 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
0 / 8
Request/Response Examples
0 / 7
Rate-Limit Signaling
0 / 7
Typed Event Surface
0 / 6
Agent Skills
0 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
32
SuperTokens Thin agent ready Open Source Identity Servers
SuperTokens is an open source authentication solution providing session management, social login, email/password auth, and passwordless flows for web and mob...
Composite
33.2
Agent
41.0
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 33.2/100 · thin
Contract Quality
16.8 / 25
Developer Ergonomics
2.6 / 20
Commercial Clarity
3.2 / 20
Operational Transparency
0.7 / 13
Governance
2.5 / 12
Discoverability
7.4 / 10
Agent readiness — 41/100 · agent ready
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
0 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
8.0 / 8
Request/Response Examples partial
3.5 / 7
Rate-Limit Signaling documented
3.5 / 7
Typed Event Surface
0 / 6
Agent Skills
0 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
33
Logto Thin agent aware Open Source Identity Servers
Logto is an open source identity infrastructure platform with authentication, authorization, user management, and multi-tenancy supporting OIDC, OAuth, and S...
Composite
32.1
Agent
33.8
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 32.1/100 · thin
Contract Quality
14.6 / 25
Developer Ergonomics
4.3 / 20
Commercial Clarity
3.2 / 20
Operational Transparency
3.8 / 13
Governance
0.0 / 12
Discoverability
6.3 / 10
Agent readiness — 34/100 · agent aware
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
0 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
0 / 8
Request/Response Examples partial
3.5 / 7
Rate-Limit Signaling documented
3.5 / 7
Typed Event Surface
0 / 6
Agent Skills
0 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
34
OneLogin Thin agent aware Enterprise IAM & Workforce Identity
OneLogin is an identity and access management platform providing single sign-on (SSO), multi-factor authentication, user provisioning, and a RESTful API for ...
Composite
31.9
Agent
33.8
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 31.9/100 · thin
Contract Quality
13.5 / 25
Developer Ergonomics
6.1 / 20
Commercial Clarity
3.2 / 20
Operational Transparency
1.7 / 13
Governance
0.0 / 12
Discoverability
7.4 / 10
Agent readiness — 34/100 · agent aware
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
0 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
0 / 8
Request/Response Examples partial
3.5 / 7
Rate-Limit Signaling documented
3.5 / 7
Typed Event Surface
0 / 6
Agent Skills
0 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
35
Nevis Thin agent aware Developer-First CIAM
Nevis (Nevis Security AG) is a Swiss customer identity and access management (CIAM) and passwordless authentication provider. Its Authentication Cloud adds p...
Composite
31.7
Agent
11.7
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 31.7/100 · thin
Contract Quality
0.0 / 25
Developer Ergonomics
12.6 / 20
Commercial Clarity
4.2 / 20
Operational Transparency
5.8 / 13
Governance
1.5 / 12
Discoverability
7.6 / 10
Agent readiness — 12/100 · agent aware
Machine-Readable Contract
0 / 18
Agentic Access Contract
0 / 10
MCP Server derived
3.0 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
0 / 8
Request/Response Examples
0 / 7
Rate-Limit Signaling
0 / 7
Typed Event Surface
0 / 6
Agent Skills
0 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
36
Ory Thin agent ready Open Source Identity Servers
Ory is an open source identity infrastructure platform providing OAuth2 and OpenID Connect (Hydra), identity and user management (Kratos), permissions and au...
Composite
31.3
Agent
51.8
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 31.3/100 · thin
Contract Quality
12.3 / 25
Developer Ergonomics
6.1 / 20
Commercial Clarity
4.7 / 20
Operational Transparency
1.7 / 13
Governance
0.0 / 12
Discoverability
6.5 / 10
Agent readiness — 52/100 · agent ready
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
12 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
8.0 / 8
Request/Response Examples partial
3.5 / 7
Rate-Limit Signaling documented
3.5 / 7
Typed Event Surface
0 / 6
Agent Skills
0 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
37
Duo Security Thin agent aware Enterprise IAM & Workforce Identity
Duo Security is a multi-factor authentication and zero trust security platform from Cisco for securing access to applications and APIs.
Composite
30.5
Agent
30.6
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 30.5/100 · thin
Contract Quality
14.1 / 25
Developer Ergonomics
4.3 / 20
Commercial Clarity
4.7 / 20
Operational Transparency
1.7 / 13
Governance
0.0 / 12
Discoverability
5.6 / 10
Agent readiness — 31/100 · agent aware
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
0 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
0 / 8
Request/Response Examples
0 / 7
Rate-Limit Signaling documented
3.5 / 7
Typed Event Surface
0 / 6
Agent Skills
0 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
38
Microsoft Entra ID Thin agent aware Cloud Platform Identity
Microsoft Entra ID (formerly Azure AD) is a cloud-based identity and access management service for authenticating and authorizing users and applications with...
Composite
29.3
Agent
33.8
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 29.3/100 · thin
Contract Quality
13.8 / 25
Developer Ergonomics
4.3 / 20
Commercial Clarity
4.7 / 20
Operational Transparency
1.7 / 13
Governance
0.0 / 12
Discoverability
4.6 / 10
Agent readiness — 34/100 · agent aware
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
0 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
0 / 8
Request/Response Examples partial
3.5 / 7
Rate-Limit Signaling documented
3.5 / 7
Typed Event Surface
0 / 6
Agent Skills
0 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
Emerging 2 13 – 27.9 More than an index entry but still mostly links rather than artifacts.
39
Magic Emerging agent aware Developer-First CIAM
Magic is an embedded-wallet and authentication platform offering passwordless login (magic links, OAuth, WebAuthn, SMS) plus white-label Embedded Wallets and...
Composite
27.3
Agent
30.6
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 27.3/100 · emerging
Contract Quality
14.9 / 25
Developer Ergonomics
2.6 / 20
Commercial Clarity
3.2 / 20
Operational Transparency
0.7 / 13
Governance
0.0 / 12
Discoverability
7.4 / 10
Regulatory · Payments
2.8 / 15
Agent readiness — 31/100 · agent aware
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
0 / 12
Machine-Readable Auth
10 / 10
Idempotency
0 / 9
Stable Error Semantics
0 / 8
Request/Response Examples
0 / 7
Rate-Limit Signaling documented
3.5 / 7
Typed Event Surface
0 / 6
Agent Skills
0 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4
40
OpenFGA Emerging agent aware Authorization & Policy Engines
OpenFGA is a CNCF incubating high-performance authorization system implementing fine-grained access control based on the Zanzibar model. It provides a flexib...
Composite
27.0
Agent
21.6
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Composite quality — 27.0/100 · emerging
Contract Quality
12.0 / 25
Developer Ergonomics
2.2 / 20
Commercial Clarity
3.2 / 20
Operational Transparency
1.7 / 13
Governance
0.0 / 12
Discoverability
8.0 / 10
Agent readiness — 22/100 · agent aware
Machine-Readable Contract
18 / 18
Agentic Access Contract derived
2.5 / 10
MCP Server
0 / 12
Machine-Readable Auth
0 / 10
Idempotency
0 / 9
Stable Error Semantics
0 / 8
Request/Response Examples
0 / 7
Rate-Limit Signaling documented
3.5 / 7
Typed Event Surface
0 / 6
Agent Skills
0 / 5
Well-Known Catalog
0 / 4
Consent & Bot Identity
0 / 3
A2A Agent Card
0 / 8
Dry-Run / Simulate Mode
0 / 4