How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC
ALTR website screenshot

ALTR

ALTR is a unified data security platform that discovers, classifies, masks, tokenizes and monitors sensitive data across Snowflake, Databricks and OLTP databases (PostgreSQL, MySQL, SQL Server, Oracle, MongoDB). The platform combines automated data classification, tag-based and column-based dynamic data masking, role-based access control, access-approval workflows, database activity monitoring with alerting, format-preserving encryption, and both vaulted and PCI-scoped critical tokenization. Everything the console does is exposed through a large public REST surface — a Management API plus purpose-built classification, policy, RBAC, tagging, audit, telemetry and sidecar-configuration services — alongside an official open-source MCP server, a Terraform provider and a Node.js Shield SDK. Founded in 2018 and headquartered in Austin, Texas.

agent ready

Solid contracts, transparent operations, and an easy start — typically complete on four or five facets with one clear soft spot.

Kin Score

API Evangelist profiles ALTR the way a machine reads it — 143 machine-readable artifacts across 69 APIs, pulled from the provider's own public surface and indexed so a developer, an analyst, or an AI agent can evaluate it against every other provider on the network.

Every provider in the network is reduced to the same set of machine-readable artifacts — OpenAPI contracts, event specifications, GraphQL schemas, runnable collections, pricing and rate-limit signals, security posture, OAuth scopes, and the agent surfaces (MCP servers and skills) that let software drive the API on its own. We profile them because the interface is the part of a company you can actually inspect: it is a truer signal of what a provider does than any marketing page. From those artifacts we compute the Kin Score — ALTR scores 59.1/100 (strong), with a separate agent-readiness read of 59/100 (agent ready). The full breakdown is below, followed by every artifact we hold — each card links through to its machine-readable definition on apis.io.

Kin Score

This is the API Evangelist rating — a single, repeatable read computed from the artifacts on this page. Green fill is points earned; the red track is points possible, so every bar shows earned-versus-possible at a glance.

Kin Score Kin Score How this is scored →
scored 2026-08-17 · rubric v0.11.0
Composite quality — 59.1/100 · strong
Contract Quality 16.7 / 25
Developer Ergonomics 15.1 / 20
Commercial Clarity 12.1 / 20
Operational Transparency 5.1 / 13
Governance 1.4 / 12
Discoverability 8.7 / 10
Agent readiness — 59/100 · agent ready
Machine-Readable Contract 18 / 18
Agentic Access Contract derived 2.5 / 10
MCP Server 12 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 8.0 / 8
Request/Response Examples partial 3.5 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 6 / 6
Agent Skills derived 1.3 / 5
Well-Known Catalog 4 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
ALTR Kin Score — API readiness rating by API Evangelist

Put this on your own site. The badge is drawn live from ALTR's current Kin Score — paste it once and it updates itself every time the score is recomputed. It follows your visitor's light or dark setting, and it links back here so anyone who sees it can read the full breakdown.

<!-- Kin Score · API Evangelist -->
<a href="https://providers.apievangelist.com/providers/altr/"
   title="ALTR on API Evangelist — API profile and Kin Score">
  <img src="https://apis.io/badge/altr.svg"
       alt="ALTR Kin Score — API readiness rating by API Evangelist" width="150" height="150" loading="lazy">
</a>

More shapes, themes and sizes → · Score as JSON · How badges work

How we profile ALTR

Each block below is one kind of artifact we hold for ALTR. For each we say what it is and why it earns a place in the profile, then list every one we've indexed — capped at two rows, scroll within the panel for the rest.

APIs 69

Each API is captured as its own OpenAPI definition — every operation, parameter, and response. This is the single most useful machine-readable description of what an API does, and it's what lets us score, lint, mock, and generate against it without asking the provider for anything.

Individual APIs this provider publishes, each with its own machine-readable definition.

Vaulted Tokenization API

Tokenizes and detokenizes sensitive data through ALTR's token vault for analytics and transactional workloads, including bring-your-own-key. The public reference endpoint return...

Key Management API (KMA)

Manages the keys and tweaks used for ALTR Format-Preserving Encryption (FPE). The reference is served per organization at https://.kma.live.altr.com/v1/docs, so...

ALTR MCP Server

Official open-source Model Context Protocol server published by ALTR, exposing 156 tools across 13 domains (databases, tags, policies, classification, access management, access ...

ALTR Access Request API

The access_request API from ALTR — 5 operation(s) for access_request.

ALTR Administrators API

Operations about administrators

ALTR Agent API

The Agent API from ALTR — 2 operation(s) for agent.

ALTR Agent Tasks API

The Agent Tasks API from ALTR — 2 operation(s) for agent tasks.

ALTR Agents API

The Agents API from ALTR — 2 operation(s) for agents.

ALTR Alerts API

The Alerts API from ALTR — 4 operation(s) for alerts.

ALTR ALTR Managed Collections API

The ALTR Managed Collections API from ALTR — 8 operation(s) for altr managed collections.

ALTR Anomalies API

Operations about anomalies

ALTR Apikeys API

Operations about ApiKeys

ALTR Applications API

Operations about applications

ALTR Auth API

The Auth API from ALTR — 3 operation(s) for auth.

ALTR Auto Tagging API API

The Auto Tagging API API from ALTR — 10 operation(s) for auto tagging api.

ALTR Batch API

The batch API from ALTR — 3 operation(s) for batch.

ALTR Classification API

Operations about data classification

ALTR Classification Jobs API

The Classification Jobs API from ALTR — 21 operation(s) for classification jobs.

ALTR Classifiers API

The Classifiers API from ALTR — 5 operation(s) for classifiers.

ALTR Collections API

The Collections API from ALTR — 5 operation(s) for collections.

ALTR Comments API

The Comments API from ALTR — 3 operation(s) for comments.

ALTR Configuration API

Configuration information for the ALTRNet

ALTR Control Plane API

The Control Plane API from ALTR — 1 operation(s) for control plane.

ALTR Data API

Protected, Governed, Tokenized, and FPE Columns Endpoints

ALTR Data Discovery API

Data Classification/Tagging job endpoints

ALTR Data Masking API

Access to column info around available masking types

ALTR Data Tagging API

Information around tagged columns

ALTR Databases API

Operations about data sources

ALTR Databricks Tag Policy API

Operations related to applying tag-based governance policies to Databricks

ALTR Definitions API

The Definitions API from ALTR — 4 operation(s) for definitions.

ALTR Instances API

The Instances API from ALTR — 3 operation(s) for instances.

ALTR Integrations API

The Integrations API from ALTR — 3 operation(s) for integrations.

ALTR Maskingpolicies API

Operations related to masking policies

ALTR Me API

Operations related to the currently logged in administrator

ALTR Metadata API

Operations related to the currently logged in users metadata and current organizations metadata.

ALTR Organization API

Operations about organization

ALTR Plan API

Operations related to the features the organization has

ALTR Policy API

The policy API from ALTR — 13 operation(s) for policy.

ALTR Query Audits API API

The Query Audits API API from ALTR — 2 operation(s) for query audits api.

ALTR Query Dashboard API API

The Query Dashboard API API from ALTR — 2 operation(s) for query dashboard api.

ALTR RBAC API API

The RBAC API API from ALTR — 11 operation(s) for rbac api.

ALTR Refresh Tag Value Job API

The Refresh Tag Value Job API from ALTR — 2 operation(s) for refresh tag value job.

ALTR Repo Users API

The Repo Users API from ALTR — 2 operation(s) for repo users.

ALTR Repos API

The Repos API from ALTR — 2 operation(s) for repos.

ALTR Rowaccess API

Operations related to row access policy

ALTR Rules API

The Rules API from ALTR — 6 operation(s) for rules.

ALTR SCIM API

Operations related to SCIM

ALTR Service Users API

The Service Users API from ALTR — 3 operation(s) for service users.

ALTR Setup Guide API

Operations about the setup-guide

ALTR Sidecar API

The Sidecar API from ALTR — 2 operation(s) for sidecar.

ALTR Sidecar Audit API API

The Sidecar Audit API API from ALTR — 2 operation(s) for sidecar audit api.

ALTR Sidecar Listener Port and Repo bindings API

The Sidecar Listener Port and Repo bindings API from ALTR — 3 operation(s) for sidecar listener port and repo bindings.

ALTR Sidecar Listeners API

The Sidecar Listeners API from ALTR — 2 operation(s) for sidecar listeners.

ALTR Sidecars API

The Sidecars API from ALTR — 2 operation(s) for sidecars.

ALTR Sign Off API

The Sign-Off API from ALTR — 2 operation(s) for sign-off.

ALTR Snowflake Metadata API API

The Snowflake Metadata API API from ALTR — 13 operation(s) for snowflake metadata api.

ALTR SSO API

Operations related to Single Sign-On

ALTR Subscriptions API

The Subscriptions API from ALTR — 3 operation(s) for subscriptions.

ALTR Systemaudits API

Operations related to system audits

ALTR Systemaudits/query API

Operations related to asynchronously querying system audits

ALTR Tag Masking API API

The Tag Masking API API from ALTR — 3 operation(s) for tag masking api.

ALTR Tags API

Operations related to tags

ALTR Task API

The Task API from ALTR — 2 operation(s) for task.

ALTR Tasks API

The Tasks API from ALTR — 3 operation(s) for tasks.

ALTR Thresholds API

Operations about thresholds

ALTR Unsubscribe API

The Unsubscribe API from ALTR — 1 operation(s) for unsubscribe.

ALTR Usergroups API

Operations related to user groups

ALTR Users API

The Users API from ALTR — 3 operation(s) for users.

ALTR Utility API

Access DIS job and third party import information.

Scroll within the panel for all 69 ·

Open Collections 67

Open, tool-agnostic collections carry the same runnable value as Postman without locking you to one client — the portable, forkable form of the same exercise.

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

API Collection

OPEN COLLECTION

ALTR Telemetry Agent API

OPEN COLLECTION

ALTR Management Data API

OPEN COLLECTION

ALTR Management Me API

OPEN COLLECTION

ALTR Management Plan API

OPEN COLLECTION

Unified Policy API

OPEN COLLECTION

RBAC RBAC API API

OPEN COLLECTION

Altr Rules API

OPEN COLLECTION

ALTR Management SCIM API

OPEN COLLECTION

ALTR Management SSO API

OPEN COLLECTION

ALTR Management Tags API

OPEN COLLECTION

ALTR Telemetry Task API

OPEN COLLECTION

Scroll within the panel for all 67 ·

MCP Servers 1

Model Context Protocol servers expose these APIs directly to AI agents. We profile them because agent-native access is the fastest-growing way this provider's capabilities actually get used.

Model Context Protocol servers that expose these APIs to AI agents.

altr-mcp.yml

MCP SERVER

Event Specifications 1

Not every API is request/response. AsyncAPI describes the event-driven and streaming side — the webhooks and channels — so the asynchronous half of the interface is documented the same way the synchronous half is.

AsyncAPI definitions for this provider's event-driven and streaming APIs.

Security Posture 4

Authentication, domain security, vulnerability disclosure, and trust-center signals — the evidence that a provider takes security seriously enough to document it. We profile it because you can't govern what you can't see.

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Altr Authentication

http · 2 schemes

SECURITY

Altr Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Altr Vulnerability Disclosure

Hackerone · security.txt · contact published

SECURITY

Altr Trust Center

SOC 2, PCI DSS, HIPAA

SECURITY

Agentic Access 1

An x-agentic-access contract marks which operations are safe for an agent to run on its own and which need a human in the loop. It is the difference between an API an agent can use and one it can use safely.

Recommended x-agentic-access execution contracts for AI agents.

Altr Agentic Access

375 operations · 190 acting · 10 human-in-the-loop

375 operations · 190 acting

AGENTIC

Resources

Every other property we hold for ALTR — documentation, portals, status pages, policies, and corporate surface — grouped by the job it does, following the integrator's arc from getting started to running in production.

Documentation 2

Reference material describing how the API behaves

Commercial 3

Pricing, plans, and the legal terms of use

Company 2

The organization behind the API

Other 1

Properties that don't map to a standard resource type

← All providers · Data indexed from github.com/api-evangelist/altr · machine-readable index on apis.io

Where this information came from

This is an independent, third-party profile of ALTR, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.