Cisco Umbrella
Cisco Umbrella, built on the OpenDNS platform Cisco acquired in 2015 and now sold within Cisco Secure Access, is Cisco's cloud-delivered security service: DNS-layer security, secure web gateway, cloud-delivered firewall, CASB (Cisco Cloudlock) and remote browser isolation. Cisco publishes a full OAuth 2.0 client-credentials REST API at api.umbrella.com, split into five scopes — admin, auth, deployments, investigate, policies and reports — and documents it under the Cloud Security section of Cisco DevNet, where 26 first-party OpenAPI 3.0 documents covering 256 operations are published for download. The surface spans key and user administration, MSP/provider consoles, network and tunnel deployment, roaming computers and virtual appliances, destination and application lists, DNS/web/firewall reporting, app discovery, and the Umbrella Investigate threat-intelligence API.
Solid contracts, transparent operations, and an easy start — typically complete on four or five facets with one clear soft spot.
API Evangelist profiles Cisco Umbrella the way a machine reads it — 92 machine-readable artifacts across 52 APIs, pulled from the provider's own public surface and indexed so a developer, an analyst, or an AI agent can evaluate it against every other provider on the network.
Every provider in the network is reduced to the same set of machine-readable artifacts — OpenAPI contracts, event specifications, GraphQL schemas, runnable collections, pricing and rate-limit signals, security posture, OAuth scopes, and the agent surfaces (MCP servers and skills) that let software drive the API on its own. We profile them because the interface is the part of a company you can actually inspect: it is a truer signal of what a provider does than any marketing page. From those artifacts we compute the Kin Score — Cisco Umbrella scores 62.6/100 (strong), with a separate agent-readiness read of 30/100 (agent ready). The full breakdown is below, followed by every artifact we hold — each card links through to its machine-readable definition on apis.io.
Kin Score
This is the API Evangelist rating — a single, repeatable read computed from the artifacts on this page. Green fill is points earned; the red track is points possible, so every bar shows earned-versus-possible at a glance. Every facet and dimension name is a link: it opens that measurement's page on APIs.io, where the rating runs across the whole catalog — the exact checks that feed it, how every profiled provider distributes on it, and who is at the top of it.
Kin Score
How this is scored →scored 2026-10-04 · rubric v0.23.0
Put this on your own site. The badge is drawn live from Cisco Umbrella's current Kin Score — paste it once and it updates itself every time the score is recomputed. It follows your visitor's light or dark setting, and it links back here so anyone who sees it can read the full breakdown.
<!-- Kin Score · API Evangelist -->
<a href="https://providers.apievangelist.com/providers/cisco-umbrella/"
title="Cisco Umbrella on API Evangelist — API profile and Kin Score">
<img src="https://apis.io/badge/cisco-umbrella.svg"
alt="Cisco Umbrella Kin Score — API readiness rating by API Evangelist" width="150" height="150" loading="lazy">
</a>[](https://providers.apievangelist.com/providers/cisco-umbrella/)<!-- Kin Score · API Evangelist -->
<a href="https://providers.apievangelist.com/providers/cisco-umbrella/"
title="Cisco Umbrella on API Evangelist — API profile and Kin Score">
<img src="https://apis.io/badge/cisco-umbrella/card.svg"
alt="Cisco Umbrella Kin Score — API readiness rating by API Evangelist" width="340" height="120" loading="lazy">
</a>More shapes, themes and sizes → · Score as JSON · How badges work
How we profile Cisco Umbrella
Each block below is one kind of artifact we hold for Cisco Umbrella. For each we say what it is and why it earns a place in the profile, then list every one we've indexed — capped at two rows, scroll within the panel for the rest.
APIs 85
Each API is captured as its own OpenAPI definition — every operation, parameter, and response. This is the single most useful machine-readable description of what an API does, and it's what lets us score, lint, mock, and generate against it without asking the provider for anything.
Individual APIs this provider publishes, each with its own machine-readable definition.
Cisco Umbrella Activities API
The Activities API from Cisco Umbrella — 1 operation(s) for activities.
Cisco Umbrella Activity API
The Activity API from Cisco Umbrella — 7 operation(s) for activity.
Cisco Umbrella API Keys API
The API Keys API from Cisco Umbrella — 3 operation(s) for api keys.
Cisco Umbrella API Usage Report API
API Usage reports
Cisco Umbrella Application Categories API
The Application Categories API from Cisco Umbrella — 1 operation(s) for application categories.
Cisco Umbrella Application Lists API
Manage the application lists and the internet destinations in the application lists.
Cisco Umbrella Applications API
The Applications API from Cisco Umbrella — 6 operation(s) for applications.
Cisco Umbrella Apps API
The Apps API from Cisco Umbrella — 4 operation(s) for apps.
Cisco Umbrella AS Information for a Domain API
The AS Information for a Domain API from Cisco Umbrella — 2 operation(s) for as information for a domain.
Cisco Umbrella Bandwidth by Hour API
The Bandwidth by Hour API from Cisco Umbrella — 1 operation(s) for bandwidth by hour.
Cisco Umbrella Bandwidth by Timerange API
The Bandwidth by Timerange API from Cisco Umbrella — 1 operation(s) for bandwidth by timerange.
Cisco Umbrella Cisco Secure Malware Analytics Integration API
The Cisco Secure Malware Analytics Integration API from Cisco Umbrella — 5 operation(s) for cisco secure malware analytics integration.
Cisco Umbrella Cnames API
The Cnames API from Cisco Umbrella — 2 operation(s) for cnames.
Cisco Umbrella Co-occurrences for a Domain API
The Co-occurrences for a Domain API from Cisco Umbrella — 1 operation(s) for co-occurrences for a domain.
Cisco Umbrella Contacts API
The Contacts API from Cisco Umbrella — 2 operation(s) for contacts.
Cisco Umbrella Data Center API
The Data Center API from Cisco Umbrella — 1 operation(s) for data center.
Cisco Umbrella Debugging API
The Debugging API from Cisco Umbrella — 4 operation(s) for debugging.
Cisco Umbrella Deployment Status API
The Deployment Status API from Cisco Umbrella — 1 operation(s) for deployment status.
Cisco Umbrella Destination Lists API
Destination Lists
Cisco Umbrella Destinations API
Destinations
Cisco Umbrella Domain Status and Categorization API
The Domain Status and Categorization API from Cisco Umbrella — 2 operation(s) for domain status and categorization.
Cisco Umbrella Domain Volume API
The Domain Volume API from Cisco Umbrella — 1 operation(s) for domain volume.
Cisco Umbrella Entities API
The Entities API from Cisco Umbrella — 1 operation(s) for entities.
Cisco Umbrella Identities API
The Identities API from Cisco Umbrella — 1 operation(s) for identities.
Cisco Umbrella Identity Distribution API
The Identity Distribution API from Cisco Umbrella — 2 operation(s) for identity distribution.
Cisco Umbrella Incident Aggregates API
The Incident Aggregates API from Cisco Umbrella — 3 operation(s) for incident aggregates.
Cisco Umbrella Incident Entities API
The Incident Entities API from Cisco Umbrella — 1 operation(s) for incident entities.
Cisco Umbrella Incidents API
The Incidents API from Cisco Umbrella — 2 operation(s) for incidents.
Cisco Umbrella Internal Domains API
The Internal Domains API from Cisco Umbrella — 2 operation(s) for internal domains.
Cisco Umbrella Internal Networks API
The Internal Networks API from Cisco Umbrella — 3 operation(s) for internal networks.
Cisco Umbrella IP Libraries API
The IP Libraries API from Cisco Umbrella — 4 operation(s) for ip libraries.
Cisco Umbrella Logos API
The Logos API from Cisco Umbrella — 2 operation(s) for logos.
Cisco Umbrella Managed Providers API
The Managed Providers API from Cisco Umbrella — 2 operation(s) for managed providers.
Cisco Umbrella Network Devices API
Umbrella Network Device Management
Cisco Umbrella Networks API
The Networks API from Cisco Umbrella — 3 operation(s) for networks.
Cisco Umbrella Organization Information API
The Organization Information API from Cisco Umbrella — 1 operation(s) for organization information.
Cisco Umbrella Organization Requests by Hour and Category API
The Organization Requests by Hour and Category API from Cisco Umbrella — 2 operation(s) for organization requests by hour and category.
Cisco Umbrella Organization Requests by Hour API
The Organization Requests by Hour API from Cisco Umbrella — 2 operation(s) for organization requests by hour.
Cisco Umbrella Organization Requests by Timerange and Category API
The Organization Requests by Timerange and Category API from Cisco Umbrella — 2 operation(s) for organization requests by timerange and category.
Cisco Umbrella Organization Requests by Timerange API
The Organization Requests by Timerange API from Cisco Umbrella — 2 operation(s) for organization requests by timerange.
Cisco Umbrella Organization Tunnel API
The Organization Tunnel API from Cisco Umbrella — 4 operation(s) for organization tunnel.
Cisco Umbrella Passive DNS API
The Passive DNS API from Cisco Umbrella — 4 operation(s) for passive dns.
Cisco Umbrella Policies API
The Policies API from Cisco Umbrella — 1 operation(s) for policies.
Cisco Umbrella Policy API
Umbrella Policy Management
Cisco Umbrella Popularity List-Top Million Domains API
The Popularity List-Top Million Domains API from Cisco Umbrella — 1 operation(s) for popularity list-top million domains.
Cisco Umbrella Protocols API
The Protocols API from Cisco Umbrella — 2 operation(s) for protocols.
Cisco Umbrella Provider Category Requests by Organization API
The Provider Category Requests by Organization API from Cisco Umbrella — 1 operation(s) for provider category requests by organization.
Cisco Umbrella Provider Deployment Status API
The Provider Deployment Status API from Cisco Umbrella — 1 operation(s) for provider deployment status.
Cisco Umbrella Provider Requests by Category API
The Provider Requests by Category API from Cisco Umbrella — 1 operation(s) for provider requests by category.
Cisco Umbrella Provider Requests by Destination API
The Provider Requests by Destination API from Cisco Umbrella — 1 operation(s) for provider requests by destination.
Cisco Umbrella Provider Requests by Hour API
The Provider Requests by Hour API from Cisco Umbrella — 1 operation(s) for provider requests by hour.
Cisco Umbrella Provider Requests by Organization API
The Provider Requests by Organization API from Cisco Umbrella — 1 operation(s) for provider requests by organization.
Cisco Umbrella Provider Requests by Timerange API
The Provider Requests by Timerange API from Cisco Umbrella — 1 operation(s) for provider requests by timerange.
Cisco Umbrella Providers API
The Providers API from Cisco Umbrella — 14 operation(s) for providers.
Cisco Umbrella Related Domains for a Domain API
The Related Domains for a Domain API from Cisco Umbrella — 1 operation(s) for related domains for a domain.
Cisco Umbrella Roaming Computers API
The Roaming Computers API from Cisco Umbrella — 2 operation(s) for roaming computers.
Cisco Umbrella Roles API
The Roles API from Cisco Umbrella — 1 operation(s) for roles.
Cisco Umbrella S3 Bucket Key Rotation API
The S3 Bucket Key Rotation API from Cisco Umbrella — 1 operation(s) for s3 bucket key rotation.
Cisco Umbrella Search Domain API
The Search Domain API from Cisco Umbrella — 1 operation(s) for search domain.
Cisco Umbrella Security Information for a Domain API
The Security Information for a Domain API from Cisco Umbrella — 2 operation(s) for security information for a domain.
Cisco Umbrella Sites API
The Sites API from Cisco Umbrella — 2 operation(s) for sites.
Cisco Umbrella Subdomains for a Domain API
The Subdomains for a Domain API from Cisco Umbrella — 1 operation(s) for subdomains for a domain.
Cisco Umbrella Summaries by Category API
The Summaries by Category API from Cisco Umbrella — 2 operation(s) for summaries by category.
Cisco Umbrella Summaries by Destination API
The Summaries by Destination API from Cisco Umbrella — 2 operation(s) for summaries by destination.
Cisco Umbrella Summaries by Rule (Intrusion) API
The Summaries by Rule (Intrusion) API from Cisco Umbrella — 1 operation(s) for summaries by rule (intrusion).
Cisco Umbrella Summary API
The Summary API from Cisco Umbrella — 2 operation(s) for summary.
Cisco Umbrella SWG Device Settings API
Secure Web Gateway (SWG) device settings
Cisco Umbrella Tag Devices API
Manage the roaming computers in the Umbrella organization that have a tag.
Cisco Umbrella Tagging Timeline API
The Tagging Timeline API from Cisco Umbrella — 1 operation(s) for tagging timeline.
Cisco Umbrella Tags API
Manage the tags in the organization.
Cisco Umbrella Token API
The Token API from Cisco Umbrella — 1 operation(s) for token.
Cisco Umbrella Top Categories API
The Top Categories API from Cisco Umbrella — 2 operation(s) for top categories.
Cisco Umbrella Top Destinations API
The Top Destinations API from Cisco Umbrella — 3 operation(s) for top destinations.
Cisco Umbrella Top DNS Query Types API
The Top DNS Query Types API from Cisco Umbrella — 1 operation(s) for top dns query types.
Cisco Umbrella Top Event Types API
The Top Event Types API from Cisco Umbrella — 1 operation(s) for top event types.
Cisco Umbrella Top Files API
The Top Files API from Cisco Umbrella — 1 operation(s) for top files.
Cisco Umbrella Top Identities API
The Top Identities API from Cisco Umbrella — 2 operation(s) for top identities.
Cisco Umbrella Top IPs API
The Top IPs API from Cisco Umbrella — 2 operation(s) for top ips.
Cisco Umbrella Top Threat Types API
The Top Threat Types API from Cisco Umbrella — 2 operation(s) for top threat types.
Cisco Umbrella Top Threats API
The Top Threats API from Cisco Umbrella — 2 operation(s) for top threats.
Cisco Umbrella Total Requests API
The Total Requests API from Cisco Umbrella — 2 operation(s) for total requests.
Cisco Umbrella Users API
The Users API from Cisco Umbrella — 4 operation(s) for users.
Cisco Umbrella Utility API
The Utility API from Cisco Umbrella — 9 operation(s) for utility.
Cisco Umbrella Virtual Appliances API
The Virtual Appliances API from Cisco Umbrella — 2 operation(s) for virtual appliances.
Cisco Umbrella WHOIS Information for a Domain API
The WHOIS Information for a Domain API from Cisco Umbrella — 6 operation(s) for whois information for a domain.
Scroll within the panel for all 85 ·
Pricing Plans 1
Pricing is part of the interface. Machine-readable plans tell you what a tier costs and includes before you commit — one of the things the Kin Score reads for access clarity — renamed from commercial clarity in rubric 0.12, because a free statutory interface has access terms and no commercial ones.
Published pricing tiers and plan structures.
Rate Limits 1
Rate limits are the difference between a demo that works and a production integration that doesn't fall over. Publishing them is an operational-transparency signal — and a hard requirement for any agent that plans its own throughput.
Documented rate limits and quota policies.
Cisco Umbrella Rate Limits
RATE LIMITSSecurity Posture 4
Authentication, domain security, vulnerability disclosure, and trust-center signals — the evidence that a provider takes security seriously enough to document it. We profile it because you can't govern what you can't see.
Authentication, domain security, vulnerability disclosure, and trust-center signals.
Scopes 1
OAuth scopes are the vocabulary of least-privilege access. Profiling them shows exactly what an integration — or an agent acting on a user's behalf — is allowed to do.
OAuth scopes governing access to this provider's APIs.
Resources
Every other property we hold for Cisco Umbrella — documentation, portals, status pages, policies, and corporate surface — grouped by the job it does, following the integrator's arc from getting started to running in production.
Get Started 6
Portal, sign-up, and the first successful call
Documentation 2
Reference material describing how the API behaves
Agent Surfaces 2
MCP servers, agent skills, and machine-readable catalogs
Design & Contract 5
Pagination, idempotency, versioning, errors, and events
Build 3
SDKs, sample code, and the tooling you integrate with
Access & Security 9
Authentication, authorization, and security posture
Scroll within the panel for all 9 ·
Operate 6
Status, limits, changes, and where to get help
Commercial 4
Pricing, plans, and the legal terms of use
Company 2
The organization behind the API
Other 28
Properties that don't map to a standard resource type
Scroll within the panel for all 28 ·
← All providers · Data indexed from github.com/api-evangelist/cisco-umbrella · machine-readable index on apis.io
This is an independent, third-party profile of Cisco Umbrella, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.
The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.
Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.
info@apievangelist.com
·
Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and
you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.