Frontegg
Frontegg is a customer identity and access management (CIAM) platform for B2B SaaS. It provides self-serve authentication, multi-tenancy, role-based access control, single sign-on, SCIM provisioning, entitlements, and an admin portal that ships with the product. Frontegg publishes OpenAPI specifications for its Authentication and Identity, Account Management, Single Sign-On, SCIM Provisioning, Applications, Audits, Entitlements, Entitlements Agent (PDP), and Environment Authentication APIs, all served from regional gateway endpoints (api.frontegg.com, api.us.frontegg.com, api.au.frontegg.com, api.ca.frontegg.com).
Real signal across most facets with visible, nameable gaps — the contract exists but is thin, or the portal is good while governance and commercial terms are absent.
API Evangelist profiles Frontegg the way a machine reads it — 136 machine-readable artifacts across 64 APIs, pulled from the provider's own public surface and indexed so a developer, an analyst, or an AI agent can evaluate it against every other provider on the network.
Every provider in the network is reduced to the same set of machine-readable artifacts — OpenAPI contracts, event specifications, GraphQL schemas, runnable collections, pricing and rate-limit signals, security posture, OAuth scopes, and the agent surfaces (MCP servers and skills) that let software drive the API on its own. We profile them because the interface is the part of a company you can actually inspect: it is a truer signal of what a provider does than any marketing page. From those artifacts we compute the Kin Score — Frontegg scores 59.4/100 (developing), with a separate agent-readiness read of 54/100 (agent ready). The full breakdown is below, followed by every artifact we hold — each card links through to its machine-readable definition on apis.io.
Kin Score
This is the API Evangelist rating — a single, repeatable read computed from the artifacts on this page. Green fill is points earned; the red track is points possible, so every bar shows earned-versus-possible at a glance.
Kin Score
How this is scored →scored 2026-07-27 · rubric v0.5
How we profile Frontegg
Each block below is one kind of artifact we hold for Frontegg. For each we say what it is and why it earns a place in the profile, then list every one we've indexed — capped at two rows, scroll within the panel for the rest.
APIs 64
Each API is captured as its own OpenAPI definition — every operation, parameter, and response. This is the single most useful machine-readable description of what an API does, and it's what lets us score, lint, mock, and generate against it without asking the provider for anything.
Individual APIs this provider publishes, each with its own machine-readable definition.
Frontegg Webhooks
AsyncAPI 2.6 description of Frontegg's outbound webhook surface. Covers authentication, MFA, user lifecycle, tenant lifecycle, group, application, plan, API token, account secur...
Frontegg Account Invitations API
The Account Invitations API from Frontegg — 4 operation(s) for account invitations.
Frontegg Account Invitations Settings API
The Account Invitations Settings API from Frontegg — 5 operation(s) for account invitations settings.
Frontegg Account Migration API
The Account Migration API from Frontegg — 2 operation(s) for account migration.
Frontegg Account Roles API
The Account Roles API from Frontegg — 3 operation(s) for account roles.
Frontegg Account Settings API
The Account Settings API from Frontegg — 2 operation(s) for account settings.
Frontegg Accounts API
The Accounts API from Frontegg — 6 operation(s) for accounts.
Frontegg API Access Control API
The API Access Control API from Frontegg — 4 operation(s) for api access control.
Frontegg API Access Control Configurations API
The API Access Control Configurations API from Frontegg — 1 operation(s) for api access control configurations.
Frontegg API Token API
The API Token API from Frontegg — 2 operation(s) for api token.
Frontegg API Tokens API
The API Tokens API from Frontegg — 5 operation(s) for api tokens.
Frontegg Applications Settings API
The Applications Settings API from Frontegg — 13 operation(s) for applications settings.
Frontegg Approval Flows API
The Approval Flows API from Frontegg — 6 operation(s) for approval flows.
Frontegg Authenticate With Env Credentials API
The Authenticate With Env Credentials API from Frontegg — 1 operation(s) for authenticate with env credentials.
Frontegg Core Settings API
The Core Settings API from Frontegg — 7 operation(s) for core settings.
Frontegg Custom Social OAuth Provider API
The Custom Social OAuth Provider API from Frontegg — 2 operation(s) for custom social oauth provider.
Frontegg Data Migration API
The Data Migration API from Frontegg — 5 operation(s) for data migration.
Frontegg Delegation API
The Delegation API from Frontegg — 1 operation(s) for delegation.
Frontegg Domain Restrictions API
The Domain Restrictions API from Frontegg — 4 operation(s) for domain restrictions.
Frontegg Email Configuration API
The Email Configuration API from Frontegg — 2 operation(s) for email configuration.
Frontegg Email Templates API
The Email Templates API from Frontegg — 3 operation(s) for email templates.
Frontegg Entitlements API
The Entitlements API from Frontegg — 3 operation(s) for entitlements.
Frontegg Entitlements Check API
The Entitlements Check API from Frontegg — 3 operation(s) for entitlements check.
Frontegg Feature Flags API
The Feature Flags API from Frontegg — 2 operation(s) for feature flags.
Frontegg Features API
The Features API from Frontegg — 4 operation(s) for features.
Frontegg General API
The General API from Frontegg — 5 operation(s) for general.
Frontegg IP Restrictions API
The IP Restrictions API from Frontegg — 5 operation(s) for ip restrictions.
Frontegg Lockout Policy API
The Lockout Policy API from Frontegg — 1 operation(s) for lockout policy.
Frontegg M2M Tokens API
The M2M Tokens API from Frontegg — 3 operation(s) for m2m tokens.
Frontegg Main API
The Main API from Frontegg — 6 operation(s) for main.
Frontegg Metrics API
The Metrics API from Frontegg — 1 operation(s) for metrics.
Frontegg MFA API
The MFA API from Frontegg — 26 operation(s) for mfa.
Frontegg MFA Configuration API
The MFA Configuration API from Frontegg — 1 operation(s) for mfa configuration.
Frontegg MFA Settings API
The MFA Settings API from Frontegg — 2 operation(s) for mfa settings.
Frontegg OIDC Configurations API
The OIDC Configurations API from Frontegg — 1 operation(s) for oidc configurations.
Frontegg Password Settings API
The Password Settings API from Frontegg — 11 operation(s) for password settings.
Frontegg Passwordless API
The Passwordless API from Frontegg — 6 operation(s) for passwordless.
Frontegg Permissions API
The Permissions API from Frontegg — 4 operation(s) for permissions.
Frontegg Permissions Categories API
The Permissions Categories API from Frontegg — 2 operation(s) for permissions categories.
Frontegg Personal Tokens API
The Personal Tokens API from Frontegg — 4 operation(s) for personal tokens.
Frontegg Plans API
The Plans API from Frontegg — 6 operation(s) for plans.
Frontegg ReBAC API
The ReBAC API from Frontegg — 9 operation(s) for rebac.
Frontegg Resources API
The Resources API from Frontegg — 1 operation(s) for resources.
Frontegg Roles API
The Roles API from Frontegg — 4 operation(s) for roles.
Frontegg SAML Configurations API
The SAML Configurations API from Frontegg — 2 operation(s) for saml configurations.
Frontegg SCIM Configurations API
The SCIM Configurations API from Frontegg — 2 operation(s) for scim configurations.
Frontegg SCIM Settings API
The SCIM Settings API from Frontegg — 1 operation(s) for scim settings.
Frontegg Sessions Configuration API
The Sessions Configuration API from Frontegg — 1 operation(s) for sessions configuration.
Frontegg Sessions Management API
The Sessions Management API from Frontegg — 1 operation(s) for sessions management.
Frontegg SMS API
The SMS API from Frontegg — 7 operation(s) for sms.
Frontegg SMS Configuration API
The SMS Configuration API from Frontegg — 1 operation(s) for sms configuration.
Frontegg SMS Templates API
The SMS Templates API from Frontegg — 4 operation(s) for sms templates.
Frontegg SSO Configurations API
The SSO Configurations API from Frontegg — 12 operation(s) for sso configurations.
Frontegg SSO Settings API
The SSO Settings API from Frontegg — 6 operation(s) for sso settings.
Frontegg Sub-accounts and Hierarchy API
The Sub-accounts and Hierarchy API from Frontegg — 1 operation(s) for sub-accounts and hierarchy.
Frontegg Sub-accounts API
The Sub-accounts API from Frontegg — 7 operation(s) for sub-accounts.
Frontegg Tenants_other API
The Tenants_other API from Frontegg — 1 operation(s) for tenants_other.
Frontegg User Emails Policy API
The User Emails Policy API from Frontegg — 1 operation(s) for user emails policy.
Frontegg User Groups API
The User Groups API from Frontegg — 7 operation(s) for user groups.
Frontegg User Management API
The User Management API from Frontegg — 42 operation(s) for user management.
Frontegg User Pools API
The User Pools API from Frontegg — 15 operation(s) for user pools.
Frontegg User Sessions API
The User Sessions API from Frontegg — 3 operation(s) for user sessions.
Frontegg Users API
The Users API from Frontegg — 25 operation(s) for users.
Frontegg Users-applications Management API
The Users-applications Management API from Frontegg — 4 operation(s) for users-applications management.
Scroll within the panel for all 64 ·
Open Collections 10
Open, tool-agnostic collections carry the same runnable value as Postman without locking you to one client — the portable, forkable form of the same exercise.
Open, tool-agnostic API collections (OpenAPI-derived and Bruno).
Multi-Apps Overview
OPEN COLLECTIONAudits Overview
OPEN COLLECTIONEntitlements Agent (PDP)
OPEN COLLECTIONEntitlements Agent (PDP)
OPEN COLLECTIONEntitlements Overview
OPEN COLLECTIONAuthenticate with env credentials
OPEN COLLECTIONAuthentication and Identity Management
OPEN COLLECTIONSCIM Provisioning Overview
OPEN COLLECTIONSingle Sign-On Overview
OPEN COLLECTIONAccount Management Overview
OPEN COLLECTIONScroll within the panel for all 10 ·
Pricing Plans 1
Pricing is part of the interface. Machine-readable plans tell you what a tier costs and includes before you commit — one of the six things the Kin Score reads for commercial clarity.
Published pricing tiers and plan structures.
Rate Limits 1
Rate limits are the difference between a demo that works and a production integration that doesn't fall over. Publishing them is an operational-transparency signal — and a hard requirement for any agent that plans its own throughput.
Documented rate limits and quota policies.
Frontegg Rate Limits
RATE LIMITSFinOps 1
Cost, billing, and metering signals let a buyer model the financial operations of an API before it's live. We profile them for the same reason we profile pricing: the money is part of the contract.
Cost, billing, and metering signals for API financial operations.
Frontegg Finops
FINOPSEvent Specifications 1
Not every API is request/response. AsyncAPI describes the event-driven and streaming side — the webhooks and channels — so the asynchronous half of the interface is documented the same way the synchronous half is.
AsyncAPI definitions for this provider's event-driven and streaming APIs.
Frontegg Webhooks
AsyncAPI 2.6 description of Frontegg's outbound webhook surface. Frontegg signs each delivery with an `x-webhook-secret` header containing the configured signing secret, and tre...
ASYNCAPISemantic Vocabularies 1
JSON-LD contexts give the data shared meaning across APIs. We profile them because semantics are what let a machine reconcile 'customer' here with 'customer' somewhere else.
JSON-LD contexts and semantic vocabularies used across these APIs.
Frontegg Context
JSON-LDSpectral Rules 11
Governance rulesets we run against this provider's specs — the automated checks behind parts of the score. Profiling them makes the quality bar explicit and re-runnable, not a matter of opinion.
Frontegg API Rules
SPECTRALFrontegg API Rules
SPECTRALFrontegg API Rules
SPECTRALFrontegg API Rules
SPECTRALFrontegg API Rules
SPECTRALFrontegg API Rules
SPECTRALFrontegg API Rules
SPECTRALFrontegg API Rules
SPECTRALFrontegg API Rules
SPECTRALFrontegg API Rules
SPECTRALFrontegg API Rules
SPECTRALScroll within the panel for all 11 ·
JSON Schema 15
Standalone JSON Schema definitions describe the data models behind the API. We profile them so the shapes are validatable on their own — useful long after a single request is forgotten.
Standalone JSON Schema definitions for this provider's data models.
ApplicationsResponse
JSON SCHEMAApplicationsTenantAssignmentResponseV1
JSON SCHEMAAuditRequest
JSON SCHEMAEntitlementPlan
JSON SCHEMAFeatureFlagDtoThin
JSON SCHEMAPlanFeatureDto
JSON SCHEMAAddRolesToPermissionRequest
JSON SCHEMACreateUserAccessTokenRequest
JSON SCHEMAPermissionResponse
JSON SCHEMACreateSSOConfigurationRequestDto
JSON SCHEMAVendorSamlConfigurationResponse
JSON SCHEMACreateTenantRequest
JSON SCHEMAUpdateSubTenantHierarchySettingsRequest
JSON SCHEMAUpdateTenantRequest
JSON SCHEMAScroll within the panel for all 15 ·
JSON Structure 11
JSON Structure captures the data shapes in a form built for tooling — a complement to JSON Schema that keeps the model machine-legible.
JSON Structure definitions describing this provider's data shapes.
Frontegg Application Structure
JSON STRUCTUREFrontegg Audit Event Structure
JSON STRUCTUREFrontegg Entitlement Structure
JSON STRUCTUREFrontegg Permission Structure
JSON STRUCTUREFrontegg Plan Structure
JSON STRUCTUREFrontegg Role Structure
JSON STRUCTUREFrontegg Scim Config Structure
JSON STRUCTUREFrontegg Sso Config Structure
JSON STRUCTUREFrontegg Tenant Structure
JSON STRUCTUREFrontegg User Structure
JSON STRUCTUREFrontegg Vendor Token Structure
JSON STRUCTUREScroll within the panel for all 11 ·
Examples 17
Real request and response payloads are what turn a spec from abstract into obvious — and they're one of the twelve things an agent needs to call an API correctly on the first try.
Example request and response payloads for these APIs.
Frontegg Application Example
EXAMPLEFrontegg Audit Event Example
EXAMPLEFrontegg Invite User Example
EXAMPLEFrontegg Mfa Enroll Example
EXAMPLEFrontegg Permission Example
EXAMPLEFrontegg Plan Example
EXAMPLEFrontegg Role Example
EXAMPLEFrontegg Scim Config Example
EXAMPLEFrontegg Sso Config Example
EXAMPLEFrontegg Tenant Example
EXAMPLEFrontegg User Example
EXAMPLEFrontegg Vendor Auth Example
EXAMPLEScroll within the panel for all 17 ·
Security Posture 2
Authentication, domain security, vulnerability disclosure, and trust-center signals — the evidence that a provider takes security seriously enough to document it. We profile it because you can't govern what you can't see.
Authentication, domain security, vulnerability disclosure, and trust-center signals.
Agentic Access 1
An x-agentic-access contract marks which operations are safe for an agent to run on its own and which need a human in the loop. It is the difference between an API an agent can use and one it can use safely.
Recommended x-agentic-access execution contracts for AI agents.
Resources
Every other property we hold for Frontegg — documentation, portals, status pages, policies, and corporate surface — grouped by the job it does, following the integrator's arc from getting started to running in production.
Get Started 3
Portal, sign-up, and the first successful call
Documentation 3
Reference material describing how the API behaves
Agent Surfaces 2
MCP servers, agent skills, and machine-readable catalogs
Design & Contract 2
Pagination, idempotency, versioning, errors, and events
Build 14
SDKs, sample code, and the tooling you integrate with
Scroll within the panel for all 14 ·
Access & Security 2
Authentication, authorization, and security posture
Operate 4
Status, limits, changes, and where to get help
Commercial 3
Pricing, plans, and the legal terms of use
Company 1
The organization behind the API
← All providers · Data indexed from github.com/api-evangelist/frontegg · machine-readable index on apis.io