Kiteworks
Kiteworks operates a Private Data Network (PDN) that unifies secure email, secure file sharing, secure web forms, managed file transfer (MFT), and SFTP behind a single hardened virtual appliance with a common governance, encryption, and audit layer. The platform targets regulated industries — government, defense, healthcare, financial services, legal, manufacturing, and higher education — where sensitive content leaving the organization must be tracked and provably compliant with regimes such as CMMC 2.0, FedRAMP, HIPAA, GDPR, and NIST 800-171. Kiteworks exposes its platform through a versioned REST API (currently v28) covering files, folders, mail, web forms, users, admin, SCIM provisioning, and search across roughly 400 endpoints, plus a PubSub webhook service for real-time event delivery and an Apache-2.0 licensed Model Context Protocol (MCP) server that lets AI assistants operate on Kiteworks content under OAuth 2.1. The company was formerly known as Accellion.
Real signal across most facets with visible, nameable gaps — the contract exists but is thin, or the portal is good while governance and commercial terms are absent.
API Evangelist profiles Kiteworks the way a machine reads it — 50 machine-readable artifacts across 41 APIs, pulled from the provider's own public surface and indexed so a developer, an analyst, or an AI agent can evaluate it against every other provider on the network.
Every provider in the network is reduced to the same set of machine-readable artifacts — OpenAPI contracts, event specifications, GraphQL schemas, runnable collections, pricing and rate-limit signals, security posture, OAuth scopes, and the agent surfaces (MCP servers and skills) that let software drive the API on its own. We profile them because the interface is the part of a company you can actually inspect: it is a truer signal of what a provider does than any marketing page. From those artifacts we compute the Kin Score — Kiteworks scores 56.1/100 (developing), with a separate agent-readiness read of 85/100 (agent native). The full breakdown is below, followed by every artifact we hold — each card links through to its machine-readable definition on apis.io.
Kin Score
This is the API Evangelist rating — a single, repeatable read computed from the artifacts on this page. Green fill is points earned; the red track is points possible, so every bar shows earned-versus-possible at a glance.
Kin Score
How this is scored →scored 2026-07-27 · rubric v0.5
How we profile Kiteworks
Each block below is one kind of artifact we hold for Kiteworks. For each we say what it is and why it earns a place in the profile, then list every one we've indexed — capped at two rows, scroll within the panel for the rest.
APIs 41
Each API is captured as its own OpenAPI definition — every operation, parameter, and response. This is the single most useful machine-readable description of what an API does, and it's what lets us score, lint, mock, and generate against it without asking the provider for anything.
Individual APIs this provider publishes, each with its own machine-readable definition.
Kiteworks activities API
The activities API from Kiteworks — 2 operation(s) for activities.
Kiteworks admin API
The admin API from Kiteworks — 19 operation(s) for admin.
Kiteworks adminRoles API
The adminRoles API from Kiteworks — 4 operation(s) for adminroles.
Kiteworks advancedForms API
The advancedForms API from Kiteworks — 1 operation(s) for advancedforms.
Kiteworks cards API
The cards API from Kiteworks — 3 operation(s) for cards.
Kiteworks clientEventLogs API
The clientEventLogs API from Kiteworks — 1 operation(s) for clienteventlogs.
Kiteworks clients API
The clients API from Kiteworks — 4 operation(s) for clients.
Kiteworks comments API
The comments API from Kiteworks — 4 operation(s) for comments.
Kiteworks contacts API
The contacts API from Kiteworks — 2 operation(s) for contacts.
Kiteworks devices API
The devices API from Kiteworks — 6 operation(s) for devices.
Kiteworks dli API
The dli API from Kiteworks — 18 operation(s) for dli.
Kiteworks externalDL API
The externalDL API from Kiteworks — 1 operation(s) for externaldl.
Kiteworks favorites API
The favorites API from Kiteworks — 3 operation(s) for favorites.
Kiteworks files API
The files API from Kiteworks — 61 operation(s) for files.
Kiteworks folders API
The folders API from Kiteworks — 30 operation(s) for folders.
Kiteworks groups API
The groups API from Kiteworks — 2 operation(s) for groups.
Kiteworks internal API
The internal API from Kiteworks — 1 operation(s) for internal.
Kiteworks languages API
The languages API from Kiteworks — 2 operation(s) for languages.
Kiteworks ldapGroups API
The ldapGroups API from Kiteworks — 2 operation(s) for ldapgroups.
Kiteworks locations API
The locations API from Kiteworks — 2 operation(s) for locations.
Kiteworks mail API
The mail API from Kiteworks — 29 operation(s) for mail.
Kiteworks mobileSync API
The mobileSync API from Kiteworks — 5 operation(s) for mobilesync.
Kiteworks notifications API
The notifications API from Kiteworks — 3 operation(s) for notifications.
Kiteworks permissions API
The permissions API from Kiteworks — 4 operation(s) for permissions.
Kiteworks profiles API
The profiles API from Kiteworks — 3 operation(s) for profiles.
Kiteworks requestFile API
The requestFile API from Kiteworks — 13 operation(s) for requestfile.
Kiteworks roles API
The roles API from Kiteworks — 2 operation(s) for roles.
Kiteworks scim API
The scim API from Kiteworks — 9 operation(s) for scim.
Kiteworks search API
The search API from Kiteworks — 3 operation(s) for search.
Kiteworks settings API
The settings API from Kiteworks — 2 operation(s) for settings.
Kiteworks sharedMailbox API
The sharedMailbox API from Kiteworks — 6 operation(s) for sharedmailbox.
Kiteworks shortLinks API
The shortLinks API from Kiteworks — 1 operation(s) for shortlinks.
Kiteworks sources API
The sources API from Kiteworks — 15 operation(s) for sources.
Kiteworks sourceTypes API
The sourceTypes API from Kiteworks — 2 operation(s) for sourcetypes.
Kiteworks system API
The system API from Kiteworks — 6 operation(s) for system.
Kiteworks tasks API
The tasks API from Kiteworks — 3 operation(s) for tasks.
Kiteworks uploads API
The uploads API from Kiteworks — 10 operation(s) for uploads.
Kiteworks users API
The users API from Kiteworks — 30 operation(s) for users.
Kiteworks userSshPublicKeys API
The userSshPublicKeys API from Kiteworks — 7 operation(s) for usersshpublickeys.
Kiteworks webForms API
The webForms API from Kiteworks — 2 operation(s) for webforms.
Kiteworks webhook API
The webhook API from Kiteworks — 2 operation(s) for webhook.
Scroll within the panel for all 41 ·
MCP Servers 1
Model Context Protocol servers expose these APIs directly to AI agents. We profile them because agent-native access is the fastest-growing way this provider's capabilities actually get used.
Model Context Protocol servers that expose these APIs to AI agents.
kiteworks-mcp.yml
MCP SERVERRate Limits 1
Rate limits are the difference between a demo that works and a production integration that doesn't fall over. Publishing them is an operational-transparency signal — and a hard requirement for any agent that plans its own throughput.
Documented rate limits and quota policies.
Kiteworks Rate Limits
RATE LIMITSEvent Specifications 1
Not every API is request/response. AsyncAPI describes the event-driven and streaming side — the webhooks and channels — so the asynchronous half of the interface is documented the same way the synchronous half is.
AsyncAPI definitions for this provider's event-driven and streaming APIs.
Kiteworks Pubsub Webhooks
ASYNCAPISecurity Posture 4
Authentication, domain security, vulnerability disclosure, and trust-center signals — the evidence that a provider takes security seriously enough to document it. We profile it because you can't govern what you can't see.
Authentication, domain security, vulnerability disclosure, and trust-center signals.
Kiteworks Trust Center
SOC 2, ISO 27001, ISO 27017, ISO 27018, PCI DSS, FedRAMP, CMMC, FIPS, HIPAA, NIST 800-171, NIST CSF 2.0, GDPR, NIS 2, DORA, TISAX, BSI C5, Cyber Essentials Plus, IRAP, Essential...
SECURITYScopes 1
OAuth scopes are the vocabulary of least-privilege access. Profiling them shows exactly what an integration — or an agent acting on a user's behalf — is allowed to do.
OAuth scopes governing access to this provider's APIs.
Agentic Access 1
An x-agentic-access contract marks which operations are safe for an agent to run on its own and which need a human in the loop. It is the difference between an API an agent can use and one it can use safely.
Recommended x-agentic-access execution contracts for AI agents.
Resources
Every other property we hold for Kiteworks — documentation, portals, status pages, policies, and corporate surface — grouped by the job it does, following the integrator's arc from getting started to running in production.
Get Started 4
Portal, sign-up, and the first successful call
Documentation 2
Reference material describing how the API behaves
Agent Surfaces 5
MCP servers, agent skills, and machine-readable catalogs
Design & Contract 6
Pagination, idempotency, versioning, errors, and events
Build 2
SDKs, sample code, and the tooling you integrate with
Access & Security 8
Authentication, authorization, and security posture
Scroll within the panel for all 8 ·
Operate 3
Status, limits, changes, and where to get help
Commercial 3
Pricing, plans, and the legal terms of use
Company 2
The organization behind the API
← All providers · Data indexed from github.com/api-evangelist/kiteworks · machine-readable index on apis.io