Upsun
Upsun is the cloud application platform from Platform.sh that automatically builds, deploys, and scales applications with git-driven workflows, preview environments per branch, managed services, and usage-based pricing. Its REST API at api.upsun.com covers projects, environments, deployments, backups, domains, certificates, variables, teams, organizations, subscriptions, and observability, secured with OAuth2 API-token exchange, and is complemented by a full-featured CLI, Node.js and PHP SDKs, activity webhooks, and an official hosted MCP server at mcp.upsun.com.
Solid contracts, transparent operations, and an easy start — typically complete on four or five facets with one clear soft spot.
API Evangelist profiles Upsun the way a machine reads it — 57 machine-readable artifacts across 50 APIs, pulled from the provider's own public surface and indexed so a developer, an analyst, or an AI agent can evaluate it against every other provider on the network.
Every provider in the network is reduced to the same set of machine-readable artifacts — OpenAPI contracts, event specifications, GraphQL schemas, runnable collections, pricing and rate-limit signals, security posture, OAuth scopes, and the agent surfaces (MCP servers and skills) that let software drive the API on its own. We profile them because the interface is the part of a company you can actually inspect: it is a truer signal of what a provider does than any marketing page. From those artifacts we compute the Kin Score — Upsun scores 62.8/100 (strong), with a separate agent-readiness read of 64/100 (agent native). The full breakdown is below, followed by every artifact we hold — each card links through to its machine-readable definition on apis.io.
Kin Score
This is the API Evangelist rating — a single, repeatable read computed from the artifacts on this page. Green fill is points earned; the red track is points possible, so every bar shows earned-versus-possible at a glance.
Kin Score
How this is scored →scored 2026-07-27 · rubric v0.5
How we profile Upsun
Each block below is one kind of artifact we hold for Upsun. For each we say what it is and why it earns a place in the profile, then list every one we've indexed — capped at two rows, scroll within the panel for the rest.
APIs 50
Each API is captured as its own OpenAPI definition — every operation, parameter, and response. This is the single most useful machine-readable description of what an API does, and it's what lets us score, lint, mock, and generate against it without asking the provider for anything.
Individual APIs this provider publishes, each with its own machine-readable definition.
Upsun Add-ons API
The Add-ons API from Upsun — 1 operation(s) for add-ons.
Upsun Alerts API
The Alerts API from Upsun — 1 operation(s) for alerts.
Upsun API Tokens API
The API Tokens API from Upsun — 2 operation(s) for api tokens.
Upsun Autoscaling API
Upsun provides native support for autoscaling, allowing your applications to automatically adjust based on resource usage. This ensures that your apps remain responsive under lo...
Upsun Cert Management API
User-supplied SSL/TLS certificates can be managed using these endpoints. You can now list and modify certificate provisioners using the `/projects/{projectId}/provisioners` and ...
Upsun Connections API
The Connections API from Upsun — 2 operation(s) for connections.
Upsun Deployment API
The Deployment API from Upsun — 2 operation(s) for deployment.
Upsun Deployment Target API
Upsun is capable of deploying the production environments of projects in multiple topologies: both in clusters of containers, and as dedicated virtual machines. This is an inter...
Upsun Discounts API
The Discounts API from Upsun — 3 operation(s) for discounts.
Upsun Domain Management API
These endpoints can be used to add, modify, or remove domains from a project. For more information on how domains function on Upsun, see the [Domains](https://docs.upsun.com/anc...
Upsun Environment Activity API
The Environment Activity API from Upsun — 3 operation(s) for environment activity.
Upsun Environment API
On Upsun, an environment encompasses a single instance of your entire application stack, the services used by the application, the application's data storage, and the environmen...
Upsun Environment Backups API
A snapshot is a complete backup of an environment, including all the persistent data from all services running in an environment and all files present in mounted volumes. These ...
Upsun Environment Type API
Environment Types is the way Upsun manages access. We currently have 3 environment types: * Development * Staging * Production Each environment type will contain a group of user...
Upsun Environment Variables API
These endpoints manipulate user-defined variables which are bound to a specific environment, as well as (optionally) the children of an environment. These variables can be made ...
Upsun Grants API
The Grants API from Upsun — 1 operation(s) for grants.
Upsun Invoices API
These endpoints can be used to retrieve invoices from our billing system. An invoice of type "invoice" is generated automatically every month, if the customer has active project...
Upsun MFA API
Multi-factor authentication (MFA) requires the user to present two (or more) types of evidence (or factors) to prove their identity. For example, the evidence might be a passwor...
Upsun Orders API
These endpoints can be used to retrieve order information from our billing system. Here you can view information about your bill for our services, include the billed amount and ...
Upsun Organization Invitations API
The Organization Invitations API from Upsun — 2 operation(s) for organization invitations.
Upsun Organization Management API
The Organization Management API from Upsun — 4 operation(s) for organization management.
Upsun Organization Members API
The Organization Members API from Upsun — 2 operation(s) for organization members.
Upsun Organization Projects API
The Organization Projects API from Upsun — 3 operation(s) for organization projects.
Upsun Organizations API
The Organizations API from Upsun — 4 operation(s) for organizations.
Upsun PhoneNumber API
The PhoneNumber API from Upsun — 2 operation(s) for phonenumber.
Upsun Profiles API
The Profiles API from Upsun — 2 operation(s) for profiles.
Upsun Project Activity API
The Project Activity API from Upsun — 3 operation(s) for project activity.
Upsun Project API
## Project Overview On Upsun, a Project is backed by a single Git repository and encompasses your entire application stack, the services used by your application, the applicatio...
Upsun Project Invitations API
The Project Invitations API from Upsun — 2 operation(s) for project invitations.
Upsun Project Settings API
These endpoints can be used to retrieve and manipulate project-level settings. Only the `initialize` property can be set by end users. It is used to initialize a project from an...
Upsun Project Variables API
These endpoints manipulate user-defined variables which are bound to an entire project. These variables are accessible to all environments within a single project, and they can ...
Upsun Records API
These endpoints retrieve information about which plans were assigned to a particular project at which time.
Upsun References API
The References API from Upsun — 5 operation(s) for references.
Upsun Regions API
The Regions API from Upsun — 2 operation(s) for regions.
Upsun Repository API
The Git repository backing projects hosted on Upsun can be accessed in a **read-only** manner through the `/projects/{projectId}/git/*` family of endpoints. With these endpoints...
Upsun Routing API
These endpoints modify an environment's `routes:` section of the `.upsun/config.yaml` file. For routes to propagate to child environments, the child environments must be synchro...
Upsun Runtime Operations API
The Runtime Operations API from Upsun — 1 operation(s) for runtime operations.
Upsun Source Operations API
These endpoints interact with source code operations as defined in the `source.operations` key in a project's `.upsun/config.yaml` configuration. More information on source code...
Upsun SSH Keys API
The SSH Keys API from Upsun — 2 operation(s) for ssh keys.
Upsun Subscriptions API
Each project is represented by a subscription that holds the plan information. These endpoints can be used to go to a larger plan, add more storage, or subscribe to optional fea...
Upsun Support API
These endpoints can be used to retrieve information about support ticket priority and allow you to submit new ticket to the Upsun Support Team.
Upsun System Information API
These endpoints can be used to retrieve low-level information and interact with the core component of Upsun infrastructure. This is an internal API that can only be used by priv...
Upsun Team Access API
The Team Access API from Upsun — 4 operation(s) for team access.
Upsun Teams API
The Teams API from Upsun — 5 operation(s) for teams.
Upsun Third-Party Integrations API
Upsun can easily integrate with many third-party services, including Git hosting services (GitHub, GitLab, and Bitbucket), health notification services (email, Slack, PagerDuty)...
Upsun Tickets API
The Tickets API from Upsun — 1 operation(s) for tickets.
Upsun User Access API
The User Access API from Upsun — 4 operation(s) for user access.
Upsun User Profiles API
The User Profiles API from Upsun — 4 operation(s) for user profiles.
Upsun Users API
The Users API from Upsun — 9 operation(s) for users.
Upsun Vouchers API
These endpoints can be used to retrieve vouchers associated with a particular user as well as apply a voucher to a particular user.
Scroll within the panel for all 50 ·
MCP Servers 1
Model Context Protocol servers expose these APIs directly to AI agents. We profile them because agent-native access is the fastest-growing way this provider's capabilities actually get used.
Model Context Protocol servers that expose these APIs to AI agents.
upsun-mcp.yml
MCP SERVEREvent Specifications 1
Not every API is request/response. AsyncAPI describes the event-driven and streaming side — the webhooks and channels — so the asynchronous half of the interface is documented the same way the synchronous half is.
AsyncAPI definitions for this provider's event-driven and streaming APIs.
Upsun Activity Webhooks
ASYNCAPISecurity Posture 4
Authentication, domain security, vulnerability disclosure, and trust-center signals — the evidence that a provider takes security seriously enough to document it. We profile it because you can't govern what you can't see.
Authentication, domain security, vulnerability disclosure, and trust-center signals.
Upsun Trust Center
SOC 2 Type 2, ISO 27001, PCI DSS Level 1, HIPAA, IBM Cloud for Financial Services validation, B Corp, EcoVadis, United Nations Global Compact
SECURITYScopes 1
OAuth scopes are the vocabulary of least-privilege access. Profiling them shows exactly what an integration — or an agent acting on a user's behalf — is allowed to do.
OAuth scopes governing access to this provider's APIs.
Resources
Every other property we hold for Upsun — documentation, portals, status pages, policies, and corporate surface — grouped by the job it does, following the integrator's arc from getting started to running in production.
Get Started 4
Portal, sign-up, and the first successful call
Documentation 2
Reference material describing how the API behaves
Agent Surfaces 4
MCP servers, agent skills, and machine-readable catalogs
Design & Contract 6
Pagination, idempotency, versioning, errors, and events
Build 4
SDKs, sample code, and the tooling you integrate with
Access & Security 8
Authentication, authorization, and security posture
Scroll within the panel for all 8 ·
Operate 3
Status, limits, changes, and where to get help
Commercial 3
Pricing, plans, and the legal terms of use
Company 2
The organization behind the API
Other 1
Properties that don't map to a standard resource type
← All providers · Data indexed from github.com/api-evangelist/upsun · machine-readable index on apis.io