42Crunch

42Crunch is a leading API security company that specializes in protecting and securing APIs. They provide innovative solutions that help organizations safeguard their sensitive data and critical assets from potential cyber threats. With their comprehensive API security platform, 42Crunch offers a range of services such as API scanning, traffic monitoring, and runtime protection to ensure that APIs are secure and compliant with industry standards. Their platform covers the full API security lifecycle from design and audit through dynamic testing and runtime firewall protection.

42Crunch publishes 3 APIs on the APIs.io network: Health API, Jobs API, and Logs API. Tagged areas include API Security, Platform, Scanning, Security, and OpenAPI.

The 42Crunch catalog on APIs.io includes 1 JSON-LD context and 2 Spectral governance rulesets.

42Crunch’s developer surface includes documentation, engineering blog, support, pricing, and 21 more developer resources.

🌐 Visit website 📡 Source on GitHub

48.6/100 developing ▼ -8.3 Agent 35/100 agent ready Full breakdown ↓
scored 2026-07-28 · rubric v0.6

AccessFreemium

6 APIs 8 Features 7 Use Cases

API SecurityPlatformScanningSecurityOpenAPIDevSecOps

Kin Score

Kin Score How this is scored →
scored 2026-07-28 · rubric v0.6

Composite quality — 48.6/100 · developing

Contract Quality 13.4 / 25

Developer Ergonomics 3.0 / 20

Commercial Clarity 12.6 / 20

Operational Transparency 4.8 / 13

Governance 8.3 / 12

Discoverability 6.5 / 10

Agent readiness — 35/100 · agent ready

Machine-Readable Contract 18 / 18

Agentic Access Contract 10 / 10

MCP Server 0 / 12

Machine-Readable Auth 0 / 10

Idempotency 0 / 9

Stable Error Semantics 8 / 8

Request/Response Examples 7 / 7

Rate-Limit Signaling 7 / 7

Typed Event Surface 0 / 6

Agent Skills 0 / 5

Well-Known Catalog 0 / 4

Consent & Bot Identity 0 / 3

A2A Agent Card 0 / 8

Dry-Run / Simulate Mode 0 / 4

Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/42crunch: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 6

Individual APIs this provider publishes, each with its own machine-readable definition.

42Crunch API Security Audit

The 42Crunch API Security Audit performs automated static analysis of API definitions (OpenAPI 2, 3.0, 3.1 and GraphQL), running over 200 checks across format validation, data d...

42Crunch API Scan

42Crunch API Scan performs dynamic API security testing (DAST) that evaluates runtime API behavior against its OpenAPI specification. It tests how well an API adheres to its con...

42Crunch API Protection

42Crunch API Protection deploys an API-native micro firewall (API Firewall) that provides runtime defense against API attacks. The firewall is tailor-made for each API based on ...

42Crunch Health API

Service health check

42Crunch Jobs API

Manage API conformance scan jobs on Kubernetes

42Crunch Logs API

Access job execution logs

GraphQL 1

GraphQL schemas published by this provider.

42Crunch GraphQL API

GRAPHQL

Pricing Plans 1

Published pricing tiers and plan structures.

42Crunch Plans Pricing

4 plans

PLANS

Rate Limits 1

Documented rate limits and quota policies.

42Crunch Rate Limits

3 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

42Crunch Finops

FINOPS

Features 8

Notable capabilities this provider offers.

API Security Audit

Automated static analysis of OpenAPI and GraphQL definitions running over 200 security checks, scoring APIs 0-100 for vulnerability and compliance issues.

API Scan (DAST)

Dynamic API Security Testing that evaluates runtime API behavior against its OpenAPI contract, identifying vulnerabilities that appear only at runtime.

API Firewall

API-native micro firewall that enforces OpenAPI contract compliance at runtime, blocking malformed requests, unauthorized access, and API attacks.

API Discovery

Identifies and catalogs APIs across environments to provide full visibility into the API attack surface.

CI/CD Integration

GitHub Actions and other CI/CD pipeline integrations for automated security scanning in deployment workflows.

IDE Integration

Plugins for VS Code and IntelliJ/JetBrains IDEs that provide real-time OpenAPI editing, validation, and security feedback during API design.

OpenAPI Contract Security

Enforces security best practices in OpenAPI specifications covering authentication, data validation, input/output schemas, and transport security.

Kubernetes Support

Scand Manager provides a Kubernetes wrapper for running 42Crunch API Scan in containerized environments.

Scroll for all 8

Semantic Vocabularies 1

JSON-LD contexts and semantic vocabularies used across these APIs.

42Crunch Scand Manager Context

5 classes · 8 properties

JSON-LD

Spectral Rules 2

Spectral governance rulesets for linting and validating these APIs.

42Crunch API Rules

5 rules · 3 warnings 2 info

SPECTRAL

42Crunch API Rules

47 rules · 12 errors 24 warnings 11 info

SPECTRAL

JSON Schema 5

Standalone JSON Schema definitions for this provider's data models.

Error

1 properties

JSON SCHEMA

JobName

0 properties

JSON SCHEMA

JobSpec

6 properties

JSON SCHEMA

JobStatus

2 properties

JSON SCHEMA

Jobs

1 properties

JSON SCHEMA

JSON Structure 5

JSON Structure definitions describing this provider's data shapes.

Scand Manager Error Structure

1 properties

JSON STRUCTURE

Scand Manager Job Name Structure

0 properties

JSON STRUCTURE

Scand Manager Job Spec Structure

6 properties

JSON STRUCTURE

Scand Manager Job Status Structure

2 properties

JSON STRUCTURE

Scand Manager Jobs Structure

1 properties

JSON STRUCTURE

Examples 5

Example request and response payloads for these APIs.

Scand Manager Error Example

1 fields

EXAMPLE

Scand Manager Job Name Example

0 fields

EXAMPLE

Scand Manager Job Spec Example

5 fields

EXAMPLE

Scand Manager Job Status Example

1 fields

EXAMPLE

Scand Manager Jobs Example

1 fields

EXAMPLE

Security Posture 1

Authentication, domain security, vulnerability disclosure, and trust-center signals.

42Crunch Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

42Crunch Agentic Access

6 operations · 2 acting

AGENTIC

Use Cases 7

What developers build with this provider.

API Security Testing in CI/CD

Embed automated API security scanning into CI/CD pipelines via GitHub Actions to catch vulnerabilities before they reach production.

OpenAPI Specification Review

Audit OpenAPI definitions for security flaws, missing authentication, weak data validation, and schema gaps before API deployment.

Runtime API Protection

Deploy the API Firewall in front of production APIs to enforce contract compliance and block attacks in real time.

DevSecOps API Governance

Provide development, security, and operations teams with shared visibility into API security posture throughout the API lifecycle.

OWASP API Top 10 Compliance

Systematically identify and remediate OWASP API Security Top 10 vulnerabilities in API definitions and runtime behavior.

API Security for Financial Services

Address regulatory and compliance requirements for API security in banking, financial services, and insurance sectors.

Healthcare API Security

Secure healthcare APIs handling sensitive patient data against unauthorized access and data exposure vulnerabilities.

Scroll for all 7

Resources

Get Started 1

Portal, sign-up, and the first successful call

Login

Documentation 1

Reference material describing how the API behaves

Documentation

Documentation

Agent Surfaces 1

MCP servers, agent skills, and machine-readable catalogs

AgenticAccess

AgenticAccess

Design & Contract 3

Pagination, idempotency, versioning, errors, and events

SpectralRules

SpectralRules

Vocabulary

Vocabulary

JSONLD

JSONLD

Build 8

SDKs, sample code, and the tooling you integrate with

GitHubOrganization

GitHubRepository

GitHubRepository

GitHubRepository

GitHubRepository

GitHubRepository

GitHubRepository

GitHubRepository

Scroll for all 8

Access & Security 1

Authentication, authorization, and security posture

DomainSecurity

DomainSecurity

Learn 2

Tutorials, courses, talks, and written guidance

Tutorials

Tutorials

Webinars

Webinars

Operate 3

Status, limits, changes, and where to get help

Support

Support

IDESupport

IDESupport

IDESupport

IDESupport

Commercial 1

Pricing, plans, and the legal terms of use

Pricing

Pricing

Company 4

The organization behind the API

LinkedIn

Website

Website

Blog

Blog

Partners

Partners

Source (apis.yml)

aid: 42crunch
url: https://raw.githubusercontent.com/api-evangelist/42crunch/refs/heads/main/apis.yml
name: 42Crunch
type: Index
accessModel:
  pricing: freemium
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Freemium
  confidence: medium
  source:
  - plans
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/42crunch.png
tags:
- API Security
- Platform
- Scanning
- Security
- OpenAPI
- DevSecOps
description: 42Crunch is a leading API security company that specializes in protecting and securing APIs. They provide innovative
  solutions that help organizations safeguard their sensitive data and critical assets from potential cyber threats. With
  their comprehensive API security platform, 42Crunch offers a range of services such as API scanning, traffic monitoring,
  and runtime protection to ensure that APIs are secure and compliant with industry standards. Their platform covers the full
  API security lifecycle from design and audit through dynamic testing and runtime firewall protection.
created: '2025-01-08'
modified: '2026-05-19'
specificationVersion: '0.19'
apis:
- aid: 42crunch:42crunch-api-security-audit
  name: 42Crunch API Security Audit
  tags:
  - API Security
  - Static Analysis
  - OpenAPI
  - Vulnerability Scanning
  humanURL: https://docs.42crunch.com/latest/content/concepts/api_contract_security_audit.htm
  properties:
  - url: https://docs.42crunch.com/latest/content/concepts/api_contract_security_audit.htm
    type: Documentation
  - url: https://docs.42crunch.com/latest/content/home.htm
    type: APIReference
  - url: graphql/42crunch-graphql.md
    type: GraphQL
  description: The 42Crunch API Security Audit performs automated static analysis of API definitions (OpenAPI 2, 3.0, 3.1
    and GraphQL), running over 200 checks across format validation, data definition quality, and security analysis. APIs are
    scored 0-100 with recommendations to reach 70+ before runtime protection is applied. Integrates with CI/CD pipelines for
    continuous monitoring.
- aid: 42crunch:42crunch-api-scan
  name: 42Crunch API Scan
  tags:
  - API Security
  - Dynamic Testing
  - DAST
  - Contract Testing
  humanURL: https://docs.42crunch.com/latest/content/home.htm
  properties:
  - url: https://docs.42crunch.com/latest/content/home.htm
    type: Documentation
  description: 42Crunch API Scan performs dynamic API security testing (DAST) that evaluates runtime API behavior against
    its OpenAPI specification. It tests how well an API adheres to its contract and identifies vulnerabilities that only appear
    at runtime. Supports integration with CI/CD pipelines and Kubernetes via the scand-manager Kubernetes wrapper.
- aid: 42crunch:42crunch-api-protection
  name: 42Crunch API Protection
  tags:
  - API Security
  - Runtime Protection
  - Firewall
  - API Gateway
  humanURL: https://docs.42crunch.com/latest/content/home.htm
  properties:
  - url: https://docs.42crunch.com/latest/content/home.htm
    type: Documentation
  description: 42Crunch API Protection deploys an API-native micro firewall (API Firewall) that provides runtime defense against
    API attacks. The firewall is tailor-made for each API based on its OpenAPI specification and enforces API contract compliance
    in real time, blocking malformed requests and unauthorized access.
- aid: 42crunch:42crunch-health-api
  name: 42Crunch Health API
  description: Service health check
  humanURL: https://docs.42crunch.com/latest/content/concepts/api_contract_security_audit.htm
  tags:
  - Health
  properties:
  - type: OpenAPI
    url: openapi/42crunch-health-api-openapi.yml
  - type: Documentation
    url: https://github.com/42Crunch/scand-manager
  - type: JSONSchema
    url: json-schema/scand-manager-job-name-schema.json
  - type: JSONSchema
    url: json-schema/scand-manager-jobs-schema.json
  - type: JSONSchema
    url: json-schema/scand-manager-job-spec-schema.json
  - type: JSONSchema
    url: json-schema/scand-manager-job-status-schema.json
  - type: JSONSchema
    url: json-schema/scand-manager-error-schema.json
  - type: JSONStructure
    url: json-structure/scand-manager-job-name-structure.json
  - type: JSONStructure
    url: json-structure/scand-manager-jobs-structure.json
  - type: JSONStructure
    url: json-structure/scand-manager-job-spec-structure.json
  - type: JSONStructure
    url: json-structure/scand-manager-job-status-structure.json
  - type: JSONStructure
    url: json-structure/scand-manager-error-structure.json
  - type: Examples
    url: examples/scand-manager-job-name-example.json
  - type: Examples
    url: examples/scand-manager-jobs-example.json
  - type: Examples
    url: examples/scand-manager-job-spec-example.json
  - type: Examples
    url: examples/scand-manager-job-status-example.json
  - type: Examples
    url: examples/scand-manager-error-example.json
- aid: 42crunch:42crunch-jobs-api
  name: 42Crunch Jobs API
  description: Manage API conformance scan jobs on Kubernetes
  humanURL: https://docs.42crunch.com/latest/content/concepts/api_contract_security_audit.htm
  tags:
  - Jobs
  properties:
  - type: OpenAPI
    url: openapi/42crunch-jobs-api-openapi.yml
  - type: Documentation
    url: https://github.com/42Crunch/scand-manager
  - type: JSONSchema
    url: json-schema/scand-manager-job-name-schema.json
  - type: JSONSchema
    url: json-schema/scand-manager-jobs-schema.json
  - type: JSONSchema
    url: json-schema/scand-manager-job-spec-schema.json
  - type: JSONSchema
    url: json-schema/scand-manager-job-status-schema.json
  - type: JSONSchema
    url: json-schema/scand-manager-error-schema.json
  - type: JSONStructure
    url: json-structure/scand-manager-job-name-structure.json
  - type: JSONStructure
    url: json-structure/scand-manager-jobs-structure.json
  - type: JSONStructure
    url: json-structure/scand-manager-job-spec-structure.json
  - type: JSONStructure
    url: json-structure/scand-manager-job-status-structure.json
  - type: JSONStructure
    url: json-structure/scand-manager-error-structure.json
  - type: Examples
    url: examples/scand-manager-job-name-example.json
  - type: Examples
    url: examples/scand-manager-jobs-example.json
  - type: Examples
    url: examples/scand-manager-job-spec-example.json
  - type: Examples
    url: examples/scand-manager-job-status-example.json
  - type: Examples
    url: examples/scand-manager-error-example.json
- aid: 42crunch:42crunch-logs-api
  name: 42Crunch Logs API
  description: Access job execution logs
  humanURL: https://docs.42crunch.com/latest/content/concepts/api_contract_security_audit.htm
  tags:
  - Logs
  properties:
  - type: OpenAPI
    url: openapi/42crunch-logs-api-openapi.yml
  - type: Documentation
    url: https://github.com/42Crunch/scand-manager
  - type: JSONSchema
    url: json-schema/scand-manager-job-name-schema.json
  - type: JSONSchema
    url: json-schema/scand-manager-jobs-schema.json
  - type: JSONSchema
    url: json-schema/scand-manager-job-spec-schema.json
  - type: JSONSchema
    url: json-schema/scand-manager-job-status-schema.json
  - type: JSONSchema
    url: json-schema/scand-manager-error-schema.json
  - type: JSONStructure
    url: json-structure/scand-manager-job-name-structure.json
  - type: JSONStructure
    url: json-structure/scand-manager-jobs-structure.json
  - type: JSONStructure
    url: json-structure/scand-manager-job-spec-structure.json
  - type: JSONStructure
    url: json-structure/scand-manager-job-status-structure.json
  - type: JSONStructure
    url: json-structure/scand-manager-error-structure.json
  - type: Examples
    url: examples/scand-manager-job-name-example.json
  - type: Examples
    url: examples/scand-manager-jobs-example.json
  - type: Examples
    url: examples/scand-manager-job-spec-example.json
  - type: Examples
    url: examples/scand-manager-job-status-example.json
  - type: Examples
    url: examples/scand-manager-error-example.json
common:
- type: AgenticAccess
  url: agentic-access/42crunch-agentic-access.yml
- type: DomainSecurity
  url: security/42crunch-domain-security.yml
- type: LinkedIn
  url: https://www.linkedin.com/company/42crunch
- type: Website
  url: https://42crunch.com/
- type: Documentation
  url: https://docs.42crunch.com/latest/content/home.htm
- type: Blog
  url: https://42crunch.com/blog/
- type: Support
  url: https://support.42crunch.com/hc/en-us
- type: Pricing
  url: https://42crunch.com/pricing/
- type: Tutorials
  url: https://42crunch.com/tutorials/
- type: Webinars
  url: https://42crunch.com/webinars/
- type: Partners
  url: https://42crunch.com/partners/
- type: Login
  url: https://platform.42crunch.com/login
- type: GitHubOrganization
  url: https://github.com/42Crunch
- type: IDESupport
  url: https://marketplace.visualstudio.com/items?itemName=42Crunch.vscode-openapi
- type: IDESupport
  url: https://plugins.jetbrains.com/plugin/14837-openapi-swagger-editor
- type: GitHubRepository
  url: https://github.com/42Crunch/vscode-openapi
- type: GitHubRepository
  url: https://github.com/42Crunch/api-security-audit-action
- type: GitHubRepository
  url: https://github.com/42Crunch/api-security-audit-action-freemium
- type: GitHubRepository
  url: https://github.com/42Crunch/api-security-scan-action-freemium
- type: GitHubRepository
  url: https://github.com/42Crunch/cicd-github-actions
- type: GitHubRepository
  url: https://github.com/42Crunch/scand-manager
- type: GitHubRepository
  url: https://github.com/42Crunch/resources
- type: SpectralRules
  url: rules/42crunch-spectral-rules.yml
- type: Vocabulary
  url: vocabulary/42crunch-vocabulary.yaml
- type: JSONLD
  url: json-ld/42crunch-scand-manager-context.jsonld
- type: Features
  data:
  - name: API Security Audit
    description: Automated static analysis of OpenAPI and GraphQL definitions running over 200 security checks, scoring APIs
      0-100 for vulnerability and compliance issues.
  - name: API Scan (DAST)
    description: Dynamic API Security Testing that evaluates runtime API behavior against its OpenAPI contract, identifying
      vulnerabilities that appear only at runtime.
  - name: API Firewall
    description: API-native micro firewall that enforces OpenAPI contract compliance at runtime, blocking malformed requests,
      unauthorized access, and API attacks.
  - name: API Discovery
    description: Identifies and catalogs APIs across environments to provide full visibility into the API attack surface.
  - name: CI/CD Integration
    description: GitHub Actions and other CI/CD pipeline integrations for automated security scanning in deployment workflows.
  - name: IDE Integration
    description: Plugins for VS Code and IntelliJ/JetBrains IDEs that provide real-time OpenAPI editing, validation, and security
      feedback during API design.
  - name: OpenAPI Contract Security
    description: Enforces security best practices in OpenAPI specifications covering authentication, data validation, input/output
      schemas, and transport security.
  - name: Kubernetes Support
    description: Scand Manager provides a Kubernetes wrapper for running 42Crunch API Scan in containerized environments.
- type: UseCases
  data:
  - name: API Security Testing in CI/CD
    description: Embed automated API security scanning into CI/CD pipelines via GitHub Actions to catch vulnerabilities before
      they reach production.
  - name: OpenAPI Specification Review
    description: Audit OpenAPI definitions for security flaws, missing authentication, weak data validation, and schema gaps
      before API deployment.
  - name: Runtime API Protection
    description: Deploy the API Firewall in front of production APIs to enforce contract compliance and block attacks in real
      time.
  - name: DevSecOps API Governance
    description: Provide development, security, and operations teams with shared visibility into API security posture throughout
      the API lifecycle.
  - name: OWASP API Top 10 Compliance
    description: Systematically identify and remediate OWASP API Security Top 10 vulnerabilities in API definitions and runtime
      behavior.
  - name: API Security for Financial Services
    description: Address regulatory and compliance requirements for API security in banking, financial services, and insurance
      sectors.
  - name: Healthcare API Security
    description: Secure healthcare APIs handling sensitive patient data against unauthorized access and data exposure vulnerabilities.
- type: Integrations
  data:
  - name: GitHub Actions
    description: Native GitHub Actions for API Security Audit and API Scan, enabling automated security checks in GitHub CI/CD
      workflows.
  - name: VS Code
    description: OpenAPI extension for Visual Studio Code providing real-time API editing, validation, and security feedback
      with 42Crunch integration.
  - name: IntelliJ / JetBrains
    description: OpenAPI/Swagger Editor plugin for IntelliJ IDEA and other JetBrains IDEs.
  - name: Kubernetes
    description: Scand Manager provides Kubernetes-native deployment of API Scan for containerized API security testing.
  - name: Tekton
    description: Tekton Pipelines catalog integration for CI/CD security scanning tasks.
  - name: SonarQube
    description: SonarQube plugin that integrates 42Crunch API security audit results into code quality dashboards.
  - name: API Gateways
    description: API Firewall integrates with API gateway infrastructure to enforce contract compliance at the network edge.
  - name: SIEM / SOC Systems
    description: Runtime protection events can be forwarded to SIEM and SOC platforms for centralized threat monitoring and
      alerting.
  - name: Atlassian
    description: Data Center App Performance Toolkit support for Atlassian platform integration.
- type: Integrations
  url: https://42crunch.com/partners/
integrations:
- name: LogoCr1
- name: De flags
- name: 42C-Crest25-25
- name: 42Crunch-API-Securityio-Logo-Color-28-300x94
- name: ISO-27001(3)
- name: Gradient-Line-1-05-e1645537716386
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com