Aalto University is a multidisciplinary public research university in Espoo, Finland, formed in 2010 from the merger of the Helsinki University of Technology, the Helsinki School of Economics and the University of Art and Design Helsinki. Unusually for this cohort, Aalto operates a real institution-owned API program rather than only a set of vendor tenancies: the Aalto API Gateway (Red Hat 3scale, at 3scale.apps.ocp4.aalto.fi) publishes five documented API products — facilities and room reservations, SISU course data, Acris research publications, projects and cost centres, and a deprecated Oodi-sourced course API — and its ActiveDocs index is publicly readable, exposing forty-four Aalto-authored Swagger/OpenAPI documents whose servers all sit under *.api.aalto.fi. Every one of those endpoints is API-key gated and returns 403 to an anonymous caller, so the contracts are public while the data is not. The genuinely anonymous surfaces are elsewhere: the Aaltodoc institutional repository (Aalto-hosted DSpace 9.2) serves a live OAI-PMH 2.0 endpoint with sixteen metadata formats and an open REST API, and the Linked Open Aalto Data SPARQL endpoint answers real queries — but only over POST, since GET times out. Aalto also runs its own Shibboleth SAML 2.0 identity provider and is registered in the Haka federation with forty-one entities, which is machine-readable institutional infrastructure that almost no university in this cohort catalogues. Its library discovery, research information system and research portal are vendor tenancies (Ex Libris, Elsevier Pure) and are recorded as relationships, not as Aalto's engineering.
Aalto University publishes 5 APIs on the APIs.io network, including Aalto Facilities API, Aalto Course API (SISU), Aalto Research Publications API (Acris gateway), and 2 more. Tagged areas include University, Higher Education, Education, Finland, and Europe.
The Aalto University catalog on APIs.io includes 1 JSON-LD context.
Aalto University’s developer surface includes documentation, API reference, developer portal, signup flow, authentication, and 21 more developer resources.
Regulatory Posture applies to this provider. Its tags matched the
Education & Research regime, so
Regulatory Posture carries 15 points of the composite.
If this regime is wrong for your business, say so on your
provider repo — the
applicability map is public and we will correct it.
Create-or-Update Ergonomics does not apply to this provider. The published contracts declare
no write operations, and a read-only API cannot create-or-update. The facet is excluded from this provider's
denominator entirely — not scored zero. A reference or data API is not deficient for being unable to
upsert.
The six quality facets above are damped to 85 points between them,
because the conditional facet above carries the other
15. That is why each facet's contribution is shown against a damped
maximum: raising a quality facet moves the composite by 85% of its nominal
weight, not 100%. The full arithmetic is at apis.io/rating/.
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. Every facet and dimension name above is a link: it opens that measurement's own page — what it means, the exact checks that feed it, how the whole catalog distributes on it, and the providers at the top of it. This rating is computed from github.com/api-evangelist/aalto: open an issue to ask a question, or submit a pull request to add artifacts.
Submit an artifact on GitHub — free →Manage your own listing — the Influence plan, $499/mo →
Aalto's own Red Hat 3scale API gateway, the front door to every institution-operated API at Aalto. Five API products are documented on the portal; the underlying ActiveDocs inde...
Buildings, building details, opening hours, rooms and room reservations across Aalto's Espoo campus. OpenAPI 3.0.1, version 1.0.2, contact it-integ@aalto.fi, served from facilit...
Course units and course-unit realisations drawn from SISU, the Finnish higher-education student information system Aalto runs. OpenAPI 3.0.1, version 0.0.18, titled "Sisu API (r...
Aalto's own four-path gateway contract over Acris, its research information system, exposing research outputs, a single output by id, an enhanced output view and output fingerpr...
Administrative reference data — cost centres, projects, departments and schools — from Aalto's data warehouse. OpenAPI 3.0.0, version 1.0.10, X-ApiKey header, served from api.aa...
A two-path proxy over Aaltopeople returning groups and public staff profiles. OpenAPI 3.0.1, version 1.0.3, contact it-integ@aalto.fi, served from aaltopeople.api.aalto.fi. Pres...
The Oodi-sourced course API, still published on the portal and explicitly marked deprecated: "This API source is OODI and should not be used." Swagger 2.0, two paths, superseded...
Aalto's institutional repository of theses, articles and conference publications, running Aalto-hosted DSpace 9.2 on aaltodoc.aalto.fi. Both read surfaces are fully anonymous an...
Aalto's open data published as Linked Data — courses, people, publications, places, projects, organisation and events — under data.aalto.fi URIs. The landing page and dataset de...
Aalto's research information system is Elsevier Pure, deployed as Acris at acris.aalto.fi with the Pure Portal at research.aalto.fi. The data and the DOIs are Aalto's; the contr...
Library discovery and the library management system are Ex Libris products under Aalto tenancies — primo.aalto.fi resolves to the Primo NDE interface with view 358AALTO_INST:MAI...
sisu.aalto.fi is Aalto's deployment of SISU, the student information system built by Funidata, a company jointly owned by Finnish universities. It is the system of record behind...
aid: aalto
name: Aalto University
x-type: university
x-category: Public Research University
description: 'Aalto University is a multidisciplinary public research university in Espoo, Finland, formed in 2010 from the
merger of the Helsinki University of Technology, the Helsinki School of Economics and the University of Art and Design Helsinki.
Unusually for this cohort, Aalto operates a real institution-owned API program rather than only a set of vendor tenancies:
the Aalto API Gateway (Red Hat 3scale, at 3scale.apps.ocp4.aalto.fi) publishes five documented API products — facilities
and room reservations, SISU course data, Acris research publications, projects and cost centres, and a deprecated Oodi-sourced
course API — and its ActiveDocs index is publicly readable, exposing forty-four Aalto-authored Swagger/OpenAPI documents
whose servers all sit under *.api.aalto.fi. Every one of those endpoints is API-key gated and returns 403 to an anonymous
caller, so the contracts are public while the data is not. The genuinely anonymous surfaces are elsewhere: the Aaltodoc
institutional repository (Aalto-hosted DSpace 9.2) serves a live OAI-PMH 2.0 endpoint with sixteen metadata formats and
an open REST API, and the Linked Open Aalto Data SPARQL endpoint answers real queries — but only over POST, since GET times
out. Aalto also runs its own Shibboleth SAML 2.0 identity provider and is registered in the Haka federation with forty-one
entities, which is machine-readable institutional infrastructure that almost no university in this cohort catalogues. Its
library discovery, research information system and research portal are vendor tenancies (Ex Libris, Elsevier Pure) and are
recorded as relationships, not as Aalto''s engineering.'
type: Index
deliveryModel:
model: saas
open_source: false
commercial: false
callable_host: true
label: Hosted service · you call their endpoint
confidence: high
source:
- openapi
- probed
generated: '2026-08-30'
method: probed
accessModel:
pricing: free
onboarding: gated
trial: false
try_now: false
public: partial
label: Free, but API-key issuance requires an Aalto account
confidence: high
source:
- probed
- documentation
generated: '2026-08-30'
method: probed
position: Producing
access: 1st-Party
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/aalto.png
url: https://raw.githubusercontent.com/api-evangelist/aalto/refs/heads/main/apis.yml
tags:
- University
- Higher Education
- Education
- Finland
- Europe
- Public Research University
- Research
- Research Data
- Open Data
- Linked Data
- Course Catalog
- Identity Federation
- Research Computing
- Library
- API Gateway
created: '2026-06-03'
modified: '2026-08-30'
specificationVersion: '0.23'
x-coverage:
state: covered
reason: covered
detail: 'Aalto is one of the few institutions in this cohort with a genuine institution-operated API program, and it was
reachable. Its 3scale gateway leaves the ActiveDocs index (/api_docs/services.json) open without credentials, which yielded
forty-four Aalto-authored contracts; five production products documented on the portal''s /docs page are catalogued here
with their specs saved, all with servers under *.api.aalto.fi. Every gateway endpoint answers an anonymous call with 403
"Authentication parameters missing", so the contracts are public and the data is gated — that is a real posture, not a
coverage failure. Fully anonymous surfaces do exist and were verified: Aaltodoc''s OAI-PMH 2.0 Identify and its DSpace
9.2 REST root both return 200, and the Linked Open Aalto Data SPARQL endpoint returns real Aalto triples. Vendor tenancies
(Elsevier Pure / Acris, Ex Libris Primo, Finna) are recorded as relationships with x-operator tenant and no vendor contract
was saved under Aalto''s name.'
evidence:
- url: https://3scale.apps.ocp4.aalto.fi/api_docs/services.json
status: 200
- url: https://3scale.apps.ocp4.aalto.fi/docs
status: 200
- url: https://facilities.api.aalto.fi/api/aalto/facilities/v1/buildings
status: 403
- url: https://course.api.aalto.fi/api/sisu/v1/courseunits
status: 403
- url: https://aaltodoc.aalto.fi/server/oai/request?verb=Identify
status: 200
- url: https://aaltodoc.aalto.fi/server/api
status: 200
- url: https://idp.aalto.fi/idp/shibboleth
status: 200
- url: http://ldf.fi/loa/sparql
status: 200
- url: https://acris.aalto.fi/ws/api/515/api-docs/index.html
status: 401
- url: https://aalto.finna.fi/
status: 403
apis:
- aid: aalto:api-gateway
name: Aalto API Gateway
x-operator: institution
description: Aalto's own Red Hat 3scale API gateway, the front door to every institution-operated API at Aalto. Five API
products are documented on the portal; the underlying ActiveDocs index is public and lists forty-four Aalto-authored Swagger/OpenAPI
documents, including test and internal services that are not published as products. Registration and API-key issuance
require an Aalto account, so the program is not self-service for outside developers. apiportal.aalto.fi is the published
front door and redirects here.
humanURL: https://www.aalto.fi/en/services/api-gateway-application-programming-interface
baseURL: https://3scale.apps.ocp4.aalto.fi
tags:
- API Gateway
- 3scale
- Education
- Developer Portal
properties:
- type: Documentation
url: https://www.aalto.fi/en/services/api-gateway-application-programming-interface
- type: APIReference
url: https://3scale.apps.ocp4.aalto.fi/docs
- type: Portal
url: https://3scale.apps.ocp4.aalto.fi/
- type: Signup
url: https://apiportal.aalto.fi/
- type: Authentication
url: authentication/aalto-authentication.yml
- type: Lifecycle
url: lifecycle/aalto-lifecycle.yml
- type: ErrorCatalog
url: errors/aalto-errors.yml
- aid: aalto:facilities
name: Aalto Facilities API
x-operator: institution
description: 'Buildings, building details, opening hours, rooms and room reservations across Aalto''s Espoo campus. OpenAPI
3.0.1, version 1.0.2, contact it-integ@aalto.fi, served from facilities.api.aalto.fi. Documented on the portal as "Facilities
API : Buildings and Reservations". The contract declares no securityScheme, but the gateway rejects an anonymous call
with 403 — a real gap between the documented and deployed auth surface.'
humanURL: https://3scale.apps.ocp4.aalto.fi/docs/swagger/facilities2
baseURL: https://facilities.api.aalto.fi/api/aalto
tags:
- Facilities
- Buildings
- Room Booking
- Campus
- Reservations
properties:
- type: OpenAPI
url: openapi/aalto-facilities-api-openapi.yml
- type: JSONSchema
url: json-schema/aalto-facilities-api-schema.json
- type: Documentation
url: https://3scale.apps.ocp4.aalto.fi/docs/swagger/facilities2
- aid: aalto:course-sisu
name: Aalto Course API (SISU)
x-operator: institution
description: Course units and course-unit realisations drawn from SISU, the Finnish higher-education student information
system Aalto runs. OpenAPI 3.0.1, version 0.0.18, titled "Sisu API (replaces /oodiapi)" — the designated replacement for
the deprecated Oodi-sourced Course API. Served from course.api.aalto.fi with a USER_KEY query-string API key. The contract
is Aalto's own gateway contract; SISU itself is a Funidata product Aalto operates as a tenant.
humanURL: https://3scale.apps.ocp4.aalto.fi/docs/swagger/open_courses_sisu
baseURL: https://course.api.aalto.fi/api/sisu/v1
tags:
- Course Catalog
- SISU
- Students
- Education
- Registrar
properties:
- type: OpenAPI
url: openapi/aalto-course-sisu-api-openapi.yml
- type: JSONSchema
url: json-schema/aalto-course-sisu-api-schema.json
- type: Documentation
url: https://3scale.apps.ocp4.aalto.fi/docs/swagger/open_courses_sisu
- aid: aalto:acris-research
name: Aalto Research Publications API (Acris gateway)
x-operator: institution
description: 'Aalto''s own four-path gateway contract over Acris, its research information system, exposing research outputs,
a single output by id, an enhanced output view and output fingerprints. OpenAPI 3.0.0 served from research.api.aalto.fi
with a USER-KEY header. This is Aalto''s wrapper, not Elsevier''s contract: the underlying Acris/Pure web service at acris.aalto.fi/ws/api
is a separate tenant surface recorded below, and its generic Pure specification is deliberately NOT saved under Aalto''s
name. info.version reads "Pure v5.15/" because it names the upstream release being wrapped.'
humanURL: https://3scale.apps.ocp4.aalto.fi/docs/swagger/research
baseURL: https://research.api.aalto.fi/api/acris/v1
tags:
- Research
- Publications
- Research Data
- CRIS
- Open Access
properties:
- type: OpenAPI
url: openapi/aalto-acris-research-api-openapi.yml
- type: Documentation
url: https://3scale.apps.ocp4.aalto.fi/docs/swagger/research
- aid: aalto:projects-costcenters
name: Aalto Projects and Cost Centers API
x-operator: institution
description: Administrative reference data — cost centres, projects, departments and schools — from Aalto's data warehouse.
OpenAPI 3.0.0, version 1.0.10, X-ApiKey header, served from api.aalto.fi. The contract still carries Swagger's sample-project
boilerplate (contact apiteam@swagger.io, termsOfService swagger.io) which was never replaced; the servers are Aalto's
own.
humanURL: https://3scale.apps.ocp4.aalto.fi/docs/swagger/projectscostcenters
baseURL: https://api.aalto.fi/api/dw_projects
tags:
- Administration
- Finance
- Organization
- Reference Data
properties:
- type: OpenAPI
url: openapi/aalto-projects-costcenters-api-openapi.yml
- type: Documentation
url: https://3scale.apps.ocp4.aalto.fi/docs/swagger/projectscostcenters
- aid: aalto:people-profile
name: Aalto People Profile API
x-operator: institution
description: 'A two-path proxy over Aaltopeople returning groups and public staff profiles. OpenAPI 3.0.1, version 1.0.3,
contact it-integ@aalto.fi, served from aaltopeople.api.aalto.fi. Present in the public ActiveDocs index but not published
as a product on the portal''s documentation page. Gateway-gated: 403 to an anonymous caller.'
baseURL: https://aaltopeople.api.aalto.fi/api/aaltopeople/v1
tags:
- Directory
- People
- Organization
- Campus
properties:
- type: OpenAPI
url: openapi/aalto-people-profile-api-openapi.yml
- aid: aalto:course-oodi-deprecated
name: Aalto Open API — Course API (Oodi, deprecated)
x-operator: institution
description: 'The Oodi-sourced course API, still published on the portal and explicitly marked deprecated: "This API source
is OODI and should not be used." Swagger 2.0, two paths, superseded by the SISU Course API. Recorded as a real lifecycle
event — one of the few observable deprecations in this cohort — with no spec saved, because Aalto tells callers not to
use it. The deprecation is signalled only in prose; no operation carries deprecated:true and no Sunset policy is published.'
humanURL: https://3scale.apps.ocp4.aalto.fi/docs/swagger/courses
tags:
- Course Catalog
- Deprecated
- Oodi
- Education
properties:
- type: Documentation
url: https://3scale.apps.ocp4.aalto.fi/docs/swagger/courses
- type: Lifecycle
url: lifecycle/aalto-lifecycle.yml
- aid: aalto:aaltodoc
name: Aaltodoc Repository — OAI-PMH and DSpace REST
x-operator: institution
description: 'Aalto''s institutional repository of theses, articles and conference publications, running Aalto-hosted DSpace
9.2 on aaltodoc.aalto.fi. Both read surfaces are fully anonymous and were verified live: an OAI-PMH 2.0 endpoint (repositoryIdentifier
aaltodoc.aalto.fi, earliest datestamp 2011-09-27, sixteen metadata formats including rioxx v3.0 and etdms) and a HAL-style
DSpace REST API. DSpace is open-source software Aalto self-hosts, so this is institution-run infrastructure rather than
a vendor tenancy. The historically published OAI path /oai/request now 301s to /server/oai/request.'
humanURL: https://www.aalto.fi/en/open-science-and-research/aaltodoc-publication-archive
baseURL: https://aaltodoc.aalto.fi/server/oai/request
tags:
- Repository
- OAI-PMH
- DSpace
- Research Data
- Open Access
- Theses
properties:
- type: Documentation
url: https://www.aalto.fi/en/open-science-and-research/aaltodoc-publication-archive
- type: APIReference
url: https://aaltodoc.aalto.fi/server/api
- type: Conformance
url: conformance/aalto-conformance.yml
- aid: aalto:identity-federation
name: Aalto Shibboleth Identity Provider (Haka / eduGAIN)
x-operator: institution
description: Aalto's own Shibboleth SAML 2.0 identity provider, entityID https://idp.aalto.fi/idp/shibboleth, scope aalto.fi,
registration authority http://www.aalto.fi registered 2019-04-15. The metadata is publicly served and machine-readable.
Aalto is a registered member of Haka, Finland's higher-education federation, with forty-one entities — one IdP and forty
service providers spanning mycourses.aalto.fi, version.aalto.fi, exam.aalto.fi, wiki.aalto.fi and the cs.aalto.fi teaching
estate — and Haka feeds eduGAIN, making those entities internationally resolvable. Institution-operated by definition
and rarely catalogued anywhere.
baseURL: https://idp.aalto.fi/idp/shibboleth
tags:
- Identity Federation
- SAML
- Shibboleth
- Haka
- eduGAIN
- Single Sign-On
properties:
- type: IdentityFederation
url: https://idp.aalto.fi/idp/shibboleth
- type: Conformance
url: conformance/aalto-conformance.yml
- aid: aalto:linked-open-data
name: Linked Open Aalto Data (SPARQL)
x-operator: tenant
description: 'Aalto''s open data published as Linked Data — courses, people, publications, places, projects, organisation
and events — under data.aalto.fi URIs. The landing page and dataset descriptions are on Aalto''s own host, but the SPARQL
endpoint runs on the shared Linked Data Finland platform (ldf.fi), which serves many Finnish organisations, so the query
service is a tenancy. Probed 2026-08-30: a POST query returns real data.aalto.fi triples, while a GET query times out
and the endpoint''s own redirect target 404s — the service is live but only over POST, and only the status code would
have hidden that. data.aalto.fi/data and /dataset return 503, so the Linked Data browser is partly down.'
humanURL: https://data.aalto.fi/
baseURL: http://ldf.fi/loa/sparql
tags:
- Open Data
- Linked Data
- SPARQL
- RDF
- Research Data
properties:
- type: Documentation
url: https://data.aalto.fi/
- type: OpenData
url: https://data.aalto.fi/
- aid: aalto:acris-pure
name: Acris — Aalto Current Research Information System (Elsevier Pure)
x-operator: tenant
description: Aalto's research information system is Elsevier Pure, deployed as Acris at acris.aalto.fi with the Pure Portal
at research.aalto.fi. The data and the DOIs are Aalto's; the contract is Elsevier's. The Pure web service at acris.aalto.fi/ws/api
returns 401 and its api-docs are credential-gated. Recorded as the tenant relationship it is — Elsevier's generic Pure
specification is deliberately not saved under Aalto's name. Aalto's own four-path gateway wrapper over this data is catalogued
separately as aalto:acris-research.
humanURL: https://research.aalto.fi/
baseURL: https://acris.aalto.fi/ws/api
tags:
- Research
- CRIS
- Elsevier Pure
- Research Data
- Tenant
properties:
- type: ResearchRepository
url: https://research.aalto.fi/
- aid: aalto:library-discovery
name: Aalto Learning Centre discovery (Ex Libris Primo / Alma, Finna)
x-operator: tenant
description: Library discovery and the library management system are Ex Libris products under Aalto tenancies — primo.aalto.fi
resolves to the Primo NDE interface with view 358AALTO_INST:MAIN, and aalto.alma.exlibrisgroup.com is registered as an
Aalto service provider in Haka. Aalto also runs a view on Finna, the Finnish national discovery platform operated by the
National Library of Finland, at aalto.finna.fi; that host bot-challenges at 403, which is a finding about the edge, not
about Aalto. No vendor contract is saved.
humanURL: https://primo.aalto.fi/
tags:
- Library
- Discovery
- Ex Libris
- Primo
- Finna
- Tenant
properties:
- type: LibraryCatalog
url: https://primo.aalto.fi/
- aid: aalto:sisu-sis
name: SISU student information system (Funidata)
x-operator: tenant
description: sisu.aalto.fi is Aalto's deployment of SISU, the student information system built by Funidata, a company jointly
owned by Finnish universities. It is the system of record behind the SISU Course API on Aalto's gateway. The student-facing
course search is publicly browsable; the product contract belongs to Funidata, so only the tenancy is recorded here.
humanURL: https://sisu.aalto.fi/student/search/main
tags:
- Course Catalog
- Student Information System
- SISU
- Funidata
- Tenant
properties:
- type: CourseCatalog
url: https://sisu.aalto.fi/student/search/main
common:
- type: Website
url: https://www.aalto.fi/en
- type: Documentation
url: https://www.aalto.fi/en/services/api-gateway-application-programming-interface
- type: APIReference
url: https://3scale.apps.ocp4.aalto.fi/docs
- type: Portal
url: https://3scale.apps.ocp4.aalto.fi/
- type: Signup
url: https://apiportal.aalto.fi/
- type: PrivacyPolicy
url: https://www.aalto.fi/en/aalto-handbook/privacy-notice-for-aaltofi
- type: GitHubOrganization
url: https://github.com/AaltoSciComp
- type: SourceCode
url: https://version.aalto.fi/
- type: LinkedIn
url: https://www.linkedin.com/school/aalto-university/
- type: OpenData
url: https://data.aalto.fi/
- type: ResearchRepository
url: https://aaltodoc.aalto.fi/
- type: LibraryCatalog
url: https://primo.aalto.fi/
- type: CourseCatalog
url: https://sisu.aalto.fi/student/search/main
- type: IdentityFederation
url: https://idp.aalto.fi/idp/shibboleth
- type: ResearchComputing
url: https://scicomp.aalto.fi/
- type: AIPolicy
url: https://www.aalto.fi/en/services/ai-in-aalto
- type: AITooling
url: https://ai.aalto.fi/
- type: Authentication
url: authentication/aalto-authentication.yml
- type: Conformance
url: conformance/aalto-conformance.yml
- type: ErrorCatalog
url: errors/aalto-errors.yml
- type: Lifecycle
url: lifecycle/aalto-lifecycle.yml
- type: DomainSecurity
url: security/aalto-domain-security.yml
- type: Plans
url: plans/aalto-plans-pricing.yml
- type: RateLimits
url: rate-limits/aalto-rate-limits.yml
- type: FinOps
url: finops/aalto-finops.yml
- type: Review
url: review.yml
maintainers:
- FN: Kin Lane
email: kin@apievangelist.com
Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we
store it to create your key and to recognise you if you sign in with another
provider. See our Privacy Policy and
Terms.
Kin Score
How this is scored →