Aembit

Aembit is a Workload Identity and Access Management (Workload IAM) platform for non-human identities — AI agents, applications, microservices, CI/CD pipelines, scripts and service accounts. Instead of long-lived, hard-coded secrets, Aembit cryptographically attests a workload against a Trust Provider (AWS, Azure, GCP, GitHub Actions, GitLab, Kubernetes, Terraform Cloud, OIDC, SPIFFE, Kerberos), evaluates an Access Policy with optional conditional-access signals from CrowdStrike and Wiz, and injects a short-lived credential just-in-time so the application never stores one. The platform is delivered as a SaaS control plane (Aembit Cloud) plus a distributed enforcement layer (Aembit Edge — Agent Proxy, Agent Injector, AWS Lambda extension, CLI and Edge SDKs). Aembit publishes two OpenAPI 3.1.1 contracts — the Aembit Cloud API for managing every platform resource and the Aembit Edge API for workload authentication and credential retrieval — alongside a hosted, read-only MCP Server for querying audit, authorization and workload events, an MCP Identity Gateway and an MCP Authorization Server for governing AI-agent access to MCP servers.

Aembit publishes 38 API contracts indexed on the APIs.io network, including Access Authorization Event API, Access Condition API, Access Condition v2 API, and 35 more. Tagged areas include Security, Identity, Identity and Access Management, Workload Identity, and Non-Human Identity.

The Aembit catalog on APIs.io includes 1 event-driven AsyncAPI specification and 1 Spectral governance ruleset.

Aembit’s developer surface includes documentation, API reference, getting-started guide, support, engineering blog, pricing, signup flow, and 34 more developer resources.

🌐 Visit website 📡 Profile data on GitHub

75.9/100 exemplar ▬ flat Agent 53/100 agent ready Front door AI 6/6 dominant Heartbeat 100/100 alive Full breakdown ↓
scored 2026-11-06 · rubric v0.27.0 · Show this score on your site →

AccessPaid

2 published contracts 1 MCP Servers 5 Agent Skills

Security Identity Identity and Access Management Workload Identity Non-Human Identity Secrets Management Zero Trust AI Agents MCP Authentication Authorization DevSecOps Cloud Security

What this lets a business do 1

Business capabilities this provider's published APIs can perform, derived from its own contracts. Browse all capabilities →

Cybersecurity Management

BC-620

Access Authorization EventAccess ConditionAccess Condition v2Access Policy (Deprecated)Access Policy v2Agent Controller

GET /api/v1/access-policies/{id} GET /api/v1/access-policies/getByWorkloadIds/{clientWorkloadId}/{serverWorkloadId} POST /api/v1/access-policies GET /api/v2/access-policies/{id}

What people ask Aembit 37

The questions people put to an LLM, and the jobs they hand an agent, that Aembit's APIs answer — each one linked to the operation that does it. Generated by API Evangelist

Aembit Access Policy v2 API Get an access policy “What workloads and providers does one access policy tie together?” Delete an access policy “Can I delete an access policy I no longer use?” Partially update an access policy “Can I attach several credential providers to an existing policy?” Find the policy between two workloads “Which access policy governs traffic from a given client workload to a server workload?”

Aembit Credential Provider (Deprecated) API Get a credential provider (v1) “What type and lifetime does a credential provider have in the v1 API?” Delete a credential provider (v1) “Can I delete a credential provider through the v1 API?” Partially update a credential provider (v1) “Can I change a credential provider's provider details without a full update in v1?” Get a credential provider's authorization URL (v1) “Where do I send a user to authorize an OAuth credential provider in v1?”

Aembit Access Policy (Deprecated) API Get an access policy (v1) “What does an access policy connect, in the older v1 API?” Delete an access policy (v1) “Can I delete an access policy using the deprecated v1 API?” Partially update an access policy (v1) “Can I swap the credential provider on an existing policy without rebuilding it?” Find the policy between two workloads (v1) “Is there an access policy linking this client workload to that server workload?”

Aembit Credential Provider v2 API Create a credential provider “How do I create a credential provider that issues credentials to workloads?” Replace a credential provider “How do I fully update a credential provider?” List credential providers “Which credential providers are configured in my tenant?” Get a credential provider “What is configured on a specific credential provider?”

Aembit Client Workload API Create a client workload “How do I register a new client workload?” Replace a client workload “How do I fully update a client workload's identities?” List client workloads “Which client workloads are defined in my tenant?” Rename, toggle or re-identify a client workload “Can I change only the identities of a client workload?”

Aembit Credential Provider Integration API Get a credential provider integration “What does a specific credential provider integration contain?” Delete a credential provider integration “Can I remove a credential provider integration?” Rename or toggle a credential provider integration “Can I disable a credential provider integration temporarily?” List credential provider integrations “Which credential provider integrations are set up?”

Aembit SSO Identity Provider API Verify an SSO identity provider “Is my SSO identity provider fully configured?” Get an SSO identity provider “What is configured on a specific SSO identity provider?” Delete an SSO identity provider “Can I remove an SSO identity provider?” Rename or toggle an SSO identity provider “Can I disable an SSO identity provider temporarily?”

Aembit User API List users “Who has admin access to my Aembit tenant?” Invite a new user “How do I add a new admin user to the tenant?” Edit a user's contact details or status “Can I change just a user's phone number?” Get a user “Is a specific user locked or using two-factor?”

Aembit Agent Controller API List agent controllers “Which agent controllers are registered in my tenant?” Create an agent controller “How do I register a new agent controller?” Replace an agent controller “How do I fully update an agent controller's settings?” Get an agent controller “Is a particular agent controller healthy and when did it last report?”

Aembit Role API List roles “Which roles are defined for admin users?” Create a role “How do I create a custom role for administrators?” Replace a role's permissions “How do I change the permissions granted by a role?” Get a role “What permissions does a specific role grant?”

Aembit Resource Set API Get a resource set “How many workloads and policies live in a given resource set?” Rename or toggle a resource set “Can I deactivate a resource set without deleting it?” Delete a resource set “Can I delete a resource set I no longer use?” List resource sets “Which resource sets partition my tenant?”

Aembit Trust Provider API List trust providers “Which trust providers attest my workloads?” Create a trust provider “How do I add a trust provider to verify workload identity?” Replace a trust provider “How do I change the match rules on a trust provider?” Get a trust provider “What match rules does a specific trust provider apply?”

Showing 12 of 37 APIs with phrasing — see every API.

Kin Score

Kin Score How this is scored →
scored 2026-11-06 · rubric v0.27.0

Composite quality — 75.9/100 · exemplar

Contract Quality 11.3 / 19

Developer Ergonomics 11.5 / 15

Access Clarity 14.0 / 15

Operational Transparency 8.2 / 10

Contract Governance 2.9 / 9

Discoverability 5.1 / 8

Regulatory Posture 5.3 / 15

Create-or-Update Ergonomics 2.8 / 10

Agent readiness — 53/100 · agent ready

Machine-Readable Contract 18 / 18

Agentic Access Contract 10 / 10

Documented Reversibility 0 / 6

MCP Server 12 / 12

Machine-Readable Auth 10 / 10

Idempotency 0 / 9

Stable Error Semantics 8 / 8

Request/Response Examples 7 / 7

Rate-Limit Signaling 7 / 7

Typed Event Surface 6 / 6

Agent Skills 5 / 5

Well-Known Catalog 0 / 4

Consent & Bot Identity 0 / 3

A2A Agent Card 0 / 8

Dry-Run / Simulate Mode 0 / 4

Delegated User Identity 6 / 6

Protected Resource Metadata 5 / 5

Registration Without a Human 6 / 6

Agentic Commerce Well-Known Document 0 / 5

Pagination 0 / 5

Distinct Operations 3 / 3

MCP Tool Quality 6 / 6

Regulatory Posture applies to this provider. Its tags matched the Horizontal (data, software, accessibility, platform) regime, so Regulatory Posture carries 15 points of the composite. If this regime is wrong for your business, say so on your provider repo — the applicability map is public and we will correct it.

Create-or-Update Ergonomics applies to this provider. This API accepts writes, so it carries 10 points of the composite. It is scored from the published contracts themselves: whether a caller can create-or-update in one call, whether the write accepts a key the caller already holds, and whether the response says which branch ran. Without that, every write needs a search-and-branch in front of it, and the first time that check is skipped a duplicate record is created. Scored against the observed mean rather than raw — a provider at the catalog average is unchanged by this facet, not penalised by it.

The six quality facets above are damped to 75 points between them, because the conditional facet above carries the other 25. That is why each facet's contribution is shown against a damped maximum: raising a quality facet moves the composite by 75% of its nominal weight, not 100%. The full arithmetic is at apis.io/rating/.

Show this score on your site.

It updates itself when the score changes. Paste this where you link to your API docs:

<a href="https://apis.io/providers/aembit/"><img src="https://apis.io/badge/aembit/card.svg" alt="Aembit on APIs.io — Kin Score by API Evangelist"></a>

Other styles, a README pill and a shields.io endpoint are on the badge page.

Raise your score.

Agent readiness — checks not met, largest first (exact, from this profile):

Idempotency +9 pts — OpenAPI mutating operations declare an idempotency key — a header, a request-body property, or a named de-duplication token whose own description says so (verified); else common[].type matches /idempoten/i (documented)
A2A Agent Card +8 pts — a2a/-a2a.yml manifest, graded on conformance.grade against A2A 1.0.0
Documented Reversibility +6 pts — a reversal operation in the contract, graded up when a window is documented too
Pagination +5 pts — share of collection GETs (an array, or one wrapped in data/items/results ...) that declare a page/limit/offset/cursor parameter, a Link header or a next/cursor field; na with no collection GETs
Agentic Commerce Well-Known Document +5 pts — a parsing /.well-known/ucp.json or acp.json declaring a version and at least one service, OR (0.27) a live x402 payment challenge from _data/x402-adoption.json — `self` when its endpoints are on the provider's own domain, `platform` when they are on a vendor's
Dry-Run / Simulate Mode +4 pts — OpenAPI: destructive operations expose a dry_run / simulate / preview / validate_only parameter

2 more unmet checks in the Agent Readiness table above.

Kin Score — facets with the most composite points still available (weight × headroom):

Contract Quality scores 60.5 — up to +9.9 composite points
Contract Governance scores 31.8 — up to +8.2 composite points
Developer Ergonomics scores 76.8 — up to +4.6 composite points

Each check links to what satisfies it. Publish the artifact, or tell us where it already lives, and the score moves on the next scoring run.

Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. Every facet and dimension name above is a link: it opens that measurement's own page — what it means, the exact checks that feed it, how the whole catalog distributes on it, and the providers at the top of it. This rating is computed from the provider profile at artifacts.apis.io/aembit/apis.yml: open an issue on github.com/api-evangelist/aembit to ask a question or point us at an artifact you publish. Submit an artifact on GitHub — free → Manage your own listing — the Influence plan, $499/mo →

Markets this provider is in provisional

The Kin Score Market layer reads a provider inside its market: its position, and how deep its integrations go. Depth is only comparable within a position. Provisional and unweighted: not part of the Kin Score or agent readiness.

Market	Position	Depth	Registered MCP server	Declares compatibility
AI Agents (A2A agent cards)	builds-on	44.1	-	-
Cloud Security Attestation and Secure-by-Design	builds-on	44.1	-	-
Infrastructure-as-Code Provider Registries (Terraform, OpenTofu, Pulumi)	builds-on	44.1	-	-

Registered MCP server and declares compatibility are report only — not weighted. Undeclared means we found nothing we can read, so there is no number: we never infer integrations.

Standards implemented 6

Standards this provider implements or carries. De facto ones are profiled and measured by the API Commons; formal ones come from the standards directory and are linked by the provider's own tags. The evidence column says how each claim was established — not that it was made.

DevSecOps

tagged — the provider's own APIs.json carries the standard as a tag; implementation not verified

IAM

tagged — the provider's own APIs.json carries the standard as a tag; implementation not verified

Model Context Protocol (MCP)

measured — observed by APIs.io (templated)

OAuth 2.0 Protected Resource Metadata

measured — observed by APIs.io (verified)

Dynamic Client Registration

measured — observed by APIs.io (published)

OpenAPI

measured — observed by APIs.io (published)

APIs 38

Individual APIs this provider publishes, each with its own machine-readable definition.

Aembit MCP Server

A first-party hosted Model Context Protocol server that gives AI agents and MCP clients read-only access to a tenant's Aembit event logs. Three tools — get_audit_logs, get_auth_...

Aembit Access Authorization Event API

The Access Authorization Event API from Aembit — 2 operation(s) for access authorization event.

Aembit Access Condition API

The Access Condition API from Aembit — 2 operation(s) for access condition.

Aembit Access Condition v2 API

The Access Condition v2 API from Aembit — 2 operation(s) for access condition v2.

Aembit Access Policy (Deprecated) API

The Access Policy (Deprecated) API from Aembit — 4 operation(s) for access policy (deprecated).

Aembit Access Policy v2 API

The Access Policy v2 API from Aembit — 5 operation(s) for access policy v2.

Aembit Agent Controller API

The Agent Controller API from Aembit — 3 operation(s) for agent controller.

Aembit Audit Log API

The Audit Log API from Aembit — 2 operation(s) for audit log.

Aembit Auth API

The Auth API from Aembit — 1 operation(s) for auth.

Aembit Client Workload API

The Client Workload API from Aembit — 3 operation(s) for client workload.

Aembit Compliance API

The Compliance API from Aembit — 1 operation(s) for compliance.

Aembit Content Security API

The Content Security API from Aembit — 2 operation(s) for content security.

Aembit Credential Provider (Deprecated) API

The Credential Provider (Deprecated) API from Aembit — 4 operation(s) for credential provider (deprecated).

Aembit Credential Provider Integration API

The Credential Provider Integration API from Aembit — 3 operation(s) for credential provider integration.

Aembit Credential Provider v2 API

The Credential Provider v2 API from Aembit — 4 operation(s) for credential provider v2.

Aembit Credentials API

The Credentials API from Aembit — 1 operation(s) for credentials.

Aembit Discovery Integration API

The DiscoveryIntegration API from Aembit — 2 operation(s) for discoveryintegration.

Aembit Discovery Server Workload Draft API

The DiscoveryServerWorkloadDraft API from Aembit — 1 operation(s) for discoveryserverworkloaddraft.

Aembit Health API

The Health API from Aembit — 1 operation(s) for health.

Aembit Integration API

The Integration API from Aembit — 2 operation(s) for integration.

Aembit Integration v2 API

The Integration v2 API from Aembit — 2 operation(s) for integration v2.

Aembit Log Stream API

The Log Stream API from Aembit — 2 operation(s) for log stream.

Aembit MFA SignOn Policy API

The MFA SignOn Policy API from Aembit — 1 operation(s) for mfa signon policy.

Aembit Policy API

The Policy API from Aembit — 1 operation(s) for policy.

Aembit Resource Set API

The Resource Set API from Aembit — 2 operation(s) for resource set.

Aembit Role API

The Role API from Aembit — 2 operation(s) for role.

Aembit Routing API

The Routing API from Aembit — 2 operation(s) for routing.

Aembit Server Workload API

The Server Workload API from Aembit — 2 operation(s) for server workload.

Aembit SignOn Policy API

The SignOn Policy API from Aembit — 1 operation(s) for signon policy.

Aembit SSO Identity Provider API

The SSO Identity Provider API from Aembit — 3 operation(s) for sso identity provider.

Aembit SSO SignOn Policy API

The SSO SignOn Policy API from Aembit — 1 operation(s) for sso signon policy.

Aembit Standalone Certificate Authority API

The Standalone Certificate Authority API from Aembit — 2 operation(s) for standalone certificate authority.

Aembit Standalone TLS Decrypt API

The Standalone TLS Decrypt API from Aembit — 1 operation(s) for standalone tls decrypt.

Aembit TLS Decrypt API

The TLS Decrypt API from Aembit — 1 operation(s) for tls decrypt.

Aembit Trust Provider API

The Trust Provider API from Aembit — 2 operation(s) for trust provider.

Aembit Trust Provider Secret API

The Trust Provider Secret API from Aembit — 2 operation(s) for trust provider secret.

Aembit User API

The User API from Aembit — 3 operation(s) for user.

Aembit Workload Event API

The Workload Event API from Aembit — 2 operation(s) for workload event.

Scroll for all 38

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

Aembit MCP Server

Remote MCP server at {tenantId}.mcp.useast2.aembit.io over HTTP requiring an API key; 3 tools listed.

MCP SERVER

Agent Skills 5

Packaged agent skills for driving this provider's APIs from an AI assistant.

Audit access decisions and workload activity

AGENT SKILL

Govern AI agent access to MCP servers

AGENT SKILL

Provision secretless workload access

AGENT SKILL

Retrieve a credential from the Edge API

AGENT SKILL

Stream Aembit events to a SIEM or bucket

AGENT SKILL

Aembit API pricing

Prices published by Aembit, read 2026-10-28 from aembit.io/pricing/. A free plan or tier is listed.

Plan	Price
Agentic AI - Starter	Free! Includes: 3 AI Agents, Blended Identity via Human IdPs, Single MCP Identity Gateway, 5 MCP Authorization Servi
Agentic AI - Teams	$20/agent/mo Includes: 10 AI Agents, Grow to 500 Agents, Customizable MCP Identity Gateway, Unlimited Authorization Service
Agentic AI - Enterprise	Custom Includes: Unlimited AI Agents, Customizable MCP Identity Gateway, Unlimited Authorization Service Policies, Cu
Workloads - Starter	Free! Includes: 10 Workloads (clients and services), 10 Access Policies, 24 Hours of Event Log Retention, Community
Workloads - Teams	$20/workload/mo Includes: 10 Workloads (clients and services), Grow to 50 Workloads, 24 Hours of Event Log Retention, Live Sup
Workloads - Enterprise	Custom Includes: Unlimited Workloads, Unlimited Access Policies, Custom Event Log Retention, Conditional Access, 24x7

Plan details, limits and sources →

Billed by: agent · FinOps profile →

Pricing Plans 2

Published pricing tiers and plan structures.

Aembit Plans Pricing

6 plans

PLANS

Aembit Price Estimates

0 plans

PLANS

Rate Limits 1

Documented rate limits and quota policies.

Aembit Rate Limits

3 limits

RATE LIMITS

Service Levels 1

Uptime the provider promises or reports, as SLA4OAI. Read from its own pages; APIs.io runs no monitors.

Aembit

SLA

FinOps 1

Cost, billing, and metering signals for API financial operations.

Aembit Finops

FINOPS

Event Specifications 1

AsyncAPI definitions for this provider's event-driven and streaming APIs.

Aembit Event Surface

ASYNCAPI

Spectral Rules 1

Spectral governance rulesets for linting and validating these APIs.

Aembit API Rules

55 rules · 33 errors 18 warnings 4 info

SPECTRAL

OpenAPI Overlays 39

Overlays applied on top of this provider's contracts. Each card says who wrote it: a document the provider publishes, or one API Evangelist derived or generated.

Aembit Access Authorization Event Api Phrasing Overlay

3 actions · phrasing · aembit-access-authorization-event-api-openapi.yml

GENERATED

Aembit Access Condition Api Phrasing Overlay

7 actions · phrasing · aembit-access-condition-api-openapi.yml

GENERATED

Aembit Access Condition V2 Api Phrasing Overlay

7 actions · phrasing · aembit-access-condition-v2-api-openapi.yml

GENERATED

Aembit Access Policy Deprecated Api Phrasing Overlay

9 actions · phrasing · aembit-access-policy-deprecated-api-openapi.yml

GENERATED

Aembit Access Policy V2 Api Phrasing Overlay

11 actions · phrasing · aembit-access-policy-v2-api-openapi.yml

GENERATED

Aembit Agent Controller Api Phrasing Overlay

8 actions · phrasing · aembit-agent-controller-api-openapi.yml

GENERATED

Aembit Audit Log Api Phrasing Overlay

3 actions · phrasing · aembit-audit-log-api-openapi.yml

GENERATED

Aembit Auth Api Phrasing Overlay

2 actions · phrasing · aembit-auth-api-openapi.yml

GENERATED

Aembit Client Workload Api Phrasing Overlay

8 actions · phrasing · aembit-client-workload-api-openapi.yml

GENERATED

Aembit Cloud Overlay

4 actions · documentation · aembit-cloud-api-openapi.yml

DERIVED

Aembit Compliance Api Phrasing Overlay

3 actions · phrasing · aembit-compliance-api-openapi.yml

GENERATED

Aembit Content Security Api Phrasing Overlay

7 actions · phrasing · aembit-content-security-api-openapi.yml

GENERATED

Aembit Credential Provider Deprecated Api Phrasing Overlay

9 actions · phrasing · aembit-credential-provider-deprecated-api-openapi.yml

GENERATED

Aembit Credential Provider Integration Api Phrasing Overlay

8 actions · phrasing · aembit-credential-provider-integration-api-openapi.yml

GENERATED

Aembit Credential Provider V2 Api Phrasing Overlay

9 actions · phrasing · aembit-credential-provider-v2-api-openapi.yml

GENERATED

Aembit Credentials Api Phrasing Overlay

2 actions · phrasing · aembit-credentials-api-openapi.yml

GENERATED

Aembit Discoveryintegration Api Phrasing Overlay

7 actions · phrasing · aembit-discoveryintegration-api-openapi.yml

GENERATED

Aembit Discoveryserverworkloaddraft Api Phrasing Overlay

2 actions · phrasing · aembit-discoveryserverworkloaddraft-api-openapi.yml

GENERATED

Aembit Edge Overlay

3 actions · update · aembit-edge-api-openapi.yml

DERIVED

Aembit Health Api Phrasing Overlay

2 actions · phrasing · aembit-health-api-openapi.yml

GENERATED

Aembit Integration Api Phrasing Overlay

7 actions · phrasing · aembit-integration-api-openapi.yml

GENERATED

Aembit Integration V2 Api Phrasing Overlay

7 actions · phrasing · aembit-integration-v2-api-openapi.yml

GENERATED

Aembit Log Stream Api Phrasing Overlay

7 actions · phrasing · aembit-log-stream-api-openapi.yml

GENERATED

Aembit Mfa Signon Policy Api Phrasing Overlay

2 actions · phrasing · aembit-mfa-signon-policy-api-openapi.yml

GENERATED

Aembit Policy Api Phrasing Overlay

3 actions · phrasing · aembit-policy-api-openapi.yml

GENERATED

Aembit Resource Set Api Phrasing Overlay

7 actions · phrasing · aembit-resource-set-api-openapi.yml

GENERATED

Aembit Role Api Phrasing Overlay

7 actions · phrasing · aembit-role-api-openapi.yml

GENERATED

Aembit Routing Api Phrasing Overlay

6 actions · phrasing · aembit-routing-api-openapi.yml

GENERATED

Aembit Server Workload Api Phrasing Overlay

7 actions · phrasing · aembit-server-workload-api-openapi.yml

GENERATED

Aembit Signon Policy Api Phrasing Overlay

2 actions · phrasing · aembit-signon-policy-api-openapi.yml

GENERATED

Aembit Sso Identity Provider Api Phrasing Overlay

8 actions · phrasing · aembit-sso-identity-provider-api-openapi.yml

GENERATED

Aembit Sso Signon Policy Api Phrasing Overlay

2 actions · phrasing · aembit-sso-signon-policy-api-openapi.yml

GENERATED

Aembit Standalone Certificate Authority Api Phrasing Overlay

7 actions · phrasing · aembit-standalone-certificate-authority-api-openapi.yml

GENERATED

Aembit Standalone Tls Decrypt Api Phrasing Overlay

2 actions · phrasing · aembit-standalone-tls-decrypt-api-openapi.yml

GENERATED

Aembit Tls Decrypt Api Phrasing Overlay

2 actions · phrasing · aembit-tls-decrypt-api-openapi.yml

GENERATED

Aembit Trust Provider Api Phrasing Overlay

7 actions · phrasing · aembit-trust-provider-api-openapi.yml

GENERATED

Aembit Trust Provider Secret Api Phrasing Overlay

5 actions · phrasing · aembit-trust-provider-secret-api-openapi.yml

GENERATED

Aembit User Api Phrasing Overlay

8 actions · phrasing · aembit-user-api-openapi.yml

GENERATED

Aembit Workload Event Api Phrasing Overlay

3 actions · phrasing · aembit-workload-event-api-openapi.yml

GENERATED

Scroll for all 39

Security Posture 4

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Aembit Authentication

http · 2 schemes

SECURITY

Aembit Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Aembit Vulnerability Disclosure

Hackerone · contact published

SECURITY

Aembit Trust Center

SOC 2, ISO 27001

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Aembit Agentic Access

167 operations · 98 acting · 5 human-in-the-loop

167 operations · 98 acting

AGENTIC

Resources

Get Started 5

Portal, sign-up, and the first successful call

DeveloperPortal

GettingStarted

SignUp

Sandbox

Console

Documentation 2

Reference material describing how the API behaves

Documentation

Documentation

APIReference

APIReference

Agent Surfaces 4

MCP servers, agent skills, and machine-readable catalogs

MCPServer

AgentSkill

LLMsTxt

AgenticAccess

Design & Contract 5

Pagination, idempotency, versioning, errors, and events

Conventions

ErrorCatalog

Lifecycle

Conformance

DataModel

Build 5

SDKs, sample code, and the tooling you integrate with

GitHubOrganization

CLI

Packages

SDKs

ToolCrosswalk

Access & Security 6

Authentication, authorization, and security posture

TrustCenter

TrustCenter

Compliance

Compliance

Security

Security

VulnerabilityDisclosure

VulnerabilityDisclosure

DomainSecurity

DomainSecurity

Authentication

Authentication

Operate 5

Status, limits, changes, and where to get help

Support

StatusPage

Deprecation

ChangeLog

RateLimits

Commercial 4

Pricing, plans, and the legal terms of use

Pricing

TermsOfService

PrivacyPolicy

Plans

Company 2

The organization behind the API

Website

Website

Blog

Blog

Other 3

Properties that don't map to a standard resource type

CapabilityMap

CapabilityMap

Overlay

Overlay

Overlay

Overlay

Source (apis.yml)

aid: aembit
name: Aembit
description: Aembit is a Workload Identity and Access Management (Workload IAM) platform for non-human identities — AI agents,
  applications, microservices, CI/CD pipelines, scripts and service accounts. Instead of long-lived, hard-coded secrets, Aembit
  cryptographically attests a workload against a Trust Provider (AWS, Azure, GCP, GitHub Actions, GitLab, Kubernetes, Terraform
  Cloud, OIDC, SPIFFE, Kerberos), evaluates an Access Policy with optional conditional-access signals from CrowdStrike and
  Wiz, and injects a short-lived credential just-in-time so the application never stores one. The platform is delivered as
  a SaaS control plane (Aembit Cloud) plus a distributed enforcement layer (Aembit Edge — Agent Proxy, Agent Injector, AWS
  Lambda extension, CLI and Edge SDKs). Aembit publishes two OpenAPI 3.1.1 contracts — the Aembit Cloud API for managing every
  platform resource and the Aembit Edge API for workload authentication and credential retrieval — alongside a hosted, read-only
  MCP Server for querying audit, authorization and workload events, an MCP Identity Gateway and an MCP Authorization Server
  for governing AI-agent access to MCP servers.
accessModel:
  pricing: paid
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Paid
  confidence: high
  source:
  - plans
  - authentication
  - rate-limits
  - security
  - sandbox
  generated: '2026-11-06'
  method: derived
image: https://aembit.io/wp-content/uploads/2023/08/aembit-favicon-300x300.png
url: https://raw.githubusercontent.com/api-evangelist/aembit/refs/heads/main/apis.yml
specificationVersion: '0.20'
created: '2026-09-09'
modified: '2026-09-09'
position: Producing
tags:
- Security
- Identity
- Identity and Access Management
- Workload Identity
- Non-Human Identity
- Secrets Management
- Zero Trust
- AI Agents
- MCP
- Authentication
- Authorization
- DevSecOps
- Cloud Security
tags_raw:
- Security
- Identity
- Access Management
- Workload Identity
- Non-Human Identity
- Secrets Management
- Zero Trust
- Agentic AI
- Model Context Protocol
- Authentication
- Authorization
- DevSecOps
- Cloud Security
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
apis:
- name: Aembit MCP Server
  description: A first-party hosted Model Context Protocol server that gives AI agents and MCP clients read-only access to
    a tenant's Aembit event logs. Three tools — get_audit_logs, get_auth_events and get_workload_events — expose the same
    audit, authorization-event and workload-event data as the Cloud API reporting endpoints, with filtering, ordering and
    pagination. Authentication is an Aembit API token as a bearer, optionally scoped with an X-Aembit-ResourceSet header.
    The server is read-only by design and must be enabled per tenant.
  humanURL: https://docs.aembit.io/ai-guide/mcp/mcp-server/
  baseURL: https://{tenantId}.mcp.useast2.aembit.io/mcp
  tags:
  - MCP
  - AI Agents
  - Audit
  tags_raw:
  - Model Context Protocol
  - Agentic AI
  - Audit
  properties:
  - type: MCPServer
    url: mcp/aembit-mcp.yml
  - type: ToolCrosswalk
    url: mcp/aembit-tool-crosswalk.yml
  - type: Documentation
    url: https://docs.aembit.io/ai-guide/mcp/mcp-server/
  - type: APIReference
    url: https://docs.aembit.io/ai-guide/mcp/mcp-server/reference-mcp-server/
- aid: aembit:aembit-access-authorization-event-api
  name: Aembit Access Authorization Event API
  description: The Access Authorization Event API from Aembit — 2 operation(s) for access authorization event.
  humanURL: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  baseURL: https://{tenant}.aembit.io
  tags:
  - Access Authorization Event
  properties:
  - type: OpenAPI
    url: openapi/aembit-access-authorization-event-api-openapi.yml
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/cloud/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/edge/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/edge/api-reference-edge/
  - type: SDKs
    url: https://docs.aembit.io/dev-guide/sdk/edge/
- aid: aembit:aembit-access-condition-api
  name: Aembit Access Condition API
  description: The Access Condition API from Aembit — 2 operation(s) for access condition.
  humanURL: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  baseURL: https://{tenant}.aembit.io
  tags:
  - Access Condition
  properties:
  - type: OpenAPI
    url: openapi/aembit-access-condition-api-openapi.yml
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/cloud/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/edge/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/edge/api-reference-edge/
  - type: SDKs
    url: https://docs.aembit.io/dev-guide/sdk/edge/
- aid: aembit:aembit-access-condition-v2-api
  name: Aembit Access Condition v2 API
  description: The Access Condition v2 API from Aembit — 2 operation(s) for access condition v2.
  humanURL: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  baseURL: https://{tenant}.aembit.io
  tags:
  - Access Condition v2
  properties:
  - type: OpenAPI
    url: openapi/aembit-access-condition-v2-api-openapi.yml
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/cloud/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/edge/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/edge/api-reference-edge/
  - type: SDKs
    url: https://docs.aembit.io/dev-guide/sdk/edge/
- aid: aembit:aembit-access-policy-deprecated-api
  name: Aembit Access Policy (Deprecated) API
  description: The Access Policy (Deprecated) API from Aembit — 4 operation(s) for access policy (deprecated).
  humanURL: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  baseURL: https://{tenant}.aembit.io
  tags:
  - Access Policy (Deprecated)
  properties:
  - type: OpenAPI
    url: openapi/aembit-access-policy-deprecated-api-openapi.yml
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/cloud/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/edge/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/edge/api-reference-edge/
  - type: SDKs
    url: https://docs.aembit.io/dev-guide/sdk/edge/
- aid: aembit:aembit-access-policy-v2-api
  name: Aembit Access Policy v2 API
  description: The Access Policy v2 API from Aembit — 5 operation(s) for access policy v2.
  humanURL: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  baseURL: https://{tenant}.aembit.io
  tags:
  - Access Policy v2
  properties:
  - type: OpenAPI
    url: openapi/aembit-access-policy-v2-api-openapi.yml
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/cloud/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/edge/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/edge/api-reference-edge/
  - type: SDKs
    url: https://docs.aembit.io/dev-guide/sdk/edge/
- aid: aembit:aembit-agent-controller-api
  name: Aembit Agent Controller API
  description: The Agent Controller API from Aembit — 3 operation(s) for agent controller.
  humanURL: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  baseURL: https://{tenant}.aembit.io
  tags:
  - Agent Controller
  properties:
  - type: OpenAPI
    url: openapi/aembit-agent-controller-api-openapi.yml
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/cloud/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/edge/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/edge/api-reference-edge/
  - type: SDKs
    url: https://docs.aembit.io/dev-guide/sdk/edge/
- aid: aembit:aembit-audit-log-api
  name: Aembit Audit Log API
  description: The Audit Log API from Aembit — 2 operation(s) for audit log.
  humanURL: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  baseURL: https://{tenant}.aembit.io
  tags:
  - Audit Logs
  tags_raw:
  - Audit Log
  properties:
  - type: OpenAPI
    url: openapi/aembit-audit-log-api-openapi.yml
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/cloud/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/edge/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/edge/api-reference-edge/
  - type: SDKs
    url: https://docs.aembit.io/dev-guide/sdk/edge/
- aid: aembit:aembit-auth-api
  name: Aembit Auth API
  description: The Auth API from Aembit — 1 operation(s) for auth.
  humanURL: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  baseURL: https://{tenant}.aembit.io
  tags:
  - Authentication
  tags_raw:
  - Auth
  properties:
  - type: OpenAPI
    url: openapi/aembit-auth-api-openapi.yml
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/cloud/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/edge/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/edge/api-reference-edge/
  - type: SDKs
    url: https://docs.aembit.io/dev-guide/sdk/edge/
- aid: aembit:aembit-client-workload-api
  name: Aembit Client Workload API
  description: The Client Workload API from Aembit — 3 operation(s) for client workload.
  humanURL: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  baseURL: https://{tenant}.aembit.io
  tags:
  - Client Workload
  properties:
  - type: OpenAPI
    url: openapi/aembit-client-workload-api-openapi.yml
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/cloud/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/edge/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/edge/api-reference-edge/
  - type: SDKs
    url: https://docs.aembit.io/dev-guide/sdk/edge/
- aid: aembit:aembit-compliance-api
  name: Aembit Compliance API
  description: The Compliance API from Aembit — 1 operation(s) for compliance.
  humanURL: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  baseURL: https://{tenant}.aembit.io
  tags:
  - Compliance
  properties:
  - type: OpenAPI
    url: openapi/aembit-compliance-api-openapi.yml
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/cloud/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/edge/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/edge/api-reference-edge/
  - type: SDKs
    url: https://docs.aembit.io/dev-guide/sdk/edge/
- aid: aembit:aembit-content-security-api
  name: Aembit Content Security API
  description: The Content Security API from Aembit — 2 operation(s) for content security.
  humanURL: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  baseURL: https://{tenant}.aembit.io
  tags:
  - Content Security
  properties:
  - type: OpenAPI
    url: openapi/aembit-content-security-api-openapi.yml
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/cloud/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/edge/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/edge/api-reference-edge/
  - type: SDKs
    url: https://docs.aembit.io/dev-guide/sdk/edge/
- aid: aembit:aembit-credential-provider-deprecated-api
  name: Aembit Credential Provider (Deprecated) API
  description: The Credential Provider (Deprecated) API from Aembit — 4 operation(s) for credential provider (deprecated).
  humanURL: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  baseURL: https://{tenant}.aembit.io
  tags:
  - Credential Provider (Deprecated)
  properties:
  - type: OpenAPI
    url: openapi/aembit-credential-provider-deprecated-api-openapi.yml
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/cloud/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/edge/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/edge/api-reference-edge/
  - type: SDKs
    url: https://docs.aembit.io/dev-guide/sdk/edge/
- aid: aembit:aembit-credential-provider-integration-api
  name: Aembit Credential Provider Integration API
  description: The Credential Provider Integration API from Aembit — 3 operation(s) for credential provider integration.
  humanURL: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  baseURL: https://{tenant}.aembit.io
  tags:
  - Credential Provider Integration
  properties:
  - type: OpenAPI
    url: openapi/aembit-credential-provider-integration-api-openapi.yml
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/cloud/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/edge/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/edge/api-reference-edge/
  - type: SDKs
    url: https://docs.aembit.io/dev-guide/sdk/edge/
- aid: aembit:aembit-credential-provider-v2-api
  name: Aembit Credential Provider v2 API
  description: The Credential Provider v2 API from Aembit — 4 operation(s) for credential provider v2.
  humanURL: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  baseURL: https://{tenant}.aembit.io
  tags:
  - Credential Provider v2
  properties:
  - type: OpenAPI
    url: openapi/aembit-credential-provider-v2-api-openapi.yml
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/cloud/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/edge/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/edge/api-reference-edge/
  - type: SDKs
    url: https://docs.aembit.io/dev-guide/sdk/edge/
- aid: aembit:aembit-credentials-api
  name: Aembit Credentials API
  description: The Credentials API from Aembit — 1 operation(s) for credentials.
  humanURL: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  baseURL: https://{tenant}.aembit.io
  tags:
  - Credentials
  properties:
  - type: OpenAPI
    url: openapi/aembit-credentials-api-openapi.yml
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/cloud/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/edge/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/edge/api-reference-edge/
  - type: SDKs
    url: https://docs.aembit.io/dev-guide/sdk/edge/
- aid: aembit:aembit-discoveryintegration-api
  name: Aembit Discovery Integration API
  description: The DiscoveryIntegration API from Aembit — 2 operation(s) for discoveryintegration.
  humanURL: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  baseURL: https://{tenant}.aembit.io
  tags:
  - DiscoveryIntegration
  properties:
  - type: OpenAPI
    url: openapi/aembit-discoveryintegration-api-openapi.yml
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/cloud/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/edge/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/edge/api-reference-edge/
  - type: SDKs
    url: https://docs.aembit.io/dev-guide/sdk/edge/
- aid: aembit:aembit-discoveryserverworkloaddraft-api
  name: Aembit Discovery Server Workload Draft API
  description: The DiscoveryServerWorkloadDraft API from Aembit — 1 operation(s) for discoveryserverworkloaddraft.
  humanURL: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  baseURL: https://{tenant}.aembit.io
  tags:
  - DiscoveryServerWorkloadDraft
  properties:
  - type: OpenAPI
    url: openapi/aembit-discoveryserverworkloaddraft-api-openapi.yml
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/cloud/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/edge/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/edge/api-reference-edge/
  - type: SDKs
    url: https://docs.aembit.io/dev-guide/sdk/edge/
- aid: aembit:aembit-health-api
  name: Aembit Health API
  description: The Health API from Aembit — 1 operation(s) for health.
  humanURL: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  baseURL: https://{tenant}.aembit.io
  tags:
  - Health
  properties:
  - type: OpenAPI
    url: openapi/aembit-health-api-openapi.yml
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/cloud/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/edge/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/edge/api-reference-edge/
  - type: SDKs
    url: https://docs.aembit.io/dev-guide/sdk/edge/
- aid: aembit:aembit-integration-api
  name: Aembit Integration API
  description: The Integration API from Aembit — 2 operation(s) for integration.
  humanURL: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  baseURL: https://{tenant}.aembit.io
  tags:
  - Integration
  properties:
  - type: OpenAPI
    url: openapi/aembit-integration-api-openapi.yml
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/cloud/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/edge/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/edge/api-reference-edge/
  - type: SDKs
    url: https://docs.aembit.io/dev-guide/sdk/edge/
- aid: aembit:aembit-integration-v2-api
  name: Aembit Integration v2 API
  description: The Integration v2 API from Aembit — 2 operation(s) for integration v2.
  humanURL: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  baseURL: https://{tenant}.aembit.io
  tags:
  - Integration v2
  properties:
  - type: OpenAPI
    url: openapi/aembit-integration-v2-api-openapi.yml
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/cloud/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/edge/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/edge/api-reference-edge/
  - type: SDKs
    url: https://docs.aembit.io/dev-guide/sdk/edge/
- aid: aembit:aembit-log-stream-api
  name: Aembit Log Stream API
  description: The Log Stream API from Aembit — 2 operation(s) for log stream.
  humanURL: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  baseURL: https://{tenant}.aembit.io
  tags:
  - Log Stream
  properties:
  - type: OpenAPI
    url: openapi/aembit-log-stream-api-openapi.yml
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/cloud/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/edge/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/edge/api-reference-edge/
  - type: SDKs
    url: https://docs.aembit.io/dev-guide/sdk/edge/
- aid: aembit:aembit-mfa-signon-policy-api
  name: Aembit MFA SignOn Policy API
  description: The MFA SignOn Policy API from Aembit — 1 operation(s) for mfa signon policy.
  humanURL: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  baseURL: https://{tenant}.aembit.io
  tags:
  - MFA SignOn Policy
  properties:
  - type: OpenAPI
    url: openapi/aembit-mfa-signon-policy-api-openapi.yml
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/cloud/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/edge/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/edge/api-reference-edge/
  - type: SDKs
    url: https://docs.aembit.io/dev-guide/sdk/edge/
- aid: aembit:aembit-policy-api
  name: Aembit Policy API
  description: The Policy API from Aembit — 1 operation(s) for policy.
  humanURL: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  baseURL: https://{tenant}.aembit.io
  tags:
  - Policy
  properties:
  - type: OpenAPI
    url: openapi/aembit-policy-api-openapi.yml
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/cloud/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/edge/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/edge/api-reference-edge/
  - type: SDKs
    url: https://docs.aembit.io/dev-guide/sdk/edge/
- aid: aembit:aembit-resource-set-api
  name: Aembit Resource Set API
  description: The Resource Set API from Aembit — 2 operation(s) for resource set.
  humanURL: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  baseURL: https://{tenant}.aembit.io
  tags:
  - Resource Set
  properties:
  - type: OpenAPI
    url: openapi/aembit-resource-set-api-openapi.yml
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/cloud/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/edge/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/edge/api-reference-edge/
  - type: SDKs
    url: https://docs.aembit.io/dev-guide/sdk/edge/
- aid: aembit:aembit-role-api
  name: Aembit Role API
  description: The Role API from Aembit — 2 operation(s) for role.
  humanURL: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  baseURL: https://{tenant}.aembit.io
  tags:
  - Role
  properties:
  - type: OpenAPI
    url: openapi/aembit-role-api-openapi.yml
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/cloud/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/edge/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/edge/api-reference-edge/
  - type: SDKs
    url: https://docs.aembit.io/dev-guide/sdk/edge/
- aid: aembit:aembit-routing-api
  name: Aembit Routing API
  description: The Routing API from Aembit — 2 operation(s) for routing.
  humanURL: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  baseURL: https://{tenant}.aembit.io
  tags:
  - Routing
  properties:
  - type: OpenAPI
    url: openapi/aembit-routing-api-openapi.yml
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/cloud/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/edge/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/edge/api-reference-edge/
  - type: SDKs
    url: https://docs.aembit.io/dev-guide/sdk/edge/
- aid: aembit:aembit-server-workload-api
  name: Aembit Server Workload API
  description: The Server Workload API from Aembit — 2 operation(s) for server workload.
  humanURL: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  baseURL: https://{tenant}.aembit.io
  tags:
  - Server Workload
  properties:
  - type: OpenAPI
    url: openapi/aembit-server-workload-api-openapi.yml
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/cloud/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/edge/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/edge/api-reference-edge/
  - type: SDKs
    url: https://docs.aembit.io/dev-guide/sdk/edge/
- aid: aembit:aembit-signon-policy-api
  name: Aembit SignOn Policy API
  description: The SignOn Policy API from Aembit — 1 operation(s) for signon policy.
  humanURL: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  baseURL: https://{tenant}.aembit.io
  tags:
  - SignOn Policy
  properties:
  - type: OpenAPI
    url: openapi/aembit-signon-policy-api-openapi.yml
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/cloud/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/edge/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/edge/api-reference-edge/
  - type: SDKs
    url: https://docs.aembit.io/dev-guide/sdk/edge/
- aid: aembit:aembit-sso-identity-provider-api
  name: Aembit SSO Identity Provider API
  description: The SSO Identity Provider API from Aembit — 3 operation(s) for sso identity provider.
  humanURL: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  baseURL: https://{tenant}.aembit.io
  tags:
  - SSO Identity Provider
  properties:
  - type: OpenAPI
    url: openapi/aembit-sso-identity-provider-api-openapi.yml
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/cloud/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/edge/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/edge/api-reference-edge/
  - type: SDKs
    url: https://docs.aembit.io/dev-guide/sdk/edge/
- aid: aembit:aembit-sso-signon-policy-api
  name: Aembit SSO SignOn Policy API
  description: The SSO SignOn Policy API from Aembit — 1 operation(s) for sso signon policy.
  humanURL: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  baseURL: https://{tenant}.aembit.io
  tags:
  - SSO SignOn Policy
  properties:
  - type: OpenAPI
    url: openapi/aembit-sso-signon-policy-api-openapi.yml
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/cloud/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/edge/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/edge/api-reference-edge/
  - type: SDKs
    url: https://docs.aembit.io/dev-guide/sdk/edge/
- aid: aembit:aembit-standalone-certificate-authority-api
  name: Aembit Standalone Certificate Authority API
  description: The Standalone Certificate Authority API from Aembit — 2 operation(s) for standalone certificate authority.
  humanURL: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  baseURL: https://{tenant}.aembit.io
  tags:
  - Standalone Certificate Authority
  properties:
  - type: OpenAPI
    url: openapi/aembit-standalone-certificate-authority-api-openapi.yml
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/cloud/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/edge/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/edge/api-reference-edge/
  - type: SDKs
    url: https://docs.aembit.io/dev-guide/sdk/edge/
- aid: aembit:aembit-standalone-tls-decrypt-api
  name: Aembit Standalone TLS Decrypt API
  description: The Standalone TLS Decrypt API from Aembit — 1 operation(s) for standalone tls decrypt.
  humanURL: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  baseURL: https://{tenant}.aembit.io
  tags:
  - Standalone TLS Decrypt
  properties:
  - type: OpenAPI
    url: openapi/aembit-standalone-tls-decrypt-api-openapi.yml
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/cloud/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/edge/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/edge/api-reference-edge/
  - type: SDKs
    url: https://docs.aembit.io/dev-guide/sdk/edge/
- aid: aembit:aembit-tls-decrypt-api
  name: Aembit TLS Decrypt API
  description: The TLS Decrypt API from Aembit — 1 operation(s) for tls decrypt.
  humanURL: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  baseURL: https://{tenant}.aembit.io
  tags:
  - TLS Decrypt
  properties:
  - type: OpenAPI
    url: openapi/aembit-tls-decrypt-api-openapi.yml
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/cloud/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/edge/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/edge/api-reference-edge/
  - type: SDKs
    url: https://docs.aembit.io/dev-guide/sdk/edge/
- aid: aembit:aembit-trust-provider-api
  name: Aembit Trust Provider API
  description: The Trust Provider API from Aembit — 2 operation(s) for trust provider.
  humanURL: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  baseURL: https://{tenant}.aembit.io
  tags:
  - Trust Provider
  properties:
  - type: OpenAPI
    url: openapi/aembit-trust-provider-api-openapi.yml
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/cloud/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/edge/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/edge/api-reference-edge/
  - type: SDKs
    url: https://docs.aembit.io/dev-guide/sdk/edge/
- aid: aembit:aembit-trust-provider-secret-api
  name: Aembit Trust Provider Secret API
  description: The Trust Provider Secret API from Aembit — 2 operation(s) for trust provider secret.
  humanURL: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  baseURL: https://{tenant}.aembit.io
  tags:
  - Trust Provider Secret
  properties:
  - type: OpenAPI
    url: openapi/aembit-trust-provider-secret-api-openapi.yml
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/cloud/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/edge/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/edge/api-reference-edge/
  - type: SDKs
    url: https://docs.aembit.io/dev-guide/sdk/edge/
- aid: aembit:aembit-user-api
  name: Aembit User API
  description: The User API from Aembit — 3 operation(s) for user.
  humanURL: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  baseURL: https://{tenant}.aembit.io
  tags:
  - User
  properties:
  - type: OpenAPI
    url: openapi/aembit-user-api-openapi.yml
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/cloud/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
  - type: Documentation
    url: https://docs.aembit.io/dev-guide/api/edge/
  - type: APIReference
    url: https://docs.aembit.io/dev-guide/api/edge/api-reference-edge/
  - type: SDKs
    url: https://docs.aembit.io/dev-guide/sdk/edge/


# --- truncated at 32 KB (35 KB total) ---
# Full source: https://artifacts.apis.io/aembit/apis.yml

Aembit API — frequently asked questions

Does Aembit have an API?

Yes. APIs.io lists 38 APIs from Aembit, including Aembit MCP Server, Aembit Access Authorization Event API and Aembit Access Condition API, and 35 more.

Is there an OpenAPI specification for the Aembit API?

Yes. APIs.io indexes 37 OpenAPI specifications for Aembit, each linked for download from this page.

How do I authenticate with the Aembit API?

Aembit documents its authentication (http · 2 schemes). The details are profiled on APIs.io as Aembit Authentication.

How much does the Aembit API cost?

Aembit publishes its prices; its Agentic AI - Starter plan is Free! as of 2026-10-28. APIs.io lists 6 pricing plans for Aembit, with each plan's price, limits and inclusions under Pricing on this page.

Does Aembit have an MCP server?

Yes. APIs.io lists 1 MCP server for Aembit: Remote MCP server at {tenantId}.mcp.useast2.aembit.io over HTTP requiring an API key; 3 tools listed.

Is the Aembit API ready for AI agents?

Aembit has a Kin Score of 75.9 out of 100 (exemplar) and an Agent Readiness score of 52.7 (agent-ready), scored by API Evangelist on 2026-11-06.

Work with this as data

Every provider here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for providers

9 MCP tools reach this

find_providersBrowse and filter every provider in the catalog.
get_provider_artifactsEvery artifact this provider publishes, grouped by type.
get_provider_operationsEvery operation across all of their OpenAPIs — one call instead of parsing every spec.
get_provider_toolsEvery MCP tool they ship, with the operation each wraps.
get_provider_evidenceHow each part of their score was established. Free — the basis for a claim should not sit behind it.
get_provider_ratingPRO — composite, band, trend and facet scores.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This provider

curl "https://apis.io/api/v1/providers/aembit"

All providers

curl "https://apis.io/api/v1/providers?limit=25"

Every operation they expose

curl "https://apis.io/api/v1/providers/aembit/operations?limit=25"

How their score was established

curl "https://apis.io/api/v1/providers/aembit/evidence"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.