Aembit
Aembit is a Workload Identity and Access Management (Workload IAM) platform for non-human identities — AI agents, applications, microservices, CI/CD pipelines, scripts and service accounts. Instead of long-lived, hard-coded secrets, Aembit cryptographically attests a workload against a Trust Provider (AWS, Azure, GCP, GitHub Actions, GitLab, Kubernetes, Terraform Cloud, OIDC, SPIFFE, Kerberos), evaluates an Access Policy with optional conditional-access signals from CrowdStrike and Wiz, and injects a short-lived credential just-in-time so the application never stores one. The platform is delivered as a SaaS control plane (Aembit Cloud) plus a distributed enforcement layer (Aembit Edge — Agent Proxy, Agent Injector, AWS Lambda extension, CLI and Edge SDKs). Aembit publishes two OpenAPI 3.1.1 contracts — the Aembit Cloud API for managing every platform resource and the Aembit Edge API for workload authentication and credential retrieval — alongside a hosted, read-only MCP Server for querying audit, authorization and workload events, an MCP Identity Gateway and an MCP Authorization Server for governing AI-agent access to MCP servers.
Aembit publishes 38 API contracts indexed on the APIs.io network, including Access Authorization Event API, Access Condition API, Access Condition v2 API, and 35 more. Tagged areas include Security, Identity, Identity and Access Management, Workload Identity, and Non-Human Identity.
The Aembit catalog on APIs.io includes 1 event-driven AsyncAPI specification.
Aembit’s developer surface includes documentation, API reference, getting-started guide, support, engineering blog, pricing, signup flow, and 34 more developer resources.
What this lets a business do 1
Business capabilities this provider's published APIs can perform, derived from its own contracts. Browse all capabilities →
What people ask Aembit 37
The questions people put to an LLM, and the jobs they hand an agent, that Aembit's APIs answer — each one linked to the operation that does it. Generated by API Evangelist
Showing 12 of 37 APIs with phrasing — see every API.
Kin Score
Markets this provider is in provisional
The Kin Score Market layer reads a provider inside its market: its position, and how deep its integrations go. Depth is only comparable within a position. Provisional and unweighted: not part of the Kin Score or agent readiness.
| Market | Position | Depth | Registered MCP server | Declares compatibility |
|---|---|---|---|---|
| AI Agents (A2A agent cards) | builds-on | 46.0 | - | - |
Registered MCP server and declares compatibility are report only — not weighted. Undeclared means we found nothing we can read, so there is no number: we never infer integrations.
Standards implemented 1
Standards this provider implements or carries. De facto ones are profiled and measured by the API Commons; formal ones come from the standards directory and are linked by the provider's own tags. The evidence column says how each claim was established — not that it was made.
APIs 38
Individual APIs this provider publishes, each with its own machine-readable definition.
Aembit MCP Server
A first-party hosted Model Context Protocol server that gives AI agents and MCP clients read-only access to a tenant's Aembit event logs. Three tools — get_audit_logs, get_auth_...
Aembit Access Authorization Event API
The Access Authorization Event API from Aembit — 2 operation(s) for access authorization event.
Aembit Access Condition API
The Access Condition API from Aembit — 2 operation(s) for access condition.
Aembit Access Condition v2 API
The Access Condition v2 API from Aembit — 2 operation(s) for access condition v2.
Aembit Access Policy (Deprecated) API
The Access Policy (Deprecated) API from Aembit — 4 operation(s) for access policy (deprecated).
Aembit Access Policy v2 API
The Access Policy v2 API from Aembit — 5 operation(s) for access policy v2.
Aembit Agent Controller API
The Agent Controller API from Aembit — 3 operation(s) for agent controller.
Aembit Audit Log API
The Audit Log API from Aembit — 2 operation(s) for audit log.
Aembit Auth API
The Auth API from Aembit — 1 operation(s) for auth.
Aembit Client Workload API
The Client Workload API from Aembit — 3 operation(s) for client workload.
Aembit Compliance API
The Compliance API from Aembit — 1 operation(s) for compliance.
Aembit Content Security API
The Content Security API from Aembit — 2 operation(s) for content security.
Aembit Credential Provider (Deprecated) API
The Credential Provider (Deprecated) API from Aembit — 4 operation(s) for credential provider (deprecated).
Aembit Credential Provider Integration API
The Credential Provider Integration API from Aembit — 3 operation(s) for credential provider integration.
Aembit Credential Provider v2 API
The Credential Provider v2 API from Aembit — 4 operation(s) for credential provider v2.
Aembit Credentials API
The Credentials API from Aembit — 1 operation(s) for credentials.
Aembit Discovery Integration API
The DiscoveryIntegration API from Aembit — 2 operation(s) for discoveryintegration.
Aembit Discovery Server Workload Draft API
The DiscoveryServerWorkloadDraft API from Aembit — 1 operation(s) for discoveryserverworkloaddraft.
Aembit Health API
The Health API from Aembit — 1 operation(s) for health.
Aembit Integration API
The Integration API from Aembit — 2 operation(s) for integration.
Aembit Integration v2 API
The Integration v2 API from Aembit — 2 operation(s) for integration v2.
Aembit Log Stream API
The Log Stream API from Aembit — 2 operation(s) for log stream.
Aembit MFA SignOn Policy API
The MFA SignOn Policy API from Aembit — 1 operation(s) for mfa signon policy.
Aembit Policy API
The Policy API from Aembit — 1 operation(s) for policy.
Aembit Resource Set API
The Resource Set API from Aembit — 2 operation(s) for resource set.
Aembit Role API
The Role API from Aembit — 2 operation(s) for role.
Aembit Routing API
The Routing API from Aembit — 2 operation(s) for routing.
Aembit Server Workload API
The Server Workload API from Aembit — 2 operation(s) for server workload.
Aembit SignOn Policy API
The SignOn Policy API from Aembit — 1 operation(s) for signon policy.
Aembit SSO Identity Provider API
The SSO Identity Provider API from Aembit — 3 operation(s) for sso identity provider.
Aembit SSO SignOn Policy API
The SSO SignOn Policy API from Aembit — 1 operation(s) for sso signon policy.
Aembit Standalone Certificate Authority API
The Standalone Certificate Authority API from Aembit — 2 operation(s) for standalone certificate authority.
Aembit Standalone TLS Decrypt API
The Standalone TLS Decrypt API from Aembit — 1 operation(s) for standalone tls decrypt.
Aembit TLS Decrypt API
The TLS Decrypt API from Aembit — 1 operation(s) for tls decrypt.
Aembit Trust Provider API
The Trust Provider API from Aembit — 2 operation(s) for trust provider.
Aembit Trust Provider Secret API
The Trust Provider Secret API from Aembit — 2 operation(s) for trust provider secret.
Aembit User API
The User API from Aembit — 3 operation(s) for user.
Aembit Workload Event API
The Workload Event API from Aembit — 2 operation(s) for workload event.
Scroll for all 38
MCP Servers 1
Model Context Protocol servers that expose these APIs to AI agents.
Aembit MCP Server
Remote MCP server at {tenantId}.mcp.useast2.aembit.io over HTTP requiring an API key; 3 tools listed.
MCP SERVERPricing Plans 1
Published pricing tiers and plan structures.
Aembit Plans Pricing
PLANSRate Limits 1
Documented rate limits and quota policies.
Aembit Rate Limits
RATE LIMITSEvent Specifications 1
AsyncAPI definitions for this provider's event-driven and streaming APIs.
Aembit Event Surface
ASYNCAPIOpenAPI Overlays 39
Overlays applied on top of this provider's contracts. Each card says who wrote it: a document the provider publishes, or one API Evangelist derived or generated.
Aembit Audit Log Api Phrasing Overlay
GENERATEDAembit Auth Api Phrasing Overlay
GENERATEDAembit Cloud Overlay
GENERATEDAembit Compliance Api Phrasing Overlay
GENERATEDAembit Credentials Api Phrasing Overlay
GENERATEDAembit Edge Overlay
GENERATEDAembit Health Api Phrasing Overlay
GENERATEDAembit Integration Api Phrasing Overlay
GENERATEDAembit Log Stream Api Phrasing Overlay
GENERATEDAembit Policy Api Phrasing Overlay
GENERATEDAembit Resource Set Api Phrasing Overlay
GENERATEDAembit Role Api Phrasing Overlay
GENERATEDAembit Routing Api Phrasing Overlay
GENERATEDAembit Tls Decrypt Api Phrasing Overlay
GENERATEDAembit User Api Phrasing Overlay
GENERATEDScroll for all 39
Security Posture 4
Authentication, domain security, vulnerability disclosure, and trust-center signals.
Agentic Access 1
Recommended x-agentic-access execution contracts for AI agents.
Resources
Get Started 5
Portal, sign-up, and the first successful call
Documentation 2
Reference material describing how the API behaves
Agent Surfaces 4
MCP servers, agent skills, and machine-readable catalogs
Design & Contract 5
Pagination, idempotency, versioning, errors, and events
Build 5
SDKs, sample code, and the tooling you integrate with
Access & Security 6
Authentication, authorization, and security posture
Operate 5
Status, limits, changes, and where to get help
Commercial 4
Pricing, plans, and the legal terms of use
Company 2
The organization behind the API
Other 3
Properties that don't map to a standard resource type
Source (apis.yml)
Work with this as data
Every provider here is available over the APIs.io API and to AI agents over MCP.