Agiloft is a Redwood City, California software company that sells an enterprise Contract Lifecycle Management (CLM) platform built on a no-code business process engine, used by legal, procurement, finance and IT teams to request, author, negotiate, approve, execute, store and report on agreements. Every deployment is a customer-specific knowledgebase (KB) whose tables and fields are configured per tenant, so the API surface is generated from that live configuration rather than published as one fixed catalog contract. Agiloft exposes three machine interfaces on each KB: an OpenAPI/Swagger interface generated from the tenant's own tables (browsable and downloadable inside the KB at Setup > System > View REST documentation), a stable operation-style REST interface under /ewws/ covering create, read, update, delete, upsert, select, search, attachment, lock, table introspection and action-button execution, and a legacy SOAP interface whose WSDL is likewise generated per knowledgebase. Authorization is OAuth 2.0 (authorization code, authorization code with PKCE, and client credentials) or JWT bearer tokens, with a REST operation scope list and group permissions layered on top. Agiloft also ships an outbound webhook service with URL verification and retry, and SCIM 2.0 user provisioning at /scim/v2.
Agiloft publishes 3 APIs on the APIs.io network. Tagged areas include Contract Lifecycle Management, Contract Management, Legal, Procurement, and Enterprise Software.
The Agiloft catalog on APIs.io includes 1 event-driven AsyncAPI specification.
Agiloft’s developer surface includes documentation, API reference, getting-started guide, support, engineering blog, pricing, signup flow, and 25 more developer resources.
Create-or-Update Ergonomics could not be measured. We hold no machine-readable contract for
this provider to read, so there is nothing to measure a write surface against. Excluded rather than scored zero:
never-measured and measured-empty are different facts. Publishing an OpenAPI is what makes this facet — and
several others — scorable at all.
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. Every facet and dimension name above is a link: it opens that measurement's own page — what it means, the exact checks that feed it, how the whole catalog distributes on it, and the providers at the top of it. This rating is computed from github.com/api-evangelist/agiloft: open an issue to ask a question, or submit a pull request to add artifacts.
Submit an artifact on GitHub — free →Manage your own listing — the Influence plan, $499/mo →
The Agiloft REST interface, served from every Agiloft knowledgebase under /ewws/. It exposes twenty documented operations — EWCreate, EWRead, EWUpdate, EWDelete, EWUpsert, EWSel...
Agiloft's outbound event surface. A webhook is registered per table and event type (Create, Update or Delete), optionally filtered by a record-filter expression and by modificat...
Agiloft's SCIM 2.0 user provisioning endpoint, served per knowledgebase at /scim/v2 and authenticated with a bearer token generated from the KB's SCIM profile. An identity provi...
aid: agiloft
name: Agiloft
description: 'Agiloft is a Redwood City, California software company that sells an enterprise Contract Lifecycle Management
(CLM) platform built on a no-code business process engine, used by legal, procurement, finance and IT teams to request,
author, negotiate, approve, execute, store and report on agreements. Every deployment is a customer-specific knowledgebase
(KB) whose tables and fields are configured per tenant, so the API surface is generated from that live configuration rather
than published as one fixed catalog contract. Agiloft exposes three machine interfaces on each KB: an OpenAPI/Swagger interface
generated from the tenant''s own tables (browsable and downloadable inside the KB at Setup > System > View REST documentation),
a stable operation-style REST interface under /ewws/ covering create, read, update, delete, upsert, select, search, attachment,
lock, table introspection and action-button execution, and a legacy SOAP interface whose WSDL is likewise generated per
knowledgebase. Authorization is OAuth 2.0 (authorization code, authorization code with PKCE, and client credentials) or
JWT bearer tokens, with a REST operation scope list and group permissions layered on top. Agiloft also ships an outbound
webhook service with URL verification and retry, and SCIM 2.0 user provisioning at /scim/v2.'
url: https://raw.githubusercontent.com/api-evangelist/agiloft/refs/heads/main/apis.yml
image: https://cdn.prod.website-files.com/69df514a8d0f4dbcfa25740b/6a749eebcf2b3e9c0d935735_logo%20(1).svg
x-type: company
x-source: harvest:secondary-market
specificationVersion: '0.20'
created: '2026-09-12'
modified: '2026-09-12'
tags:
- Contract Lifecycle Management
- Contract Management
- Legal
- Procurement
- Enterprise Software
- No-Code
- Workflow Automation
- Document Automation
- Webhooks
- SCIM
- Company
apis:
- aid: agiloft:rest
image: https://cdn.prod.website-files.com/69df514a8d0f4dbcfa25740b/6a749eebcf2b3e9c0d935735_logo%20(1).svg
name: Agiloft CLM REST API
description: The Agiloft REST interface, served from every Agiloft knowledgebase under /ewws/. It exposes twenty documented
operations — EWCreate, EWRead, EWUpdate, EWDelete, EWUpsert, EWSelect, EWSearch, EWLogin, EWLogout, EWAttach, EWAttachInfo,
EWRemoveAttachment, EWRetrieve, EWLock, EWTable, EWSavedSearch, EWAsyncStatus, EWActionButton, EWHotlinks and GetChoiceLineID
— over application/x-www-form-urlencoded requests, returning either JavaScript-evaluable EWREST_* assignments or JSON
when the .json decorator is used. A per-knowledgebase OpenAPI document and Swagger UI, generated from the tenant's own
tables and fields, is available to authenticated users inside the KB.
humanURL: https://help.agiloft.com/space/HELP/43715778/REST%20Interface
baseURL: https://{subdomain}.agiloft.com/ewws
tags:
- REST
- Contract Lifecycle Management
- Contract Management
properties:
- type: Documentation
url: https://help.agiloft.com/space/HELP/43715778/REST%20Interface
- type: APIReference
url: https://help.agiloft.com/space/HELP/43716366/API%20Web%20Services
- type: GettingStarted
url: https://help.agiloft.com/space/HELP/929595396/OpenAPI%20Interface
- type: Authentication
url: https://help.agiloft.com/space/HELP/43716464/Use%20OAuth2%20to%20Access%20REST%20API
- aid: agiloft:webhooks
image: https://cdn.prod.website-files.com/69df514a8d0f4dbcfa25740b/6a749eebcf2b3e9c0d935735_logo%20(1).svg
name: Agiloft CLM Webhooks
description: Agiloft's outbound event surface. A webhook is registered per table and event type (Create, Update or Delete),
optionally filtered by a record-filter expression and by modification type (Email, Web or API), and Agiloft POSTs the
selected field values to the subscriber's HTTPS URL when the event fires. Registration is performed either in Setup >
Integration > Webhooks Setup or through the /ewws/webhooks REST resource, and Agiloft verifies the subscriber URL with
a GET carrying a Verification-Code header before the subscription becomes active.
humanURL: https://help.agiloft.com/space/HELP/43714342/Webhooks
baseURL: https://{subdomain}.agiloft.com/ewws/webhooks
tags:
- Webhooks
- Events
properties:
- type: Documentation
url: https://help.agiloft.com/space/HELP/43714342/Webhooks
- type: Webhooks
url: asyncapi/agiloft-webhooks.yml
- aid: agiloft:scim
image: https://cdn.prod.website-files.com/69df514a8d0f4dbcfa25740b/6a749eebcf2b3e9c0d935735_logo%20(1).svg
name: Agiloft CLM SCIM 2.0 Service
description: Agiloft's SCIM 2.0 user provisioning endpoint, served per knowledgebase at /scim/v2 and authenticated with
a bearer token generated from the KB's SCIM profile. An identity provider that speaks SCIM 2.0 — Microsoft Entra ID and
Okta are documented explicitly — creates, updates, deactivates and reactivates People records in the KB. Group and custom-attribute
synchronization are not supported at this time.
humanURL: https://help.agiloft.com/space/HELP/778928159/Set%20Up%20SCIM
baseURL: https://{subdomain}.agiloft.com/scim/v2
tags:
- SCIM
- Identity
- Provisioning
properties:
- type: Documentation
url: https://help.agiloft.com/space/HELP/778928159/Set%20Up%20SCIM
maintainers:
- FN: Kin Lane
email: kin@apievangelist.com
- FN: APIs.json
email: info@apis.io
common:
- type: TrustCenter
url: security/agiloft-trust-center.yml
- type: DomainSecurity
url: security/agiloft-domain-security.yml
- type: Website
url: https://www.agiloft.com/
- type: DeveloperPortal
url: https://help.agiloft.com/space/HELP/43716366/API%20Web%20Services
- type: Documentation
url: https://help.agiloft.com/
- type: APIReference
url: https://help.agiloft.com/space/HELP/43715778/REST%20Interface
- type: GettingStarted
url: https://help.agiloft.com/space/HELP/929595396/OpenAPI%20Interface
- type: Support
url: https://community.agiloft.com/home
- type: Blog
url: https://www.agiloft.com/blog
- type: Pricing
url: https://www.agiloft.com/pricing
- type: SignUp
url: https://www.agiloft.com/lets-talk
- type: Login
url: https://community.agiloft.com/login
- type: TermsOfService
url: https://www.agiloft.com/terms-of-service
- type: PrivacyPolicy
url: https://www.agiloft.com/privacy-policy
- type: Compliance
url: https://www.agiloft.com/terms-policies/security
- type: LLMsTxt
url: llms/agiloft-llms.txt
- type: Authentication
url: authentication/agiloft-authentication.yml
- type: OAuthScopes
url: scopes/agiloft-scopes.yml
- type: Conventions
url: conventions/agiloft-conventions.yml
- type: Idempotency
url: conventions/agiloft-conventions.yml
- type: ErrorCatalog
url: errors/agiloft-error-codes.yml
- type: Lifecycle
url: lifecycle/agiloft-lifecycle.yml
- type: ChangeLog
url: changelog/agiloft-changelog.yml
- type: Conformance
url: conformance/agiloft-conformance.yml
- type: RateLimits
url: rate-limits/agiloft-rate-limits.yml
- type: Plans
url: plans/agiloft-plans-pricing.yml
- type: Packages
url: packages/agiloft-packages.yml
- type: Webhooks
url: asyncapi/agiloft-webhooks.yml
- type: X-MCPServerCandidate
url: mcp/agiloft-mcp.yml
- type: AgentSkill
url: skills/_index.yml
- type: DataModel
url: data-model/agiloft-data-model.yml
- type: Sandbox
url: sandbox/agiloft-sandbox.yml
x-enrichment:
date: '2026-09-12'
status: enriched
artifacts_added: 23
pass: local-v3
x-coverage:
state: covered
detail: Agiloft's OpenAPI document and SOAP WSDL are both real but both generated per customer knowledgebase and reachable
only from inside an authenticated KB, so no machine-readable contract could be harvested. Everything else — the twenty-operation
REST reference, the webhook catalog, OAuth 2.0 with PKCE, SCIM 2.0, the release notes, the SLA and the certifications
— is published openly at help.agiloft.com and www.agiloft.com and was captured.
evidence:
- url: https://help.agiloft.com/space/HELP/929595396/OpenAPI%20Interface
status: 200
- url: https://help.agiloft.com/llms.txt
status: 200
checked: '2026-09-12'
Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we
store it to create your key and to recognise you if you sign in with another
provider. See our Privacy Policy and
Terms.
Kin Score
How this is scored →