AGL Energy

AGL Energy Limited (ASX:AGL) is Australia's oldest listed company — founded in Sydney in 1837 as the Australian Gas Light Company — and one of the country's largest integrated energy businesses, retailing electricity, gas, broadband and mobile to roughly four million customer accounts while owning the nation's largest electricity generation portfolio (Bayswater and Loy Yang A coal, gas peakers, hydro, wind, utility-scale solar and grid-scale batteries). It sits at both ends of the Australian value chain: generator and wholesale market participant in the NEM, and the retailer of record that holds the customer relationship, the billing account and the metering data. Its API posture is entirely a product of regulation, not of product strategy. AGL publishes no public developer portal and no self-serve API programme — apideveloper.agl.com.au resolves through Akamai but returns HTTP 403 to every anonymous client, and agl.com.au itself is bot-blocked at 403. What AGL does expose is the Consumer Data Right: it is a designated CDR energy data holder, listed on the CDR Register under brand "AGL" with public base URI https://public.cdr.agl.com.au, and that surface is real and verified — GET /cds-au/v1/discovery/status and /cds-au/v1/discovery/outages both return HTTP 200 with conformant Consumer Data Standards envelopes, and AGL's own outage notices describe scheduled downtime of the "AGL CDR Consent flow". Its energy plan Product Reference Data is genuinely open and anonymous — 1,343 plans at https://cdr.energymadeeasy.gov.au/agl/cds-au/v1/energy/plans — but that endpoint is operated centrally by the Australian Energy Regulator, not by AGL, which is the structural difference from CDR banking where every bank serves its own PRD. Consumer usage, billing, service point, DER and account data is available only to Accredited Data Recipients, over mTLS, under a consumer authorisation, with the base URI distributed through the CDR Register rather than published. AGL is therefore open on product data, closed to everyone but accredited recipients on consumer data, and silent everywhere else — it publishes no open grid or market data of its own. It is also migrating around four million customer services onto the Kaluza platform under a A$150m, 20 percent stake taken in 2024, so the retail data layer behind these mandated endpoints is being rebuilt on a third-party energy operating system.

AGL Energy publishes 3 APIs on the APIs.io network: AGL CDR Energy API, AGL CDR Discovery (Common) API, and Product Reference Data (PRD) API. Tagged areas include Energy, Australia, Utilities, Electricity, and Gas.

AGL Energy’s developer surface includes authentication, changelog, API reference, documentation, support, and 22 more developer resources.

40.6/100 developing ▬ flat Agent 34/100 agent ready Full breakdown ↓
scored 2026-08-20 · rubric v0.12.0
3 APIs 1 MCP Servers
EnergyAustraliaUtilitiesElectricityGasEnergy RetailerConsumer Data RightCDRSmart MeteringSolarDERRenewablesEnergy Markets

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-08-20 · rubric v0.12.0
Composite quality — 40.6/100 · developing
Contract Quality 2.7 / 21
Developer Ergonomics 6.0 / 17
Access Clarity 5.8 / 17
Operational Transparency 4.9 / 11
Contract Governance 3.1 / 10
Discoverability 6.1 / 9
Regulatory Posture 9.7 / 15
Agent readiness — 34/100 · agent ready
Machine-Readable Contract 18 / 18
Agentic Access Contract 10 / 10
Documented Reversibility 0 / 6
MCP Server 0 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 8 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 0 / 6
Agent Skills 5 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Regulatory Posture applies to this provider. Its tags matched the Energy & Utilities regime, so Regulatory Posture carries 15 points of the composite. If this regime is wrong for your business, say so on your provider repo — the applicability map is public and we will correct it.
The six quality facets above are damped to 85 points between them, because the conditional facet above carries the other 15. That is why each facet's contribution is shown against a damped maximum: raising a quality facet moves the composite by 85% of its nominal weight, not 100%. The full arithmetic is at apis.io/rating/.
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/agl-energy: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 3

Individual APIs this provider publishes, each with its own machine-readable definition.

AGL CDR Energy API

AGL's mandated Consumer Data Right energy data-sharing surface, implementing the DSB Consumer Data Standards CDR Energy API v1.36.0 — service points, electricity usage, DER regi...

AGL CDR Discovery (Common) API

The unauthenticated half of AGL's Consumer Data Right implementation, served from its CDR public base URI and conforming to the DSB Consumer Data Standards CDR Common API v1.36....

AGL Energy Product Reference Data (PRD) API

AGL's retail energy plans published as anonymous, machine-readable Consumer Data Right Product Reference Data. Verified live on 2026-07-27: GET /energy/plans?page-size=10 return...

Open Collections 2

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

CDR Common API

OPEN COLLECTION

CDR Energy API

OPEN COLLECTION

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

AGL Energy MCP Server

AGL publishes no Model Context Protocol server, and none exists for the Consumer Data Right more broadly. Searched on 2026-07-27: the AGL CDR public base URI answers 404 for eve...

MCP SERVER

Security Posture 3

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Agl Energy Authentication

oauth2/openIdConnect/mutualTLS/none · 3 schemes

SECURITY

Agl Energy Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Agl Energy Vulnerability Disclosure

Hackerone · security.txt

SECURITY

Scopes 1

OAuth scopes governing access to this provider's APIs.

Agl Energy Scopes

11 scopes

11 scopes

SCOPES

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Agl Energy Agentic Access

27 operations · 5 acting

27 operations · 5 acting

AGENTIC

Resources

Documentation 2

Reference material describing how the API behaves

Agent Surfaces 4

MCP servers, agent skills, and machine-readable catalogs

Design & Contract 5

Pagination, idempotency, versioning, errors, and events

Build 1

SDKs, sample code, and the tooling you integrate with

Access & Security 5

Authentication, authorization, and security posture

Operate 5

Status, limits, changes, and where to get help

Commercial 2

Pricing, plans, and the legal terms of use

Company 2

The organization behind the API

Other 1

Properties that don't map to a standard resource type

Source (apis.yml)

apis.yml Raw ↑
aid: agl-energy
url: https://raw.githubusercontent.com/api-evangelist/agl-energy/refs/heads/main/apis.yml
name: AGL Energy
kind: company
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg
tags:
- Energy
- Australia
- Utilities
- Electricity
- Gas
- Energy Retailer
- Consumer Data Right
- CDR
- Smart Metering
- Solar
- DER
- Renewables
- Energy Markets
created: '2026-07-27'
modified: '2026-07-27'
specificationVersion: '0.23'
x-enrichment:
  round: '2026-07-27'
  note: 'No WellKnown pointer is emitted: every /.well-known/ probe across every AGL and AER host returned 404 or 403 (see
    well-known/agl-energy-well-known.yml). No SDKs/Packages pointer: AGL ships no client libraries in any registry and its
    GitHub org holds one unrelated repository. No Idempotency pointer: the whole surface is read-only and the Consumer Data
    Standards define no idempotency key. No Compliance pointer: AGL publishes no trust centre or certification programme.
    No AsyncAPI/Webhooks pointer: there is no event surface — the CDR is pull-only. Absence recorded rather than papered over.'
description: 'AGL Energy Limited (ASX:AGL) is Australia''s oldest listed company — founded in Sydney in 1837 as the Australian
  Gas Light Company — and one of the country''s largest integrated energy businesses, retailing electricity, gas, broadband
  and mobile to roughly four million customer accounts while owning the nation''s largest electricity generation portfolio
  (Bayswater and Loy Yang A coal, gas peakers, hydro, wind, utility-scale solar and grid-scale batteries). It sits at both
  ends of the Australian value chain: generator and wholesale market participant in the NEM, and the retailer of record that
  holds the customer relationship, the billing account and the metering data. Its API posture is entirely a product of regulation,
  not of product strategy. AGL publishes no public developer portal and no self-serve API programme — apideveloper.agl.com.au
  resolves through Akamai but returns HTTP 403 to every anonymous client, and agl.com.au itself is bot-blocked at 403. What
  AGL does expose is the Consumer Data Right: it is a designated CDR energy data holder, listed on the CDR Register under
  brand "AGL" with public base URI https://public.cdr.agl.com.au, and that surface is real and verified — GET /cds-au/v1/discovery/status
  and /cds-au/v1/discovery/outages both return HTTP 200 with conformant Consumer Data Standards envelopes, and AGL''s own
  outage notices describe scheduled downtime of the "AGL CDR Consent flow". Its energy plan Product Reference Data is genuinely
  open and anonymous — 1,343 plans at https://cdr.energymadeeasy.gov.au/agl/cds-au/v1/energy/plans — but that endpoint is
  operated centrally by the Australian Energy Regulator, not by AGL, which is the structural difference from CDR banking where
  every bank serves its own PRD. Consumer usage, billing, service point, DER and account data is available only to Accredited
  Data Recipients, over mTLS, under a consumer authorisation, with the base URI distributed through the CDR Register rather
  than published. AGL is therefore open on product data, closed to everyone but accredited recipients on consumer data, and
  silent everywhere else — it publishes no open grid or market data of its own. It is also migrating around four million customer
  services onto the Kaluza platform under a A$150m, 20 percent stake taken in 2024, so the retail data layer behind these
  mandated endpoints is being rebuilt on a third-party energy operating system.'
apis:
- aid: agl-energy:agl-cdr-energy-api
  name: AGL CDR Energy API
  description: 'AGL''s mandated Consumer Data Right energy data-sharing surface, implementing the DSB Consumer Data Standards
    CDR Energy API v1.36.0 — service points, electricity usage, DER register detail, accounts, balances, invoices, billing,
    payment schedules and concessions. These endpoints are consumer-authorised: only an Accredited Data Recipient (or a CDR
    representative/sponsored party) holding CDR Register-issued certificates can call them, over mTLS, after the consumer
    completes AGL''s CDR consent flow. The base URI is not published — it is distributed to accredited participants through
    the CDR Register, so none is recorded here. AGL''s own outage feed confirms the consent flow is a live, operated service.
    AEMO acts as secondary data holder for NMI standing data and metering data, which AGL requests on the consumer''s behalf.'
  humanURL: https://consumerdatastandardsaustralia.github.io/standards/
  tags:
  - Consumer Data Right
  - CDR
  - Energy
  - Usage
  - Billing
  - Account
  - DER
  - Australia
  tags_raw:
  - Consumer Data Right
  - CDR
  - Energy
  - Usage
  - Billing
  - Accounts
  - DER
  - Australia
  properties:
  - type: OpenAPI
    url: openapi/agl-energy-cds-energy-openapi.json
  - type: Overlay
    url: overlays/agl-energy-cds-energy-overlay.yaml
  - type: APIReference
    url: https://consumerdatastandardsaustralia.github.io/standards/#energy-apis
  - type: Documentation
    url: https://consumerdatastandardsaustralia.github.io/standards/
  - type: Documentation
    url: https://www.cdr.gov.au/rollout/cdr-energy-sector
  - type: Documentation
    url: https://www.aemo.com.au/energy-systems/electricity/cdr-at-aemo/about-cdr
  - type: Registration
    url: https://www.cdr.gov.au/for-providers
- aid: agl-energy:agl-cdr-discovery-api
  name: AGL CDR Discovery (Common) API
  description: The unauthenticated half of AGL's Consumer Data Right implementation, served from its CDR public base URI and
    conforming to the DSB Consumer Data Standards CDR Common API v1.36.0. GET /cds-au/v1/discovery/status returned HTTP 200
    on 2026-07-27 with {"status":"OK","explanation":"All services operational"}, and GET /cds-au/v1/discovery/outages returned
    HTTP 200 with six scheduled outage windows authored by AGL describing unavailability of the AGL CDR consent flow. No API
    key, no accreditation and no consent is needed to call these two endpoints — they are the only anonymously reachable API
    AGL itself operates. The /common/customer endpoints in the same standard are consumer-authorised and return HTTP 404 on
    the public base URI.
  humanURL: https://consumerdatastandardsaustralia.github.io/standards/
  baseURL: https://public.cdr.agl.com.au/cds-au/v1
  tags:
  - Consumer Data Right
  - CDR
  - Discovery
  - Status
  - Outages
  - Australia
  properties:
  - type: OpenAPI
    url: openapi/agl-energy-cds-common-openapi.json
  - type: Overlay
    url: overlays/agl-energy-cds-common-overlay.yaml
  - type: StatusPage
    url: https://public.cdr.agl.com.au/cds-au/v1/discovery/status
  - type: APIReference
    url: https://consumerdatastandardsaustralia.github.io/standards/#common-apis
  - type: Documentation
    url: https://consumerdatastandardsaustralia.github.io/standards/
  - type: Documentation
    url: https://www.cdr.gov.au/for-providers/how-find-data-holders-product-data-request-service
- aid: agl-energy:agl-energy-product-reference-data-api
  name: AGL Energy Product Reference Data (PRD) API
  description: 'AGL''s retail energy plans published as anonymous, machine-readable Consumer Data Right Product Reference
    Data. Verified live on 2026-07-27: GET /energy/plans?page-size=10 returned HTTP 200 with x-v:1, meta.totalRecords 1343
    across 135 pages, CORS Access-Control-Allow-Origin *, and plan detail for planId AGL1067320MRE2@EME returned HTTP 200
    at x-v:3. Critically, this endpoint is NOT operated by AGL — the Australian Energy Regulator hosts every retailer''s PRD
    centrally at cdr.energymadeeasy.gov.au under a per-brand path, which is the structural break from CDR banking where each
    ADI serves its own product API from its own domain. AGL''s own public base URI returns HTTP 404 for /cds-au/v1/energy/plans.'
  humanURL: https://www.aer.gov.au/energy-product-reference-data
  baseURL: https://cdr.energymadeeasy.gov.au/agl/cds-au/v1
  tags:
  - Consumer Data Right
  - CDR
  - Product Reference Data
  - Tariffs
  - Plans
  - Electricity
  - Gas
  - Australia
  properties:
  - type: OpenAPI
    url: openapi/agl-energy-cds-energy-openapi.json
  - type: Overlay
    url: overlays/agl-energy-cds-energy-overlay.yaml
  - type: Documentation
    url: https://www.aer.gov.au/energy-product-reference-data
  - type: Documentation
    url: https://consumerdatastandardsaustralia.github.io/standards/
  - type: APIReference
    url: https://cdr.energymadeeasy.gov.au/agl/cds-au/v1/energy/plans
common:
- type: DomainSecurity
  url: security/agl-energy-domain-security.yml
- type: AgenticAccess
  url: agentic-access/agl-energy-agentic-access.yml
- type: Authentication
  url: authentication/agl-energy-authentication.yml
- type: OAuthScopes
  url: scopes/agl-energy-scopes.yml
- type: Conventions
  url: conventions/agl-energy-conventions.yml
- type: ErrorCatalog
  url: errors/agl-energy-problem-types.yml
- type: DataModel
  url: data-model/agl-energy-data-model.yml
- type: Lifecycle
  url: lifecycle/agl-energy-lifecycle.yml
- type: StatusPage
  url: https://public.cdr.agl.com.au/cds-au/v1/discovery/status
- type: Deprecation
  url: https://consumerdatastandardsaustralia.github.io/standards/#endpoint-version-schedule
- type: ChangeLog
  url: changelog/agl-energy-changelog.yml
- type: Conformance
  url: conformance/agl-energy-conformance.yml
- type: MCPServer
  url: mcp/agl-energy-mcp.yml
- type: AgentSkill
  url: skills/_index.yml
- type: LLMsTxt
  url: llms/agl-energy-llms.txt
- type: VulnerabilityDisclosure
  url: security/agl-energy-vulnerability-disclosure.yml
- type: Security
  url: https://www.agl.com.au/terms-conditions/responsible-disclosure-policy
- type: APIReference
  url: https://consumerdatastandardsaustralia.github.io/standards/#energy-apis
- type: Website
  url: https://www.agl.com.au/
- type: Documentation
  url: https://www.agl.com.au/consumer-data-right-policy
- type: PrivacyPolicy
  url: https://www.agl.com.au/privacy-policy
- type: TermsOfService
  url: https://www.agl.com.au/terms-conditions/online-services
- type: Support
  url: https://www.agl.com.au/help-support/account-setup-management/manage-consumer-data-right
- type: Forum
  url: https://neighbourhood.agl.com.au/
- type: GitHubOrganization
  url: https://github.com/AGLEnergy
- type: LinkedIn
  url: https://www.linkedin.com/company/agl-energy
- type: Registration
  url: https://api.cdr.gov.au/cdr-register/v1/all/data-holders/brands/summary
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com