# Amazon Cognito **Canonical:** https://apis.io/providers/amazon-cognito/ **Website:** https://aws.amazon.com/cognito/ **APIs profiled:** 126 Amazon Cognito is a fully managed AWS user identity and authentication service that adds sign-up, sign-in, and access control to web and mobile applications, scaling to millions of users. It provides User Pools for authentication (user directories, MFA, customizable auth flows) and Identity Pools for authorization (federated identities that dispense temporary AWS credentials), with support for OAuth 2.0, OpenID Connect, and SAML 2.0. The Cognito APIs are AWS regional service endpoints accessed over HTTPS using AWS Signature Version 4 (SigV4), typically via the AWS SDKs. ## Kin Score — 59.3 / 100 (strong) Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+3.4 from 55.9). | Facet | Score | |---|---| | Discoverability | 68.5 | | Contract Quality | 77.2 | | Governance | 25.0 | | Contract Governance | 25.0 | | Operational Transparency | 39.5 | | Developer Ergonomics | 50.0 | | Commercial Clarity | 75.0 | | Access Clarity | 75.0 | ## Agent readiness — 41.9 (agent-ready) | Dimension | Value | |---|---| | Spec Presence | yes | | Agentic Access | derived | | Reversibility Documented | no | | MCP Server | no | | Auth Clarity | yes | | Idempotency | no | | Error Semantics | verified | | OpenAPI Examples | verified | | Rate Limit Signal | documented | | Event Surface Described | no | | Agent Skills | no | | Well Known Catalog | no | | Consent Identity | no | | Agent Card | no | | Dry Run Mode | no | ## Access Free · Self-serve signup — onboarding: self-serve, pricing: free, trial: no (confidence: high). ## APIs (126) - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AddCustomAttributes API** — The #X Amz Target=AWSCognitoIdentityProviderService.AddCustomAttributes API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.addcustomatt... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminAddUserToGroup API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminAddUserToGroup API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.adminadduser... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminConfirmSignUp API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminConfirmSignUp API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.adminconfirms... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminCreateUser API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminCreateUser API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.admincreateuser. - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminDeleteUser API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminDeleteUser API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.admindeleteuser. - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminDeleteUserAttributes API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminDeleteUserAttributes API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.admind... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminDisableProviderForUser API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminDisableProviderForUser API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.admi... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminDisableUser API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminDisableUser API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.admindisableuser. - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminEnableUser API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminEnableUser API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.adminenableuser. - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminForgetDevice API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminForgetDevice API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.adminforgetdev... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminGetDevice API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminGetDevice API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.admingetdevice. - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminGetUser API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminGetUser API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.admingetuser. - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminInitiateAuth API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminInitiateAuth API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.admininitiatea... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminLinkProviderForUser API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminLinkProviderForUser API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.adminli... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminListDevices API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminListDevices API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.adminlistdevices. - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminListGroupsForUser API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminListGroupsForUser API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.adminlist... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminListUserAuthEvents API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminListUserAuthEvents API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.adminlis... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminRemoveUserFromGroup API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminRemoveUserFromGroup API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.adminre... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminResetUserPassword API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminResetUserPassword API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.adminrese... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminRespondToAuthChallenge API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminRespondToAuthChallenge API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.admi... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminSetUserMFAPreference API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminSetUserMFAPreference API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.admins... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminSetUserPassword API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminSetUserPassword API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.adminsetuse... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminSetUserSettings API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminSetUserSettings API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.adminsetuse... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminUpdateAuthEventFeedback API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminUpdateAuthEventFeedback API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.adm... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminUpdateDeviceStatus API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminUpdateDeviceStatus API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.adminupd... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminUpdateUserAttributes API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminUpdateUserAttributes API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.adminu... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminUserGlobalSignOut API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminUserGlobalSignOut API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.adminuser... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AssociateSoftwareToken API** — The #X Amz Target=AWSCognitoIdentityProviderService.AssociateSoftwareToken API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.associate... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.ChangePassword API** — The #X Amz Target=AWSCognitoIdentityProviderService.ChangePassword API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.changepassword. - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.ConfirmDevice API** — The #X Amz Target=AWSCognitoIdentityProviderService.ConfirmDevice API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.confirmdevice. - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.ConfirmForgotPassword API** — The #X Amz Target=AWSCognitoIdentityProviderService.ConfirmForgotPassword API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.confirmfor... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.ConfirmSignUp API** — The #X Amz Target=AWSCognitoIdentityProviderService.ConfirmSignUp API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.confirmsignup. - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.CreateGroup API** — The #X Amz Target=AWSCognitoIdentityProviderService.CreateGroup API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.creategroup. - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.CreateIdentityProvider API** — The #X Amz Target=AWSCognitoIdentityProviderService.CreateIdentityProvider API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.createide... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.CreateResourceServer API** — The #X Amz Target=AWSCognitoIdentityProviderService.CreateResourceServer API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.createresou... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.CreateUserImportJob API** — The #X Amz Target=AWSCognitoIdentityProviderService.CreateUserImportJob API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.createuserim... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.CreateUserPool API** — The #X Amz Target=AWSCognitoIdentityProviderService.CreateUserPool API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.createuserpool. - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.CreateUserPoolClient API** — The #X Amz Target=AWSCognitoIdentityProviderService.CreateUserPoolClient API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.createuserp... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.CreateUserPoolDomain API** — The #X Amz Target=AWSCognitoIdentityProviderService.CreateUserPoolDomain API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.createuserp... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.DeleteGroup API** — The #X Amz Target=AWSCognitoIdentityProviderService.DeleteGroup API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.deletegroup. - …and 86 more, listed in full on the page. ## Agentic access (1) - **Amazon Cognito Agentic Access** — 126 operations · 126 acting · 5 human-in-the-loop ## Security (4) - **Amazon Cognito Authentication** — apiKey · 1 scheme - **Amazon Cognito Domain Security** — TLSv1.3 · HSTS · DMARC - **Amazon Cognito Vulnerability Disclosure** — security.txt · contact published - **Amazon Cognito Trust Center** — PCI DSS, HIPAA, FedRAMP, GDPR, FIPS 140 ## Plans (1) - **Amazon Cognito Plans Pricing** ## Tags Authentication, Identity, OIDC, SAML, User Management, Federated Identity --- Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/amazon-cognito/). Scores are computed from the provider's own public artifacts under a published rubric.