anecdotes

anecdotes is an enterprise Governance, Risk and Compliance (GRC) platform, founded in 2020 and headquartered in Tel Aviv, that pairs a GRC data engine with AI agents to replace point-in-time audit cycles with continuous, evidence-backed compliance. Its Compliance OS collects evidence automatically from 230+ pre-built plugins into 1,000+ predefined artifacts, maps that evidence across 60+ frameworks at once, and drives core applications for controls, requirements, risk, policy management, findings and user access review. Developers reach the platform through a documented REST API at api.anecdotes.ai (API key exchanged for a short-lived JWT), a hosted MCP Proxy at mcp.anecdotes.ai that exposes GRC domains as agent tools, a FedRAMP 20x Trust Center API with genuinely public endpoints, SAML SSO and SCIM provisioning, and outbound event webhooks driven by Playbooks.

anecdotes publishes 2 APIs on the APIs.io network: GRC API and FedRAMP 20x Trust Center API. Tagged areas include Company, Compliance, Governance, Risk, and Security.

The anecdotes catalog on APIs.io includes 1 event-driven AsyncAPI specification.

anecdotes’ developer surface includes documentation, API reference, getting-started guide, support, engineering blog, pricing, signup flow, and 29 more developer resources.

🌐 Visit website 📡 Source on GitHub

65.1/100 strong Agent 44/100 agent ready Full breakdown ↓
scored 2026-08-03 · rubric v0.9

3 APIs 1 MCP Servers

CompanyComplianceGovernanceRiskSecurityGRCAuditEvidenceContinuous ComplianceFedRAMPArtificial IntelligenceAgents

Kin Score

Kin Score How this is scored →
scored 2026-08-03 · rubric v0.9

Composite quality — 65.1/100 · strong

Contract Quality 18.4 / 25

Developer Ergonomics 12.9 / 20

Commercial Clarity 12.1 / 20

Operational Transparency 9.9 / 13

Governance 2.5 / 12

Discoverability 9.3 / 10

Agent readiness — 44/100 · agent ready

Machine-Readable Contract 18 / 18

Agentic Access Contract 10 / 10

MCP Server 0 / 12

Machine-Readable Auth 10 / 10

Idempotency 0 / 9

Stable Error Semantics 8 / 8

Request/Response Examples 7 / 7

Rate-Limit Signaling 7 / 7

Typed Event Surface 6 / 6

Agent Skills 5 / 5

Well-Known Catalog 0 / 4

Consent & Bot Identity 0 / 3

A2A Agent Card 0 / 8

Dry-Run / Simulate Mode 0 / 4

Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/anecdotes: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 3

Individual APIs this provider publishes, each with its own machine-readable definition.

Anecdotes GRC API

The Anecdotes API provides programmatic access to the Anecdotes GRC platform: frameworks, requirements, controls, custom fields, risks, findings, policies, analysis rules and ev...

Anecdotes FedRAMP 20x Trust Center API

A three-tier API over the Anecdotes Trust Center. Public endpoints require no authentication and return Cloud Service Offering metadata, the status-page rollup, the Recommended ...

Anecdotes MCP Proxy

A hosted Model Context Protocol proxy that exposes Anecdotes GRC domains - risk, control, evidence, policy, framework, uar, analysis, comments, requirement and semantic search -...

Postman Collections 1

Ready-to-run Postman collections for exercising this provider's APIs.

FedRAMP 20x API

POSTMAN

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

anecdotes-mcp.yml

MCP SERVER

Rate Limits 1

Documented rate limits and quota policies.

Anecdotes Rate Limits

1 limits

RATE LIMITS

Event Specifications 1

AsyncAPI definitions for this provider's event-driven and streaming APIs.

Anecdotes Playbooks Webhooks

ASYNCAPI

Security Posture 4

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Anecdotes Authentication

apiKey/http · 2 schemes

SECURITY

Anecdotes Domain Security

TLSv1.3 · HSTS · DNSSEC · DMARC

SECURITY

Anecdotes Vulnerability Disclosure

Hackerone · contact published

SECURITY

Anecdotes Trust Center

SOC 1, SOC 2, ISO 27001, ISO 27701, ISO 27032, ISO 42001, GDPR

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Anecdotes Agentic Access

114 operations · 49 acting · 10 human-in-the-loop

114 operations · 49 acting

AGENTIC

Resources

Get Started 4

Portal, sign-up, and the first successful call

DeveloperPortal

DeveloperPortal

GettingStarted

GettingStarted

SignUp

SignUp

Login

Documentation 2

Reference material describing how the API behaves

Documentation

Documentation

APIReference

APIReference

Agent Surfaces 3

MCP servers, agent skills, and machine-readable catalogs

AgenticAccess

AgenticAccess

LLMsTxt

LLMsTxt

AgentSkill

AgentSkill

Design & Contract 6

Pagination, idempotency, versioning, errors, and events

Conventions

ErrorCatalog

Lifecycle

DataModel

Conformance

Webhooks

Build 5

SDKs, sample code, and the tooling you integrate with

GitHubOrganization

Postman

Packages

SDKs

Examples

Access & Security 6

Authentication, authorization, and security posture

Authentication

Compliance

TrustCenter

DomainSecurity

VulnerabilityDisclosure

VulnerabilityDisclosure

Security

Security

Operate 4

Status, limits, changes, and where to get help

Support

RateLimits

StatusPage

ChangeLog

Commercial 3

Pricing, plans, and the legal terms of use

Pricing

Pricing

TermsOfService

TermsOfService

PrivacyPolicy

PrivacyPolicy

Company 2

The organization behind the API

Website

Website

Blog

Blog

Other 1

Properties that don't map to a standard resource type

Overlay

Overlay

Source (apis.yml)

aid: anecdotes
name: anecdotes
description: anecdotes is an enterprise Governance, Risk and Compliance (GRC) platform, founded in 2020 and headquartered
  in Tel Aviv, that pairs a GRC data engine with AI agents to replace point-in-time audit cycles with continuous, evidence-backed
  compliance. Its Compliance OS collects evidence automatically from 230+ pre-built plugins into 1,000+ predefined artifacts,
  maps that evidence across 60+ frameworks at once, and drives core applications for controls, requirements, risk, policy
  management, findings and user access review. Developers reach the platform through a documented REST API at api.anecdotes.ai
  (API key exchanged for a short-lived JWT), a hosted MCP Proxy at mcp.anecdotes.ai that exposes GRC domains as agent tools,
  a FedRAMP 20x Trust Center API with genuinely public endpoints, SAML SSO and SCIM provisioning, and outbound event webhooks
  driven by Playbooks.
url: https://raw.githubusercontent.com/api-evangelist/anecdotes/refs/heads/main/apis.yml
image: https://kinlane-productions2.s3.amazonaws.com/api-evangelist-site/companies/anecdotes.jpg
x-type: company
x-source: harvest:secondary-market
specificationVersion: '0.20'
created: '2026-07-31'
modified: '2026-07-31'
tags:
- Company
- Compliance
- Governance
- Risk
- Security
- GRC
- Audit
- Evidence
- Continuous Compliance
- FedRAMP
- Artificial Intelligence
- Agents
apis:
- aid: anecdotes:anecdotes-grc-api
  name: Anecdotes GRC API
  description: 'The Anecdotes API provides programmatic access to the Anecdotes GRC platform: frameworks, requirements, controls,
    custom fields, risks, findings, policies, analysis rules and evidence. Authentication is two-step - an API token created
    in the platform is exchanged at GET /identity/v1/apikey/exchange for a JWT valid for one hour, which is then sent as a
    bearer token on every other call. A descriptive User-Agent header is required or the API returns 403.'
  humanURL: https://help.anecdotes.ai/api/overview
  baseURL: https://api.anecdotes.ai
  tags:
  - Compliance
  - Governance
  - Risk
  - Evidence
  - Controls
  - Policy
  properties:
  - type: OpenAPI
    url: openapi/anecdotes-grc-openapi.yml
  - type: Documentation
    url: https://help.anecdotes.ai/technical-setup/api
  - type: APIReference
    url: https://help.anecdotes.ai/api/overview
  - type: GettingStarted
    url: https://help.anecdotes.ai/technical-setup/api/using-the-anecdotes-api
  - type: Authentication
    url: https://help.anecdotes.ai/api/token
- aid: anecdotes:anecdotes-fedramp-20x-api
  name: Anecdotes FedRAMP 20x Trust Center API
  description: A three-tier API over the Anecdotes Trust Center. Public endpoints require no authentication and return Cloud
    Service Offering metadata, the status-page rollup, the Recommended Secure Configuration index and downloadable API documentation.
    An authorization tier exchanges an API key for a JWT, and gated endpoints return the full authorization package, individual
    Key Security Indicators, and the evidence and evidence history behind each one.
  humanURL: https://help.anecdotes.ai/technical-setup/fedramp-20x-trust-center-and-api
  baseURL: https://api.anecdotes.ai
  tags:
  - FedRAMP
  - Trust Center
  - Compliance
  - Evidence
  properties:
  - type: OpenAPI
    url: openapi/anecdotes-fedramp-20x-openapi.yml
  - type: Postman
    url: postman/anecdotes-fedramp-20x.postman_collection.json
  - type: Documentation
    url: https://help.anecdotes.ai/technical-setup/fedramp-20x-trust-center-and-api
- aid: anecdotes:anecdotes-mcp-proxy
  name: Anecdotes MCP Proxy
  description: A hosted Model Context Protocol proxy that exposes Anecdotes GRC domains - risk, control, evidence, policy,
    framework, uar, analysis, comments, requirement and semantic search - to any MCP-capable AI client. Reachable over streamable
    HTTP at https://mcp.anecdotes.ai/{domain}/mcp with an X-anecdotes-api-key header, or through the first-party @anecdotes.ai/mcp
    npm bridge. Requires an Admin-privileged API token and an active AI suite entitlement.
  humanURL: https://help.anecdotes.ai/technical-setup/api/using-anecdotes-mcp
  baseURL: https://mcp.anecdotes.ai
  tags:
  - MCP
  - Agents
  - Compliance
  properties:
  - type: MCPServer
    url: mcp/anecdotes-mcp.yml
  - type: ToolCrosswalk
    url: mcp/anecdotes-tool-crosswalk.yml
  - type: Documentation
    url: https://help.anecdotes.ai/technical-setup/api/using-anecdotes-mcp
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: AgenticAccess
  url: agentic-access/anecdotes-agentic-access.yml
- type: Website
  url: https://www.anecdotes.ai/
- type: DeveloperPortal
  url: https://help.anecdotes.ai/technical-setup/api
- type: Documentation
  url: https://help.anecdotes.ai/
- type: APIReference
  url: https://help.anecdotes.ai/api/overview
- type: GettingStarted
  url: https://help.anecdotes.ai/technical-setup/api/using-the-anecdotes-api
- type: Support
  url: https://help.anecdotes.ai/
- type: Blog
  url: https://www.anecdotes.ai/blog
- type: GitHubOrganization
  url: https://github.com/anecdotes-ai
- type: Pricing
  url: https://www.anecdotes.ai/pricing
- type: SignUp
  url: https://www.anecdotes.ai/get-started
- type: Login
  url: https://platform.anecdotes.ai/
- type: TermsOfService
  url: https://www.anecdotes.ai/terms-of-use
- type: PrivacyPolicy
  url: https://www.anecdotes.ai/privacy-policy
- type: Postman
  url: postman/anecdotes-fedramp-20x.postman_collection.json
- type: LLMsTxt
  url: llms/anecdotes-llms.txt
- type: Packages
  url: packages/anecdotes-packages.yml
- type: SDKs
  url: packages/anecdotes-packages.yml
- type: Authentication
  url: authentication/anecdotes-authentication.yml
- type: Conventions
  url: conventions/anecdotes-conventions.yml
- type: RateLimits
  url: rate-limits/anecdotes-rate-limits.yml
- type: ErrorCatalog
  url: errors/anecdotes-problem-types.yml
- type: Lifecycle
  url: lifecycle/anecdotes-lifecycle.yml
- type: StatusPage
  url: https://status.anecdotes.ai/
- type: ChangeLog
  url: changelog/anecdotes-changelog.yml
- type: DataModel
  url: data-model/anecdotes-data-model.yml
- type: Conformance
  url: conformance/anecdotes-conformance.yml
- type: Compliance
  url: https://www.anecdotes.ai/trust
- type: TrustCenter
  url: security/anecdotes-trust-center.yml
- type: DomainSecurity
  url: security/anecdotes-domain-security.yml
- type: VulnerabilityDisclosure
  url: security/anecdotes-vulnerability-disclosure.yml
- type: Security
  url: https://www.anecdotes.ai/trust
- type: Webhooks
  url: asyncapi/anecdotes-playbooks-webhooks.yml
- type: AgentSkill
  url: skills/_index.yml
- type: Overlay
  url: overlays/anecdotes-grc-overlay.yaml
- type: Examples
  url: examples/anecdotes-examples.yml
x-enrichment:
  date: '2026-07-31'
  status: enriched
  artifacts_added: 31
  pass: local-v1

Where this information came from

This is an independent, third-party profile of anecdotes, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.