# Apache Shiro

**Canonical:** https://apis.io/providers/apache-shiro/  
**APIs profiled:** 5

Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management. It provides a clean API for securing applications from the smallest mobile applications to the largest enterprise systems.

## Kin Score — 29.8 / 100 (thin)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+0.0 from 29.8).

| Facet | Score |
|---|---|
| Discoverability | 64.8 |
| Contract Quality | 53.8 |
| Governance | 25.0 |
| Contract Governance | 25.0 |
| Operational Transparency | 10.5 |
| Developer Ergonomics | 11.9 |
| Commercial Clarity | 15.8 |
| Access Clarity | 15.8 |

## Agent readiness — 20.5 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | no |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | documented |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Freemium — onboarding: unknown, pricing: freemium, trial: no (confidence: medium).

## APIs (5)

- **Apache Shiro Authentication API** — The Authentication API from Apache Shiro — 3 operation(s) for authentication.
- **Apache Shiro Authorization API** — The Authorization API from Apache Shiro — 2 operation(s) for authorization.
- **Apache Shiro Cryptography API** — The Cryptography API from Apache Shiro — 1 operation(s) for cryptography.
- **Apache Shiro Sessions API** — The Sessions API from Apache Shiro — 1 operation(s) for sessions.
- **Apache Shiro Users API** — The Users API from Apache Shiro — 1 operation(s) for users.

## Agentic access (1)

- **Apache Shiro Agentic Access** — 10 operations · 7 acting

## Security (2)

- **Apache Shiro Domain Security** — TLSv1.3 · HSTS · DMARC
- **Apache Shiro Vulnerability Disclosure** — security.txt · contact published

## Plans (1)

- **Apache Shiro Plans Pricing**

## Use cases (4)

- **Web Application Security** — Secure Java web applications with authentication and URL-based access control
- **REST API Security** — Protect REST APIs with token authentication and permission checks
- **Microservice Auth** — Stateless JWT authentication for microservice architectures
- **Admin Portal Security** — Role-based admin interface with fine-grained permissions

## Tags

Authentication, Authorization, Cryptography, Java, Security, Apache, Open-Source

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/apache-shiro/). Scores are computed from the provider's own public artifacts under a published rubric.