APIClarity website screenshot

APIClarity

APIClarity is an open source API security and observability tool that analyzes API traffic to reconstruct OpenAPI specifications, detect shadow and zombie APIs, identify API differences and changes, and provide API security alerts. It is part of the OpenClarity project and works with Kubernetes service meshes and API gateways for cloud-native API traffic observability.

APIClarity publishes 4 APIs on the APIs.io network, including API Events API, API Inventory API, Control API, and 1 more. Tagged areas include API Observability, API Security, API Traffic Analysis, Cisco, and Kubernetes.

APIClarity’s developer surface includes authentication, documentation, release notes, and 8 more developer resources.

35.3/100 thin ▬ flat Agent 38/100 agent ready Full breakdown ↓
scored 2026-07-28 · rubric v0.6
AccessFreemiumSelf serve⚡ Free to try
4 APIs 7 Features 5 Use Cases
API ObservabilityAPI SecurityAPI Traffic AnalysisCiscoKubernetesOpen SourceOpenAPI ReconstructionOpenClarityService MeshShadow APIs

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-07-28 · rubric v0.6
Composite quality — 35.3/100 · thin
Contract Quality 10.2 / 25
Developer Ergonomics 3.9 / 20
Commercial Clarity 7.9 / 20
Operational Transparency 6.8 / 13
Governance 0.0 / 12
Discoverability 6.5 / 10
Agent readiness — 38/100 · agent ready
Machine-Readable Contract 18 / 18
Agentic Access Contract 10 / 10
MCP Server 0 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 8 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 7 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/apiclarity: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 4

Individual APIs this provider publishes, each with its own machine-readable definition.

APIClarity API Events API

Captured API traffic events.

APIClarity API Inventory API

Discovered APIs and their reconstructed specifications.

APIClarity Control API

Control-plane endpoints for trace sources and discovered APIs.

APIClarity Features API

Enabled features in the deployment.

Open Collections 1

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

APIClarity API

OPEN COLLECTION

Pricing Plans 1

Published pricing tiers and plan structures.

Rate Limits 1

Documented rate limits and quota policies.

Apiclarity Rate Limits

5 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

Features 7

Notable capabilities this provider offers.

OpenAPI Spec Reconstruction

Automatically reconstruct OpenAPI specifications from observed live API traffic without code instrumentation.

Shadow API Detection

Identify undocumented shadow APIs being called in production that are not reflected in official specifications.

Zombie API Detection

Detect deprecated or decommissioned API endpoints still receiving traffic in production.

API Diff Analysis

Compare observed API behavior against documented specifications to identify drifts, changes, and violations.

API Security Alerts

Generate security findings and alerts based on API traffic analysis and specification violations.

Kubernetes Integration

Deploy as a sidecar or via Helm charts for integration with Kubernetes service meshes and API gateways.

API Inventory

Automatically build and maintain an inventory of all APIs discovered in the environment.

Scroll for all 7

Security Posture 2

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Apiclarity Authentication

http · 1 scheme

SECURITY

Apiclarity Domain Security

no transport/DNS hardening detected

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Apiclarity Agentic Access

27 operations · 8 acting · 3 human-in-the-loop

27 operations · 8 acting

AGENTIC

Use Cases 5

What developers build with this provider.

API Discovery

Discover all APIs running in a Kubernetes environment including undocumented and shadow APIs.

API Security Posture Assessment

Assess API security by detecting shadow APIs, spec violations, and suspicious traffic patterns.

API Specification Generation

Generate OpenAPI specifications from live traffic for APIs that lack formal documentation.

API Governance

Enforce API consistency by detecting deviations between actual API behavior and official specifications.

Incident Response

Investigate API security incidents using traffic analysis, API inventory, and spec diff data.

Resources

Documentation 1

Reference material describing how the API behaves

Agent Surfaces 1

MCP servers, agent skills, and machine-readable catalogs

Build 2

SDKs, sample code, and the tooling you integrate with

Access & Security 2

Authentication, authorization, and security posture

Operate 3

Status, limits, changes, and where to get help

Commercial 1

Pricing, plans, and the legal terms of use

Company 1

The organization behind the API

Source (apis.yml)

apis.yml Raw ↑
aid: apiclarity
name: APIClarity
description: APIClarity is an open source API security and observability tool that analyzes API traffic to reconstruct OpenAPI
  specifications, detect shadow and zombie APIs, identify API differences and changes, and provide API security alerts. It
  is part of the OpenClarity project and works with Kubernetes service meshes and API gateways for cloud-native API traffic
  observability.
type: Index
accessModel:
  pricing: freemium
  onboarding: self-serve
  trial: false
  try_now: true
  public: false
  label: Freemium · Self-serve signup
  confidence: high
  source:
  - plans
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/apiclarity.png
tags:
- API Observability
- API Security
- API Traffic Analysis
- Cisco
- Kubernetes
- Open Source
- OpenAPI Reconstruction
- OpenClarity
- Service Mesh
- Shadow APIs
url: https://raw.githubusercontent.com/api-evangelist/apiclarity/refs/heads/main/apis.yml
created: '2026-03-26'
modified: '2026-04-19'
specificationVersion: '0.19'
apis:
- aid: apiclarity:apiclarity-api-events-api
  name: APIClarity API Events API
  description: Captured API traffic events.
  humanURL: https://github.com/openclarity/apiclarity
  tags:
  - API Events
  properties:
  - type: OpenAPI
    url: openapi/apiclarity-api-events-api-openapi.yml
  - type: Documentation
    url: https://github.com/openclarity/apiclarity#readme
  - type: GettingStarted
    url: https://github.com/openclarity/apiclarity#getting-started
  - type: GitHubRepository
    url: https://github.com/openclarity/apiclarity
- aid: apiclarity:apiclarity-api-inventory-api
  name: APIClarity API Inventory API
  description: Discovered APIs and their reconstructed specifications.
  humanURL: https://github.com/openclarity/apiclarity
  tags:
  - API Inventory
  properties:
  - type: OpenAPI
    url: openapi/apiclarity-api-inventory-api-openapi.yml
  - type: Documentation
    url: https://github.com/openclarity/apiclarity#readme
  - type: GettingStarted
    url: https://github.com/openclarity/apiclarity#getting-started
  - type: GitHubRepository
    url: https://github.com/openclarity/apiclarity
- aid: apiclarity:apiclarity-control-api
  name: APIClarity Control API
  description: Control-plane endpoints for trace sources and discovered APIs.
  humanURL: https://github.com/openclarity/apiclarity
  tags:
  - Control
  properties:
  - type: OpenAPI
    url: openapi/apiclarity-control-api-openapi.yml
  - type: Documentation
    url: https://github.com/openclarity/apiclarity#readme
  - type: GettingStarted
    url: https://github.com/openclarity/apiclarity#getting-started
  - type: GitHubRepository
    url: https://github.com/openclarity/apiclarity
- aid: apiclarity:apiclarity-features-api
  name: APIClarity Features API
  description: Enabled features in the deployment.
  humanURL: https://github.com/openclarity/apiclarity
  tags:
  - Features
  properties:
  - type: OpenAPI
    url: openapi/apiclarity-features-api-openapi.yml
  - type: Documentation
    url: https://github.com/openclarity/apiclarity#readme
  - type: GettingStarted
    url: https://github.com/openclarity/apiclarity#getting-started
  - type: GitHubRepository
    url: https://github.com/openclarity/apiclarity
common:
- type: AgenticAccess
  url: agentic-access/apiclarity-agentic-access.yml
- type: DomainSecurity
  url: security/apiclarity-domain-security.yml
- type: Authentication
  url: authentication/apiclarity-authentication.yml
- type: Website
  url: https://openclarity.io
- type: GitHubOrganization
  url: https://github.com/openclarity
- type: GitHubRepository
  url: https://github.com/openclarity/apiclarity
- type: Documentation
  url: https://github.com/openclarity/apiclarity#readme
- type: Issues
  url: https://github.com/openclarity/apiclarity/issues
- type: ReleaseNotes
  url: https://github.com/openclarity/apiclarity/releases
- type: License
  url: https://github.com/openclarity/apiclarity/blob/master/LICENSE
- type: Slack
  url: https://outshift.slack.com
- type: Features
  data:
  - name: OpenAPI Spec Reconstruction
    description: Automatically reconstruct OpenAPI specifications from observed live API traffic without code instrumentation.
  - name: Shadow API Detection
    description: Identify undocumented shadow APIs being called in production that are not reflected in official specifications.
  - name: Zombie API Detection
    description: Detect deprecated or decommissioned API endpoints still receiving traffic in production.
  - name: API Diff Analysis
    description: Compare observed API behavior against documented specifications to identify drifts, changes, and violations.
  - name: API Security Alerts
    description: Generate security findings and alerts based on API traffic analysis and specification violations.
  - name: Kubernetes Integration
    description: Deploy as a sidecar or via Helm charts for integration with Kubernetes service meshes and API gateways.
  - name: API Inventory
    description: Automatically build and maintain an inventory of all APIs discovered in the environment.
- type: UseCases
  data:
  - name: API Discovery
    description: Discover all APIs running in a Kubernetes environment including undocumented and shadow APIs.
  - name: API Security Posture Assessment
    description: Assess API security by detecting shadow APIs, spec violations, and suspicious traffic patterns.
  - name: API Specification Generation
    description: Generate OpenAPI specifications from live traffic for APIs that lack formal documentation.
  - name: API Governance
    description: Enforce API consistency by detecting deviations between actual API behavior and official specifications.
  - name: Incident Response
    description: Investigate API security incidents using traffic analysis, API inventory, and spec diff data.
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com