AppOmni website screenshot

AppOmni

AppOmni is a SaaS and AI security platform (SSPM) that gives security teams continuous visibility into the posture, identities, third-party connections and data exposure of the SaaS applications that run an enterprise — Salesforce, Microsoft 365, Google Workspace, Slack, ServiceNow, Okta, Workday, GitHub, Box, Zoom and custom applications built on its Developer Platform. It publishes a tenant-scoped REST API covering posture findings, policies, compliance reporting, monitored services, identity, discovery, insights, SCIM 2.0 provisioning and AI security, plus AskOmni (an MCP server) and AgentGuard runtime prompt protection for agentic AI.

AppOmni publishes 9 APIs on the APIs.io network, including Posture Findings API, Policies API, Compliance and Reports API, and 6 more. Tagged areas include SaaS Security, SSPM, Compliance, Threat Detection, and CASB.

The AppOmni catalog on APIs.io includes 1 JSON-LD context and 2 Spectral governance rulesets.

AppOmni’s developer surface includes authentication, documentation, API reference, support, engineering blog, signup flow, code examples, and 34 more developer resources.

58.3/100 strong ▬ flat Agent 37/100 agent ready saas Full breakdown ↓
scored 2026-09-08 · rubric v0.20.0
AccessEnterprise
9 APIs 1 MCP Servers
SaaS SecuritySSPMComplianceThreat DetectionCASBZero TrustIdentitySCIMAI SecurityPosture Management

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-09-08 · rubric v0.20.0
Create-or-Update Ergonomics applies to this provider. This API accepts writes, so it carries 10 points of the composite. It is scored from the published contracts themselves: whether a caller can create-or-update in one call, whether the write accepts a key the caller already holds, and whether the response says which branch ran. Without that, every write needs a search-and-branch in front of it, and the first time that check is skipped a duplicate record is created. Scored against the observed mean rather than raw — a provider at the catalog average is unchanged by this facet, not penalised by it.
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. Every facet and dimension name above is a link: it opens that measurement's own page — what it means, the exact checks that feed it, how the whole catalog distributes on it, and the providers at the top of it. This rating is computed from github.com/api-evangelist/appomni: open an issue to ask a question, or submit a pull request to add artifacts. Submit an artifact on GitHub — free → Manage your own listing — the Influence plan, $499/mo →

APIs 9

Individual APIs this provider publishes, each with its own machine-readable definition.

AppOmni Posture Findings API

Posture Findings consolidates policy issues and Insights into a single view. This API lists, filters and resolves findings, retrieves finding detail and metadata, and manages ru...

AppOmni Policies API

Create, read, update and delete AppOmni security policies and the rules inside them, run and inspect policy assessments, and handle rule events — closing them, converting them t...

AppOmni Compliance and Reports API

Evaluate compliance controls against detected issues and generate, list, download and delete AppOmni reports covering posture, compliance and threat activity.

AppOmni Monitored Services API

Register and administer the SaaS services AppOmni monitors, inspect their data-sync state, rotate ingest tokens, and manage the tenant-wide custom fields, custom field values, t...

AppOmni Identity and Access API

Unified identities that stitch a person's monitored-service accounts together by email, plus AppOmni platform users, limited users, groups, roles, permissions and the API author...

AppOmni SCIM 2.0 API

SCIM 2.0 provisioning endpoints used to connect an identity provider to AppOmni: list and retrieve users and groups, filter on userName, and create, update, activate or deactiva...

AppOmni Discovery, Insights and Audit API

SaaS discovery of sanctioned and shadow applications, the Insights security-observation surface, and the AppOmni platform audit log with its action-type reference.

AppOmni Developer Platform API

The AppOmni Developer Platform (AODP) lets you define custom monitored service types for proprietary or unsupported applications — declaring their settings, permissions and scop...

AppOmni AI API

Marlin AI autonomous analysis plans, and the AppOmni AgentGuard prompt-classification endpoint that returns an allow or block verdict with DLP and prompt-firewall scores for AI ...

Scroll for all 9

Open Collections 1

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

API Collection

OPEN COLLECTION

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

AskOmni MCP Server

AskOmni is AppOmni's AI security assistant, and AppOmni publishes it as a Model Context Protocol server. Announced 2025-04-28 at RSA Conference as "the world's first MCP interfa...

MCP SERVER

Pricing Plans 1

Published pricing tiers and plan structures.

Appomni Plans Pricing

0 plans

PLANS

Rate Limits 1

Documented rate limits and quota policies.

Appomni Rate Limits

1 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

Semantic Vocabularies 1

JSON-LD contexts and semantic vocabularies used across these APIs.

Appomni Context

25 classes · 5 properties

JSON-LD

Spectral Rules 2

Spectral governance rulesets for linting and validating these APIs.

AppOmni API Rules

5 rules · 3 warnings 2 info

SPECTRAL

AppOmni API Rules

23 rules · 8 errors 14 warnings 1 info

SPECTRAL

JSON Schema 3

Standalone JSON Schema definitions for this provider's data models.

Finding

27 properties

JSON SCHEMA

Occurrence

12 properties

JSON SCHEMA

PaginatedList

4 properties

JSON SCHEMA

JSON Structure 1

JSON Structure definitions describing this provider's data shapes.

Appomni Occurrence Structure

0 properties

JSON STRUCTURE

Examples 1

Example request and response payloads for these APIs.

Appomni Occurrence Example

12 fields

EXAMPLE

Security Posture 4

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Appomni Authentication

http/apiKey/oauth2 · 2 schemes

SECURITY

Appomni Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Appomni Trust Center

FedRAMP Moderate Authority to Operate, TX-RAMP, SOC 2 Type II, VPAT, NIST CSF, EU-US Data Privacy Framework, UK Extension to the EU-US Data Privacy Framework, Swiss-US Data Priv...

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Appomni Agentic Access

132 operations · 62 acting · 4 human-in-the-loop

132 operations · 62 acting

AGENTIC

Resources

Get Started 1

Portal, sign-up, and the first successful call

Documentation 4

Reference material describing how the API behaves

Agent Surfaces 4

MCP servers, agent skills, and machine-readable catalogs

Design & Contract 8

Pagination, idempotency, versioning, errors, and events

Scroll for all 8

Build 6

SDKs, sample code, and the tooling you integrate with

Access & Security 7

Authentication, authorization, and security posture

Scroll for all 7

Operate 3

Status, limits, changes, and where to get help

Commercial 3

Pricing, plans, and the legal terms of use

Company 5

The organization behind the API

Source (apis.yml)

apis.yml Raw ↑
aid: appomni
name: AppOmni
description: AppOmni is a SaaS and AI security platform (SSPM) that gives security teams continuous visibility into the posture,
  identities, third-party connections and data exposure of the SaaS applications that run an enterprise — Salesforce, Microsoft
  365, Google Workspace, Slack, ServiceNow, Okta, Workday, GitHub, Box, Zoom and custom applications built on its Developer
  Platform. It publishes a tenant-scoped REST API covering posture findings, policies, compliance reporting, monitored services,
  identity, discovery, insights, SCIM 2.0 provisioning and AI security, plus AskOmni (an MCP server) and AgentGuard runtime
  prompt protection for agentic AI.
type: Index
deliveryModel:
  model: saas
  open_source: false
  commercial: true
  callable_host: true
  label: Commercial SaaS — tenant-hosted API on the customer's own AppOmni subdomain
  confidence: high
  source:
  - openapi
  - collections/appomni-api.postman_collection.json
  generated: '2026-09-04'
  method: derived
accessModel:
  pricing: enterprise
  onboarding: sales-assisted
  trial: false
  try_now: false
  public: false
  label: Enterprise · Sales-assisted — no published pricing, access requires an AppOmni tenant
  confidence: high
  source:
  - plans
  - authentication
  generated: '2026-09-04'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/appomni.png
tags:
- SaaS Security
- SSPM
- Compliance
- Threat Detection
- CASB
- Zero Trust
- Identity
- SCIM
- AI Security
- Posture Management
url: https://raw.githubusercontent.com/api-evangelist/appomni/refs/heads/main/apis.yml
created: '2026-03-27'
modified: '2026-09-04'
specificationVersion: '0.23'
position: Producing
apis:
- aid: appomni:appomni-security-events-api
  name: AppOmni Posture Findings API
  description: Posture Findings consolidates policy issues and Insights into a single view. This API lists, filters and resolves
    findings, retrieves finding detail and metadata, and manages rule events across every SaaS service AppOmni monitors.
  image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/appomni.png
  humanURL: https://api.appomni.com/
  baseURL: https://{instance}.appomni.com
  tags:
  - Security Events
  - Posture Management
  - Threat Detection
  properties:
  - type: OpenAPI
    url: openapi/appomni-security-events-api-openapi.yml
  - type: JSONSchema
    url: json-schema/appomni-finding-schema.json
  - type: JSONSchema
    url: json-schema/appomni-occurrence-schema.json
  - type: JSONStructure
    url: json-structure/appomni-occurrence-structure.json
  - type: Examples
    url: examples/appomni-occurrence-example.json
  - type: JSONLD
    url: json-ld/appomni-context.jsonld
  - type: Overlay
    url: overlays/appomni-security-events-api-overlay.yaml
  - type: SpectralRules
    url: rules/appomni-spectral-rules.yml
  - type: Vocabulary
    url: vocabulary/appomni-vocabulary.yaml
  - type: Postman
    url: https://api.appomni.com/
  - type: PostmanCollection
    url: collections/appomni-api.postman_collection.json
  - type: Website
    url: https://appomni.com/
  - type: Documentation
    url: https://api.appomni.com/
  - type: APIReference
    url: https://api.appomni.com/
- aid: appomni:appomni-policies-api
  name: AppOmni Policies API
  description: Create, read, update and delete AppOmni security policies and the rules inside them, run and inspect policy
    assessments, and handle rule events — closing them, converting them to exceptions, or bulk deleting rules.
  image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/appomni.png
  humanURL: https://api.appomni.com/
  baseURL: https://{instance}.appomni.com
  tags:
  - Policies
  - Governance
  - Posture Management
  properties:
  - type: OpenAPI
    url: openapi/appomni-policies-api-openapi.yml
  - type: Overlay
    url: overlays/appomni-policies-api-overlay.yaml
  - type: SpectralRules
    url: rules/appomni-spectral-rules.yml
  - type: Vocabulary
    url: vocabulary/appomni-vocabulary.yaml
  - type: Postman
    url: https://api.appomni.com/
  - type: PostmanCollection
    url: collections/appomni-api.postman_collection.json
  - type: Website
    url: https://appomni.com/
  - type: Documentation
    url: https://api.appomni.com/
  - type: APIReference
    url: https://api.appomni.com/
- aid: appomni:appomni-compliance-api
  name: AppOmni Compliance and Reports API
  description: Evaluate compliance controls against detected issues and generate, list, download and delete AppOmni reports
    covering posture, compliance and threat activity.
  image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/appomni.png
  humanURL: https://api.appomni.com/
  baseURL: https://{instance}.appomni.com
  tags:
  - Compliance
  - Reporting
  - Audit
  properties:
  - type: OpenAPI
    url: openapi/appomni-compliance-api-openapi.yml
  - type: Overlay
    url: overlays/appomni-compliance-api-overlay.yaml
  - type: SpectralRules
    url: rules/appomni-spectral-rules.yml
  - type: Vocabulary
    url: vocabulary/appomni-vocabulary.yaml
  - type: Postman
    url: https://api.appomni.com/
  - type: PostmanCollection
    url: collections/appomni-api.postman_collection.json
  - type: Website
    url: https://appomni.com/
  - type: Documentation
    url: https://api.appomni.com/
  - type: APIReference
    url: https://api.appomni.com/
- aid: appomni:appomni-monitored-services-api
  name: AppOmni Monitored Services API
  description: Register and administer the SaaS services AppOmni monitors, inspect their data-sync state, rotate ingest tokens,
    and manage the tenant-wide custom fields, custom field values, tags and value lists attached to them.
  image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/appomni.png
  humanURL: https://api.appomni.com/
  baseURL: https://{instance}.appomni.com
  tags:
  - Monitored Services
  - Configuration
  - CASB
  properties:
  - type: OpenAPI
    url: openapi/appomni-monitored-services-api-openapi.yml
  - type: Overlay
    url: overlays/appomni-monitored-services-api-overlay.yaml
  - type: SpectralRules
    url: rules/appomni-spectral-rules.yml
  - type: Vocabulary
    url: vocabulary/appomni-vocabulary.yaml
  - type: Postman
    url: https://api.appomni.com/
  - type: PostmanCollection
    url: collections/appomni-api.postman_collection.json
  - type: Website
    url: https://appomni.com/
  - type: Documentation
    url: https://api.appomni.com/
  - type: APIReference
    url: https://api.appomni.com/
- aid: appomni:appomni-identity-api
  name: AppOmni Identity and Access API
  description: Unified identities that stitch a person's monitored-service accounts together by email, plus AppOmni platform
    users, limited users, groups, roles, permissions and the API authorization tokens used to call this API.
  image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/appomni.png
  humanURL: https://api.appomni.com/
  baseURL: https://{instance}.appomni.com
  tags:
  - Identity
  - Access Management
  - Zero Trust
  properties:
  - type: OpenAPI
    url: openapi/appomni-identity-api-openapi.yml
  - type: Overlay
    url: overlays/appomni-identity-api-overlay.yaml
  - type: SpectralRules
    url: rules/appomni-spectral-rules.yml
  - type: Vocabulary
    url: vocabulary/appomni-vocabulary.yaml
  - type: Postman
    url: https://api.appomni.com/
  - type: PostmanCollection
    url: collections/appomni-api.postman_collection.json
  - type: Website
    url: https://appomni.com/
  - type: Documentation
    url: https://api.appomni.com/
  - type: APIReference
    url: https://api.appomni.com/
- aid: appomni:appomni-scim-api
  name: AppOmni SCIM 2.0 API
  description: 'SCIM 2.0 provisioning endpoints used to connect an identity provider to AppOmni: list and retrieve users and
    groups, filter on userName, and create, update, activate or deactivate AppOmni platform users.'
  image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/appomni.png
  humanURL: https://api.appomni.com/
  baseURL: https://{instance}.appomni.com
  tags:
  - SCIM
  - Identity
  - Provisioning
  properties:
  - type: OpenAPI
    url: openapi/appomni-scim-api-openapi.yml
  - type: Overlay
    url: overlays/appomni-scim-api-overlay.yaml
  - type: SpectralRules
    url: rules/appomni-spectral-rules.yml
  - type: Vocabulary
    url: vocabulary/appomni-vocabulary.yaml
  - type: Postman
    url: https://api.appomni.com/
  - type: PostmanCollection
    url: collections/appomni-api.postman_collection.json
  - type: Website
    url: https://appomni.com/
  - type: Documentation
    url: https://api.appomni.com/
  - type: APIReference
    url: https://api.appomni.com/
- aid: appomni:appomni-discovery-insights-api
  name: AppOmni Discovery, Insights and Audit API
  description: SaaS discovery of sanctioned and shadow applications, the Insights security-observation surface, and the AppOmni
    platform audit log with its action-type reference.
  image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/appomni.png
  humanURL: https://api.appomni.com/
  baseURL: https://{instance}.appomni.com
  tags:
  - Discovery
  - Insights
  - Audit
  properties:
  - type: OpenAPI
    url: openapi/appomni-discovery-insights-api-openapi.yml
  - type: Overlay
    url: overlays/appomni-discovery-insights-api-overlay.yaml
  - type: SpectralRules
    url: rules/appomni-spectral-rules.yml
  - type: Vocabulary
    url: vocabulary/appomni-vocabulary.yaml
  - type: Postman
    url: https://api.appomni.com/
  - type: PostmanCollection
    url: collections/appomni-api.postman_collection.json
  - type: Website
    url: https://appomni.com/
  - type: Documentation
    url: https://api.appomni.com/
  - type: APIReference
    url: https://api.appomni.com/
- aid: appomni:appomni-developer-platform-api
  name: AppOmni Developer Platform API
  description: The AppOmni Developer Platform (AODP) lets you define custom monitored service types for proprietary or unsupported
    applications — declaring their settings, permissions and scopes — and push events into AppOmni through the platform ingest
    endpoint.
  image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/appomni.png
  humanURL: https://api.appomni.com/
  baseURL: https://{instance}.appomni.com
  tags:
  - Developer Platform
  - Ingest
  - Extensibility
  properties:
  - type: OpenAPI
    url: openapi/appomni-developer-platform-api-openapi.yml
  - type: Overlay
    url: overlays/appomni-developer-platform-api-overlay.yaml
  - type: SpectralRules
    url: rules/appomni-spectral-rules.yml
  - type: Vocabulary
    url: vocabulary/appomni-vocabulary.yaml
  - type: Postman
    url: https://api.appomni.com/
  - type: PostmanCollection
    url: collections/appomni-api.postman_collection.json
  - type: Website
    url: https://appomni.com/
  - type: Documentation
    url: https://api.appomni.com/
  - type: APIReference
    url: https://api.appomni.com/
- aid: appomni:appomni-ai-api
  name: AppOmni AI API
  description: Marlin AI autonomous analysis plans, and the AppOmni AgentGuard prompt-classification endpoint that returns
    an allow or block verdict with DLP and prompt-firewall scores for AI agent traffic.
  image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/appomni.png
  humanURL: https://api.appomni.com/
  baseURL: https://{instance}.appomni.com
  tags:
  - AI Security
  - AgentGuard
  - Marlin AI
  properties:
  - type: OpenAPI
    url: openapi/appomni-ai-api-openapi.yml
  - type: Overlay
    url: overlays/appomni-ai-api-overlay.yaml
  - type: SpectralRules
    url: rules/appomni-spectral-rules.yml
  - type: Vocabulary
    url: vocabulary/appomni-vocabulary.yaml
  - type: Postman
    url: https://api.appomni.com/
  - type: PostmanCollection
    url: collections/appomni-api.postman_collection.json
  - type: Website
    url: https://appomni.com/
  - type: Documentation
    url: https://api.appomni.com/
  - type: APIReference
    url: https://api.appomni.com/
common:
- type: OpenAPI
  url: openapi/appomni-security-events-api-openapi.yml
- type: Postman
  url: https://api.appomni.com/
- type: PostmanCollection
  url: collections/appomni-api.postman_collection.json
- type: Packages
  url: packages/appomni-packages.yml
- type: MCPServer
  url: mcp/appomni-mcp.yml
- type: ToolCrosswalk
  url: mcp/appomni-tool-crosswalk.yml
- type: AgentSkill
  url: skills/_index.yml
- type: LLMsTxt
  url: llms/appomni-llms.txt
- type: Conformance
  url: conformance/appomni-conformance.yml
- type: Compliance
  url: conformance/appomni-conformance.yml
- type: ErrorCatalog
  url: errors/appomni-problem-types.yml
- type: Lifecycle
  url: lifecycle/appomni-lifecycle.yml
- type: StatusPage
  url: https://status.appomni.com/
- type: Conventions
  url: conventions/appomni-conventions.yml
- type: DataModel
  url: data-model/appomni-data-model.yml
- type: Authentication
  url: authentication/appomni-authentication.yml
- type: RateLimits
  url: rate-limits/appomni-rate-limits.yml
- type: Plans
  url: plans/appomni-plans-pricing.yml
- type: AgenticAccess
  url: agentic-access/appomni-agentic-access.yml
- type: DomainSecurity
  url: security/appomni-domain-security.yml
- type: VulnerabilityDisclosure
  url: security/appomni-vulnerability-disclosure.yml
- type: Security
  url: https://appomni.com/ao-labs-vulnerability-disclosure-policy/
- type: TrustCenter
  url: security/appomni-trust-center.yml
- type: Trust
  url: https://trust.appomni.com/
- type: GitHubOrganization
  url: https://github.com/appomni
- type: LinkedIn
  url: https://www.linkedin.com/company/appomni
- type: Website
  url: https://appomni.com/
- type: Documentation
  url: https://appomni.com/resources/
- type: APIReference
  url: https://api.appomni.com/
- type: Support
  url: https://appomni.com/support/
- type: Blog
  url: https://appomni.com/article-type/blog/
- type: BlogRSS
  url: https://appomni.com/feed/
- type: SignUp
  url: https://appomni.com/demo-request/
- type: TermsOfService
  url: https://appomni.com/terms-of-service/
- type: PrivacyPolicy
  url: https://appomni.com/privacy-policy/
- type: Newsroom
  url: https://appomni.com/newsroom/
- type: JSONSchema
  url: json-schema/appomni-paginated-list-schema.json
- type: Examples
  url: examples/appomni-occurrence-example.json
- type: JSONLD
  url: json-ld/appomni-context.jsonld
- type: Vocabulary
  url: vocabulary/appomni-vocabulary.yaml
- type: SpectralRules
  url: rules/appomni-spectral-rules.yml
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
x-enrichment:
  date: '2026-09-04'
  status: enriched
  artifacts_added: 40
  pass: local-v3

Work with this as data

Every provider here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for providers

9 MCP tools reach this
  • find_providersBrowse and filter every provider in the catalog.
  • get_provider_artifactsEvery artifact this provider publishes, grouped by type.
  • get_provider_operationsEvery operation across all of their OpenAPIs — one call instead of parsing every spec.
  • get_provider_toolsEvery MCP tool they ship, with the operation each wraps.
  • get_provider_evidenceHow each part of their score was established. Free — the basis for a claim should not sit behind it.
  • get_provider_ratingPRO — composite, band, trend and facet scores.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This provider
curl "https://apis.io/api/v1/providers/appomni"
All providers
curl "https://apis.io/api/v1/providers?limit=25"
Every operation they expose
curl "https://apis.io/api/v1/providers/appomni/operations?limit=25"
How their score was established
curl "https://apis.io/api/v1/providers/appomni/evidence"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.