# Aserto

**Canonical:** https://apis.io/providers/aserto/  
**Website:** https://www.aserto.com/  
**APIs profiled:** 8

Aserto is a cloud-native authorization platform providing fine-grained, policy-based access control for applications and APIs. Built on Open Policy Agent (OPA) and a Google Zanzibar-inspired directory, Aserto exposes REST and gRPC APIs for the Authorizer (real-time authorization decisions), Directory (managing users, groups, objects, and relations), and Decision Logs (audit trails of authorization events). The open-source Topaz engine carries the technology forward after the commercial SaaS control plane was wound down in May 2025.

## Kin Score — 38.4 / 100 (thin)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+0.0 from 38.4).

| Facet | Score |
|---|---|
| Discoverability | 74.1 |
| Contract Quality | 54.0 |
| Governance | 9.8 |
| Contract Governance | 9.8 |
| Operational Transparency | 13.2 |
| Developer Ergonomics | 23.8 |
| Commercial Clarity | 50.0 |
| Access Clarity | 50.0 |

Regulatory layer — **Insurance**: 25.8 (matched via tags).

## Agent readiness — 29.1 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | documented |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Freemium · Self-serve signup — onboarding: self-serve, pricing: freemium, trial: no (confidence: high).

## APIs (8)

- **Aserto Decision Logs API** — Collects and surfaces a complete audit trail of authorization decisions made by connected Authorizer instances. Supports compliance, debugging, and analytics use cases by record...
- **Aserto Control Plane API** — Management API for the Aserto SaaS control plane (wound down May 2025, succeeded by the open-source Topaz project). Provided lifecycle management of policies, Edge Authorizer in...
- **Aserto Authorizer API** — The Authorizer API from Aserto — 4 operation(s) for authorizer.
- **Aserto authzen API** — The authzen API from Aserto — 5 operation(s) for authzen.
- **Aserto decision_logs API** — The decision_logs API from Aserto — 6 operation(s) for decision_logs.
- **Aserto directory API** — The directory API from Aserto — 14 operation(s) for directory.
- **Aserto Info API** — The Info API from Aserto — 1 operation(s) for info.
- **Aserto Policy API** — The Policy API from Aserto — 2 operation(s) for policy.

## Agentic access (1)

- **Aserto Agentic Access** — 36 operations · 21 acting

## Security (2)

- **Aserto Authentication** — apiKey · 2 schemes
- **Aserto Domain Security** — TLSv1.3 · HSTS · DNSSEC · DMARC

## Plans (1)

- **Aserto Plans Pricing**

## Tags

Authorization, Fine-Grained Access Control, RBAC, ABAC, ReBAC, Policy, Open Policy Agent, OPA, Cloud-Native, Security

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/aserto/). Scores are computed from the provider's own public artifacts under a published rubric.