Authsignal website screenshot

Authsignal

Authsignal is a passwordless, step-up, and risk-based authentication platform. The product wraps passkeys, authenticator apps (TOTP), SMS and WhatsApp OTP, email OTP and magic links, push notifications, biometrics (face / palm), and ID verification behind a unified Server API, Client API, and Management API. A no-code rules engine routes high-risk events through step-up challenges, and audit / observability surfaces every authentication attempt. Authsignal slots in front of existing identity providers (Cognito, Auth0, Azure AD B2C, Keycloak, IdentityServer, NextAuth.js) or works standalone.

Authsignal publishes 6 APIs on the APIs.io network, including Actions API, Authenticators API, Challenges API, and 3 more. Tagged areas include Authentication, Passkeys, MFA, Step-Up, and Passwordless.

Authsignal’s developer surface includes authentication, documentation, GitHub presence, status page, pricing, engineering blog, and 5 more developer resources.

36.6/100 thin ▬ flat Agent 31/100 agent aware Full breakdown ↓
scored 2026-07-28 · rubric v0.6
AccessFreeSelf serve⚡ Free to try
22 APIs
AuthenticationPasskeysMFAStep-UpPasswordlessRiskBiometricsIdentity Verification

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-07-28 · rubric v0.6
Composite quality — 36.6/100 · thin
Contract Quality 13.6 / 25
Developer Ergonomics 4.3 / 20
Commercial Clarity 7.9 / 20
Operational Transparency 3.4 / 13
Governance 0.0 / 12
Discoverability 7.4 / 10
Agent readiness — 31/100 · agent aware
Machine-Readable Contract 18 / 18
Agentic Access Contract 10 / 10
MCP Server 0 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 0 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 7 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/authsignal: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 22

Individual APIs this provider publishes, each with its own machine-readable definition.

Authsignal Server API

Server-to-server REST API used to track user actions, evaluate the rules engine, mint short-lived URLs for the pre-built authentication UI, issue client tokens, validate challen...

Authsignal Client API

Browser / device-facing REST API for fully custom authentication UIs. Supports passkeys, authenticator apps, SMS / WhatsApp OTP, email OTP, magic links, and push challenges. Aut...

Authsignal Management API

REST API for tenant-level configuration: actions and rules, theme and branding, and other tenant settings. Authenticated with a separate management API key.

Authsignal Webhooks

Outbound webhooks delivering authentication and enrollment events, enabling downstream systems to react to user lifecycle changes and challenge outcomes.

Authsignal Node.js SDK

Official server-side SDK for Node.js / TypeScript wrapping the Server API.

Authsignal Python SDK

Official server-side Python SDK for the Authsignal Server API.

Authsignal Java SDK

Official Java / Kotlin SDK for the Authsignal Server API.

Authsignal .NET SDK

Official C# / .NET SDK for the Authsignal Server API.

Authsignal Ruby SDK

Official Ruby SDK for the Authsignal Server API.

Authsignal PHP SDK

Official PHP SDK for the Authsignal Server API.

Authsignal Go SDK

Official Go SDK for the Authsignal Server API.

Authsignal Browser SDK

JavaScript / TypeScript browser SDK wrapping the Client API and WebAuthn / passkey ceremonies for web applications.

Authsignal iOS SDK

Native iOS (Swift) SDK for passkeys, push, and OTP challenges in iOS applications.

Authsignal Android SDK

Native Android (Kotlin) SDK for passkeys, push, and OTP challenges in Android applications.

Authsignal React Native SDK

React Native wrapper around the iOS and Android SDKs.

Authsignal Flutter SDK

Flutter (Dart) SDK wrapping the iOS and Android native SDKs.

Authsignal Actions API

The Actions API from Authsignal — 3 operation(s) for actions.

Authsignal Authenticators API

The Authenticators API from Authsignal — 4 operation(s) for authenticators.

Authsignal Challenges API

The Challenges API from Authsignal — 5 operation(s) for challenges.

Authsignal Devices API

The Devices API from Authsignal — 3 operation(s) for devices.

Authsignal Sessions API

The Sessions API from Authsignal — 5 operation(s) for sessions.

Authsignal Users API

The Users API from Authsignal — 2 operation(s) for users.

Scroll for all 22

Open Collections 1

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

Authsignal Server API

OPEN COLLECTION

Pricing Plans 1

Published pricing tiers and plan structures.

Rate Limits 1

Documented rate limits and quota policies.

Authsignal Rate Limits

2 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

Security Posture 2

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Authsignal Authentication

http · 1 scheme

SECURITY

Authsignal Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Authsignal Agentic Access

26 operations · 18 acting · 2 human-in-the-loop

26 operations · 18 acting

AGENTIC

Resources

Documentation 1

Reference material describing how the API behaves

Agent Surfaces 2

MCP servers, agent skills, and machine-readable catalogs

Build 1

SDKs, sample code, and the tooling you integrate with

Access & Security 2

Authentication, authorization, and security posture

Operate 1

Status, limits, changes, and where to get help

Commercial 1

Pricing, plans, and the legal terms of use

Company 3

The organization behind the API

Source (apis.yml)

apis.yml Raw ↑
aid: authsignal
url: https://raw.githubusercontent.com/api-evangelist/authsignal/refs/heads/main/apis.yml
name: Authsignal
kind: company
description: Authsignal is a passwordless, step-up, and risk-based authentication platform. The product wraps passkeys, authenticator
  apps (TOTP), SMS and WhatsApp OTP, email OTP and magic links, push notifications, biometrics (face / palm), and ID verification
  behind a unified Server API, Client API, and Management API. A no-code rules engine routes high-risk events through step-up
  challenges, and audit / observability surfaces every authentication attempt. Authsignal slots in front of existing identity
  providers (Cognito, Auth0, Azure AD B2C, Keycloak, IdentityServer, NextAuth.js) or works standalone.
accessModel:
  pricing: free
  onboarding: self-serve
  trial: false
  try_now: true
  public: false
  label: Free · Self-serve signup
  confidence: high
  source:
  - plans
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/authsignal.png
tags:
- Authentication
- Passkeys
- MFA
- Step-Up
- Passwordless
- Risk
- Biometrics
- Identity Verification
created: '2026-05-23'
modified: '2026-05-23'
specificationVersion: '0.19'
apis:
- aid: authsignal:server-api
  name: Authsignal Server API
  description: Server-to-server REST API used to track user actions, evaluate the rules engine, mint short-lived URLs for
    the pre-built authentication UI, issue client tokens, validate challenge results, and manage enrolled authenticators on
    behalf of users. Authenticated with the tenant secret (HTTP Basic with the tenant ID as username).
  humanURL: https://docs.authsignal.com/api-reference/server-api/overview
  baseURL: https://api.authsignal.com
  tags:
  - REST
  - Server
  - Actions
  - Users
  - Authenticators
  properties:
  - type: Documentation
    url: https://docs.authsignal.com/api-reference/server-api/overview
- aid: authsignal:client-api
  name: Authsignal Client API
  description: Browser / device-facing REST API for fully custom authentication UIs. Supports passkeys, authenticator apps,
    SMS / WhatsApp OTP, email OTP, magic links, and push challenges. Authenticated with short-lived client tokens issued by
    the Server API.
  humanURL: https://docs.authsignal.com/api-reference/client-api/overview
  baseURL: https://api.authsignal.com
  tags:
  - REST
  - Client
  - Passkeys
  - OTP
  properties:
  - type: Documentation
    url: https://docs.authsignal.com/api-reference/client-api/overview
- aid: authsignal:management-api
  name: Authsignal Management API
  description: 'REST API for tenant-level configuration: actions and rules, theme and branding, and other tenant settings.
    Authenticated with a separate management API key.'
  humanURL: https://docs.authsignal.com/api-reference/management-api/overview
  baseURL: https://api.authsignal.com
  tags:
  - REST
  - Management
  - Configuration
  - Tenant
  properties:
  - type: Documentation
    url: https://docs.authsignal.com/api-reference/management-api/overview
- aid: authsignal:webhooks
  name: Authsignal Webhooks
  description: Outbound webhooks delivering authentication and enrollment events, enabling downstream systems to react to
    user lifecycle changes and challenge outcomes.
  humanURL: https://docs.authsignal.com/concepts/webhooks
  baseURL: customer-configured
  tags:
  - Webhooks
  - Events
  properties:
  - type: Documentation
    url: https://docs.authsignal.com/concepts/webhooks
- aid: authsignal:sdk-node
  name: Authsignal Node.js SDK
  description: Official server-side SDK for Node.js / TypeScript wrapping the Server API.
  humanURL: https://github.com/authsignal/authsignal-node
  baseURL: https://github.com/authsignal/authsignal-node
  tags:
  - SDK
  - Node.js
  - TypeScript
  - Server
  properties:
  - type: Repository
    url: https://github.com/authsignal/authsignal-node
- aid: authsignal:sdk-python
  name: Authsignal Python SDK
  description: Official server-side Python SDK for the Authsignal Server API.
  humanURL: https://github.com/authsignal/authsignal-python
  baseURL: https://github.com/authsignal/authsignal-python
  tags:
  - SDK
  - Python
  - Server
  properties:
  - type: Repository
    url: https://github.com/authsignal/authsignal-python
- aid: authsignal:sdk-java
  name: Authsignal Java SDK
  description: Official Java / Kotlin SDK for the Authsignal Server API.
  humanURL: https://github.com/authsignal/authsignal-java
  baseURL: https://github.com/authsignal/authsignal-java
  tags:
  - SDK
  - Java
  - Kotlin
  - Server
  properties:
  - type: Repository
    url: https://github.com/authsignal/authsignal-java
- aid: authsignal:sdk-dotnet
  name: Authsignal .NET SDK
  description: Official C# / .NET SDK for the Authsignal Server API.
  humanURL: https://github.com/authsignal/authsignal-dotnet
  baseURL: https://github.com/authsignal/authsignal-dotnet
  tags:
  - SDK
  - .NET
  - C#
  - Server
  properties:
  - type: Repository
    url: https://github.com/authsignal/authsignal-dotnet
- aid: authsignal:sdk-ruby
  name: Authsignal Ruby SDK
  description: Official Ruby SDK for the Authsignal Server API.
  humanURL: https://github.com/authsignal/authsignal-ruby
  baseURL: https://github.com/authsignal/authsignal-ruby
  tags:
  - SDK
  - Ruby
  - Server
  properties:
  - type: Repository
    url: https://github.com/authsignal/authsignal-ruby
- aid: authsignal:sdk-php
  name: Authsignal PHP SDK
  description: Official PHP SDK for the Authsignal Server API.
  humanURL: https://github.com/authsignal/authsignal-php
  baseURL: https://github.com/authsignal/authsignal-php
  tags:
  - SDK
  - PHP
  - Server
  properties:
  - type: Repository
    url: https://github.com/authsignal/authsignal-php
- aid: authsignal:sdk-go
  name: Authsignal Go SDK
  description: Official Go SDK for the Authsignal Server API.
  humanURL: https://github.com/authsignal/authsignal-go
  baseURL: https://github.com/authsignal/authsignal-go
  tags:
  - SDK
  - Go
  - Server
  properties:
  - type: Repository
    url: https://github.com/authsignal/authsignal-go
- aid: authsignal:sdk-browser
  name: Authsignal Browser SDK
  description: JavaScript / TypeScript browser SDK wrapping the Client API and WebAuthn / passkey ceremonies for web applications.
  humanURL: https://github.com/authsignal/authsignal-browser
  baseURL: https://github.com/authsignal/authsignal-browser
  tags:
  - SDK
  - JavaScript
  - Browser
  - Passkeys
  properties:
  - type: Repository
    url: https://github.com/authsignal/authsignal-browser
- aid: authsignal:sdk-ios
  name: Authsignal iOS SDK
  description: Native iOS (Swift) SDK for passkeys, push, and OTP challenges in iOS applications.
  humanURL: https://github.com/authsignal/authsignal-ios
  baseURL: https://github.com/authsignal/authsignal-ios
  tags:
  - SDK
  - iOS
  - Mobile
  - Passkeys
  properties:
  - type: Repository
    url: https://github.com/authsignal/authsignal-ios
- aid: authsignal:sdk-android
  name: Authsignal Android SDK
  description: Native Android (Kotlin) SDK for passkeys, push, and OTP challenges in Android applications.
  humanURL: https://github.com/authsignal/authsignal-android
  baseURL: https://github.com/authsignal/authsignal-android
  tags:
  - SDK
  - Android
  - Mobile
  - Passkeys
  properties:
  - type: Repository
    url: https://github.com/authsignal/authsignal-android
- aid: authsignal:sdk-react-native
  name: Authsignal React Native SDK
  description: React Native wrapper around the iOS and Android SDKs.
  humanURL: https://github.com/authsignal/react-native-authsignal
  baseURL: https://github.com/authsignal/react-native-authsignal
  tags:
  - SDK
  - React Native
  - Mobile
  properties:
  - type: Repository
    url: https://github.com/authsignal/react-native-authsignal
- aid: authsignal:sdk-flutter
  name: Authsignal Flutter SDK
  description: Flutter (Dart) SDK wrapping the iOS and Android native SDKs.
  humanURL: https://github.com/authsignal/authsignal-flutter
  baseURL: https://github.com/authsignal/authsignal-flutter
  tags:
  - SDK
  - Flutter
  - Mobile
  properties:
  - type: Repository
    url: https://github.com/authsignal/authsignal-flutter
- aid: authsignal:authsignal-actions-api
  name: Authsignal Actions API
  description: The Actions API from Authsignal — 3 operation(s) for actions.
  humanURL: https://docs.authsignal.com/api-reference/server-api/overview
  baseURL: https://api.authsignal.com
  tags:
  - Actions
  properties:
  - type: OpenAPI
    url: openapi/authsignal-actions-api-openapi.yml
- aid: authsignal:authsignal-authenticators-api
  name: Authsignal Authenticators API
  description: The Authenticators API from Authsignal — 4 operation(s) for authenticators.
  humanURL: https://docs.authsignal.com/api-reference/server-api/overview
  baseURL: https://api.authsignal.com
  tags:
  - Authenticators
  properties:
  - type: OpenAPI
    url: openapi/authsignal-authenticators-api-openapi.yml
- aid: authsignal:authsignal-challenges-api
  name: Authsignal Challenges API
  description: The Challenges API from Authsignal — 5 operation(s) for challenges.
  humanURL: https://docs.authsignal.com/api-reference/server-api/overview
  baseURL: https://api.authsignal.com
  tags:
  - Challenges
  properties:
  - type: OpenAPI
    url: openapi/authsignal-challenges-api-openapi.yml
- aid: authsignal:authsignal-devices-api
  name: Authsignal Devices API
  description: The Devices API from Authsignal — 3 operation(s) for devices.
  humanURL: https://docs.authsignal.com/api-reference/server-api/overview
  baseURL: https://api.authsignal.com
  tags:
  - Devices
  properties:
  - type: OpenAPI
    url: openapi/authsignal-devices-api-openapi.yml
- aid: authsignal:authsignal-sessions-api
  name: Authsignal Sessions API
  description: The Sessions API from Authsignal — 5 operation(s) for sessions.
  humanURL: https://docs.authsignal.com/api-reference/server-api/overview
  baseURL: https://api.authsignal.com
  tags:
  - Sessions
  properties:
  - type: OpenAPI
    url: openapi/authsignal-sessions-api-openapi.yml
- aid: authsignal:authsignal-users-api
  name: Authsignal Users API
  description: The Users API from Authsignal — 2 operation(s) for users.
  humanURL: https://docs.authsignal.com/api-reference/server-api/overview
  baseURL: https://api.authsignal.com
  tags:
  - Users
  properties:
  - type: OpenAPI
    url: openapi/authsignal-users-api-openapi.yml
common:
- type: AgenticAccess
  url: agentic-access/authsignal-agentic-access.yml
- type: DomainSecurity
  url: security/authsignal-domain-security.yml
- type: Authentication
  url: authentication/authsignal-authentication.yml
- type: Website
  url: https://www.authsignal.com/
- type: Documentation
  url: https://docs.authsignal.com/
- type: GitHub
  url: https://github.com/authsignal
- type: Status
  url: https://status.authsignal.com/
- type: Pricing
  url: https://www.authsignal.com/pricing
- type: Blog
  url: https://www.authsignal.com/blog
- type: LinkedIn
  url: https://www.linkedin.com/company/authsignal
- type: LlmsText
  url: https://docs.authsignal.com/llms.txt
integrations:
- name: Amazon Cognito
- name: Auth0
- name: Azure AD B2C
- name: Keycloak
- name: Duende IdentityServer
- name: NextAuth.js
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com