Authsignal

Authsignal is a passwordless, step-up, and risk-based authentication platform. The product wraps passkeys, authenticator apps (TOTP), SMS and WhatsApp OTP, email OTP and magic links, push notifications, biometrics (face / palm), and ID verification behind a unified Server API, Client API, and Management API. A no-code rules engine routes high-risk events through step-up challenges, and audit / observability surfaces every authentication attempt. Authsignal slots in front of existing identity providers (Cognito, Auth0, Azure AD B2C, Keycloak, IdentityServer, NextAuth.js) or works standalone.

Authsignal publishes 6 APIs on the APIs.io network, including Actions API, Authenticators API, Challenges API, and 3 more. Tagged areas include Authentication, Passkeys, MFA, Step-Up, and Passwordless.

Authsignal’s developer surface includes authentication, documentation, GitHub presence, status page, pricing, engineering blog, and 8 more developer resources.

🌐 Visit website 📡 Source on GitHub

36.7/100 thin ▬ flat Agent 20/100 agent aware open core · MIT Full breakdown ↓
scored 2026-09-08 · rubric v0.20.0

AccessFreeSelf serve⚡ Free to try

1 APIs

Authentication Passkeys MFA Step-Up Passwordless Risk Biometrics Identity Verification

Kin Score

Kin Score How this is scored →
scored 2026-09-08 · rubric v0.20.0

Composite quality — 36.7/100 · thin

Contract Quality 10.4 / 20

Developer Ergonomics 3.8 / 16

Access Clarity 6.3 / 16

Operational Transparency 4.4 / 10

Contract Governance 0.0 / 10

Discoverability 6.1 / 8

Open Source Surface 2.5 / 10

Create-or-Update Ergonomics 0.0 / 10

Agent readiness — 20/100 · agent aware

Machine-Readable Contract 18 / 18

Agentic Access Contract 10 / 10

Documented Reversibility 0 / 6

MCP Server 0 / 12

Machine-Readable Auth 10 / 10

Idempotency 0 / 9

Stable Error Semantics 0 / 8

Request/Response Examples 0 / 7

Rate-Limit Signaling 7 / 7

Typed Event Surface 0 / 6

Agent Skills 0 / 5

Well-Known Catalog 0 / 4

Consent & Bot Identity 0 / 3

A2A Agent Card 0 / 8

Dry-Run / Simulate Mode 0 / 4

Delegated User Identity 0 / 6

Protected Resource Metadata 0 / 5

Registration Without a Human 0 / 6

Agentic Commerce Well-Known Document 0 / 5

Open Source Surface applies to this provider. This product is open source and we read its repository directly, so Open Source Surface carries 10 points of the composite. It is scored from what the repository actually publishes — a security policy, a contribution guide, a release history, a code of conduct — read live from the provider rather than inferred from our own catalog pointers. This facet adds; nothing was taken away to make room for it. An open-source project is not excused from the commercial facets, because exemption would strip it of the points it does earn. If we have the wrong repository, or this product is not open source, say so on your provider repo and we will drop the facet rather than have you publish against it.

Create-or-Update Ergonomics applies to this provider. This API accepts writes, so it carries 10 points of the composite. It is scored from the published contracts themselves: whether a caller can create-or-update in one call, whether the write accepts a key the caller already holds, and whether the response says which branch ran. Without that, every write needs a search-and-branch in front of it, and the first time that check is skipped a duplicate record is created. Scored against the observed mean rather than raw — a provider at the catalog average is unchanged by this facet, not penalised by it.

The six quality facets above are damped to 80 points between them, because the conditional facet above carries the other 20. That is why each facet's contribution is shown against a damped maximum: raising a quality facet moves the composite by 80% of its nominal weight, not 100%. The full arithmetic is at apis.io/rating/.

Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. Every facet and dimension name above is a link: it opens that measurement's own page — what it means, the exact checks that feed it, how the whole catalog distributes on it, and the providers at the top of it. This rating is computed from github.com/api-evangelist/authsignal: open an issue to ask a question, or submit a pull request to add artifacts. Submit an artifact on GitHub — free → Manage your own listing — the Influence plan, $499/mo →

APIs 22

Individual APIs this provider publishes, each with its own machine-readable definition.

Authsignal Server API

Server-to-server REST API used to track user actions, evaluate the rules engine, mint short-lived URLs for the pre-built authentication UI, issue client tokens, validate challen...

Authsignal Client API

Browser / device-facing REST API for fully custom authentication UIs. Supports passkeys, authenticator apps, SMS / WhatsApp OTP, email OTP, magic links, and push challenges. Aut...

Authsignal Management API

REST API for tenant-level configuration: actions and rules, theme and branding, and other tenant settings. Authenticated with a separate management API key.

Authsignal Webhooks

Outbound webhooks delivering authentication and enrollment events, enabling downstream systems to react to user lifecycle changes and challenge outcomes.

Authsignal Node.js SDK

Official server-side SDK for Node.js / TypeScript wrapping the Server API.

Authsignal Python SDK

Official server-side Python SDK for the Authsignal Server API.

Authsignal Java SDK

Official Java / Kotlin SDK for the Authsignal Server API.

Authsignal .NET SDK

Official C# / .NET SDK for the Authsignal Server API.

Authsignal Ruby SDK

Official Ruby SDK for the Authsignal Server API.

Authsignal PHP SDK

Official PHP SDK for the Authsignal Server API.

Authsignal Go SDK

Official Go SDK for the Authsignal Server API.

Authsignal Browser SDK

JavaScript / TypeScript browser SDK wrapping the Client API and WebAuthn / passkey ceremonies for web applications.

Authsignal iOS SDK

Native iOS (Swift) SDK for passkeys, push, and OTP challenges in iOS applications.

Authsignal Android SDK

Native Android (Kotlin) SDK for passkeys, push, and OTP challenges in Android applications.

Authsignal React Native SDK

React Native wrapper around the iOS and Android SDKs.

Authsignal Flutter SDK

Flutter (Dart) SDK wrapping the iOS and Android native SDKs.

Authsignal Actions API

The Actions API from Authsignal — 3 operation(s) for actions.

Authsignal Authenticators API

The Authenticators API from Authsignal — 4 operation(s) for authenticators.

Authsignal Challenges API

The Challenges API from Authsignal — 5 operation(s) for challenges.

Authsignal Devices API

The Devices API from Authsignal — 3 operation(s) for devices.

Authsignal Sessions API

The Sessions API from Authsignal — 5 operation(s) for sessions.

Authsignal Users API

The Users API from Authsignal — 2 operation(s) for users.

Scroll for all 22

Open Collections 8

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

API Collection

OPEN COLLECTION

Authsignal Server Actions API

OPEN COLLECTION

Authsignal Server Actions Authenticators API

OPEN COLLECTION

Authsignal Server Actions Challenges API

OPEN COLLECTION

Authsignal Server Actions Devices API

OPEN COLLECTION

Authsignal Server Actions Sessions API

OPEN COLLECTION

Authsignal Server Actions Users API

OPEN COLLECTION

Authsignal Server API

OPEN COLLECTION

Scroll for all 8

Pricing Plans 1

Published pricing tiers and plan structures.

Authsignal Plans Pricing

1 plans

PLANS

Rate Limits 1

Documented rate limits and quota policies.

Authsignal Rate Limits

2 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

Authsignal Finops

FINOPS

Security Posture 2

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Authsignal Authentication

http · 1 scheme

SECURITY

Authsignal Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Authsignal Agentic Access

26 operations · 18 acting · 2 human-in-the-loop

26 operations · 18 acting

AGENTIC

Resources

Documentation 1

Reference material describing how the API behaves

Documentation

Documentation

Agent Surfaces 2

MCP servers, agent skills, and machine-readable catalogs

AgenticAccess

AgenticAccess

LlmsText

LlmsText

Build 1

SDKs, sample code, and the tooling you integrate with

GitHub

GitHub

Access & Security 2

Authentication, authorization, and security posture

DomainSecurity

DomainSecurity

Authentication

Authentication

Operate 3

Status, limits, changes, and where to get help

IssueTracker

IssueTracker

Releases

Releases

Status

Status

Commercial 2

Pricing, plans, and the legal terms of use

License

License

Pricing

Pricing

Company 3

The organization behind the API

Website

Website

Blog

Blog

LinkedIn

Source (apis.yml)

aid: authsignal
url: https://raw.githubusercontent.com/api-evangelist/authsignal/refs/heads/main/apis.yml
name: Authsignal
kind: company
description: Authsignal is a passwordless, step-up, and risk-based authentication platform. The product wraps passkeys, authenticator
  apps (TOTP), SMS and WhatsApp OTP, email OTP and magic links, push notifications, biometrics (face / palm), and ID verification
  behind a unified Server API, Client API, and Management API. A no-code rules engine routes high-risk events through step-up
  challenges, and audit / observability surfaces every authentication attempt. Authsignal slots in front of existing identity
  providers (Cognito, Auth0, Azure AD B2C, Keycloak, IdentityServer, NextAuth.js) or works standalone.
deliveryModel:
  model: open-core
  license: MIT
  open_source: true
  commercial: true
  callable_host: true
  label: Open core · an OSS project plus a commercial hosted product
  confidence: high
  source:
  - license
  - openapi
  - pricing
  generated: '2026-08-28'
  method: derived
accessModel:
  pricing: free
  onboarding: self-serve
  trial: false
  try_now: true
  public: false
  label: Free · Self-serve signup
  confidence: medium
  source:
  - plans
  - authentication
  - security
  generated: '2026-09-03'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/authsignal.png
tags:
- Authentication
- Passkeys
- MFA
- Step-Up
- Passwordless
- Risk
- Biometrics
- Identity Verification
created: '2026-05-23'
modified: '2026-05-23'
specificationVersion: '0.23'
apis:
- aid: authsignal:server-api
  name: Authsignal Server API
  description: Server-to-server REST API used to track user actions, evaluate the rules engine, mint short-lived URLs for
    the pre-built authentication UI, issue client tokens, validate challenge results, and manage enrolled authenticators on
    behalf of users. Authenticated with the tenant secret (HTTP Basic with the tenant ID as username).
  humanURL: https://docs.authsignal.com/api-reference/server-api/overview
  baseURL: https://api.authsignal.com
  tags:
  - REST
  - Server
  - Actions
  - User
  - Authenticators
  tags_raw:
  - REST
  - Server
  - Actions
  - Users
  - Authenticators
  properties:
  - type: Documentation
    url: https://docs.authsignal.com/api-reference/server-api/overview
- aid: authsignal:client-api
  name: Authsignal Client API
  description: Browser / device-facing REST API for fully custom authentication UIs. Supports passkeys, authenticator apps,
    SMS / WhatsApp OTP, email OTP, magic links, and push challenges. Authenticated with short-lived client tokens issued by
    the Server API.
  humanURL: https://docs.authsignal.com/api-reference/client-api/overview
  baseURL: https://api.authsignal.com
  tags:
  - REST
  - Clients
  - Passkeys
  - OTP
  tags_raw:
  - REST
  - Client
  - Passkeys
  - OTP
  properties:
  - type: Documentation
    url: https://docs.authsignal.com/api-reference/client-api/overview
- aid: authsignal:management-api
  name: Authsignal Management API
  description: 'REST API for tenant-level configuration: actions and rules, theme and branding, and other tenant settings.
    Authenticated with a separate management API key.'
  humanURL: https://docs.authsignal.com/api-reference/management-api/overview
  baseURL: https://api.authsignal.com
  tags:
  - REST
  - Management
  - Configuration
  - Tenant
  properties:
  - type: Documentation
    url: https://docs.authsignal.com/api-reference/management-api/overview
- aid: authsignal:webhooks
  name: Authsignal Webhooks
  description: Outbound webhooks delivering authentication and enrollment events, enabling downstream systems to react to
    user lifecycle changes and challenge outcomes.
  humanURL: https://docs.authsignal.com/concepts/webhooks
  baseURL: customer-configured
  tags:
  - Webhook
  - Event
  tags_raw:
  - Webhooks
  - Events
  properties:
  - type: Documentation
    url: https://docs.authsignal.com/concepts/webhooks
- aid: authsignal:sdk-node
  name: Authsignal Node.js SDK
  description: Official server-side SDK for Node.js / TypeScript wrapping the Server API.
  humanURL: https://github.com/authsignal/authsignal-node
  baseURL: https://github.com/authsignal/authsignal-node
  tags:
  - SDK
  - Node.js
  - TypeScript
  - Server
  properties:
  - type: Repository
    url: https://github.com/authsignal/authsignal-node
- aid: authsignal:sdk-python
  name: Authsignal Python SDK
  description: Official server-side Python SDK for the Authsignal Server API.
  humanURL: https://github.com/authsignal/authsignal-python
  baseURL: https://github.com/authsignal/authsignal-python
  tags:
  - SDK
  - Python
  - Server
  properties:
  - type: Repository
    url: https://github.com/authsignal/authsignal-python
- aid: authsignal:sdk-java
  name: Authsignal Java SDK
  description: Official Java / Kotlin SDK for the Authsignal Server API.
  humanURL: https://github.com/authsignal/authsignal-java
  baseURL: https://github.com/authsignal/authsignal-java
  tags:
  - SDK
  - Java
  - Kotlin
  - Server
  properties:
  - type: Repository
    url: https://github.com/authsignal/authsignal-java
- aid: authsignal:sdk-dotnet
  name: Authsignal .NET SDK
  description: Official C# / .NET SDK for the Authsignal Server API.
  humanURL: https://github.com/authsignal/authsignal-dotnet
  baseURL: https://github.com/authsignal/authsignal-dotnet
  tags:
  - SDK
  - .NET
  - C#
  - Server
  properties:
  - type: Repository
    url: https://github.com/authsignal/authsignal-dotnet
- aid: authsignal:sdk-ruby
  name: Authsignal Ruby SDK
  description: Official Ruby SDK for the Authsignal Server API.
  humanURL: https://github.com/authsignal/authsignal-ruby
  baseURL: https://github.com/authsignal/authsignal-ruby
  tags:
  - SDK
  - Ruby
  - Server
  properties:
  - type: Repository
    url: https://github.com/authsignal/authsignal-ruby
- aid: authsignal:sdk-php
  name: Authsignal PHP SDK
  description: Official PHP SDK for the Authsignal Server API.
  humanURL: https://github.com/authsignal/authsignal-php
  baseURL: https://github.com/authsignal/authsignal-php
  tags:
  - SDK
  - PHP
  - Server
  properties:
  - type: Repository
    url: https://github.com/authsignal/authsignal-php
- aid: authsignal:sdk-go
  name: Authsignal Go SDK
  description: Official Go SDK for the Authsignal Server API.
  humanURL: https://github.com/authsignal/authsignal-go
  baseURL: https://github.com/authsignal/authsignal-go
  tags:
  - SDK
  - Go
  - Server
  properties:
  - type: Repository
    url: https://github.com/authsignal/authsignal-go
- aid: authsignal:sdk-browser
  name: Authsignal Browser SDK
  description: JavaScript / TypeScript browser SDK wrapping the Client API and WebAuthn / passkey ceremonies for web applications.
  humanURL: https://github.com/authsignal/authsignal-browser
  baseURL: https://github.com/authsignal/authsignal-browser
  tags:
  - SDK
  - JavaScript
  - Browser
  - Passkeys
  properties:
  - type: Repository
    url: https://github.com/authsignal/authsignal-browser
- aid: authsignal:sdk-ios
  name: Authsignal iOS SDK
  description: Native iOS (Swift) SDK for passkeys, push, and OTP challenges in iOS applications.
  humanURL: https://github.com/authsignal/authsignal-ios
  baseURL: https://github.com/authsignal/authsignal-ios
  tags:
  - SDK
  - iOS
  - Mobile
  - Passkeys
  properties:
  - type: Repository
    url: https://github.com/authsignal/authsignal-ios
- aid: authsignal:sdk-android
  name: Authsignal Android SDK
  description: Native Android (Kotlin) SDK for passkeys, push, and OTP challenges in Android applications.
  humanURL: https://github.com/authsignal/authsignal-android
  baseURL: https://github.com/authsignal/authsignal-android
  tags:
  - SDK
  - Android
  - Mobile
  - Passkeys
  properties:
  - type: Repository
    url: https://github.com/authsignal/authsignal-android
- aid: authsignal:sdk-react-native
  name: Authsignal React Native SDK
  description: React Native wrapper around the iOS and Android SDKs.
  humanURL: https://github.com/authsignal/react-native-authsignal
  baseURL: https://github.com/authsignal/react-native-authsignal
  tags:
  - SDK
  - React Native
  - Mobile
  properties:
  - type: Repository
    url: https://github.com/authsignal/react-native-authsignal
- aid: authsignal:sdk-flutter
  name: Authsignal Flutter SDK
  description: Flutter (Dart) SDK wrapping the iOS and Android native SDKs.
  humanURL: https://github.com/authsignal/authsignal-flutter
  baseURL: https://github.com/authsignal/authsignal-flutter
  tags:
  - SDK
  - Flutter
  - Mobile
  properties:
  - type: Repository
    url: https://github.com/authsignal/authsignal-flutter
- aid: authsignal:authsignal-actions-api
  name: Authsignal Actions API
  description: The Actions API from Authsignal — 3 operation(s) for actions.
  humanURL: https://docs.authsignal.com/api-reference/server-api/overview
  baseURL: https://api.authsignal.com
  tags:
  - Actions
  properties:
  - type: OpenAPI
    url: openapi/authsignal-actions-api-openapi.yml
- aid: authsignal:authsignal-authenticators-api
  name: Authsignal Authenticators API
  description: The Authenticators API from Authsignal — 4 operation(s) for authenticators.
  humanURL: https://docs.authsignal.com/api-reference/server-api/overview
  baseURL: https://api.authsignal.com
  tags:
  - Authenticators
  properties:
  - type: OpenAPI
    url: openapi/authsignal-authenticators-api-openapi.yml
- aid: authsignal:authsignal-challenges-api
  name: Authsignal Challenges API
  description: The Challenges API from Authsignal — 5 operation(s) for challenges.
  humanURL: https://docs.authsignal.com/api-reference/server-api/overview
  baseURL: https://api.authsignal.com
  tags:
  - Challenges
  properties:
  - type: OpenAPI
    url: openapi/authsignal-challenges-api-openapi.yml
- aid: authsignal:authsignal-devices-api
  name: Authsignal Devices API
  description: The Devices API from Authsignal — 3 operation(s) for devices.
  humanURL: https://docs.authsignal.com/api-reference/server-api/overview
  baseURL: https://api.authsignal.com
  tags:
  - Devices
  properties:
  - type: OpenAPI
    url: openapi/authsignal-devices-api-openapi.yml
- aid: authsignal:authsignal-sessions-api
  name: Authsignal Sessions API
  description: The Sessions API from Authsignal — 5 operation(s) for sessions.
  humanURL: https://docs.authsignal.com/api-reference/server-api/overview
  baseURL: https://api.authsignal.com
  tags:
  - Sessions
  properties:
  - type: OpenAPI
    url: openapi/authsignal-sessions-api-openapi.yml
- aid: authsignal:authsignal-users-api
  name: Authsignal Users API
  description: The Users API from Authsignal — 2 operation(s) for users.
  humanURL: https://docs.authsignal.com/api-reference/server-api/overview
  baseURL: https://api.authsignal.com
  tags:
  - User
  tags_raw:
  - Users
  properties:
  - type: OpenAPI
    url: openapi/authsignal-users-api-openapi.yml
common:
- type: IssueTracker
  url: https://github.com/authsignal/authsignal-node/issues
- type: Releases
  url: https://github.com/authsignal/authsignal-node/releases
- type: License
  name: MIT
  url: https://github.com/authsignal/authsignal-node/blob/main/LICENSE
- type: AgenticAccess
  url: agentic-access/authsignal-agentic-access.yml
- type: DomainSecurity
  url: security/authsignal-domain-security.yml
- type: Authentication
  url: authentication/authsignal-authentication.yml
- type: Website
  url: https://www.authsignal.com/
- type: Documentation
  url: https://docs.authsignal.com/
- type: GitHub
  url: https://github.com/authsignal
- type: Status
  url: https://status.authsignal.com/
- type: Pricing
  url: https://www.authsignal.com/pricing
- type: Blog
  url: https://www.authsignal.com/blog
- type: LinkedIn
  url: https://www.linkedin.com/company/authsignal
- type: LlmsText
  url: https://docs.authsignal.com/llms.txt
integrations:
- name: Amazon Cognito
- name: Auth0
- name: Azure AD B2C
- name: Keycloak
- name: Duende IdentityServer
- name: NextAuth.js
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com

Work with this as data

Every provider here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for providers

9 MCP tools reach this

find_providersBrowse and filter every provider in the catalog.
get_provider_artifactsEvery artifact this provider publishes, grouped by type.
get_provider_operationsEvery operation across all of their OpenAPIs — one call instead of parsing every spec.
get_provider_toolsEvery MCP tool they ship, with the operation each wraps.
get_provider_evidenceHow each part of their score was established. Free — the basis for a claim should not sit behind it.
get_provider_ratingPRO — composite, band, trend and facet scores.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This provider

curl "https://apis.io/api/v1/providers/authsignal"

All providers

curl "https://apis.io/api/v1/providers?limit=25"

Every operation they expose

curl "https://apis.io/api/v1/providers/authsignal/operations?limit=25"

How their score was established

curl "https://apis.io/api/v1/providers/authsignal/evidence"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.