# Amazon Cognito **Canonical:** https://apis.io/providers/aws-cognito/ **Website:** https://aws.amazon.com/cognito/ **APIs profiled:** 124 Amazon Cognito is an AWS service that provides authentication, authorization, and user management for web and mobile applications. It supports OAuth2, OIDC, SAML federation, and social identity providers. Cognito has two main components: User Pools for user authentication and app integration, and Federated Identities for granting temporary AWS credentials to authenticated users. It includes multi-factor authentication, advanced security features, and customizable authentication flows. ## Kin Score — 50.4 / 100 (developing) Scored 2026-08-20 under rubric 0.12.0. Trend: flat (-1.9 from 52.3). | Facet | Score | |---|---| | Discoverability | 50.0 | | Contract Quality | 69.9 | | Governance | 25.0 | | Contract Governance | 25.0 | | Operational Transparency | 26.3 | | Developer Ergonomics | 52.4 | | Commercial Clarity | 55.3 | | Access Clarity | 55.3 | ## Agent readiness — 41.9 (agent-ready) | Dimension | Value | |---|---| | Spec Presence | yes | | Agentic Access | derived | | Reversibility Documented | no | | MCP Server | no | | Auth Clarity | yes | | Idempotency | no | | Error Semantics | verified | | OpenAPI Examples | verified | | Rate Limit Signal | documented | | Event Surface Described | no | | Agent Skills | no | | Well Known Catalog | no | | Consent Identity | no | | Agent Card | no | | Dry Run Mode | no | ## Access Freemium · Self-serve signup — onboarding: self-serve, pricing: freemium, trial: no (confidence: high). ## APIs (124) - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AddCustomAttributes API** — The #X Amz Target=AWSCognitoIdentityProviderService.AddCustomAttributes API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.addcustomatt... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminAddUserToGroup API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminAddUserToGroup API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.adminadduser... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminConfirmSignUp API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminConfirmSignUp API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.adminconfirms... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminCreateUser API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminCreateUser API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.admincreateuser. - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminDeleteUser API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminDeleteUser API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.admindeleteuser. - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminDeleteUserAttributes API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminDeleteUserAttributes API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.admind... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminDisableProviderForUser API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminDisableProviderForUser API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.admi... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminDisableUser API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminDisableUser API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.admindisableuser. - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminEnableUser API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminEnableUser API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.adminenableuser. - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminForgetDevice API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminForgetDevice API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.adminforgetdev... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminGetDevice API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminGetDevice API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.admingetdevice. - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminGetUser API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminGetUser API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.admingetuser. - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminInitiateAuth API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminInitiateAuth API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.admininitiatea... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminLinkProviderForUser API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminLinkProviderForUser API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.adminli... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminListDevices API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminListDevices API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.adminlistdevices. - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminListGroupsForUser API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminListGroupsForUser API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.adminlist... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminListUserAuthEvents API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminListUserAuthEvents API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.adminlis... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminRemoveUserFromGroup API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminRemoveUserFromGroup API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.adminre... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminResetUserPassword API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminResetUserPassword API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.adminrese... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminRespondToAuthChallenge API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminRespondToAuthChallenge API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.admi... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminSetUserMFAPreference API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminSetUserMFAPreference API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.admins... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminSetUserPassword API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminSetUserPassword API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.adminsetuse... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminSetUserSettings API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminSetUserSettings API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.adminsetuse... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminUpdateAuthEventFeedback API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminUpdateAuthEventFeedback API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.adm... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminUpdateDeviceStatus API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminUpdateDeviceStatus API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.adminupd... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminUpdateUserAttributes API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminUpdateUserAttributes API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.adminu... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AdminUserGlobalSignOut API** — The #X Amz Target=AWSCognitoIdentityProviderService.AdminUserGlobalSignOut API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.adminuser... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.AssociateSoftwareToken API** — The #X Amz Target=AWSCognitoIdentityProviderService.AssociateSoftwareToken API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.associate... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.ChangePassword API** — The #X Amz Target=AWSCognitoIdentityProviderService.ChangePassword API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.changepassword. - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.ConfirmDevice API** — The #X Amz Target=AWSCognitoIdentityProviderService.ConfirmDevice API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.confirmdevice. - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.ConfirmForgotPassword API** — The #X Amz Target=AWSCognitoIdentityProviderService.ConfirmForgotPassword API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.confirmfor... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.ConfirmSignUp API** — The #X Amz Target=AWSCognitoIdentityProviderService.ConfirmSignUp API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.confirmsignup. - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.CreateGroup API** — The #X Amz Target=AWSCognitoIdentityProviderService.CreateGroup API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.creategroup. - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.CreateIdentityProvider API** — The #X Amz Target=AWSCognitoIdentityProviderService.CreateIdentityProvider API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.createide... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.CreateResourceServer API** — The #X Amz Target=AWSCognitoIdentityProviderService.CreateResourceServer API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.createresou... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.CreateUserImportJob API** — The #X Amz Target=AWSCognitoIdentityProviderService.CreateUserImportJob API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.createuserim... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.CreateUserPool API** — The #X Amz Target=AWSCognitoIdentityProviderService.CreateUserPool API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.createuserpool. - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.CreateUserPoolClient API** — The #X Amz Target=AWSCognitoIdentityProviderService.CreateUserPoolClient API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.createuserp... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.CreateUserPoolDomain API** — The #X Amz Target=AWSCognitoIdentityProviderService.CreateUserPoolDomain API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.createuserp... - **Amazon Cognito #X Amz Target=AWSCognitoIdentityProviderService.DeleteGroup API** — The #X Amz Target=AWSCognitoIdentityProviderService.DeleteGroup API from Amazon Cognito — 1 operation(s) for #x amz target=awscognitoidentityproviderservice.deletegroup. - …and 84 more, listed in full on the page. ## Agentic access (1) - **Aws Cognito Agentic Access** — 124 operations · 124 acting · 5 human-in-the-loop ## Security (4) - **Aws Cognito Authentication** — apiKey · 1 scheme - **Aws Cognito Domain Security** — TLSv1.3 · HSTS · DMARC - **Aws Cognito Vulnerability Disclosure** — security.txt · contact published - **Aws Cognito Trust Center** — PCI DSS, HIPAA, FedRAMP, GDPR, FIPS 140 ## Plans (1) - **Aws Cognito Plans Pricing** ## Use cases (5) - **Web and Mobile App Authentication** — Add user registration, login, and session management to web and mobile applications. - **Enterprise SSO Integration** — Connect enterprise SAML identity providers for single sign-on to AWS-hosted applications. - **API Authorization** — Use Cognito JWT tokens to authorize access to API Gateway, AppSync, and custom APIs. - **B2C Identity Management** — Manage consumer user accounts with self-service registration and profile management. - **Temporary AWS Credentials** — Issue scoped AWS credentials to authenticated users for direct service access. ## Tags Authentication, Authorization, Identity, Identity Provider, OIDC --- Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/aws-cognito/). Scores are computed from the provider's own public artifacts under a published rubric.