Bright Funds website screenshot

Bright Funds

Bright Funds is a workplace-giving, corporate grants, and employee volunteering platform (now part of Submittable) that lets employers run donation, matching-gift, and volunteering programs for their employees and route funds to vetted nonprofits. The platform operates a live OpenID Connect / OAuth 2.0 authorization server at www.brightfunds.org for single sign-on and API integrations (authorization_code, client_credentials, and refresh_token grants; RS256 id_tokens; openid/profile/email/write/update scopes). It publishes a PGP-signed security.txt but no standalone developer portal or OpenAPI specification. Surfaced as a portfolio company of Bloomberg Beta and enriched into the API Evangelist network from its public identity and well-known discovery surface.

Bright Funds is profiled on the APIs.io network. Tagged areas include Company, Workplace Giving, Corporate Social Responsibility, Employee Engagement, and Nonprofits.

Bright Funds’ developer surface includes support, engineering blog, authentication, and 13 more developer resources.

20.2/100 emerging ▬ flat Agent 16/100 agent aware Full breakdown ↓
scored 2026-07-27 · rubric v0.5
AccessSelf serve
0 APIs
CompanyWorkplace GivingCorporate Social ResponsibilityEmployee EngagementNonprofitsGrants ManagementDonationsVolunteeringOAuthOpenID Connect

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-07-27 · rubric v0.5
Composite quality — 20.2/100 · emerging
Contract Quality 0.0 / 25
Developer Ergonomics 5.2 / 20
Commercial Clarity 6.8 / 20
Operational Transparency 1.4 / 13
Governance 0.0 / 12
Discoverability 6.8 / 10
Agent readiness — 16/100 · agent aware
Machine-Readable Contract 0 / 18
Agentic Access Contract 0 / 15
MCP Server 0 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 0 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 4 / 4
Consent & Bot Identity 3 / 3
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/bright-funds: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

Security Posture 3

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Bright Funds Authentication

oauth2/openIdConnect · 2 schemes

SECURITY

Bright Funds Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Bright Funds Vulnerability Disclosure

security.txt · contact published

SECURITY

Scopes 1

OAuth scopes governing access to this provider's APIs.

Bright Funds Scopes

7 scopes · authorizationCode/clientCredentials

7 scopes

SCOPES

Resources

Get Started 2

Portal, sign-up, and the first successful call

Agent Surfaces 2

MCP servers, agent skills, and machine-readable catalogs

Design & Contract 1

Pagination, idempotency, versioning, errors, and events

Access & Security 6

Authentication, authorization, and security posture

Operate 1

Status, limits, changes, and where to get help

Commercial 2

Pricing, plans, and the legal terms of use

Company 2

The organization behind the API

Source (apis.yml)

apis.yml Raw ↑
aid: bright-funds
name: Bright Funds
description: Bright Funds is a workplace-giving, corporate grants, and employee volunteering platform (now part of Submittable)
  that lets employers run donation, matching-gift, and volunteering programs for their employees and route funds to vetted
  nonprofits. The platform operates a live OpenID Connect / OAuth 2.0 authorization server at www.brightfunds.org for single
  sign-on and API integrations (authorization_code, client_credentials, and refresh_token grants; RS256 id_tokens; openid/profile/email/write/update
  scopes). It publishes a PGP-signed security.txt but no standalone developer portal or OpenAPI specification. Surfaced as
  a portfolio company of Bloomberg Beta and enriched into the API Evangelist network from its public identity and well-known
  discovery surface.
url: https://raw.githubusercontent.com/api-evangelist/bright-funds/refs/heads/main/apis.yml
x-type: company
x-source: vc-portfolio
x-backed-by:
- bloomberg-beta
x-tier: stub
x-tier-reason: portfolio-lead
accessModel:
  pricing: unknown
  onboarding: self-serve
  trial: false
  try_now: false
  public: false
  label: Self-serve signup
  confidence: medium
  source:
  - authentication
  generated: '2026-07-22'
  method: derived
specificationVersion: '0.20'
created: '2026-07-17'
modified: '2026-07-18'
image: https://cdn.prod.website-files.com/64c3f11f46b35cb5f865c514/66994cfea9422c379d8041d9_BrightFunds_Icon_Webflow-256.png
tags:
- Company
- Workplace Giving
- Corporate Social Responsibility
- Employee Engagement
- Nonprofits
- Grants Management
- Donations
- Volunteering
- OAuth
- OpenID Connect
apis: []
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: Website
  url: https://www.brightfunds.org/
- type: DeveloperPortal
  url: https://hello.brightfunds.org/
- type: Login
  url: https://www.brightfunds.org/login/
- type: Support
  url: https://www.brightfunds.org/faq/
- type: Blog
  url: https://www.brightfunds.org/blog/
- type: TermsOfService
  url: https://www.brightfunds.org/terms/
- type: PrivacyPolicy
  url: https://www.brightfunds.org/privacy_policy/
- type: Authentication
  url: authentication/bright-funds-authentication.yml
- type: OAuthScopes
  url: scopes/bright-funds-scopes.yml
- type: WellKnown
  url: well-known/bright-funds-well-known.yml
- type: SecurityTxt
  url: well-known/bright-funds-security.txt
- type: Conformance
  url: conformance/bright-funds-conformance.yml
- type: DomainSecurity
  url: security/bright-funds-domain-security.yml
- type: VulnerabilityDisclosure
  url: security/bright-funds-vulnerability-disclosure.yml
- type: Security
  url: well-known/bright-funds-security.txt
- type: LLMsTxt
  url: llms/bright-funds-llms.txt
x-enrichment:
  date: '2026-07-19'
  status: backfilled
  pass: local-v1
  note: backfilled from .gitignore signal + verified work evidence