Bright Funds website screenshot

Bright Funds

Bright Funds is a workplace-giving, corporate grants, and employee volunteering platform (now part of Submittable) that lets employers run donation, matching-gift, and volunteering programs for their employees and route funds to vetted nonprofits. The platform operates a live OpenID Connect / OAuth 2.0 authorization server at www.brightfunds.org for single sign-on and API integrations (authorization_code, client_credentials, and refresh_token grants; RS256 id_tokens; openid/profile/email/write/update scopes). It publishes a PGP-signed security.txt but no standalone developer portal or OpenAPI specification. Surfaced as a portfolio company of Bloomberg Beta and enriched into the API Evangelist network from its public identity and well-known discovery surface.

Bright Funds is profiled on the APIs.io network. Tagged areas include Company, Workplace Giving, Corporate Social Responsibility, Employee Engagement, and Non-Profit.

Bright Funds’ developer surface includes support, engineering blog, authentication, and 13 more developer resources.

21.6/100 emerging ▬ flat Agent 11/100 agent aware Full breakdown ↓
scored 2026-08-20 · rubric v0.12.0
AccessSelf serve
0 APIs
CompanyWorkplace GivingCorporate Social ResponsibilityEmployee EngagementNon-ProfitGrants ManagementDonationsVolunteeringAuthenticationOpenID Connect

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-08-20 · rubric v0.12.0
Composite quality — 21.6/100 · emerging
Contract Quality 0.0 / 25
Developer Ergonomics 5.7 / 20
Access Clarity 5.5 / 20
Operational Transparency 1.4 / 13
Contract Governance 2.2 / 12
Discoverability 6.9 / 10
Agent readiness — 11/100 · agent aware
Machine-Readable Contract 0 / 18
Agentic Access Contract 0 / 10
Documented Reversibility 0 / 6
MCP Server 0 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 0 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 3 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/bright-funds: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

Security Posture 3

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Bright Funds Authentication

oauth2/openIdConnect · 2 schemes

SECURITY

Bright Funds Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Bright Funds Vulnerability Disclosure

security.txt · contact published

SECURITY

Scopes 1

OAuth scopes governing access to this provider's APIs.

Bright Funds Scopes

7 scopes · authorizationCode/clientCredentials

7 scopes

SCOPES

Resources

Get Started 2

Portal, sign-up, and the first successful call

Agent Surfaces 2

MCP servers, agent skills, and machine-readable catalogs

Design & Contract 1

Pagination, idempotency, versioning, errors, and events

Access & Security 6

Authentication, authorization, and security posture

Operate 1

Status, limits, changes, and where to get help

Commercial 2

Pricing, plans, and the legal terms of use

Company 2

The organization behind the API

Source (apis.yml)

apis.yml Raw ↑
aid: bright-funds
name: Bright Funds
description: Bright Funds is a workplace-giving, corporate grants, and employee volunteering platform (now part of Submittable)
  that lets employers run donation, matching-gift, and volunteering programs for their employees and route funds to vetted
  nonprofits. The platform operates a live OpenID Connect / OAuth 2.0 authorization server at www.brightfunds.org for single
  sign-on and API integrations (authorization_code, client_credentials, and refresh_token grants; RS256 id_tokens; openid/profile/email/write/update
  scopes). It publishes a PGP-signed security.txt but no standalone developer portal or OpenAPI specification. Surfaced as
  a portfolio company of Bloomberg Beta and enriched into the API Evangelist network from its public identity and well-known
  discovery surface.
url: https://raw.githubusercontent.com/api-evangelist/bright-funds/refs/heads/main/apis.yml
x-type: company
x-source: vc-portfolio
x-backed-by:
- bloomberg-beta
x-tier: stub
x-tier-reason: portfolio-lead
accessModel:
  pricing: unknown
  onboarding: self-serve
  trial: false
  try_now: false
  public: false
  label: Self-serve signup
  confidence: medium
  source:
  - authentication
  generated: '2026-07-22'
  method: derived
specificationVersion: '0.23'
created: '2026-07-17'
modified: '2026-07-18'
image: https://cdn.prod.website-files.com/64c3f11f46b35cb5f865c514/66994cfea9422c379d8041d9_BrightFunds_Icon_Webflow-256.png
tags:
- Company
- Workplace Giving
- Corporate Social Responsibility
- Employee Engagement
- Non-Profit
- Grants Management
- Donations
- Volunteering
- Authentication
- OpenID Connect
tags_raw:
- Company
- Workplace Giving
- Corporate Social Responsibility
- Employee Engagement
- Nonprofits
- Grants Management
- Donations
- Volunteering
- OAuth
- OpenID Connect
apis: []
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: Website
  url: https://www.brightfunds.org/
- type: DeveloperPortal
  url: https://hello.brightfunds.org/
- type: Login
  url: https://www.brightfunds.org/login/
- type: Support
  url: https://www.brightfunds.org/faq/
- type: Blog
  url: https://www.brightfunds.org/blog/
- type: TermsOfService
  url: https://www.brightfunds.org/terms/
- type: PrivacyPolicy
  url: https://www.brightfunds.org/privacy_policy/
- type: Authentication
  url: authentication/bright-funds-authentication.yml
- type: OAuthScopes
  url: scopes/bright-funds-scopes.yml
- type: WellKnown
  url: well-known/bright-funds-well-known.yml
- type: SecurityTxt
  url: well-known/bright-funds-security.txt
- type: Conformance
  url: conformance/bright-funds-conformance.yml
- type: DomainSecurity
  url: security/bright-funds-domain-security.yml
- type: VulnerabilityDisclosure
  url: security/bright-funds-vulnerability-disclosure.yml
- type: Security
  url: well-known/bright-funds-security.txt
- type: LLMsTxt
  url: llms/bright-funds-llms.txt
x-enrichment:
  date: '2026-07-19'
  status: backfilled
  pass: local-v1
  note: backfilled from .gitignore signal + verified work evidence