# C1

**Canonical:** https://apis.io/providers/c1/  
**Website:** https://c1.ai  
**APIs profiled:** 47

C1 (ConductorOne) is an identity and access management platform engineered for the AI era. It provides unified access governance across human identities, AI agents, and services — agentic identity management, policy-driven access controls, just-in-time access, intelligent access reviews, and intent-based approval workflows — so organizations can securely govern access to applications, infrastructure, AI tools, and MCP servers while automating identity lifecycle and access reviews at scale. The ConductorOne platform API is an OAuth2 (client-credentials) HTTP API for managing apps, entitlements, grants, users, access-request tasks, request catalogs, policies, and webhooks, with Go/TypeScript/Python SDKs, the cone and baton CLIs, the open-source Baton connector framework, and a hosted MCP control plane for governed agent access.

## Kin Score — 57.4 / 100 (strong)

Scored 2026-08-17 under rubric 0.11.0. Trend: flat (+0.0 from 57.4).

| Facet | Score |
|---|---|
| Discoverability | 81.5 |
| Contract Quality | 62.7 |
| Governance | 20.8 |
| Operational Transparency | 39.5 |
| Developer Ergonomics | 79.9 |
| Commercial Clarity | 50.0 |

## Agent readiness — 44.4 (agent-ready)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| MCP Server | yes |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | documented |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | derived |
| Agent Skills | derived |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Self-serve signup — onboarding: self-serve, pricing: unknown, trial: no (confidence: medium).

## APIs (47)

- **Baton Connector Framework** — Open-source Go framework (baton-sdk) for building connectors that sync identity and access data into C1 as .c1z files, plus the baton CLI for inspecting sync output.
- **C1 Access Conflict API** — The Access Conflict API from C1 — 2 operation(s) for access conflict.
- **C1 App API** — The App API from C1 — 3 operation(s) for app.
- **C1 App Entitlement API** — The App Entitlement API from C1 — 11 operation(s) for app entitlement.
- **C1 App Entitlement Automation API** — The App Entitlement Automation API from C1 — 3 operation(s) for app entitlement automation.
- **C1 App Entitlement Automation Exclusion API** — The App Entitlement Automation Exclusion API from C1 — 1 operation(s) for app entitlement automation exclusion.
- **C1 App Entitlement Monitor Binding API** — The App Entitlement Monitor Binding API from C1 — 2 operation(s) for app entitlement monitor binding.
- **C1 App Entitlement Owner API** — The App Entitlement Owner API from C1 — 3 operation(s) for app entitlement owner.
- **C1 App Entitlement Proxy Binding API** — The App Entitlement Proxy Binding API from C1 — 1 operation(s) for app entitlement proxy binding.
- **C1 App Entitlement User Binding API** — The App Entitlement User Binding API from C1 — 3 operation(s) for app entitlement user binding.
- **C1 App Entitlement User Binding Feed API** — The App Entitlement User Binding Feed API from C1 — 1 operation(s) for app entitlement user binding feed.
- **C1 App Entitlement User Binding History API** — The App Entitlement User Binding History API from C1 — 1 operation(s) for app entitlement user binding history.
- **C1 App Owner API** — The App Owner API from C1 — 3 operation(s) for app owner.
- **C1 App Reports API** — The App Reports API from C1 — 1 operation(s) for app reports.
- **C1 App Resource API** — The App Resource API from C1 — 4 operation(s) for app resource.
- **C1 App Resource Owner API** — The App Resource Owner API from C1 — 2 operation(s) for app resource owner.
- **C1 App Resource Type API** — The App Resource Type API from C1 — 2 operation(s) for app resource type.
- **C1 App Usage Controls API** — The App Usage Controls API from C1 — 1 operation(s) for app usage controls.
- **C1 AppAccessRequestDefaults API** — The AppAccessRequestDefaults API from C1 — 2 operation(s) for appaccessrequestdefaults.
- **C1 AppUsers API** — The AppUsers API from C1 — 5 operation(s) for appusers.
- **C1 Attribute API** — The Attribute API from C1 — 6 operation(s) for attribute.
- **C1 Auth API** — The Auth API from C1 — 1 operation(s) for auth.
- **C1 Automations API** — The Automations API from C1 — 9 operation(s) for automations.
- **C1 AWS External ID Settings API** — The AWS External ID Settings API from C1 — 1 operation(s) for aws external id settings.
- **C1 Compliance Framework API** — The Compliance Framework API from C1 — 2 operation(s) for compliance framework.
- **C1 Connector API** — The Connector API from C1 — 11 operation(s) for connector.
- **C1 Connector Catalog API** — The Connector Catalog API from C1 — 1 operation(s) for connector catalog.
- **C1 Directory API** — The Directory API from C1 — 2 operation(s) for directory.
- **C1 Function API** — The Function API from C1 — 5 operation(s) for function.
- **C1 Function Commit API** — The Function Commit API from C1 — 2 operation(s) for function commit.
- **C1 Function Tag API** — The Function Tag API from C1 — 1 operation(s) for function tag.
- **C1 Org Domain API** — The Org Domain API from C1 — 1 operation(s) for org domain.
- **C1 Personal Client API** — The Personal Client API from C1 — 3 operation(s) for personal client.
- **C1 Policy API** — The Policy API from C1 — 5 operation(s) for policy.
- **C1 Request Catalog API** — The Request Catalog API from C1 — 13 operation(s) for request catalog.
- **C1 Request Schema API** — The Request Schema API from C1 — 2 operation(s) for request schema.
- **C1 Request Schema Entitlement Binding API** — The Request Schema Entitlement Binding API from C1 — 1 operation(s) for request schema entitlement binding.
- **C1 Risk Level API** — The Risk Level API from C1 — 2 operation(s) for risk level.
- **C1 Role API** — The Role API from C1 — 2 operation(s) for role.
- **C1 Session Settings API** — The Session Settings API from C1 — 2 operation(s) for session settings.
- …and 7 more, listed in full on the page.

## MCP servers (1)

- **c1-mcp.yml**

## Agentic access (1)

- **C1 Agentic Access** — 243 operations · 164 acting · 6 human-in-the-loop

## Security (4)

- **C1 Authentication** — http/oauth2 · 2 schemes
- **C1 Domain Security** — TLSv1.3 · HSTS · DMARC
- **C1 Vulnerability Disclosure** — disclosure policy published
- **C1 Trust Center** — SOC 2

## Tags

Company, Identity, Access Management, IAM, Identity Governance, Access Control, Authorization, AI Agents, MCP, Security

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/c1/). Scores are computed from the provider's own public artifacts under a published rubric.