# Cato Networks

**Canonical:** https://apis.io/providers/cato-networks/  
**Website:** https://www.catonetworks.com  
**APIs profiled:** 1

Cato Networks is the SASE (Secure Access Service Edge) pioneer, delivering networking and security as a single global cloud platform that converges SD-WAN, a global private backbone, and a full cloud security stack — FWaaS, Secure Web Gateway, CASB, DLP, ZTNA/SDP, IPS, anti-malware, Remote Browser Isolation, and XDR. Cato exposes a public GraphQL API (api/v1/graphql2) for programmatic management, analytics, and event streaming of the Cato Management Application (CMA), authenticated with an API key sent in the x-api-key header. The official developer surface includes a Python CLI (catocli), a Go SDK (cato-go-sdk), a Terraform provider (catonetworks/cato), a local Model Context Protocol server (cato-mcp-server), and a web-based API explorer.

## Kin Score — 26.6 / 100 (thin)

Scored 2026-08-30 under rubric 0.17.2. Trend: flat (+0.0 from 26.6).

| Facet | Score |
|---|---|
| Discoverability | 75.9 |
| Contract Quality | 0.0 |
| Governance | 18.2 |
| Contract Governance | 18.2 |
| Operational Transparency | 18.4 |
| Developer Ergonomics | 64.3 |
| Commercial Clarity | 7.9 |
| Access Clarity | 7.9 |

## Agent readiness — 6.0 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | no |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | documented |
| Auth Clarity | bearer |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |
| Delegated Identity | no |
| Protected Resource Metadata | no |
| Dynamic Client Registration | no |
| Agentic Commerce | no |

## Access

Self-serve signup — onboarding: self-serve, pricing: unknown, trial: no (confidence: medium).

## APIs (1)

- **Cato GraphQL API** — Public GraphQL API for the Cato Management Application (CMA): site and account provisioning, policy configuration, network/security analytics, entity lookup, and event streaming...

## MCP servers (1)

- **Cato Networks MCP Server** — Local Model Context Protocol (MCP) server for Cato Networks' public GraphQL API (Cato Management Application / CMA).

## Security (4)

- **Cato Networks Authentication** — apiKey · 1 scheme
- **Cato Networks Domain Security** — TLSv1.3 · HSTS · DMARC
- **Cato Networks Vulnerability Disclosure** — disclosure policy published
- **Cato Networks Trust Center** — SOC 2 Type II, ISO 27001, PCI DSS, HIPAA, GDPR, CSA STAR

## Tags

Company, Cybersecurity, SASE, SSE, Networking, Security, SD-WAN, Zero Trust, GraphQL

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/cato-networks/). Scores are computed from the provider's own public artifacts under a published rubric.