# Cisco Identity Services Engine **Canonical:** https://apis.io/providers/cisco-ise/ **Website:** https://www.cisco.com/site/us/en/products/security/identity-services-engine/index.html **APIs profiled:** 197 Cisco Identity Services Engine (ISE) is Cisco's network access control and zero-trust policy platform: 802.1X and RADIUS authentication, TACACS+ device administration, guest and BYOD onboarding, endpoint profiling, posture assessment, and TrustSec security-group segmentation, all driven from a central policy service. It is deployed on-premises or in AWS, Azure and OCI, so its APIs are served by each customer's own appliance behind the Cisco ISE API Gateway rather than a shared public host. The contracts themselves are public: Cisco publishes 103 machine-readable API descriptions covering 1,490 operations on its DevNet documentation CDN — a consolidated 395-operation ERS Open API, 30 OpenAPI 3.0.x documents for the newer Open API surface (Policy, TrustSec, Certificates, Deployment, Webhooks, Licensing, pxGrid Direct and more), a Monitoring (MnT) OpenAPI, 69 legacy per-resource Swagger 2.0 references, and an outbound Mobile Device Management contract that ISE calls on third-party MDM vendors. Authentication is HTTP Basic with ERS Admin and ERS Operator roles; API services are disabled by default and enabled per node. ## Kin Score — 68.5 / 100 (exemplar) Scored 2026-08-20 under rubric 0.12.0. Trend: flat (-0.1 from 68.6). | Facet | Score | |---|---| | Discoverability | 87.0 | | Contract Quality | 57.5 | | Governance | 16.7 | | Contract Governance | 16.7 | | Operational Transparency | 68.4 | | Developer Ergonomics | 73.2 | | Commercial Clarity | 78.9 | | Access Clarity | 78.9 | Regulatory layer — **Insurance**: 54.5 (matched via tags). ## Agent readiness — 48.5 (agent-ready) | Dimension | Value | |---|---| | Spec Presence | yes | | Agentic Access | no | | Reversibility Documented | no | | MCP Server | no | | Auth Clarity | yes | | Idempotency | no | | Error Semantics | verified | | OpenAPI Examples | verified | | Rate Limit Signal | documented | | Event Surface Described | yes | | Agent Skills | derived | | Well Known Catalog | no | | Consent Identity | yes | | Agent Card | no | | Dry Run Mode | no | ## APIs (197) - **Cisco Identity Services Engine Acct Status API** — The AcctStatus API from Cisco Identity Services Engine — 1 operation(s) for acctstatus. - **Cisco Identity Services Engine Acct Status TT API** — The AcctStatusTT API from Cisco Identity Services Engine — 1 operation(s) for acctstatustt. - **Cisco Identity Services Engine ACI Connection API** — The ACI Connection API from Cisco Identity Services Engine — 13 operation(s) for aci connection. - **Cisco Identity Services Engine ACI Data API** — The ACI Data API from Cisco Identity Services Engine — 10 operation(s) for aci data. - **Cisco Identity Services Engine Acibindings API** — The acibindings API from Cisco Identity Services Engine — 3 operation(s) for acibindings. - **Cisco Identity Services Engine Acisettings API** — The acisettings API from Cisco Identity Services Engine — 7 operation(s) for acisettings. - **Cisco Identity Services Engine Active Directories API** — The ActiveDirectories API from Cisco Identity Services Engine — 1 operation(s) for activedirectories. - **Cisco Identity Services Engine Activedirectory API** — The activedirectory API from Cisco Identity Services Engine — 29 operation(s) for activedirectory. - **Cisco Identity Services Engine AD Groups API** — The ADGroups API from Cisco Identity Services Engine — 1 operation(s) for adgroups. - **Cisco Identity Services Engine Admin Groups API** — The Admin Groups API from Cisco Identity Services Engine — 4 operation(s) for admin groups. - **Cisco Identity Services Engine Admin Users API** — The Admin Users API from Cisco Identity Services Engine — 4 operation(s) for admin users. - **Cisco Identity Services Engine Adminuser API** — The adminuser API from Cisco Identity Services Engine — 11 operation(s) for adminuser. - **Cisco Identity Services Engine Adresourcereservation API** — The adresourcereservation API from Cisco Identity Services Engine — 8 operation(s) for adresourcereservation. - **Cisco Identity Services Engine Alarm details API** — The Alarm details API from Cisco Identity Services Engine — 2 operation(s) for alarm details. - **Cisco Identity Services Engine Alarm Instances Services API** — The Alarm Instances Services API from Cisco Identity Services Engine — 6 operation(s) for alarm instances services. - **Cisco Identity Services Engine AlarmConfigurations Services API** — The AlarmConfigurations Services API from Cisco Identity Services Engine — 3 operation(s) for alarmconfigurations services. - **Cisco Identity Services Engine Allowedprotocols API** — The allowedprotocols API from Cisco Identity Services Engine — 3 operation(s) for allowedprotocols. - **Cisco Identity Services Engine Ancendpoint API** — The ancendpoint API from Cisco Identity Services Engine — 11 operation(s) for ancendpoint. - **Cisco Identity Services Engine Ancpolicy API** — The ancpolicy API from Cisco Identity Services Engine — 9 operation(s) for ancpolicy. - **Cisco Identity Services Engine Authorizationprofile API** — The authorizationprofile API from Cisco Identity Services Engine — 3 operation(s) for authorizationprofile. - **Cisco Identity Services Engine Auth Status API** — The AuthStatus API from Cisco Identity Services Engine — 1 operation(s) for authstatus. - **Cisco Identity Services Engine Backup And Restore API** — The Backup And Restore API from Cisco Identity Services Engine — 5 operation(s) for backup and restore. - **Cisco Identity Services Engine Byodportal API** — The byodportal API from Cisco Identity Services Engine — 2 operation(s) for byodportal. - **Cisco Identity Services Engine Certificateprofile API** — The certificateprofile API from Cisco Identity Services Engine — 7 operation(s) for certificateprofile. - **Cisco Identity Services Engine Certificates API** — The Certificates API from Cisco Identity Services Engine — 16 operation(s) for certificates. - **Cisco Identity Services Engine Certificatetemplate API** — The certificatetemplate API from Cisco Identity Services Engine — 7 operation(s) for certificatetemplate. - **Cisco Identity Services Engine Classification rule API** — The Classification rule API from Cisco Identity Services Engine — 4 operation(s) for classification rule. - **Cisco Identity Services Engine Clearthreatsandvulneribilities API** — The clearthreatsandvulneribilities API from Cisco Identity Services Engine — 2 operation(s) for clearthreatsandvulneribilities. - **Cisco Identity Services Engine Co A API** — The CoA API from Cisco Identity Services Engine — 2 operation(s) for coa. - **Cisco Identity Services Engine Configuration API** — The Configuration API from Cisco Identity Services Engine — 1 operation(s) for configuration. - **Cisco Identity Services Engine Ctsenvdata API** — The ctsenvdata API from Cisco Identity Services Engine — 3 operation(s) for ctsenvdata. - **Cisco Identity Services Engine Ctsmatrix API** — The ctsmatrix API from Cisco Identity Services Engine — 3 operation(s) for ctsmatrix. - **Cisco Identity Services Engine Customattributes API** — The customattributes API from Cisco Identity Services Engine — 3 operation(s) for customattributes. - **Cisco Identity Services Engine Data Access API** — The Data Access API from Cisco Identity Services Engine — 2 operation(s) for data access. - **Cisco Identity Services Engine Dataconnect Services API** — The Dataconnect Services API from Cisco Identity Services Engine — 5 operation(s) for dataconnect services. - **Cisco Identity Services Engine Deploymentinfo API** — The deploymentinfo API from Cisco Identity Services Engine — 1 operation(s) for deploymentinfo. - **Cisco Identity Services Engine Device Admin - MFA Rules API** — The Device Admin - MFA Rules API from Cisco Identity Services Engine — 3 operation(s) for device admin - mfa rules. - **Cisco Identity Services Engine Device Administration - Authentication Rules API** — The Device Administration - Authentication Rules API from Cisco Identity Services Engine — 3 operation(s) for device administration - authentication rules. - **Cisco Identity Services Engine Device Administration - Authorization Exception Rules API** — The Device Administration - Authorization Exception Rules API from Cisco Identity Services Engine — 3 operation(s) for device administration - authorization exception rules. - **Cisco Identity Services Engine Device Administration - Authorization Global Exception Rules API** — The Device Administration - Authorization Global Exception Rules API from Cisco Identity Services Engine — 3 operation(s) for device administration - authorization global except... - …and 157 more, listed in full on the page. ## Security (4) - **Cisco Ise Authentication** — http · 4 schemes - **Cisco Ise Domain Security** — TLSv1.3 · HSTS · DMARC - **Cisco Ise Vulnerability Disclosure** — security.txt · contact published - **Cisco Ise Trust Center** — FIPS 140-2, FIPS 140-3 ## Plans (1) - **Cisco Ise Plans Pricing** ## Tags Identity, Network Access, Zero Trust, Security, Policy, Enterprise, 802.1X, RADIUS, TACACS+, TrustSec, Guest Access, BYOD, Endpoint Profiling, Posture, Network Segmentation, NAC --- Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/cisco-ise/). Scores are computed from the provider's own public artifacts under a published rubric.