Code 42

Code42 (now part of Mimecast) is a security software company whose Incydr product is a SaaS Insider Risk Management (IRM) platform that detects, and responds to data exfiltration and insider threats across endpoints, cloud, email, and browsers. Code42 exposes a public OAuth 2.0 REST API through its regional API gateways (api.us.code42.com and other regions) covering actors, agents, alert rules, audit log, cases, file events, sessions, users, and watchlists. Developers integrate via the official Incydr Python SDK, the incydr command-line interface, and the legacy py42 SDK. This profile was added to the API Evangelist network as a portfolio-company lead (backed by Accel) and has been enriched from Code42's public developer surface.

Code 42 publishes 1 API on the APIs.io network. Tagged areas include Company, Security, Insider Risk Management, Data Loss Prevention, and Data Security.

Code 42’s developer surface includes documentation, API reference, getting-started guide, engineering blog, CLI, authentication, changelog, and 14 more developer resources.

29.4/100 emerging Agent 10/100 human only Full breakdown ↓
scored 2026-07-20 · rubric v0.4
1 APIs 0 Features
CompanySecurityInsider Risk ManagementData Loss PreventionData SecurityEndpoint SecurityCybersecuritySaaS

API Rating

API Evangelist API Evangelist Rating How this is scored →
scored 2026-07-20 · rubric v0.4
Composite quality — 29.4/100 · emerging
Contract Quality 0.0 / 25
Developer Ergonomics 12.2 / 20
Commercial Clarity 2.6 / 20
Operational Transparency 5.8 / 13
Governance 0.0 / 12
Discoverability 8.8 / 10
Agent readiness — 10/100 · human only
Machine-Readable Contract 0 / 18
Agentic Access Contract 0 / 15
MCP Server 0 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 0 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/code-42: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs

Code42 Incydr API

Code42 Incydr's public REST API for insider risk management — actors, agents, alert rules, audit log, cases, departments, directory groups, file events, sessions, trusted activi...

Resources

Get Started 3

Portal, sign-up, and the first successful call

Documentation 2

Reference material describing how the API behaves

Agent Surfaces 1

MCP servers, agent skills, and machine-readable catalogs

Design & Contract 4

Pagination, idempotency, versioning, errors, and events

Build 4

SDKs, sample code, and the tooling you integrate with

Access & Security 2

Authentication, authorization, and security posture

Operate 3

Status, limits, changes, and where to get help

Company 2

The organization behind the API

Source (apis.yml)

apis.yml Raw ↑
aid: code-42
name: Code 42
description: Code42 (now part of Mimecast) is a security software company whose Incydr product is a SaaS Insider Risk Management
  (IRM) platform that detects, and responds to data exfiltration and insider threats across endpoints, cloud, email, and browsers.
  Code42 exposes a public OAuth 2.0 REST API through its regional API gateways (api.us.code42.com and other regions) covering
  actors, agents, alert rules, audit log, cases, file events, sessions, users, and watchlists. Developers integrate via the
  official Incydr Python SDK, the incydr command-line interface, and the legacy py42 SDK. This profile was added to the API
  Evangelist network as a portfolio-company lead (backed by Accel) and has been enriched from Code42's public developer surface.
url: https://raw.githubusercontent.com/api-evangelist/code-42/refs/heads/main/apis.yml
x-type: company
x-source: vc-portfolio
x-backed-by:
- accel
x-tier: stub
x-tier-reason: portfolio-lead
specificationVersion: '0.20'
created: '2026-07-17'
modified: '2026-07-18'
tags:
- Company
- Security
- Insider Risk Management
- Data Loss Prevention
- Data Security
- Endpoint Security
- Cybersecurity
- SaaS
apis:
- name: Code42 Incydr API
  description: Code42 Incydr's public REST API for insider risk management — actors, agents, alert rules, audit log, cases,
    departments, directory groups, file events, sessions, trusted activities, users, and watchlists. OAuth 2.0 bearer-token
    authentication via API clients.
  humanURL: https://developer.code42.com/api/
  baseURL: https://api.us.code42.com
  tags:
  - Insider Risk Management
  - Security
  - File Events
  properties:
  - type: Authentication
    url: authentication/code-42-authentication.yml
  - type: Conventions
    url: conventions/code-42-conventions.yml
  - type: DataModel
    url: data-model/code-42-data-model.yml
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: DomainSecurity
  url: security/code-42-domain-security.yml
- type: Website
  url: https://www.code42.com
- type: DeveloperPortal
  url: https://developer.code42.com/
- type: Documentation
  url: https://developer.code42.com/
- type: APIReference
  url: https://developer.code42.com/api/
- type: GettingStarted
  url: https://developer.code42.com/sdk/
- type: GitHubOrganization
  url: https://github.com/code42
- type: Blog
  url: https://www.code42.com/blog/
- type: Login
  url: https://console.us.code42.com/
- type: StatusPage
  url: https://status.code42.com/
- type: Deprecation
  url: lifecycle/code-42-lifecycle.yml
- type: Packages
  url: packages/code-42-packages.yml
- type: SDKs
  url: packages/code-42-packages.yml
- type: CLI
  url: cli/code-42-cli.yml
- type: Authentication
  url: authentication/code-42-authentication.yml
- type: Conventions
  url: conventions/code-42-conventions.yml
- type: Lifecycle
  url: lifecycle/code-42-lifecycle.yml
- type: ChangeLog
  url: changelog/code-42-changelog.yml
- type: Conformance
  url: conformance/code-42-conformance.yml
- type: DataModel
  url: data-model/code-42-data-model.yml
- type: LLMsTxt
  url: llms/code-42-llms.txt
x-enrichment:
  date: '2026-07-19'
  status: backfilled
  pass: local-v1
  note: backfilled from .gitignore signal + verified work evidence