Code 42 website screenshot

Code 42

Code42 (now part of Mimecast) is a security software company whose Incydr product is a SaaS Insider Risk Management (IRM) platform that detects, and responds to data exfiltration and insider threats across endpoints, cloud, email, and browsers. Code42 exposes a public OAuth 2.0 REST API through its regional API gateways (api.us.code42.com and other regions) covering actors, agents, alert rules, audit log, cases, file events, sessions, users, and watchlists. Developers integrate via the official Incydr Python SDK, the incydr command-line interface, and the legacy py42 SDK. This profile was added to the API Evangelist network as a portfolio-company lead (backed by Accel) and has been enriched from Code42's public developer surface.

Code 42 publishes 1 API on the APIs.io network. Tagged areas include Company, Security, Insider Risk Management, Data Loss Prevention, and Data Security.

Code 42’s developer surface includes documentation, API reference, getting-started guide, engineering blog, CLI, authentication, changelog, and 14 more developer resources.

29.7/100 thin ▬ flat Agent 9/100 agent aware Full breakdown ↓
scored 2026-08-10 · rubric v0.9.1
AccessSelf serve
1 APIs
CompanySecurityInsider Risk ManagementData Loss PreventionData SecurityEndpoint SecurityCybersecuritySaaS

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-08-10 · rubric v0.9.1
Composite quality — 29.7/100 · thin
Contract Quality 0.0 / 25
Developer Ergonomics 12.2 / 20
Commercial Clarity 2.6 / 20
Operational Transparency 5.8 / 13
Governance 1.5 / 12
Discoverability 7.6 / 10
Agent readiness — 9/100 · agent aware
Machine-Readable Contract 0 / 18
Agentic Access Contract 0 / 10
MCP Server 0 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 0 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/code-42: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 1

Individual APIs this provider publishes, each with its own machine-readable definition.

Code42 Incydr API

Code42 Incydr's public REST API for insider risk management — actors, agents, alert rules, audit log, cases, departments, directory groups, file events, sessions, trusted activi...

Security Posture 2

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Code 42 Authentication

oauth2 · 1 scheme

SECURITY

Code 42 Domain Security

TLSv1.3 · HSTS · DNSSEC · DMARC

SECURITY

Resources

Get Started 3

Portal, sign-up, and the first successful call

Documentation 2

Reference material describing how the API behaves

Agent Surfaces 1

MCP servers, agent skills, and machine-readable catalogs

Design & Contract 4

Pagination, idempotency, versioning, errors, and events

Build 4

SDKs, sample code, and the tooling you integrate with

Access & Security 2

Authentication, authorization, and security posture

Operate 3

Status, limits, changes, and where to get help

Company 2

The organization behind the API

Source (apis.yml)

apis.yml Raw ↑
aid: code-42
accessModel:
  pricing: unknown
  onboarding: self-serve
  trial: false
  try_now: false
  public: false
  label: Self-serve signup
  confidence: medium
  source:
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/code-42.png
name: Code 42
description: Code42 (now part of Mimecast) is a security software company whose Incydr product is a SaaS Insider Risk Management
  (IRM) platform that detects, and responds to data exfiltration and insider threats across endpoints, cloud, email, and browsers.
  Code42 exposes a public OAuth 2.0 REST API through its regional API gateways (api.us.code42.com and other regions) covering
  actors, agents, alert rules, audit log, cases, file events, sessions, users, and watchlists. Developers integrate via the
  official Incydr Python SDK, the incydr command-line interface, and the legacy py42 SDK. This profile was added to the API
  Evangelist network as a portfolio-company lead (backed by Accel) and has been enriched from Code42's public developer surface.
url: https://raw.githubusercontent.com/api-evangelist/code-42/refs/heads/main/apis.yml
x-type: company
x-source: vc-portfolio
x-backed-by:
- accel
x-tier: stub
x-tier-reason: portfolio-lead
specificationVersion: '0.20'
created: '2026-07-17'
modified: '2026-07-18'
tags:
- Company
- Security
- Insider Risk Management
- Data Loss Prevention
- Data Security
- Endpoint Security
- Cybersecurity
- SaaS
apis:
- name: Code42 Incydr API
  description: Code42 Incydr's public REST API for insider risk management — actors, agents, alert rules, audit log, cases,
    departments, directory groups, file events, sessions, trusted activities, users, and watchlists. OAuth 2.0 bearer-token
    authentication via API clients.
  humanURL: https://developer.code42.com/api/
  baseURL: https://api.us.code42.com
  tags:
  - Insider Risk Management
  - Security
  - File Events
  properties:
  - type: Authentication
    url: authentication/code-42-authentication.yml
  - type: Conventions
    url: conventions/code-42-conventions.yml
  - type: DataModel
    url: data-model/code-42-data-model.yml
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: DomainSecurity
  url: security/code-42-domain-security.yml
- type: Website
  url: https://www.code42.com
- type: DeveloperPortal
  url: https://developer.code42.com/
- type: Documentation
  url: https://developer.code42.com/
- type: APIReference
  url: https://developer.code42.com/api/
- type: GettingStarted
  url: https://developer.code42.com/sdk/
- type: GitHubOrganization
  url: https://github.com/code42
- type: Blog
  url: https://www.code42.com/blog/
- type: Login
  url: https://console.us.code42.com/
- type: StatusPage
  url: https://status.code42.com/
- type: Deprecation
  url: lifecycle/code-42-lifecycle.yml
- type: Packages
  url: packages/code-42-packages.yml
- type: SDKs
  url: packages/code-42-packages.yml
- type: CLI
  url: cli/code-42-cli.yml
- type: Authentication
  url: authentication/code-42-authentication.yml
- type: Conventions
  url: conventions/code-42-conventions.yml
- type: Lifecycle
  url: lifecycle/code-42-lifecycle.yml
- type: ChangeLog
  url: changelog/code-42-changelog.yml
- type: Conformance
  url: conformance/code-42-conformance.yml
- type: DataModel
  url: data-model/code-42-data-model.yml
- type: LLMsTxt
  url: llms/code-42-llms.txt
x-enrichment:
  date: '2026-07-19'
  status: backfilled
  pass: local-v1
  note: backfilled from .gitignore signal + verified work evidence