# CoreStack

**Canonical:** https://apis.io/providers/corestack/  
**Website:** https://www.corestack.io/  
**APIs profiled:** 2

CoreStack is a multi-cloud governance and security platform that unifies FinOps (cost visibility, budgets, anomaly detection, rightsizing and commitment optimization), CloudOps (workload lifecycle, tagging, automation and self-service), SecOps/compliance (policy guardrails, posture management and continuous assessment against ISO, NIST, HIPAA, PCI DSS, CIS and the AWS Well-Architected Framework), and Graphion, its AI-native CNAPP layer covering SBOM, container findings and vulnerability intelligence, across AWS, Microsoft Azure, Google Cloud and Oracle Cloud Infrastructure. Every one of those capabilities is exposed through the CoreStack External API — a Swagger 2.0 contract of 838 operations across 767 paths, published live at the API host — and, since 2026, through a hosted unified MCP server that surfaces 100 documented tools to AI clients over OAuth or API key headers.

## Kin Score — 61.9 / 100 (strong)

Scored 2026-08-17 under rubric 0.11.0. Trend: flat (+0.0 from 61.9).

| Facet | Score |
|---|---|
| Discoverability | 87.0 |
| Contract Quality | 51.6 |
| Governance | 20.8 |
| Operational Transparency | 44.7 |
| Developer Ergonomics | 67.4 |
| Commercial Clarity | 84.2 |

Regulatory layer — **Insurance**: 71.2 (matched via tags).

## Agent readiness — 52.7 (agent-ready)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | no |
| MCP Server | yes |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | documented |
| OpenAPI Examples | no |
| Rate Limit Signal | documented |
| Event Surface Described | yes |
| Agent Skills | yes |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## APIs (2)

- **CoreStack External API** — REST API covering the whole CoreStack governance surface — authorization, identity and RBAC, guardrail policies, account governance, operations and automation, security, cost an...
- **CoreStack MCP Server** — Hosted, unified Model Context Protocol server exposing 100 documented tools across five domains — Common/Auth (10), FinOps (24), Graphion (45), Assessment (15) and Workload (6) ...

## MCP servers (2)

- **corestack-mcp.yml**
- **mcp**

## Security (2)

- **Corestack Authentication** — apiKey/oauth2 · 4 schemes
- **Corestack Domain Security** — TLSv1.3 · HSTS · DNSSEC · DMARC

## Plans (1)

- **Corestack Plans Pricing**

## Tags

cloud-governance, finops, cloud-cost-management, cloud-security-posture-management, compliance, multi-cloud, cnapp, policy-as-code, cloudops, mcp, agent-native, kubernetes

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/corestack/). Scores are computed from the provider's own public artifacts under a published rubric.