Credo AI

Credo AI is an enterprise AI governance, risk, and compliance platform used to discover, register, risk-classify, and continuously govern every AI model, application, agent, and third-party AI vendor an organization runs. The platform pairs an AI Registry (use cases, models, vendors, agents, shadow-AI discovery) with a policy engine that turns regulatory frameworks — the EU AI Act, NIST AI RMF, ISO/IEC 42001, NYC Local Law 144, Colorado SB21-169, OMB M-25 — into machine-enforced policy packs, controls, questionnaires, risk scenarios, and audit-ready evidence artifacts. Programmatic access is delivered through a multi-tenant JSON:API REST surface at api.credo.ai (300 operations across use cases, models, vendors, questionnaires, policy packs, policy controls, risks, tasks, teams, users, triggers, and Shadow AI), a first-party Python SDK (pycredoai) and TypeScript SDK (@credo-ai/sdk), and a published Claude Code plugin marketplace of eleven AI-governance Agent Skills backed by a gated Governance Intelligence Pro MCP server.

Credo AI publishes 2 APIs on the APIs.io network: Governance Platform API (v2) and Audit Logs & Shadow AI API. Tagged areas include Company, ai-governance, ai-risk-management, responsible-ai, and compliance.

Credo AI’s developer surface includes documentation, API reference, getting-started guide, support, engineering blog, signup flow, pricing, and 19 more developer resources.

43.7/100 developing ▬ flat Agent 24/100 agent aware Full breakdown ↓
scored 2026-08-17 · rubric v0.11.0
3 APIs 1 MCP Servers
Companyai-governanceai-risk-managementresponsible-aicomplianceregulatory-technologymodel-registryvendor-riskeu-ai-actnist-ai-rmfiso-42001shadow-aiagent-governanceauditjson-apiagent-skills

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-08-17 · rubric v0.11.0
Composite quality — 43.7/100 · developing
Contract Quality 8.1 / 25
Developer Ergonomics 10.9 / 20
Commercial Clarity 12.1 / 20
Operational Transparency 2.1 / 13
Governance 2.5 / 12
Discoverability 8.2 / 10
Agent readiness — 24/100 · agent aware
Machine-Readable Contract 18 / 18
Agentic Access Contract 0 / 10
MCP Server 0 / 12
Machine-Readable Auth 0 / 10
Idempotency 0 / 9
Stable Error Semantics 0 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 7 / 7
Typed Event Surface 0 / 6
Agent Skills 5 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/credo-ai: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 3

Individual APIs this provider publishes, each with its own machine-readable definition.

Credo AI Governance Platform API (v2)

Multi-tenant JSON:API REST interface to the Credo AI Governance Platform. 300 operations across 26 tags cover use cases, use case questionnaires, risk scenarios, controls, polic...

Credo AI Audit Logs & Shadow AI API

OpenAPI 3.0.0 contract covering the audit-log and Shadow AI slice of the Credo AI v2 API — listing, filtering, exporting and retrieving audit log entries, and ingesting, listing...

Credo AI Governance Intelligence Pro MCP Server

Provider-published Model Context Protocol server ("governance-hub") distributed as the npm package @credoai/governance-hub-mcp and run over stdio via npx. Grounds the Credo AI C...

Open Collections 2

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

Credo AI API

OPEN COLLECTION

Credo AI server API

OPEN COLLECTION

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

credo-ai-mcp.yml

MCP SERVER

Pricing Plans 1

Published pricing tiers and plan structures.

Rate Limits 1

Documented rate limits and quota policies.

Credo Ai Rate Limits

0 limits

RATE LIMITS

Security Posture 4

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Credo Ai Authentication

apiKey/http · 2 schemes

SECURITY

Credo Ai Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Credo Ai Vulnerability Disclosure

disclosure policy published

SECURITY

Credo Ai Trust Center

SOC 2 Type II

SECURITY

Resources

Get Started 4

Portal, sign-up, and the first successful call

Documentation 2

Reference material describing how the API behaves

Agent Surfaces 2

MCP servers, agent skills, and machine-readable catalogs

Design & Contract 2

Pagination, idempotency, versioning, errors, and events

Build 3

SDKs, sample code, and the tooling you integrate with

Access & Security 5

Authentication, authorization, and security posture

Operate 2

Status, limits, changes, and where to get help

Commercial 4

Pricing, plans, and the legal terms of use

Company 2

The organization behind the API

Source (apis.yml)

apis.yml Raw ↑
aid: credo-ai
name: Credo AI
description: Credo AI is an enterprise AI governance, risk, and compliance platform used to discover, register, risk-classify,
  and continuously govern every AI model, application, agent, and third-party AI vendor an organization runs. The platform
  pairs an AI Registry (use cases, models, vendors, agents, shadow-AI discovery) with a policy engine that turns regulatory
  frameworks — the EU AI Act, NIST AI RMF, ISO/IEC 42001, NYC Local Law 144, Colorado SB21-169, OMB M-25 — into machine-enforced
  policy packs, controls, questionnaires, risk scenarios, and audit-ready evidence artifacts. Programmatic access is delivered
  through a multi-tenant JSON:API REST surface at api.credo.ai (300 operations across use cases, models, vendors, questionnaires,
  policy packs, policy controls, risks, tasks, teams, users, triggers, and Shadow AI), a first-party Python SDK (pycredoai)
  and TypeScript SDK (@credo-ai/sdk), and a published Claude Code plugin marketplace of eleven AI-governance Agent Skills
  backed by a gated Governance Intelligence Pro MCP server.
image: https://cdn.prod.website-files.com/649d808ba8385965c74d94df/6a27d15ec3da571348386f01_OPENGRAPGH-light.png
url: https://raw.githubusercontent.com/api-evangelist/credo-ai/refs/heads/main/apis.yml
x-type: company
x-source: harvest:secondary-market
specificationVersion: '0.20'
created: '2026-08-11'
modified: '2026-08-11'
tags:
- Company
- ai-governance
- ai-risk-management
- responsible-ai
- compliance
- regulatory-technology
- model-registry
- vendor-risk
- eu-ai-act
- nist-ai-rmf
- iso-42001
- shadow-ai
- agent-governance
- audit
- json-api
- agent-skills
apis:
- name: Credo AI Governance Platform API (v2)
  description: Multi-tenant JSON:API REST interface to the Credo AI Governance Platform. 300 operations across 26 tags cover
    use cases, use case questionnaires, risk scenarios, controls, policy packs, reports, reviews, comments and custom fields,
    plus models and model versions, vendors, questionnaires, policy controls, risk classifications, tasks, fields, users,
    teams, triggers and trigger actions, and Shadow AI tools and events. Media type is application/vnd.api+json throughout,
    with cursor pagination (page[after]/page[before]/page[limit]), filter[...]/sort/include query conventions, and a JSON:API
    errors[] envelope. Authenticated with a Bearer token exchanged from a tenant API token.
  humanURL: https://docs.sdk.credo.ai/docs/intro/
  baseURL: https://api.credo.ai/api/v2/{tenant}
  tags:
  - ai-governance
  - ai-risk-management
  - compliance
  - model-registry
  - vendor-risk
  - json-api
  properties:
  - type: OpenAPI
    url: openapi/credo-ai-governance-platform-swagger.json
  - type: Swagger
    url: https://api.credo.ai/swagger.json
  - type: Documentation
    url: https://docs.sdk.credo.ai/docs/intro/
  - type: APIReference
    url: https://docs.sdk.credo.ai/docs/api-reference
  - type: GettingStarted
    url: https://docs.sdk.credo.ai/docs/getting-started
  - type: Overlay
    url: overlays/credo-ai-governance-platform-overlay.yaml
  - type: Authentication
    url: authentication/credo-ai-authentication.yml
  - type: Conventions
    url: conventions/credo-ai-conventions.yml
  - type: ErrorCatalog
    url: errors/credo-ai-problem-types.yml
  - type: DataModel
    url: data-model/credo-ai-data-model.yml
- name: Credo AI Audit Logs & Shadow AI API
  description: OpenAPI 3.0.0 contract covering the audit-log and Shadow AI slice of the Credo AI v2 API — listing, filtering,
    exporting and retrieving audit log entries, and ingesting, listing, bulk-loading and deleting Shadow AI events plus registering
    and unregistering discovered AI tools. Declares four servers (local, QA, production, on-premise), each templated on the
    customer tenant identifier, and a BearerAuth JWT security scheme obtained from POST /auth/exchange.
  humanURL: https://api.credo.ai/openapi
  baseURL: https://api.credo.ai/api/v2/{tenant}
  tags:
  - audit
  - shadow-ai
  - ai-governance
  - compliance
  properties:
  - type: OpenAPI
    url: openapi/credo-ai-audit-logs-shadow-ai-openapi.json
  - type: Documentation
    url: https://api.credo.ai/openapi
  - type: Overlay
    url: overlays/credo-ai-audit-logs-shadow-ai-overlay.yaml
- name: Credo AI Governance Intelligence Pro MCP Server
  description: Provider-published Model Context Protocol server ("governance-hub") distributed as the npm package @credoai/governance-hub-mcp
    and run over stdio via npx. Grounds the Credo AI Claude Code Agent Skills in the live Credo AI Governance Intelligence
    catalog with five documented tools — get_catalog_overview, governance_query, get_entities, get_maturity_framework, get_benchmarks.
    Access credentials are gated; the npm package is not resolvable on the public registry.
  humanURL: https://github.com/credo-ai/credoai-plugins
  baseURL: npx -y @credoai/governance-hub-mcp
  tags:
  - mcp
  - ai-governance
  - agent-skills
  properties:
  - type: MCPServer
    url: mcp/credo-ai-mcp.yml
  - type: ToolCrosswalk
    url: mcp/credo-ai-tool-crosswalk.yml
  - type: Documentation
    url: https://github.com/credo-ai/credoai-plugins
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: DomainSecurity
  url: security/credo-ai-domain-security.yml
- type: Website
  url: https://www.credo.ai/
- type: DeveloperPortal
  url: https://docs.sdk.credo.ai/
- type: Documentation
  url: https://docs.sdk.credo.ai/docs/intro/
- type: APIReference
  url: https://docs.sdk.credo.ai/docs/api-reference
- type: GettingStarted
  url: https://docs.sdk.credo.ai/docs/getting-started
- type: Support
  url: https://www.credo.ai/contact
- type: Blog
  url: https://www.credo.ai/resources
- type: GitHubOrganization
  url: https://github.com/credo-ai
- type: SignUp
  url: https://www.credo.ai/get-started
- type: Login
  url: https://app.credo.ai/
- type: Pricing
  url: plans/credo-ai-plans-pricing.yml
- type: TermsOfService
  url: https://www.credo.ai/legal/terms-conditions
- type: PrivacyPolicy
  url: https://www.credo.ai/legal/privacy-policy
- type: Security
  url: https://www.credo.ai/legal/vulnerability-disclosure-policy
- type: VulnerabilityDisclosure
  url: security/credo-ai-vulnerability-disclosure.yml
- type: TrustCenter
  url: security/credo-ai-trust-center.yml
- type: Compliance
  url: conformance/credo-ai-conformance.yml
- type: Conformance
  url: conformance/credo-ai-conformance.yml
- type: Packages
  url: packages/credo-ai-packages.yml
- type: SDKs
  url: packages/credo-ai-packages.yml
- type: LLMsTxt
  url: llms/credo-ai-llms.txt
- type: AgentSkill
  url: skills/_index.yml
- type: Lifecycle
  url: lifecycle/credo-ai-lifecycle.yml
- type: Plans
  url: plans/credo-ai-plans-pricing.yml
- type: RateLimits
  url: rate-limits/credo-ai-rate-limits.yml
x-enrichment:
  date: '2026-08-11'
  status: enriched
  artifacts_added: 34
  pass: local-v1