# Descope

**Canonical:** https://apis.io/providers/descope/  
**Website:** https://www.descope.com  
**APIs profiled:** 16

Descope is a customer and agentic identity access management (CIAM) platform founded in 2022 by veterans of Sentrigo and Demisto (acquired by Palo Alto Networks). Its signature is drag-and-drop Descope Flows — a visual authentication-flow builder — paired with passwordless methods (passkeys, magic link, OTP, social, biometric), risk-based MFA, SSO/SAML/SCIM, fine-grained authorization, and a growing Agentic Identity Hub that issues scoped OAuth tokens to AI agents and MCP servers. Descope ships SDKs for every mainstream language and framework, a CLI, Terraform/Pulumi providers, self-hostable hosted-auth app, and prebuilt migration tools from Auth0, Cognito, Firebase, and Keycloak. Free tier covers 7,500 MAUs forever; paid tiers start at $249/month.

## Kin Score — 51.4 / 100 (developing)

Scored 2026-08-21 under rubric 0.12.0. Trend: flat (+0.0 from 51.4).

| Facet | Score |
|---|---|
| Discoverability | 74.1 |
| Contract Quality | 52.4 |
| Governance | 0.0 |
| Contract Governance | 0.0 |
| Operational Transparency | 21.1 |
| Developer Ergonomics | 88.1 |
| Commercial Clarity | 52.6 |
| Access Clarity | 52.6 |

## Agent readiness — 28.1 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| Reversibility Documented | documented |
| MCP Server | no |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Self-serve signup — onboarding: self-serve, pricing: unknown, trial: no (confidence: medium).

## APIs (16)

- **Descope Apps API** — The Apps API from Descope — 4 operation(s) for apps.
- **Descope Auth API** — The Auth API from Descope — 52 operation(s) for auth.
- **Descope Custom Attributes API** — The Custom Attributes API from Descope — 3 operation(s) for custom attributes.
- **Descope Default API** — The Default API from Descope — 10 operation(s) for default.
- **Descope Email API** — The Email API from Descope — 10 operation(s) for email.
- **Descope Embedded Link API** — The Embedded Link API from Descope — 1 operation(s) for embedded link.
- **Descope Fedcm API** — The Fedcm API from Descope — 2 operation(s) for fedcm.
- **Descope Instant Message (IM) API** — The Instant Message (IM) API from Descope — 5 operation(s) for instant message (im).
- **Descope Keys API** — The Keys API from Descope — 2 operation(s) for keys.
- **Descope Mgmt API** — The Mgmt API from Descope — 276 operation(s) for mgmt.
- **Descope Oauth2 API** — The Oauth2 API from Descope — 30 operation(s) for oauth2.
- **Descope Scim API** — The Scim API from Descope — 6 operation(s) for scim.
- **Descope Text Message (SMS) API** — The Text Message (SMS) API from Descope — 9 operation(s) for text message (sms).
- **Descope Verification API** — The Verification API from Descope — 1 operation(s) for verification.
- **Descope Voice Message (Phone) API** — The Voice Message (Phone) API from Descope — 5 operation(s) for voice message (phone).
- **Descope .well Known API** — The .well Known API from Descope — 6 operation(s) for .well known.

## Agentic access (1)

- **Descope Agentic Access** — 459 operations · 375 acting · 8 human-in-the-loop

## Security (3)

- **Descope Authentication** — http · 1 scheme
- **Descope Domain Security** — TLSv1.3 · HSTS · DNSSEC · DMARC
- **Descope Trust Center** — SOC 2, ISO 27001

## Use cases (8)

- **B2C Customer Authentication** — Add passwordless sign-up/sign-in (passkeys, magic link, social) to consumer apps with adaptive MFA and account-takeover protection.
- **B2B Enterprise SSO** — Let business customers self-serve SAML/OIDC SSO and SCIM provisioning without per-tenant engineering work, using delegated admin widgets.
- **Auth Migration** — Migrate users from Auth0, Cognito, Firebase, Keycloak, and other IdPs with prebuilt Python-based migration tools that preserve password hashes where possible.
- **Agentic Identity for AI Agents** — Issue scoped OAuth tokens to AI agents and MCP servers using progressive scoping, token vaulting, and per-agent audit trails via the Agentic Identity Hub.
- **Multi-Tenant SaaS** — Model tenant hierarchies, delegated admin, per-tenant SSO, and tenant-scoped RBAC/FGA from a single Descope project.
- **Fine-Grained Authorization** — Replace homegrown permission systems with a Zanzibar-style schema, relations, and policies via the FGA Management API.
- **Mobile Authentication** — Native passkey, biometric, and social login in iOS, Android, React Native, and Flutter apps using Descope's mobile SDKs.
- **Compliance-Driven Auth** — Use audit logs, custom message templates, MFA enforcement, and SOC 2 / GDPR controls to satisfy regulated-industry requirements.

## Tags

Authentication, Identity, CIAM, Passwordless, Passkeys, MFA, SSO, OIDC, SAML, SCIM, Authorization, FGA, Agentic Identity, MCP

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/descope/). Scores are computed from the provider's own public artifacts under a published rubric.