Endor Labs

Endor Labs is a software supply chain security and application security platform built around reachability-based Software Composition Analysis (SCA), SBOM/VEX, secrets and SAST scanning, CI/CD discovery, and AI security. Its public REST API at https://api.endorlabs.com/v1 is a uniform resource API over namespaces, exposing projects, packages, findings, policies, scan results, and more, driven by the endorctl CLI.

Endor Labs publishes 7 APIs on the APIs.io network, including Authentication API, Findings API, Namespaces API, and 4 more. Tagged areas include Security, Software Supply Chain, SCA, Reachability, and AppSec.

Endor Labs’ developer surface includes authentication, documentation, engineering blog, and 8 more developer resources.

🌐 Visit website 📡 Source on GitHub

34.8/100 thin ▬ flat Agent 29/100 agent aware Full breakdown ↓
scored 2026-08-21 · rubric v0.12.0

AccessFreemiumSelf serveFree trial⚡ Free to try

7 APIs

Security Software Supply Chain SCA Reachability AppSec AI Security

Kin Score

Kin Score How this is scored →
scored 2026-08-21 · rubric v0.12.0

Composite quality — 34.8/100 · thin

Contract Quality 13.7 / 25

Developer Ergonomics 4.8 / 20

Access Clarity 5.8 / 20

Operational Transparency 3.1 / 13

Contract Governance 0.0 / 12

Discoverability 7.4 / 10

Agent readiness — 29/100 · agent aware

Machine-Readable Contract 18 / 18

Agentic Access Contract 10 / 10

Documented Reversibility 0 / 6

MCP Server 0 / 12

Machine-Readable Auth 10 / 10

Idempotency 0 / 9

Stable Error Semantics 0 / 8

Request/Response Examples 0 / 7

Rate-Limit Signaling 7 / 7

Typed Event Surface 0 / 6

Agent Skills 0 / 5

Well-Known Catalog 0 / 4

Consent & Bot Identity 0 / 3

A2A Agent Card 0 / 8

Dry-Run / Simulate Mode 0 / 4

Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/endor-labs: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 7

Individual APIs this provider publishes, each with its own machine-readable definition.

Rate Limits 1

Documented rate limits and quota policies.

Endor Labs Rate Limits

2 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

Documentation 1

Reference material describing how the API behaves

Documentation

Documentation

Agent Surfaces 1

MCP servers, agent skills, and machine-readable catalogs

AgenticAccess

AgenticAccess

Build 1

SDKs, sample code, and the tooling you integrate with

GitHubOrganization

GitHubOrganization

Access & Security 2

Authentication, authorization, and security posture

DomainSecurity

DomainSecurity

Authentication

Authentication

Operate 1

Status, limits, changes, and where to get help

RateLimits

RateLimits

Commercial 2

Pricing, plans, and the legal terms of use

Plans

Plans

FinOps

FinOps

Company 3

The organization behind the API

LinkedIn

Website

Website

Blog

Blog

Source (apis.yml)

aid: endor-labs
url: https://raw.githubusercontent.com/api-evangelist/endor-labs/refs/heads/main/apis.yml
name: Endor Labs
kind: company
description: Endor Labs is a software supply chain security and application security platform built around reachability-based
  Software Composition Analysis (SCA), SBOM/VEX, secrets and SAST scanning, CI/CD discovery, and AI security. Its public REST
  API at https://api.endorlabs.com/v1 is a uniform resource API over namespaces, exposing projects, packages, findings, policies,
  scan results, and more, driven by the endorctl CLI.
accessModel:
  pricing: freemium
  onboarding: self-serve
  trial: true
  try_now: true
  public: false
  label: Freemium (free trial) · Self-serve signup
  confidence: high
  source:
  - plans
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/endor-labs.png
tags:
- Security
- Software Supply Chain
- SCA
- Reachability
- AppSec
- AI Security
created: '2026-06-20'
modified: '2026-06-20'
specificationVersion: '0.23'
apis:
- aid: endor-labs:endor-labs-authentication-api
  name: Endor Labs Authentication API
  description: Exchange API key and secret for a bearer access token.
  humanURL: https://docs.endorlabs.com/rest-api/
  baseURL: https://api.endorlabs.com/v1
  tags:
  - Authentication
  properties:
  - type: OpenAPI
    url: openapi/endor-labs-authentication-api-openapi.yml
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/getting-started/
  - type: APIReference
    url: https://docs.endorlabs.com/api/
  - type: PostmanCollection
    url: collections/endor-labs.postman_collection.json
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/data-model/resource-kinds/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/use-cases/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/authentication/
- aid: endor-labs:endor-labs-findings-api
  name: Endor Labs Findings API
  description: Detected problems requiring remediation.
  humanURL: https://docs.endorlabs.com/rest-api/
  baseURL: https://api.endorlabs.com/v1
  tags:
  - Findings
  properties:
  - type: OpenAPI
    url: openapi/endor-labs-findings-api-openapi.yml
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/getting-started/
  - type: APIReference
    url: https://docs.endorlabs.com/api/
  - type: PostmanCollection
    url: collections/endor-labs.postman_collection.json
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/data-model/resource-kinds/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/use-cases/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/authentication/
- aid: endor-labs:endor-labs-namespaces-api
  name: Endor Labs Namespaces API
  description: Tenants and child namespaces a token may access.
  humanURL: https://docs.endorlabs.com/rest-api/
  baseURL: https://api.endorlabs.com/v1
  tags:
  - Namespaces
  properties:
  - type: OpenAPI
    url: openapi/endor-labs-namespaces-api-openapi.yml
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/getting-started/
  - type: APIReference
    url: https://docs.endorlabs.com/api/
  - type: PostmanCollection
    url: collections/endor-labs.postman_collection.json
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/data-model/resource-kinds/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/use-cases/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/authentication/
- aid: endor-labs:endor-labs-packages-api
  name: Endor Labs Packages API
  description: PackageVersion and dependency resources.
  humanURL: https://docs.endorlabs.com/rest-api/
  baseURL: https://api.endorlabs.com/v1
  tags:
  - Packages
  properties:
  - type: OpenAPI
    url: openapi/endor-labs-packages-api-openapi.yml
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/getting-started/
  - type: APIReference
    url: https://docs.endorlabs.com/api/
  - type: PostmanCollection
    url: collections/endor-labs.postman_collection.json
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/data-model/resource-kinds/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/use-cases/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/authentication/
- aid: endor-labs:endor-labs-policies-api
  name: Endor Labs Policies API
  description: Governance rules over resources.
  humanURL: https://docs.endorlabs.com/rest-api/
  baseURL: https://api.endorlabs.com/v1
  tags:
  - Policies
  properties:
  - type: OpenAPI
    url: openapi/endor-labs-policies-api-openapi.yml
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/getting-started/
  - type: APIReference
    url: https://docs.endorlabs.com/api/
  - type: PostmanCollection
    url: collections/endor-labs.postman_collection.json
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/data-model/resource-kinds/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/use-cases/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/authentication/
- aid: endor-labs:endor-labs-projects-api
  name: Endor Labs Projects API
  description: Project resources - the root of scanned source code.
  humanURL: https://docs.endorlabs.com/rest-api/
  baseURL: https://api.endorlabs.com/v1
  tags:
  - Project
  tags_raw:
  - Projects
  properties:
  - type: OpenAPI
    url: openapi/endor-labs-projects-api-openapi.yml
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/getting-started/
  - type: APIReference
    url: https://docs.endorlabs.com/api/
  - type: PostmanCollection
    url: collections/endor-labs.postman_collection.json
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/data-model/resource-kinds/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/use-cases/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/authentication/
- aid: endor-labs:endor-labs-scan-results-api
  name: Endor Labs Scan Results API
  description: Scan execution results and metrics.
  humanURL: https://docs.endorlabs.com/rest-api/
  baseURL: https://api.endorlabs.com/v1
  tags:
  - Scan Results
  properties:
  - type: OpenAPI
    url: openapi/endor-labs-scan-results-api-openapi.yml
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/getting-started/
  - type: APIReference
    url: https://docs.endorlabs.com/api/
  - type: PostmanCollection
    url: collections/endor-labs.postman_collection.json
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/data-model/resource-kinds/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/use-cases/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/authentication/
common:
- type: AgenticAccess
  url: agentic-access/endor-labs-agentic-access.yml
- type: DomainSecurity
  url: security/endor-labs-domain-security.yml
- type: Authentication
  url: authentication/endor-labs-authentication.yml
- type: GitHubOrganization
  url: https://github.com/endorlabs
- type: LinkedIn
  url: https://www.linkedin.com/company/endor-labs
- type: Website
  url: https://www.endorlabs.com
- type: Documentation
  url: https://docs.endorlabs.com/rest-api/
- type: Plans
  url: plans/endor-labs-plans-pricing.yml
- type: RateLimits
  url: rate-limits/endor-labs-rate-limits.yml
- type: FinOps
  url: finops/endor-labs-finops.yml
- url: https://www.endorlabs.com/learn/rss.xml
  type: Blog
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com

Work with this as data

Every provider here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for providers

9 MCP tools reach this

find_providersBrowse and filter every provider in the catalog.
get_provider_artifactsEvery artifact this provider publishes, grouped by type.
get_provider_operationsEvery operation across all of their OpenAPIs — one call instead of parsing every spec.
get_provider_toolsEvery MCP tool they ship, with the operation each wraps.
get_provider_evidenceHow each part of their score was established. Free — the basis for a claim should not sit behind it.
get_provider_ratingPRO — composite, band, trend and facet scores.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools

Call it yourself

curl for this page

This provider

curl "https://apis.io/api/v1/providers/endor-labs"

All providers

curl "https://apis.io/api/v1/providers?limit=25"

Every operation they expose

curl "https://apis.io/api/v1/providers/endor-labs/operations?limit=25"

How their score was established

curl "https://apis.io/api/v1/providers/endor-labs/evidence"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.