Endor Labs

Endor Labs is a software supply chain security and application security platform built around reachability-based Software Composition Analysis (SCA), SBOM/VEX, secrets and SAST scanning, CI/CD discovery, and AI security. Its public REST API at https://api.endorlabs.com/v1 is a uniform resource API over namespaces, exposing projects, packages, findings, policies, scan results, and more, driven by the endorctl CLI.

Endor Labs publishes 7 APIs on the APIs.io network, including Authentication API, Findings API, Namespaces API, and 4 more. Tagged areas include Security, Software Supply Chain, SCA, Reachability, and AppSec.

Endor Labs’ developer surface includes authentication, documentation, engineering blog, and 8 more developer resources.

🌐 Visit website 📡 Source on GitHub

34.8/100 thin ▬ flat Agent 29/100 agent aware Full breakdown ↓
scored 2026-08-20 · rubric v0.12.0

AccessFreemiumSelf serveFree trial⚡ Free to try

7 APIs

Security Software Supply Chain SCA Reachability AppSec AI Security

Kin Score

Kin Score How this is scored →
scored 2026-08-20 · rubric v0.12.0

Composite quality — 34.8/100 · thin

Contract Quality 13.7 / 25

Developer Ergonomics 4.8 / 20

Access Clarity 5.8 / 20

Operational Transparency 3.1 / 13

Contract Governance 0.0 / 12

Discoverability 7.4 / 10

Agent readiness — 29/100 · agent aware

Machine-Readable Contract 18 / 18

Agentic Access Contract 10 / 10

Documented Reversibility 0 / 6

MCP Server 0 / 12

Machine-Readable Auth 10 / 10

Idempotency 0 / 9

Stable Error Semantics 0 / 8

Request/Response Examples 0 / 7

Rate-Limit Signaling 7 / 7

Typed Event Surface 0 / 6

Agent Skills 0 / 5

Well-Known Catalog 0 / 4

Consent & Bot Identity 0 / 3

A2A Agent Card 0 / 8

Dry-Run / Simulate Mode 0 / 4

Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/endor-labs: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 7

Individual APIs this provider publishes, each with its own machine-readable definition.

Rate Limits 1

Documented rate limits and quota policies.

Endor Labs Rate Limits

2 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

Documentation 1

Reference material describing how the API behaves

Documentation

Documentation

Agent Surfaces 1

MCP servers, agent skills, and machine-readable catalogs

AgenticAccess

AgenticAccess

Build 1

SDKs, sample code, and the tooling you integrate with

GitHubOrganization

GitHubOrganization

Access & Security 2

Authentication, authorization, and security posture

DomainSecurity

DomainSecurity

Authentication

Authentication

Operate 1

Status, limits, changes, and where to get help

RateLimits

RateLimits

Commercial 2

Pricing, plans, and the legal terms of use

Plans

Plans

FinOps

FinOps

Company 3

The organization behind the API

LinkedIn

Website

Website

Blog

Blog

Source (apis.yml)

aid: endor-labs
url: https://raw.githubusercontent.com/api-evangelist/endor-labs/refs/heads/main/apis.yml
name: Endor Labs
kind: company
description: Endor Labs is a software supply chain security and application security platform built around reachability-based
  Software Composition Analysis (SCA), SBOM/VEX, secrets and SAST scanning, CI/CD discovery, and AI security. Its public REST
  API at https://api.endorlabs.com/v1 is a uniform resource API over namespaces, exposing projects, packages, findings, policies,
  scan results, and more, driven by the endorctl CLI.
accessModel:
  pricing: freemium
  onboarding: self-serve
  trial: true
  try_now: true
  public: false
  label: Freemium (free trial) · Self-serve signup
  confidence: high
  source:
  - plans
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/endor-labs.png
tags:
- Security
- Software Supply Chain
- SCA
- Reachability
- AppSec
- AI Security
created: '2026-06-20'
modified: '2026-06-20'
specificationVersion: '0.23'
apis:
- aid: endor-labs:endor-labs-authentication-api
  name: Endor Labs Authentication API
  description: Exchange API key and secret for a bearer access token.
  humanURL: https://docs.endorlabs.com/rest-api/
  baseURL: https://api.endorlabs.com/v1
  tags:
  - Authentication
  properties:
  - type: OpenAPI
    url: openapi/endor-labs-authentication-api-openapi.yml
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/getting-started/
  - type: APIReference
    url: https://docs.endorlabs.com/api/
  - type: PostmanCollection
    url: collections/endor-labs.postman_collection.json
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/data-model/resource-kinds/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/use-cases/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/authentication/
- aid: endor-labs:endor-labs-findings-api
  name: Endor Labs Findings API
  description: Detected problems requiring remediation.
  humanURL: https://docs.endorlabs.com/rest-api/
  baseURL: https://api.endorlabs.com/v1
  tags:
  - Findings
  properties:
  - type: OpenAPI
    url: openapi/endor-labs-findings-api-openapi.yml
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/getting-started/
  - type: APIReference
    url: https://docs.endorlabs.com/api/
  - type: PostmanCollection
    url: collections/endor-labs.postman_collection.json
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/data-model/resource-kinds/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/use-cases/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/authentication/
- aid: endor-labs:endor-labs-namespaces-api
  name: Endor Labs Namespaces API
  description: Tenants and child namespaces a token may access.
  humanURL: https://docs.endorlabs.com/rest-api/
  baseURL: https://api.endorlabs.com/v1
  tags:
  - Namespaces
  properties:
  - type: OpenAPI
    url: openapi/endor-labs-namespaces-api-openapi.yml
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/getting-started/
  - type: APIReference
    url: https://docs.endorlabs.com/api/
  - type: PostmanCollection
    url: collections/endor-labs.postman_collection.json
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/data-model/resource-kinds/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/use-cases/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/authentication/
- aid: endor-labs:endor-labs-packages-api
  name: Endor Labs Packages API
  description: PackageVersion and dependency resources.
  humanURL: https://docs.endorlabs.com/rest-api/
  baseURL: https://api.endorlabs.com/v1
  tags:
  - Packages
  properties:
  - type: OpenAPI
    url: openapi/endor-labs-packages-api-openapi.yml
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/getting-started/
  - type: APIReference
    url: https://docs.endorlabs.com/api/
  - type: PostmanCollection
    url: collections/endor-labs.postman_collection.json
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/data-model/resource-kinds/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/use-cases/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/authentication/
- aid: endor-labs:endor-labs-policies-api
  name: Endor Labs Policies API
  description: Governance rules over resources.
  humanURL: https://docs.endorlabs.com/rest-api/
  baseURL: https://api.endorlabs.com/v1
  tags:
  - Policies
  properties:
  - type: OpenAPI
    url: openapi/endor-labs-policies-api-openapi.yml
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/getting-started/
  - type: APIReference
    url: https://docs.endorlabs.com/api/
  - type: PostmanCollection
    url: collections/endor-labs.postman_collection.json
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/data-model/resource-kinds/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/use-cases/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/authentication/
- aid: endor-labs:endor-labs-projects-api
  name: Endor Labs Projects API
  description: Project resources - the root of scanned source code.
  humanURL: https://docs.endorlabs.com/rest-api/
  baseURL: https://api.endorlabs.com/v1
  tags:
  - Project
  tags_raw:
  - Projects
  properties:
  - type: OpenAPI
    url: openapi/endor-labs-projects-api-openapi.yml
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/getting-started/
  - type: APIReference
    url: https://docs.endorlabs.com/api/
  - type: PostmanCollection
    url: collections/endor-labs.postman_collection.json
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/data-model/resource-kinds/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/use-cases/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/authentication/
- aid: endor-labs:endor-labs-scan-results-api
  name: Endor Labs Scan Results API
  description: Scan execution results and metrics.
  humanURL: https://docs.endorlabs.com/rest-api/
  baseURL: https://api.endorlabs.com/v1
  tags:
  - Scan Results
  properties:
  - type: OpenAPI
    url: openapi/endor-labs-scan-results-api-openapi.yml
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/getting-started/
  - type: APIReference
    url: https://docs.endorlabs.com/api/
  - type: PostmanCollection
    url: collections/endor-labs.postman_collection.json
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/data-model/resource-kinds/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/use-cases/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/authentication/
common:
- type: AgenticAccess
  url: agentic-access/endor-labs-agentic-access.yml
- type: DomainSecurity
  url: security/endor-labs-domain-security.yml
- type: Authentication
  url: authentication/endor-labs-authentication.yml
- type: GitHubOrganization
  url: https://github.com/endorlabs
- type: LinkedIn
  url: https://www.linkedin.com/company/endor-labs
- type: Website
  url: https://www.endorlabs.com
- type: Documentation
  url: https://docs.endorlabs.com/rest-api/
- type: Plans
  url: plans/endor-labs-plans-pricing.yml
- type: RateLimits
  url: rate-limits/endor-labs-rate-limits.yml
- type: FinOps
  url: finops/endor-labs-finops.yml
- url: https://www.endorlabs.com/learn/rss.xml
  type: Blog
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com

Endor Labs

Kin Score

APIs 7

Endor Labs Authentication API

Endor Labs Findings API

Endor Labs Namespaces API

Endor Labs Packages API

Endor Labs Policies API

Endor Labs Projects API

Endor Labs Scan Results API

Open Collections 9

API Collection

Endor Labs REST Authentication API

Endor Labs REST Authentication Findings API

Endor Labs REST Authentication Namespaces API

Endor Labs REST Authentication Packages API

Endor Labs REST Authentication Policies API

Endor Labs REST Authentication Projects API

Endor Labs REST Authentication Scan Results API

Endor Labs REST API

Pricing Plans 1

Endor Labs Plans Pricing

Rate Limits 1

Endor Labs Rate Limits

FinOps 1

Endor Labs Finops

Security Posture 2

Endor Labs Authentication

Endor Labs Domain Security

Agentic Access 1

Endor Labs Agentic Access

Resources