Endor Labs website screenshot

Endor Labs

Endor Labs is a software supply chain security and application security platform built around reachability-based Software Composition Analysis (SCA), SBOM/VEX, secrets and SAST scanning, CI/CD discovery, and AI security. Its public REST API at https://api.endorlabs.com/v1 is a uniform resource API over namespaces, exposing projects, packages, findings, policies, scan results, and more, driven by the endorctl CLI.

Endor Labs publishes 7 APIs on the APIs.io network, including Authentication API, Findings API, Namespaces API, and 4 more. Tagged areas include Security, Software Supply Chain, SCA, Reachability, and AppSec.

Endor Labs’ developer surface includes authentication, documentation, engineering blog, and 8 more developer resources.

🌐 Visit website 📡 Source on GitHub
34.7/100 thin ▬ flat Agent 31/100 agent aware Full breakdown ↓
scored 2026-07-28 · rubric v0.6
AccessFreemiumSelf serveFree trial⚡ Free to try
7 APIs
SecuritySoftware Supply ChainSCAReachabilityAppSecAI Security

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-07-28 · rubric v0.6
Composite quality — 34.7/100 · thin
Contract Quality 13.8 / 25
Developer Ergonomics 4.3 / 20
Commercial Clarity 5.8 / 20
Operational Transparency 3.4 / 13
Governance 0.0 / 12
Discoverability 7.4 / 10
Agent readiness — 31/100 · agent aware
Machine-Readable Contract 18 / 18
Agentic Access Contract 10 / 10
MCP Server 0 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 0 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 7 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/endor-labs: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 7

Individual APIs this provider publishes, each with its own machine-readable definition.

Endor Labs Authentication API

Exchange API key and secret for a bearer access token.

Endor Labs Findings API

Detected problems requiring remediation.

Endor Labs Namespaces API

Tenants and child namespaces a token may access.

Endor Labs Packages API

PackageVersion and dependency resources.

Endor Labs Policies API

Governance rules over resources.

Endor Labs Projects API

Project resources - the root of scanned source code.

Endor Labs Scan Results API

Scan execution results and metrics.

Scroll for all 7

Open Collections 1

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

Endor Labs REST API

OPEN COLLECTION

Pricing Plans 1

Published pricing tiers and plan structures.

Endor Labs Plans Pricing

2 plans

PLANS

Rate Limits 1

Documented rate limits and quota policies.

Endor Labs Rate Limits

2 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

Endor Labs Finops

FINOPS

Security Posture 2

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Endor Labs Authentication

http · 1 scheme

SECURITY

Endor Labs Domain Security

TLSv1.3 · HSTS · DNSSEC · DMARC

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Endor Labs Agentic Access

16 operations · 5 acting

16 operations · 5 acting

AGENTIC

Resources

Documentation 1

Reference material describing how the API behaves

Documentation
Documentation

Agent Surfaces 1

MCP servers, agent skills, and machine-readable catalogs

AgenticAccess
AgenticAccess

Build 1

SDKs, sample code, and the tooling you integrate with

GitHubOrganization
GitHubOrganization

Access & Security 2

Authentication, authorization, and security posture

DomainSecurity
DomainSecurity
 Authentication
Authentication

Operate 1

Status, limits, changes, and where to get help

RateLimits
RateLimits

Commercial 2

Pricing, plans, and the legal terms of use

Plans
Plans
 FinOps
FinOps

Company 3

The organization behind the API

LinkedIn
LinkedIn
 Website
Website
 Blog
Blog

Source (apis.yml)

apis.yml Raw ↑ 
aid: endor-labs
url: https://raw.githubusercontent.com/api-evangelist/endor-labs/refs/heads/main/apis.yml
name: Endor Labs
kind: company
description: Endor Labs is a software supply chain security and application security platform built around reachability-based
  Software Composition Analysis (SCA), SBOM/VEX, secrets and SAST scanning, CI/CD discovery, and AI security. Its public REST
  API at https://api.endorlabs.com/v1 is a uniform resource API over namespaces, exposing projects, packages, findings, policies,
  scan results, and more, driven by the endorctl CLI.
accessModel:
  pricing: freemium
  onboarding: self-serve
  trial: true
  try_now: true
  public: false
  label: Freemium (free trial) · Self-serve signup
  confidence: high
  source:
  - plans
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/endor-labs.png
tags:
- Security
- Software Supply Chain
- SCA
- Reachability
- AppSec
- AI Security
created: '2026-06-20'
modified: '2026-06-20'
specificationVersion: '0.19'
apis:
- aid: endor-labs:endor-labs-authentication-api
  name: Endor Labs Authentication API
  description: Exchange API key and secret for a bearer access token.
  humanURL: https://docs.endorlabs.com/rest-api/
  baseURL: https://api.endorlabs.com/v1
  tags:
  - Authentication
  properties:
  - type: OpenAPI
    url: openapi/endor-labs-authentication-api-openapi.yml
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/getting-started/
  - type: APIReference
    url: https://docs.endorlabs.com/api/
  - type: PostmanCollection
    url: collections/endor-labs.postman_collection.json
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/data-model/resource-kinds/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/use-cases/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/authentication/
- aid: endor-labs:endor-labs-findings-api
  name: Endor Labs Findings API
  description: Detected problems requiring remediation.
  humanURL: https://docs.endorlabs.com/rest-api/
  baseURL: https://api.endorlabs.com/v1
  tags:
  - Findings
  properties:
  - type: OpenAPI
    url: openapi/endor-labs-findings-api-openapi.yml
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/getting-started/
  - type: APIReference
    url: https://docs.endorlabs.com/api/
  - type: PostmanCollection
    url: collections/endor-labs.postman_collection.json
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/data-model/resource-kinds/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/use-cases/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/authentication/
- aid: endor-labs:endor-labs-namespaces-api
  name: Endor Labs Namespaces API
  description: Tenants and child namespaces a token may access.
  humanURL: https://docs.endorlabs.com/rest-api/
  baseURL: https://api.endorlabs.com/v1
  tags:
  - Namespaces
  properties:
  - type: OpenAPI
    url: openapi/endor-labs-namespaces-api-openapi.yml
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/getting-started/
  - type: APIReference
    url: https://docs.endorlabs.com/api/
  - type: PostmanCollection
    url: collections/endor-labs.postman_collection.json
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/data-model/resource-kinds/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/use-cases/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/authentication/
- aid: endor-labs:endor-labs-packages-api
  name: Endor Labs Packages API
  description: PackageVersion and dependency resources.
  humanURL: https://docs.endorlabs.com/rest-api/
  baseURL: https://api.endorlabs.com/v1
  tags:
  - Packages
  properties:
  - type: OpenAPI
    url: openapi/endor-labs-packages-api-openapi.yml
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/getting-started/
  - type: APIReference
    url: https://docs.endorlabs.com/api/
  - type: PostmanCollection
    url: collections/endor-labs.postman_collection.json
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/data-model/resource-kinds/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/use-cases/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/authentication/
- aid: endor-labs:endor-labs-policies-api
  name: Endor Labs Policies API
  description: Governance rules over resources.
  humanURL: https://docs.endorlabs.com/rest-api/
  baseURL: https://api.endorlabs.com/v1
  tags:
  - Policies
  properties:
  - type: OpenAPI
    url: openapi/endor-labs-policies-api-openapi.yml
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/getting-started/
  - type: APIReference
    url: https://docs.endorlabs.com/api/
  - type: PostmanCollection
    url: collections/endor-labs.postman_collection.json
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/data-model/resource-kinds/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/use-cases/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/authentication/
- aid: endor-labs:endor-labs-projects-api
  name: Endor Labs Projects API
  description: Project resources - the root of scanned source code.
  humanURL: https://docs.endorlabs.com/rest-api/
  baseURL: https://api.endorlabs.com/v1
  tags:
  - Projects
  properties:
  - type: OpenAPI
    url: openapi/endor-labs-projects-api-openapi.yml
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/getting-started/
  - type: APIReference
    url: https://docs.endorlabs.com/api/
  - type: PostmanCollection
    url: collections/endor-labs.postman_collection.json
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/data-model/resource-kinds/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/use-cases/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/authentication/
- aid: endor-labs:endor-labs-scan-results-api
  name: Endor Labs Scan Results API
  description: Scan execution results and metrics.
  humanURL: https://docs.endorlabs.com/rest-api/
  baseURL: https://api.endorlabs.com/v1
  tags:
  - Scan Results
  properties:
  - type: OpenAPI
    url: openapi/endor-labs-scan-results-api-openapi.yml
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/getting-started/
  - type: APIReference
    url: https://docs.endorlabs.com/api/
  - type: PostmanCollection
    url: collections/endor-labs.postman_collection.json
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/data-model/resource-kinds/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/using-the-rest-api/use-cases/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/
  - type: Documentation
    url: https://docs.endorlabs.com/rest-api/authentication/
common:
- type: AgenticAccess
  url: agentic-access/endor-labs-agentic-access.yml
- type: DomainSecurity
  url: security/endor-labs-domain-security.yml
- type: Authentication
  url: authentication/endor-labs-authentication.yml
- type: GitHubOrganization
  url: https://github.com/endorlabs
- type: LinkedIn
  url: https://www.linkedin.com/company/endor-labs
- type: Website
  url: https://www.endorlabs.com
- type: Documentation
  url: https://docs.endorlabs.com/rest-api/
- type: Plans
  url: plans/endor-labs-plans-pricing.yml
- type: RateLimits
  url: rate-limits/endor-labs-rate-limits.yml
- type: FinOps
  url: finops/endor-labs-finops.yml
- url: https://www.endorlabs.com/learn/rss.xml
  type: Blog
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com