Google Cloud Binary Authorization

Google Cloud Binary Authorization is a deploy-time security control that ensures only trusted container images are deployed on Google Kubernetes Engine (GKE), Cloud Run, and Anthos clusters. It uses attestation-based policies to validate that container images have been signed by trusted authorities before allowing deployment, helping enforce software supply chain security.

Google Cloud Binary Authorization publishes 3 APIs on the APIs.io network: Attestations API, Attestors API, and Policy API. Tagged areas include Attestation, Container Security, DevSecOps, Kubernetes, and Policy Enforcement.

The Google Cloud Binary Authorization catalog on APIs.io includes 1 JSON-LD context and 1 Spectral governance ruleset.

Google Cloud Binary Authorization’s developer surface includes authentication, developer portal, getting-started guide, documentation, pricing, support, engineering blog, and 11 more developer resources.

🌐 Visit website 📡 Source on GitHub

62.4/100 strong ▬ flat Agent 31/100 agent aware Full breakdown ↓
scored 2026-07-28 · rubric v0.6

AccessFreemiumSelf serve⚡ Free to try

3 APIs

AttestationContainer SecurityDevSecOpsKubernetesPolicy EnforcementSupply Chain Security

Kin Score

Kin Score How this is scored →
scored 2026-07-28 · rubric v0.6

Composite quality — 62.4/100 · strong

Contract Quality 17.0 / 25

Developer Ergonomics 10.0 / 20

Commercial Clarity 14.2 / 20

Operational Transparency 6.8 / 13

Governance 7.0 / 12

Discoverability 7.4 / 10

Agent readiness — 31/100 · agent aware

Machine-Readable Contract 18 / 18

Agentic Access Contract 10 / 10

MCP Server 0 / 12

Machine-Readable Auth 10 / 10

Idempotency 0 / 9

Stable Error Semantics 0 / 8

Request/Response Examples 0 / 7

Rate-Limit Signaling 7 / 7

Typed Event Surface 0 / 6

Agent Skills 0 / 5

Well-Known Catalog 0 / 4

Consent & Bot Identity 0 / 3

A2A Agent Card 0 / 8

Dry-Run / Simulate Mode 0 / 4

Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/google-cloud-binary-authorization: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 3

Individual APIs this provider publishes, each with its own machine-readable definition.

Rate Limits 1

Documented rate limits and quota policies.

Google Cloud Binary Authorization Rate Limits

5 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

JSON Schema 1

Standalone JSON Schema definitions for this provider's data models.

Scopes 1

OAuth scopes governing access to this provider's APIs.

Google Cloud Binary Authorization Scopes

1 scope · authorizationCode

1 scopes

SCOPES

Get Started 2

Portal, sign-up, and the first successful call

Portal

Portal

GettingStarted

GettingStarted

Documentation 1

Reference material describing how the API behaves

Documentation

Documentation

Agent Surfaces 1

MCP servers, agent skills, and machine-readable catalogs

AgenticAccess

AgenticAccess

Design & Contract 1

Pagination, idempotency, versioning, errors, and events

JSONLD

JSONLD

Build 2

SDKs, sample code, and the tooling you integrate with

PostmanWorkspace

PostmanWorkspace

GitHubOrganization

GitHubOrganization

Access & Security 5

Authentication, authorization, and security posture

VulnerabilityDisclosure

VulnerabilityDisclosure

DomainSecurity

Authentication

OAuthScopes

Authentication

Operate 2

Status, limits, changes, and where to get help

StatusPage

StatusPage

Support

Support

Commercial 3

Pricing, plans, and the legal terms of use

Pricing

Pricing

TermsOfService

TermsOfService

PrivacyPolicy

PrivacyPolicy

Company 1

The organization behind the API

Blog

Blog

Source (apis.yml)

aid: google-cloud-binary-authorization
name: Google Cloud Binary Authorization
description: Google Cloud Binary Authorization is a deploy-time security control that ensures only trusted container images
  are deployed on Google Kubernetes Engine (GKE), Cloud Run, and Anthos clusters. It uses attestation-based policies to validate
  that container images have been signed by trusted authorities before allowing deployment, helping enforce software supply
  chain security.
accessModel:
  pricing: freemium
  onboarding: self-serve
  trial: false
  try_now: true
  public: false
  label: Freemium · Self-serve signup
  confidence: high
  source:
  - plans
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/google-cloud-binary-authorization.png
url: https://raw.githubusercontent.com/api-evangelist/google-cloud-binary-authorization/refs/heads/main/apis.yml
created: '2026-03-13'
modified: '2026-05-19'
specificationVersion: '0.19'
type: Index
tags:
- Attestation
- Container Security
- DevSecOps
- Kubernetes
- Policy Enforcement
- Supply Chain Security
apis:
- aid: google-cloud-binary-authorization:google-cloud-binary-authorization-attestations-api
  name: Google Cloud Binary Authorization Attestations API
  description: Operations for validating attestations
  humanURL: https://cloud.google.com/binary-authorization/docs
  baseURL: https://binaryauthorization.googleapis.com
  tags:
  - Attestations
  properties:
  - type: OpenAPI
    url: openapi/google-cloud-binary-authorization-attestations-api-openapi.yml
  - type: Documentation
    url: https://cloud.google.com/binary-authorization/docs/reference/rest
  - type: Authentication
    url: https://cloud.google.com/binary-authorization/docs/reference/rest#authentication
  - type: JSONSchema
    url: json-schema/google-cloud-binary-authorization-policy-schema.json
- aid: google-cloud-binary-authorization:google-cloud-binary-authorization-attestors-api
  name: Google Cloud Binary Authorization Attestors API
  description: Operations for managing attestors
  humanURL: https://cloud.google.com/binary-authorization/docs
  baseURL: https://binaryauthorization.googleapis.com
  tags:
  - Attestors
  properties:
  - type: OpenAPI
    url: openapi/google-cloud-binary-authorization-attestors-api-openapi.yml
  - type: Documentation
    url: https://cloud.google.com/binary-authorization/docs/reference/rest
  - type: Authentication
    url: https://cloud.google.com/binary-authorization/docs/reference/rest#authentication
  - type: JSONSchema
    url: json-schema/google-cloud-binary-authorization-policy-schema.json
- aid: google-cloud-binary-authorization:google-cloud-binary-authorization-policy-api
  name: Google Cloud Binary Authorization Policy API
  description: Operations for managing the Binary Authorization policy
  humanURL: https://cloud.google.com/binary-authorization/docs
  baseURL: https://binaryauthorization.googleapis.com
  tags:
  - Policy
  properties:
  - type: OpenAPI
    url: openapi/google-cloud-binary-authorization-policy-api-openapi.yml
  - type: Documentation
    url: https://cloud.google.com/binary-authorization/docs/reference/rest
  - type: Authentication
    url: https://cloud.google.com/binary-authorization/docs/reference/rest#authentication
  - type: JSONSchema
    url: json-schema/google-cloud-binary-authorization-policy-schema.json
common:
- type: PostmanWorkspace
  url: https://www.postman.com/kinlaneapi/google-cloud-binary-authorization/overview
- type: AgenticAccess
  url: agentic-access/google-cloud-binary-authorization-agentic-access.yml
- type: VulnerabilityDisclosure
  url: security/google-cloud-binary-authorization-vulnerability-disclosure.yml
- type: DomainSecurity
  url: security/google-cloud-binary-authorization-domain-security.yml
- type: Authentication
  url: authentication/google-cloud-binary-authorization-authentication.yml
- type: OAuthScopes
  url: scopes/google-cloud-binary-authorization-scopes.yml
- type: GitHubOrganization
  url: https://github.com/GoogleCloudPlatform
- type: Portal
  url: https://cloud.google.com/binary-authorization
- type: GettingStarted
  url: https://cloud.google.com/binary-authorization/docs/getting-started-cli
- type: Documentation
  url: https://cloud.google.com/binary-authorization/docs
- type: Authentication
  url: https://cloud.google.com/binary-authorization/docs/reference/rest#authentication
- type: Pricing
  url: https://cloud.google.com/binary-authorization/pricing
- type: TermsOfService
  url: https://cloud.google.com/terms
- type: PrivacyPolicy
  url: https://policies.google.com/privacy
- type: StatusPage
  url: https://status.cloud.google.com
- type: Support
  url: https://cloud.google.com/binary-authorization/docs/support
- type: JSONLD
  url: json-ld/google-cloud-binary-authorization-context.jsonld
- type: Integrations
  url: https://cloud.google.com/marketplace
- url: https://docs.cloud.google.com/feeds/binary-authorization-release-notes.xml
  type: Blog
integrations:
- name: Become a Partner
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com

Google Cloud Binary Authorization

APIs 3

Postman Collections 3

Open Collections 1

Pricing Plans 1