Gowalla
Gowalla is a location-based social check-in application that lets people keep up with their friends in the real world by checking in at places, sharing their location, and collecting stamps and passport-style travel memories. Originally launched in 2007 as a pioneering location-based social game, Gowalla was acquired by Facebook in 2011 and wound down in 2012, then relaunched by founder Josh Williams in March 2023 as an iOS app before active development was paused in April 2023. The app remains available on the App Store and continues to operate on a limited basis, recruiting early testers through its Street Team program. Gowalla historically published a Check-In API with OAuth 2 support (2010), but no public developer API, SDK, or documentation is available today. This profile was surfaced as a portfolio company of GV (Google Ventures) and added to the API Evangelist network as a consumer-sector lead.
Gowalla is profiled on the APIs.io network. Tagged areas include Company, Consumer, Location, Social, and Check-in.
Kin Score
Kin Score
How this is scored →scored 2026-11-06 · rubric v0.27.0
It updates itself when the score changes. Paste this where you link to your API docs:
<a href="https://apis.io/providers/gowalla/"><img src="https://apis.io/badge/gowalla/card.svg" alt="Gowalla on APIs.io — Kin Score by API Evangelist"></a>Other styles, a README pill and a shields.io endpoint are on the badge page.
- Machine-Readable Contract +18 pts — api_specs includes an OpenAPI document
- MCP Server +12 pts — deployment.mode + probe verdict on the mcp/ manifest, not the pointer; an unprobed slug falls back to authorship
- Agentic Access Contract +10 pts — agentic_access artifact present (x-agentic-access), graded by author
- Machine-Readable Auth +10 pts — a served openid-configuration/oauth-authorization-server carrying `issuer` (served), else the securitySchemes class in the provider OpenAPIs — bound (mutualTLS, DPoP, Signature) > negotiable (oauth2 authorizationCode/clientCredentials, openIdConnect) > bearer (http bearer, apiKey)
- Idempotency +9 pts — OpenAPI mutating operations declare an idempotency key — a header, a request-body property, or a named de-duplication token whose own description says so (verified); else common[].type matches /idempoten/i (documented)
- Stable Error Semantics +8 pts — OpenAPI $refs a shared error schema across 4xx/5xx responses (verified), else common[].type includes ErrorCatalog / ErrorCodes / DeclineCodes
- Contract Quality scores 0.0 — up to +25.0 composite points
- Developer Ergonomics scores 0.0 — up to +20.0 composite points
- Access Clarity scores 0.0 — up to +20.0 composite points
Markets this provider is in provisional
The Kin Score Market layer reads a provider inside its market: its position, and how deep its integrations go. Depth is only comparable within a position. Provisional and unweighted: not part of the Kin Score or agent readiness.
| Market | Position | Depth | Registered MCP server | Declares compatibility |
|---|---|---|---|---|
| Mobile SDK Publishers (Play SDK Index, CocoaPods, ADA certification) | undeclared | - | - | - |
| Overture Maps Foundation (members + data contributors) | undeclared | - | - | - |
Registered MCP server and declares compatibility are report only — not weighted. Undeclared means we found nothing we can read, so there is no number: we never infer integrations.
Security Posture 1
Authentication, domain security, vulnerability disclosure, and trust-center signals.
Resources
Access & Security 1
Authentication, authorization, and security posture
Company 1
The organization behind the API
Other 3
Properties that don't map to a standard resource type
Source (apis.yml)
Work with this as data
Every provider here is available over the APIs.io API and to AI agents over MCP.