# Immunefi

**Canonical:** https://apis.io/providers/immunefi/  
**Website:** https://immunefi.com/  
**APIs profiled:** 1

Immunefi is a crowdsourced web3 security platform that operates the largest onchain bug bounty ecosystem, connecting security researchers with blockchain protocols and rewarding them for responsibly disclosed vulnerabilities. Alongside bug bounties it runs audit competitions and attackathons, PR reviews, Safe Harbor agreements, onchain monitoring, and Magnus, a unified security command center. Immunefi authors and versions the Immunefi Vulnerability Severity Classification System, the severity taxonomy most web3 bounty programs are written against. Its only public machine-readable surface is an unauthenticated JSON endpoint at immunefi.com/public-api/bounties.json that returns the full catalog of live bug bounty programs, including assets in scope, reward tables by severity, impacts, ecosystems and program metadata.

## Kin Score — 29.1 / 100 (thin)

Scored 2026-08-25 under rubric 0.14.0. Trend: flat (-0.7 from 29.8).

| Facet | Score |
|---|---|
| Discoverability | 68.5 |
| Contract Quality | 42.7 |
| Governance | 4.5 |
| Contract Governance | 4.5 |
| Operational Transparency | 21.1 |
| Developer Ergonomics | 7.1 |
| Commercial Clarity | 34.2 |
| Access Clarity | 34.2 |

## Agent readiness — 19.8 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | no |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | documented |
| Event Surface Described | yes |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |
| Delegated Identity | no |
| Protected Resource Metadata | no |
| Dynamic Client Registration | no |
| Agentic Commerce | no |

## APIs (1)

- **Immunefi Bug Bounty Programs API** — An unauthenticated, read-only JSON endpoint published on Immunefi's own domain that returns the complete catalog of bug bounty programs listed on the platform. Each record carri...

## Security (3)

- **Immunefi Authentication** — 0 schemes
- **Immunefi Domain Security** — TLSv1.3 · HSTS · DMARC
- **Immunefi Vulnerability Disclosure** — disclosure policy published

## Plans (1)

- **Immunefi Plans Pricing**

## Tags

Company, Security, Bug Bounty, Vulnerability Disclosure, Web3, Blockchain, Smart Contracts, Application Security, Cryptocurrency, Crowdsourced Security

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/immunefi/). Scores are computed from the provider's own public artifacts under a published rubric.