# Incandor

**Canonical:** https://apis.io/providers/incandor/  
**Website:** https://www.incandor.com  
**APIs profiled:** 0

Incandor is a San Francisco based Y Combinator (Spring 2026) startup building behavioral intelligence infrastructure for fraud and abuse detection. Rather than relying on identity verification at account creation, Incandor constructs a behavioral map of every user on a platform from how they physically interact with an app or website — mouse dynamics, keystroke timing, scroll patterns, and on mobile how a device is held. It requires no fraud labels and no enrollment period, working from the first session. At the individual level it identifies account takeovers with greater than 99 percent accuracy; at the population level it separates out coordinated fraud rings, mule operators, shared operators, bots and agents, and coerced or duress sessions. Incandor is delivered as a programmable API and a client-side telemetry SDK rather than a black-box risk score, letting fraud teams combine behavioral signals with their own transaction history, customer records, and business rules. It collects only behavioral signals — not what users type, read, or view — keeping user data private by design. The company was founded by Matthew Yekell (CEO) and Luc Rosenzweig (CTO), both Stanford CS graduates. This profile is maintained by the API Evangelist network; the developer platform is currently early access.

## Kin Score — 6.3 / 100 (minimal)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+0.0 from 6.3).

| Facet | Score |
|---|---|
| Discoverability | 50.0 |
| Contract Quality | 0.0 |
| Governance | 0.0 |
| Contract Governance | 0.0 |
| Operational Transparency | 2.6 |
| Developer Ergonomics | 4.8 |
| Commercial Clarity | 0.0 |
| Access Clarity | 0.0 |

## Agent readiness — 0.0 (human-only)

| Dimension | Value |
|---|---|
| Spec Presence | no |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | no |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Unknown — onboarding: unknown, pricing: unknown, trial: no (confidence: low).

## Security (1)

- **Incandor Domain Security** — TLSv1.3 · DMARC

## Tags

Company, Fraud Prevention, Anti-Fraud, Behavioral Biometrics, Account Takeover, Security, Fintech, Machine-Learning

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/incandor/). Scores are computed from the provider's own public artifacts under a published rubric.