Infra

Infra is open-source authentication and access management for infrastructure. It grants short-lived, identity-based access to Kubernetes clusters, servers, and databases by connecting an organization's OIDC identity providers (Okta, Google, Azure AD, and others) to fine-grained grants on destination resources. Users and groups receive least-privilege roles, access keys are issued for CI/CD and API automation, and the `infra` CLI lets engineers list and switch into destinations. The project was originally added to the API Evangelist network as an 8vc portfolio lead; the hosted service at api.infrahq.com has since wound down (infrahq.com now redirects to the GitHub repository), but the source, OpenAPI spec, CLI, and Go client remain available under the Elastic License 2.0 (core) and MIT (SDK and connectors). Final release: v0.21.0.

Infra publishes 1 API on the APIs.io network. Tagged areas include Company, Identity, Access Management, Authentication, and Authorization.

Infra’s developer surface includes documentation, API reference, getting-started guide, CLI, authentication, changelog, and 17 more developer resources.

🌐 Visit website 📡 Source on GitHub
32.7/100 thin Agent 39/100 agent aware Full breakdown ↓
scored 2026-07-20 · rubric v0.4
1 APIs 0 Features
CompanyIdentityAccess ManagementAuthenticationAuthorizationInfrastructureKubernetesOIDCSecurityOpen Source

API Rating

API Evangelist API Evangelist Rating How this is scored →
scored 2026-07-20 · rubric v0.4
Composite quality — 32.7/100 · thin
Contract Quality 9.4 / 25
Developer Ergonomics 11.3 / 20
Commercial Clarity 0.0 / 20
Operational Transparency 2.7 / 13
Governance 0.0 / 12
Discoverability 9.3 / 10
Agent readiness — 39/100 · agent aware
Machine-Readable Contract 18 / 18
Agentic Access Contract 0 / 15
MCP Server 0 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 8 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 0 / 6
Agent Skills 5 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/infra: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs

Infra API

Manage users, groups, grants, destinations, identity providers, and access keys. Auth is `Authorization: Bearer ` plus a required `Infra-Version` header; pagination ...

Arazzo Workflows

_Index

ARAZZO

Create a user and issue an access key

Create an identity for automation and issue an access key it can use for CI/CD or API calls.

ARAZZO

Onboard a user and grant destination access

Create a user, put them in a group, and grant the group access to a destination.

ARAZZO

Resources

Get Started 1

Portal, sign-up, and the first successful call

GettingStarted
GettingStarted

Documentation 3

Reference material describing how the API behaves

Documentation
Documentation
 APIReference
APIReference
 OpenAPI
OpenAPI

Agent Surfaces 2

MCP servers, agent skills, and machine-readable catalogs

LLMsTxt
LLMsTxt
 AgentSkill
AgentSkill

Design & Contract 7

Pagination, idempotency, versioning, errors, and events

Conventions
Conventions
 ErrorCatalog
ErrorCatalog
 Lifecycle
Lifecycle
 Conformance
Conformance
 DataModel
DataModel
 Arazzo
Arazzo
 Arazzo
Arazzo

Scroll for all 7

Build 5

SDKs, sample code, and the tooling you integrate with

GitHubOrganization
GitHubOrganization
 SourceCode
SourceCode
 Packages
Packages
 SDKs
SDKs
 CLI
CLI

Access & Security 2

Authentication, authorization, and security posture

Authentication
Authentication
 DomainSecurity
DomainSecurity

Operate 1

Status, limits, changes, and where to get help

ChangeLog
ChangeLog

Company 1

The organization behind the API

Website
Website

Other 1

Properties that don't map to a standard resource type

Overlay
Overlay

Source (apis.yml)

apis.yml Raw ↑ 
aid: infra
name: Infra
description: 'Infra is open-source authentication and access management for infrastructure. It grants short-lived, identity-based
  access to Kubernetes clusters, servers, and databases by connecting an organization''s OIDC identity providers (Okta, Google,
  Azure AD, and others) to fine-grained grants on destination resources. Users and groups receive least-privilege roles, access
  keys are issued for CI/CD and API automation, and the `infra` CLI lets engineers list and switch into destinations. The
  project was originally added to the API Evangelist network as an 8vc portfolio lead; the hosted service at api.infrahq.com
  has since wound down (infrahq.com now redirects to the GitHub repository), but the source, OpenAPI spec, CLI, and Go client
  remain available under the Elastic License 2.0 (core) and MIT (SDK and connectors). Final release: v0.21.0.'
url: https://raw.githubusercontent.com/api-evangelist/infra/refs/heads/main/apis.yml
x-type: company
x-source: vc-portfolio
x-backed-by:
- 8vc
x-tier: stub
x-tier-reason: portfolio-lead
specificationVersion: '0.20'
created: '2026-07-17'
modified: '2026-07-19'
tags:
- Company
- Identity
- Access Management
- Authentication
- Authorization
- Infrastructure
- Kubernetes
- OIDC
- Security
- Open Source
image: https://avatars.githubusercontent.com/u/85984819
apis:
- name: Infra API
  description: 'Manage users, groups, grants, destinations, identity providers, and access keys. Auth is `Authorization: Bearer
    <access key>` plus a required `Infra-Version` header; pagination is page/limit; errors use a {code,message,fieldErrors}
    envelope.'
  humanURL: https://github.com/infrahq/infra/blob/main/docs/reference/api.md
  baseURL: https://api.infrahq.com
  tags:
  - Identity
  - Access Management
  - OIDC
  properties:
  - type: OpenAPI
    url: openapi/infra-openapi-original.json
  - type: APIReference
    url: https://github.com/infrahq/infra/blob/main/docs/reference/api.md
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: Website
  url: https://infrahq.com
- type: Documentation
  url: https://github.com/infrahq/infra/tree/main/docs
- type: APIReference
  url: https://github.com/infrahq/infra/blob/main/docs/reference/api.md
- type: GettingStarted
  url: https://github.com/infrahq/infra/blob/main/docs/quickstart.md
- type: GitHubOrganization
  url: https://github.com/infrahq
- type: SourceCode
  url: https://github.com/infrahq/infra
- type: OpenAPI
  url: openapi/infra-openapi-original.json
- type: Packages
  url: packages/infra-packages.yml
- type: SDKs
  url: packages/infra-packages.yml
- type: CLI
  url: cli/infra-cli.yml
- type: Authentication
  url: authentication/infra-authentication.yml
- type: Conventions
  url: conventions/infra-conventions.yml
- type: ErrorCatalog
  url: errors/infra-problem-types.yml
- type: Lifecycle
  url: lifecycle/infra-lifecycle.yml
- type: ChangeLog
  url: changelog/infra-changelog.yml
- type: Conformance
  url: conformance/infra-conformance.yml
- type: DataModel
  url: data-model/infra-data-model.yml
- type: DomainSecurity
  url: security/infra-domain-security.yml
- type: Overlay
  url: overlays/infra-openapi-overlay.yaml
- type: LLMsTxt
  url: llms/infra-llms.txt
- type: AgentSkill
  url: skills/_index.yml
- type: Arazzo
  name: Onboard a user and grant destination access
  url: arazzo/infra-onboard-and-grant.yml
- type: Arazzo
  name: Create a user and issue an access key
  url: arazzo/infra-issue-access-key.yml
x-enrichment:
  date: '2026-07-19'
  status: backfilled
  pass: local-v1
  note: backfilled from .gitignore signal + verified work evidence