# Jsmon

**Canonical:** https://apis.io/providers/jsmon-sh/  
**Website:** https://jsmon.sh/  
**APIs profiled:** 2

Jsmon provides an AI‑powered External Attack Surface Management (EASM) platform that gives security teams visibility into exposed JavaScript, hidden APIs, misconfigured cloud assets and shadow infrastructure. Their mission is to make the internet’s external attack surface visible and actionable for everyone from solo bug hunters to Fortune 500 security operations centers.

## Kin Score — 40.3 / 100 (developing)

Scored 2026-11-13 under rubric 0.28.0.

| Facet | Score |
|---|---|
| Discoverability | 67.9 |
| Contract Quality | 19.0 |
| Contract Governance | 22.0 |
| Operational Transparency | 28.6 |
| Developer Ergonomics | 40.5 |
| Access Clarity | 61.7 |

Regulatory layer — **Horizontal (data, software, accessibility, platform)**: 28.2 (matched via fallback).

## Agent readiness — 36.7 (agent-ready)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | served |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | yes |
| Consent Identity | no |
| Agent Card | conformant |
| Dry Run Mode | no |
| Delegated Identity | served |
| Protected Resource Metadata | no |
| Dynamic Client Registration | yes |
| Agentic Commerce | no |
| Pagination Ratio | na |
| Operation Distinctiveness | na |
| MCP Tool Quality | na |

## Access

Paid (free trial) — onboarding: unknown, pricing: paid, trial: yes (confidence: medium).

## APIs (2)

- **Jsmon API** — Jsmon API provides endpoints for scanning and managing external attack surface data as documented in the API reference.
- **Jsmon API** — Jsmon API as documented publicly: 1 operations. Contract generated from the documentation by API Evangelist (2026-11-13); not the provider's own document.

## Security (3)

- **Jsmon Authentication** — 1 scheme
- **Jsmon Domain Security** — TLSv1.3 · HSTS · DMARC
- **Jsmon Vulnerability Disclosure** — security.txt · contact published

## Plans (1)

- **Jsmon Plans Pricing**

## Tags

Security, Attack Surface, Artificial Intelligence, Monitoring, Platform

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/jsmon-sh/). Scores are computed from the provider's own public artifacts under a published rubric.