# KnoxCall

**Canonical:** https://apis.io/providers/knoxcall/  
**Website:** https://knoxcall.com/  
**APIs profiled:** 1

KnoxCall provides a secure API key management platform that stores third‑party API keys (such as Stripe, OpenAI, and many others) and injects them at egress. This enables applications, CI pipelines, and AI agents to use revocable tokens instead of permanent credentials, reducing risk of key leakage. The service offers features like token revocation, usage monitoring, and integration with popular developer tools, helping teams protect their secret keys while maintaining seamless access to external services.

## Kin Score — 73.7 / 100 (exemplar)

Scored 2026-10-23 under rubric 0.25.0.

| Facet | Score |
|---|---|
| Discoverability | 66.1 |
| Contract Quality | 74.0 |
| Contract Governance | 35.6 |
| Operational Transparency | 55.3 |
| Developer Ergonomics | 70.8 |
| Access Clarity | 92.1 |

Regulatory layer — **Horizontal (data, software, accessibility, platform)**: 45.1 (matched via fallback).

## Agent readiness — 63.3 (agent-native)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| Reversibility Documented | no |
| MCP Server | documented |
| Auth Clarity | served |
| Idempotency | verified |
| Error Semantics | verified |
| OpenAPI Examples | partial |
| Rate Limit Signal | verified |
| Event Surface Described | yes |
| Agent Skills | derived |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | conformant |
| Dry Run Mode | no |
| Delegated Identity | served |
| Protected Resource Metadata | verified |
| Dynamic Client Registration | no |
| Agentic Commerce | no |
| Pagination Ratio | partial |
| Operation Distinctiveness | distinct |

## APIs (24)

- **KnoxCall Account API** — Retrieve account information and usage metrics.
- **KnoxCall Agents API** — Manage BYO server agents (self-hosted data-plane / tunnel agents).
- **KnoxCall AI Gateway API** — Manage AI egress gateways, their agents, and capability (phantom) tokens, plus cost/token spend rollups and FinOps exports.
- **KnoxCall API Keys API** — Create and revoke API keys for programmatic access.
- **KnoxCall Audit Logs API** — Query the immutable audit trail of all API actions.
- **KnoxCall Client Tokens API** — Single-use client-side capability tokens (`kct_` prefix) that let a browser exchange one bound ciphertext or vault token for its plaintext.
- **KnoxCall Clients API** — Manage authorized clients (users or servers) with IP-based access control.
- **KnoxCall Crypto Keys API** — Transit encryption keys — encrypt, decrypt, rewrap, sign, verify, and issue JWTs without key material ever leaving KnoxCall.
- **KnoxCall Dynamic DB Credentials API** — Just-in-time database credentials — register connections and roles, then mint short-lived leased users on demand.
- **KnoxCall Encryption API** — Portable structure-preserving encryption — encrypt any JSON into storable `kc:` ciphertext strings and decrypt them later.
- **KnoxCall Environments API** — Manage deployment environments (e.g. production, staging) for route configuration overrides.
- **KnoxCall Ephemeral Proxy API** — One-shot proxy that resolves vault-token template expressions on the wire — no pre-configured route required.
- **KnoxCall OAuth Clients API** — Manage OAuth 2.1 clients used to mint access tokens for the API.
- **KnoxCall Opportunities API** — Suggestions to turn detected outbound API usage (agent-observed or gateway-traffic) into a durable route; accept promotes to a route + secret binding.
- **KnoxCall PKI API** — Private certificate authority — roots, issuing roles, leaf certificates, revocation, and CRLs.
- **KnoxCall Request Logs API** — The per-call proxy request log, and Merkle inclusion proofs that make an anchored entry provable to a third party.
- **KnoxCall Routes API** — Manage proxy routes that forward API requests to upstream targets.
- **KnoxCall Secrets API** — Manage encrypted secrets injected into route headers and bodies.
- **KnoxCall Signup API** — Headless account creation — the only unauthenticated endpoint, designed so scripts and AI agents can onboard without a browser.
- **KnoxCall Vaults API** — Data tokenization vaults — swap sensitive values for format-preserving tokens and detokenize them under audit.
- **KnoxCall Webhook Events API** — The Webhook Events API from KnoxCall — 0 operation(s) for webhook events.
- **KnoxCall Webhooks API** — Manage webhook subscriptions for real-time event notifications.
- **KnoxCall Workflows API** — Create, manage, and run workflows. Executions are asynchronous; poll executions or subscribe a webhook to workflow.execution.completed|failed.
- **KnoxCall Wrap Credentials API** — Escrow a third-party provider key into KnoxCall custody so it leaves your codebase, host-pinned; the ephemeral proxy injects it under X-Knox-Upstream-Auth-Secret.

## Agentic access (1)

- **Knoxcall Agentic Access** — 199 operations · 126 acting · 14 human-in-the-loop

## Security (4)

- **Knoxcall Authentication** — 1 scheme
- **Knoxcall Domain Security** — TLSv1.3 · HSTS · DMARC
- **Knoxcall Vulnerability Disclosure** — security.txt · contact published
- **Knoxcall Trust Center** — SOC 2, ISO 27001, ISO 27017, ISO 27018, PCI DSS, HIPAA, GDPR

## Plans (1)

- **Knoxcall Plans Pricing**

## Tags

Company, API Management, Security, DevOps, AI Agents

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/knoxcall/). Scores are computed from the provider's own public artifacts under a published rubric.