Kyverno website screenshot

Kyverno

Kyverno is a Kubernetes native policy management engine for security, automation, and governance. It uses Kubernetes admission controllers to validate, mutate, and generate configurations using policies written as Kubernetes resources.

Kyverno publishes 7 APIs on the APIs.io network, including ClusterPolicyReports API, Health API, Namespaces API, and 4 more. Tagged areas include Cloud Native, Governance, Kubernetes, Policy Management, and Security.

The Kyverno catalog on APIs.io includes 1 JSON-LD context and 1 Spectral governance ruleset.

Kyverno’s developer surface includes documentation, getting-started guide, changelog, engineering blog, and 10 more developer resources.

🌐 Visit website 📡 Source on GitHub
47.6/100 developing ▼ -5.4 Agent 32/100 agent aware Full breakdown ↓
scored 2026-07-28 · rubric v0.6
AccessFreemium
9 APIs
Cloud NativeGovernanceKubernetesPolicy ManagementSecurity

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-07-28 · rubric v0.6
Composite quality — 47.6/100 · developing
Contract Quality 14.2 / 25
Developer Ergonomics 5.2 / 20
Commercial Clarity 7.9 / 20
Operational Transparency 6.8 / 13
Governance 7.0 / 12
Discoverability 6.5 / 10
Agent readiness — 32/100 · agent aware
Machine-Readable Contract 18 / 18
Agentic Access Contract 10 / 10
MCP Server 0 / 12
Machine-Readable Auth 0 / 10
Idempotency 0 / 9
Stable Error Semantics 8 / 8
Request/Response Examples 7 / 7
Rate-Limit Signaling 7 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/kyverno: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 9

Individual APIs this provider publishes, each with its own machine-readable definition.

Kyverno

Kyverno is a Kubernetes-native policy engine that runs as a dynamic admission controller to validate, mutate, and generate Kubernetes resources using policies written as Kuberne...

Kyverno CLI

The Kyverno CLI provides a command-line interface for applying and testing Kyverno policies against Kubernetes resources outside of a cluster. It can be used in CI/CD pipelines ...

Kyverno ClusterPolicyReports API

Cluster-scoped policy report endpoints

Kyverno Health API

Health and readiness endpoints

Kyverno Namespaces API

Namespace listing endpoints

Kyverno Policies API

Policy listing and detail endpoints

Kyverno PolicyReports API

Namespaced policy report endpoints

Kyverno Results API

Policy result query endpoints

Kyverno Sources API

Policy source listing endpoints

Scroll for all 9

Open Collections 1

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

Kyverno Policy Reporter API

OPEN COLLECTION

Pricing Plans 1

Published pricing tiers and plan structures.

Kyverno Plans Pricing

3 plans

PLANS

Rate Limits 1

Documented rate limits and quota policies.

Kyverno Rate Limits

5 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

Kyverno Finops

FINOPS

Semantic Vocabularies 1

JSON-LD contexts and semantic vocabularies used across these APIs.

Kyverno Context

11 classes · 47 properties

JSON-LD

Spectral Rules 1

Spectral governance rulesets for linting and validating these APIs.

Kyverno API Rules

6 rules · 4 warnings 2 info

SPECTRAL

JSON Schema 1

Standalone JSON Schema definitions for this provider's data models.

Kyverno Policy

5 properties

JSON SCHEMA

Security Posture 1

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Kyverno Domain Security

TLSv1.3 · HSTS

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Kyverno Agentic Access

13 operations

13 operations · 0 acting

AGENTIC

Resources

Get Started 1

Portal, sign-up, and the first successful call

GettingStarted
GettingStarted

Documentation 2

Reference material describing how the API behaves

Documentation
Documentation
 JSONSchema
JSONSchema

Agent Surfaces 2

MCP servers, agent skills, and machine-readable catalogs

AgenticAccess
AgenticAccess
 LlmsText
LlmsText

Design & Contract 1

Pagination, idempotency, versioning, errors, and events

JSONLD
JSONLD

Build 2

SDKs, sample code, and the tooling you integrate with

GitHubOrganization
GitHubOrganization
 GitHubRepository
GitHubRepository

Access & Security 1

Authentication, authorization, and security posture

DomainSecurity
DomainSecurity

Operate 2

Status, limits, changes, and where to get help

ChangeLog
ChangeLog
 Community
Community

Company 3

The organization behind the API

LinkedIn
LinkedIn
 Website
Website
 Blog
Blog

Source (apis.yml)

apis.yml Raw ↑ 
aid: kyverno
name: Kyverno
description: Kyverno is a Kubernetes native policy management engine for security, automation, and governance. It uses Kubernetes
  admission controllers to validate, mutate, and generate configurations using policies written as Kubernetes resources.
type: Index
accessModel:
  pricing: freemium
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Freemium
  confidence: medium
  source:
  - plans
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/kyverno.png
tags:
- Cloud Native
- Governance
- Kubernetes
- Policy Management
- Security
url: https://raw.githubusercontent.com/api-evangelist/kyverno/refs/heads/main/apis.yml
created: '2025-01-01'
modified: '2026-05-19'
specificationVersion: '0.19'
apis:
- aid: kyverno:kyverno
  name: Kyverno
  description: Kyverno is a Kubernetes-native policy engine that runs as a dynamic admission controller to validate, mutate,
    and generate Kubernetes resources using policies written as Kubernetes resources. It supports policy types across multiple
    API groups including kyverno.io, policies.kyverno.io, and policyreport.io, covering validation, mutation, generation,
    cleanup, and image verification use cases.
  humanURL: https://kyverno.io/
  tags:
  - Kubernetes
  - Policy
  - Security
  properties:
  - type: Documentation
    url: https://kyverno.io/docs/introduction/
  - type: GettingStarted
    url: https://kyverno.io/docs/installation/
  - type: Reference
    url: https://kyverno.io/docs/policy-types/
  - type: ChangeLog
    url: https://kyverno.io/docs/releases/
  - type: GitHubRepository
    url: https://github.com/kyverno/kyverno
- aid: kyverno:kyverno-cli
  name: Kyverno CLI
  description: The Kyverno CLI provides a command-line interface for applying and testing Kyverno policies against Kubernetes
    resources outside of a cluster. It can be used in CI/CD pipelines to validate resources before deployment, run policy
    tests, and interact with JMESPath expressions used in policy rules.
  humanURL: https://kyverno.io/docs/kyverno-cli/
  tags:
  - CLI
  - Developer Tools
  - Kubernetes
  - Policy
  properties:
  - type: Documentation
    url: https://kyverno.io/docs/kyverno-cli/
  - type: Reference
    url: https://kyverno.io/docs/kyverno-cli/reference/kyverno/
  - type: GitHubRepository
    url: https://github.com/kyverno/kyverno
- aid: kyverno:kyverno-clusterpolicyreports-api
  name: Kyverno ClusterPolicyReports API
  description: Cluster-scoped policy report endpoints
  humanURL: https://kyverno.io/
  tags:
  - ClusterPolicyReports
  properties:
  - type: OpenAPI
    url: openapi/kyverno-clusterpolicyreports-api-openapi.yml
  - type: Documentation
    url: https://kyverno.github.io/policy-reporter/
  - type: Reference
    url: https://kyverno.github.io/policy-reporter/core/api-reference/
  - type: GettingStarted
    url: https://kyverno.github.io/policy-reporter/guide/getting-started/
  - type: GitHubRepository
    url: https://github.com/kyverno/policy-reporter
- aid: kyverno:kyverno-health-api
  name: Kyverno Health API
  description: Health and readiness endpoints
  humanURL: https://kyverno.io/
  tags:
  - Health
  properties:
  - type: OpenAPI
    url: openapi/kyverno-health-api-openapi.yml
  - type: Documentation
    url: https://kyverno.github.io/policy-reporter/
  - type: Reference
    url: https://kyverno.github.io/policy-reporter/core/api-reference/
  - type: GettingStarted
    url: https://kyverno.github.io/policy-reporter/guide/getting-started/
  - type: GitHubRepository
    url: https://github.com/kyverno/policy-reporter
- aid: kyverno:kyverno-namespaces-api
  name: Kyverno Namespaces API
  description: Namespace listing endpoints
  humanURL: https://kyverno.io/
  tags:
  - Namespaces
  properties:
  - type: OpenAPI
    url: openapi/kyverno-namespaces-api-openapi.yml
  - type: Documentation
    url: https://kyverno.github.io/policy-reporter/
  - type: Reference
    url: https://kyverno.github.io/policy-reporter/core/api-reference/
  - type: GettingStarted
    url: https://kyverno.github.io/policy-reporter/guide/getting-started/
  - type: GitHubRepository
    url: https://github.com/kyverno/policy-reporter
- aid: kyverno:kyverno-policies-api
  name: Kyverno Policies API
  description: Policy listing and detail endpoints
  humanURL: https://kyverno.io/
  tags:
  - Policies
  properties:
  - type: OpenAPI
    url: openapi/kyverno-policies-api-openapi.yml
  - type: Documentation
    url: https://kyverno.github.io/policy-reporter/
  - type: Reference
    url: https://kyverno.github.io/policy-reporter/core/api-reference/
  - type: GettingStarted
    url: https://kyverno.github.io/policy-reporter/guide/getting-started/
  - type: GitHubRepository
    url: https://github.com/kyverno/policy-reporter
- aid: kyverno:kyverno-policyreports-api
  name: Kyverno PolicyReports API
  description: Namespaced policy report endpoints
  humanURL: https://kyverno.io/
  tags:
  - PolicyReports
  properties:
  - type: OpenAPI
    url: openapi/kyverno-policyreports-api-openapi.yml
  - type: Documentation
    url: https://kyverno.github.io/policy-reporter/
  - type: Reference
    url: https://kyverno.github.io/policy-reporter/core/api-reference/
  - type: GettingStarted
    url: https://kyverno.github.io/policy-reporter/guide/getting-started/
  - type: GitHubRepository
    url: https://github.com/kyverno/policy-reporter
- aid: kyverno:kyverno-results-api
  name: Kyverno Results API
  description: Policy result query endpoints
  humanURL: https://kyverno.io/
  tags:
  - Results
  properties:
  - type: OpenAPI
    url: openapi/kyverno-results-api-openapi.yml
  - type: Documentation
    url: https://kyverno.github.io/policy-reporter/
  - type: Reference
    url: https://kyverno.github.io/policy-reporter/core/api-reference/
  - type: GettingStarted
    url: https://kyverno.github.io/policy-reporter/guide/getting-started/
  - type: GitHubRepository
    url: https://github.com/kyverno/policy-reporter
- aid: kyverno:kyverno-sources-api
  name: Kyverno Sources API
  description: Policy source listing endpoints
  humanURL: https://kyverno.io/
  tags:
  - Sources
  properties:
  - type: OpenAPI
    url: openapi/kyverno-sources-api-openapi.yml
  - type: Documentation
    url: https://kyverno.github.io/policy-reporter/
  - type: Reference
    url: https://kyverno.github.io/policy-reporter/core/api-reference/
  - type: GettingStarted
    url: https://kyverno.github.io/policy-reporter/guide/getting-started/
  - type: GitHubRepository
    url: https://github.com/kyverno/policy-reporter
common:
- type: AgenticAccess
  url: agentic-access/kyverno-agentic-access.yml
- type: DomainSecurity
  url: security/kyverno-domain-security.yml
- type: LinkedIn
  url: https://www.linkedin.com/company/nirmata
- type: Website
  url: https://kyverno.io/
- type: Documentation
  url: https://kyverno.io/docs/
- type: GettingStarted
  url: https://kyverno.io/docs/installation/
- type: ChangeLog
  url: https://kyverno.io/docs/releases/
- type: GitHubOrganization
  url: https://github.com/kyverno
- type: GitHubRepository
  url: https://github.com/kyverno/kyverno
- type: Blog
  url: https://kyverno.io/blog/
- type: Community
  url: https://kyverno.io/community/
- type: JSONSchema
  url: json-schema/kyverno-policy-schema.json
  name: Kyverno Policy JSON Schema
  description: JSON Schema for Kyverno Policy and ClusterPolicy custom resources including validation, mutation, generation,
    and image verification rules.
- type: JSONLD
  url: json-ld/kyverno-context.jsonld
  name: Kyverno JSON-LD Context
  description: Linked data context mapping Kyverno policy resources and policy report entities to standard vocabularies.
- type: Integrations
  url: https://kyverno.io/integrations
- type: LlmsText
  url: https://kyverno.io/llms.txt
integrations:
- name: kyverno
- name: Adidas
- name: Bloomberg
- name: Linkedin
- name: Razorpay
- name: Robinhood
- name: Spotify
- name: Telecom
- name: US-DOD
- name: Vodafone
- name: Wayfair
- name: Yahoo
- name: Open Policy Agent
- name: CNCF
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com