# LastPass

**Canonical:** https://apis.io/providers/lastpass/  
**Website:** https://www.lastpass.com/  
**APIs profiled:** 6

LastPass is a password and identity-management platform offering personal and enterprise vaults, single sign-on, multi-factor authentication, and directory provisioning. The LastPass Enterprise API and Provisioning API let admins programmatically manage users, groups, shared folders, policies, and events. SCIM and SAML endpoints integrate with identity providers; an MFA SDK supports adaptive authentication for custom apps.

## Kin Score — 13.4 / 100 (emerging)

Scored 2026-08-25 under rubric 0.14.0. Trend: flat (+0.0 from 13.4).

| Facet | Score |
|---|---|
| Discoverability | 74.1 |
| Contract Quality | 0.0 |
| Governance | 0.0 |
| Contract Governance | 0.0 |
| Operational Transparency | 10.5 |
| Developer Ergonomics | 7.1 |
| Commercial Clarity | 15.8 |
| Access Clarity | 15.8 |

## Agent readiness — 2.5 (human-only)

| Dimension | Value |
|---|---|
| Spec Presence | no |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | no |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | documented |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |
| Delegated Identity | no |
| Protected Resource Metadata | no |
| Dynamic Client Registration | no |
| Agentic Commerce | no |

## Access

Freemium — onboarding: unknown, pricing: freemium, trial: no (confidence: medium).

## APIs (6)

- **LastPass Enterprise API** — Single POST endpoint at lastpass.com/enterpriseapi.php that accepts a JSON payload selecting one of many command names (batchadd, batchchange, deluser, disableuser, getuserdata,...
- **LastPass Provisioning API** — Subset of the Enterprise API focused on the user-lifecycle commands - batchadd, batchchange, deluser, disableuser, and getuserdata - used by directory connectors (Active Directo...
- **LastPass SCIM API** — SCIM 2.0 endpoint that exposes Users and Groups for directory-based provisioning by Okta, Entra ID, OneLogin, JumpCloud, and Google Cloud Identity. Replaces ad-hoc provisioning ...
- **LastPass SAML / SSO Endpoint** — LastPass acts as either a SAML identity provider (IdP) for the cloud apps catalogued in the LastPass App Library or as a service provider (SP) when paired with an external IdP. ...
- **LastPass MFA SDK** — Server-side SDK for embedding LastPass MFA (push, biometric, TOTP) into custom cloud or on-prem applications. Wraps the underlying authentication endpoints so developers can add...
- **LastPass Reporting Commands** — Reporting-oriented Enterprise API commands (getreport, getuserdata, getsfdata, getevents) that export login activity, shared-folder membership, and admin events for use in SIEMs...

## Security (1)

- **Lastpass Domain Security** — TLSv1.3 · HSTS · DMARC

## Plans (1)

- **Lastpass Plans Pricing**

## Tags

Security, Password Manager, Vault, Identity, Enterprise, SSO, MFA

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/lastpass/). Scores are computed from the provider's own public artifacts under a published rubric.