MirrorTab

MirrorTab is a cybersecurity company that stops automated attacks against web applications and APIs by serving the application through an isolated, server-side rendered browser session so the DOM, code, and data are never exposed to the end browser. Rather than detecting bots, it removes the surface they operate on, blocking credential stuffing, agentic-AI automation, man-in-the-browser attacks, malicious extensions, XSS, formjacking, clickjacking, and CSRF without endpoint agents or application code changes. MirrorTab is edge-driven and integrates alongside existing CDNs, WAFs, and fraud platforms. Founded by the CTO and co-founder of Honey (acquired by PayPal), the company also publishes a public v1 REST API to programmatically create, list, and remove MirrorTab browser sessions.

MirrorTab publishes 1 API on the APIs.io network: Sessions API. Tagged areas include Company, Enterprise, Security, Cybersecurity, and Bot Mitigation.

MirrorTab’s developer surface includes documentation, API reference, authentication, and 12 more developer resources.

🌐 Visit website 📡 Source on GitHub
40.5/100 thin ▬ flat Agent 62/100 agent native Full breakdown ↓
scored 2026-07-27 · rubric v0.5
AccessSelf serve
1 APIs 1 MCP Servers
CompanyEnterpriseSecurityCybersecurityBot MitigationFraud PreventionBrowser IsolationAnti-Automation

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-07-27 · rubric v0.5
Composite quality — 40.5/100 · thin
Contract Quality 15.5 / 25
Developer Ergonomics 8.3 / 20
Commercial Clarity 6.8 / 20
Operational Transparency 0.7 / 13
Governance 0.0 / 12
Discoverability 9.3 / 10
Agent readiness — 62/100 · agent native
Machine-Readable Contract 18 / 18
Agentic Access Contract 15 / 15
MCP Server 12 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 0 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 0 / 6
Agent Skills 5 / 5
Well-Known Catalog 4 / 4
Consent & Bot Identity 0 / 3
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/mirrortab: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 1

Individual APIs this provider publishes, each with its own machine-readable definition.

MirrorTab Sessions API

Create, list, and remove MirrorTab browser sessions.

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

mirrortab-mcp.yml

MCP SERVER

Security Posture 2

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Mirrortab Authentication

apiKey · 1 scheme

SECURITY

Mirrortab Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Mirrortab Agentic Access

3 operations · 3 acting

3 operations · 3 acting

AGENTIC

Resources

Get Started 1

Portal, sign-up, and the first successful call

Login
Login

Documentation 2

Reference material describing how the API behaves

Documentation
Documentation
 APIReference
APIReference

Agent Surfaces 5

MCP servers, agent skills, and machine-readable catalogs

AgenticAccess
AgenticAccess
 MCPServer
MCPServer
 LLMsTxt
LLMsTxt
 WellKnown
WellKnown
 AgentSkill
AgentSkill

Design & Contract 1

Pagination, idempotency, versioning, errors, and events

Lifecycle
Lifecycle

Build 1

SDKs, sample code, and the tooling you integrate with

GitHubOrganization
GitHubOrganization

Access & Security 2

Authentication, authorization, and security posture

DomainSecurity
DomainSecurity
 Authentication
Authentication

Commercial 2

Pricing, plans, and the legal terms of use

TermsOfService
TermsOfService
 PrivacyPolicy
PrivacyPolicy

Company 1

The organization behind the API

Website
Website

Source (apis.yml)

apis.yml Raw ↑ 
aid: mirrortab
accessModel:
  pricing: unknown
  onboarding: self-serve
  trial: false
  try_now: false
  public: false
  label: Self-serve signup
  confidence: medium
  source:
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/mirrortab.png
name: MirrorTab
description: MirrorTab is a cybersecurity company that stops automated attacks against web applications and APIs by serving
  the application through an isolated, server-side rendered browser session so the DOM, code, and data are never exposed to
  the end browser. Rather than detecting bots, it removes the surface they operate on, blocking credential stuffing, agentic-AI
  automation, man-in-the-browser attacks, malicious extensions, XSS, formjacking, clickjacking, and CSRF without endpoint
  agents or application code changes. MirrorTab is edge-driven and integrates alongside existing CDNs, WAFs, and fraud platforms.
  Founded by the CTO and co-founder of Honey (acquired by PayPal), the company also publishes a public v1 REST API to programmatically
  create, list, and remove MirrorTab browser sessions.
url: https://raw.githubusercontent.com/api-evangelist/mirrortab/refs/heads/main/apis.yml
x-type: company
x-source: vc-portfolio
x-backed-by:
- gv
x-tier: stub
x-tier-reason: portfolio-lead
specificationVersion: '0.20'
created: '2026-07-17'
modified: '2026-07-20'
tags:
- Company
- Enterprise
- Security
- Cybersecurity
- Bot Mitigation
- Fraud Prevention
- Browser Isolation
- Anti-Automation
apis:
- aid: mirrortab:mirrortab-sessions-api
  name: MirrorTab Sessions API
  description: Create, list, and remove MirrorTab browser sessions.
  humanURL: https://github.com/MirrorTab/api_v1
  baseURL: https://api.mirrortab.com
  tags:
  - Sessions
  properties:
  - type: OpenAPI
    url: openapi/mirrortab-sessions-api-openapi.yml
  - type: APIReference
    url: https://github.com/MirrorTab/api_v1
  - type: Authentication
    url: authentication/mirrortab-authentication.yml
  - type: ErrorCatalog
    url: errors/mirrortab-problem-types.yml
  - type: Conventions
    url: conventions/mirrortab-conventions.yml
  - type: DataModel
    url: data-model/mirrortab-data-model.yml
  - type: Conformance
    url: conformance/mirrortab-conformance.yml
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: AgenticAccess
  url: agentic-access/mirrortab-agentic-access.yml
- type: Website
  url: https://www.mirrortab.com
- type: Documentation
  url: https://github.com/MirrorTab/api_v1
- type: APIReference
  url: https://github.com/MirrorTab/api_v1
- type: GitHubOrganization
  url: https://github.com/MirrorTab
- type: Login
  url: https://mirrortab.com/API
- type: TermsOfService
  url: https://www.mirrortab.com/terms-of-use
- type: PrivacyPolicy
  url: https://www.mirrortab.com/privacy-policy
- type: MCPServer
  url: mcp/mirrortab-mcp.yml
- type: LLMsTxt
  url: llms/mirrortab-llms.txt
- type: WellKnown
  url: well-known/mirrortab-well-known.yml
- type: Lifecycle
  url: lifecycle/mirrortab-lifecycle.yml
- type: DomainSecurity
  url: security/mirrortab-domain-security.yml
- type: AgentSkill
  url: skills/_index.yml
- type: Authentication
  url: authentication/mirrortab-authentication.yml
x-enrichment:
  date: '2026-07-20'
  status: enriched
  artifacts_added: 14
  pass: local-v1