# Mondoo

**Canonical:** https://apis.io/providers/mondoo/  
**Website:** https://mondoo.com  
**APIs profiled:** 1

Mondoo is a cloud-native security and vulnerability risk management platform built around "Agentic Vulnerability Management" — AI agents that discover, prioritize by business impact, and automatically remediate vulnerabilities and misconfigurations across cloud accounts, containers, Kubernetes, servers, endpoints, SaaS products, network devices, and infrastructure-as-code. The platform is built on the open-source cnquery infrastructure query tool and the cnspec policy-as-code security scanner, both driven by MQL (the Mondoo Query Language), and exposes a GraphQL Platform API for programmatic access to assets, integrations, and vulnerability, policy, and compliance reports. Mondoo ships official SDKs, a Terraform provider, cnquery/cnspec CLIs with an MCP server interface, and packaged Agent Skills for MQL and secure coding.

## Kin Score — 40.3 / 100 (developing)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+0.0 from 40.3).

| Facet | Score |
|---|---|
| Discoverability | 87.0 |
| Contract Quality | 0.0 |
| Governance | 18.2 |
| Contract Governance | 18.2 |
| Operational Transparency | 44.7 |
| Developer Ergonomics | 71.4 |
| Commercial Clarity | 31.6 |
| Access Clarity | 31.6 |

Regulatory layer — **Insurance**: 47.0 (matched via tags).

## Agent readiness — 12.8 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | no |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | yes |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Self-serve signup — onboarding: self-serve, pricing: unknown, trial: no (confidence: medium).

## APIs (1)

- **Mondoo Platform GraphQL API** — The Mondoo Platform API is a GraphQL API for programmatically querying assets, configuring integrations, and fetching vulnerability, policy, and compliance reports. Authenticati...

## MCP servers (1)

- **Mondoo MCP Server** — Mondoo exposes an MCP (Model Context Protocol) server through its open-source cnquery / cnspec CLIs and the MQL shell. Agents can run it locally to perform live MQL schema looku...

## Security (3)

- **Mondoo Authentication** — bearer-token/oidc · 2 schemes
- **Mondoo Domain Security** — TLSv1.3 · HSTS · DNSSEC · DMARC
- **Mondoo Vulnerability Disclosure** — contact published

## Tags

Company, Cybersecurity, Security, Vulnerability Management, Compliance, Cloud Security, Policy as Code, DevSecOps, GraphQL, SAST

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/mondoo/). Scores are computed from the provider's own public artifacts under a published rubric.