Nord Security is a Lithuania-founded digital security and privacy company whose consumer and business portfolio spans NordVPN, NordPass, NordLocker, NordLayer (network access security for business), NordProtect/Coveron, Saily (eSIM) and NordStellar (external threat exposure management). Its developer-facing surface is concentrated in NordStellar, which publishes five OpenAPI-described enterprise APIs — the Enterprise Data (Dark Web) API, Company Risk Scoring API, Cybersec API, Partners API and Platform Integrations API — plus a remote MCP server, sixteen provider-published agent skills, an n8n community node and SIEM integrations (Microsoft Sentinel, CrowdStrike). NordLayer adds SCIM 2.0 user provisioning and a partner/MSP API key surface, while the NordSecurity GitHub organization publishes the NordVPN Linux client together with 43 gRPC/protobuf service definitions covering the daemon, meshnet, fileshare, norduser and telemetry surfaces.
Nord Security publishes 35 API contracts indexed on the APIs.io network, including API User Management API, Applications API, AUC API, and 32 more. Tagged areas include Cybersecurity, Threat Intelligence, Dark Web Monitoring, Attack Surface Management, and Breach Intelligence.
The Nord Security catalog on APIs.io includes 1 Spectral governance ruleset.
Nord Security’s developer surface includes engineering blog, documentation, API reference, getting-started guide, support, pricing, signup flow, and 52 more developer resources.
65.3/100strong▬ flatAgent43/100agent readyFront door AI1/6
silent
Heartbeat67/100
alive
open core · GPL-3.0
Full breakdown ↓
scored 2026-11-13 · rubric v0.28.0 · Show this score on your site →
Regulatory Posture applies to this provider. Its tags matched the
Horizontal (data, software, accessibility, platform) regime, so
Regulatory Posture carries 15 points of the composite.
If this regime is wrong for your business, say so on your
provider repo — the
applicability map is public and we will correct it.
Open Source Surface applies to this provider. This product is open source and we
read its repository directly, so Open Source Surface carries
10 points of the composite. It is scored from what the repository actually
publishes — a security policy, a contribution guide, a release history, a code of conduct — read live from the
provider rather than inferred from our own catalog pointers.
This facet adds; nothing was taken away to make room for it. An open-source project is not excused from
the commercial facets, because exemption would strip it of the points it does earn.
If we have the wrong repository, or this product is not open source, say so on your
provider repo and we
will drop the facet rather than have you publish against it.
Create-or-Update Ergonomics applies to this provider. This API accepts writes, so it
carries 10 points of the composite. It is scored from the published contracts
themselves: whether a caller can create-or-update in one call, whether the write accepts a key the caller already
holds, and whether the response says which branch ran. Without that, every write needs a search-and-branch in
front of it, and the first time that check is skipped a duplicate record is created.
Scored against the observed mean rather than raw — a provider at the catalog average is unchanged by this facet,
not penalised by it.
The six quality facets above are damped to 65 points between them,
because both conditional facets apply and carry
35 points together. That is why each facet's contribution is shown against a damped
maximum: raising a quality facet moves the composite by 65% of its nominal
weight, not 100%. The full arithmetic is at apis.io/rating/.
Show this score on your site.
It updates itself when the score changes. Paste this where you link to your API docs:
<a href="https://apis.io/providers/nord-security/"><img src="https://apis.io/badge/nord-security/card.svg" alt="Nord Security on APIs.io — Kin Score by API Evangelist"></a>
Other styles, a README pill and a shields.io endpoint are on the badge page.
Raise your score.
Agent readiness — checks not met, largest first (exact, from this profile):
Idempotency+9 pts — OpenAPI mutating operations declare an idempotency key — a header, a request-body property, or a named de-duplication token whose own description says so (verified); else common[].type matches /idempoten/i (documented) Ask about this →
Delegated User Identity+6 pts — a served discovery document listing authorization_code in grant_types_supported (served), else an oauth2 authorizationCode flow or openIdConnect declared in an OpenAPI (documented) Ask about this →
Typed Event Surface+6 pts — AsyncAPI document, OR webhooks/callbacks objects in the as-published OpenAPI, OR common[].type includes Webhooks Ask about this →
7 more unmet checks in the Agent Readiness table above.
Kin Score — facets with the most composite points still available (weight × headroom):
Each check links to what satisfies it. Publish the artifact, or tell us where it already lives, and the score moves on the next scoring run.
Not sure how this applies to your stack? Ask about any one item. Kin Lane reads every question, looks at your profile and your situation, and replies with what a fix would take — scoped to that one area, priced up front, yours whether you ship it or not. Ask a question →
The Kin Score Market layer reads a provider inside its market:
its position, and how deep its integrations go. Depth is only comparable within a position. Provisional and unweighted:
not part of the Kin Score or agent readiness.
Registered MCP server and declares compatibility are report only — not weighted.
Undeclared means we found nothing we can read, so there is no number: we never infer integrations.
Standards this provider implements or carries. De facto ones are profiled and measured by the API Commons; formal ones come from the standards directory and are linked by the provider's own tags. The evidence column says how each claim was established — not that it was made.
Remote MCP server that lets any MCP-compatible assistant query the NordStellar platform in natural language. Clients connect through the open-source nordstellar-mcp auth proxy (...
Partner-facing API behind the NordLayer Service Management Portal. API keys are self-issued in the SMP Integrations tab with expiry and one-time visibility, and let MSPs create ...
SCIM-based user provisioning surface used to create users, update user attributes, deactivate users and push groups from Okta and Microsoft Entra ID into NordLayer. The SCIM sec...
Usage-reporting API for NordPass provider/MSP partners, documented in the NordPass help centre. NordPass separately supports SCIM provisioning from Okta and Microsoft Entra ID f...
Unauthenticated JSON API that NordVPN's own clients and the open-source Linux client use to enumerate the server estate — servers, countries, cities, groups and technologies. It...
Endpoints for administering API keys, and web hook settings. These operations enable administrators to list and manage API keys, update webhook configuration.
Endpoints for retrieving detailed metadata about breach origins, including databases. These operations provide comprehensive context about database breach incidents, affected pl...
Endpoints for comprehensive cookie data monitoring in data breaches, including zero-knowledge search capabilities. These operations enable robust cookie security protection and ...
Endpoints for retrieving detailed metadata about breach origins, including credential lists. These operations provide comprehensive context about credential list breach incident...
Endpoints for comprehensive credit card data monitoring in data breaches, including zero-knowledge search capabilities. These operations enable robust credit card security prote...
Endpoints for investigating domain exposure in data breaches, including detailed breach information and compromise analysis. These operations support protection against domain h...
Endpoints for comprehensive email address monitoring in data breaches, including detailed breach information, password exposure, and statistical analysis. These operations enabl...
Endpoints for retrieving detailed metadata about breach origins, including malware logs. These operations provide comprehensive context about malware logs breach incidents, affe...
Endpoints for comprehensive national identification number data monitoring in data breaches, including zero-knowledge search capabilities. These operations enable robust nationa...
Endpoints for comprehensive password data monitoring in data breaches, including zero-knowledge search capabilities. These operations enable robust password security protection ...
Endpoints for investigating phone number exposure in data breaches, including detailed breach information and compromise analysis. These operations support protection against SI...
Endpoints for generating OSINT-based profiling reports on email addresses and phone numbers. Reports aggregate data from external intelligence sources, enrich it with internal b...
Endpoints for managing user subscriptions to data breach monitoring services. These operations enable administrators to create, update, and delete subscriptions for email addres...
Utility endpoints for supporting zero-knowledge functionalities, such as retrieving salts. These operations are essential for the proper functioning of zero-knowledge security f...
Overlays applied on top of this provider's contracts. Each card says who wrote it: a document the provider publishes, or one API Evangelist derived or generated.
aid: nord-security
name: Nord Security
description: Nord Security is a Lithuania-founded digital security and privacy company whose consumer and business portfolio
spans NordVPN, NordPass, NordLocker, NordLayer (network access security for business), NordProtect/Coveron, Saily (eSIM)
and NordStellar (external threat exposure management). Its developer-facing surface is concentrated in NordStellar, which
publishes five OpenAPI-described enterprise APIs — the Enterprise Data (Dark Web) API, Company Risk Scoring API, Cybersec
API, Partners API and Platform Integrations API — plus a remote MCP server, sixteen provider-published agent skills, an
n8n community node and SIEM integrations (Microsoft Sentinel, CrowdStrike). NordLayer adds SCIM 2.0 user provisioning and
a partner/MSP API key surface, while the NordSecurity GitHub organization publishes the NordVPN Linux client together with
43 gRPC/protobuf service definitions covering the daemon, meshnet, fileshare, norduser and telemetry surfaces.
deliveryModel:
model: open-core
license: GPL-3.0
open_source: true
commercial: true
callable_host: false
label: Open core · an OSS project plus a commercial hosted product
confidence: high
source:
- license
- pricing
generated: '2026-08-28'
method: derived
accessModel:
pricing: paid
onboarding: unknown
trial: false
try_now: false
public: false
label: Paid
confidence: high
source:
- plans
- authentication
- rate-limits
- security
generated: '2026-11-13'
method: derived
image: https://res.cloudinary.com/nordsec/image/upload/q_auto,f_auto/v1/nord-security-web/global/meta/social-logo.png
url: https://raw.githubusercontent.com/api-evangelist/nord-security/refs/heads/main/apis.yml
x-type: company
x-source: harvest:secondary-market
x-tier: profiled
x-tier-reason: enrichment
specificationVersion: '0.23'
created: '2026-08-01'
modified: '2026-10-06'
x-docs-platform: nextra
x-docs-platform-confidence: medium
x-docs-platform-checked: 2026-10-04
tags:
- Cybersecurity
- Threat Intelligence
- Dark Web Monitoring
- Attack Surface Management
- Breach Intelligence
- VPN
- Password Management
- Network Security
- Zero Trust
- Privacy
- MCP
- Agent Skills
- gRPC
- Company
apis:
- name: NordStellar MCP Server
description: Remote MCP server that lets any MCP-compatible assistant query the NordStellar platform in natural language.
Clients connect through the open-source nordstellar-mcp auth proxy (PyPI, run via uvx, or a one-click .mcpb bundle for
Claude Desktop), which performs a browser login and stores session tokens in the OS credential store. The server fronts
NordStellar's GraphQL core and exposes graphql_query, graphql_batch, search_types and get_type_definition. Live tools/list
is auth-gated (HTTP 401 "no bearer token").
humanURL: https://docs.nordstellar.com/platform/mcp
baseURL: https://platform-mcp.nordstellar.com/mcp
tags:
- MCP
- Agent-Native
- Threat Intelligence
- GraphQL
tags_raw:
- mcp
- agent-native
- threat-intelligence
- graphql
properties:
- type: MCPServer
url: mcp/nord-security-mcp.yml
- type: ToolCrosswalk
url: mcp/nord-security-tool-crosswalk.yml
- type: MCPServer
url: https://platform-mcp.nordstellar.com/mcp
- type: Documentation
url: https://docs.nordstellar.com/platform/mcp/setup
- type: AgentSkill
url: skills/_index.yml
- type: SourceCode
url: https://github.com/NordStellar/nordstellar-mcp
- name: NordLayer Partner / MSP API
description: Partner-facing API behind the NordLayer Service Management Portal. API keys are self-issued in the SMP Integrations
tab with expiry and one-time visibility, and let MSPs create client organizations, retrieve account details and statuses,
and track license usage. The help centre links a "NordLayer MSP API Documentation" PDF for the full specification, but
that published link currently returns 404, so no machine-readable contract is publicly retrievable.
humanURL: https://help.nordlayer.com/docs/api-key-management-for-smp
baseURL: https://api.nordlayer.com/
tags:
- MSP
- Partner API
- Provisioning
- Network Security
tags_raw:
- msp
- partner-api
- provisioning
- network-security
properties:
- type: Documentation
url: https://help.nordlayer.com/docs/api-key-management-for-smp
- type: Authentication
url: authentication/nord-security-authentication.yml
x-evidence:
fetched: '2026-08-01'
base_url_probe:
url: https://api.nordlayer.com/
http_status: 404
content_type: application/json
body: '{"code":404,"message":"Resource not found"}'
note: Host resolves and answers a JSON error envelope; individual endpoint paths are not published outside the partner-gated
MSP API PDF.
spec_link:
url: https://cdn.document360.io/fc1049cd-8f71-4b89-b9b8-dbca9fdcdd16/Images/Documentation/NordLayer%20MSP%20API%20Documentation.pdf
http_status: 404
note: Linked from help.nordlayer.com/docs/api-key-management-for-smp; asset no longer present.
- name: NordLayer SCIM 2.0 Provisioning
description: SCIM-based user provisioning surface used to create users, update user attributes, deactivate users and push
groups from Okta and Microsoft Entra ID into NordLayer. The SCIM secret token is issued in the NordLayer Control Panel
under Settings > Access management; the endpoint is configured through the identity provider's NordLayer application rather
than published as a standalone base URL.
humanURL: https://help.nordlayer.com/docs/user-provisioning
baseURL: https://api.nordlayer.com/
tags:
- SCIM
- Provisioning
- Identity
- SSO
tags_raw:
- scim
- provisioning
- identity
- sso
properties:
- type: Documentation
url: https://help.nordlayer.com/docs/user-provisioning
- type: Conformance
url: conformance/nord-security-conformance.yml
- name: NordPass Provider API
description: Usage-reporting API for NordPass provider/MSP partners, documented in the NordPass help centre. NordPass separately
supports SCIM provisioning from Okta and Microsoft Entra ID for NordPass Business. The provider API reference sits behind
a bot-protected help centre and no machine-readable contract is published.
humanURL: https://support.nordpass.com/hc/en-us/articles/23164869782801-Provider-API-for-Usage-Reporting
baseURL: https://api.nordpass.com/
tags:
- MSP
- usage-reporting
- Password Management
- SCIM
tags_raw:
- msp
- usage-reporting
- password-management
- scim
properties:
- type: Documentation
url: https://support.nordpass.com/hc/en-us/articles/23164869782801-Provider-API-for-Usage-Reporting
x-evidence:
fetched: '2026-08-01'
base_url_probe:
url: https://api.nordpass.com/
http_status: 403
content_type: application/json
body: '{"status":403,"title":"Access Forbidden","type":"https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/403"}'
note: Host resolves and answers a problem-shaped JSON envelope; endpoint paths are not published.
- name: NordVPN Public Server API
description: Unauthenticated JSON API that NordVPN's own clients and the open-source Linux client use to enumerate the server
estate — servers, countries, cities, groups and technologies. It is publicly reachable and widely consumed, but Nord Security
publishes no developer documentation, no OpenAPI and no terms for it, so it should be treated as an internal client API
rather than a supported product API.
humanURL: https://github.com/NordSecurity/nordvpn-linux
baseURL: https://api.nordvpn.com/v1
tags:
- VPN
- server-directory
- Undocumented
tags_raw:
- vpn
- server-directory
- undocumented
properties:
- type: SourceCode
url: https://github.com/NordSecurity/nordvpn-linux
x-evidence:
fetched: '2026-08-01'
probes:
- url: https://api.nordvpn.com/v1/servers/countries
http_status: 200
content_type: application/json
- url: https://api.nordvpn.com/v1/technologies
http_status: 200
content_type: application/json
- url: https://api.nordvpn.com/openapi.json
http_status: 403
note: No OpenAPI published; host bot-protects non-client paths.
- aid: nord-security:nord-security-api-user-management-api
name: Nord Security API User Management API
description: 'Endpoints for administering API keys, and web hook settings.
These operations enable administrators to list and manage API keys, update webhook configuration.'
humanURL: https://docs.nordstellar.com/enterprise-apis/product-integrations
baseURL: https://enterprise-data-api.nordstellar.com
tags:
- API User Management
properties:
- type: OpenAPI
url: openapi/nord-security-api-user-management-api-openapi.yml
- type: Documentation
url: https://docs.nordstellar.com/enterprise-apis/product-integrations
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/swagger
- type: Authentication
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/authentication
- type: RateLimits
url: rate-limits/nord-security-rate-limits.yml
- type: Examples
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/code-examples
- type: DataModel
url: data-model/nord-security-data-model.yml
- type: ErrorCatalog
url: errors/nord-security-problem-types.yml
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/crs/swagger
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/cybersec/swagger
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/partner/swagger
- type: Documentation
url: https://docs.nordstellar.com/platform/integrations-api
- type: APIReference
url: https://docs.nordstellar.com/platform/integrations-api/swagger
- type: Examples
url: https://docs.nordstellar.com/platform/integrations-api/code-examples
- aid: nord-security:nord-security-applications-api
name: Nord Security Applications API
description: The Applications API from Nord Security — 1 operation(s) for applications.
humanURL: https://docs.nordstellar.com/enterprise-apis/product-integrations
baseURL: https://enterprise-data-api.nordstellar.com
tags:
- Application
tags_raw:
- Applications
properties:
- type: OpenAPI
url: openapi/nord-security-applications-api-openapi.yml
- type: Documentation
url: https://docs.nordstellar.com/enterprise-apis/product-integrations
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/swagger
- type: Authentication
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/authentication
- type: RateLimits
url: rate-limits/nord-security-rate-limits.yml
- type: Examples
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/code-examples
- type: DataModel
url: data-model/nord-security-data-model.yml
- type: ErrorCatalog
url: errors/nord-security-problem-types.yml
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/crs/swagger
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/cybersec/swagger
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/partner/swagger
- type: Documentation
url: https://docs.nordstellar.com/platform/integrations-api
- type: APIReference
url: https://docs.nordstellar.com/platform/integrations-api/swagger
- type: Examples
url: https://docs.nordstellar.com/platform/integrations-api/code-examples
- aid: nord-security:nord-security-auc-api
name: Nord Security AUC API
description: The AUC API from Nord Security — 2 operation(s) for auc.
humanURL: https://docs.nordstellar.com/enterprise-apis/product-integrations
baseURL: https://enterprise-data-api.nordstellar.com
tags:
- AUC
properties:
- type: OpenAPI
url: openapi/nord-security-auc-api-openapi.yml
- type: Documentation
url: https://docs.nordstellar.com/enterprise-apis/product-integrations
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/swagger
- type: Authentication
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/authentication
- type: RateLimits
url: rate-limits/nord-security-rate-limits.yml
- type: Examples
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/code-examples
- type: DataModel
url: data-model/nord-security-data-model.yml
- type: ErrorCatalog
url: errors/nord-security-problem-types.yml
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/crs/swagger
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/cybersec/swagger
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/partner/swagger
- type: Documentation
url: https://docs.nordstellar.com/platform/integrations-api
- type: APIReference
url: https://docs.nordstellar.com/platform/integrations-api/swagger
- type: Examples
url: https://docs.nordstellar.com/platform/integrations-api/code-examples
- aid: nord-security:nord-security-breached-databases-api
name: Nord Security Breached Databases API
description: 'Endpoints for retrieving detailed metadata about breach origins, including databases.
These operations provide comprehensive context about database breach incidents, affected platforms, and exposure scope
to support your security investigations.'
humanURL: https://docs.nordstellar.com/enterprise-apis/product-integrations
baseURL: https://enterprise-data-api.nordstellar.com
tags:
- Breached Databases
properties:
- type: OpenAPI
url: openapi/nord-security-breached-databases-api-openapi.yml
- type: Documentation
url: https://docs.nordstellar.com/enterprise-apis/product-integrations
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/swagger
- type: Authentication
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/authentication
- type: RateLimits
url: rate-limits/nord-security-rate-limits.yml
- type: Examples
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/code-examples
- type: DataModel
url: data-model/nord-security-data-model.yml
- type: ErrorCatalog
url: errors/nord-security-problem-types.yml
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/crs/swagger
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/cybersec/swagger
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/partner/swagger
- type: Documentation
url: https://docs.nordstellar.com/platform/integrations-api
- type: APIReference
url: https://docs.nordstellar.com/platform/integrations-api/swagger
- type: Examples
url: https://docs.nordstellar.com/platform/integrations-api/code-examples
- aid: nord-security:nord-security-company-details-api
name: Nord Security Company Details API
description: The Company Details API from Nord Security — 4 operation(s) for company details.
humanURL: https://docs.nordstellar.com/enterprise-apis/product-integrations
baseURL: https://enterprise-data-api.nordstellar.com
tags:
- Company Details
properties:
- type: OpenAPI
url: openapi/nord-security-company-details-api-openapi.yml
- type: Documentation
url: https://docs.nordstellar.com/enterprise-apis/product-integrations
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/swagger
- type: Authentication
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/authentication
- type: RateLimits
url: rate-limits/nord-security-rate-limits.yml
- type: Examples
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/code-examples
- type: DataModel
url: data-model/nord-security-data-model.yml
- type: ErrorCatalog
url: errors/nord-security-problem-types.yml
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/crs/swagger
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/cybersec/swagger
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/partner/swagger
- type: Documentation
url: https://docs.nordstellar.com/platform/integrations-api
- type: APIReference
url: https://docs.nordstellar.com/platform/integrations-api/swagger
- type: Examples
url: https://docs.nordstellar.com/platform/integrations-api/code-examples
- aid: nord-security:nord-security-cookie-intelligence-api
name: Nord Security Cookie Intelligence API
description: 'Endpoints for comprehensive cookie data monitoring in data breaches, including zero-knowledge search capabilities.
These operations enable robust cookie security protection and exposure assessment.'
humanURL: https://docs.nordstellar.com/enterprise-apis/product-integrations
baseURL: https://enterprise-data-api.nordstellar.com
tags:
- Cookie Intelligence
properties:
- type: OpenAPI
url: openapi/nord-security-cookie-intelligence-api-openapi.yml
- type: Documentation
url: https://docs.nordstellar.com/enterprise-apis/product-integrations
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/swagger
- type: Authentication
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/authentication
- type: RateLimits
url: rate-limits/nord-security-rate-limits.yml
- type: Examples
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/code-examples
- type: DataModel
url: data-model/nord-security-data-model.yml
- type: ErrorCatalog
url: errors/nord-security-problem-types.yml
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/crs/swagger
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/cybersec/swagger
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/partner/swagger
- type: Documentation
url: https://docs.nordstellar.com/platform/integrations-api
- type: APIReference
url: https://docs.nordstellar.com/platform/integrations-api/swagger
- type: Examples
url: https://docs.nordstellar.com/platform/integrations-api/code-examples
- aid: nord-security:nord-security-cookies-api
name: Nord Security Cookies API
description: The Cookies API from Nord Security — 1 operation(s) for cookies.
humanURL: https://docs.nordstellar.com/enterprise-apis/product-integrations
baseURL: https://enterprise-data-api.nordstellar.com
tags:
- Cookies
properties:
- type: OpenAPI
url: openapi/nord-security-cookies-api-openapi.yml
- type: Documentation
url: https://docs.nordstellar.com/enterprise-apis/product-integrations
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/swagger
- type: Authentication
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/authentication
- type: RateLimits
url: rate-limits/nord-security-rate-limits.yml
- type: Examples
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/code-examples
- type: DataModel
url: data-model/nord-security-data-model.yml
- type: ErrorCatalog
url: errors/nord-security-problem-types.yml
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/crs/swagger
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/cybersec/swagger
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/partner/swagger
- type: Documentation
url: https://docs.nordstellar.com/platform/integrations-api
- type: APIReference
url: https://docs.nordstellar.com/platform/integrations-api/swagger
- type: Examples
url: https://docs.nordstellar.com/platform/integrations-api/code-examples
- aid: nord-security:nord-security-credential-lists-api
name: Nord Security Credential Lists API
description: 'Endpoints for retrieving detailed metadata about breach origins, including credential lists.
These operations provide comprehensive context about credential list breach incidents, affected platforms, and exposure
scope to support your security investigations.'
humanURL: https://docs.nordstellar.com/enterprise-apis/product-integrations
baseURL: https://enterprise-data-api.nordstellar.com
tags:
- Credential Lists
properties:
- type: OpenAPI
url: openapi/nord-security-credential-lists-api-openapi.yml
- type: Documentation
url: https://docs.nordstellar.com/enterprise-apis/product-integrations
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/swagger
- type: Authentication
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/authentication
- type: RateLimits
url: rate-limits/nord-security-rate-limits.yml
- type: Examples
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/code-examples
- type: DataModel
url: data-model/nord-security-data-model.yml
- type: ErrorCatalog
url: errors/nord-security-problem-types.yml
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/crs/swagger
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/cybersec/swagger
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/partner/swagger
- type: Documentation
url: https://docs.nordstellar.com/platform/integrations-api
- type: APIReference
url: https://docs.nordstellar.com/platform/integrations-api/swagger
- type: Examples
url: https://docs.nordstellar.com/platform/integrations-api/code-examples
- aid: nord-security:nord-security-credit-card-intelligence-api
name: Nord Security Credit Card Intelligence API
description: 'Endpoints for comprehensive credit card data monitoring in data breaches, including zero-knowledge search
capabilities.
These operations enable robust credit card security protection and exposure assessment.'
humanURL: https://docs.nordstellar.com/enterprise-apis/product-integrations
baseURL: https://enterprise-data-api.nordstellar.com
tags:
- Credit Card Intelligence
properties:
- type: OpenAPI
url: openapi/nord-security-credit-card-intelligence-api-openapi.yml
- type: Documentation
url: https://docs.nordstellar.com/enterprise-apis/product-integrations
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/swagger
- type: Authentication
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/authentication
- type: RateLimits
url: rate-limits/nord-security-rate-limits.yml
- type: Examples
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/code-examples
- type: DataModel
url: data-model/nord-security-data-model.yml
- type: ErrorCatalog
url: errors/nord-security-problem-types.yml
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/crs/swagger
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/cybersec/swagger
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/partner/swagger
- type: Documentation
url: https://docs.nordstellar.com/platform/integrations-api
- type: APIReference
url: https://docs.nordstellar.com/platform/integrations-api/swagger
- type: Examples
url: https://docs.nordstellar.com/platform/integrations-api/code-examples
- aid: nord-security:nord-security-crypto-addresses-api
name: Nord Security Crypto Addresses API
description: The Crypto Addresses API from Nord Security — 1 operation(s) for crypto addresses.
humanURL: https://docs.nordstellar.com/enterprise-apis/product-integrations
baseURL: https://enterprise-data-api.nordstellar.com
tags:
- Crypto Addresses
properties:
- type: OpenAPI
url: openapi/nord-security-crypto-addresses-api-openapi.yml
- type: Documentation
url: https://docs.nordstellar.com/enterprise-apis/product-integrations
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/swagger
- type: Authentication
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/authentication
- type: RateLimits
url: rate-limits/nord-security-rate-limits.yml
- type: Examples
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/code-examples
- type: DataModel
url: data-model/nord-security-data-model.yml
- type: ErrorCatalog
url: errors/nord-security-problem-types.yml
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/crs/swagger
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/cybersec/swagger
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/partner/swagger
- type: Documentation
url: https://docs.nordstellar.com/platform/integrations-api
- type: APIReference
url: https://docs.nordstellar.com/platform/integrations-api/swagger
- type: Examples
url: https://docs.nordstellar.com/platform/integrations-api/code-examples
- aid: nord-security:nord-security-dark-web-intelligence-api
name: Nord Security Dark Web Intelligence API
description: Endpoints for searching scraped content from the dark web
humanURL: https://docs.nordstellar.com/enterprise-apis/product-integrations
baseURL: https://enterprise-data-api.nordstellar.com
tags:
- Dark Web Intelligence
properties:
- type: OpenAPI
url: openapi/nord-security-dark-web-intelligence-api-openapi.yml
- type: Documentation
url: https://docs.nordstellar.com/enterprise-apis/product-integrations
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/swagger
- type: Authentication
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/authentication
- type: RateLimits
url: rate-limits/nord-security-rate-limits.yml
- type: Examples
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/code-examples
- type: DataModel
url: data-model/nord-security-data-model.yml
- type: ErrorCatalog
url: errors/nord-security-problem-types.yml
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/crs/swagger
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/cybersec/swagger
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/partner/swagger
- type: Documentation
url: https://docs.nordstellar.com/platform/integrations-api
- type: APIReference
url: https://docs.nordstellar.com/platform/integrations-api/swagger
- type: Examples
url: https://docs.nordstellar.com/platform/integrations-api/code-examples
- aid: nord-security:nord-security-domain-intelligence-api
name: Nord Security Domain Intelligence API
description: 'Endpoints for investigating domain exposure in data breaches, including detailed breach information and compromise
analysis.
These operations support protection against domain hijacking, phishing attacks, and other threats targeting domain owners.'
humanURL: https://docs.nordstellar.com/enterprise-apis/product-integrations
baseURL: https://enterprise-data-api.nordstellar.com
tags:
- Domain Intelligence
properties:
- type: OpenAPI
url: openapi/nord-security-domain-intelligence-api-openapi.yml
- type: Documentation
url: https://docs.nordstellar.com/enterprise-apis/product-integrations
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/swagger
- type: Authentication
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/authentication
- type: RateLimits
url: rate-limits/nord-security-rate-limits.yml
- type: Examples
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/code-examples
- type: DataModel
url: data-model/nord-security-data-model.yml
- type: ErrorCatalog
url: errors/nord-security-problem-types.yml
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/crs/swagger
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/cybersec/swagger
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/partner/swagger
- type: Documentation
url: https://docs.nordstellar.com/platform/integrations-api
- type: APIReference
url: https://docs.nordstellar.com/platform/integrations-api/swagger
- type: Examples
url: https://docs.nordstellar.com/platform/integrations-api/code-examples
- aid: nord-security:nord-security-email-intelligence-api
name: Nord Security Email Intelligence API
description: 'Endpoints for comprehensive email address monitoring in data breaches, including detailed breach information,
password exposure, and statistical analysis.
These operations enable robust email security protection, account takeover prevention, and exposure assessment at both
individual and domain-wide levels.'
humanURL: https://docs.nordstellar.com/enterprise-apis/product-integrations
baseURL: https://enterprise-data-api.nordstellar.com
tags:
- Email Intelligence
properties:
- type: OpenAPI
url: openapi/nord-security-email-intelligence-api-openapi.yml
- type: Documentation
url: https://docs.nordstellar.com/enterprise-apis/product-integrations
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/swagger
- type: Authentication
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/authentication
- type: RateLimits
url: rate-limits/nord-security-rate-limits.yml
- type: Examples
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/code-examples
- type: DataModel
url: data-model/nord-security-data-model.yml
- type: ErrorCatalog
url: errors/nord-security-problem-types.yml
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/crs/swagger
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/cybersec/swagger
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/partner/swagger
- type: Documentation
url: https://docs.nordstellar.com/platform/integrations-api
- type: APIReference
url: https://docs.nordstellar.com/platform/integrations-api/swagger
- type: Examples
url: https://docs.nordstellar.com/platform/integrations-api/code-examples
- aid: nord-security:nord-security-events-api
name: Nord Security Events API
description: The Events API from Nord Security — 36 operation(s) for events.
humanURL: https://docs.nordstellar.com/enterprise-apis/product-integrations
baseURL: https://enterprise-data-api.nordstellar.com
tags:
- Event
tags_raw:
- Events
properties:
- type: OpenAPI
url: openapi/nord-security-events-api-openapi.yml
- type: Documentation
url: https://docs.nordstellar.com/enterprise-apis/product-integrations
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/swagger
- type: Authentication
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/authentication
- type: RateLimits
url: rate-limits/nord-security-rate-limits.yml
- type: Examples
url: https://docs.nordstellar.com/enterprise-apis/product-integrations/code-examples
- type: DataModel
url: data-model/nord-security-data-model.yml
- type: ErrorCatalog
url: errors/nord-security-problem-types.yml
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/crs/swagger
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/cybersec/swagger
- type: APIReference
url: https://docs.nordstellar.com/enterprise-apis/partner/swagger
- type: Documentation
url: https://docs.nordstellar.com/platform/integrations-api
- type: APIReference
url: https://docs.nordstellar.com/platform/integrations-api/swagger
- type: Examples
url: https://docs.nordstellar.com/platform/integrations-api/code-examples
- aid: nord-security:nord-security-files-api
name: Nord Security Files API
description: The Files API from Nord Security — 8 operation(s) for files.
humanURL: https://docs.nordstellar.com/enterprise-apis/product-integrations
baseURL: https://enterprise-data-api.nordstellar.com
tags:
# --- truncated at 32 KB (65 KB total) ---
# Full source: https://artifacts.apis.io/nord-security/apis.yml
Nord Security API — frequently asked questions
Does Nord Security have an API?
Yes. APIs.io lists 35 APIs from Nord Security, including NordStellar MCP Server, NordLayer Partner / MSP API and NordLayer SCIM 2.0 Provisioning, and 32 more.
Is there an OpenAPI specification for the Nord Security API?
Yes. APIs.io indexes 30 OpenAPI specifications for Nord Security, each linked for download from this page.
How do I authenticate with the Nord Security API?
Nord Security uses bearer-token authentication (apiKey/http · 6 schemes). The details are profiled on APIs.io as Nord Security Authentication.
How much does the Nord Security API cost?
Nord Security publishes its prices; its Security Console plan is $4500 as of 2026-10-28. APIs.io lists 3 pricing plans for Nord Security, with each plan's price, limits and inclusions under Pricing on this page.
Does Nord Security have an MCP server?
Yes. APIs.io lists 1 MCP server for Nord Security: Remote MCP server at platform-mcp.nordstellar.com over HTTP; 4 tools listed.
Is the Nord Security API ready for AI agents?
Nord Security has a Kin Score of 65.3 out of 100 (strong) and an Agent Readiness score of 42.9 (agent-ready), scored by API Evangelist on 2026-11-13.
Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we
store it to create your key and to recognise you if you sign in with another
provider. See our Privacy Policy and
Terms.
Kin Score
How this is scored →
It updates itself when the score changes. Paste this where you link to your API docs: