# Nord Security

**Canonical:** https://apis.io/providers/nord-security/  
**Website:** https://nordsecurity.com/  
**APIs profiled:** 10

Nord Security is a Lithuania-founded digital security and privacy company whose consumer and business portfolio spans NordVPN, NordPass, NordLocker, NordLayer (network access security for business), NordProtect/Coveron, Saily (eSIM) and NordStellar (external threat exposure management). Its developer-facing surface is concentrated in NordStellar, which publishes five OpenAPI-described enterprise APIs — the Enterprise Data (Dark Web) API, Company Risk Scoring API, Cybersec API, Partners API and Platform Integrations API — plus a remote MCP server, sixteen provider-published agent skills, an n8n community node and SIEM integrations (Microsoft Sentinel, CrowdStrike). NordLayer adds SCIM 2.0 user provisioning and a partner/MSP API key surface, while the NordSecurity GitHub organization publishes the NordVPN Linux client together with 43 gRPC/protobuf service definitions covering the daemon, meshnet, fileshare, norduser and telemetry surfaces.

## Kin Score — 50.7 / 100 (developing)

Scored 2026-08-25 under rubric 0.14.0. Trend: flat (+0.0 from 50.7).

| Facet | Score |
|---|---|
| Discoverability | 92.6 |
| Contract Quality | 50.2 |
| Governance | 16.7 |
| Contract Governance | 16.7 |
| Operational Transparency | 23.7 |
| Developer Ergonomics | 71.4 |
| Commercial Clarity | 47.4 |
| Access Clarity | 47.4 |

## Agent readiness — 45.7 (agent-ready)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | verified |
| Auth Clarity | bearer |
| Idempotency | no |
| Error Semantics | verified |
| OpenAPI Examples | verified |
| Rate Limit Signal | verified |
| Event Surface Described | no |
| Agent Skills | yes |
| Well Known Catalog | no |
| Consent Identity | yes |
| Agent Card | no |
| Dry Run Mode | no |
| Delegated Identity | no |
| Protected Resource Metadata | no |
| Dynamic Client Registration | no |
| Agentic Commerce | no |

## APIs (10)

- **NordStellar Enterprise Data API** — Also marketed as the NordStellar Dark Web API. Breach-intelligence data API over malware/infostealer logs, breached databases, credential lists, cookie and password intelligence...
- **NordStellar Company Risk Scoring API** — Evaluates the cybersecurity risk of an external company identified primarily by domain name, returning scored risk assessments for third-party/vendor risk workflows. 14 operatio...
- **NordStellar Cybersec API** — URL and file scanning API with allow/deny list management and account usage control (AUC). 23 operations, OpenAPI 3.0, bearer-token authentication, with documented X-RateLimit h...
- **NordStellar Partners API** — Partner-facing API for managing partner accounts and customer relationships, including creating and managing customer organizations. 5 operations, OpenAPI 3.0.4, API key header ...
- **NordStellar Platform Integrations API** — Connects NordStellar's monitoring features to external security tools, dashboards and automated workflows — events, alerts and platform data for SIEM/SOAR forwarding. Three publ...
- **NordStellar MCP Server** — Remote MCP server that lets any MCP-compatible assistant query the NordStellar platform in natural language. Clients connect through the open-source nordstellar-mcp auth proxy (...
- **NordLayer Partner / MSP API** — Partner-facing API behind the NordLayer Service Management Portal. API keys are self-issued in the SMP Integrations tab with expiry and one-time visibility, and let MSPs create ...
- **NordLayer SCIM 2.0 Provisioning** — SCIM-based user provisioning surface used to create users, update user attributes, deactivate users and push groups from Okta and Microsoft Entra ID into NordLayer. The SCIM sec...
- **NordPass Provider API** — Usage-reporting API for NordPass provider/MSP partners, documented in the NordPass help centre. NordPass separately supports SCIM provisioning from Okta and Microsoft Entra ID f...
- **NordVPN Public Server API** — Unauthenticated JSON API that NordVPN's own clients and the open-source Linux client use to enumerate the server estate — servers, countries, cities, groups and technologies. It...

## MCP servers (2)

- **Nord Security MCP Server**
- **Nord Security MCP Server**

## Security (4)

- **Nord Security Authentication** — apiKey/http · 6 schemes
- **Nord Security Domain Security** — TLSv1.3 · HSTS · DMARC
- **Nord Security Vulnerability Disclosure** — Hackerone · security.txt · contact published
- **Nord Security Trust Center** — ISO 27001, SOC 2 Type II, HIPAA, PCI DSS

## Tags

Cybersecurity, Threat Intelligence, Dark Web Monitoring, Attack Surface Management, Breach Intelligence, VPN, Password Management, Network Security, Zero Trust, Privacy, MCP, Agent Skills, gRPC, Company

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/nord-security/). Scores are computed from the provider's own public artifacts under a published rubric.