# Notary Project

**Canonical:** https://apis.io/providers/notary/  
**Website:** https://notaryproject.dev  
**APIs profiled:** 4

The Notary Project is a CNCF incubating set of specifications and tools for signing and verifying container images and other OCI artifacts. It provides Notation, a CLI and library for signing artifacts stored in OCI-compliant registries. The project defines standards for signature formats, trust policies, and verification workflows to secure software supply chains.

## Kin Score — 27.1 / 100 (thin)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+0.0 from 27.1).

| Facet | Score |
|---|---|
| Discoverability | 72.2 |
| Contract Quality | 29.6 |
| Governance | 9.8 |
| Contract Governance | 9.8 |
| Operational Transparency | 26.3 |
| Developer Ergonomics | 23.8 |
| Commercial Clarity | 15.8 |
| Access Clarity | 15.8 |

## Agent readiness — 3.0 (human-only)

| Dimension | Value |
|---|---|
| Spec Presence | no |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | no |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | documented |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Freemium — onboarding: unknown, pricing: freemium, trial: no (confidence: medium).

## APIs (4)

- **Notary Project Signing Specification** — The Notary Project specification defines the signature envelope format, trust store and trust policy for container image signing and verification. It supports multiple signature...
- **Notation CLI** — Notation is the command-line tool that implements the Notary Project specifications for signing and verifying OCI artifacts stored in container registries. It supports signing w...
- **notation-go Library** — notation-go is the official Go library for signing and verifying OCI artifacts using the Notary Project specifications. It provides the programmatic interface used by the Notati...
- **Notation Plugin Extensibility** — The Notation plugin extensibility specification defines the interface that third-party plugins must implement to integrate with Notation for key management, signing, and verific...

## Security (1)

- **Notary Domain Security** — TLSv1.3 · HSTS

## Plans (1)

- **Notary Plans Pricing**

## Tags

Cloud-Native, Container Security, Image Signing, Incubating, OCI, Verification

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/notary/). Scores are computed from the provider's own public artifacts under a published rubric.