npm

npm is the world's largest software registry, hosting over two million JavaScript packages for the Node.js ecosystem. Their developer platform provides APIs for searching and retrieving package metadata, managing access tokens, subscribing to registry event webhooks, and publishing packages with supply chain provenance verification.

npm publishes 17 API contracts indexed on the APIs.io network, including Registry API, Hooks API, Downloads API, and 14 more. Tagged areas include Packages, JavaScript, Node.js, Package Management, and Registry.

The npm catalog on APIs.io includes 1 event-driven AsyncAPI specification, 1 JSON-LD context, and 3 Spectral governance rulesets.

npm’s developer surface includes CLI, changelog, getting-started guide, authentication, developer portal, documentation, engineering blog, and 38 more developer resources.

🌐 Visit website 📡 Profile data on GitHub

60.8/100 strong ▲ 11.0 Agent 29/100 agent ready Heartbeat 63/100 slowing saas Full breakdown ↓
scored 2026-11-06 · rubric v0.27.0 · Show this score on your site →

AccessFreemiumSelf serveFree trial⚡ Free to try

3 published contracts 3 Agent Skills

Packages JavaScript Node.js Package Management Registry Security Developer Tools npm

What this lets a business do 2

Business capabilities this provider's published APIs can perform, derived from its own contracts. Browse all capabilities →

Developer Platform & API Ecosystem Management

BC-4270

HooksOIDCTokens

POST /-/npm/v1/hooks/hook GET /-/npm/v1/tokens POST /-/npm/v1/tokens POST /-/npm/v1/security/oidc/tokens

Open Source Ecosystem

AE-250

Packages

GET /{package}

Kin Score

Kin Score How this is scored →
scored 2026-11-06 · rubric v0.27.0

Composite quality — 60.8/100 · strong

Contract Quality 13.5 / 19

Developer Ergonomics 10.1 / 15

Access Clarity 7.5 / 15

Operational Transparency 6.2 / 10

Contract Governance 2.0 / 9

Discoverability 5.2 / 8

Regulatory Posture 4.6 / 15

Create-or-Update Ergonomics 0.0 / 10

Agent readiness — 29/100 · agent ready

Machine-Readable Contract 18 / 18

Agentic Access Contract 10 / 10

Documented Reversibility 0 / 6

MCP Server 0 / 12

Machine-Readable Auth 10 / 10

Idempotency 0 / 9

Stable Error Semantics 8 / 8

Request/Response Examples 7 / 7

Rate-Limit Signaling 7 / 7

Typed Event Surface 6 / 6

Agent Skills 5 / 5

Well-Known Catalog 0 / 4

Consent & Bot Identity 0 / 3

A2A Agent Card 0 / 8

Dry-Run / Simulate Mode 0 / 4

Delegated User Identity 0 / 6

Protected Resource Metadata 0 / 5

Registration Without a Human 0 / 6

Agentic Commerce Well-Known Document 0 / 5

Pagination 0 / 5

Distinct Operations 3 / 3

MCP Tool Quality 6 / 6

Regulatory Posture applies to this provider. Its tags matched the Horizontal (data, software, accessibility, platform) regime, so Regulatory Posture carries 15 points of the composite. If this regime is wrong for your business, say so on your provider repo — the applicability map is public and we will correct it.

Create-or-Update Ergonomics applies to this provider. This API accepts writes, so it carries 10 points of the composite. It is scored from the published contracts themselves: whether a caller can create-or-update in one call, whether the write accepts a key the caller already holds, and whether the response says which branch ran. Without that, every write needs a search-and-branch in front of it, and the first time that check is skipped a duplicate record is created. Scored against the observed mean rather than raw — a provider at the catalog average is unchanged by this facet, not penalised by it.

The six quality facets above are damped to 75 points between them, because the conditional facet above carries the other 25. That is why each facet's contribution is shown against a damped maximum: raising a quality facet moves the composite by 75% of its nominal weight, not 100%. The full arithmetic is at apis.io/rating/.

Show this score on your site.

It updates itself when the score changes. Paste this where you link to your API docs:

<a href="https://apis.io/providers/npm/"><img src="https://apis.io/badge/npm/card.svg" alt="npm on APIs.io — Kin Score by API Evangelist"></a>

Other styles, a README pill and a shields.io endpoint are on the badge page.

Raise your score.

Agent readiness — checks not met, largest first (exact, from this profile):

MCP Server +12 pts — deployment.mode + probe verdict on the mcp/ manifest, not the pointer; an unprobed slug falls back to authorship
Idempotency +9 pts — OpenAPI mutating operations declare an idempotency key — a header, a request-body property, or a named de-duplication token whose own description says so (verified); else common[].type matches /idempoten/i (documented)
A2A Agent Card +8 pts — a2a/-a2a.yml manifest, graded on conformance.grade against A2A 1.0.0
Registration Without a Human +6 pts — a `registration_endpoint` in the served RFC 8414 / OIDC discovery document
Delegated User Identity +6 pts — a served discovery document listing authorization_code in grant_types_supported (served), else an oauth2 authorizationCode flow or openIdConnect declared in an OpenAPI (documented)
Documented Reversibility +6 pts — a reversal operation in the contract, graded up when a window is documented too

6 more unmet checks in the Agent Readiness table above.

Kin Score — facets with the most composite points still available (weight × headroom):

Access Clarity scores 50.0 — up to +10.0 composite points
Contract Governance scores 22.0 — up to +9.4 composite points
Contract Quality scores 71.8 — up to +7.1 composite points

Each check links to what satisfies it. Publish the artifact, or tell us where it already lives, and the score moves on the next scoring run.

Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. Every facet and dimension name above is a link: it opens that measurement's own page — what it means, the exact checks that feed it, how the whole catalog distributes on it, and the providers at the top of it. This rating is computed from the provider profile at artifacts.apis.io/npm/apis.yml: open an issue on github.com/api-evangelist/npm to ask a question or point us at an artifact you publish. Submit an artifact on GitHub — free → Manage your own listing — the Influence plan, $499/mo →

Standards implemented 1

Standards this provider implements or carries. De facto ones are profiled and measured by the API Commons; formal ones come from the standards directory and are linked by the provider's own tags. The evidence column says how each claim was established — not that it was made.

OpenAPI

measured — observed by APIs.io (published)

APIs 17

Individual APIs this provider publishes, each with its own machine-readable definition.

npm Registry API

The npm Registry API provides programmatic access to the npm package registry, the largest software registry in the world hosting over two million JavaScript packages. Developer...

npm Hooks API

The npm Hooks API allows developers to subscribe to notifications about changes in the npm registry. Hooks send HTTP POST payloads to a configured URI whenever a package is chan...

npm CLI

The npm CLI is the official command-line interface for the npm package manager, providing developers with tools to install, publish, and manage JavaScript packages and their dep...

npm Provenance

npm Provenance provides supply chain security for JavaScript packages by establishing a verifiable link between a published package and its source code repository and build envi...

npm Downloads API

Package tarball downloads.

npm OIDC API

OpenID Connect token exchange for trusted publishing. Exchange OIDC identity tokens from supported CI/CD providers for short-lived npm registry access tokens.

npm Packages API

Package metadata retrieval, including full packuments and version-specific documents.

npm Search API

Full-text search across the npm registry with weighted scoring.

npm Tokens API

Manage npm access tokens for authentication. Create, list, and delete tokens with customizable permissions and restrictions.

npm Trusted Publishers API

Configure trusted publisher settings for packages to enable OIDC token exchange from CI/CD providers without long-lived npm tokens.

npm Access API

The Access API from npm — 5 operation(s) for access.

npm Audit API

The Audit API from npm — 1 operation(s) for audit.

npm Org API

The Org API from npm — 2 operation(s) for org.

npm Publish API

The Publish API from npm — 1 operation(s) for publish.

npm Stage API

The Stage API from npm — 5 operation(s) for stage.

npm Team API

The Team API from npm — 3 operation(s) for team.

npm Trust API

Trust-related endpoints for managing package trust and security settings.

Scroll for all 17

Postman Collections 8

Ready-to-run Postman collections for exercising this provider's APIs.

npm Hooks Downloads API

POSTMAN

npm Downloads Hooks API

POSTMAN

npm Hooks Downloads OIDC API

POSTMAN

npm Hooks Downloads Packages API

POSTMAN

npm Hooks Downloads Registry API

POSTMAN

npm Hooks Downloads Search API

POSTMAN

npm Hooks Downloads Tokens API

POSTMAN

npm Hooks Downloads Trusted Publishers API

POSTMAN

Scroll for all 8

Open Collections 9

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

npm Hooks Downloads API

OPEN COLLECTION

npm Downloads Hooks API

OPEN COLLECTION

npm Hooks Downloads OIDC API

OPEN COLLECTION

npm Hooks Downloads Packages API

OPEN COLLECTION

npm Public API

OPEN COLLECTION

npm Hooks Downloads Registry API

OPEN COLLECTION

npm Hooks Downloads Search API

OPEN COLLECTION

npm Hooks Downloads Tokens API

OPEN COLLECTION

npm Hooks Downloads Trusted Publishers API

OPEN COLLECTION

Scroll for all 9

Agent Skills 3

Packaged agent skills for driving this provider's APIs from an AI assistant.

npm-configure-trusted-publishing

AGENT SKILL

npm-manage-access-tokens

AGENT SKILL

npm-staged-publish

AGENT SKILL

npm API pricing

Not yet checked against npm's own pricing page. Compiled by API Evangelist on 2026-05-05 from github.com/pricing; confirm before you rely on a figure. A free plan or tier is listed.

Plan	Price
Public Registry freemium	Free
GitHub Free (with npm) freemium	Free
GitHub Team subscription	$4.00 per per user/month / month
GitHub Enterprise enterprise	$21.00 per per user/month / month

Plan details, limits and sources →

Rate limits

Public registry reads: see CDN abuse policy; not numerically published varies
Replication _changes pagination: 10000 results per request
Search API page size: 250 results per request

Compiled by API Evangelist, not yet checked against npm's documentation. All 4 limits →

Billed by: seat · FinOps profile →

Pricing Plans 1

Published pricing tiers and plan structures.

Npm Plans Pricing

4 plans

PLANS

Rate Limits 1

Documented rate limits and quota policies.

Npm Rate Limits

4 limits

RATE LIMITS

Service Levels 1

Uptime the provider promises or reports, as SLA4OAI. Read from its own pages; APIs.io runs no monitors.

npm

SLA

FinOps 1

Cost, billing, and metering signals for API financial operations.

Npm Finops

FINOPS

Event Specifications 1

AsyncAPI definitions for this provider's event-driven and streaming APIs.

npm Hooks Events

The npm Hooks event system delivers HTTP POST payloads to subscriber endpoints whenever changes occur in the npm registry. Hooks can be configured to watch for changes to indivi...

ASYNCAPI

Semantic Vocabularies 1

JSON-LD contexts and semantic vocabularies used across these APIs.

Npm Context

0 classes · 8 properties

JSON-LD

Spectral Rules 3

Spectral governance rulesets for linting and validating these APIs.

npm — asyncapi rules

6 rules · 1 errors 4 warnings 1 info

SPECTRAL

npm — jsonschema rules

6 rules · 4 warnings 2 info

SPECTRAL

npm API Rules

73 rules · 54 errors 11 warnings 8 info

SPECTRAL

OpenAPI Overlays 1

Overlays applied on top of this provider's contracts. Each card says who wrote it: a document the provider publishes, or one API Evangelist derived or generated.

Npm Registry Reference Overlay

1 action · update · npm-registry-reference-openapi.yml

GENERATED

JSON Schema 32

Standalone JSON Schema definitions for this provider's data models.

Distribution

6 properties

JSON SCHEMA

Error

2 properties

JSON SCHEMA

npm Hook Event Payload

8 properties

JSON SCHEMA

Hook

10 properties

JSON SCHEMA

HookCreateRequest

4 properties

JSON SCHEMA

HookUpdateRequest

2 properties

JSON SCHEMA

OidcConfigsCreate

0 properties

JSON SCHEMA

OidcConfigs

0 properties

JSON SCHEMA

PackageDocument

16 properties

JSON SCHEMA

npm Package Document

17 properties

JSON SCHEMA

PackageVersion

19 properties

JSON SCHEMA

PackageVersionStatus

3 properties

JSON SCHEMA

PackageDocument

16 properties

JSON SCHEMA

PackageVersion

19 properties

JSON SCHEMA

Person

3 properties

JSON SCHEMA

RegistryMetadata

11 properties

JSON SCHEMA

Repository

2 properties

JSON SCHEMA

SearchResults

3 properties

JSON SCHEMA

SearchResultItem

3 properties

JSON SCHEMA

SearchResults

3 properties

JSON SCHEMA

StagePackageList

4 properties

JSON SCHEMA

StagePackageVersion

10 properties

JSON SCHEMA

StagedPackumentRequest

18 properties

JSON SCHEMA

TokenCreateRequest

4 properties

JSON SCHEMA

Token

7 properties

JSON SCHEMA

TokenWithValue

7 properties

JSON SCHEMA

TokenCreateRequest

4 properties

JSON SCHEMA

TokenWithValue

1 properties

JSON SCHEMA

TrustedPublisherRequest

5 properties

JSON SCHEMA

TrustedPublisher

7 properties

JSON SCHEMA

TrustedPublisher

7 properties

JSON SCHEMA

TrustedPublisherRequest

5 properties

JSON SCHEMA

Scroll for all 32

JSON Structure 1

JSON Structure definitions describing this provider's data shapes.

Npm Structure

0 properties

JSON STRUCTURE

Security Posture 3

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Npm Authentication

http · 2 schemes

SECURITY

Npm Domain Security

TLSv1.3 · DNSSEC · DMARC

SECURITY

Npm Vulnerability Disclosure

security.txt · contact published

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Npm Agentic Access

17 operations · 8 acting

AGENTIC

Resources

Get Started 3

Portal, sign-up, and the first successful call

GettingStarted

GettingStarted

Portal

Portal

Login

Documentation 2

Reference material describing how the API behaves

ContributionGuide

ContributionGuide

Documentation

Documentation

Agent Surfaces 3

MCP servers, agent skills, and machine-readable catalogs

AgentSkill

AgentSkill

WellKnown

WellKnown

AgenticAccess

AgenticAccess

Design & Contract 10

Pagination, idempotency, versioning, errors, and events

Spectral

Spectral

Spectral

JSONLD

Vocabulary

DataModel

Conventions

Lifecycle

ErrorCatalog

Conformance

Scroll for all 10

Build 6

SDKs, sample code, and the tooling you integrate with

CLI

SDKs

Packages

CodeOfConduct

PostmanWorkspace

GitHubOrg

Access & Security 5

Authentication, authorization, and security posture

SecurityTxt

SecurityTxt

SecurityPolicy

SecurityPolicy

VulnerabilityDisclosure

VulnerabilityDisclosure

DomainSecurity

DomainSecurity

Authentication

Authentication

Operate 5

Status, limits, changes, and where to get help

ChangeLog

Deprecation

RateLimits

Support

StatusPage

Commercial 4

Pricing, plans, and the legal terms of use

Plans

FinOps

PrivacyPolicy

TermsOfService

Company 3

The organization behind the API

LinkedIn

Blog

Blog

Website

Website

Other 4

Properties that don't map to a standard resource type

Overlay

Hosts

Vendors

CapabilityMap

Source (apis.yml)

aid: npm
name: npm
x-parent: github
description: npm is the world's largest software registry, hosting over two million JavaScript packages for the Node.js ecosystem.
  Their developer platform provides APIs for searching and retrieving package metadata, managing access tokens, subscribing
  to registry event webhooks, and publishing packages with supply chain provenance verification.
kind: contract
deliveryModel:
  model: saas
  license_evidence:
    not_product:
    - npm/cli
  open_source: unknown
  commercial: true
  callable_host: true
  label: Hosted service · you call their endpoint
  confidence: low
  source:
  - openapi
  - pricing
  - repository-not-product
  generated: '2026-09-25'
  method: derived
accessModel:
  pricing: freemium
  onboarding: self-serve
  trial: true
  try_now: true
  public: false
  gated: none
  gated_source:
  - onboarding
  label: Freemium (free trial) · Self-serve signup
  confidence: medium
  source:
  - plans
  - authentication
  - security
  generated: '2026-11-06'
  method: derived
position: Consuming
access: 3rd-Party
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/npm.png
tags:
- Packages
- JavaScript
- Node.js
- Package Management
- Registry
- Security
- Developer Tools
- npm
url: https://www.npmjs.com/
created: '2026-03-20'
modified: '2026-05-19'
specificationVersion: '0.23'
maintainers:
- FN: API Evangelist
  email: info@apievangelist.com
common:
- type: AgentSkill
  url: skills/_index.yml
- type: Overlay
  url: overlays/npm-registry-reference-overlay.yaml
- type: Spectral
  url: rules/npm-rules.yml
- type: Spectral
  url: rules/npm-jsonschema-spectral-rules.yml
- type: Spectral
  url: rules/npm-asyncapi-spectral-rules.yml
- type: JSONLD
  url: json-ld/npm-context.jsonld
- type: Vocabulary
  url: vocabulary/npm-vocabulary.yml
- type: DataModel
  url: data-model/npm-data-model.yml
- type: CLI
  url: cli/npm-cli.yml
- type: ChangeLog
  url: changelog/npm-changelog.yml
- type: Conventions
  url: conventions/npm-conventions.yml
- type: Deprecation
  url: https://docs.npmjs.org/deprecating-and-undeprecating-packages-or-package-versions
- type: Lifecycle
  url: lifecycle/npm-lifecycle.yml
- type: ErrorCatalog
  url: errors/npm-problem-types.yml
- type: Conformance
  url: conformance/npm-conformance.yml
- type: SecurityTxt
  url: well-known/npm-status-security.txt
- type: WellKnown
  url: well-known/npm-well-known.yml
- type: Hosts
  url: hosts/npm-hosts.yml
- type: Vendors
  url: vendors/npm-vendors.yml
- type: SDKs
  url: packages/npm-packages.yml
- type: Packages
  url: packages/npm-packages.yml
- type: GettingStarted
  url: https://docs.npmjs.org/getting-started
- type: Plans
  url: plans/npm-plans-pricing.yml
- type: RateLimits
  url: rate-limits/npm-rate-limits.yml
- type: FinOps
  url: finops/npm-finops.yml
- type: CapabilityMap
  url: capabilities/npm-capability-edges.yml
  name: npm Business Capability Map
- type: SecurityPolicy
  url: https://github.com/npm/cli/blob/latest/SECURITY.md
- type: CodeOfConduct
  url: https://github.com/npm/cli/blob/latest/CODE_OF_CONDUCT.md
- type: ContributionGuide
  url: https://github.com/npm/cli/blob/latest/CONTRIBUTING.md
- type: PostmanWorkspace
  url: https://www.postman.com/kinlaneapi/npm/overview
- type: AgenticAccess
  url: agentic-access/npm-agentic-access.yml
- type: VulnerabilityDisclosure
  url: security/npm-vulnerability-disclosure.yml
- type: DomainSecurity
  url: security/npm-domain-security.yml
- type: Authentication
  url: authentication/npm-authentication.yml
- type: LinkedIn
  url: https://www.linkedin.com/company/npm-inc-
- url: https://www.npmjs.com/
  name: npm Portal
  type: Portal
- url: https://docs.npmjs.com/
  name: npm Documentation
  type: Documentation
- url: https://blog.npmjs.org/
  name: npm Blog
  type: Blog
- url: https://www.npmjs.com/login
  name: Login
  type: Login
- url: https://www.npmjs.com/support
  name: Support
  type: Support
- url: https://docs.npmjs.com/policies/privacy
  name: Privacy Policy
  type: PrivacyPolicy
- url: https://docs.npmjs.com/policies/terms
  name: Terms of Service
  type: TermsOfService
- url: https://www.npmjs.com/
  name: Website
  type: Website
- url: https://github.com/npm
  name: GitHub Organization
  type: GitHubOrg
- url: https://status.npmjs.org/
  name: Status
  type: StatusPage
apis:
- aid: npm:registry
  name: npm Registry API
  description: The npm Registry API provides programmatic access to the npm package registry, the largest software registry
    in the world hosting over two million JavaScript packages. Developers can query package metadata, download tarballs, search
    for packages, and retrieve version-specific information. The API follows CouchDB-based conventions and serves package
    manifests in JSON format, enabling tools and services to integrate with the npm ecosystem for dependency resolution, package
    discovery, and automated workflows.
  humanURL: https://github.com/npm/registry/blob/main/docs/REGISTRY-API.md
  baseURL: https://registry.npmjs.org
  tags:
  - Packages
  - JavaScript
  - Registry
  - Package Management
  - Node.js
  properties:
  - type: Documentation
    url: https://github.com/npm/registry/blob/main/docs/REGISTRY-API.md
  - type: OpenAPI
    url: openapi/npm-registry-api-openapi.yml
  - type: JSONSchema
    url: json-schema/npm-package-schema.json
- aid: npm:hooks
  name: npm Hooks API
  description: The npm Hooks API allows developers to subscribe to notifications about changes in the npm registry. Hooks
    send HTTP POST payloads to a configured URI whenever a package is changed, enabling developers to build integrations that
    respond to registry events in real time. Users can add hooks to follow specific packages, track all activity of given
    npm users, or monitor all packages within an organization or user scope. The API provides endpoints for creating, listing,
    updating, and deleting hook subscriptions.
  humanURL: https://blog.npmjs.org/post/145260155635/introducing-hooks-get-notifications-of-npm
  tags:
  - Webhook
  - Notification
  - Event
  - Automation
  - Packages
  tags_raw:
  - Webhooks
  - Notifications
  - Events
  - Automation
  - Packages
  properties:
  - type: Documentation
    url: https://blog.npmjs.org/post/145260155635/introducing-hooks-get-notifications-of-npm
  - type: OpenAPI
    url: openapi/npm-hooks-api-openapi.yml
  - type: AsyncAPI
    url: asyncapi/npm-hooks-asyncapi.yml
  - type: JSONSchema
    url: json-schema/npm-hook-event-schema.json
- aid: npm:cli
  name: npm CLI
  description: The npm CLI is the official command-line interface for the npm package manager, providing developers with tools
    to install, publish, and manage JavaScript packages and their dependencies. It supports package publishing with provenance
    attestation via Sigstore, workspace management for monorepos, script execution, semantic versioning, and comprehensive
    dependency tree management. The CLI is bundled with Node.js and serves as the primary developer interface for interacting
    with the npm registry.
  humanURL: https://docs.npmjs.com/cli
  tags:
  - Command Line
  - Package Management
  - JavaScript
  - Node.js
  - Developer Tools
  properties:
  - type: Documentation
    url: https://docs.npmjs.com/cli
  - type: SourceCode
    url: https://github.com/npm/cli
- aid: npm:provenance
  name: npm Provenance
  description: npm Provenance provides supply chain security for JavaScript packages by establishing a verifiable link between
    a published package and its source code repository and build environment. When a package is published with provenance,
    it is signed using Sigstore public good servers and the attestation is logged in a public transparency ledger. This allows
    developers to verify where and how a package was built before downloading it, helping to protect against supply chain
    attacks and ensuring the integrity of the npm ecosystem.
  humanURL: https://docs.npmjs.com/generating-provenance-statements
  tags:
  - Security
  - Supply Chain
  - Verification
  - Sigstore
  - Transparency
  - CI/CD
  properties:
  - type: Documentation
    url: https://docs.npmjs.com/generating-provenance-statements
  - type: Documentation
    url: https://github.blog/security/supply-chain-security/introducing-npm-package-provenance/
- aid: npm:npm-downloads-api
  name: npm Downloads API
  description: Package tarball downloads.
  humanURL: https://github.com/npm/registry/blob/main/docs/REGISTRY-API.md
  baseURL: https://registry.npmjs.org
  tags:
  - Downloads
  properties:
  - type: OpenAPI
    url: openapi/npm-downloads-api-openapi.yml
  - type: Documentation
    url: https://api-docs.npmjs.com/
- aid: npm:npm-oidc-api
  name: npm OIDC API
  description: OpenID Connect token exchange for trusted publishing. Exchange OIDC identity tokens from supported CI/CD providers
    for short-lived npm registry access tokens.
  humanURL: https://github.com/npm/registry/blob/main/docs/REGISTRY-API.md
  baseURL: https://registry.npmjs.org
  tags:
  - OpenID Connect
  tags_raw:
  - OIDC
  properties:
  - type: OpenAPI
    url: openapi/npm-oidc-api-openapi.yml
  - type: Documentation
    url: https://api-docs.npmjs.com/
- aid: npm:npm-packages-api
  name: npm Packages API
  description: Package metadata retrieval, including full packuments and version-specific documents.
  humanURL: https://github.com/npm/registry/blob/main/docs/REGISTRY-API.md
  baseURL: https://registry.npmjs.org
  tags:
  - Packages
  properties:
  - type: OpenAPI
    url: openapi/npm-packages-api-openapi.yml
  - type: Documentation
    url: https://api-docs.npmjs.com/
  - type: JSONSchema
    url: json-schema/npm-package-version-schema.json
  - type: JSONSchema
    url: json-schema/npm-package-document-schema.json
- aid: npm:npm-search-api
  name: npm Search API
  description: Full-text search across the npm registry with weighted scoring.
  humanURL: https://github.com/npm/registry/blob/main/docs/REGISTRY-API.md
  baseURL: https://registry.npmjs.org
  tags:
  - Search
  properties:
  - type: OpenAPI
    url: openapi/npm-search-api-openapi.yml
  - type: Documentation
    url: https://api-docs.npmjs.com/
  - type: JSONSchema
    url: json-schema/npm-search-results-schema.json
- aid: npm:npm-tokens-api
  name: npm Tokens API
  description: Manage npm access tokens for authentication. Create, list, and delete tokens with customizable permissions
    and restrictions.
  humanURL: https://github.com/npm/registry/blob/main/docs/REGISTRY-API.md
  baseURL: https://registry.npmjs.org
  tags:
  - Tokens
  properties:
  - type: OpenAPI
    url: openapi/npm-tokens-api-openapi.yml
  - type: Documentation
    url: https://api-docs.npmjs.com/
  - type: JSONSchema
    url: json-schema/npm-token-schema.json
  - type: JSONSchema
    url: json-schema/npm-token-create-request-schema.json
  - type: JSONSchema
    url: json-schema/npm-token-with-value-schema.json
- aid: npm:npm-trusted-publishers-api
  name: npm Trusted Publishers API
  description: Configure trusted publisher settings for packages to enable OIDC token exchange from CI/CD providers without
    long-lived npm tokens.
  humanURL: https://github.com/npm/registry/blob/main/docs/REGISTRY-API.md
  baseURL: https://registry.npmjs.org
  tags:
  - Trusted Publishers
  properties:
  - type: OpenAPI
    url: openapi/npm-trusted-publishers-api-openapi.yml
  - type: Documentation
    url: https://api-docs.npmjs.com/
  - type: JSONSchema
    url: json-schema/npm-trusted-publisher-schema.json
  - type: JSONSchema
    url: json-schema/npm-trusted-publisher-request-schema.json
- aid: npm:npm-access-api
  name: npm Access API
  description: The Access API from npm — 5 operation(s) for access.
  humanURL: https://github.com/npm/registry/blob/main/docs/REGISTRY-API.md
  baseURL: https://registry.npmjs.org
  tags:
  - Access
  properties:
  - type: OpenAPI
    url: openapi/npm-access-api-openapi.yml
  - type: Documentation
    url: https://api-docs.npmjs.com/
  - type: JSONSchema
    url: json-schema/npm-staged-packument-request-schema.json
  - type: JSONSchema
    url: json-schema/npm-stage-package-version-schema.json
  - type: JSONSchema
    url: json-schema/npm-package-version-status-schema.json
  - type: JSONSchema
    url: json-schema/npm-stage-package-list-schema.json
  - type: JSONSchema
    url: json-schema/npm-oidc-configs-create-schema.json
  - type: JSONSchema
    url: json-schema/npm-oidc-configs-schema.json
- aid: npm:npm-audit-api
  name: npm Audit API
  description: The Audit API from npm — 1 operation(s) for audit.
  humanURL: https://github.com/npm/registry/blob/main/docs/REGISTRY-API.md
  baseURL: https://registry.npmjs.org
  tags:
  - Audit
  properties:
  - type: OpenAPI
    url: openapi/npm-audit-api-openapi.yml
  - type: Documentation
    url: https://api-docs.npmjs.com/
  - type: JSONSchema
    url: json-schema/npm-staged-packument-request-schema.json
  - type: JSONSchema
    url: json-schema/npm-stage-package-version-schema.json
  - type: JSONSchema
    url: json-schema/npm-package-version-status-schema.json
  - type: JSONSchema
    url: json-schema/npm-stage-package-list-schema.json
  - type: JSONSchema
    url: json-schema/npm-oidc-configs-create-schema.json
  - type: JSONSchema
    url: json-schema/npm-oidc-configs-schema.json
- aid: npm:npm-org-api
  name: npm Org API
  description: The Org API from npm — 2 operation(s) for org.
  humanURL: https://github.com/npm/registry/blob/main/docs/REGISTRY-API.md
  baseURL: https://registry.npmjs.org
  tags:
  - Org
  properties:
  - type: OpenAPI
    url: openapi/npm-org-api-openapi.yml
  - type: Documentation
    url: https://api-docs.npmjs.com/
  - type: JSONSchema
    url: json-schema/npm-staged-packument-request-schema.json
  - type: JSONSchema
    url: json-schema/npm-stage-package-version-schema.json
  - type: JSONSchema
    url: json-schema/npm-package-version-status-schema.json
  - type: JSONSchema
    url: json-schema/npm-stage-package-list-schema.json
  - type: JSONSchema
    url: json-schema/npm-oidc-configs-create-schema.json
  - type: JSONSchema
    url: json-schema/npm-oidc-configs-schema.json
- aid: npm:npm-publish-api
  name: npm Publish API
  description: The Publish API from npm — 1 operation(s) for publish.
  humanURL: https://github.com/npm/registry/blob/main/docs/REGISTRY-API.md
  baseURL: https://registry.npmjs.org
  tags:
  - Publish
  properties:
  - type: OpenAPI
    url: openapi/npm-publish-api-openapi.yml
  - type: Documentation
    url: https://api-docs.npmjs.com/
  - type: JSONSchema
    url: json-schema/npm-staged-packument-request-schema.json
  - type: JSONSchema
    url: json-schema/npm-stage-package-version-schema.json
  - type: JSONSchema
    url: json-schema/npm-package-version-status-schema.json
  - type: JSONSchema
    url: json-schema/npm-stage-package-list-schema.json
  - type: JSONSchema
    url: json-schema/npm-oidc-configs-create-schema.json
  - type: JSONSchema
    url: json-schema/npm-oidc-configs-schema.json
- aid: npm:npm-stage-api
  name: npm Stage API
  description: The Stage API from npm — 5 operation(s) for stage.
  humanURL: https://github.com/npm/registry/blob/main/docs/REGISTRY-API.md
  baseURL: https://registry.npmjs.org
  tags:
  - stage
  tags_raw:
  - Stage
  properties:
  - type: OpenAPI
    url: openapi/npm-stage-api-openapi.yml
  - type: Documentation
    url: https://api-docs.npmjs.com/
  - type: JSONSchema
    url: json-schema/npm-staged-packument-request-schema.json
  - type: JSONSchema
    url: json-schema/npm-stage-package-version-schema.json
  - type: JSONSchema
    url: json-schema/npm-package-version-status-schema.json
  - type: JSONSchema
    url: json-schema/npm-stage-package-list-schema.json
  - type: JSONSchema
    url: json-schema/npm-oidc-configs-create-schema.json
  - type: JSONSchema
    url: json-schema/npm-oidc-configs-schema.json
- aid: npm:npm-team-api
  name: npm Team API
  description: The Team API from npm — 3 operation(s) for team.
  humanURL: https://github.com/npm/registry/blob/main/docs/REGISTRY-API.md
  baseURL: https://registry.npmjs.org
  tags:
  - Team
  properties:
  - type: OpenAPI
    url: openapi/npm-team-api-openapi.yml
  - type: Documentation
    url: https://api-docs.npmjs.com/
  - type: JSONSchema
    url: json-schema/npm-staged-packument-request-schema.json
  - type: JSONSchema
    url: json-schema/npm-stage-package-version-schema.json
  - type: JSONSchema
    url: json-schema/npm-package-version-status-schema.json
  - type: JSONSchema
    url: json-schema/npm-stage-package-list-schema.json
  - type: JSONSchema
    url: json-schema/npm-oidc-configs-create-schema.json
  - type: JSONSchema
    url: json-schema/npm-oidc-configs-schema.json
- aid: npm:npm-trust-api
  name: npm Trust API
  description: Trust-related endpoints for managing package trust and security settings.
  humanURL: https://github.com/npm/registry/blob/main/docs/REGISTRY-API.md
  baseURL: https://registry.npmjs.org
  tags:
  - Trust
  properties:
  - type: OpenAPI
    url: openapi/npm-trust-api-openapi.yml
  - type: Documentation
    url: https://api-docs.npmjs.com/
  - type: JSONSchema
    url: json-schema/npm-staged-packument-request-schema.json
  - type: JSONSchema
    url: json-schema/npm-stage-package-version-schema.json
  - type: JSONSchema
    url: json-schema/npm-package-version-status-schema.json
  - type: JSONSchema
    url: json-schema/npm-stage-package-list-schema.json
  - type: JSONSchema
    url: json-schema/npm-oidc-configs-create-schema.json
  - type: JSONSchema
    url: json-schema/npm-oidc-configs-schema.json
x-enrichment:
  date: '2026-11-04'
  status: enriched
  artifacts_added: 8
  pass: local-v6

npm API — frequently asked questions

Does npm have an API?

Yes. APIs.io lists 17 APIs from npm, including npm Registry API, npm Hooks API and npm CLI, and 14 more.

Is there an OpenAPI specification for the npm API?

Yes. APIs.io indexes 15 OpenAPI specifications for npm, each linked for download from this page.

How do I authenticate with the npm API?

npm uses bearer-token authentication (http · 2 schemes). The details are profiled on APIs.io as Npm Authentication.

How much does the npm API cost?

APIs.io lists 4 pricing plans for npm, with each plan's price, limits and inclusions under Pricing on this page.

Is the npm API ready for AI agents?

npm has a Kin Score of 60.8 out of 100 (strong) and an Agent Readiness score of 28.7 (agent-ready), scored by API Evangelist on 2026-11-06.

Work with this as data

Every provider here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for providers

9 MCP tools reach this

find_providersBrowse and filter every provider in the catalog.
get_provider_artifactsEvery artifact this provider publishes, grouped by type.
get_provider_operationsEvery operation across all of their OpenAPIs — one call instead of parsing every spec.
get_provider_toolsEvery MCP tool they ship, with the operation each wraps.
get_provider_evidenceHow each part of their score was established. Free — the basis for a claim should not sit behind it.
get_provider_ratingPRO — composite, band, trend and facet scores.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This provider

curl "https://apis.io/api/v1/providers/npm"

All providers

curl "https://apis.io/api/v1/providers?limit=25"

Every operation they expose

curl "https://apis.io/api/v1/providers/npm/operations?limit=25"

How their score was established

curl "https://apis.io/api/v1/providers/npm/evidence"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.