OCRA

OCRA (OATH Challenge-Response Algorithm) is a standard for generating one-time passwords based on challenge-response authentication as defined in RFC 6287. It extends HOTP and TOTP with challenge-response capabilities for stronger authentication scenarios.

OCRA is profiled on the APIs.io network. Tagged areas include Authentication, OCRA, OTP, and Security.

🌐 Visit website 📡 Source on GitHub

6.8/100 minimal ▬ flat Agent 0/100 human only Full breakdown ↓
scored 2026-07-27 · rubric v0.5

0 APIs

AuthenticationOCRAOTPSecurity

Kin Score

Kin Score How this is scored →
scored 2026-07-27 · rubric v0.5

Composite quality — 6.8/100 · minimal

Contract Quality 0.0 / 25

Developer Ergonomics 1.3 / 20

Commercial Clarity 0.0 / 20

Operational Transparency 0.0 / 13

Governance 0.0 / 12

Discoverability 5.5 / 10

Agent readiness — 0/100 · human only

Machine-Readable Contract 0 / 18

Agentic Access Contract 0 / 15

MCP Server 0 / 12

Machine-Readable Auth 0 / 10

Idempotency 0 / 9

Stable Error Semantics 0 / 8

Request/Response Examples 0 / 7

Rate-Limit Signaling 0 / 7

Typed Event Surface 0 / 6

Agent Skills 0 / 5

Well-Known Catalog 0 / 4

Consent & Bot Identity 0 / 3

Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/ocra: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

Resources

Documentation 1

Reference material describing how the API behaves

Reference

Reference

Source (apis.yml)

aid: ocra
name: OCRA
description: OCRA (OATH Challenge-Response Algorithm) is a standard for generating one-time passwords based on challenge-response
  authentication as defined in RFC 6287. It extends HOTP and TOTP with challenge-response capabilities for stronger authentication
  scenarios.
type: Index
accessModel:
  pricing: unknown
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Unknown
  confidence: low
  source: []
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/ocra.png
tags:
- Authentication
- OCRA
- OTP
- Security
url: https://raw.githubusercontent.com/api-evangelist/ocra/refs/heads/main/apis.yml
created: '2026-03-16'
modified: '2026-04-28'
specificationVersion: '0.19'
apis: []
common:
- type: Reference
  url: https://datatracker.ietf.org/doc/html/rfc6287
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com