# OneTrust

**Canonical:** https://apis.io/providers/onetrust/  
**Website:** https://www.onetrust.com/  
**APIs profiled:** 12

OneTrust is an enterprise privacy, security, ethics, and ESG platform. Its developer portal exposes APIs across Privacy Management, Third-Party Risk (Vendorpedia), Cookie Consent (Server-Side CMP), Certification Automation, GRC, AI Guard, and a broad SDK suite for mobile, OTT/CTV, and web.

## Kin Score — 26.5 / 100 (thin)

Scored 2026-08-24 under rubric 0.13.0. Trend: flat (-0.3 from 26.8).

| Facet | Score |
|---|---|
| Discoverability | 64.8 |
| Contract Quality | 47.6 |
| Governance | 0.0 |
| Contract Governance | 0.0 |
| Operational Transparency | 7.9 |
| Developer Ergonomics | 14.3 |
| Commercial Clarity | 21.1 |
| Access Clarity | 21.1 |

## Agent readiness — 19.8 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | bearer |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | documented |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |
| Delegated Identity | no |
| Protected Resource Metadata | no |
| Dynamic Client Registration | no |
| Agentic Commerce | no |

## Access

Enterprise · Self-serve signup — onboarding: self-serve, pricing: enterprise, trial: no (confidence: high).

## APIs (12)

- **OneTrust Platform API** — Cross-product REST API reference for the OneTrust platform covering privacy, GRC, ethics, third-party risk, and consent.
- **Server-Side CMP API** — Server-Side Consent Management Platform API for persisting consent, retrieving banner/preference center UI, and logging consent. Supports IAB TCF 2.3 and GPP.
- **OneTrust AI Guard API** — REST API for AI risk classifications and metrics. Includes POST /classifications/v1, POST /metric, and GET /health.
- **OneTrust Third-Party Risk (Vendorpedia) API** — Vendor risk and assessment APIs for the OneTrust Third-Party Risk Management module (formerly Vendorpedia).
- **OneTrust SDK Suite** — Mobile (iOS, Android), OTT/CTV (Roku, Fire TV, Apple TV, Android TV, Web OS, Tizen), and Website CMP SDKs.
- **OneTrust AI Governance API** — The AI Governance API from OneTrust — 1 operation(s) for ai governance.
- **OneTrust Applications API** — The Applications API from OneTrust — 1 operation(s) for applications.
- **OneTrust Consent API** — The Consent API from OneTrust — 4 operation(s) for consent.
- **OneTrust Cookies API** — The Cookies API from OneTrust — 3 operation(s) for cookies.
- **OneTrust Data Subjects API** — The Data Subjects API from OneTrust — 2 operation(s) for data subjects.
- **OneTrust Domains API** — The Domains API from OneTrust — 2 operation(s) for domains.
- **OneTrust Privacy Notices API** — The Privacy Notices API from OneTrust — 2 operation(s) for privacy notices.

## Agentic access (1)

- **Onetrust Agentic Access** — 24 operations · 13 acting

## Security (3)

- **Onetrust Authentication** — http · 1 scheme
- **Onetrust Domain Security** — TLSv1.3 · HSTS · DNSSEC · DMARC
- **Onetrust Trust Center** — SOC 2, ISO 27001, GDPR

## Plans (1)

- **Onetrust Plans Pricing**

## Tags

Privacy, GRC, Compliance, Consent, TPRM

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/onetrust/). Scores are computed from the provider's own public artifacts under a published rubric.