Salsify

Salsify is a product experience management (PXM) and supplier experience management (SXM) platform used by brands, distributors and retailers to centralize product content, digital assets and syndication to the digital shelf. The Salsify platform exposes a REST API at app.salsify.com/api/v1/orgs covering products, records, properties, digital assets, list membership, imports and export runs, an early-access GraphQL API at api.salsify.com/graphql for accounts, organizations and configuration manifests, a webhook surface for product, digital asset, channel and import events with X.509/SHA-256 signature verification, and an OAuth 2.0 authorization server plus a first-party Model Context Protocol server at app.salsify.com/mcp.

Salsify publishes 1 API on the APIs.io network: REST API. Tagged areas include Company, Product Experience Management, Product Information Management, Digital Asset Management, and Commerce.

The Salsify catalog on APIs.io includes 1 event-driven AsyncAPI specification.

Salsify’s developer surface includes documentation, API reference, getting-started guide, authentication, support, engineering blog, signup flow, and 30 more developer resources.

🌐 Visit website 📡 Source on GitHub
60.4/100 strong ▬ flat Agent 51/100 agent ready Full breakdown ↓
scored 2026-08-05 · rubric v0.9.1
3 APIs 1 MCP Servers
CompanyProduct Experience ManagementProduct Information ManagementDigital Asset ManagementCommerceRetailSyndicationData ManagementSaaS

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-08-05 · rubric v0.9.1
Composite quality — 60.4/100 · strong
Contract Quality 16.7 / 25
Developer Ergonomics 12.1 / 20
Commercial Clarity 10.0 / 20
Operational Transparency 9.9 / 13
Governance 2.5 / 12
Discoverability 9.3 / 10
Agent readiness — 51/100 · agent ready
Machine-Readable Contract 18 / 18
Agentic Access Contract 10 / 10
MCP Server 0 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 8 / 8
Request/Response Examples 7 / 7
Rate-Limit Signaling 7 / 7
Typed Event Surface 6 / 6
Agent Skills 5 / 5
Well-Known Catalog 4 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/salsify: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 3

Individual APIs this provider publishes, each with its own machine-readable definition.

Salsify REST API

The Salsify REST API gives programmatic access to everything in a Salsify organization: products, records, properties, digital assets, list membership, imports and export runs. ...

Salsify GraphQL API

Early-access public GraphQL API for operating on Salsify accounts, organizations, configuration manifests and organization provisioning requests. Authenticated with a bearer API...

Salsify MCP Server

First-party remote Model Context Protocol server hosted by Salsify at app.salsify.com/mcp. Streamable HTTP transport, protected by OAuth 2.1 with RFC 9728 protected-resource met...

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

salsify-mcp.yml

MCP SERVER

GraphQL 1

GraphQL schemas published by this provider.

GraphQL Schema Overview

updatedAt: 2026-05-19T13:41:04.000Z

GRAPHQL

Rate Limits 1

Documented rate limits and quota policies.

Salsify Rate Limits

2 limits

RATE LIMITS

Event Specifications 1

AsyncAPI definitions for this provider's event-driven and streaming APIs.

Salsify Webhooks

ASYNCAPI

Security Posture 4

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Salsify Authentication

apiKey/oauth2 · 2 schemes

SECURITY

Salsify Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Salsify Vulnerability Disclosure

contact published

SECURITY

Salsify Trust Center

SOC 2 Type II, ISO 27001:2013

SECURITY

Scopes 1

OAuth scopes governing access to this provider's APIs.

Salsify Scopes

2 scopes · authorizationCode

2 scopes

SCOPES

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Salsify Agentic Access

43 operations · 33 acting

43 operations · 33 acting

AGENTIC

Resources

Get Started 4

Portal, sign-up, and the first successful call

DeveloperPortal
DeveloperPortal
 GettingStarted
GettingStarted
 SignUp
SignUp
 Login
Login

Documentation 2

Reference material describing how the API behaves

Documentation
Documentation
 APIReference
APIReference

Agent Surfaces 4

MCP servers, agent skills, and machine-readable catalogs

WellKnown
WellKnown
 AgentSkill
AgentSkill
 AgenticAccess
AgenticAccess
 LLMsTxt
LLMsTxt

Design & Contract 6

Pagination, idempotency, versioning, errors, and events

Conformance
Conformance
 ErrorCatalog
ErrorCatalog
 Lifecycle
Lifecycle
 Conventions
Conventions
 DataModel
DataModel
 Webhooks
Webhooks

Build 3

SDKs, sample code, and the tooling you integrate with

GitHubOrganization
GitHubOrganization
 Packages
Packages
 SDKs
SDKs

Access & Security 7

Authentication, authorization, and security posture

VulnerabilityDisclosure
VulnerabilityDisclosure
 Authentication
Authentication
 OAuthScopes
OAuthScopes
 Compliance
Compliance
 TrustCenter
TrustCenter
 DomainSecurity
DomainSecurity
 Security
Security

Scroll for all 7

Operate 4

Status, limits, changes, and where to get help

Support
Support
 StatusPage
StatusPage
 ChangeLog
ChangeLog
 RateLimits
RateLimits

Commercial 2

Pricing, plans, and the legal terms of use

TermsOfService
TermsOfService
 PrivacyPolicy
PrivacyPolicy

Company 2

The organization behind the API

Website
Website
 Blog
Blog

Other 3

Properties that don't map to a standard resource type

Overlay
Overlay
 Overlay
Overlay
 Overlay
Overlay

Source (apis.yml)

apis.yml Raw ↑ 
aid: salsify
name: Salsify
description: Salsify is a product experience management (PXM) and supplier experience management (SXM) platform used by brands,
  distributors and retailers to centralize product content, digital assets and syndication to the digital shelf. The Salsify
  platform exposes a REST API at app.salsify.com/api/v1/orgs covering products, records, properties, digital assets, list
  membership, imports and export runs, an early-access GraphQL API at api.salsify.com/graphql for accounts, organizations
  and configuration manifests, a webhook surface for product, digital asset, channel and import events with X.509/SHA-256
  signature verification, and an OAuth 2.0 authorization server plus a first-party Model Context Protocol server at app.salsify.com/mcp.
url: https://raw.githubusercontent.com/api-evangelist/salsify/refs/heads/main/apis.yml
image: https://www.salsify.com/hubfs/Salsify%20-%20Product%20Experience%20Management%20PXM%20-%20Feature%20Image.png
x-type: company
x-source: harvest:secondary-market
x-tier: profiled
x-tier-reason: enrichment
specificationVersion: '0.20'
created: '2026-08-02'
modified: '2026-08-02'
tags:
- Company
- Product Experience Management
- Product Information Management
- Digital Asset Management
- Commerce
- Retail
- Syndication
- Data Management
- SaaS
apis:
- aid: salsify:rest
  name: Salsify REST API
  description: 'The Salsify REST API gives programmatic access to everything in a Salsify organization: products, records,
    properties, digital assets, list membership, imports and export runs. All request and response bodies are JSON, requests
    are authenticated with a per-user API key (or an OAuth 2.0 bearer token) in the Authorization header, and every organization
    is limited to 10,000 requests per hour.'
  humanURL: https://developers.salsify.com/reference
  baseURL: https://app.salsify.com/api/v1/orgs
  tags:
  - Products
  - Records
  - Properties
  - Digital Assets
  - Imports
  - Exports
  properties:
  - type: OpenAPI
    url: openapi/salsify-api-settings-openapi.json
  - type: OpenAPI
    url: openapi/salsify-write-operations-openapi.json
  - type: OpenAPI
    url: openapi/salsify-non-v1-endpoints-openapi.json
  - type: Documentation
    url: https://developers.salsify.com/docs/overview
  - type: APIReference
    url: https://developers.salsify.com/reference
- aid: salsify:graphql
  name: Salsify GraphQL API
  description: Early-access public GraphQL API for operating on Salsify accounts, organizations, configuration manifests and
    organization provisioning requests. Authenticated with a bearer API token; introspection requires authentication, and
    the published schema reference is mirrored in graphql/.
  humanURL: https://developers.salsify.com/reference/graphql-schema-overview
  baseURL: https://api.salsify.com/graphql
  tags:
  - GraphQL
  - Accounts
  - Organizations
  properties:
  - type: GraphQL
    url: graphql/salsify-graphql.yml
  - type: GraphQLSchema
    url: graphql/salsify-graphql-schema-overview.md
  - type: Documentation
    url: https://developers.salsify.com/docs/graphql-authorization
- aid: salsify:mcp
  name: Salsify MCP Server
  description: First-party remote Model Context Protocol server hosted by Salsify at app.salsify.com/mcp. Streamable HTTP
    transport, protected by OAuth 2.1 with RFC 9728 protected-resource metadata pointing at the app.salsify.com authorization
    server; tools/list requires an authenticated bearer token.
  humanURL: https://app.salsify.com/mcp
  baseURL: https://app.salsify.com/mcp
  tags:
  - MCP
  - Agents
  properties:
  - type: MCPServer
    url: mcp/salsify-mcp.yml
  - type: ToolCrosswalk
    url: mcp/salsify-tool-crosswalk.yml
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: VulnerabilityDisclosure
  url: security/salsify-vulnerability-disclosure.yml
- type: Website
  url: https://www.salsify.com/
- type: DeveloperPortal
  url: https://developers.salsify.com/
- type: Documentation
  url: https://developers.salsify.com/docs/overview
- type: APIReference
  url: https://developers.salsify.com/reference
- type: GettingStarted
  url: https://developers.salsify.com/docs/integration-with-salsify
- type: Authentication
  url: authentication/salsify-authentication.yml
- type: OAuthScopes
  url: scopes/salsify-scopes.yml
- type: Support
  url: https://help.salsify.com/ProductXM/s/
- type: Blog
  url: https://www.salsify.com/blog
- type: GitHubOrganization
  url: https://github.com/salsify
- type: SignUp
  url: https://www.salsify.com/demo
- type: Login
  url: https://app.salsify.com/
- type: TermsOfService
  url: https://www.salsify.com/legal/terms-of-service
- type: PrivacyPolicy
  url: https://www.salsify.com/privacy-policy
- type: StatusPage
  url: https://status.salsify.com/
- type: Compliance
  url: https://www.salsify.com/security-and-reliability
- type: TrustCenter
  url: security/salsify-trust-center.yml
- type: ChangeLog
  url: changelog/salsify-changelog.yml
- type: Packages
  url: packages/salsify-packages.yml
- type: SDKs
  url: packages/salsify-packages.yml
- type: WellKnown
  url: well-known/salsify-well-known.yml
- type: Conformance
  url: conformance/salsify-conformance.yml
- type: ErrorCatalog
  url: errors/salsify-problem-types.yml
- type: Lifecycle
  url: lifecycle/salsify-lifecycle.yml
- type: Conventions
  url: conventions/salsify-conventions.yml
- type: DataModel
  url: data-model/salsify-data-model.yml
- type: RateLimits
  url: rate-limits/salsify-rate-limits.yml
- type: Webhooks
  url: asyncapi/salsify-webhooks.yml
- type: AgentSkill
  url: skills/_index.yml
- type: AgenticAccess
  url: agentic-access/salsify-agentic-access.yml
- type: DomainSecurity
  url: security/salsify-domain-security.yml
- type: Security
  url: https://www.salsify.com/responsible-disclosure
- type: Overlay
  url: overlays/salsify-api-settings-overlay.yaml
- type: Overlay
  url: overlays/salsify-write-operations-overlay.yaml
- type: Overlay
  url: overlays/salsify-non-v1-endpoints-overlay.yaml
- type: LLMsTxt
  url: llms/salsify-llms.txt
x-enrichment:
  date: '2026-08-02'
  status: enriched
  artifacts_added: 35
  pass: local-v1