Secure Code Warrior

Secure Code Warrior is a developer-first security platform that provides security training, coaching, and assessments to help developers write secure code from the start. The platform offers over 50 programming language and framework combinations, covering OWASP Top 10 and CWE vulnerability categories through interactive challenges, assessments, tournaments, and guided learning courses. Secure Code Warrior exposes a REST API supporting user management, training progress reporting, assessment assignment and tracking, tournament management, metrics, and audit logging, with GitHub and CI/CD pipeline integrations for contextual in-workflow security coaching.

Secure Code Warrior publishes 10 APIs on the APIs.io network, including Assessments API, Audit API, Courses API, and 7 more. Tagged areas include Application Security, Developer Training, Security Education, AppSec, and Secure Coding.

The Secure Code Warrior catalog on APIs.io includes 1 JSON-LD context and 2 Spectral governance rulesets.

Secure Code Warrior’s developer surface includes authentication, documentation, getting-started guide, code examples, engineering blog, and 14 more developer resources.

🌐 Visit website 📡 Source on GitHub

42.7/100 developing ▬ flat Agent 21/100 agent aware Full breakdown ↓
scored 2026-08-25 · rubric v0.14.0

AccessFreemiumSelf serve⚡ Free to try

11 APIs

Application Security Developer TrainingSecurity EducationAppSec Secure Coding DevSecOps

Kin Score

Kin Score How this is scored →
scored 2026-08-25 · rubric v0.14.0

Composite quality — 42.7/100 · developing

Contract Quality 14.0 / 21

Developer Ergonomics 6.1 / 17

Access Clarity 4.0 / 17

Operational Transparency 1.5 / 11

Contract Governance 2.9 / 10

Discoverability 6.1 / 9

Regulatory Posture 6.1 / 15

Agent readiness — 21/100 · agent aware

Machine-Readable Contract 18 / 18

Agentic Access Contract 10 / 10

Documented Reversibility 0 / 6

MCP Server 0 / 12

Machine-Readable Auth 10 / 10

Idempotency 0 / 9

Stable Error Semantics 0 / 8

Request/Response Examples 7 / 7

Rate-Limit Signaling 7 / 7

Typed Event Surface 0 / 6

Agent Skills 0 / 5

Well-Known Catalog 0 / 4

Consent & Bot Identity 0 / 3

A2A Agent Card 0 / 8

Dry-Run / Simulate Mode 0 / 4

Delegated User Identity 0 / 6

Protected Resource Metadata 0 / 5

Registration Without a Human 0 / 6

Agentic Commerce Surface 0 / 5

Regulatory Posture applies to this provider. Its tags matched the Education & Research regime, so Regulatory Posture carries 15 points of the composite. If this regime is wrong for your business, say so on your provider repo — the applicability map is public and we will correct it.

The six quality facets above are damped to 85 points between them, because the conditional facet above carries the other 15. That is why each facet's contribution is shown against a damped maximum: raising a quality facet moves the composite by 85% of its nominal weight, not 100%. The full arithmetic is at apis.io/rating/.

Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/secure-code-warrior: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 11

Individual APIs this provider publishes, each with its own machine-readable definition.

Open Collections 12

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

Rate Limits 1

Documented rate limits and quota policies.

Secure Code Warrior Rate Limits

5 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

JSON Schema 1

Standalone JSON Schema definitions for this provider's data models.

Examples 1

Example request and response payloads for these APIs.

Get Started 1

Portal, sign-up, and the first successful call

GettingStarted

GettingStarted

Documentation 4

Reference material describing how the API behaves

Documentation

Documentation

Documentation

JSONSchema

Agent Surfaces 2

MCP servers, agent skills, and machine-readable catalogs

AgenticAccess

AgenticAccess

LlmsText

LlmsText

Design & Contract 4

Pagination, idempotency, versioning, errors, and events

JSONStructure

JSONLDContext

SpectralRuleset

Vocabulary

Build 3

SDKs, sample code, and the tooling you integrate with

GitHubOrganization

GitHubOrganization

GitHubApp

GitHubApp

Examples

Examples

Access & Security 3

Authentication, authorization, and security posture

TrustCenter

TrustCenter

DomainSecurity

DomainSecurity

Authentication

Authentication

Company 2

The organization behind the API

Website

Website

Blog

Blog

Source (apis.yml)

aid: secure-code-warrior
url: https://raw.githubusercontent.com/api-evangelist/secure-code-warrior/refs/heads/main/apis.yml
apis:
- aid: secure-code-warrior:secure-code-warrior-direct-linking-api
  name: Secure Code Warrior Direct Linking API
  tags:
  - Security Training
  - Application Security
  - CWE
  - OWASP
  - GitHub Integration
  humanURL: https://help.securecodewarrior.com/hc/en-us/articles/900005309583-Direct-Linking-API-Documentation
  properties:
  - url: https://help.securecodewarrior.com/hc/en-us/articles/900005309583-Direct-Linking-API-Documentation
    type: Documentation
  description: The Secure Code Warrior Direct Linking API is a RESTful JSON service that allows partners to retrieve application
    security training material including links to explainer videos and training exercises in over 50 programming languages
    and frameworks. The API maps Common Weakness Enumeration (CWE) and OWASP vulnerability references to contextually relevant
    training content, enabling integration with GitHub, SARIF code scanning alerts, and other developer workflow tools.
- aid: secure-code-warrior:secure-code-warrior-assessments-api
  name: Secure Code Warrior Assessments API
  description: The Assessments API from Secure Code Warrior — 3 operation(s) for assessments.
  humanURL: https://portal-api.securecodewarrior.com/api/docs/v2/
  baseURL: https://portal-api.securecodewarrior.com/api/v2
  tags:
  - Assessments
  properties:
  - type: OpenAPI
    url: openapi/secure-code-warrior-assessments-api-openapi.yml
  - type: Documentation
    url: https://portal-api.securecodewarrior.com/api/docs/v2/
  - type: Documentation
    url: https://help.securecodewarrior.com/hc/en-us/sections/360006026452-API
- aid: secure-code-warrior:secure-code-warrior-audit-api
  name: Secure Code Warrior Audit API
  description: The Audit API from Secure Code Warrior — 1 operation(s) for audit.
  humanURL: https://portal-api.securecodewarrior.com/api/docs/v2/
  baseURL: https://portal-api.securecodewarrior.com/api/v2
  tags:
  - Audit
  properties:
  - type: OpenAPI
    url: openapi/secure-code-warrior-audit-api-openapi.yml
  - type: Documentation
    url: https://portal-api.securecodewarrior.com/api/docs/v2/
  - type: Documentation
    url: https://help.securecodewarrior.com/hc/en-us/sections/360006026452-API
- aid: secure-code-warrior:secure-code-warrior-courses-api
  name: Secure Code Warrior Courses API
  description: The Courses API from Secure Code Warrior — 2 operation(s) for courses.
  humanURL: https://portal-api.securecodewarrior.com/api/docs/v2/
  baseURL: https://portal-api.securecodewarrior.com/api/v2
  tags:
  - Courses
  properties:
  - type: OpenAPI
    url: openapi/secure-code-warrior-courses-api-openapi.yml
  - type: Documentation
    url: https://portal-api.securecodewarrior.com/api/docs/v2/
  - type: Documentation
    url: https://help.securecodewarrior.com/hc/en-us/sections/360006026452-API
- aid: secure-code-warrior:secure-code-warrior-learning-api
  name: Secure Code Warrior Learning API
  description: The Learning API from Secure Code Warrior — 2 operation(s) for learning.
  humanURL: https://portal-api.securecodewarrior.com/api/docs/v2/
  baseURL: https://portal-api.securecodewarrior.com/api/v2
  tags:
  - Learning
  properties:
  - type: OpenAPI
    url: openapi/secure-code-warrior-learning-api-openapi.yml
  - type: Documentation
    url: https://portal-api.securecodewarrior.com/api/docs/v2/
  - type: Documentation
    url: https://help.securecodewarrior.com/hc/en-us/sections/360006026452-API
- aid: secure-code-warrior:secure-code-warrior-metrics-api
  name: Secure Code Warrior Metrics API
  description: The Metrics API from Secure Code Warrior — 3 operation(s) for metrics.
  humanURL: https://portal-api.securecodewarrior.com/api/docs/v2/
  baseURL: https://portal-api.securecodewarrior.com/api/v2
  tags:
  - Metrics
  properties:
  - type: OpenAPI
    url: openapi/secure-code-warrior-metrics-api-openapi.yml
  - type: Documentation
    url: https://portal-api.securecodewarrior.com/api/docs/v2/
  - type: Documentation
    url: https://help.securecodewarrior.com/hc/en-us/sections/360006026452-API
- aid: secure-code-warrior:secure-code-warrior-programs-api
  name: Secure Code Warrior Programs API
  description: The Programs API from Secure Code Warrior — 1 operation(s) for programs.
  humanURL: https://portal-api.securecodewarrior.com/api/docs/v2/
  baseURL: https://portal-api.securecodewarrior.com/api/v2
  tags:
  - Programs
  properties:
  - type: OpenAPI
    url: openapi/secure-code-warrior-programs-api-openapi.yml
  - type: Documentation
    url: https://portal-api.securecodewarrior.com/api/docs/v2/
  - type: Documentation
    url: https://help.securecodewarrior.com/hc/en-us/sections/360006026452-API
- aid: secure-code-warrior:secure-code-warrior-teams-api
  name: Secure Code Warrior Teams API
  description: The Teams API from Secure Code Warrior — 3 operation(s) for teams.
  humanURL: https://portal-api.securecodewarrior.com/api/docs/v2/
  baseURL: https://portal-api.securecodewarrior.com/api/v2
  tags:
  - Team
  tags_raw:
  - Teams
  properties:
  - type: OpenAPI
    url: openapi/secure-code-warrior-teams-api-openapi.yml
  - type: Documentation
    url: https://portal-api.securecodewarrior.com/api/docs/v2/
  - type: Documentation
    url: https://help.securecodewarrior.com/hc/en-us/sections/360006026452-API
- aid: secure-code-warrior:secure-code-warrior-tournaments-api
  name: Secure Code Warrior Tournaments API
  description: The Tournaments API from Secure Code Warrior — 2 operation(s) for tournaments.
  humanURL: https://portal-api.securecodewarrior.com/api/docs/v2/
  baseURL: https://portal-api.securecodewarrior.com/api/v2
  tags:
  - Tournaments
  properties:
  - type: OpenAPI
    url: openapi/secure-code-warrior-tournaments-api-openapi.yml
  - type: Documentation
    url: https://portal-api.securecodewarrior.com/api/docs/v2/
  - type: Documentation
    url: https://help.securecodewarrior.com/hc/en-us/sections/360006026452-API
- aid: secure-code-warrior:secure-code-warrior-training-api
  name: Secure Code Warrior Training API
  description: The Training API from Secure Code Warrior — 5 operation(s) for training.
  humanURL: https://portal-api.securecodewarrior.com/api/docs/v2/
  baseURL: https://portal-api.securecodewarrior.com/api/v2
  tags:
  - Training
  properties:
  - type: OpenAPI
    url: openapi/secure-code-warrior-training-api-openapi.yml
  - type: Documentation
    url: https://portal-api.securecodewarrior.com/api/docs/v2/
  - type: Documentation
    url: https://help.securecodewarrior.com/hc/en-us/sections/360006026452-API
- aid: secure-code-warrior:secure-code-warrior-users-api
  name: Secure Code Warrior Users API
  description: The Users API from Secure Code Warrior — 4 operation(s) for users.
  humanURL: https://portal-api.securecodewarrior.com/api/docs/v2/
  baseURL: https://portal-api.securecodewarrior.com/api/v2
  tags:
  - User
  tags_raw:
  - Users
  properties:
  - type: OpenAPI
    url: openapi/secure-code-warrior-users-api-openapi.yml
  - type: Documentation
    url: https://portal-api.securecodewarrior.com/api/docs/v2/
  - type: Documentation
    url: https://help.securecodewarrior.com/hc/en-us/sections/360006026452-API
name: Secure Code Warrior
tags:
- Application Security
- Developer Training
- Security Education
- AppSec
- Secure Coding
- DevSecOps
type: Index
accessModel:
  pricing: freemium
  onboarding: self-serve
  trial: false
  try_now: true
  public: false
  label: Freemium · Self-serve signup
  confidence: high
  source:
  - plans
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/secure-code-warrior.png
access: 3rd-Party
created: '2026-05-02'
modified: '2026-05-19'
position: Consuming
description: Secure Code Warrior is a developer-first security platform that provides security training, coaching, and assessments
  to help developers write secure code from the start. The platform offers over 50 programming language and framework combinations,
  covering OWASP Top 10 and CWE vulnerability categories through interactive challenges, assessments, tournaments, and guided
  learning courses. Secure Code Warrior exposes a REST API supporting user management, training progress reporting, assessment
  assignment and tracking, tournament management, metrics, and audit logging, with GitHub and CI/CD pipeline integrations
  for contextual in-workflow security coaching.
integrations:
- name: asterisk
- name: shield lock
- name: code blocks
- name: service toolbox
- name: school
- name: plug connect
- name: list alt
- name: finance chip
- name: tech
- name: government
- name: directions car
- name: health cross
- name: shoppingmode
- name: security update good
- name: ai
- name: typcn warning outline
- name: simple icons owasp
- name: mdi company
- name: construction
- name: fingerprint
- name: hub
- name: article
- name: event
- name: tabler route
- name: sidekickicons checklist boxes
- name: mdi partnership outline
- name: carbon network 1
- name: mdi contact outline
- name: check box
- name: shield locked
- name: help center
- name: accessibility
- name: SCW
- name: person book
- name: news
- name: cases
- name: Subpage Hero BG
- name: our approach deco
- name: Developer tools
- name: Security Tools
- name: Automation Tools
- name: Educational Tools
- name: Scalable and engaging
- name: Languages and frameworks
- name: Fun & interactive
- name: partner page image
- name: Quotes
- name: colgate palmolive
- name: 66423e90d33575f8134529c1 Derek Fisher
- name: 66423e5d82da5cde6eb735ea Mads Howard
- name: nab
- name: 6695668dcf203e2ba365c744 image 131
- name: image 15
- name: image 16
- name: image 17
- name: image 18
- name: websights
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
specificationVersion: '0.23'
common:
- type: AgenticAccess
  url: agentic-access/secure-code-warrior-agentic-access.yml
- type: TrustCenter
  url: security/secure-code-warrior-trust-center.yml
- type: DomainSecurity
  url: security/secure-code-warrior-domain-security.yml
- type: Authentication
  url: authentication/secure-code-warrior-authentication.yml
- name: Website
  url: https://www.securecodewarrior.com
  type: Website
- name: Portal API Documentation
  url: https://portal-api.securecodewarrior.com/api/docs/v2/
  type: Documentation
- name: Help Center API Section
  url: https://help.securecodewarrior.com/hc/en-us/sections/360006026452-API
  type: Documentation
- name: Direct Linking API
  url: https://help.securecodewarrior.com/hc/en-us/articles/900005309583-Direct-Linking-API-Documentation
  type: Documentation
- name: GitHub Organization
  url: https://github.com/SecureCodeWarrior
  type: GitHubOrganization
- name: GitHub App
  url: https://github.com/marketplace/secure-code-warrior-for-github
  type: GitHubApp
- name: How to Enable API Access
  url: https://help.securecodewarrior.com/hc/en-us/articles/360036036512-How-to-enable-API-access
  type: GettingStarted
- url: json-schema/secure-code-warrior-user-schema.json
  type: JSONSchema
- url: json-structure/secure-code-warrior-training-structure.json
  type: JSONStructure
- url: json-ld/secure-code-warrior-context.jsonld
  type: JSONLDContext
- url: examples/secure-code-warrior-get-leaderboard-example.json
  type: Examples
- url: rules/secure-code-warrior-rules.yml
  type: SpectralRuleset
- url: vocabulary/secure-code-warrior-vocabulary.yml
  type: Vocabulary
- type: Integrations
  url: https://www.securecodewarrior.com/product/integrations
- type: LlmsText
  url: https://www.securecodewarrior.com/llms.txt
- url: https://www.securecodewarrior.com/blog
  type: Blog

Work with this as data

Every provider here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for providers

9 MCP tools reach this

find_providersBrowse and filter every provider in the catalog.
get_provider_artifactsEvery artifact this provider publishes, grouped by type.
get_provider_operationsEvery operation across all of their OpenAPIs — one call instead of parsing every spec.
get_provider_toolsEvery MCP tool they ship, with the operation each wraps.
get_provider_evidenceHow each part of their score was established. Free — the basis for a claim should not sit behind it.
get_provider_ratingPRO — composite, band, trend and facet scores.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools

Call it yourself

curl for this page

This provider

curl "https://apis.io/api/v1/providers/secure-code-warrior"

All providers

curl "https://apis.io/api/v1/providers?limit=25"

Every operation they expose

curl "https://apis.io/api/v1/providers/secure-code-warrior/operations?limit=25"

How their score was established

curl "https://apis.io/api/v1/providers/secure-code-warrior/evidence"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

Secure Code Warrior

APIs 11

Open Collections 12

Pricing Plans 1

Rate Limits 1

FinOps 1

Semantic Vocabularies 1

Spectral Rules 2

JSON Schema 1

JSON Structure 1

Examples 1

Security Posture 3

Agentic Access 1

Get Started 1

Documentation 4

Agent Surfaces 2

Design & Contract 4

Build 3

Access & Security 3

Company 2

Source (apis.yml)

MCP server

Tools for providers

Call it yourself

Get an API key