# SPDX

**Canonical:** https://apis.io/providers/spdx/  
**APIs profiled:** 1

The Software Package Data Exchange (SPDX) is an open standard under the Linux Foundation for communicating software bill of materials information including components, licenses, copyrights, and security references. It is an ISO/IEC standard (ISO/IEC 5962) used for software supply chain transparency.

## Kin Score — 12.3 / 100 (emerging)

Scored 2026-08-25 under rubric 0.14.0. Trend: flat (+0.0 from 12.3).

| Facet | Score |
|---|---|
| Discoverability | 50.0 |
| Contract Quality | 0.0 |
| Governance | 0.0 |
| Contract Governance | 0.0 |
| Operational Transparency | 13.2 |
| Developer Ergonomics | 11.9 |
| Commercial Clarity | 15.8 |
| Access Clarity | 15.8 |

## Agent readiness — 2.5 (human-only)

| Dimension | Value |
|---|---|
| Spec Presence | no |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | no |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | documented |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |
| Delegated Identity | no |
| Protected Resource Metadata | no |
| Dynamic Client Registration | no |
| Agentic Commerce | no |

## Access

Freemium — onboarding: unknown, pricing: freemium, trial: no (confidence: medium).

## APIs (1)

- **SPDX API** — API for accessing SPDX open standard resources for software bill of materials, license compliance, and software supply chain transparency information.

## Security (1)

- **Spdx Domain Security** — TLSv1.3 · HSTS

## Plans (1)

- **Spdx Plans Pricing**

## Tags

Licensing, Linux Foundation, SBOM, Standards

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/spdx/). Scores are computed from the provider's own public artifacts under a published rubric.