# Stairwell

**Canonical:** https://apis.io/providers/stairwell/  
**Website:** https://www.stairwell.com/  
**APIs profiled:** 1

Stairwell is a private-by-design threat intelligence and detection platform that gives security teams a continuously reanalyzed, isolated store of their own files as an alternative to crowdsourced public services like VirusTotal. Its products span AI triage and static/behavioral malware analysis, malware variant discovery, Run-to-Ground incident scoping, and an encrypted Private Vault with retroactive detection as threat intelligence evolves. Stairwell exposes a REST API at app.stairwell.com/v1 (bearer-token auth) covering assets and forwarders, objects and detonation, sightings and variants, YARA rule management and ad-hoc scanning, threat reports and IOC correlation, network intelligence (hostname/IP/ASN WHOIS, cloud-provider lookups), plus outbound event-notification webhooks and an official hosted MCP server for read-only agent access. Added to the API Evangelist network from Accel's portfolio and enriched from Stairwell's public developer surface.

## Kin Score — 42.8 / 100 (developing)

Scored 2026-08-17 under rubric 0.11.0. Trend: flat (+0.0 from 42.8).

| Facet | Score |
|---|---|
| Discoverability | 75.9 |
| Contract Quality | 51.6 |
| Governance | 3.1 |
| Operational Transparency | 7.9 |
| Developer Ergonomics | 62.5 |
| Commercial Clarity | 42.1 |

## Agent readiness — 46.2 (agent-ready)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | no |
| MCP Server | yes |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | documented |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | yes |
| Agent Skills | derived |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Self-serve signup — onboarding: self-serve, pricing: unknown, trial: no (confidence: medium).

## APIs (1)

- **Stairwell API** — REST API for the Stairwell threat-intelligence platform: manage assets and forwarders, query object metadata/detonation/sightings/variants, manage and scan YARA rules, upload an...

## MCP servers (1)

- **stairwell-mcp.yml**

## Security (3)

- **Stairwell Authentication** — http · 1 scheme
- **Stairwell Domain Security** — TLSv1.3 · HSTS · DNSSEC · DMARC
- **Stairwell Trust Center** — trust center published

## Tags

Company, Security, Threat Intelligence, Malware Analysis, Cybersecurity, Threat Detection, YARA, Incident Response

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/stairwell/). Scores are computed from the provider's own public artifacts under a published rubric.