# Sublime Security

**Canonical:** https://apis.io/providers/sublime-security/  
**Website:** https://sublime.security/  
**APIs profiled:** 16

Sublime Security is an adaptive, programmable email security platform that combines best-in-class detection effectiveness with deep visibility and control. Teams write detection-as-code in Sublime's Message Query Language (MQL) to stop business email compromise (BEC), credential phishing, malware, and other email attacks, and can hunt retroactively across historical messages. Sublime runs as a managed multi-region cloud service or self-managed on Docker, AWS, or Azure, integrates with Microsoft 365, Google Workspace, and IMAP, and exposes a REST Platform API (v0), outbound webhooks, SCIM 2.0 provisioning, a Multi-Tenancy API for MSPs, and a free Analysis API with an open rules community. Backed by Index Ventures and IVP.

## Kin Score — 40.1 / 100 (developing)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+0.0 from 40.1).

| Facet | Score |
|---|---|
| Discoverability | 81.5 |
| Contract Quality | 62.2 |
| Governance | 16.7 |
| Contract Governance | 16.7 |
| Operational Transparency | 26.3 |
| Developer Ergonomics | 47.0 |
| Commercial Clarity | 7.9 |
| Access Clarity | 7.9 |

## Agent readiness — 37.7 (agent-ready)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| Reversibility Documented | documented |
| MCP Server | no |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | documented |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | yes |
| Agent Skills | derived |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Self-serve signup — onboarding: self-serve, pricing: unknown, trial: no (confidence: medium).

## APIs (16)

- **Sublime Security BinExplode API** — The BinExplode API from Sublime Security — 2 operation(s) for binexplode.
- **Sublime Security Email Bombs API** — The Email Bombs API from Sublime Security — 3 operation(s) for email bombs.
- **Sublime Security Enrichment API** — The Enrichment API from Sublime Security — 1 operation(s) for enrichment.
- **Sublime Security Events in the audit log API** — The Events in the audit log API from Sublime Security — 3 operation(s) for events in the audit log.
- **Sublime Security Hunt Jobs API** — The Hunt Jobs API from Sublime Security — 3 operation(s) for hunt jobs.
- **Sublime Security Lists API** — The Lists API from Sublime Security — 4 operation(s) for lists.
- **Sublime Security Live flow API** — The Live flow API from Sublime Security — 1 operation(s) for live flow.
- **Sublime Security Mailboxes API** — The Mailboxes API from Sublime Security — 1 operation(s) for mailboxes.
- **Sublime Security Message Groups API** — The Message Groups API from Sublime Security — 17 operation(s) for message groups.
- **Sublime Security Messages API** — The Messages API from Sublime Security — 19 operation(s) for messages.
- **Sublime Security Organizations API** — The Organizations API from Sublime Security — 4 operation(s) for organizations.
- **Sublime Security Roles API** — The Roles API from Sublime Security — 1 operation(s) for roles.
- **Sublime Security Rules API** — The Rules API from Sublime Security — 7 operation(s) for rules.
- **Sublime Security SCIM API** — The SCIM API from Sublime Security — 8 operation(s) for scim.
- **Sublime Security Tasks API** — The Tasks API from Sublime Security — 1 operation(s) for tasks.
- **Sublime Security User Reports API** — The User Reports API from Sublime Security — 1 operation(s) for user reports.

## MCP servers (1)

- **Sublime Security MCP Server**

## Agentic access (1)

- **Sublime Security Agentic Access** — 91 operations · 48 acting

## Security (3)

- **Sublime Security Authentication** — http · 1 scheme
- **Sublime Security Domain Security** — TLSv1.3 · DMARC
- **Sublime Security Trust Center** — trust center published

## Tags

Company, Security, Email Security, Phishing, Detection as Code, Threat Detection, Cloud Email Security, SCIM

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/sublime-security/). Scores are computed from the provider's own public artifacts under a published rubric.