Sysdig

Sysdig is a cloud and container security platform that provides runtime threat detection, vulnerability management, cloud security posture management (CSPM), compliance automation, and observability for containers, Kubernetes, and cloud environments. Sysdig Monitor offers full-stack monitoring and alerting while Sysdig Secure delivers runtime security, vulnerability scanning, policy enforcement, incident response, and compliance reporting.

Sysdig publishes 13 API contracts indexed on the APIs.io network, including Activity Audit API, Alerts API, Compliance API, and 10 more. Tagged areas include Cloud Security, Containers, Kubernetes, Runtime Security, and Security.

The Sysdig catalog on APIs.io includes 1 JSON-LD context and 2 Spectral governance rulesets.

Sysdig’s developer surface includes authentication, documentation, getting-started guide, engineering blog, pricing, signup flow, CLI, and 34 more developer resources.

🌐 Visit website 📡 Profile data on GitHub

47.9/100 developing ▬ flat Agent 25/100 agent aware Front door AI 6/6 dominant Heartbeat 94/100 alive saas Full breakdown ↓
scored 2026-11-06 · rubric v0.27.0 · Show this score on your site →

2 published contracts 1 MCP Servers

Cloud Security Containers Kubernetes Runtime Security Security Vulnerability Management Monitoring Observability CSPM Compliance

What this lets a business do 2

Business capabilities this provider's published APIs can perform, derived from its own contracts. Browse all capabilities →

Cybersecurity Management

BC-620

Activity AuditImage ScanningPoliciesRulesVulnerabilities

GET /api/scanning/v1/resultsDirect POST /api/secure/falco/v2/rules

SaaS Platform Operations Management

BC-4220

AlertsDashboardsMetrics

POST /api/v2/alerts GET /api/v2/metrics/find POST /api/v2/metrics/descriptors POST /api/v3/dashboards

Kin Score

Kin Score How this is scored →
scored 2026-11-06 · rubric v0.27.0

Composite quality — 47.9/100 · developing

Contract Quality 10.9 / 19

Developer Ergonomics 8.0 / 15

Access Clarity 6.7 / 15

Operational Transparency 3.3 / 10

Contract Governance 2.5 / 9

Discoverability 4.9 / 8

Regulatory Posture 2.5 / 15

Create-or-Update Ergonomics 0.0 / 10

Agent readiness — 25/100 · agent aware

Machine-Readable Contract 18 / 18

Agentic Access Contract 10 / 10

Documented Reversibility 0 / 6

MCP Server 12 / 12

Machine-Readable Auth 10 / 10

Idempotency 0 / 9

Stable Error Semantics 0 / 8

Request/Response Examples 0 / 7

Rate-Limit Signaling 7 / 7

Typed Event Surface 0 / 6

Agent Skills 0 / 5

Well-Known Catalog 0 / 4

Consent & Bot Identity 0 / 3

A2A Agent Card 0 / 8

Dry-Run / Simulate Mode 0 / 4

Delegated User Identity 0 / 6

Protected Resource Metadata 0 / 5

Registration Without a Human 0 / 6

Agentic Commerce Well-Known Document 0 / 5

Pagination 5 / 5

Distinct Operations 3 / 3

MCP Tool Quality 6 / 6

Regulatory Posture applies to this provider. Its tags matched the Horizontal (data, software, accessibility, platform) regime, so Regulatory Posture carries 15 points of the composite. If this regime is wrong for your business, say so on your provider repo — the applicability map is public and we will correct it.

Create-or-Update Ergonomics applies to this provider. This API accepts writes, so it carries 10 points of the composite. It is scored from the published contracts themselves: whether a caller can create-or-update in one call, whether the write accepts a key the caller already holds, and whether the response says which branch ran. Without that, every write needs a search-and-branch in front of it, and the first time that check is skipped a duplicate record is created. Scored against the observed mean rather than raw — a provider at the catalog average is unchanged by this facet, not penalised by it.

The six quality facets above are damped to 75 points between them, because the conditional facet above carries the other 25. That is why each facet's contribution is shown against a damped maximum: raising a quality facet moves the composite by 75% of its nominal weight, not 100%. The full arithmetic is at apis.io/rating/.

Show this score on your site.

It updates itself when the score changes. Paste this where you link to your API docs:

<a href="https://apis.io/providers/sysdig/"><img src="https://apis.io/badge/sysdig/card.svg" alt="Sysdig on APIs.io — Kin Score by API Evangelist"></a>

Other styles, a README pill and a shields.io endpoint are on the badge page.

Raise your score.

Agent readiness — checks not met, largest first (exact, from this profile):

Idempotency +9 pts — OpenAPI mutating operations declare an idempotency key — a header, a request-body property, or a named de-duplication token whose own description says so (verified); else common[].type matches /idempoten/i (documented)
Stable Error Semantics +8 pts — OpenAPI $refs a shared error schema across 4xx/5xx responses (verified), else common[].type includes ErrorCatalog / ErrorCodes / DeclineCodes
A2A Agent Card +8 pts — a2a/-a2a.yml manifest, graded on conformance.grade against A2A 1.0.0
Request/Response Examples +7 pts — share of operations carrying request/response examples; else an Examples / Code Samples link
Registration Without a Human +6 pts — a `registration_endpoint` in the served RFC 8414 / OIDC discovery document
Delegated User Identity +6 pts — a served discovery document listing authorization_code in grant_types_supported (served), else an oauth2 authorizationCode flow or openIdConnect declared in an OpenAPI (documented)

8 more unmet checks in the Agent Readiness table above.

Kin Score — facets with the most composite points still available (weight × headroom):

Access Clarity scores 44.7 — up to +11.1 composite points
Contract Quality scores 58.0 — up to +10.5 composite points
Developer Ergonomics scores 53.6 — up to +9.3 composite points

Each check links to what satisfies it. Publish the artifact, or tell us where it already lives, and the score moves on the next scoring run.

Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. Every facet and dimension name above is a link: it opens that measurement's own page — what it means, the exact checks that feed it, how the whole catalog distributes on it, and the providers at the top of it. This rating is computed from the provider profile at artifacts.apis.io/sysdig/apis.yml: open an issue on github.com/api-evangelist/sysdig to ask a question or point us at an artifact you publish. Submit an artifact on GitHub — free → Manage your own listing — the Influence plan, $499/mo →

Markets this provider is in provisional

The Kin Score Market layer reads a provider inside its market: its position, and how deep its integrations go. Depth is only comparable within a position. Provisional and unweighted: not part of the Kin Score or agent readiness.

Market	Position	Depth	Registered MCP server	Declares compatibility
Infrastructure-as-Code Provider Registries (Terraform, OpenTofu, Pulumi)	builds-on	54.6	-	-
Backstage Plugin Directory	builds-on	54.6	-	-
Configuration-Management Content Registries (Ansible Galaxy, Chef Supermarket)	builds-on	54.6	-	-
Jenkins Plugins + CD Foundation Landscape	builds-on	54.6	-	-
Red Hat Certified Ecosystem (certified partner containers + certified OpenShift operators)	builds-on	54.6	-	-
Artifact Hub Cloud-Native Packages	builds-on	54.6	-	-
ServiceNow Store (partner apps + ServiceNow Certified App)	builds-on	54.6	-	-

Registered MCP server and declares compatibility are report only — not weighted. Undeclared means we found nothing we can read, so there is no number: we never infer integrations.

Standards implemented 2

Standards this provider implements or carries. De facto ones are profiled and measured by the API Commons; formal ones come from the standards directory and are linked by the provider's own tags. The evidence column says how each claim was established — not that it was made.

Model Context Protocol (MCP)

measured — observed by APIs.io (documented)

OpenAPI

measured — observed by APIs.io (published)

APIs 13

Individual APIs this provider publishes, each with its own machine-readable definition.

Sysdig Activity Audit API

Audit trail of user and system activities

Sysdig Alerts API

Manage monitoring alerts and alert notifications

Sysdig Compliance API

Compliance checks and reporting

Sysdig Dashboards API

Create and manage monitoring dashboards

Sysdig Events API

Retrieve and create custom events

Sysdig Image Scanning API

Scan container images for vulnerabilities

Sysdig Metrics API

Query and retrieve metrics data

Sysdig Notification Channels API

Configure notification channels for alerts

Sysdig Policies API

Manage runtime security policies

Sysdig Rules API

Manage Falco security rules

Sysdig SBOM API

Software Bill of Materials management

Sysdig Teams API

Manage teams and team memberships

Sysdig Vulnerabilities API

Manage vulnerability findings and scanning results

Scroll for all 13

Postman Collections 13

Ready-to-run Postman collections for exercising this provider's APIs.

Sysdig Monitor Activity Audit API

POSTMAN

Sysdig Monitor Activity Audit Alerts API

POSTMAN

Sysdig Monitor Activity Audit Compliance API

POSTMAN

Sysdig Monitor Activity Audit Dashboards API

POSTMAN

Sysdig Monitor Activity Audit Events API

POSTMAN

Sysdig Monitor Activity Audit Image Scanning API

POSTMAN

Sysdig Monitor Activity Audit Metrics API

POSTMAN

Sysdig Monitor Activity Audit Notification Channels API

POSTMAN

Sysdig Monitor Activity Audit Policies API

POSTMAN

Sysdig Monitor Activity Audit Rules API

POSTMAN

Sysdig Monitor Activity Audit SBOM API

POSTMAN

Sysdig Monitor Activity Audit Teams API

POSTMAN

Sysdig Monitor Activity Audit Vulnerabilities API

POSTMAN

Scroll for all 13

Open Collections 15

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

Sysdig Monitor Activity Audit API

OPEN COLLECTION

Sysdig Monitor Activity Audit Alerts API

OPEN COLLECTION

Sysdig Monitor Activity Audit Compliance API

OPEN COLLECTION

Sysdig Monitor Activity Audit Dashboards API

OPEN COLLECTION

Sysdig Monitor Activity Audit Events API

OPEN COLLECTION

Sysdig Monitor Activity Audit Image Scanning API

OPEN COLLECTION

Sysdig Monitor Activity Audit Metrics API

OPEN COLLECTION

Sysdig Monitor API

OPEN COLLECTION

Sysdig Monitor Activity Audit Notification Channels API

OPEN COLLECTION

Sysdig Monitor Activity Audit Policies API

OPEN COLLECTION

Sysdig Monitor Activity Audit Rules API

OPEN COLLECTION

Sysdig Monitor Activity Audit SBOM API

OPEN COLLECTION

Sysdig Secure API

OPEN COLLECTION

Sysdig Monitor Activity Audit Teams API

OPEN COLLECTION

Sysdig Monitor Activity Audit Vulnerabilities API

OPEN COLLECTION

Scroll for all 15

Arazzo Workflows 13

Multi-step API workflows described with the Arazzo specification.

Sysdig Author Falco Rule and Attach to Policy

Create a custom Falco rule, then create a policy that references it.

ARAZZO

Sysdig Build Metric Dashboard

Discover a metric, confirm its descriptor, and create a dashboard for it.

ARAZZO

Sysdig Clone Dashboard

Read a source dashboard and create a copy of it under a new name.

ARAZZO

Sysdig Compliance Task Results

List compliance tasks, pick one, and pull its control results.

ARAZZO

Sysdig Create Alert With Notification Channel

Create a notification channel, then create an alert that routes to it.

ARAZZO

Sysdig Create Policy and Verify

Create a runtime security policy then read it back to confirm it persisted.

ARAZZO

Sysdig Disable Alert

List alerts, find one by name, and disable it via update.

ARAZZO

Sysdig Investigate Secure Event

List secure runtime events, branch on a match, and pull the activity audit.

ARAZZO

Sysdig Provision Team

Create a team, verify it, and scope a notification channel for it.

ARAZZO

Sysdig Publish Event and Confirm

Post a custom event to Monitor, then list events to confirm it landed.

ARAZZO

Sysdig Scan Image and Poll Results

Trigger an image scan, poll until analysis completes, then read findings.

ARAZZO

Sysdig Scanned Image Inventory Review

List scanned images, pick the first, and pull its vulnerabilities and SBOM.

ARAZZO

Sysdig Triage Image Vulnerabilities

List vulnerability results, drill into one image, and pull its SBOM.

ARAZZO

Scroll for all 13

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

MCP Server

MCP SERVER

Sysdig API pricing

Prices published by Sysdig, read 2026-10-28 from www.sysdig.com/pricing.

Plan	Price
Sysdig Secure / Sysdig Monitor	Request a quote

Plan details, limits and sources →

Rate limits

Free Tier Default: 10 requests per minute
Free Tier Monthly Quota: 1000 requests per month
Professional Tier Default: 100 requests per minute

Compiled by API Evangelist, not yet checked against Sysdig's documentation. All 5 limits →

Pricing Plans 1

Published pricing tiers and plan structures.

Sysdig Plans Pricing

1 plans

PLANS

Rate Limits 1

Documented rate limits and quota policies.

Sysdig Rate Limits

5 limits

RATE LIMITS

Service Levels 1

Uptime the provider promises or reports, as SLA4OAI. Read from its own pages; APIs.io runs no monitors.

Sysdig

SLA

FinOps 1

Cost, billing, and metering signals for API financial operations.

Sysdig Finops

FINOPS

Semantic Vocabularies 1

JSON-LD contexts and semantic vocabularies used across these APIs.

Sysdig Context

31 classes · 0 properties

JSON-LD

Spectral Rules 2

Spectral governance rulesets for linting and validating these APIs.

Sysdig — jsonschema rules

5 rules · 3 warnings 2 info

SPECTRAL

Sysdig API Rules

10 rules · 4 errors 5 warnings 1 info

SPECTRAL

JSON Schema 2

Standalone JSON Schema definitions for this provider's data models.

Sysdig Alert

10 properties

JSON SCHEMA

Sysdig Vulnerability

7 properties

JSON SCHEMA

JSON Structure 1

JSON Structure definitions describing this provider's data shapes.

Sysdig Alert Structure

0 properties

JSON STRUCTURE

Examples 2

Example request and response payloads for these APIs.

Sysdig List Alerts Example

2 fields

EXAMPLE

Sysdig List Vulnerability Results Example

2 fields

EXAMPLE

Security Posture 2

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Sysdig Authentication

http · 1 scheme

SECURITY

Sysdig Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Sysdig Agentic Access

43 operations · 20 acting

AGENTIC

Resources

Get Started 3

Portal, sign-up, and the first successful call

DeveloperPortal

DeveloperPortal

GettingStarted

GettingStarted

Signup

Signup

Documentation 1

Reference material describing how the API behaves

Documentation

Documentation

Agent Surfaces 2

MCP servers, agent skills, and machine-readable catalogs

AgenticAccess

AgenticAccess

MCPServer

MCPServer

Design & Contract 15

Pagination, idempotency, versioning, errors, and events

Arazzo

Arazzo

Arazzo

Arazzo

Arazzo

Arazzo

Arazzo

Arazzo

Arazzo

Arazzo

Arazzo

Arazzo

Arazzo

SpectralRules

Vocabulary

Scroll for all 15

Build 4

SDKs, sample code, and the tooling you integrate with

PostmanWorkspace

PostmanWorkspace

GitHubOrganization

GitHubOrganization

Python SDK

Python SDK

CLI

CLI

Access & Security 2

Authentication, authorization, and security posture

DomainSecurity

DomainSecurity

Authentication

Authentication

Operate 4

Status, limits, changes, and where to get help

RateLimits

ChangeLog

Support

StatusPage

Commercial 3

Pricing, plans, and the legal terms of use

Plans

Plans

FinOps

FinOps

Pricing

Pricing

Company 3

The organization behind the API

LinkedIn

Website

Website

Blog

Blog

Other 4

Properties that don't map to a standard resource type

CapabilityMap

CapabilityMap

Terraform Provider

Terraform Provider

Kubernetes Operator

Kubernetes Operator

Helm Charts

Helm Charts

Source (apis.yml)

aid: sysdig
name: Sysdig
description: Sysdig is a cloud and container security platform that provides runtime threat detection, vulnerability management,
  cloud security posture management (CSPM), compliance automation, and observability for containers, Kubernetes, and cloud
  environments. Sysdig Monitor offers full-stack monitoring and alerting while Sysdig Secure delivers runtime security, vulnerability
  scanning, policy enforcement, incident response, and compliance reporting.
type: Index
deliveryModel:
  model: saas
  open_source: false
  commercial: true
  callable_host: true
  label: Hosted service · you call their endpoint
  confidence: high
  source:
  - openapi
  - pricing
  generated: '2026-08-28'
  method: derived
accessModel:
  pricing: unknown
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Unknown
  confidence: low
  source:
  - plans
  - authentication
  - security
  generated: '2026-11-06'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/sysdig.png
tags:
- Cloud Security
- Containers
- Kubernetes
- Runtime Security
- Security
- Vulnerability Management
- Monitoring
- Observability
- CSPM
- Compliance
url: https://raw.githubusercontent.com/api-evangelist/sysdig/refs/heads/main/apis.yml
created: '2026-03-26'
modified: '2026-05-19'
specificationVersion: '0.23'
apis:
- aid: sysdig:sysdig-activity-audit-api
  name: Sysdig Activity Audit API
  description: Audit trail of user and system activities
  humanURL: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  baseURL: https://api.us1.sysdig.com
  tags:
  - Activity Audit
  properties:
  - type: OpenAPI
    url: openapi/sysdig-activity-audit-api-openapi.yml
  - type: Documentation
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GettingStarted
    url: https://docs.sysdig.com/en/getting-started/
  - type: Authentication
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
- aid: sysdig:sysdig-alerts-api
  name: Sysdig Alerts API
  description: Manage monitoring alerts and alert notifications
  humanURL: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  baseURL: https://api.us1.sysdig.com
  tags:
  - Alerts
  properties:
  - type: OpenAPI
    url: openapi/sysdig-alerts-api-openapi.yml
  - type: Documentation
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GettingStarted
    url: https://docs.sysdig.com/en/getting-started/
  - type: Authentication
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
- aid: sysdig:sysdig-compliance-api
  name: Sysdig Compliance API
  description: Compliance checks and reporting
  humanURL: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  baseURL: https://api.us1.sysdig.com
  tags:
  - Compliance
  properties:
  - type: OpenAPI
    url: openapi/sysdig-compliance-api-openapi.yml
  - type: Documentation
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GettingStarted
    url: https://docs.sysdig.com/en/getting-started/
  - type: Authentication
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
- aid: sysdig:sysdig-dashboards-api
  name: Sysdig Dashboards API
  description: Create and manage monitoring dashboards
  humanURL: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  baseURL: https://api.us1.sysdig.com
  tags:
  - Dashboards
  properties:
  - type: OpenAPI
    url: openapi/sysdig-dashboards-api-openapi.yml
  - type: Documentation
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GettingStarted
    url: https://docs.sysdig.com/en/getting-started/
  - type: Authentication
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
- aid: sysdig:sysdig-events-api
  name: Sysdig Events API
  description: Retrieve and create custom events
  humanURL: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  baseURL: https://api.us1.sysdig.com
  tags:
  - Event
  tags_raw:
  - Events
  properties:
  - type: OpenAPI
    url: openapi/sysdig-events-api-openapi.yml
  - type: Documentation
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GettingStarted
    url: https://docs.sysdig.com/en/getting-started/
  - type: Authentication
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
- aid: sysdig:sysdig-image-scanning-api
  name: Sysdig Image Scanning API
  description: Scan container images for vulnerabilities
  humanURL: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  baseURL: https://api.us1.sysdig.com
  tags:
  - Image Scanning
  properties:
  - type: OpenAPI
    url: openapi/sysdig-image-scanning-api-openapi.yml
  - type: Documentation
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GettingStarted
    url: https://docs.sysdig.com/en/getting-started/
  - type: Authentication
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
- aid: sysdig:sysdig-metrics-api
  name: Sysdig Metrics API
  description: Query and retrieve metrics data
  humanURL: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  baseURL: https://api.us1.sysdig.com
  tags:
  - Metrics
  properties:
  - type: OpenAPI
    url: openapi/sysdig-metrics-api-openapi.yml
  - type: Documentation
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GettingStarted
    url: https://docs.sysdig.com/en/getting-started/
  - type: Authentication
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
- aid: sysdig:sysdig-notification-channels-api
  name: Sysdig Notification Channels API
  description: Configure notification channels for alerts
  humanURL: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  baseURL: https://api.us1.sysdig.com
  tags:
  - Notification Channels
  tags_raw:
  - Notification Channels
  properties:
  - type: OpenAPI
    url: openapi/sysdig-notification-channels-api-openapi.yml
  - type: Documentation
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GettingStarted
    url: https://docs.sysdig.com/en/getting-started/
  - type: Authentication
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
- aid: sysdig:sysdig-policies-api
  name: Sysdig Policies API
  description: Manage runtime security policies
  humanURL: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  baseURL: https://api.us1.sysdig.com
  tags:
  - Policies
  properties:
  - type: OpenAPI
    url: openapi/sysdig-policies-api-openapi.yml
  - type: Documentation
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GettingStarted
    url: https://docs.sysdig.com/en/getting-started/
  - type: Authentication
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
- aid: sysdig:sysdig-rules-api
  name: Sysdig Rules API
  description: Manage Falco security rules
  humanURL: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  baseURL: https://api.us1.sysdig.com
  tags:
  - Rules
  properties:
  - type: OpenAPI
    url: openapi/sysdig-rules-api-openapi.yml
  - type: Documentation
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GettingStarted
    url: https://docs.sysdig.com/en/getting-started/
  - type: Authentication
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
- aid: sysdig:sysdig-sbom-api
  name: Sysdig SBOM API
  description: Software Bill of Materials management
  humanURL: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  baseURL: https://api.us1.sysdig.com
  tags:
  - SBOM
  properties:
  - type: OpenAPI
    url: openapi/sysdig-sbom-api-openapi.yml
  - type: Documentation
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GettingStarted
    url: https://docs.sysdig.com/en/getting-started/
  - type: Authentication
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
- aid: sysdig:sysdig-teams-api
  name: Sysdig Teams API
  description: Manage teams and team memberships
  humanURL: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  baseURL: https://api.us1.sysdig.com
  tags:
  - Team
  tags_raw:
  - Teams
  properties:
  - type: OpenAPI
    url: openapi/sysdig-teams-api-openapi.yml
  - type: Documentation
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GettingStarted
    url: https://docs.sysdig.com/en/getting-started/
  - type: Authentication
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
- aid: sysdig:sysdig-vulnerabilities-api
  name: Sysdig Vulnerabilities API
  description: Manage vulnerability findings and scanning results
  humanURL: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  baseURL: https://api.us1.sysdig.com
  tags:
  - Vulnerabilities
  properties:
  - type: OpenAPI
    url: openapi/sysdig-vulnerabilities-api-openapi.yml
  - type: Documentation
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GettingStarted
    url: https://docs.sysdig.com/en/getting-started/
  - type: Authentication
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
common:
- type: Plans
  url: plans/sysdig-plans-pricing.yml
- type: RateLimits
  url: rate-limits/sysdig-rate-limits.yml
- type: FinOps
  url: finops/sysdig-finops.yml
- type: CapabilityMap
  url: capabilities/sysdig-capability-edges.yml
  name: Sysdig Business Capability Map
- type: PostmanWorkspace
  url: https://www.postman.com/kinlaneapi/sysdig/overview
- type: AgenticAccess
  url: agentic-access/sysdig-agentic-access.yml
- type: DomainSecurity
  url: security/sysdig-domain-security.yml
- type: Authentication
  url: authentication/sysdig-authentication.yml
- type: Arazzo
  url: arazzo/sysdig-author-falco-rule-and-attach-policy-workflow.yml
  name: Sysdig Author Falco Rule and Attach to Policy
- type: Arazzo
  url: arazzo/sysdig-build-metric-dashboard-workflow.yml
  name: Sysdig Build Metric Dashboard
- type: Arazzo
  url: arazzo/sysdig-clone-dashboard-workflow.yml
  name: Sysdig Clone Dashboard
- type: Arazzo
  url: arazzo/sysdig-compliance-task-results-workflow.yml
  name: Sysdig Compliance Task Results
- type: Arazzo
  url: arazzo/sysdig-create-alert-with-channel-workflow.yml
  name: Sysdig Create Alert With Notification Channel
- type: Arazzo
  url: arazzo/sysdig-create-policy-and-verify-workflow.yml
  name: Sysdig Create Policy and Verify
- type: Arazzo
  url: arazzo/sysdig-disable-alert-workflow.yml
  name: Sysdig Disable Alert
- type: Arazzo
  url: arazzo/sysdig-investigate-secure-event-workflow.yml
  name: Sysdig Investigate Secure Event
- type: Arazzo
  url: arazzo/sysdig-provision-team-workflow.yml
  name: Sysdig Provision Team
- type: Arazzo
  url: arazzo/sysdig-publish-event-and-confirm-workflow.yml
  name: Sysdig Publish Event and Confirm
- type: Arazzo
  url: arazzo/sysdig-scan-image-and-poll-workflow.yml
  name: Sysdig Scan Image and Poll Results
- type: Arazzo
  url: arazzo/sysdig-scanned-image-inventory-workflow.yml
  name: Sysdig Scanned Image Inventory Review
- type: Arazzo
  url: arazzo/sysdig-triage-image-vulnerabilities-workflow.yml
  name: Sysdig Triage Image Vulnerabilities
- type: LinkedIn
  url: https://www.linkedin.com/company/sysdig
- type: Website
  url: https://sysdig.com/
- type: Documentation
  url: https://docs.sysdig.com/
- type: DeveloperPortal
  url: https://docs.sysdig.com/en/developer-tools/
- type: GettingStarted
  url: https://docs.sysdig.com/en/getting-started/
- type: GitHubOrganization
  url: https://github.com/sysdiglabs
- type: Blog
  url: https://sysdig.com/blog/
- type: Pricing
  url: https://sysdig.com/pricing/
- type: Signup
  url: https://sysdig.com/company/free-trial/
- type: Terraform Provider
  url: https://registry.terraform.io/providers/sysdiglabs/sysdig/latest
- type: Python SDK
  url: https://github.com/sysdiglabs/sysdig-sdk-python
- type: CLI
  url: https://sysdiglabs.github.io/sysdig-platform-cli/
- type: Kubernetes Operator
  url: https://github.com/sysdiglabs/sysdig-operator
- type: Helm Charts
  url: https://github.com/sysdiglabs/charts
- type: SpectralRules
  url: https://raw.githubusercontent.com/api-evangelist/sysdig/refs/heads/main/rules/sysdig-rules.yml
- type: Vocabulary
  url: https://raw.githubusercontent.com/api-evangelist/sysdig/refs/heads/main/vocabulary/sysdig-vocabulary.yml
- type: ChangeLog
  url: https://docs.sysdig.com/en/release-notes/
- type: Support
  url: https://sysdig.com/support/
- type: StatusPage
  url: https://status.sysdig.com/
- name: MCP Server
  url: https://github.com/sysdiglabs/sysdig-mcp-server
  type: MCPServer
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com

Sysdig API — frequently asked questions

Does Sysdig have an API?

Yes. APIs.io lists 13 APIs from Sysdig, including Sysdig Activity Audit API, Sysdig Alerts API and Sysdig Compliance API, and 10 more.

Is there an OpenAPI specification for the Sysdig API?

Yes. APIs.io indexes 13 OpenAPI specifications for Sysdig, each linked for download from this page.

How do I authenticate with the Sysdig API?

Sysdig uses bearer-token authentication (http · 1 scheme). The details are profiled on APIs.io as Sysdig Authentication.

How much does the Sysdig API cost?

Sysdig publishes its prices; its Sysdig Secure / Sysdig Monitor plan is Request a quote as of 2026-10-28. APIs.io lists 1 pricing plan for Sysdig, with each plan's price, limits and inclusions under Pricing on this page.

Does Sysdig have an MCP server?

Yes. APIs.io lists 1 MCP server for Sysdig.

Is the Sysdig API ready for AI agents?

Sysdig has a Kin Score of 47.9 out of 100 (developing) and an Agent Readiness score of 25.3 (agent-aware), scored by API Evangelist on 2026-11-06.

Work with this as data

Every provider here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for providers

9 MCP tools reach this

find_providersBrowse and filter every provider in the catalog.
get_provider_artifactsEvery artifact this provider publishes, grouped by type.
get_provider_operationsEvery operation across all of their OpenAPIs — one call instead of parsing every spec.
get_provider_toolsEvery MCP tool they ship, with the operation each wraps.
get_provider_evidenceHow each part of their score was established. Free — the basis for a claim should not sit behind it.
get_provider_ratingPRO — composite, band, trend and facet scores.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This provider

curl "https://apis.io/api/v1/providers/sysdig"

All providers

curl "https://apis.io/api/v1/providers?limit=25"

Every operation they expose

curl "https://apis.io/api/v1/providers/sysdig/operations?limit=25"

How their score was established

curl "https://apis.io/api/v1/providers/sysdig/evidence"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.