Tidelift

Tidelift provides open-source software supply-chain management for enterprises. Its platform combines package intelligence (maintenance, quality, end-of-life, and vulnerability signals) with catalogs of approved dependencies, policy and license standards enforcement, SBOM import/export, and "alignment" of projects against an organization's standards. Tidelift is distinctive for paying the open-source maintainers ("lifters") behind the packages enterprises rely on. The Tidelift External API (OpenAPI 3.0, Bearer API-key auth) exposes catalogs, violations, projects, groups, packages, releases, vulnerabilities, licenses, and reporting. Tidelift was acquired by Sonar in 2025; the API and developer surface remain active.

Tidelift publishes 15 APIs on the APIs.io network, including Alignments API, Attestations API, Authentication API, and 12 more. Tagged areas include Company, Open Source, Software Supply Chain, Dependency Management, and Application Security.

The Tidelift catalog on APIs.io includes 1 event-driven AsyncAPI specification.

Tidelift’s developer surface includes documentation, API reference, getting-started guide, support, pricing, authentication, CLI, and 22 more developer resources.

🌐 Visit website 📡 Source on GitHub
49.9/100 developing ▬ flat Agent 78/100 agent native Full breakdown ↓
scored 2026-07-27 · rubric v0.5
AccessSelf serve
15 APIs 1 MCP Servers
CompanyOpen SourceSoftware Supply ChainDependency ManagementApplication SecuritySBOMLicense ComplianceVulnerability ManagementDeveloper Tools

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-07-27 · rubric v0.5
Composite quality — 49.9/100 · developing
Contract Quality 16.1 / 25
Developer Ergonomics 16.5 / 20
Commercial Clarity 2.1 / 20
Operational Transparency 5.1 / 13
Governance 0.0 / 12
Discoverability 10.0 / 10
Agent readiness — 78/100 · agent native
Machine-Readable Contract 18 / 18
Agentic Access Contract 15 / 15
MCP Server 12 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 8 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 6 / 6
Agent Skills 5 / 5
Well-Known Catalog 4 / 4
Consent & Bot Identity 3 / 3
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/tidelift: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 15

Individual APIs this provider publishes, each with its own machine-readable definition.

Tidelift Alignments API

The Alignments API from Tidelift — 4 operation(s) for alignments.

Tidelift Attestations API

The Attestations API from Tidelift — 2 operation(s) for attestations.

Tidelift Authentication API

A [Tidelift API key](https://docs.tidelift.com/article/79-api-authentication) is required for all endpoints. If a particular type of API key is required it will be noted on the ...

Tidelift Basic Examples API

* curl ``` curl -H "Accept: application/json" \ -H "Authorization: bearer " \ https://api.tidelift.com/external-api/v1/packages/pypi/urllib3 ``` More deta...

Tidelift Catalog Releases API

The Catalog Releases API from Tidelift — 7 operation(s) for catalog releases.

Tidelift Catalogs API

The Catalogs API from Tidelift — 9 operation(s) for catalogs.

Tidelift CatalogStandards API

The CatalogStandards API from Tidelift — 3 operation(s) for catalogstandards.

Tidelift Groups API

The Groups API from Tidelift — 5 operation(s) for groups.

Tidelift Licenses API

The Licenses API from Tidelift — 5 operation(s) for licenses.

Tidelift Packages API

The Packages API from Tidelift — 6 operation(s) for packages.

Tidelift Projects API

The Projects API from Tidelift — 6 operation(s) for projects.

Tidelift Releases API

The Releases API from Tidelift — 5 operation(s) for releases.

Tidelift Reports API

The Reports API from Tidelift — 3 operation(s) for reports.

Tidelift Users API

The Users API from Tidelift — 1 operation(s) for users.

Tidelift Vulnerabilities API

The Vulnerabilities API from Tidelift — 2 operation(s) for vulnerabilities.

Scroll for all 15

Arazzo Workflows 2

Multi-step API workflows described with the Arazzo specification.

_Index

ARAZZO

Tidelift — package vulnerability check

Validate the API key, look up a package and a release, and pull the release's vulnerabilities.

ARAZZO

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

tidelift-mcp.yml

MCP SERVER

Event Specifications 1

AsyncAPI definitions for this provider's event-driven and streaming APIs.

Tidelift Webhooks

ASYNCAPI

Security Posture 3

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Tidelift Authentication

http · 1 scheme

SECURITY

Tidelift Domain Security

TLSv1.2 · HSTS · DMARC

SECURITY

Tidelift Vulnerability Disclosure

security.txt · contact published

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Tidelift Agentic Access

66 operations · 33 acting · 2 human-in-the-loop

66 operations · 33 acting

AGENTIC

Resources

Get Started 2

Portal, sign-up, and the first successful call

DeveloperPortal
DeveloperPortal
 GettingStarted
GettingStarted

Documentation 2

Reference material describing how the API behaves

Documentation
Documentation
 APIReference
APIReference

Agent Surfaces 5

MCP servers, agent skills, and machine-readable catalogs

AgenticAccess
AgenticAccess
 WellKnown
WellKnown
 MCPServer
MCPServer
 LLMsTxt
LLMsTxt
 AgentSkill
AgentSkill

Design & Contract 7

Pagination, idempotency, versioning, errors, and events

Conventions
Conventions
 ErrorCatalog
ErrorCatalog
 Conformance
Conformance
 Lifecycle
Lifecycle
 DataModel
DataModel
 Webhooks
Webhooks
 Arazzo
Arazzo

Scroll for all 7

Build 5

SDKs, sample code, and the tooling you integrate with

GitHubOrganization
GitHubOrganization
 Postman
Postman
 Packages
Packages
 SDKs
SDKs
 CLI
CLI

Access & Security 5

Authentication, authorization, and security posture

Authentication
Authentication
 VulnerabilityDisclosure
VulnerabilityDisclosure
 Security
Security
 DomainSecurity
DomainSecurity
 SecurityTxt
SecurityTxt

Operate 2

Status, limits, changes, and where to get help

Support
Support
 StatusPage
StatusPage

Commercial 1

Pricing, plans, and the legal terms of use

Pricing
Pricing

Source (apis.yml)

apis.yml Raw ↑ 
aid: tidelift
name: Tidelift
description: Tidelift provides open-source software supply-chain management for enterprises. Its platform combines package
  intelligence (maintenance, quality, end-of-life, and vulnerability signals) with catalogs of approved dependencies, policy
  and license standards enforcement, SBOM import/export, and "alignment" of projects against an organization's standards.
  Tidelift is distinctive for paying the open-source maintainers ("lifters") behind the packages enterprises rely on. The
  Tidelift External API (OpenAPI 3.0, Bearer API-key auth) exposes catalogs, violations, projects, groups, packages, releases,
  vulnerabilities, licenses, and reporting. Tidelift was acquired by Sonar in 2025; the API and developer surface remain active.
url: https://raw.githubusercontent.com/api-evangelist/tidelift/refs/heads/main/apis.yml
x-type: company
x-source: vc-portfolio
x-backed-by:
- general-catalyst
x-parent-company: sonar
accessModel:
  pricing: unknown
  onboarding: self-serve
  trial: false
  try_now: false
  public: false
  label: Self-serve signup
  confidence: medium
  source:
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://api.tidelift.com/docs/assets/tidelift_logo.png
specificationVersion: '0.20'
created: '2026-07-17'
modified: '2026-07-21'
tags:
- Company
- Open Source
- Software Supply Chain
- Dependency Management
- Application Security
- SBOM
- License Compliance
- Vulnerability Management
- Developer Tools
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
apis:
- aid: tidelift:tidelift-alignments-api
  name: Tidelift Alignments API
  description: The Alignments API from Tidelift — 4 operation(s) for alignments.
  humanURL: https://api.tidelift.com/docs/
  baseURL: https://api.tidelift.com/external-api
  tags:
  - Alignments
  properties:
  - type: OpenAPI
    url: openapi/tidelift-alignments-api-openapi.yml
  - type: APIReference
    url: https://api.tidelift.com/docs/
- aid: tidelift:tidelift-attestations-api
  name: Tidelift Attestations API
  description: The Attestations API from Tidelift — 2 operation(s) for attestations.
  humanURL: https://api.tidelift.com/docs/
  baseURL: https://api.tidelift.com/external-api
  tags:
  - Attestations
  properties:
  - type: OpenAPI
    url: openapi/tidelift-attestations-api-openapi.yml
  - type: APIReference
    url: https://api.tidelift.com/docs/
- aid: tidelift:tidelift-authentication-api
  name: Tidelift Authentication API
  description: 'A [Tidelift API key](https://docs.tidelift.com/article/79-api-authentication) is required for all endpoints.
    If a particular type of API key is required it will be noted on the path.

    <SecurityDefinitions />'
  humanURL: https://api.tidelift.com/docs/
  baseURL: https://api.tidelift.com/external-api
  tags:
  - Authentication
  properties:
  - type: OpenAPI
    url: openapi/tidelift-authentication-api-openapi.yml
  - type: APIReference
    url: https://api.tidelift.com/docs/
- aid: tidelift:tidelift-basic-examples-api
  name: Tidelift Basic Examples API
  description: "* curl\n\n```\ncurl -H \"Accept: application/json\" \\\n     -H \"Authorization: bearer <your Tidelift API\
    \ key>\" \\\n     https://api.tidelift.com/external-api/v1/packages/pypi/urllib3\n```\n\nMore detailed examples can be\
    \ found in [the Tidelift support documentation](https://support.tidelift.com/hc/en-us/articles/4406286633364-How-to-access-Tidelift-APIs#h_01H9TWCQQQ5033Q7DTP89BYC5H)."
  humanURL: https://api.tidelift.com/docs/
  baseURL: https://api.tidelift.com/external-api
  tags:
  - Basic Examples
  properties:
  - type: OpenAPI
    url: openapi/tidelift-basic-examples-api-openapi.yml
  - type: APIReference
    url: https://api.tidelift.com/docs/
- aid: tidelift:tidelift-catalog-releases-api
  name: Tidelift Catalog Releases API
  description: The Catalog Releases API from Tidelift — 7 operation(s) for catalog releases.
  humanURL: https://api.tidelift.com/docs/
  baseURL: https://api.tidelift.com/external-api
  tags:
  - Catalog Releases
  properties:
  - type: OpenAPI
    url: openapi/tidelift-catalog-releases-api-openapi.yml
  - type: APIReference
    url: https://api.tidelift.com/docs/
- aid: tidelift:tidelift-catalogs-api
  name: Tidelift Catalogs API
  description: The Catalogs API from Tidelift — 9 operation(s) for catalogs.
  humanURL: https://api.tidelift.com/docs/
  baseURL: https://api.tidelift.com/external-api
  tags:
  - Catalogs
  properties:
  - type: OpenAPI
    url: openapi/tidelift-catalogs-api-openapi.yml
  - type: APIReference
    url: https://api.tidelift.com/docs/
- aid: tidelift:tidelift-catalogstandards-api
  name: Tidelift CatalogStandards API
  description: The CatalogStandards API from Tidelift — 3 operation(s) for catalogstandards.
  humanURL: https://api.tidelift.com/docs/
  baseURL: https://api.tidelift.com/external-api
  tags:
  - CatalogStandards
  properties:
  - type: OpenAPI
    url: openapi/tidelift-catalogstandards-api-openapi.yml
  - type: APIReference
    url: https://api.tidelift.com/docs/
- aid: tidelift:tidelift-groups-api
  name: Tidelift Groups API
  description: The Groups API from Tidelift — 5 operation(s) for groups.
  humanURL: https://api.tidelift.com/docs/
  baseURL: https://api.tidelift.com/external-api
  tags:
  - Groups
  properties:
  - type: OpenAPI
    url: openapi/tidelift-groups-api-openapi.yml
  - type: APIReference
    url: https://api.tidelift.com/docs/
- aid: tidelift:tidelift-licenses-api
  name: Tidelift Licenses API
  description: The Licenses API from Tidelift — 5 operation(s) for licenses.
  humanURL: https://api.tidelift.com/docs/
  baseURL: https://api.tidelift.com/external-api
  tags:
  - Licenses
  properties:
  - type: OpenAPI
    url: openapi/tidelift-licenses-api-openapi.yml
  - type: APIReference
    url: https://api.tidelift.com/docs/
- aid: tidelift:tidelift-packages-api
  name: Tidelift Packages API
  description: The Packages API from Tidelift — 6 operation(s) for packages.
  humanURL: https://api.tidelift.com/docs/
  baseURL: https://api.tidelift.com/external-api
  tags:
  - Packages
  properties:
  - type: OpenAPI
    url: openapi/tidelift-packages-api-openapi.yml
  - type: APIReference
    url: https://api.tidelift.com/docs/
- aid: tidelift:tidelift-projects-api
  name: Tidelift Projects API
  description: The Projects API from Tidelift — 6 operation(s) for projects.
  humanURL: https://api.tidelift.com/docs/
  baseURL: https://api.tidelift.com/external-api
  tags:
  - Projects
  properties:
  - type: OpenAPI
    url: openapi/tidelift-projects-api-openapi.yml
  - type: APIReference
    url: https://api.tidelift.com/docs/
- aid: tidelift:tidelift-releases-api
  name: Tidelift Releases API
  description: The Releases API from Tidelift — 5 operation(s) for releases.
  humanURL: https://api.tidelift.com/docs/
  baseURL: https://api.tidelift.com/external-api
  tags:
  - Releases
  properties:
  - type: OpenAPI
    url: openapi/tidelift-releases-api-openapi.yml
  - type: APIReference
    url: https://api.tidelift.com/docs/
- aid: tidelift:tidelift-reports-api
  name: Tidelift Reports API
  description: The Reports API from Tidelift — 3 operation(s) for reports.
  humanURL: https://api.tidelift.com/docs/
  baseURL: https://api.tidelift.com/external-api
  tags:
  - Reports
  properties:
  - type: OpenAPI
    url: openapi/tidelift-reports-api-openapi.yml
  - type: APIReference
    url: https://api.tidelift.com/docs/
- aid: tidelift:tidelift-users-api
  name: Tidelift Users API
  description: The Users API from Tidelift — 1 operation(s) for users.
  humanURL: https://api.tidelift.com/docs/
  baseURL: https://api.tidelift.com/external-api
  tags:
  - Users
  properties:
  - type: OpenAPI
    url: openapi/tidelift-users-api-openapi.yml
  - type: APIReference
    url: https://api.tidelift.com/docs/
- aid: tidelift:tidelift-vulnerabilities-api
  name: Tidelift Vulnerabilities API
  description: The Vulnerabilities API from Tidelift — 2 operation(s) for vulnerabilities.
  humanURL: https://api.tidelift.com/docs/
  baseURL: https://api.tidelift.com/external-api
  tags:
  - Vulnerabilities
  properties:
  - type: OpenAPI
    url: openapi/tidelift-vulnerabilities-api-openapi.yml
  - type: APIReference
    url: https://api.tidelift.com/docs/
common:
- type: DeveloperPortal
  url: https://api.tidelift.com/docs/
- type: Documentation
  url: https://support.tidelift.com/hc/en-us
- type: APIReference
  url: https://api.tidelift.com/docs/
- type: GettingStarted
  url: https://docs.tidelift.com/article/79-api-authentication
- type: Support
  url: https://support.tidelift.com/hc/en-us
- type: Pricing
  url: https://tidelift.com/subscription/pricing
- type: GitHubOrganization
  url: https://github.com/tidelift
- type: Postman
  url: https://github.com/tidelift/tidelift-api-postman
- type: StatusPage
  url: https://status.tidelift.com/
- type: Authentication
  url: authentication/tidelift-authentication.yml
- type: AgenticAccess
  url: agentic-access/tidelift-agentic-access.yml
- type: VulnerabilityDisclosure
  url: security/tidelift-vulnerability-disclosure.yml
- type: Security
  url: https://tidelift.com/security
- type: DomainSecurity
  url: security/tidelift-domain-security.yml
- type: WellKnown
  url: well-known/tidelift-well-known.yml
- type: SecurityTxt
  url: well-known/tidelift-security.txt
- type: Packages
  url: packages/tidelift-packages.yml
- type: SDKs
  url: packages/tidelift-packages.yml
- type: CLI
  url: cli/tidelift-cli.yml
- type: MCPServer
  url: mcp/tidelift-mcp.yml
- type: LLMsTxt
  url: llms/tidelift-llms.txt
- type: Conventions
  url: conventions/tidelift-conventions.yml
- type: ErrorCatalog
  url: errors/tidelift-problem-types.yml
- type: Conformance
  url: conformance/tidelift-conformance.yml
- type: Lifecycle
  url: lifecycle/tidelift-lifecycle.yml
- type: DataModel
  url: data-model/tidelift-data-model.yml
- type: Webhooks
  url: asyncapi/tidelift-webhooks.yml
- type: AgentSkill
  url: skills/_index.yml
- type: Arazzo
  name: Tidelift — package vulnerability check
  url: arazzo/tidelift-package-vulnerability-check.arazzo.yml
x-enrichment:
  date: '2026-07-21'
  status: enriched
  artifacts_added: 22
  pass: local-v1