Tigera

aid: tigera
name: Tigera
description: 'Tigera is the creator of Project Calico, the open-source networking and network-security engine for Kubernetes,
  and the company behind Calico Open Source, Calico Enterprise and Calico Cloud. Its products deliver container networking
  (BGP, eBPF, VPP and standard Linux data planes), tiered network policy and microsegmentation, egress gateways and egress
  access control, cluster mesh, an Envoy-based ingress gateway, workload-based IDS/IPS/WAF and threat detection, and full-stack
  observability (Service Graph, flow/DNS/L7 logs, packet capture) for Kubernetes clusters. The programmable surface is Kubernetes-native:
  the projectcalico.org/v3 aggregated API server exposes 27 custom resources through a published Swagger 2.0 definition, the
  Goldmane gRPC service exposes aggregated flow observability, calicoctl and kubectl are the first-party CLIs, and Calico
  Cloud adds a SaaS management plane with a read-only Usage API and security-event webhooks.'
image: https://www.tigera.io/app/uploads/2026/01/generic-Tigera-1200x628-1.png
url: https://raw.githubusercontent.com/api-evangelist/tigera/refs/heads/main/apis.yml
x-type: company
x-source: harvest:secondary-market
specificationVersion: '0.20'
created: '2026-08-05'
modified: '2026-08-05'
tags:
- Company
- Kubernetes
- Networking
- Network Security
- Container Security
- Cloud Native
- Observability
- Microsegmentation
- Zero Trust
- eBPF
- Open Source
apis:
- aid: tigera:goldmane-flows-api
  name: Goldmane Flows API
  description: Goldmane is the Calico flow aggregation and network-observability service introduced in Calico Open Source
    3.30. It exposes a gRPC API for querying aggregated flow data — List for point-in-time queries, Stream for a long-running
    stream of new flows, FilterHints for progressive discovery of filter criteria such as namespaces and source/destination
    names — plus statistics and flow-ingestion services. Tigera publishes the proto3 definition in the projectcalico/calico
    repository and documents it on the company blog.
  humanURL: https://www.tigera.io/blog/calico-open-source-3-30-exploring-the-goldmane-api-for-custom-kubernetes-network-observability/
  baseURL: https://goldmane.calico-system.svc:7443
  tags:
  - Observability
  - gRPC
  - Networking
  properties:
  - type: Protobuf
    url: grpc/tigera-goldmane-api.proto
  - type: SourceCode
    url: https://github.com/projectcalico/calico/tree/master/goldmane
  x-evidence:
    proto_url: https://raw.githubusercontent.com/projectcalico/calico/master/goldmane/proto/api.proto
    http_status: 200
    fetched: '2026-08-05'
    base_url_note: Goldmane runs in-cluster in the calico-system namespace; the address above is the in-cluster service address
      for the component, not a vendor-hosted endpoint.
- aid: tigera:tigera-mcp-server
  name: Tigera MCP Server
  description: A remote Model Context Protocol server published on the tigera.io host, advertised through RFC 8414 OAuth authorization-server
    metadata and RFC 9728 protected-resource metadata. The server fronts the Tigera WordPress content estate (the marketing
    site, blog and resources), not the Calico cluster API. Authorization is OAuth 2.1 authorization-code with PKCE (S256),
    a single `mcp` scope, public clients (token_endpoint_auth_method none) and client-ID metadata documents. tools/list is
    authenticated — an anonymous JSON-RPC call returns 401 mcp_unauthorized — so the live tool schemas require an authorized
    session.
  humanURL: https://www.tigera.io/
  baseURL: https://www.tigera.io/wp-json/mcp/mcp-oauth-server
  tags:
  - MCP
  - Agents
  - Content
  properties:
  - type: MCPServer
    url: mcp/tigera-mcp.yml
  - type: ToolCrosswalk
    url: mcp/tigera-tool-crosswalk.yml
  - type: OAuthScopes
    url: scopes/tigera-scopes.yml
  x-evidence:
    protected_resource: https://www.tigera.io/.well-known/oauth-protected-resource
    authorization_server: https://www.tigera.io/.well-known/oauth-authorization-server
    http_status: 200
    tools_list_status: 401
    fetched: '2026-08-05'
- aid: tigera:calico-cloud-usage-api
  name: Calico Cloud Usage API
  description: A read-only REST API on the Calico Cloud SaaS management plane that returns the same vCPU usage and managed-cluster
    data shown on the Usage Metrics page, for capacity planning, FinOps and license-compliance workflows. Three documented
    datasets — contracts (start/end dates, vCPU hours, package, add-ons), summary (per-project vCPU totals and usage over
    time) and managed clusters (per-cluster usage rows, optional project filter, CSV output) — with startTime, endTime and
    granularity query parameters. Authentication is an organization-scoped read-only API key generated in the web console.
  humanURL: https://docs.tigera.io/calico-cloud/operations/usage-api
  tags:
  - FinOps
  - Usage
  - SaaS
  properties:
  - type: Documentation
    url: https://docs.tigera.io/calico-cloud/operations/usage-api
  - type: Authentication
    url: authentication/tigera-authentication.yml
  x-evidence:
    docs_url: https://docs.tigera.io/calico-cloud/operations/usage-api
    http_status: 200
    fetched: '2026-08-05'
    base_url_note: Tigera does not publish the Usage API host in public documentation. The console generates a ready-made
      command per API key ("Actions > Generate commands"), so the base URL is only visible to authenticated customers. Recorded
      without a baseURL rather than guessed.
- aid: tigera:tigera-apis-api
  name: Tigera APIS API
  description: The apis API from Tigera — 1 operation(s) for apis.
  humanURL: https://docs.tigera.io/calico-cloud/reference/rest-api-reference
  baseURL: https://kubernetes.default.svc/apis/projectcalico.org/v3
  tags:
  - apis
  properties:
  - type: OpenAPI
    url: openapi/tigera-apis-api-openapi.yml
  - type: Documentation
    url: https://docs.tigera.io/calico/latest/reference/
  - type: APIReference
    url: https://docs.tigera.io/calico-cloud/reference/rest-api-reference
  - type: ErrorCatalog
    url: errors/tigera-problem-types.yml
  - type: DataModel
    url: data-model/tigera-data-model.yml
- aid: tigera:tigera-projectcalicoorg-api
  name: Tigera Projectcalico Org API
  description: The projectcalicoOrg API from Tigera — 1 operation(s) for projectcalicoorg.
  humanURL: https://docs.tigera.io/calico-cloud/reference/rest-api-reference
  baseURL: https://kubernetes.default.svc/apis/projectcalico.org/v3
  tags:
  - projectcalicoOrg
  properties:
  - type: OpenAPI
    url: openapi/tigera-projectcalicoorg-api-openapi.yml
  - type: Documentation
    url: https://docs.tigera.io/calico/latest/reference/
  - type: APIReference
    url: https://docs.tigera.io/calico-cloud/reference/rest-api-reference
  - type: ErrorCatalog
    url: errors/tigera-problem-types.yml
  - type: DataModel
    url: data-model/tigera-data-model.yml
- aid: tigera:tigera-projectcalicoorg-v3-api
  name: Tigera Projectcalico Org V3 API
  description: The projectcalicoOrg_v3 API from Tigera — 121 operation(s) for projectcalicoorg_v3.
  humanURL: https://docs.tigera.io/calico-cloud/reference/rest-api-reference
  baseURL: https://kubernetes.default.svc/apis/projectcalico.org/v3
  tags:
  - projectcalicoOrg_v3
  properties:
  - type: OpenAPI
    url: openapi/tigera-projectcalicoorg-v3-api-openapi.yml
  - type: Documentation
    url: https://docs.tigera.io/calico/latest/reference/
  - type: APIReference
    url: https://docs.tigera.io/calico-cloud/reference/rest-api-reference
  - type: ErrorCatalog
    url: errors/tigera-problem-types.yml
  - type: DataModel
    url: data-model/tigera-data-model.yml
- aid: tigera:tigera-version-api
  name: Tigera Version API
  description: The version API from Tigera — 1 operation(s) for version.
  humanURL: https://docs.tigera.io/calico-cloud/reference/rest-api-reference
  baseURL: https://kubernetes.default.svc/apis/projectcalico.org/v3
  tags:
  - version
  properties:
  - type: OpenAPI
    url: openapi/tigera-version-api-openapi.yml
  - type: Documentation
    url: https://docs.tigera.io/calico/latest/reference/
  - type: APIReference
    url: https://docs.tigera.io/calico-cloud/reference/rest-api-reference
  - type: ErrorCatalog
    url: errors/tigera-problem-types.yml
  - type: DataModel
    url: data-model/tigera-data-model.yml
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: License
  name: Apache-2.0
  url: https://github.com/projectcalico/calico/blob/master/LICENSE
- type: Website
  url: https://www.tigera.io/
- type: DeveloperPortal
  url: https://docs.tigera.io/
- type: Documentation
  url: https://docs.tigera.io/
- type: APIReference
  url: https://docs.tigera.io/calico-cloud/reference/rest-api-reference
- type: GettingStarted
  url: https://docs.tigera.io/calico/latest/getting-started/kubernetes/quickstart
- type: Support
  url: https://www.tigera.io/calico-support/
- type: Community
  url: https://www.tigera.io/project-calico/community/
- type: Blog
  url: https://www.tigera.io/blog/
- type: GitHubOrganization
  url: https://github.com/tigera
- type: SourceCode
  url: https://github.com/projectcalico/calico
- type: Pricing
  url: https://www.tigera.io/tigera-products/calico-cloud-pricing/
- type: SignUp
  url: https://www.calicocloud.io/signup
- type: TermsOfService
  url: https://www.tigera.io/legal/terms-of-use/
- type: PrivacyPolicy
  url: https://www.tigera.io/legal/privacy-policy/
- type: Contact
  url: https://www.tigera.io/contact/
- type: StatusPage
  url: https://status.calicocloud.io/
- type: Security
  url: https://www.tigera.io/vulnerability-disclosure/
- type: SecurityBulletins
  url: https://www.tigera.io/security-bulletins/
- type: Compliance
  url: https://www.tigera.io/tigera-products/calico-cloud-trust-center/
- type: TrustCenter
  url: security/tigera-trust-center.yml
- type: VulnerabilityDisclosure
  url: security/tigera-vulnerability-disclosure.yml
- type: DomainSecurity
  url: security/tigera-domain-security.yml
- type: Authentication
  url: authentication/tigera-authentication.yml
- type: OAuthScopes
  url: scopes/tigera-scopes.yml
- type: WellKnown
  url: well-known/tigera-well-known.yml
- type: LLMsTxt
  url: llms/tigera-llms.txt
- type: MCPServer
  url: mcp/tigera-mcp.yml
- type: ToolCrosswalk
  url: mcp/tigera-tool-crosswalk.yml
- type: Packages
  url: packages/tigera-packages.yml
- type: SDKs
  url: packages/tigera-packages.yml
- type: CLI
  url: cli/tigera-cli.yml
- type: Conventions
  url: conventions/tigera-conventions.yml
- type: Idempotency
  url: conventions/tigera-conventions.yml
- type: Conformance
  url: conformance/tigera-conformance.yml
- type: ErrorCatalog
  url: errors/tigera-problem-types.yml
- type: Lifecycle
  url: lifecycle/tigera-lifecycle.yml
- type: ChangeLog
  url: changelog/tigera-changelog.yml
- type: DataModel
  url: data-model/tigera-data-model.yml
- type: Webhooks
  url: asyncapi/tigera-calico-cloud-webhooks.yml
- type: AgentSkill
  url: skills/_index.yml
- type: Overlay
  url: overlays/tigera-calico-api-overlay.yaml
- type: Protobuf
  url: grpc/tigera-goldmane-api.proto
x-enrichment:
  date: '2026-08-05'
  status: enriched
  artifacts_added: 27
  pass: local-v1
x-coverage:
  state: covered
  reason: null
  detail: Contract discovery succeeded. The docs host renders its REST reference client-side via swagger-ui-react, so the
    page body is empty to a crawler — but the real Swagger 2.0 document (124 paths, 261 operations) is served at https://docs.tigera.io/json/calico-api-swagger.json
    and was harvested verbatim.
  evidence:
  - url: https://docs.tigera.io/json/calico-api-swagger.json
    status: 200
  - url: https://www.tigera.io/.well-known/oauth-protected-resource
    status: 200
  checked: '2026-08-05'