# Tigera

**Canonical:** https://apis.io/providers/tigera/  
**Website:** https://www.tigera.io/  
**APIs profiled:** 7

Tigera is the creator of Project Calico, the open-source networking and network-security engine for Kubernetes, and the company behind Calico Open Source, Calico Enterprise and Calico Cloud. Its products deliver container networking (BGP, eBPF, VPP and standard Linux data planes), tiered network policy and microsegmentation, egress gateways and egress access control, cluster mesh, an Envoy-based ingress gateway, workload-based IDS/IPS/WAF and threat detection, and full-stack observability (Service Graph, flow/DNS/L7 logs, packet capture) for Kubernetes clusters. The programmable surface is Kubernetes-native: the projectcalico.org/v3 aggregated API server exposes 27 custom resources through a published Swagger 2.0 definition, the Goldmane gRPC service exposes aggregated flow observability, calicoctl and kubectl are the first-party CLIs, and Calico Cloud adds a SaaS management plane with a read-only Usage API and security-event webhooks.

## Kin Score — 55.7 / 100 (developing)

Scored 2026-08-17 under rubric 0.11.0. Trend: flat (+0.0 from 55.7).

| Facet | Score |
|---|---|
| Discoverability | 83.3 |
| Contract Quality | 46.3 |
| Governance | 11.5 |
| Operational Transparency | 55.3 |
| Developer Ergonomics | 75.5 |
| Commercial Clarity | 60.5 |

## Agent readiness — 53.8 (agent-native)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | no |
| MCP Server | yes |
| Auth Clarity | yes |
| Idempotency | documented |
| Error Semantics | documented |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | yes |
| Agent Skills | derived |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | yes |

## APIs (7)

- **Goldmane Flows API** — Goldmane is the Calico flow aggregation and network-observability service introduced in Calico Open Source 3.30. It exposes a gRPC API for querying aggregated flow data — List f...
- **Tigera MCP Server** — A remote Model Context Protocol server published on the tigera.io host, advertised through RFC 8414 OAuth authorization-server metadata and RFC 9728 protected-resource metadata....
- **Calico Cloud Usage API** — A read-only REST API on the Calico Cloud SaaS management plane that returns the same vCPU usage and managed-cluster data shown on the Usage Metrics page, for capacity planning, ...
- **Tigera APIS API** — The apis API from Tigera — 1 operation(s) for apis.
- **Tigera Projectcalico Org API** — The projectcalicoOrg API from Tigera — 1 operation(s) for projectcalicoorg.
- **Tigera Projectcalico Org V3 API** — The projectcalicoOrg_v3 API from Tigera — 121 operation(s) for projectcalicoorg_v3.
- **Tigera Version API** — The version API from Tigera — 1 operation(s) for version.

## MCP servers (1)

- **tigera-mcp.yml**

## Security (4)

- **Tigera Authentication** — http/apiKey/oauth2/openIdConnect/mutualTLS · 6 schemes
- **Tigera Domain Security** — TLSv1.3 · HSTS · DMARC
- **Tigera Vulnerability Disclosure** — contact published
- **Tigera Trust Center** — CSA STAR, SOC 2, PCI DSS, GDPR, CCPA

## Tags

Company, Kubernetes, Networking, Network Security, Container Security, Cloud Native, Observability, Microsegmentation, Zero Trust, eBPF, Open Source

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/tigera/). Scores are computed from the provider's own public artifacts under a published rubric.