# Todyl

**Canonical:** https://apis.io/providers/todyl/  
**Website:** https://www.todyl.com/  
**APIs profiled:** 1

Todyl is a Denver, Colorado cybersecurity company that sells a single-agent, cloud-native security platform to managed service providers, solution providers and internal IT teams. The Todyl Security Platform consolidates modules that are usually bought separately — SASE (Secure Access Service Edge, delivered over Todyl's Secure Global Network), Endpoint Security (EDR/NGAV), a cloud-native SIEM, MXDR (24x7 managed extended detection and response with a human SOC), GRC (governance, risk and compliance), and Security Automation playbooks — behind one agent and one multi-tenant portal. Todyl operates a live production REST API at https://api.todyl.com (path-versioned at /v1) that partners use to enumerate devices, deployment groups and billing data across their tenants, and it integrates with PSA/RMM tooling such as Autotask and ConnectWise. Access is authenticated with an External API token pair issued inside the Todyl portal; the API reference itself is published only in the customer-authenticated knowledge base, so no public OpenAPI, reference page or developer portal exists at the time of this profile.

## Kin Score — 23.9 / 100 (emerging)

Scored 2026-09-02 under rubric 0.18.0. Trend: flat (+0.0 from 23.9).

| Facet | Score |
|---|---|
| Discoverability | 75.9 |
| Contract Quality | 0.0 |
| Governance | 18.2 |
| Contract Governance | 18.2 |
| Operational Transparency | 18.4 |
| Developer Ergonomics | 19.0 |
| Commercial Clarity | 39.5 |
| Access Clarity | 39.5 |

## Agent readiness — 7.9 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | no |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | bearer |
| Idempotency | no |
| Error Semantics | documented |
| OpenAPI Examples | no |
| Rate Limit Signal | documented |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |
| Delegated Identity | no |
| Protected Resource Metadata | no |
| Dynamic Client Registration | no |
| Agentic Commerce | no |

## Access

Self-serve signup — onboarding: self-serve, pricing: unknown, trial: no (confidence: medium).

## APIs (1)

- **Todyl External API** — Todyl's External API is a path-versioned REST API served from https://api.todyl.com. Probing it unauthenticated returns Todyl's own JSON error envelope ({"error":{"code":"auth_m...

## Security (2)

- **Todyl Authentication** — 1 scheme
- **Todyl Domain Security** — TLSv1.3 · HSTS · DNSSEC · DMARC

## Plans (1)

- **Todyl Plans Pricing**

## Tags

Company, Cybersecurity, Security, Managed Service Providers, SASE, SIEM, Endpoint Security, Managed Detection and Response, Governance Risk and Compliance, Zero Trust, Networking

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/todyl/). Scores are computed from the provider's own public artifacts under a published rubric.