# Tolmo

**Canonical:** https://apis.io/providers/tolmo/  
**Website:** https://tolmo.com/  
**APIs profiled:** 1

Tolmo builds AI-native cybersecurity for engineering teams. Its platform pairs automated cloud and SaaS discovery (AWS, GitHub, Datadog, Linear, Cloudflare, and more) with event-driven agents that run continuous pentesting, threat modeling, finding generation, and verified remediation against the customer's real infrastructure graph. The primary developer surface is the Tolmo CLI: SQL and Cypher queries over the infrastructure graph, full-lifecycle security findings management, and a secure server-side proxy for GitHub/AWS/Linear/ Sentry/Datadog requests, plus a first-party agent skill for Claude Code and other AI agents. Backed by Accel and Y Combinator.

## Kin Score — 25.8 / 100 (emerging)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+0.0 from 25.8).

| Facet | Score |
|---|---|
| Discoverability | 87.0 |
| Contract Quality | 0.0 |
| Governance | 0.0 |
| Contract Governance | 0.0 |
| Operational Transparency | 28.9 |
| Developer Ergonomics | 58.9 |
| Commercial Clarity | 7.9 |
| Access Clarity | 7.9 |

## Agent readiness — 12.2 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | no |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | derived |
| Well Known Catalog | no |
| Consent Identity | yes |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Self-serve signup — onboarding: self-serve, pricing: unknown, trial: no (confidence: medium).

## APIs (1)

- **Tolmo Platform API** — Backend API for the Tolmo cloud security platform, consumed through the Tolmo CLI (SQL/Cypher queries over the infrastructure graph, security findings management, and a secure s...

## Security (4)

- **Tolmo Authentication** — oauth2/http-bearer · 2 schemes
- **Tolmo Domain Security** — TLSv1.3 · HSTS · DMARC
- **Tolmo Vulnerability Disclosure** — security.txt · contact published
- **Tolmo Trust Center** — trust center published

## Tags

Company, Security, Cybersecurity, Cloud Security, Vulnerability Management, CLI, DevSecOps, AI Agents, Infrastructure Graph

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/tolmo/). Scores are computed from the provider's own public artifacts under a published rubric.