TrojAI website screenshot

TrojAI

TrojAI is an enterprise AI security platform (acquired by A10 Networks) that lets organizations deploy AI models and agents safely. Its two products — TrojAI Detect (generative-AI red teaming, model robustness stress-testing, and integrity/risk audits for tabular and NLP models) and TrojAI Defend (a runtime firewall / proxy that inspects prompts and tool calls for prompt injection, jailbreaks, data leakage, toxic content, and rogue MCP/tool abuse) — are managed through a self-hosted RESTful platform API (/api/v2, authenticated with the x-trojai-api-key header), a Firewall Proxy API, a Python SDK (trojai-sdk), and a Keycloak-backed web application. It deploys as Cloud or Enterprise (Helm/Kubernetes).

TrojAI publishes 1 API on the APIs.io network: Platform API. Tagged areas include Company, AI Security, Machine-Learning, LLM Security, and Red Teaming.

TrojAI’s developer surface includes documentation, API reference, getting-started guide, engineering blog, support, authentication, changelog, and 14 more developer resources.

36.9/100 thin ▬ flat Agent 16/100 agent aware saas Full breakdown ↓
scored 2026-09-08 · rubric v0.20.0
1 APIs
CompanyAI SecurityMachine-LearningLLM SecurityRed TeamingAI FirewallPrompt InjectionModel RiskMLOpsAgentic AI

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-09-08 · rubric v0.20.0
Create-or-Update Ergonomics could not be measured. We hold no machine-readable contract for this provider to read, so there is nothing to measure a write surface against. Excluded rather than scored zero: never-measured and measured-empty are different facts. Publishing an OpenAPI is what makes this facet — and several others — scorable at all.
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. Every facet and dimension name above is a link: it opens that measurement's own page — what it means, the exact checks that feed it, how the whole catalog distributes on it, and the providers at the top of it. This rating is computed from github.com/api-evangelist/trojai: open an issue to ask a question, or submit a pull request to add artifacts. Submit an artifact on GitHub — free → Manage your own listing — the Influence plan, $499/mo →

APIs 1

Individual APIs this provider publishes, each with its own machine-readable definition.

TrojAI Platform API

RESTful JSON API to manage the TrojAI platform programmatically (users, groups, roles/permissions, datasets, models, firewall policies/configs, firewall events, red team jobs an...

Security Posture 3

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Trojai Authentication

apiKey · 2 schemes

SECURITY

Trojai Domain Security

TLSv1.3 · DNSSEC · DMARC

SECURITY

Trojai Vulnerability Disclosure

Hackerone · contact published

SECURITY

Resources

Get Started 2

Portal, sign-up, and the first successful call

Documentation 2

Reference material describing how the API behaves

Agent Surfaces 1

MCP servers, agent skills, and machine-readable catalogs

Design & Contract 3

Pagination, idempotency, versioning, errors, and events

Build 2

SDKs, sample code, and the tooling you integrate with

Access & Security 4

Authentication, authorization, and security posture

Operate 2

Status, limits, changes, and where to get help

Commercial 2

Pricing, plans, and the legal terms of use

Company 2

The organization behind the API

Other 1

Properties that don't map to a standard resource type

Source (apis.yml)

apis.yml Raw ↑
aid: trojai
deliveryModel:
  model: saas
  open_source: false
  commercial: true
  callable_host: false
  label: Hosted service · you call their endpoint
  confidence: medium
  source:
  - pricing
  generated: '2026-08-28'
  method: derived
accessModel:
  pricing: unknown
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Unknown
  confidence: low
  source:
  - authentication
  - security
  generated: '2026-09-03'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/trojai.png
name: TrojAI
description: TrojAI is an enterprise AI security platform (acquired by A10 Networks) that lets organizations deploy AI models
  and agents safely. Its two products — TrojAI Detect (generative-AI red teaming, model robustness stress-testing, and integrity/risk
  audits for tabular and NLP models) and TrojAI Defend (a runtime firewall / proxy that inspects prompts and tool calls for
  prompt injection, jailbreaks, data leakage, toxic content, and rogue MCP/tool abuse) — are managed through a self-hosted
  RESTful platform API (/api/v2, authenticated with the x-trojai-api-key header), a Firewall Proxy API, a Python SDK (trojai-sdk),
  and a Keycloak-backed web application. It deploys as Cloud or Enterprise (Helm/Kubernetes).
url: https://raw.githubusercontent.com/api-evangelist/trojai/refs/heads/main/apis.yml
x-type: company
x-source: vc-portfolio
x-backed-by:
- techstars
x-tier: profiled
x-tier-reason: enriched-real-api-surface
specificationVersion: '0.23'
created: '2026-07-17'
modified: '2026-07-21'
tags:
- Company
- AI Security
- Machine-Learning
- LLM Security
- Red Teaming
- AI Firewall
- Prompt Injection
- Model Risk
- MLOps
- Agentic AI
tags_raw:
- Company
- AI Security
- Machine Learning
- LLM Security
- Red Teaming
- AI Firewall
- Prompt Injection
- Model Risk
- MLOps
- Agentic AI
apis:
- name: TrojAI Platform API
  description: RESTful JSON API to manage the TrojAI platform programmatically (users, groups, roles/permissions, datasets,
    models, firewall policies/configs, firewall events, red team jobs and results, and secrets) — designed to be driven from
    an MLOps or CI/CD pipeline. Authenticated with an API key in the x-trojai-api-key header. The platform is self-hosted
    (Cloud or Enterprise), so the host is per-deployment and a per-tenant Swagger UI is served at https://<your_trojai_host>/docs.
  humanURL: https://docs.troj.ai/reference/eng-api
  baseURL: https://your-trojai-host.example/api/v2
  x-base-url-note: Host is per-tenant (self-hosted Cloud/Enterprise). The documented base path is /api/v2 on the deployment
    host (https://<your_trojai_host>); there is no single public production host.
  properties:
  - type: APIReference
    url: https://docs.troj.ai/reference/eng-api
  - type: Documentation
    url: https://docs.troj.ai/
  - type: Authentication
    url: authentication/trojai-authentication.yml
  - type: Swagger
    url: https://docs.troj.ai/reference/eng-api
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: ParentCompany
  url: https://apis.io/providers/a10-networks/
  name: A10 Networks
  x-relationship: acquired
  x-evidence: TrojAI is an enterprise AI security platform (acquired by A10 Networks) that lets organizations deploy AI models
    and agents safely.
- type: Website
  url: https://troj.ai/
- type: DeveloperPortal
  url: https://docs.troj.ai/
- type: Documentation
  url: https://docs.troj.ai/
- type: APIReference
  url: https://docs.troj.ai/reference/eng-api
- type: GettingStarted
  url: https://docs.troj.ai/trojai/getting-started/for-data-scientists
- type: Blog
  url: https://troj.ai/blog/
- type: Support
  url: https://troj.ai/company/contact/
- type: PrivacyPolicy
  url: https://troj.ai/legal/privacy-policy/
- type: TermsOfService
  url: https://troj.ai/legal/terms-of-service/
- type: Security
  url: https://troj.ai/legal/security/
- type: LLMsTxt
  url: llms/trojai-llms.txt
- type: Authentication
  url: authentication/trojai-authentication.yml
- type: Packages
  url: packages/trojai-packages.yml
- type: SDKs
  url: packages/trojai-packages.yml
- type: ChangeLog
  url: changelog/trojai-changelog.yml
- type: Lifecycle
  url: lifecycle/trojai-lifecycle.yml
- type: Conventions
  url: conventions/trojai-conventions.yml
- type: Conformance
  url: conformance/trojai-conformance.yml
- type: DomainSecurity
  url: security/trojai-domain-security.yml
- type: VulnerabilityDisclosure
  url: security/trojai-vulnerability-disclosure.yml
x-enrichment:
  date: '2026-07-21'
  status: enriched
  artifacts_added: 10
  pass: local-v1

Work with this as data

Every provider here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for providers

9 MCP tools reach this
  • find_providersBrowse and filter every provider in the catalog.
  • get_provider_artifactsEvery artifact this provider publishes, grouped by type.
  • get_provider_operationsEvery operation across all of their OpenAPIs — one call instead of parsing every spec.
  • get_provider_toolsEvery MCP tool they ship, with the operation each wraps.
  • get_provider_evidenceHow each part of their score was established. Free — the basis for a claim should not sit behind it.
  • get_provider_ratingPRO — composite, band, trend and facet scores.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This provider
curl "https://apis.io/api/v1/providers/trojai"
All providers
curl "https://apis.io/api/v1/providers?limit=25"
Every operation they expose
curl "https://apis.io/api/v1/providers/trojai/operations?limit=25"
How their score was established
curl "https://apis.io/api/v1/providers/trojai/evidence"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.