# Truecaller

**Canonical:** https://apis.io/providers/truecaller/  
**Website:** https://www.truecaller.com  
**APIs profiled:** 4

Truecaller is the Stockholm-based caller identification and spam-blocking platform (atomico and balderton-capital portfolio) used by hundreds of millions of people to know who is calling. For developers it publishes the Truecaller SDK for Android, iOS, mobile web, Flutter, React Native and Shopify - one-tap phone-number verification built on OAuth 2.0 with PKCE (authorization code + refresh token, OIDC-style userinfo) plus a drop-call / IM-OTP flow for non-Truecaller users. Truecaller for Business adds REST APIs on enterprise-portal-noneu.truecaller.com for verified business caller ID: call personalisation (dynamic caller ID), number management, verified campaigns, and Call Me Back / User Feedback webhooks.

## Kin Score — 48.6 / 100 (developing)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+0.0 from 48.6).

| Facet | Score |
|---|---|
| Discoverability | 92.6 |
| Contract Quality | 45.1 |
| Governance | 18.2 |
| Contract Governance | 18.2 |
| Operational Transparency | 47.4 |
| Developer Ergonomics | 64.3 |
| Commercial Clarity | 34.2 |
| Access Clarity | 34.2 |

## Agent readiness — 35.0 (agent-ready)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | documented |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | yes |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | yes |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Self-serve signup — onboarding: self-serve, pricing: unknown, trial: no (confidence: medium).

## APIs (4)

- **Truecaller OAuth User Verification API** — The backend half of the Truecaller OAuth SDK flow. After the mobile SDK returns an authorization code, partners exchange it at POST /v1/token (authorization_code grant with PKCE...
- **Truecaller Non-Truecaller User Verification API** — Server-side validation for the drop-call / IM-OTP verification flow that covers users without the Truecaller app. GET /v1/otp/client/installation/phoneNumberDetail/{accessToken}...
- **Truecaller Web SDK Profile API** — Profile retrieval for the mobile-web (deep link) verification flow. After a user consents in the Truecaller app, Truecaller POSTs the accessToken and requestId to the partner's ...
- **Truecaller for Business API** — REST APIs for Truecaller's Verified Business Caller ID platform. Partners exchange a Key ID + Secret API Key for a 60-minute bearer token (POST /clients/{clientAccountId}/token)...

## Security (3)

- **Truecaller Authentication** — oauth2/http bearer/apiKey · 5 schemes
- **Truecaller Domain Security** — TLSv1.3 · HSTS · DMARC
- **Truecaller Vulnerability Disclosure** — Hackerone · security.txt · contact published

## Tags

Company, Consumer, Caller ID, Phone Verification, Identity, Authentication, Spam Detection, Communications, Mobile SDK

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/truecaller/). Scores are computed from the provider's own public artifacts under a published rubric.