University of Macau
The University of Macau (UM), founded in 1981, is the public comprehensive research university of the Macao Special Administrative Region, teaching mainly in English with a largely international faculty and a residential-college undergraduate model. Its programmable footprint is real but narrow, and it is almost entirely campus operations rather than research output. The Information and Communication Technology Office (ICTO) operates a Data and Open Data API Platform at data.um.edu.mo whose gateway, api.data.um.edu.mo, serves sixteen JSON APIs across nineteen operations: organizational units and public holidays, the course catalog and per-semester course offerings, car park availability, computer room PC status and reservations, shuttle bus arrival times, sports facilities and their bookings, door access control records, outdoor WiFi access logs, university news and events, residential college hostel bed spaces and student job vacancies. The platform documents pagination, filtering, sorting and a full response-code table with remediation guidance — better documentation discipline than most universities manage. It publishes no OpenAPI, however, and it is not callable by the public: every API requires a subscription key issued only to holders of a UMPASS account, which means UM staff and students. Two further institution-run surfaces are machine-readable and were missed by earlier profiling: UM's own AD FS identity provider at websso.um.edu.mo publishes signed SAML 2.0 metadata and an OpenID Connect discovery document, and its Moodle deployment publishes a live LTI 1.3 Advantage platform key set. Everything else that looks like a UM API belongs to somebody else — library discovery is an Ex Libris Primo VE tenancy, the UM Scholars Hub repository runs third-party institutional-repository software behind an IP allowlist with no OAI-PMH, and the university's GenAI chat is an Open WebUI deployment with API keys switched off. UM registers DOIs as a Crossref member and is identified in ROR; it holds no DataCite account.
University of Macau publishes 1 API on the APIs.io network: UM Data and Open Data API Platform. Tagged areas include University, Higher Education, Education, Public Research University, and Macau.
The University of Macau catalog on APIs.io includes 1 JSON-LD context and 1 Spectral governance ruleset.
University of Macau’s developer surface includes documentation, API reference, authentication, signup flow, support, and 21 more developer resources.
1 APIs
Individual APIs this provider publishes, each with its own machine-readable definition.
Published pricing tiers and plan structures.
Documented rate limits and quota policies.
Cost, billing, and metering signals for API financial operations.
JSON-LD contexts and semantic vocabularies used across these APIs.
Spectral governance rulesets for linting and validating these APIs.
Standalone JSON Schema definitions for this provider's data models.
Authentication, domain security, vulnerability disclosure, and trust-center signals.
aid: university-of-macau
name: University of Macau
x-type: university
x-category: Public Research University
description: 'The University of Macau (UM), founded in 1981, is the public comprehensive research university of the Macao
Special Administrative Region, teaching mainly in English with a largely international faculty and a residential-college
undergraduate model. Its programmable footprint is real but narrow, and it is almost entirely campus operations rather than
research output. The Information and Communication Technology Office (ICTO) operates a Data and Open Data API Platform at
data.um.edu.mo whose gateway, api.data.um.edu.mo, serves sixteen JSON APIs across nineteen operations: organizational units
and public holidays, the course catalog and per-semester course offerings, car park availability, computer room PC status
and reservations, shuttle bus arrival times, sports facilities and their bookings, door access control records, outdoor
WiFi access logs, university news and events, residential college hostel bed spaces and student job vacancies. The platform
documents pagination, filtering, sorting and a full response-code table with remediation guidance — better documentation
discipline than most universities manage. It publishes no OpenAPI, however, and it is not callable by the public: every
API requires a subscription key issued only to holders of a UMPASS account, which means UM staff and students. Two further
institution-run surfaces are machine-readable and were missed by earlier profiling: UM''s own AD FS identity provider at
websso.um.edu.mo publishes signed SAML 2.0 metadata and an OpenID Connect discovery document, and its Moodle deployment
publishes a live LTI 1.3 Advantage platform key set. Everything else that looks like a UM API belongs to somebody else —
library discovery is an Ex Libris Primo VE tenancy, the UM Scholars Hub repository runs third-party institutional-repository
software behind an IP allowlist with no OAI-PMH, and the university''s GenAI chat is an Open WebUI deployment with API keys
switched off. UM registers DOIs as a Crossref member and is identified in ROR; it holds no DataCite account.'
type: Index
deliveryModel:
model: saas
open_source: false
commercial: false
callable_host: true
label: Hosted service · you call their endpoint
confidence: high
source:
- probed
generated: '2026-09-01'
method: probed
accessModel:
pricing: free
onboarding: institutional-affiliation
trial: false
try_now: false
public: false
label: Free, but closed to the public — a UMPASS account is required for a key
confidence: high
source:
- https://data.um.edu.mo/quickstart
generated: '2026-09-01'
method: probed
position: Consuming
access: 3rd-Party
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/university-of-macau.png
url: https://raw.githubusercontent.com/api-evangelist/university-of-macau/refs/heads/main/apis.yml
tags:
- University
- Higher Education
- Education
- Public Research University
- Macau
- China
- Open Data
- Course Catalog
- Campus Life
- Identity Federation
- Research Repository
- Library
created: '2026-06-03'
modified: '2026-09-01'
specificationVersion: '0.23'
apis:
- aid: university-of-macau:open-data-api
name: UM Data and Open Data API Platform
x-operator: institution
x-operator-evidence: 'All sixteen APIs are served from api.data.um.edu.mo, a host under the University of Macau''s own registrable
domain, and every data set is UM''s own campus data. The delivery platform is Azure API Management (the 401 challenge
is WWW-Authenticate: AzureApiManagementKey), but Microsoft operates no part of the data or the API design; the copyright
line on every page of the portal is "Information and Communication Technology Office (ICTO), University of Macau".'
description: 'Sixteen JSON APIs, nineteen operations, all GET, covering About UM (organizational units in Chinese, English
and Portuguese; public holidays), Academic (course catalog and per-semester course offerings addressable as {course}-{year}-{sem}
and down to a section code), Facilities (car park availability, computer room PC status and reservations, shuttle bus
arrival times, sports facilities and bookings, door access control records with hashed cardholder ids, outdoor WiFi access
logs), Media (news and events) and Student (residential college hostel bed spaces, student job vacancies). Collection
operations share one documented convention: page, pagesize (max 100), count and sort_by, with records wrapped in _embedded
alongside _returned, _size and _total_pages. Authentication is an Azure API Management subscription key in the Authorization
header, obtained by subscribing to the single published product, "UM Members", after registering the service through UMPASS.
There is no OAuth flow and no scope model. The API is documented publicly and callable only by the university''s own members.'
humanURL: https://data.um.edu.mo/
baseURL: https://api.data.um.edu.mo
tags:
- Open Data
- Course Catalog
- Campus Life
- Education
- Macau
properties:
- type: OpenAPI
url: openapi/university-of-macau-open-data-api-openapi.yml
- type: JSONSchema
url: json-schema/university-of-macau-open-data-schemas.json
- type: Examples
url: examples/university-of-macau-open-data-examples.yml
- type: Authentication
url: authentication/university-of-macau-authentication.yml
- type: ErrorCatalog
url: errors/university-of-macau-problem-types.yml
- type: Lifecycle
url: lifecycle/university-of-macau-lifecycle.yml
- type: Conformance
url: conformance/university-of-macau-conformance.yml
- type: Vocabulary
url: vocabulary/university-of-macau-vocabulary.yml
- type: Rules
url: rules/university-of-macau-openapi-spectral-rules.yml
- type: Documentation
url: https://data.um.edu.mo/api-documents/api-operations
- type: Documentation
url: https://data.um.edu.mo/documentation/api-call-examples
- type: DataModel
url: https://data.um.edu.mo/data-dictionary
- type: APIReference
url: https://data.um.edu.mo/dataset
- type: GettingStarted
url: https://data.um.edu.mo/quickstart
- type: SignUp
url: https://data.um.edu.mo/quickstart
- type: TermsOfService
url: https://data.um.edu.mo/terms-and-conditions-of-use
- type: Support
url: https://data.um.edu.mo/contact-us
- aid: university-of-macau:websso-idp
name: UM Web SSO — institutional SAML 2.0 / OpenID Connect identity provider
x-operator: institution
x-operator-evidence: websso.um.edu.mo is under the university's own registrable domain and publishes a signed EntityDescriptor
with entityID http://websso.um.edu.mo/adfs/services/trust. The realm lookup for um.edu.mo returns NameSpaceType "Federated",
AuthURL https://websso.um.edu.mo/adfs/ls/ and FederationBrandName "University of Macau".
description: UMPASS, the university's single sign-on, is served by UM's own AD FS farm. It publishes federation metadata
as application/samlmetadata+xml — 71 KB, signed, carrying both an IDPSSODescriptor and an SPSSODescriptor, SAML 2.0 protocol
support, SingleSignOnService over HTTP-POST and HTTP-Redirect, four SingleLogoutService endpoints and 128 declared claim
types — and an OpenID Connect discovery document at /adfs/.well-known/openid-configuration. This is the university's strongest
institution-operated machine-readable surface and the one class the June 2026 cohort profiling missed entirely. Macao
has no national research-and-education identity federation, so there is no eduGAIN or InCommon aggregate entry to point
at; the metadata is published directly by the institution.
humanURL: https://websso.um.edu.mo/adfs/ls/IdpInitiatedSignon.aspx
tags:
- Identity Federation
- SAML
- OpenID Connect
- Education
properties:
- type: IdentityFederation
url: https://websso.um.edu.mo/FederationMetadata/2007-06/FederationMetadata.xml
- type: OpenIDConfiguration
url: https://websso.um.edu.mo/adfs/.well-known/openid-configuration
- type: Authentication
url: authentication/university-of-macau-authentication.yml
- aid: university-of-macau:entra-federation
name: Microsoft Entra ID tenant federation for um.edu.mo
x-operator: federation
x-operator-evidence: https://login.microsoftonline.com/um.edu.mo/v2.0/.well-known/openid-configuration returns 200 with
issuer https://login.microsoftonline.com/76eeec46-fe40-4e1b-ab42-1d6d9f91b8a9/v2.0 — UM's own tenant on a broker every
Microsoft customer shares.
description: The identity broker in front of UM's own IdP. Sign-in to data.um.edu.mo, UMMoodle and the GenAI chat starts
at a Microsoft sign-in page and is redirected to websso.um.edu.mo, so the Entra tenant is a genuine institutional fact
— the tenant is UM's — while the discovery documents and the federation metadata endpoint belong to Microsoft and are
shared by every tenant. Recorded as a relationship, not as a contract.
humanURL: https://login.microsoftonline.com/um.edu.mo/v2.0/.well-known/openid-configuration
tags:
- Identity Federation
- OpenID Connect
- Education
properties:
- type: OpenIDConfiguration
url: https://login.microsoftonline.com/um.edu.mo/v2.0/.well-known/openid-configuration
- aid: university-of-macau:ummoodle-lti
name: UMMoodle — LTI 1.3 Advantage platform
x-operator: tenant
x-operator-evidence: ummoodle.um.edu.mo is UM's host and UM's deployment, but the LTI implementation, the token endpoint
and the web-services API are Moodle's product surface, not the university's engineering. Recorded as a tenant relationship
rather than credited to UM as a contract.
description: The University of Macau's Moodle learning management system publishes a live LTI 1.3 Advantage platform key
set at /mod/lti/certs.php (200, application/json, RSA RS256 signing key), an OAuth 2.0 client-credentials token endpoint
at /mod/lti/token.php and the OIDC initiation endpoint at /mod/lti/auth.php. A Moodle Web Services REST endpoint is live
at /webservice/rest/server.php and answers an unauthenticated call with the Moodle invalidtoken exception, so it is deployed
but token-gated. This is UM's only conformance with a named education-sector interoperability standard, and it arrives
through the LMS.
humanURL: https://ummoodle.um.edu.mo/
tags:
- Learning Management
- LTI
- Education
properties:
- type: JWKS
url: https://ummoodle.um.edu.mo/mod/lti/certs.php
- type: Conformance
url: conformance/university-of-macau-conformance.yml
- type: Documentation
url: https://elearning.um.edu.mo/
- aid: university-of-macau:primo-discovery
name: UM Library discovery — Ex Libris Primo VE tenancy
x-operator: tenant
x-operator-evidence: Discovery runs on umlibrary.primo.exlibrisgroup.com — Ex Libris's host, not UM's — under the institution-specific
view identifier vid=853UOM_INST:umlibrary. The tenancy is UM's; the platform and any API contract are Ex Libris's.
description: The University of Macau Library's catalog and discovery layer is an Ex Libris Primo VE tenancy. UM's institution
code is 853UOM_INST and its view is umlibrary. No UM-operated library API exists; any Primo or Alma API belongs in Ex
Libris's own profile and is deliberately not saved here. Recorded so the relationship survives without crediting the university
for a vendor's contract.
humanURL: https://umlibrary.primo.exlibrisgroup.com/discovery/search?vid=853UOM_INST:umlibrary
tags:
- Library
- Discovery
- Education
properties:
- type: LibraryCatalog
url: https://umlibrary.primo.exlibrisgroup.com/discovery/search?vid=853UOM_INST:umlibrary
- type: Documentation
url: https://library.um.edu.mo/lib_homepage_en
- aid: university-of-macau:scholars-hub
name: UM Scholars Hub — institutional repository
x-operator: tenant
x-operator-evidence: 'repository.um.edu.mo is UM''s host, but the software is a third-party institutional-repository product:
its robots.txt still carries the vendor''s untranslated Chinese template comment referencing ir.las.ac.cn. The deployment
and the content are UM''s; the contract is not.'
description: '澳門大學學者庫, the University of Macau''s institutional repository and scholar profile system, indexing faculties
and institutes, scholars, publications and subjects. It is not harvestable: /oai and /oai/request both return 404, /api/core/sites
answers "Your IP is not allowed to access or harvest this resources!", and sign-in is via UMPASS. For a research university
this is the notable absence — no OAI-PMH provider exists on any um.edu.mo host, so UM''s research output is not machine-readable
from the institution''s own infrastructure.'
humanURL: https://repository.um.edu.mo/
tags:
- Research Repository
- Research Data
- Education
properties:
- type: ResearchRepository
url: https://repository.um.edu.mo/
- aid: university-of-macau:genai-chat
name: UM GENAI Chat — Open WebUI deployment
x-operator: tenant
x-operator-evidence: chat.genai.um.edu.mo is UM's host and UM's deployment, and /api/config identifies the software as "GENAI
Chat (Open WebUI)" version 0.9.2. The contract is Open WebUI's; the deployment, the model access and the policy around
it are UM's.
description: The university's own generative-AI chat service for staff and students, an Open WebUI deployment authenticated
by OIDC against UMPASS, with self-signup and the local login form disabled. Its unauthenticated /api/config and /health
endpoints are readable; everything else returns "Not authenticated". Notably, enable_api_keys is false — there is no programmatic
access to this surface at all, by deliberate configuration. UM publishes accompanying Guidelines on the Use of Generative
Artificial Intelligence Tools at genai.um.edu.mo, which name Azure OpenAI as the backing service.
humanURL: https://chat.genai.um.edu.mo/
tags:
- AI
- Generative AI
- Education
properties:
- type: AITooling
url: https://chat.genai.um.edu.mo/
- type: AIPolicy
url: https://genai.um.edu.mo/
- aid: university-of-macau:crossref-member
name: Crossref membership — University of Macau
x-operator: registry
x-operator-evidence: https://api.crossref.org/members/53643 returns primary-name "University of Macau", location "Taipa,
Macau, China". Crossref's API is shared by every member; the membership is UM's.
description: The University of Macau is Crossref member 53643, with DOI prefix 10.64219 and 21 DOIs registered as of 2026-09-01.
This is a fact about the institution and one of the education regime's named standards; Crossref's own contract belongs
in Crossref's profile, never here.
humanURL: https://api.crossref.org/members/53643
tags:
- Identifiers
- DOI
- Research Data
- Education
properties:
- type: RegistryMembership
url: https://api.crossref.org/members/53643
- aid: university-of-macau:ror
name: ROR identifier — University of Macau
x-operator: registry
x-operator-evidence: https://ror.org/01r4q9n85 resolves to the University of Macau, with GRID grid.437123.0 and website
https://www.um.edu.mo. ROR is a shared registry; the record is UM's.
description: Research Organization Registry identifier for the University of Macau, carrying its English, Portuguese and
historical names (Universidade de Macau, University of East Asia) and its cross-references to GRID, ISNI, Wikidata and
Crossref Funder Registry.
humanURL: https://ror.org/01r4q9n85
tags:
- Identifiers
- Research Data
- Education
properties:
- type: RegistryMembership
url: https://ror.org/01r4q9n85
common:
- type: Website
url: https://www.um.edu.mo/
- type: DeveloperPortal
url: https://data.um.edu.mo/
- type: OpenData
url: https://data.um.edu.mo/dataset
- type: Documentation
url: https://data.um.edu.mo/api-documents/api-operations
- type: APIReference
url: https://data.um.edu.mo/data-dictionary
- type: OpenAPI
url: openapi/university-of-macau-open-data-api-openapi.yml
- type: CourseCatalog
url: https://data.um.edu.mo/data-dictionary
- type: IdentityFederation
url: https://websso.um.edu.mo/FederationMetadata/2007-06/FederationMetadata.xml
- type: ResearchRepository
url: https://repository.um.edu.mo/
- type: LibraryCatalog
url: https://umlibrary.primo.exlibrisgroup.com/discovery/search?vid=853UOM_INST:umlibrary
- type: AIPolicy
url: https://genai.um.edu.mo/
- type: AITooling
url: https://chat.genai.um.edu.mo/
- type: Authentication
url: authentication/university-of-macau-authentication.yml
- type: Conformance
url: conformance/university-of-macau-conformance.yml
- type: ErrorCatalog
url: errors/university-of-macau-problem-types.yml
- type: Lifecycle
url: lifecycle/university-of-macau-lifecycle.yml
- type: SignUp
url: https://data.um.edu.mo/quickstart
- type: TermsOfService
url: https://data.um.edu.mo/terms-and-conditions-of-use
- type: PrivacyPolicy
url: https://www.um.edu.mo/privacy-policy/
- type: Support
url: https://data.um.edu.mo/contact-us
- type: LinkedIn
url: https://www.linkedin.com/school/universityofmacau/
- type: DomainSecurity
url: security/university-of-macau-domain-security.yml
- type: Plans
url: plans/university-of-macau-plans-pricing.yml
- type: RateLimits
url: rate-limits/university-of-macau-rate-limits.yml
- type: FinOps
url: finops/university-of-macau-finops.yml
- type: Review
url: review.yml
x-coverage:
state: gated
reason: auth_required
generated: '2026-09-01'
detail: 'The University of Macau operates a genuine institution-owned API platform and documents it unusually well, but
no part of it can be called without a UMPASS account, which is issued only to UM staff and students. Every one of the
sixteen APIs on api.data.um.edu.mo answers an unauthenticated request with 401 and an Azure API Management key challenge;
the single published product, "UM Members", cannot be subscribed to from outside the institution. The surface itself is
fully readable — the developer portal''s own backend at /developer/apis?api-version=2022-04-01-preview is anonymously
readable and yielded the complete API list, every operation, and every documented query parameter, which is how the OpenAPI
in this repository was reconstructed — so this is coverage limited by credentials, not by obscurity. UM publishes no OpenAPI
of its own (the portal''s export returns paths: {}), no llms.txt, no apis.json, no /.well-known/api-catalog and no security.txt.
Two further institution-operated machine-readable surfaces are fully open and are recorded here: the SAML 2.0 federation
metadata and OIDC discovery for UM''s own AD FS identity provider, and the LTI 1.3 key set on UMMoodle. What UM does not
have is a research-output surface — no OAI-PMH provider exists on any um.edu.mo host, the institutional repository blocks
harvesting by IP, and there is no DataCite account. No official University of Macau GitHub organization exists; github.com/university-of-macau
and github.com/umacau are both empty registrations with zero public repositories and no profile, and neither is claimed
here.'
evidence:
- url: https://api.data.um.edu.mo/service/media/events/all
status: 401
- url: https://data.um.edu.mo/developer/apis?api-version=2022-04-01-preview
status: 200
- url: https://data.um.edu.mo/
status: 200
- url: https://data.um.edu.mo/api-documents/api-operations
status: 200
- url: https://data.um.edu.mo/quickstart
status: 200
- url: https://data.um.edu.mo/dataset
status: 200
- url: https://data.um.edu.mo/data-dictionary
status: 200
- url: https://websso.um.edu.mo/FederationMetadata/2007-06/FederationMetadata.xml
status: 200
- url: https://websso.um.edu.mo/adfs/.well-known/openid-configuration
status: 200
- url: https://login.microsoftonline.com/um.edu.mo/v2.0/.well-known/openid-configuration
status: 200
- url: https://ummoodle.um.edu.mo/mod/lti/certs.php
status: 200
- url: https://repository.um.edu.mo/oai?verb=Identify
status: 404
- url: https://repository.um.edu.mo/api/core/sites
status: 200
note: 200 body reads "Your IP is not allowed to access or harvest this resources!"
- url: https://umlibrary.primo.exlibrisgroup.com/discovery/search?vid=853UOM_INST:umlibrary
status: 200
- url: https://chat.genai.um.edu.mo/api/config
status: 200
- url: https://genai.um.edu.mo/
status: 200
- url: https://api.crossref.org/members/53643
status: 200
- url: https://ror.org/01r4q9n85
status: 200
- url: https://api.datacite.org/clients?query=Macau
status: 200
note: empty data array — no DataCite account
- url: https://data.um.edu.mo/llms.txt
status: 404
- url: https://data.um.edu.mo/.well-known/api-catalog
status: 404
- url: https://www.um.edu.mo/.well-known/security.txt
status: 404
maintainers:
- FN: Kin Lane
email: kin@apievangelist.com
Every provider here is available over the APIs.io API and to AI agents over MCP.
Kin Score
How this is scored →