The University of Sydney is Australia's first university, founded in 1850, a Group of Eight member and ranked in the QS world top 40. Its programmable footprint is small, and most of what looks like a University of Sydney API is a vendor's contract running under the university's name. Re-profiled on 2026-08-19 with operator attribution settled first, the institution operates no public developer portal, publishes no OpenAPI, and offers no self-service developer credential. The only openly machine-readable artifact served under a University of Sydney hostname is SAML 2.0 federation metadata at federation.sydney.edu.au — and even that is a tenant surface, because the host CNAMEs to the Australian Access Federation's hosted Rapid IdP. The entity, scope and signing key are the university's; the infrastructure is AAF's. Beyond that it operates the Sydney eScholarship institutional repository (a DataCite repository client with 2,146 DOIs, whose documented OAI-PMH endpoint is currently behind Cloudflare bot management), the CUSP course and unit-of-study catalog as HTML only, the myUni student portal on session-gated internal JSON endpoints, and a MuleSoft Anypoint API gateway at api.sydney.edu.au whose production load balancer resolves in DNS but refuses connections from the public internet. Its library discovery, learning management and identity brokering all run on vendor platforms — Ex Libris Primo/Alma, Instructure Canvas and Okta — where the data is the university's and the contract is not. An earlier profile of this cohort risked attributing a Figshare repository here; sydney.figshare.com was checked and is not the University of Sydney's, and no Figshare contract has been saved under this slug.
University of Sydney publishes 7 APIs on the APIs.io network. Tagged areas include University, Higher Education, Education, Australia, and Group of Eight.
The University of Sydney catalog on APIs.io includes 2 JSON-LD contexts.
University of Sydney’s developer surface includes engineering blog, product news, support, authentication, and 22 more developer resources.
Regulatory Posture applies to this provider. Its tags matched the
Education & Research regime, so
Regulatory Posture carries 15 points of the composite.
If this regime is wrong for your business, say so on your
provider repo — the
applicability map is public and we will correct it.
The six quality facets above are damped to 85 points between them,
because the conditional facet above carries the other
15. That is why each facet's contribution is shown against a damped
maximum: raising a quality facet moves the composite by 85% of its nominal
weight, not 100%. The full arithmetic is at apis.io/rating/.
The University of Sydney's federation entity serves signed SAML 2.0 metadata from federation.sydney.edu.au: entityID https://federation.sydney.edu.au/idp/shibboleth, an IDPSSODe...
Sydney eScholarship is the university's own institutional repository, running on the university-owned usyd.edu.au domain (usyd.edu.au redirects to www.sydney.edu.au). It is a re...
CUSP is the University of Sydney's own course and unit-of-study catalog, served from cusp.sydney.edu.au behind Cloudflare and cross-linked from the sydney.edu.au course and unit...
The myUni student portal runs on the university's own domain, served through CloudFront, and is backed by internal JSON endpoints consumed by the authenticated student single-pa...
api.sydney.edu.au resolves in DNS to usyd-lb-p.lb.anypointdns.net — a MuleSoft Anypoint Platform dedicated load balancer named for the University of Sydney production environmen...
The University of Sydney Library runs on the Ex Libris Alma library services platform with the Primo VE discovery layer, on the institution-specific tenant sydney.primo.exlibris...
canvas.sydney.edu.au is a vanity hostname on the university's own domain that CNAMEs to sydney-vanity.instructure.com, and it redirects unauthenticated visitors into the univers...
aid: university-of-sydney
name: University of Sydney
x-type: university
x-category: Public Research University
description: The University of Sydney is Australia's first university, founded in 1850, a Group of Eight member and ranked
in the QS world top 40. Its programmable footprint is small, and most of what looks like a University of Sydney API is a
vendor's contract running under the university's name. Re-profiled on 2026-08-19 with operator attribution settled first,
the institution operates no public developer portal, publishes no OpenAPI, and offers no self-service developer credential.
The only openly machine-readable artifact served under a University of Sydney hostname is SAML 2.0 federation metadata at
federation.sydney.edu.au — and even that is a tenant surface, because the host CNAMEs to the Australian Access Federation's
hosted Rapid IdP. The entity, scope and signing key are the university's; the infrastructure is AAF's. Beyond that it operates
the Sydney eScholarship institutional repository (a DataCite repository client with 2,146 DOIs, whose documented OAI-PMH
endpoint is currently behind Cloudflare bot management), the CUSP course and unit-of-study catalog as HTML only, the myUni
student portal on session-gated internal JSON endpoints, and a MuleSoft Anypoint API gateway at api.sydney.edu.au whose
production load balancer resolves in DNS but refuses connections from the public internet. Its library discovery, learning
management and identity brokering all run on vendor platforms — Ex Libris Primo/Alma, Instructure Canvas and Okta — where
the data is the university's and the contract is not. An earlier profile of this cohort risked attributing a Figshare repository
here; sydney.figshare.com was checked and is not the University of Sydney's, and no Figshare contract has been saved under
this slug.
type: Index
accessModel:
pricing: free
onboarding: none
trial: false
try_now: false
public: false
label: Free
confidence: high
source:
- plans
- probed
generated: '2026-08-19'
method: probed
position: Consumer
access: 3rd-Party
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/university-of-sydney.png
url: https://raw.githubusercontent.com/api-evangelist/university-of-sydney/refs/heads/main/apis.yml
tags:
- University
- Higher Education
- Education
- Australia
- Group of Eight
- Research
- Identity Federation
- Research Repository
- Course Catalog
- Library
created: '2026-06-03'
modified: '2026-08-19'
specificationVersion: '0.23'
apis:
- aid: university-of-sydney:identity-federation
name: Shibboleth Identity Provider (SAML 2.0 metadata)
x-operator: tenant
x-vendor: Australian Access Federation (Rapid IdP)
x-surface-class: IdentityFederation
description: 'The University of Sydney''s federation entity serves signed SAML 2.0 metadata from federation.sydney.edu.au:
entityID https://federation.sydney.edu.au/idp/shibboleth, an IDPSSODescriptor advertising urn:oasis:names:tc:SAML:2.0:protocol,
the Shibboleth metadata extension shibmd:Scope=sydney.edu.au, an idp-signing.crt key the institution issued itself in
2018, and Redirect, POST and POST-SimpleSign SingleSignOnService bindings. The entity appears in the Australian Access
Federation aggregate as "The University of Sydney" and in the eduGAIN interfederation aggregate. Operator is TENANT, not
institution, and the DNS says so: federation.sydney.edu.au CNAMEs to d007b274d34f1a4319cafeaf6941cfa7.idp-cname.aaf.edu.au
and answers from CloudFront + an AWS ALB running Jetty 12.1.0 under an Amazon-issued certificate — the AAF Rapid IdP hosted
identity service, not university-run infrastructure. The federation membership, the entityID, the scope and the signing
key are the university''s; the running software is AAF''s. This is still the only openly machine-readable artifact served
under a University of Sydney hostname, and it is not consumable by third-party developers — relying parties must be registered
service providers in AAF or eduGAIN.'
humanURL: https://federation.sydney.edu.au/idp/shibboleth
baseURL: https://federation.sydney.edu.au/idp/
tags:
- Identity Federation
- SAML
- Shibboleth
- eduGAIN
- AAF
- Rapid IdP
- Tenant
- Authentication
properties:
- type: Authentication
url: authentication/university-of-sydney-authentication.yml
- type: Conformance
url: conformance/university-of-sydney-education-standards.yml
- aid: university-of-sydney:escholarship-repository
name: Sydney eScholarship Repository (institutional repository, OAI-PMH)
x-operator: institution
x-surface-class: ResearchRepository
description: Sydney eScholarship is the university's own institutional repository, running on the university-owned usyd.edu.au
domain (usyd.edu.au redirects to www.sydney.edu.au). It is a registered DataCite repository client — ARDCX.USYD, "Sydney
eScholarship", registered 2020, 2,146 DOIs minted, administered from @sydney.edu.au addresses — which settles the operator
question as the institution rather than a vendor. It documents a standard OAI-PMH 2.0 harvesting interface at /oai/request,
but on 2026-08-19 that endpoint and every other path on the host returned HTTP 403 behind Cloudflare bot management to
default, browser and XML-accepting clients alike; robots.txt on the same host returned 200 and permits /handle/2123/ with
a 30-second crawl delay, so the host is live and bot-blocked, not dead. OAI-PMH conformance is therefore recorded as claimed
and unverified.
humanURL: https://ses.library.usyd.edu.au/
baseURL: https://ses.library.usyd.edu.au/oai/request
tags:
- Research Repository
- OAI-PMH
- DataCite
- DSpace
- Open Access
- Metadata
- Bot-Blocked
properties:
- type: Documentation
url: https://www.library.sydney.edu.au/support/publishing/publishing-research-data
- type: Conformance
url: conformance/university-of-sydney-education-standards.yml
- type: Registry
url: https://api.datacite.org/clients/ardcx.usyd
- aid: university-of-sydney:cusp-course-catalog
name: CUSP — Course & Unit of Study Portal
x-operator: institution
x-surface-class: CourseCatalog
description: CUSP is the University of Sydney's own course and unit-of-study catalog, served from cusp.sydney.edu.au behind
Cloudflare and cross-linked from the sydney.edu.au course and unit finders. It is the registrar-facing surface a course-catalog
API would normally sit on, and it is institution-operated — but it is HTML only. No JSON, XML or feed representation was
found; the sydney.edu.au course search that fronts it is powered by a hosted Coveo index, not by a published university
endpoint. Recorded as an institution surface with no machine-readable contract.
humanURL: https://cusp.sydney.edu.au/
tags:
- Course Catalog
- Registrar
- Curriculum
- HTML Only
- Students
- aid: university-of-sydney:myuni
name: myUni Student Portal (session-gated internal APIs)
x-operator: institution
x-surface-class: StudentPortal
description: The myUni student portal runs on the university's own domain, served through CloudFront, and is backed by internal
JSON endpoints consumed by the authenticated student single-page application. Those endpoints require an established student
session, are not documented, and are not available to third-party developers. Institution-operated, entirely gated.
humanURL: https://myuni.sydney.edu.au/
tags:
- Students
- SIS
- Gated
- Authentication
- Portal
tags_raw:
- Student
- SIS
- Gated
- Authentication
- Portal
properties:
- type: Authentication
url: authentication/university-of-sydney-authentication.yml
- aid: university-of-sydney:anypoint-gateway
name: api.sydney.edu.au — MuleSoft Anypoint gateway (not publicly reachable)
x-operator: institution
x-access: network-restricted
x-surface-class: APIGateway
description: 'api.sydney.edu.au resolves in DNS to usyd-lb-p.lb.anypointdns.net — a MuleSoft Anypoint Platform dedicated
load balancer named for the University of Sydney production environment — which is direct evidence that the institution
runs an API management program. It is not a public one: TCP 443 is filtered on both advertised addresses, and HTTP and
HTTPS requests time out rather than being refused. Recorded here as an institutional fact, not as a consumable surface.
No documentation, portal, contract or credential process for it was found on any institution host.'
tags:
- API Gateway
- MuleSoft
- Anypoint
- Internal
- Network Restricted
- aid: university-of-sydney:primo-alma
name: Library Discovery — Ex Libris Primo VE / Alma (tenant)
x-operator: tenant
x-vendor: Ex Libris
x-surface-class: LibraryCatalog
description: The University of Sydney Library runs on the Ex Libris Alma library services platform with the Primo VE discovery
layer, on the institution-specific tenant sydney.primo.exlibrisgroup.com (view id 61USYD_INST:sydney). The catalog data
is the university's; the API contract is Ex Libris's, published on the Ex Libris Developer Network and gated behind vendor-issued
institution API keys. Recorded as a tenant relationship. No Ex Libris specification has been saved under this slug — it
belongs to Ex Libris.
humanURL: https://sydney.primo.exlibrisgroup.com/
tags:
- Library
- Discovery
- Alma
- Primo
- Tenant
- Vendor Contract
properties:
- type: Documentation
url: https://developers.exlibrisgroup.com/
- aid: university-of-sydney:canvas-lms
name: Canvas LMS (tenant)
x-operator: tenant
x-vendor: Instructure
x-surface-class: LearningManagement
description: canvas.sydney.edu.au is a vanity hostname on the university's own domain that CNAMEs to sydney-vanity.instructure.com,
and it redirects unauthenticated visitors into the university's Okta tenant with a SAMLRequest. The learning-management
contract, including the Canvas LMS REST API and its LTI tool registration, is Instructure's. The vanity hostname does
not make it the university's engineering. Recorded as a tenant relationship; no Canvas specification has been saved under
this slug.
humanURL: https://canvas.sydney.edu.au/
tags:
- Learning Management
- Canvas
- LMS
- Tenant
- Vendor Contract
- LTI
common:
- type: Website
url: https://www.sydney.edu.au/
- type: Blog
url: https://educational-innovation.sydney.edu.au/teaching@sydney/
- type: News
url: https://www.sydney.edu.au/news-opinion/latest-news.html
- type: Support
url: https://www.sydney.edu.au/contact-us.html
- type: ServicePortal
url: https://sydneyuni.service-now.com/sm
- type: TermsOfService
url: https://www.sydney.edu.au/disclaimer.html
- type: PrivacyPolicy
url: https://www.sydney.edu.au/about-us/governance-and-structure/privacy-and-university-information/privacy-at-the-university/privacy-notices/website-privacy-collection-notice.html
- type: Governance
url: https://www.sydney.edu.au/about-us/governance-and-structure/university-policies.html
- type: GitHubOrganization
url: https://github.com/Sydney-Informatics-Hub
- type: LinkedIn
url: https://au.linkedin.com/school/university-of-sydney/
- type: IdentityFederation
url: https://federation.sydney.edu.au/idp/shibboleth
- type: ResearchRepository
url: https://ses.library.usyd.edu.au/
- type: LibraryCatalog
url: https://sydney.primo.exlibrisgroup.com/
- type: Library
url: https://www.library.sydney.edu.au/
- type: CourseCatalog
url: https://cusp.sydney.edu.au/
- type: ResearchComputing
url: https://www.sydney.edu.au/research/facilities/sydney-informatics-hub.html
- type: AIPolicy
url: https://www.sydney.edu.au/students/academic-integrity/artificial-intelligence.html
- type: AITooling
url: https://cogniti.ai/
- type: Authentication
url: authentication/university-of-sydney-authentication.yml
- type: Conformance
url: conformance/university-of-sydney-education-standards.yml
- type: JSONLD
url: json-ld/university-of-sydney-organization.jsonld
- type: DomainSecurity
url: security/university-of-sydney-domain-security.yml
- type: Plans
url: plans/university-of-sydney-plans-pricing.yml
- type: RateLimits
url: rate-limits/university-of-sydney-rate-limits.yml
- type: FinOps
url: finops/university-of-sydney-finops.yml
- type: Review
url: review.yml
x-coverage:
state: gated
reason: no_public_developer_program
detail: The University of Sydney operates real institutional surfaces but publishes none of them for third-party consumption.
The one machine-readable artifact it serves openly is SAML 2.0 identity-provider metadata, which is consumable only by
federation members. Its institutional repository documents an OAI-PMH interface on its own host but answers 403 to every
automated client behind Cloudflare bot management. Its course catalog is HTML only. Its student portal APIs require a
session. Its MuleSoft Anypoint production gateway resolves in DNS but filters TCP 443 from the public internet. Its library,
LMS and sign-in run on Ex Libris, Instructure and Okta tenants whose contracts belong to those vendors. No OpenAPI, no
developer portal, no credential self-service, no llms.txt and no security.txt were found — sydney.edu.au serves a soft-404
(HTTP 200 redirecting to /errors/404.html) for both well-known paths, so neither is credited. This is a correct thin profile,
not a failed harvest.
generated: '2026-08-19'
method: probed
evidence:
- url: https://federation.sydney.edu.au/idp/shibboleth
status: 200
note: Live SAML 2.0 / Shibboleth IdP metadata, application/xml, 4506 bytes. Hosted by AAF (CNAME to idp-cname.aaf.edu.au,
CloudFront + ALB + Jetty 12.1.0, Amazon-issued cert), so the operator is tenant even though the hostname is the institution's.
- url: https://md.aaf.edu.au/aaf-metadata.xml
status: 200
note: Australian Access Federation aggregate contains the Sydney IdP entity.
- url: https://mds.edugain.org/edugain-v2.xml
status: 200
note: eduGAIN interfederation aggregate contains federation.sydney.edu.au.
- url: https://ses.library.usyd.edu.au/oai/request?verb=Identify
status: 403
note: Cloudflare bot management; blocked to default UA, browser UA and XML Accept header alike.
- url: https://ses.library.usyd.edu.au/robots.txt
status: 200
note: Same host answers robots.txt — the repository is live, we are blocked from it.
- url: https://api.datacite.org/clients/ardcx.usyd
status: 200
note: DataCite client ARDCX.USYD "Sydney eScholarship", 2146 DOIs, @sydney.edu.au contacts.
- url: https://api.crossref.org/members/12184
status: 200
note: Crossref member "The University of Sydney Library", prefix 10.30722, 654 DOIs.
- url: https://cusp.sydney.edu.au/
status: 200
note: Institution course/unit catalog, HTML only; no JSON or feed representation found.
- url: https://myuni.sydney.edu.au/
status: 200
note: Student portal; backing JSON endpoints require an authenticated session.
- url: https://api.sydney.edu.au/
status: 0
note: DNS resolves to usyd-lb-p.lb.anypointdns.net (MuleSoft Anypoint production LB, 13.210.51.115 / 13.55.148.172); TCP
443 filtered, HTTP and HTTPS both time out.
- url: https://www.sydney.edu.au/llms.txt
status: 200
note: Soft-404 — 200 redirecting to /errors/404.html. No llms.txt. Not credited.
- url: https://www.sydney.edu.au/.well-known/security.txt
status: 200
note: Soft-404 — 200 redirecting to /errors/404.html. No security.txt. Not credited.
- url: https://www.sydney.edu.au/s/search.json?collection=Usyd&query=library
status: 502
note: Funnelback JSON output not exposed; only the HTML search page responds.
- url: https://sydney.figshare.com/
status: 202
note: AWS WAF challenge on a Figshare wildcard host. NOT the University of Sydney's repository — the Sydney-region Figshare
customer is UTS (uts.figshare.com). Rejected as vendor; no Figshare contract saved under this slug.
- url: https://data.sydney.edu.au/
status: 0
note: NXDOMAIN — no institutional open data portal.
- url: https://developer.sydney.edu.au/
status: 0
note: NXDOMAIN — no developer portal.
x-attribution:
audited: '2026-08-19'
method: probed
institutionDomains:
- sydney.edu.au
- usyd.edu.au
note: usyd.edu.au is a University of Sydney registrable domain — it 301s to www.sydney.edu.au — so ses.library.usyd.edu.au
resolves as institution-operated, not as the "unknown" the cohort audit reported when only sydney.edu.au was claimed.
rejected:
- host: sydney.figshare.com
verdict: vendor
reason: Figshare wildcard host, not a University of Sydney repository. The university directs researchers to Sydney eScholarship;
the Sydney-region Figshare customer is the University of Technology Sydney.
- host: api.figshare.com
verdict: vendor
reason: Generic Figshare host shared by every customer.
- host: developers.exlibrisgroup.com
verdict: vendor
reason: Ex Libris developer network. Referenced as documentation for the tenant relationship only; no Ex Libris contract
saved under this slug.
maintainers:
- FN: Kin Lane
email: kin@apievangelist.com
Kin Score
How this is scored →