# Very Good Security

**Canonical:** https://apis.io/providers/very-good-security/  
**Website:** https://docs.verygoodsecurity.com/  
**APIs profiled:** 1

Very Good Security (VGS) is a data security and payments infrastructure company that lets organizations operate on sensitive data — payment card numbers, bank accounts, PII, and other regulated information — without the cost or liability of storing it themselves. Its core Vault tokenization platform substitutes sensitive values with format-preserving aliases so customer systems never touch raw data, dramatically reducing PCI DSS, SOC 2, HIPAA, and GDPR compliance scope. VGS also offers Zero Data (a proxy that keeps the customer environment entirely out of PCI scope), a Card Management Platform (network tokens, account updater, 3D Secure), and VGS Control for compliance automation. The developer surface includes the Vault HTTP API for aliases/tokenization, VGS Collect and VGS Show client SDKs, a Terraform provider, and the vgs-cli command line tool. Founded in 2015, VGS is backed by a16z and stores over 5 billion tokens.

## Kin Score — 62.4 / 100 (strong)

Scored 2026-08-17 under rubric 0.11.0. Trend: flat (+0.0 from 62.4).

| Facet | Score |
|---|---|
| Discoverability | 87.0 |
| Contract Quality | 68.4 |
| Governance | 11.5 |
| Operational Transparency | 44.7 |
| Developer Ergonomics | 86.4 |
| Commercial Clarity | 60.5 |

Regulatory layer — **Payments**: 62.5 (matched via tags).

## Agent readiness — 49.3 (agent-ready)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | no |
| MCP Server | yes |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | documented |
| OpenAPI Examples | partial |
| Rate Limit Signal | no |
| Event Surface Described | yes |
| Agent Skills | derived |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Self-serve signup — onboarding: self-serve, pricing: unknown, trial: no (confidence: medium).

## APIs (1)

- **Very Good Security aliases API** — Unique IDs that retain all the essential information about the data without compromising its security.

## MCP servers (1)

- **very-good-security-mcp.yml**

## Security (3)

- **Very Good Security Authentication** — http/oauth2 · 2 schemes
- **Very Good Security Domain Security** — TLSv1.3 · HSTS · DMARC
- **Very Good Security Trust Center** — SOC 2, ISO 27001, PCI DSS, GDPR

## Tags

Company, Data Security, Tokenization, Payments, Vault, PCI Compliance, Data Privacy, Card Management, Network Tokens, Security

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/very-good-security/). Scores are computed from the provider's own public artifacts under a published rubric.