# watchTowr

**Canonical:** https://apis.io/providers/watchtowr/  
**Website:** https://watchtowr.com  
**APIs profiled:** 20

watchTowr is a Preemptive Exposure Management (PEM) and External Attack Surface Management (EASM) platform founded by hackers, combining continuous attack surface discovery, continuous automated red teaming, AI-powered Rapid Reaction to emerging CVEs, Active Defense autonomous mitigation, and watchTowr Intel proactive threat intelligence. The Platform Client API gives read and write access to discovered assets, findings, hunts, certificates and suspicious domains, with official Python and PowerShell SDKs and an official open-source MCP server (113 tools). Backed by Prosus Ventures.

## Kin Score — 37.8 / 100 (thin)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+1.2 from 36.6).

| Facet | Score |
|---|---|
| Discoverability | 92.6 |
| Contract Quality | 53.1 |
| Governance | 16.7 |
| Contract Governance | 16.7 |
| Operational Transparency | 13.2 |
| Developer Ergonomics | 47.0 |
| Commercial Clarity | 10.5 |
| Access Clarity | 10.5 |

## Agent readiness — 36.5 (agent-ready)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | verified |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | derived |
| Well Known Catalog | no |
| Consent Identity | yes |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Self-serve signup — onboarding: self-serve, pricing: unknown, trial: no (confidence: medium).

## APIs (20)

- **watchTowr Activity Log API** — The Activity Log API from watchTowr — 1 operation(s) for activity log.
- **watchTowr Assets API** — The Assets API from watchTowr — 1 operation(s) for assets.
- **watchTowr Business Unit API** — The Business Unit API from watchTowr — 2 operation(s) for business unit.
- **watchTowr Certificates API** — The Certificates API from watchTowr — 2 operation(s) for certificates.
- **watchTowr Cloud Storage API** — The Cloud Storage API from watchTowr — 3 operation(s) for cloud storage.
- **watchTowr Containers API** — The Containers API from watchTowr — 3 operation(s) for containers.
- **watchTowr Domains API** — The Domains API from watchTowr — 3 operation(s) for domains.
- **watchTowr Findings API** — The Findings API from watchTowr — 6 operation(s) for findings.
- **watchTowr Hunts API** — The Hunts API from watchTowr — 4 operation(s) for hunts.
- **watchTowr IP Addresses API** — The IP Addresses API from watchTowr — 5 operation(s) for ip addresses.
- **watchTowr IP Ranges API** — The IP Ranges API from watchTowr — 3 operation(s) for ip ranges.
- **watchTowr Mobile Applications API** — The Mobile Applications API from watchTowr — 3 operation(s) for mobile applications.
- **watchTowr Points of Interest API** — The Points of Interest API from watchTowr — 1 operation(s) for points of interest.
- **watchTowr Ports API** — The Ports API from watchTowr — 2 operation(s) for ports.
- **watchTowr SaaS Platforms API** — The SaaS Platforms API from watchTowr — 3 operation(s) for saas platforms.
- **watchTowr Service Listing API** — The Service Listing API from watchTowr — 1 operation(s) for service listing.
- **watchTowr Source Code Repositories API** — The Source Code Repositories API from watchTowr — 3 operation(s) for source code repositories.
- **watchTowr Subdomains API** — The Subdomains API from watchTowr — 3 operation(s) for subdomains.
- **watchTowr Suspicious Domains API** — The Suspicious Domains API from watchTowr — 2 operation(s) for suspicious domains.
- **watchTowr Testing Infrastructure API** — The Testing Infrastructure API from watchTowr — 1 operation(s) for testing infrastructure.

## MCP servers (1)

- **watchTowr MCP Server** — watchTowr publishes an official open-source MCP server (watchtowr/watchtowr-mcp, v0.1.2) that connects AI assistants to the watchTowr Platform Client API — attack surface assets...

## Agentic access (1)

- **Watchtowr Agentic Access** — 52 operations · 12 acting

## Security (3)

- **Watchtowr Authentication** — http · 1 scheme
- **Watchtowr Domain Security** — TLSv1.3 · HSTS · DMARC
- **Watchtowr Vulnerability Disclosure** — security.txt · contact published

## Tags

Company, Security, Cybersecurity, Attack Surface Management, EASM, Exposure Management, Threat Intelligence, Vulnerability Management

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/watchtowr/). Scores are computed from the provider's own public artifacts under a published rubric.