# Yubico

**Canonical:** https://apis.io/providers/yubico/  
**Website:** https://yubico.com  
**APIs profiled:** 1

Yubico is the security company behind the YubiKey hardware authentication device and the inventor of the Yubico One-Time Password (OTP). Its public developer surface centers on YubiCloud, a hosted REST service that verifies Yubico OTPs via a signed HTTPS request to api.yubico.com, alongside a broad set of first-party SDKs and libraries for WebAuthn/FIDO2, PIV smart cards, OATH, OTP, and the YubiHSM 2 across Python, .NET, Java, Android, iOS, and C, plus the ykman command-line tool. Yubico co-authored the FIDO U2F standard, ships FIPS 140-3 validated keys, and holds a SOC 2 Type 2 attestation for its enterprise services.

## Kin Score — 56.2 / 100 (strong)

Scored 2026-08-17 under rubric 0.11.0. Trend: flat (+0.0 from 56.2).

| Facet | Score |
|---|---|
| Discoverability | 75.9 |
| Contract Quality | 60.4 |
| Governance | 20.8 |
| Operational Transparency | 39.5 |
| Developer Ergonomics | 69.0 |
| Commercial Clarity | 60.5 |

## Agent readiness — 41.7 (agent-ready)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | no |
| MCP Server | derived |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | documented |
| OpenAPI Examples | verified |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | derived |
| Well Known Catalog | no |
| Consent Identity | yes |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Self-serve signup — onboarding: self-serve, pricing: unknown, trial: no (confidence: medium).

## APIs (1)

- **Yubico Validation API** — Yubico OTP validation operations.

## MCP servers (1)

- **yubico-mcp.yml**

## Security (4)

- **Yubico Authentication** — apiKey/hmac-signature · 2 schemes
- **Yubico Domain Security** — TLSv1.3 · HSTS · DNSSEC · DMARC
- **Yubico Vulnerability Disclosure** — security.txt · contact published
- **Yubico Trust Center** — SOC 2 Type 2, FIPS 140-3, FIDO2, FIDO U2F, NIST SP 800-63-3 AAL3

## Tags

Company, Enterprise, Authentication, Security, Identity, Hardware Security, FIDO2, WebAuthn, One-Time Password

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/yubico/). Scores are computed from the provider's own public artifacts under a published rubric.