Zatanna website screenshot

Zatanna

Zatanna is a Y Combinator (W2026) startup based in San Francisco that creates APIs for software that doesn't have any. It reverse-engineers the back ends of web-based cloud and on-prem software — ERPs (SAP), PMS/POS systems, insurance portals, and marketplaces — by observing real workflows, reconstructing the underlying request sequences, and hosting them as clean, callable APIs. Rather than relying on slow browser automation or computer-use agents, Zatanna gives AI agents faster, cheaper, and more reliable integrations, with a reliability layer that handles session management, authentication, and change detection. The agent-facing surface is a hosted, OAuth-protected Model Context Protocol (MCP) server at api.zatanna.ai.

Zatanna publishes 1 API on the APIs.io network. Tagged areas include Company, MCP, AI Agents, Integration, and Reverse Engineering.

16.4/100 emerging ▬ flat Agent 27/100 agent aware saas Full breakdown ↓
scored 2026-09-08 · rubric v0.20.0
AccessSelf serve
1 APIs 1 MCP Servers
CompanyMCPAI AgentsIntegrationReverse EngineeringAutomationAuthenticationY Combinator

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-09-08 · rubric v0.20.0
Create-or-Update Ergonomics could not be measured. We hold no machine-readable contract for this provider to read, so there is nothing to measure a write surface against. Excluded rather than scored zero: never-measured and measured-empty are different facts. Publishing an OpenAPI is what makes this facet — and several others — scorable at all.
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. Every facet and dimension name above is a link: it opens that measurement's own page — what it means, the exact checks that feed it, how the whole catalog distributes on it, and the providers at the top of it. This rating is computed from github.com/api-evangelist/zatanna: open an issue to ask a question, or submit a pull request to add artifacts. Submit an artifact on GitHub — free → Manage your own listing — the Influence plan, $499/mo →

APIs 1

Individual APIs this provider publishes, each with its own machine-readable definition.

Zatanna MCP Server

Zatanna's hosted, remote Model Context Protocol (MCP) server — the agent-facing surface of its reverse-engineered portal integrations. Live at https://api.zatanna.ai/mcp over St...

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

Zatanna MCP Server

Zatanna operates a hosted, remote MCP server at https://api.zatanna.ai/mcp. The endpoint is live: an unauthenticated POST returns HTTP 401 with a WWW-Authenticate Bearer challen...

MCP SERVER

Security Posture 2

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Zatanna Authentication

oauth2/http · 2 schemes

SECURITY

Zatanna Domain Security

TLSv1.3 · DMARC

SECURITY

Scopes 1

OAuth scopes governing access to this provider's APIs.

Zatanna Scopes

4 scopes

4 scopes

SCOPES

Resources

Agent Surfaces 2

MCP servers, agent skills, and machine-readable catalogs

Access & Security 1

Authentication, authorization, and security posture

Commercial 2

Pricing, plans, and the legal terms of use

Company 1

The organization behind the API

Source (apis.yml)

apis.yml Raw ↑
aid: zatanna
name: Zatanna
description: Zatanna is a Y Combinator (W2026) startup based in San Francisco that creates APIs for software that doesn't
  have any. It reverse-engineers the back ends of web-based cloud and on-prem software — ERPs (SAP), PMS/POS systems, insurance
  portals, and marketplaces — by observing real workflows, reconstructing the underlying request sequences, and hosting them
  as clean, callable APIs. Rather than relying on slow browser automation or computer-use agents, Zatanna gives AI agents
  faster, cheaper, and more reliable integrations, with a reliability layer that handles session management, authentication,
  and change detection. The agent-facing surface is a hosted, OAuth-protected Model Context Protocol (MCP) server at api.zatanna.ai.
deliveryModel:
  model: saas
  open_source: false
  commercial: true
  callable_host: false
  label: Hosted service · you call their endpoint
  confidence: medium
  source:
  - pricing
  generated: '2026-08-28'
  method: derived
accessModel:
  pricing: unknown
  onboarding: self-serve
  trial: false
  try_now: false
  public: false
  label: Self-serve signup
  confidence: medium
  source:
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://raw.githubusercontent.com/api-evangelist/zatanna/refs/heads/main/apis.yml
url: https://raw.githubusercontent.com/api-evangelist/zatanna/refs/heads/main/apis.yml
x-type: company
x-source: vc-portfolio
x-backed-by:
- y-combinator
x-tier: stub
x-tier-reason: portfolio-lead
x-yc-batch: W2026
x-location: San Francisco, CA
x-founders:
- Tarun Vedula (CEO)
- Alex Blackwell (CTO)
- Rithvik Vanga
specificationVersion: '0.23'
created: '2026-07-17'
modified: '2026-07-21'
x-enrichment:
  date: '2026-07-21'
  status: enriched
  artifacts_added: 9
  pass: local-v1
tags:
- Company
- MCP
- AI Agents
- Integration
- Reverse Engineering
- Automation
- Authentication
- Y Combinator
tags_raw:
- Company
- API
- MCP
- AI Agents
- Integration
- Reverse Engineering
- Automation
- OAuth
- Y Combinator
apis:
- name: Zatanna MCP Server
  description: Zatanna's hosted, remote Model Context Protocol (MCP) server — the agent-facing surface of its reverse-engineered
    portal integrations. Live at https://api.zatanna.ai/mcp over Streamable HTTP (JSON-RPC), gated by OAuth 2.0 (Authorization
    Code + PKCE, dynamic client registration) or a Zatanna API key. The tool list is not enumerable without credentials.
  humanURL: https://www.zatanna.ai/
  baseURL: https://api.zatanna.ai
  tags:
  - MCP
  - AI Agents
  - Authentication
  tags_raw:
  - MCP
  - AI Agents
  - OAuth
  properties:
  - type: MCPServer
    url: mcp/zatanna-mcp.yml
  - type: Authentication
    url: authentication/zatanna-authentication.yml
  - type: OAuthScopes
    url: scopes/zatanna-scopes.yml
  - type: Conformance
    url: conformance/zatanna-conformance.yml
common:
- type: Website
  url: https://www.zatanna.ai/
- type: TermsOfService
  url: https://www.zatanna.ai/terms
- type: PrivacyPolicy
  url: https://www.zatanna.ai/privacy
- type: WellKnown
  url: well-known/zatanna-well-known.yml
- type: LLMsTxt
  url: llms/zatanna-llms.txt
- type: DomainSecurity
  url: security/zatanna-domain-security.yml
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io

Work with this as data

Every provider here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for providers

9 MCP tools reach this
  • find_providersBrowse and filter every provider in the catalog.
  • get_provider_artifactsEvery artifact this provider publishes, grouped by type.
  • get_provider_operationsEvery operation across all of their OpenAPIs — one call instead of parsing every spec.
  • get_provider_toolsEvery MCP tool they ship, with the operation each wraps.
  • get_provider_evidenceHow each part of their score was established. Free — the basis for a claim should not sit behind it.
  • get_provider_ratingPRO — composite, band, trend and facet scores.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This provider
curl "https://apis.io/api/v1/providers/zatanna"
All providers
curl "https://apis.io/api/v1/providers?limit=25"
Every operation they expose
curl "https://apis.io/api/v1/providers/zatanna/operations?limit=25"
How their score was established
curl "https://apis.io/api/v1/providers/zatanna/evidence"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.