emerging · -1.2 capability action

Access Control

Score 22.5 / 100 91 providers +47 via APIs 77 APIs Search apis.io →
Workflows using this tag
Amazon S3 Apply and Verify a Lifecycle Configuration · Amazon S3 Amazon S3 Create Bucket and Store an Object · Amazon S3 Amazon S3 Provision a Secure Bucket · Amazon S3 Amazon S3 Enable Versioning Then Store an Object · Amazon S3 Amazon S3 Configure and Verify Default Encryption · Amazon S3 Amazon S3 List and Batch Delete Objects · Amazon S3 Amazon S3 Get Object or Create It · Amazon S3 Amazon S3 Delete Object and Confirm Removal · Amazon S3
Business capabilities this tag reaches
Cybersecurity Management 6

Providers using this tag (91)

Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.

Exemplar 3 Complete, well-documented, and agent-ready
Strong 12 Solid coverage with minor gaps
Developing 19 Usable, with meaningful gaps to close
Thin 18 Limited public surface area
Emerging 22 Early or largely undocumented
Minimal 15 Almost no public developer surface
Unrated 2 Not yet scored

APIs with this tag (76)

Ranked by the provider's API Evangelist rating — the Kin Score is scored per provider, not per API, so every API of a provider shares its band. How the rating works →

Exemplar 24 Complete, well-documented, and agent-ready
Cloudflare Zero Trust APIThe Cloudflare Zero Trust API enables developers to manage secure access to applications and networks witho...82.5Azure DevOps Security APIAPI for managing security namespaces, access control lists, and access control entries in Azure DevOps. Use...81.9Azure DevOps Security Roles APIAPI for managing security role definitions and role assignments on Azure DevOps resources. Enables listing ...81.9Azure DevOps Token Administration APIAPI for organization administrators to retrieve and revoke OAuth authorizations including personal access t...81.9Datadog Domain Allowlist APIThe Domain Allowlist API allows you to manage the email domain allowlist for your organization. It supports...80.0Datadog IP Allowlist APIThe IP Allowlist API is used to manage the IP addresses that can access the Datadog API and web UI. It allo...80.0Datadog Logs Restriction Queries APIThe Logs Restriction Queries API allows you to manage restriction queries that control which logs the logs_...80.0Datadog Restriction Policies APIThe Restriction Policies API allows you to manage restriction policies associated with Datadog resources in...80.0Datadog Roles APIThe Roles API is used to create and manage Datadog roles, the global permissions they grant, and which user...80.0LinkedIn Access Control APIManage entity ACLs and assignees77.8Confluence Content permissions APIThe Content permissions API from Confluence — 1 operation(s) for content permissions.77.7Confluence Content restrictions APIThe Content restrictions API from Confluence — 5 operation(s) for content restrictions.77.7Confluence Space permissions APIThe Space permissions API from Confluence — 5 operation(s) for space permissions.77.7Confluence V2 Space Permissions APIManage space-level permissions using the Confluence Cloud REST API v2.77.7Treasure Data User APIThe User API from Treasure Data — 2 operation(s) for user.72.4IP Access Lists APIManage IP access lists to control network access to Azure Databricks workspaces.71.6Permissions APIManage permissions on workspace objects including clusters, jobs, notebooks, and other resources using acce...71.6Archbee Access Control APIMagic-link access requests for gated portals70.8OCI Bastion APIREST APIs for managing bastion sessions that provide restricted and time-limited access to target resources...70.4Microsoft Entra Conditional Access APIAPI for managing conditional access policies and controls.70.3Delinea Platform APIPlatform-level REST API for Delinea's unified cloud platform enabling OAuth 2.0 authentication, role and gr...68.6Red Hat Authorization Service APIAPI for managing access control on resources of OpenShift Cluster Manager services, enabling fine-grained a...67.3Red Hat Role-Based Access Control APIAPI for managing role-based access control policies within the Hybrid Cloud Console, including user groups,...67.3Cloud Healthcare Consent Management APIThe Cloud Healthcare Consent Management API provides fine-grained, patient-centric consent management for h...67.1
Strong 17 Solid coverage with minor gaps
Nexla Access Control APIOperations for managing access control to resources66.2Grafana Access Control APIThe API can be used to create, update, get and list roles, and create or remove built-in role assignments. ...66.0IBM Cloud Context-based RestrictionsCreate and manage network zones and context-based restriction rules to control access to IBM Cloud resource...65.8sealgate-ai Access Control APIRoles, role assignments, and enablement scoping.65.5Inrupt Pod Storage API (Solid Protocol)The ESS Pod Storage Service implements the Solid Protocol over HTTP — LDP-style container and resource CRUD...64.3Verkada Command APIREST API for the Verkada Command platform - cameras and footage, access control, sensors, alarms, guest man...62.2ServiceNow User Role Inheritance APIThe ServiceNow User Role Inheritance API provides REST endpoints for querying the role inheritance hierarch...61.9Azure Database for MySQL Firewall Rules APICreate and manage server-level firewall rules to grant access to a MySQL Flexible Server from specified cli...61.1Databricks Grants APIThe Databricks Grants API is part of Unity Catalog and allows you to get, update, and manage permissions on...58.7Databricks Groups APIThe Databricks Groups API allows you to create, update, list, and delete groups in a workspace. Groups simp...58.7Databricks IP Access Lists APIThe Databricks IP Access Lists API allows administrators to configure IP allow lists and block lists for a ...58.7Databricks Permissions APIThe Databricks Permissions API allows you to manage permissions on workspace objects such as clusters, jobs...58.7Databricks Recipients APIThe Databricks Recipients API is part of Delta Sharing and allows you to create, update, list, and delete r...58.7FOLIO Access Control APIThe Access Control API from FOLIO — 23 operation(s) for access control.58.6Sanity Projects APIThe Sanity Projects API enables programmatic management of Sanity projects including creating projects, man...55.9Sanity Roles APIThe Sanity Roles API provides endpoints for managing user roles and permissions within Sanity projects. Sup...55.9Everbridge Access Control APIOperations for integrations with access control systems55.5
Developing 13 Usable, with meaningful gaps to close
Britive MCP ServerBritive's first-party Model Context Protocol server, available both as a remote server on the tenant (https...54.1OpenShift Authorization APIAPI for managing authorization resources including SubjectAccessReview, SelfSubjectAccessReview, LocalSubje...53.2OpenShift RBAC APIAPI for managing role-based access control resources including Roles, ClusterRoles, RoleBindings, and Clust...53.2OpenShift Security APIAPI for managing security resources including SecurityContextConstraints, RangeAllocation, and PodSecurityP...53.2Clevergy Access control APIThe Access control API from Clevergy — 1 operation(s) for access control.51.2NetBackup RBAC Administration APIAPI for managing role-based access control, permissions, access rules, and access control lists.51.2Cloudinary Permissions APIThe Permissions API assigns granular permissions to principals (users, groups, API keys) by roles or direct...50.5Varonis Data Security Platform APIAPI for integrating with Varonis Data Security Platform to manage data security policies, access permission...48.5User Qualification APIManages user qualifications and permissions within SAP Ariba for access control and role management.45.7Aranya Client APIThe Aranya Client API is the library interface an application uses to talk to the Aranya daemon. It covers ...44.9Inductive Automation Access Control APIAccess control configuration43.4Kaltura Access Control APIAdd & Manage Access Controls40.9OWASP ZAP Access Control APIThe Access Control API from OWASP ZAP — 4 operation(s) for access control.39.8
Thin 14 Limited public surface area
Livepeer Access Control APIOperations related to access control/signing keys api39.2Livepeer Signing Keys APIEndpoints for managing JWT signing keys used for playback access control and webhook signature verification.39.2IO Sub-API Key Management APIAdministrative API for creating scoped sub-API keys with per-model restrictions and per-key credit limits, ...37.4Gitpod Organizations APIREST API for managing organizations, groups, members, role assignments, permissions, and organization-level...35.9Xiaomi Access Control APIThe Access Control API from Xiaomi — 1 operation(s) for access control.35.6ADT Access Control APIManage access control panels, credentials, and schedules33.7Squid Access Control Configuration APISquid provides extensive access control configuration through its squid.conf file and runtime reload capabi...33.0CMR Access Control APIREST API for managing Access Control Lists (ACLs) and checking user permissions across CMR concepts. Suppor...32.5Earthdata Login APIThe Earthdata Login API provides free and immediate access to thousands of EOSDIS data products covering al...32.5Level Mobile Application BackendThe undocumented HTTPS backend the Level Home iOS and Android applications talk to. It is an AWS API Gatewa...29.8PlainID Authorization Platform APIRuntime Authorization (PDP permit/deny, policy resolution, user access token, cache invalidation), Manageme...29.7Scrive Access Control APIThe Access Control API from Scrive — 7 operation(s) for access control.27.9Activeloop Access Control APIThe access-control API from Activeloop — 2 operation(s) for access-control.26.4Oosto OnAccess APIPer-deployment REST API for Oosto OnAccess, the facial access-control product (internal codename "Abraxas")...26.3
Emerging 7 Early or largely undocumented
Minimal 1 Almost no public developer surface

Companies reaching this through an API (47)

These companies publish an API, specification or operation carrying “Access Control” but do not classify their business under it. Listed unranked and kept out of the count above, because one tagged operation is not a statement about what a company does.

Activeloop Amazon S3 Archbee Ariba Azure Database for MySQL Azure Databricks Azure DevOps Britive Clevergy Cloudflare Cloudinary Confluence Databricks Datadog Delinea DICE Everbridge Fleet Complete FOLIO Gitpod Google Cloud Healthcare Grafana IBM Inductive Automation io.net Kaltura LinkedIn Linux Livepeer Microsoft Entra NASA CMR NASA Earthdata Nebius Nexla Oracle OWASP ZAP Red Hat Red Hat OpenShift Sanity Scrive sealgate-ai ServiceNow Treasure Data Twingate Varonis Veritas NetBackup Xiaomi

Score breakdown

Frequency
57.4
log-scaled weighted occurrences
Breadth
1.2
spread across providers
Quality lift
32.6
mean composite of providers using it
Cohesion
8.6
strength of nearest seed neighbor

Where this tag sits

Security broader

Related tags

Physical Security 15 co-occurrences Data Governance 18 co-occurrences Identity and Access Management 20 co-occurrences Authorization 27 co-occurrences Permissions 19 co-occurrences RBAC 9 co-occurrences Credentials 14 co-occurrences Data Security 10 co-occurrences

Where this tag comes from

Provider tag91
Api tag77
Openapi tag12
Openapi op tag62

Cohort brief

Auto-generated

The 83 providers in the APIs.io catalog tagged Access Control, scored on the Kin Score. Every figure below is computed from the catalog — nothing here is written.

Providers
83
of 91 in the catalog
Mean Kin Score
34.3
+10.2 vs catalog 24.1
Mean Agent Readiness
20
+5.9 vs catalog 14.1
Spread
2.6–71.2
median 33.1 · σ 18.5
How the 83 split by band
Exemplar 3Strong 12Developing 19Thin 18Emerging 20Minimal 11
Facet averages, against the whole catalog
FacetThis cohortCatalogDifferenceScored
Developer Ergonomics 37.9 24.5 +13.4 83
Contract Quality 28.8 18.6 +10.2 83
Operational Transparency 22.6 13.2 +9.4 83
Access Clarity 37.7 30 +7.7 83
Discoverability 64.9 59.1 +5.8 83
Contract Governance 15.2 9.7 +5.5 83

A facet is averaged over the members that carry it, not over the whole cohort — the “Scored” column is that count. Averaging an absent facet as zero would score our own coverage gaps as the providers’ posture.

What this cohort publishes
ArtifactThis cohortCatalogDifference
MCP server (any) 18% 18% 0
MCP server (first-party) 18% 16% +2
Agent Skills 0% 0% 0
OAuth scopes 16% 13% +3
Security 96% 99% -3
Arazzo workflows 5% 1% +4
Governance rules 52% 36% +16

mcp_pct counts any mcp/ artifact including ones API Evangelist derived from the provider OpenAPI; mcp_first_party_pct counts only servers the provider publishes. Prefer the latter.

Top by Kin Score
  1. 1 Amazon IAM Identity Center 71.2
  2. 2 Amazon IAM Access Analyzer 70.4
  3. 3 Rhombus Systems 67.4
  4. 4 Amazon Lake Formation 66.2
  5. 5 Inrupt 64.3
  6. 6 ALTR 62.2
  7. 7 Verkada 62.2
  8. 8 Cobot 60.2
  9. 9 ButterflyMX 59
  10. 10 Virtru 58.7
Top by Agent Readiness
  1. 1 Rhombus Systems 65.8
  2. 2 Cobot 58.6
  3. 3 Clawvisor 54.8
  4. 4 Cakewalk 50.9
  5. 5 Inrupt 49.6
  6. 6 ALTR 48.1
  7. 7 Amazon IAM Access Analyzer 46.6
  8. 8 Sign In Enterprise 46
  9. 9 Lakekeeper 45.5
  10. 10 Whop 45.1
All 91 members of this roster resolve to a provider in the catalog; 83 carry a score (91%). The figures above describe the scored members only.
Coverage caveat. 71 of 83 scored members had under half their catalog-attributable points satisfied at all (catalog_earned / catalog_max < 0.5). They are INCLUDED in the mean above. A large share here means the cohort mean is partly a measurement of how far our enrichment reached, not only of how these providers publish.Generated from the catalog build of 14 November 2026, across 41591 providers, using the same computation served by the APIs.io cohort API. Briefs are published for rosters of 5 or more scored providers; below that a distribution is not meaningful.

Work with this as data

Every tag here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for tags

7 MCP tools reach this
  • find_tagsBrowse and filter every tag in the catalog.
  • get_cohortThis tag as a scored cohort — every provider carrying it, with scores.
  • cohort_statsPRO — the distribution across this tag: mean, median, band split, adoption rates.
  • cohort_rankingsPRO — the leaderboard, on composite AND agent-readiness axes.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This tag
curl "https://apis.io/api/v1/tags/access-control"
All tags
curl "https://apis.io/api/v1/tags?limit=25"
As a scored cohort (paid plan)
The distribution (Pro)

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.