emerging · -1.5 capability action

Access Control

Score 23.6 / 100 85 providers +47 via APIs 76 APIs Search apis.io →
Workflows using this tag
Amazon S3 Apply and Verify a Lifecycle Configuration · Amazon S3 Amazon S3 Create Bucket and Store an Object · Amazon S3 Amazon S3 Provision a Secure Bucket · Amazon S3 Amazon S3 Enable Versioning Then Store an Object · Amazon S3 Amazon S3 Configure and Verify Default Encryption · Amazon S3 Amazon S3 List and Batch Delete Objects · Amazon S3 Amazon S3 Get Object or Create It · Amazon S3 Amazon S3 Delete Object and Confirm Removal · Amazon S3
Business capabilities this tag reaches
Cybersecurity Management 6

Providers using this tag (85)

Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.

Strong 10 Solid coverage with minor gaps
Developing 21 Usable, with meaningful gaps to close
Thin 18 Limited public surface area
Emerging 20 Early or largely undocumented
Minimal 14 Almost no public developer surface
Unrated 2 Not yet scored

APIs with this tag (75)

Ranked by the provider's API Evangelist rating — the Kin Score is scored per provider, not per API, so every API of a provider shares its band. How the rating works →

Exemplar 18 Complete, well-documented, and agent-ready
GitLab Protected Branches APIThe GitLab Protected Branches API provides programmatic access to manage branch protection rules. It suppor...81.0Cloudflare Zero Trust APIThe Cloudflare Zero Trust API enables developers to manage secure access to applications and networks witho...80.6Datadog Domain Allowlist APIThe Domain Allowlist API allows you to manage the email domain allowlist for your organization. It supports...77.6Datadog IP Allowlist APIThe IP Allowlist API is used to manage the IP addresses that can access the Datadog API and web UI. It allo...77.6Datadog Logs Restriction Queries APIThe Logs Restriction Queries API allows you to manage restriction queries that control which logs the logs_...77.6Datadog Restriction Policies APIThe Restriction Policies API allows you to manage restriction policies associated with Datadog resources in...77.6Datadog Roles APIThe Roles API is used to create and manage Datadog roles, the global permissions they grant, and which user...77.6Azure DevOps Security APIAPI for managing security namespaces, access control lists, and access control entries in Azure DevOps. Use...75.4Azure DevOps Security Roles APIAPI for managing security role definitions and role assignments on Azure DevOps resources. Enables listing ...75.4Azure DevOps Token Administration APIAPI for organization administrators to retrieve and revoke OAuth authorizations including personal access t...75.4Treasure Data User APIThe User API from Treasure Data — 2 operation(s) for user.75.2LinkedIn Access Control APIManage entity ACLs and assignees74.8Confluence Content permissions APIThe Content permissions API from Confluence — 1 operation(s) for content permissions.70.4Confluence Content restrictions APIThe Content restrictions API from Confluence — 5 operation(s) for content restrictions.70.4Confluence Space permissions APIThe Space permissions API from Confluence — 5 operation(s) for space permissions.70.4Confluence V2 Space Permissions APIManage space-level permissions using the Confluence Cloud REST API v2.70.4Delinea Platform APIPlatform-level REST API for Delinea's unified cloud platform enabling OAuth 2.0 authentication, role and gr...69.8Archbee Access Control APIMagic-link access requests for gated portals68.2
Strong 17 Solid coverage with minor gaps
IBM Cloud Context-based RestrictionsCreate and manage network zones and context-based restriction rules to control access to IBM Cloud resource...66.4ServiceNow User Role Inheritance APIThe ServiceNow User Role Inheritance API provides REST endpoints for querying the role inheritance hierarch...66.0OCI Bastion APIREST APIs for managing bastion sessions that provide restricted and time-limited access to target resources...65.9Grafana Access Control APIThe API can be used to create, update, get and list roles, and create or remove built-in role assignments. ...64.3Nexla Access Control APIOperations for managing access control to resources64.3Inrupt Pod Storage API (Solid Protocol)The ESS Pod Storage Service implements the Solid Protocol over HTTP — LDP-style container and resource CRUD...61.0Red Hat Authorization Service APIAPI for managing access control on resources of OpenShift Cluster Manager services, enabling fine-grained a...60.8Red Hat Role-Based Access Control APIAPI for managing role-based access control policies within the Hybrid Cloud Console, including user groups,...60.8Microsoft Entra Conditional Access APIAPI for managing conditional access policies and controls.58.4IP Access Lists APIManage IP access lists to control network access to Azure Databricks workspaces.57.9Permissions APIManage permissions on workspace objects including clusters, jobs, notebooks, and other resources using acce...57.9FOLIO Access Control APIThe Access Control API from FOLIO — 23 operation(s) for access control.57.6Databricks Grants APIThe Databricks Grants API is part of Unity Catalog and allows you to get, update, and manage permissions on...57.1Databricks Groups APIThe Databricks Groups API allows you to create, update, list, and delete groups in a workspace. Groups simp...57.1Databricks IP Access Lists APIThe Databricks IP Access Lists API allows administrators to configure IP allow lists and block lists for a ...57.1Databricks Permissions APIThe Databricks Permissions API allows you to manage permissions on workspace objects such as clusters, jobs...57.1Databricks Recipients APIThe Databricks Recipients API is part of Delta Sharing and allows you to create, update, list, and delete r...57.1
Developing 17 Usable, with meaningful gaps to close
Britive MCP ServerBritive's first-party Model Context Protocol server, available both as a remote server on the tenant (https...53.6Everbridge Access Control APIOperations for integrations with access control systems53.0NetBackup RBAC Administration APIAPI for managing role-based access control, permissions, access rules, and access control lists.52.7Azure Database for MySQL Firewall Rules APICreate and manage server-level firewall rules to grant access to a MySQL Flexible Server from specified cli...51.9Clevergy Access control APIThe Access control API from Clevergy — 1 operation(s) for access control.51.0Sanity Projects APIThe Sanity Projects API enables programmatic management of Sanity projects including creating projects, man...50.6Sanity Roles APIThe Sanity Roles API provides endpoints for managing user roles and permissions within Sanity projects. Sup...50.6Verkada Command APIREST API for the Verkada Command platform - cameras and footage, access control, sensors, alarms, guest man...50.6OpenShift Authorization APIAPI for managing authorization resources including SubjectAccessReview, SelfSubjectAccessReview, LocalSubje...49.4OpenShift RBAC APIAPI for managing role-based access control resources including Roles, ClusterRoles, RoleBindings, and Clust...49.4OpenShift Security APIAPI for managing security resources including SecurityContextConstraints, RangeAllocation, and PodSecurityP...49.4Cloudinary Permissions APIThe Permissions API assigns granular permissions to principals (users, groups, API keys) by roles or direct...45.5Aranya Client APIThe Aranya Client API is the library interface an application uses to talk to the Aranya daemon. It covers ...44.8User Qualification APIManages user qualifications and permissions within SAP Ariba for access control and role management.44.0Inductive Automation Access Control APIAccess control configuration43.9Kaltura Access Control APIAdd & Manage Access Controls43.7Cloud Healthcare Consent Management APIThe Cloud Healthcare Consent Management API provides fine-grained, patient-centric consent management for h...43.5
Thin 14 Limited public surface area
Livepeer Access Control APIOperations related to access control/signing keys api39.2Livepeer Signing Keys APIEndpoints for managing JWT signing keys used for playback access control and webhook signature verification.39.2Gitpod Organizations APIREST API for managing organizations, groups, members, role assignments, permissions, and organization-level...37.8Varonis Data Security Platform APIAPI for integrating with Varonis Data Security Platform to manage data security policies, access permission...37.8Xiaomi Access Control APIThe Access Control API from Xiaomi — 1 operation(s) for access control.36.8OWASP ZAP Access Control APIThe Access Control API from OWASP ZAP — 4 operation(s) for access control.36.2IO Sub-API Key Management APIAdministrative API for creating scoped sub-API keys with per-model restrictions and per-key credit limits, ...35.9ADT Access Control APIManage access control panels, credentials, and schedules34.6Squid Access Control Configuration APISquid provides extensive access control configuration through its squid.conf file and runtime reload capabi...34.2CMR Access Control APIREST API for managing Access Control Lists (ACLs) and checking user permissions across CMR concepts. Suppor...33.4Earthdata Login APIThe Earthdata Login API provides free and immediate access to thousands of EOSDIS data products covering al...30.3Level Mobile Application BackendThe undocumented HTTPS backend the Level Home iOS and Android applications talk to. It is an AWS API Gatewa...29.9PlainID Authorization Platform APIRuntime Authorization (PDP permit/deny, policy resolution, user access token, cache invalidation), Manageme...28.6Scrive Access Control APIThe Access Control API from Scrive — 7 operation(s) for access control.27.3
Emerging 8 Early or largely undocumented
Minimal 1 Almost no public developer surface

Companies reaching this through an API (47)

These companies publish an API, specification or operation carrying “Access Control” but do not classify their business under it. Listed unranked and kept out of the count above, because one tagged operation is not a statement about what a company does.

Activeloop Amazon S3 Archbee Ariba Azure Database for MySQL Azure Databricks Azure DevOps Britive Clevergy Cloudflare Cloudinary Confluence Databricks Datadog Delinea DICE Everbridge Fleet Complete FOLIO GitLab Gitpod Google Cloud Healthcare Grafana IBM Inductive Automation io.net Kaltura LinkedIn Linux Livepeer Microsoft Entra NASA CMR NASA Earthdata Nebius Nexla Oracle OWASP ZAP Red Hat Red Hat OpenShift Sanity Scrive ServiceNow Treasure Data Twingate Varonis Veritas NetBackup Xiaomi

Score breakdown

Frequency
60.4
log-scaled weighted occurrences
Breadth
1.9
spread across providers
Quality lift
33.0
mean composite of providers using it
Cohesion
9.6
strength of nearest seed neighbor

Where this tag sits

Security broader

Related tags

Physical Security 15 co-occurrences Identity and Access Management 22 co-occurrences Authorization 29 co-occurrences Data Governance 17 co-occurrences Permissions 18 co-occurrences RBAC 10 co-occurrences Credentials 14 co-occurrences Data Security 10 co-occurrences

Where this tag comes from

Provider tag85
Api tag76
Openapi tag12
Openapi op tag62

Cohort brief

Auto-generated

The 80 providers in the APIs.io catalog tagged Access Control, scored on the Kin Score. Every figure below is computed from the catalog — nothing here is written.

Providers
80
of 85 in the catalog
Mean Kin Score
32.6
+10.4 vs catalog 22.2
Mean Agent Readiness
19.4
+7.4 vs catalog 12
Spread
3.4–64
median 32.4 · σ 16
How the 80 split by band
Exemplar 0Strong 10Developing 21Thin 18Emerging 20Minimal 11
Facet averages, against the whole catalog
FacetThis cohortCatalogDifferenceScored
Developer Ergonomics 36.3 23.2 +13.1 80
Contract Quality 29 17.2 +11.8 80
Operational Transparency 21.9 13 +8.9 80
Access Clarity 30.7 23.9 +6.8 80
Discoverability 63.7 57.9 +5.8 80
Contract Governance 11.4 6.5 +4.9 80

A facet is averaged over the members that carry it, not over the whole cohort — the “Scored” column is that count. Averaging an absent facet as zero would score our own coverage gaps as the providers’ posture.

What this cohort publishes
ArtifactThis cohortCatalogDifference
MCP server (any) 17% 13% +4
MCP server (first-party) 17% 12% +5
Agent Skills 0% 0% 0
OAuth scopes 16% 11% +5
Security 95% 98% -3
Arazzo workflows 5% 2% +3
Governance rules 26% 16% +10

mcp_pct counts any mcp/ artifact including ones API Evangelist derived from the provider OpenAPI; mcp_first_party_pct counts only servers the provider publishes. Prefer the latter.

Top by Kin Score
  1. 1 Rhombus Systems 64
  2. 2 Inrupt 61
  3. 3 Amazon Lake Formation 60.2
  4. 4 ALTR 59.3
  5. 5 Sign In Enterprise 55.8
  6. 6 C1 55.7
  7. 7 Lakekeeper 55.3
  8. 8 KISI 54.8
  9. 9 Amazon IAM Identity Center 54.7
  10. 10 Amazon IAM Access Analyzer 54.3
Top by Agent Readiness
  1. 1 Rhombus Systems 65.8
  2. 2 Cobot 58.6
  3. 3 Clawvisor 54.8
  4. 4 Cakewalk 50.9
  5. 5 Inrupt 49.6
  6. 6 ALTR 48.1
  7. 7 Sign In Enterprise 46
  8. 8 Whop 45.1
  9. 9 Lakekeeper 42.7
  10. 10 ADT 42.3
All 85 members of this roster resolve to a provider in the catalog; 80 carry a score (94%). The figures above describe the scored members only.
Coverage caveat. 71 of 80 scored members had under half their catalog-attributable points satisfied at all (catalog_earned / catalog_max < 0.5). They are INCLUDED in the mean above. A large share here means the cohort mean is partly a measurement of how far our enrichment reached, not only of how these providers publish.Generated from the catalog build of 24 October 2026, across 31984 providers, using the same computation served by the APIs.io cohort API. Briefs are published for rosters of 5 or more scored providers; below that a distribution is not meaningful.

Work with this as data

Every tag here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for tags

7 MCP tools reach this
  • find_tagsBrowse and filter every tag in the catalog.
  • get_cohortThis tag as a scored cohort — every provider carrying it, with scores.
  • cohort_statsPRO — the distribution across this tag: mean, median, band split, adoption rates.
  • cohort_rankingsPRO — the leaderboard, on composite AND agent-readiness axes.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This tag
curl "https://apis.io/api/v1/tags/access-control"
All tags
curl "https://apis.io/api/v1/tags?limit=25"
As a scored cohort
curl "https://apis.io/api/v1/cohorts/tag/access-control"
The distribution (Pro)
curl "https://apis.io/api/v1/cohorts/tag/access-control/stats" \
  -H "X-API-Key: $APIS_IO_KEY"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.