niche · 0.4 capabilitymarket actiondomain

GRC

Score 18.0 / 100 31 providers 6 APIs Search apis.io →

Providers using this tag (31)

Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.

Exemplar 2 Complete, well-documented, and agent-ready
OneTrustPrivacyComplianceConsent37 APIs72.7DrataComplianceSOC 2ISO 270013 APIs70.2
Strong 2 Solid coverage with minor gaps
anecdotesCompanyComplianceGovernanceRisk Management3 APIs64.0SecureframeComplianceSOC 2ISO 270011 API57.1
Developing 4 Usable, with meaningful gaps to close
OpenPagesCompanyB2BGovernanceRisk Management1 API47.7WegalvanizeCompanyGovernanceRisk ManagementCompliance1 API47.5LogicGateCompanyGovernance Risk and ComplianceRisk Management1 API43.7VISO Trust (Protecht)CompanySecurityThird-Party Risk Management1 API40.0
Thin 3 Limited public surface area
OpenLawsLegalLawStatutesRegulations2 APIs33.0MetricStreamCompanyGovernanceRisk ManagementCompliance8 APIs31.7CynomiCompanyCybersecuritySecurityCompliance1 API28.5
Emerging 11 Early or largely undocumented
WhisticCompanyThird-Party Risk ManagementVendor SecuritySecurity Assessments25.0ThoropassCompanyFintechComplianceCompliance Automation1 API24.7VComplyCompanyEnterpriseCompliance21.9RiskReconCompanyCybersecuritySecurity RatingsThird-Party Risk Management1 API21.7CyberGRXCompanyCybersecurityThird-Party Risk ManagementRisk Management1 API17.0AuditBoardCompanyGovernance Risk ComplianceAudit Management15.9SecurityPalCompanySecurityCompliance15.8ComplyanceCompanyArtificial IntelligenceGovernance Risk Compliance14.6ScytaleCompanyCloudComplianceGovernance14.0SprintoComplianceSOC 2ISO 270011 API13.3DiligentGovernanceRisk ManagementCompliance4 APIs13.0
Minimal 9 Almost no public developer surface
Tugboat LogicComplianceSOC 2ISO 270011 API10.9HyperproofComplianceRisk ManagementAudit2 APIs10.1ArdenCompanyInternal AuditSOX ComplianceAudit Automation9.8Axis 2CompanyRegulatory IntelligenceComplianceCorporate Affairs8.1DenkiCompanyFinancial AuditComplianceArtificial Intelligence6.8SahlCompanyComplianceGovernance6.0AlyneCompanyGovernance Risk and ComplianceRisk Management4.7Paisley ConsultingCompanyGovernanceRisk ManagementCompliance3.9Virsa SystemsCompanyGovernanceRisk ManagementCompliance0.0

APIs with this tag (6)

Ranked by the provider's API Evangelist rating — the Kin Score is scored per provider, not per API, so every API of a provider shares its band. How the rating works →

Strong 1 Solid coverage with minor gaps
Secureframe MCP ServerFirst-party hosted (remote) Model Context Protocol server exposing the Secureframe compliance platform as 1...57.1
Thin 1 Limited public surface area
MetricStream GRC Foundation APIsBusiness REST APIs over the GRC Foundation object model — Area of Compliance, Asset, Asset Class, Control, ...31.7
Emerging 2 Early or largely undocumented
Sprinto Platform APIREST API for building custom compliance, evidence, and risk workflows on Sprinto. Detailed reference is gat...13.3Diligent HighBond API (Diligent One)REST API for the Diligent One Platform (formerly HighBond) covering the governance, risk, and compliance su...13.0
Minimal 2 Almost no public developer surface
Tugboat Logic via OneTrust Developer PlatformTugboat Logic is now OneTrust Certification Automation. Programmatic access, where available, is provided t...10.9Hyperproof REST APIREST API exposing 20+ resources for compliance management: Controls, Policies, Policy Versions, Programs, R...10.1

Score breakdown

Frequency
43.0
log-scaled weighted occurrences
Breadth
0.8
spread across providers
Quality lift
31.5
mean composite of providers using it
Cohesion
5.2
strength of nearest seed neighbor

Where this tag sits

Compliance broader Risk Management broader

Related tags

SOC 2 7 co-occurrences ISO 27001 5 co-occurrences Third-Party Risk Management 7 co-occurrences Control 5 co-occurrences Audit 16 co-occurrences Risk Management 22 co-occurrences Governance 9 co-occurrences Compliance 28 co-occurrences

Where this tag comes from

Provider tag31
Api tag6

Cohort brief

Auto-generated

The 29 providers in the APIs.io catalog tagged GRC, scored on the Kin Score. Every figure below is computed from the catalog — nothing here is written.

Providers
29
all scored
Mean Kin Score
27.2
+4.3 vs catalog 22.9
Mean Agent Readiness
14
+2.1 vs catalog 11.9
Spread
4.7–72.7
median 21.7 · σ 19.7
How the 29 split by band
Exemplar 2Strong 2Developing 4Thin 3Emerging 11Minimal 7
Facet averages, against the whole catalog
FacetThis cohortCatalogDifferenceScored
Access Clarity 34.8 26.5 +8.3 29
Operational Transparency 20.1 13.7 +6.4 29
Discoverability 62.6 58.1 +4.5 29
Developer Ergonomics 26.2 23.2 +3 29
Contract Quality 16.7 17.6 -0.9 29
Contract Governance 4.4 6.3 -1.9 29

A facet is averaged over the members that carry it, not over the whole cohort — the “Scored” column is that count. Averaging an absent facet as zero would score our own coverage gaps as the providers’ posture.

What this cohort publishes
ArtifactThis cohortCatalogDifference
MCP server (any) 28% 14% +14
MCP server (first-party) 28% 12% +16
Agent Skills 0% 0% 0
OAuth scopes 21% 11% +10
Security 100% 98% +2
Arazzo workflows 0% 2% -2
Governance rules 0% 14% -14

mcp_pct counts any mcp/ artifact including ones API Evangelist derived from the provider OpenAPI; mcp_first_party_pct counts only servers the provider publishes. Prefer the latter.

Top by Kin Score
  1. 1 OneTrust 72.7
  2. 2 Drata 70.2
  3. 3 anecdotes 64
  4. 4 Secureframe 57.1
  5. 5 OpenPages 47.7
  6. 6 Wegalvanize 47.5
  7. 7 LogicGate 43.7
  8. 8 VISO Trust (Protecht) 40
  9. 9 OpenLaws 33
  10. 10 MetricStream 31.7
Top by Agent Readiness
  1. 1 OneTrust 55.9
  2. 2 Drata 48.6
  3. 3 OpenLaws 47.4
  4. 4 Secureframe 41.8
  5. 5 anecdotes 36.7
  6. 6 Wegalvanize 32.9
  7. 7 LogicGate 29
  8. 8 Thoropass 27.3
  9. 9 VISO Trust (Protecht) 23.2
  10. 10 OpenPages 19.8
All 31 members of this roster resolve to a scored provider in the catalog.Generated from the catalog build of 5 October 2026, across 29093 providers, using the same computation served by the APIs.io cohort API. Briefs are published for rosters of 5 or more scored providers; below that a distribution is not meaningful.

Work with this as data

Every tag here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for tags

7 MCP tools reach this
  • find_tagsBrowse and filter every tag in the catalog.
  • get_cohortThis tag as a scored cohort — every provider carrying it, with scores.
  • cohort_statsPRO — the distribution across this tag: mean, median, band split, adoption rates.
  • cohort_rankingsPRO — the leaderboard, on composite AND agent-readiness axes.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This tag 
curl "https://apis.io/api/v1/tags/grc"
All tags 
curl "https://apis.io/api/v1/tags?limit=25"
As a scored cohort 
curl "https://apis.io/api/v1/cohorts/tag/grc"
The distribution (Pro) 
curl "https://apis.io/api/v1/cohorts/tag/grc/stats" \
  -H "X-API-Key: $APIS_IO_KEY"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.