Zero Trust
Providers using this tag (103)
Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.
Exemplar 1 Complete, well-documented, and agent-ready
Strong 12 Solid coverage with minor gaps
Developing 19 Usable, with meaningful gaps to close
Thin 29 Limited public surface area
ZscalerNetBirdZero Trust Network AccessCisco Secure ClientVirsecRubrikIllumioVersa NetworksibossDuo SecurityPerimeter 81CyberArkPulseWanderaBeyondTrustAviatrixWatchGuardAryakaGoogle BeyondCorpVia ScienceAmbient MeshConsul ConnectAkeylessSPIFFEHyporiSecret Double OctopusCato NetworksService MeshDispel
Emerging 30 Early or largely undocumented
Minimal 9 Almost no public developer surface
APIs with this tag (30)
Ranked by the provider's API Evangelist rating — the Kin Score is scored per provider, not per API, so every API of a provider shares its band. How the rating works →
Exemplar 1 Complete, well-documented, and agent-ready
Strong 3 Solid coverage with minor gaps
Microsoft Graph Conditional Access APICreate and manage Microsoft Entra Conditional Access policies that enforce access controls based on user, l...Microsoft Entra Global Secure Access APIAPI for managing Microsoft Entra Internet Access and Microsoft Entra Private Access, providing identity-cen...AppOmni Identity and Access APIUnified identities that stitch a person's monitored-service accounts together by email, plus AppOmni platfo...
Developing 3 Usable, with meaningful gaps to close
Linkerd Service MeshLinkerd is a CNCF-graduated service mesh for Kubernetes that transparently adds mutual TLS encryption, late...Aranya Client APIThe Aranya Client API is the library interface an application uses to talk to the Aranya daemon. It covers ...Tufin SecureApp APIAPI for application-centric security policy management and micro-segmentation. SecureApp enables teams to m...
Thin 10 Limited public surface area
Ivanti Neurons for Zero Trust Access REST APIREST API for managing Ivanti Neurons for Zero Trust Access (nZTA), providing endpoints for managing zero tr...Zscaler Private Access (ZPA) APIREST API for managing Zscaler Private Access (ZPA) configurations including segment groups, application seg...VIA Zero Trust Fabric — OpenID Connect IdentityVIA's OpenID Connect / OAuth 2.0 identity layer, operated on a VIA-run Keycloak server. It is the only mach...Ambient MeshAmbient Mesh provides a sidecar-less service mesh via the Kubernetes Gateway API and Istio ambient mode. It...Cisco Duo Admin APIThe Duo Admin API configures multi-factor authentication policies, users, groups, and integrations used by ...Tailscale APITailscale provides a REST API for managing tailnets (private mesh networks), devices, users, access control...Illumio Core PCE REST APIThe Illumio Policy Compute Engine (PCE) REST API for managing Zero Trust Segmentation — workloads, labels, ...Teleport Access Management APITeleport is a modern SSH infrastructure access platform providing certificate-based authentication, session...iboss Zero Trust SSE Platform APIAuthenticated REST administration and reporting surface for the iboss Zero Trust SASE/SSE cloud platform, s...Consul Connect / Service Mesh APIHashiCorp Consul provides service discovery and a service mesh (Consul Connect) with mutual TLS, intentions...
Emerging 12 Early or largely undocumented
NIST SP 800-207 Zero Trust ArchitectureThe foundational specification of the Zero Trust security model. Defines the seven tenets, the PDP/PEP/PA l...NIST SP 800-207 Zero Trust ArchitectureNIST Special Publication 800-207 defines zero trust architecture (ZTA) and provides a roadmap for organizat...NIST SP 800-207A ZTA for Cloud-Native ApplicationsNIST SP 800-207A extends the original ZTA guidance to cover cloud-native applications in multi-cloud enviro...Open Policy Agent (OPA)Open Policy Agent is a CNCF-graduated open source general-purpose policy engine that enables unified, conte...SPIFFE - Secure Production Identity Framework for EveryoneSPIFFE is a CNCF-graduated open standard for workload identity in dynamic environments. It provides a frame...SPIRE - SPIFFE Runtime EnvironmentSPIRE is the reference implementation of SPIFFE, a CNCF-graduated production-ready toolchain for establishi...HPE Aruba Networking SSE APIThe HPE Aruba Networking SSE (Security Service Edge) API exposes the Axis Security / HPE SSE cloud-delivere...API Dynamics PlatformThe APIDynamics platform provides AI-driven API security and observability including API discovery, traffic...Greymatter Platform APIThe Greymatter Platform API provides programmatic access to configure and manage the Greymatter zero trust ...CloudConnexa Public APIREST API for managing CloudConnexa Zero Trust networks, users, networks, connectors, DNS, routes, and acces...Twingate Admin APIGraphQL Admin API for managing Twingate resources, remote networks, connectors, users, groups, devices, ser...Ivanti Neurons for Zero-Trust AccessREST API for Ivanti Neurons for Zero-Trust Access, providing programmatic configuration of zero-trust polic...
Minimal 1 Almost no public developer surface
Companies reaching this through an API (4)
These companies publish an API, specification or operation carrying “Zero Trust” but do not classify their business under it. Listed unranked and kept out of the count above, because one tagged operation is not a statement about what a company does.
Score breakdown
Frequency
57.0
log-scaled weighted occurrences
Breadth
2.3
spread across providers
Quality lift
33.7
mean composite of providers using it
Cohesion
0.0
strength of nearest seed neighbor
Related tags
Network Security 25 co-occurrences
SASE 18 co-occurrences
Privileged Access Management 13 co-occurrences
Identity and Access Management 24 co-occurrences
Cloud Security 22 co-occurrences
ZTNA 10 co-occurrences
VPN 11 co-occurrences
Microsegmentation 8 co-occurrences
Where this tag comes from
Provider tag104
Api tag30
Cohort brief
Auto-generatedThe 99 providers in the APIs.io catalog tagged Zero Trust, scored on the Kin Score. Every figure below is computed from the catalog — nothing here is written.
Providers
99
of 103 in the catalog
Mean Kin Score
32.4
+10.2 vs catalog 22.2
Mean Agent Readiness
15.8
+3.8 vs catalog 12
Spread
0–72.6
median 32.4 · σ 16.7
How the 99 split by band
Exemplar 1Strong 12Developing 19Thin 29Emerging 30Minimal 8
Facet averages, against the whole catalog
| Facet | This cohort | Catalog | Difference | Scored |
|---|---|---|---|---|
| Developer Ergonomics | 36.4 | 23.2 | +13.2 | 99 |
| Operational Transparency | 23.6 | 13 | +10.6 | 99 |
| Contract Quality | 26 | 17.2 | +8.8 | 99 |
| Access Clarity | 31.1 | 23.9 | +7.2 | 99 |
| Discoverability | 64.2 | 57.9 | +6.3 | 99 |
| Contract Governance | 12.6 | 6.5 | +6.1 | 99 |
A facet is averaged over the members that carry it, not over the whole cohort — the “Scored” column is that count. Averaging an absent facet as zero would score our own coverage gaps as the providers’ posture.
What this cohort publishes
| Artifact | This cohort | Catalog | Difference |
|---|---|---|---|
| MCP server (any) | 15% | 13% | +2 |
| MCP server (first-party) | 11% | 12% | -1 |
| Agent Skills | 0% | 0% | 0 |
| OAuth scopes | 9% | 11% | -2 |
| Security | 96% | 98% | -2 |
| Arazzo workflows | 2% | 2% | 0 |
| Governance rules | 27% | 16% | +11 |
mcp_pct counts any mcp/ artifact including ones API Evangelist derived from the provider OpenAPI; mcp_first_party_pct counts only servers the provider publishes. Prefer the latter.
Top by Kin Score
- 1 Aembit 72.6
- 2 Graphiant 65.2
- 3 ZeroTier 64.8
- 4 Cisco Umbrella 62.7
- 5 Cisco Identity Services Engine 62.5
- 6 Microsoft Active Directory 61.8
- 7 Microsoft Entra 58.4
- 8 Centrify 57.6
- 9 Nord Security 56.9
- 10 Amazon WorkSpaces Web 56.6
Top by Agent Readiness
- 1 Aembit 52.7
- 2 Nord Security 42.9
- 3 Tigera 42.4
- 4 CyberArk 39.2
- 5 Cisco Identity Services Engine 37.2
- 6 BeyondTrust 36.8
- 7 AppOmni 35.7
- 8 Beyond Identity 34.5
- 9 Graphiant 34.1
- 10 Netskope 33.8
All 103 members of this roster resolve to a provider in the
catalog; 99 carry a score (96%).
The figures above describe the scored members only.
Coverage caveat. 81 of 99 scored members had under half their catalog-attributable points satisfied at all (catalog_earned / catalog_max < 0.5). They are INCLUDED in the mean above. A large share here means the cohort mean is partly a measurement of how far our enrichment reached, not only of how these providers publish.Generated from the catalog build of 24 October 2026, across 31984 providers, using the same computation served by the APIs.io cohort API. Briefs are published for rosters of 5 or more scored providers; below that a distribution is not meaningful.
Coverage caveat. 81 of 99 scored members had under half their catalog-attributable points satisfied at all (catalog_earned / catalog_max < 0.5). They are INCLUDED in the mean above. A large share here means the cohort mean is partly a measurement of how far our enrichment reached, not only of how these providers publish.Generated from the catalog build of 24 October 2026, across 31984 providers, using the same computation served by the APIs.io cohort API. Briefs are published for rosters of 5 or more scored providers; below that a distribution is not meaningful.
Work with this as data
Every tag here is available over the APIs.io API and to AI agents over MCP.