Topic · concept
OCRA
OCRA (OATH Challenge-Response Algorithm) is a standard for generating one-time passwords based on challenge-response authentication as defined in RFC 6287. It extends HOTP and TOTP with challenge-response capabilities for stronger authentication scenarios.
62 related providers on APIs.io
Source repository →
Links
Providers working in OCRA
Providers whose own tags share at least two of this topic's tags, most shared first — the top 30 of 62.
| Provider | About | Rating | APIs |
|---|---|---|---|
| Aembit | Aembit is a Workload Identity and Access Management (Workload IAM) platform for non-human identities — AI agents, applications, microservices, CI/CD pipelines, scripts and service accounts. Instead of long-lived, hard-coded secrets, Aembit… | exemplar | 2 |
| Auth0 | Auth0 (now part of Okta) is a leading identity-as-a-service platform providing authentication and authorization for applications, APIs, and AI agents. It implements OpenID Connect, OAuth 2.0, SAML 2.0, WS-Federation, and SCIM, and exposes… | exemplar | 4 |
| Cisco XDR | Cisco XDR is Cisco's extended detection and response platform, the successor to SecureX. It correlates telemetry from Cisco Secure Endpoint, Secure Firewall, Umbrella, Duo, Secure Email and third-party sources into incidents, and exposes f… | exemplar | 12 |
| TypingDNA | TypingDNA provides AI-based typing biometrics authentication, recognizing people by how they type on desktop and mobile keyboards. Its RESTful Authentication API enrolls and verifies typing patterns for fraud prevention, account-sharing de… | strong | 3 |
| Stytch | Stytch is an authentication and identity infrastructure provider. Its Consumer and B2B APIs cover passwordless authentication (Magic Links, OTP, OAuth, WebAuthn / Passkeys, TOTP), enterprise SSO (SAML / OIDC) and SCIM, sessions, M2M client… | strong | 3 |
| Microsoft Entra | Microsoft Entra (formerly Azure Active Directory) provides identity and access management services including authentication, authorization, and directory services. | strong | 1 |
| Transmit Security | Transmit Security provides the Mosaic platform, a comprehensive CIAM (Customer Identity and Access Management) solution offering REST APIs for passkey and WebAuthn authentication, fraud detection and risk-based access control, identity orc… | strong | 7 |
| Barndoor | Barndoor AI is the control plane for agentic AI, providing secure access and governance for AI agents and Model Context Protocol (MCP) servers. Founded in 2024 by Oren Michels (founder of Mashery), Barndoor enables enterprise IT, security,… | strong | 1 |
| Yubico | Yubico is the security company behind the YubiKey hardware authentication device and the inventor of the Yubico One-Time Password (OTP). Its public developer surface centers on YubiCloud, a hosted REST service that verifies Yubico OTPs via… | strong | 1 |
| Amazon IAM | Amazon Identity and Access Management (IAM) enables you to manage access to AWS services and resources securely. Using IAM, you can create and manage AWS users, groups, roles, and policies, and use permissions to allow and deny their acces… | strong | 1 |
| Centrify | Centrify is an identity and privileged access management (PAM) platform now delivered as part of Delinea (the company formed from the Centrify + Thycotic merger). The Centrify Identity Platform / Cloud Suite / Privileged Access Service sec… | strong | 15 |
| Onecli | OneCLI is an open-source credential gateway and identity layer for AI agents. Agents connect to Gmail, GitHub, Slack, AWS, Jira and 50+ other services through a network-layer proxy that injects real API keys and OAuth tokens at request tim… | strong | 1 |
| Google Cloud API Gateway | Google Cloud API Gateway enables you to provide secure access to your backend services through a well-defined REST API that is consistent across all of your services. It is a fully managed, pay-per-use gateway designed for serverless workl… | strong | 1 |
| Allegion | Allegion plc is a global security products company with $3.8B in 2024 revenue, 13,000+ employees, and 30+ brands across 120 countries (Schlage, Von Duprin, LCN, CISA, Steelcraft, Interflex, SimonsVoss, Yonomi). The Allegion Developer Porta… | developing | 2 |
| Trusona | Trusona is a Scottsdale, Arizona identity impersonation detection company founded in 2015 by fraud-prevention expert Ori Eisen, funded by Kleiner Perkins and advised by Frank Abagnale. Its ATO Protect suite verifies that the person behind… | developing | 2 |
| Eagle Eye Networks | Eagle Eye Networks is a cloud video surveillance and video management system (VMS) provider whose Video API Platform (v3) exposes REST APIs for managing bridges, cameras, speakers, switches and multi-cameras; streaming live and recorded vi… | developing | 23 |
| 1Kosmos | 1Kosmos is a digital identity company whose BlockID platform combines identity proofing, document and biometric verification, and passwordless / FIDO2 authentication into a single tenant-scoped platform used across workforce, customer and… | developing | 1 |
| Defakto Security | Defakto (formerly SPIRL) is a non-human identity (NHI) security company that issues short-lived, cryptographically attested identities to workloads, services, CI/CD pipelines and AI agents in place of static secrets, API keys and long-live… | developing | 2 |
| SpyCloud | SpyCloud is an Austin, Texas based identity threat protection company that operates one of the largest repositories of recaptured darknet data — breach records, infostealer malware logs, phishing captures and combolists — and exposes it pr… | developing | 9 |
| HYPR | HYPR is a passwordless identity assurance company. Its Passwordless REST APIs, served from each customer's own HYPR Server, cover device registration, authentication, user management, RP application configuration, audit trail and administr… | developing | 6 |
| Dust Identity | DUST Identity (Newton, Massachusetts; founded 2018 as an MIT spinout) binds physical objects to trusted digital records using the Diamond Unclonable Security Tag — an applied coating of engineered nano-diamonds in a polymer matrix that for… | developing | 1 |
| secure-flows-com | Secure Flows provides encrypted storage, tenant isolation, hosted login, and session management for no‑code applications, enabling developers to add secure user data handling without building authentication or encryption themselves. The pl… | developing | 4 |
| sealgate-jp | SealGate は日本で開発・運用しているパスキー認証基盤です。WebAuthn (FIDO2) の登録・認証・失効・復旧を API と SDK で提供します。秘密鍵は利用者の端末の中にとどまり、SealGate が保存するのは公開鍵だけです。これにより、パスキー認証の安全性とプライバシーを確保し、企業や開発者が簡単に認証機能を統合できるプラットフォームを提供します。 | developing | 2 |
| SPIRE | SPIRE (SPIFFE Runtime Environment) is the reference implementation of the SPIFFE standard, providing a toolchain for establishing trust between software systems across a wide variety of hosting platforms through automated attestation and w… | developing | 2 |
| Cakewalk | Cakewalk is the agentic access management platform for fast-moving companies, combining a granular identity governance and administration (IGA) platform with AI-driven workflows. Cakewalk governs access for both human identities and AI age… | developing | 1 |
| SlashID | SlashID is a developer-first identity platform that provides REST APIs for passwordless authentication, multi-factor authentication, passkeys, and comprehensive user management across web and mobile applications. The platform offers three… | developing | 1 |
| Capy Inc. | Capy Inc. operates Lemin Captcha, a gamified bot-prevention and CAPTCHA service that replaces traditional image-selection challenges with playful, brandable puzzle games. Lemin protects websites and apps from automated attacks such as acco… | thin | 1 |
| Apache Knox | Apache Knox is a REST API and application gateway for the Apache Hadoop ecosystem. It provides a single access point for all REST and HTTP interactions with Apache Hadoop clusters, with authentication, authorization, SSO, and audit capabil… | thin | 1 |
| Nudge Security | Nudge Security is a SaaS and AI security management platform that discovers all SaaS and cloud applications used across an organization, helps security teams manage OAuth grants, enforce security policies, monitor app-to-app integrations,… | thin | 1 |
| Strata Identity | Strata Identity is a multi-cloud identity orchestration and agentic AI security company whose Maverics platform lets organizations unify authentication and authorization across multiple clouds, identity providers, and applications, and gov… | thin | 1 |
A term in the Security area.
Tags
AuthenticationOCRAOTPSecurity