API ATLAS

Security & Identity: 104 free APIs

Authentication, authorization, malware scanning, cryptography and identity providers. Every record below links to its own documentation page.

Listed
104
No auth needed
27
Full profiles
6

APIs in this category

104 of 104
Cisco PSIRT openVuln API The Cisco Product Security Incident Response Team (PSIRT) openVuln API is a RESTful API that allows customers to obtain Cisco Security Vulnerability information in different machine-consumable formats. APIs are important for customers because they allow their technical staff and programmers to build tools that help them do their job more effectively (in this case, to keep up with security vulnerability information). For more information about the Cisco PSIRT openVuln API visit https://developer.cisco.com/site/PSIRT/discover/overview For detail steps on how to use the API go to:https://developer.cisco.com/site/PSIRT/get-started/getting-started.gsp This is a beta release of a swagger YAML for the Cisco PSIRT openVuln API To access the API sign in with your Cisco CCO account at http://apicon…
ThreatJammer.com User API The public API open to the users. Read the docs and learn more.. ## General information ### Description Threat Jammer supports two end-user REST APIs: the User API and the Report API. The end-user uses the User API to interact with the different databases, heuristics, and machine learning processes. Devices use the Report API to interact with Threat Jammer. This document will explain how to use the User API and interact with the different services, create a token, interpret the quota information, and create the HTTP request to interact with the User API. ### Authentication The API is protected by a Bearer authentication schema. Bearer authentication (also called token authentication) is an HTTP authentication scheme that involves security tokens called bearer tokens. It is used to authent…
TruAnon Private API Welcome to TruAnon! Thank you for helping make the Internet a safer place to be. Adopting TruAnon is simple. There is no setup or dependencies, nothing to store or process. Making identity part of your service is fun, and you’ll be up and running in a matter of minutes. TruAnon Private Token is used anytime you request information from TruAnon and you must edit this into the Variables section for this collection. This API contains two endpoints and both require these same two arguments, also found in the Variables section of this collection. These two arguments are: TruAnon Service Identifier and Your Member Name Your TruAnon Service Identifier was provided by TruAnon and is likely the root domain of your site or service. Your Member Name is the unique member ID on your system that you wo…
hashlookup CIRCL API ![](https://www.circl.lu/assets/images/circl-logo.png) CIRCL hash lookup is a public API to lookup hash values against known database of files. For more details about all the datasets included visit the website of the project. The API is accessible via HTTP ReST API and the API is also described as an OpenAPI. A documentation is available with with sample queries and software using hashlookup. An offline version as Bloom filter is also available. The API can be tested live in the interface below.
IX-API This API allows to config/change/delete Internet Exchange services. # Filters When querying collections, the provided query parameters are validated. Unknown query parameters are ignored. Providing invalid filter values should yield a validation error.
Authentiq Connect API Authentiq Connect OAuth 2.0 and OpenID Connect API reference. Learn about Authentiq ID or check out the Authentiq Connect developer documentation.
HackerOne The industry’s first hacker API that helps increase productivity towards creative bug bounty hunting
IPScanner IP network class (residential, mobile, hosting, VPN, residential proxy, Tor) with a confidence score
CompliAPI Screen crypto addresses, emails, websites, IDs and countries against OFAC, EU, UK sanctions lists
SAWO Labs Simplify login and improve user experience by integrating passwordless authentication in your app
Conjur This is an API definition for CyberArk Conjur Open Source. You can find out more at Conjur.org.
isMalicious Reputation of IPs, domains, URLs and file hashes from aggregated threat feeds, plus CVE lookups
ScanMalware Scan URLs in a sandboxed browser and search past scans by domain, IP, ASN, JARM or favicon hash
Spyse Access data on all Internet assets and build powerful attack surface management applications
Privacy.com Generate merchant-specific and one-time use credit card numbers that link back to your bank
Presend Security and developer utility API -- malware, vulnerability, and domain checks, no signup
ThreatCluster Threat intelligence: incident clusters, validated IOCs, CVEs, ransomware leak-site victims
Neetix Liveliness Face liveness, presentation-attack detection and 1:1 face match for identity verification
Agent Verifier Self-check for AI agents: verifies Web Bot Auth signatures and shows how a request looks
VulDB VulDB API allows to initiate queries for one or more items along with transactional bots
Sealed Rose AI media forensics and synthetic content verification for video, audio, image, and text
SecurityTrails Domain and IP related information such as current and historical WHOIS and DNS records
Maskbreak Detect VPNs, proxies, Tor, bots and antidetect browsers at signup, login and checkout
GreyNoise Query IPs in the GreyNoise dataset and retrieve a subset of the full IP context data
Malwagon Detonates files and URLs in instrumented VMs and returns behaviour, IOCs and ATT&CK
Scanii Simple REST API that can scan submitted documents/files for the presence of threats
VPNDetection Check whether an IPv4 or IPv6 address belongs to VPN infrastructure, no key needed
Bugcrowd Bugcrowd API for interacting and tracking the reported issues programmatically
IPLogs Free VPN, proxy, Tor and datacenter IP detection. 13 sources, active probing
Users (Okta API) The Okta User API provides operations to manage users in your organization.
OSV Open source vulnerability database and distributed triage infrastructure
Auth0 Easy to implement, adaptable authentication and authorization platform
CSR.plus Generate certificate signing requests and private keys without OpenSSL
IPGuardian Check IP addresses against 140+ public threat intelligence blocklists
Hashable A REST API to access high level cryptographic functions and methods
CyCAT.org API CyCAT - The Cybersecurity Resource Catalogue public API services.
Pulsedive Scan, search and collect threat intelligence data in real-time
FullHunt Searchable attack surface database of the entire internet
URLhaus Database of malicious URLs used for malware distribution
Dehash.lt Hash decryption MD5, SHA1, SHA3, SHA256, SHA384, SHA512
FOFA Search engine for Internet connected assets and devices
GitGuardian Scan files for secrets (API Keys, database credentials)
Botd Botd is a browser library for JavaScript bot detection
MojoAuth Secure and modern passwordless authentication platform
Censys Search engine for Internet connected host and devices
NoPhishy Check links to see if they're known phishing attempts
BinaryEdge Provide access to BinaryEdge 40fy scanning platform
SSL Labs Deep SSL/TLS server analysis with A+ to F grading
dead-drop Ephemeral zero-knowledge encrypted data sharing
Escape An API for escaping different kind of queries
FilterLists Lists of filters for adblockers and firewalls
Shodan Search engine for Internet connected devices
Stytch User infrastructure for modern applications
URLhaus Bulk queries and Download Malware Samples
Warrant APIs for authorization and access control
EmailRep Email address threat and risk prediction
Classify Encrypting & decrypting text messages

Rows marked ↗ have no reference page of their own — the source registry did not provide enough to write one — so they link straight to the provider's documentation.

Authentication

How the 104 records in this category authenticate callers. Values come straight from the source registries; records the sources do not describe are counted as unknown rather than guessed.

  • API key 57
  • No authentication 27
  • Unknown 15
  • OAuth 3
  • Token 2

Also in Security & Identity: 272 MCP servers

Related topics