Security & Identity: 91 free APIs

Authentication, authorization, malware scanning, cryptography and identity providers. Every record below links to its own documentation page.

Listed
91
No auth needed
22
Full profiles
6

APIs in this category

91 of 91
Cisco PSIRT openVuln API The Cisco Product Security Incident Response Team (PSIRT) openVuln API is a RESTful API that allows customers to obtain Cisco Security Vulnerability information in different machine-consumable formats. APIs are important for customers because they allow their technical staff and programmers to build tools that help them do their job more effectively (in this case, to keep up with security vulnerability information). For more information about the Cisco PSIRT openVuln API visit https://developer.cisco.com/site/PSIRT/discover/overview For detail steps on how to use the API go to:https://developer.cisco.com/site/PSIRT/get-started/getting-started.gsp This is a beta release of a swagger YAML for the Cisco PSIRT openVuln API To access the API sign in with your Cisco CCO account at http://apicon…
ThreatJammer.com User API The public API open to the users. Read the docs and learn more.. ## General information ### Description Threat Jammer supports two end-user REST APIs: the User API and the Report API. The end-user uses the User API to interact with the different databases, heuristics, and machine learning processes. Devices use the Report API to interact with Threat Jammer. This document will explain how to use the User API and interact with the different services, create a token, interpret the quota information, and create the HTTP request to interact with the User API. ### Authentication The API is protected by a Bearer authentication schema. Bearer authentication (also called token authentication) is an HTTP authentication scheme that involves security tokens called bearer tokens. It is used to authent…
TruAnon Private API Welcome to TruAnon! Thank you for helping make the Internet a safer place to be. Adopting TruAnon is simple. There is no setup or dependencies, nothing to store or process. Making identity part of your service is fun, and you’ll be up and running in a matter of minutes. TruAnon Private Token is used anytime you request information from TruAnon and you must edit this into the Variables section for this collection. This API contains two endpoints and both require these same two arguments, also found in the Variables section of this collection. These two arguments are: TruAnon Service Identifier and Your Member Name Your TruAnon Service Identifier was provided by TruAnon and is likely the root domain of your site or service. Your Member Name is the unique member ID on your system that you wo…
hashlookup CIRCL API ![](https://www.circl.lu/assets/images/circl-logo.png) CIRCL hash lookup is a public API to lookup hash values against known database of files. For more details about all the datasets included visit the website of the project. The API is accessible via HTTP ReST API and the API is also described as an OpenAPI. A documentation is available with with sample queries and software using hashlookup. An offline version as Bloom filter is also available. The API can be tested live in the interface below.
IX-API This API allows to config/change/delete Internet Exchange services. # Filters When querying collections, the provided query parameters are validated. Unknown query parameters are ignored. Providing invalid filter values should yield a validation error.
Authentiq Connect API Authentiq Connect OAuth 2.0 and OpenID Connect API reference. Learn about Authentiq ID or check out the Authentiq Connect developer documentation.
HackerOne The industry’s first hacker API that helps increase productivity towards creative bug bounty hunting
SAWO Labs Simplify login and improve user experience by integrating passwordless authentication in your app
Conjur This is an API definition for CyberArk Conjur Open Source. You can find out more at Conjur.org.
Spyse Access data on all Internet assets and build powerful attack surface management applications
Privacy.com Generate merchant-specific and one-time use credit card numbers that link back to your bank
Presend Security and developer utility API -- malware, vulnerability, and domain checks, no signup
Neetix Liveliness Face liveness, presentation-attack detection and 1:1 face match for identity verification
VulDB VulDB API allows to initiate queries for one or more items along with transactional bots
SecurityTrails Domain and IP related information such as current and historical WHOIS and DNS records
GreyNoise Query IPs in the GreyNoise dataset and retrieve a subset of the full IP context data
Scanii Simple REST API that can scan submitted documents/files for the presence of threats
Bugcrowd Bugcrowd API for interacting and tracking the reported issues programmatically
IPLogs Free VPN, proxy, Tor and datacenter IP detection. 13 sources, active probing
Users (Okta API) The Okta User API provides operations to manage users in your organization.
Auth0 Easy to implement, adaptable authentication and authorization platform
CSR.plus Generate certificate signing requests and private keys without OpenSSL
Hashable A REST API to access high level cryptographic functions and methods
CyCAT.org API CyCAT - The Cybersecurity Resource Catalogue public API services.
Pulsedive Scan, search and collect threat intelligence data in real-time
FullHunt Searchable attack surface database of the entire internet
URLhaus Database of malicious URLs used for malware distribution
Dehash.lt Hash decryption MD5, SHA1, SHA3, SHA256, SHA384, SHA512
FOFA Search engine for Internet connected assets and devices
GitGuardian Scan files for secrets (API Keys, database credentials)
Botd Botd is a browser library for JavaScript bot detection
MojoAuth Secure and modern passwordless authentication platform
Censys Search engine for Internet connected host and devices
NoPhishy Check links to see if they're known phishing attempts
BinaryEdge Provide access to BinaryEdge 40fy scanning platform
SSL Labs Deep SSL/TLS server analysis with A+ to F grading
dead-drop Ephemeral zero-knowledge encrypted data sharing
Escape An API for escaping different kind of queries
FilterLists Lists of filters for adblockers and firewalls
Shodan Search engine for Internet connected devices
Stytch User infrastructure for modern applications
URLhaus Bulk queries and Download Malware Samples
Warrant APIs for authorization and access control
EmailRep Email address threat and risk prediction
Classify Encrypting & decrypting text messages

Rows marked ↗ have no reference page of their own — the source registry did not provide enough to write one — so they link straight to the provider's documentation.

Authentication

How the 91 records in this category authenticate callers. Values come straight from the source registries; records the sources do not describe are counted as unknown rather than guessed.

  • API key 49
  • No authentication 22
  • Unknown 15
  • OAuth 3
  • Token 2

Also in Security & Identity: 242 MCP servers