What is in the Unit apis.yml

Unit on APIs.io — Kin Score by API Evangelist

Unit is profiled on APIs.io from a single APIs.json file, apis.yml. Unit is a Banking-as-a-Service (BaaS) platform that lets companies embed deposit accounts, cards, payments, and lending into their own products without becoming a bank. The file indexes 17 APIs and 54 common properties. 64 Kin Score checks read this file, and it earns 169.5 of their 267 points. Unit scored 64.7 (strong) on 2026-10-24; the badge above is live and shows the current score.

What the file contains

  • 9 tags: Fintech, Banking as a Service, Banking, Payments, Card Issuing, ACH, Lending, JSON:API, Embedded Finance
  • Specification version: 0.23
  • Created: 2026-07-02
  • Modified: 2026-08-08
  • Maintainers: 1 listed

Common properties (54 types) apply across every API in the file:

AgenticAccess · AgentSkill · APIReference · Authentication · Blog · CapabilityMap · ChangeLog · Compliance · Components · Conformance · Conventions · DataModel · DeclineCodes · Deprecation · DeveloperPortal · Documentation · DomainSecurity · ErrorCatalog · FinOps · GettingStarted · GitHubOrganization · Hosts · Idempotency · Integrations · JSONLD · Lifecycle · LinkedIn · LLMsTxt · Newsroom · OAuthScopes · Overlay · Packages · Plans · Postman · PostmanWorkspace · PrivacyPolicy · RateLimits · Sandbox · SDKs · Security · SecurityTxt · SignUp · Spectral · StatusPage · Support · TermsOfService · TrustCenter · Vendors · Vocabulary · VulnerabilityDisclosure · Webhooks · Website · WellKnown · X-MCPServerCandidate

APIs (17), the first 12:

How the file drives the Kin Score

64 checks in rubric 0.25.0 read this file. 37 are earned, 5 partly, and 22 are not.

CheckPointsWhat it reads
Discoverability — 38 of 43 points
Publishes an apis.yml index10 / 10source_filename == "apis.yml"
Base URL on every API5 / 5every api has baseURL and no baseURL contains "localhost"
Human URL on every API5 / 5every api has humanURL
Substantive description5 / 5len(description) >= 200
Tagged for discovery5 / 5len(tags) >= 5
Named maintainer3 / 3maintainers[0].email is set
Created and modified dates2 / 2created and modified both ISO dates
Provider image2 / 2image is set
Newsroom1 / 1common[].type includes Newsroom, PressReleases, Press or News
Contract governance — 1.2 of 5 points
Publishes a vocabulary1.2 / 5common[].type includes "Vocabulary"
Operational transparency — 23 of 26 points
Change log6 / 6common[].type includes "ChangeLog" (alias-aware)
Status page6 / 6common[].type includes "StatusPage"
Security disclosure4 / 4common[].type includes "Security" (alias-aware)
Deprecation policy3 / 3common[].type includes "Deprecation" (alias-aware)
Webhooks advertised3 / 3common[].type includes "Webhooks"
GitHub organization1 / 2common[].type includes "GitHubOrganization" or "GitHubRepository" (alias-aware)
Developer ergonomics — 32.8 of 42 points
Authentication documented5 / 5common[].type includes "Authentication"
Getting started guide5 / 5common[].type includes "GettingStarted" or "Quickstart"
Developer portal4 / 4common[].type includes "DeveloperPortal" (alias-aware)
Documentation4 / 4common[].type includes "Documentation"
API reference3 / 3common[].type includes "APIReference" (alias-aware)
At least one SDK3 / 3count(common[].type == "SDK" alias-aware) >= 1
Console or sandbox3 / 3common[].type includes "Console" or "Sandbox" or "Playground"
Postman collection2 / 2common[].type includes "Postman" (alias-aware), graded by who authored it
Support channel2 / 2common[].type includes "Support" or "HelpCenter" or "Community"
Blog1 / 1common[].type includes "Blog"
Agent Skill0.8 / 3common[].type includes "AgentSkill", graded by who authored it
Access clarity — 14 of 23 points
Privacy policy4 / 4common[].type includes "PrivacyPolicy" (alias-aware)
Terms of service4 / 4common[].type includes "TermsOfService" (alias-aware)
Compliance published3 / 3common[].type includes "Compliance"
Trust center3 / 3common[].type includes "TrustCenter" or "Trust"
Regulatory — 46 of 94 points
Consent-scoped authorization10 / 10common[].type includes "OAuthScopes" OR a scopes artifact is present
Authentication model documented6 / 6common[].type includes "Authentication" or "OpenIDConnect"
Security posture published6 / 6common[].type includes "Security" or "DomainSecurity"
Vulnerability disclosure program6 / 6common[].type includes "VulnerabilityDisclosure"
Compliance / certification disclosure5 / 5common[].type includes "Compliance" or "TrustCenter" or "Trust"
Data-standard conformance5 / 5implements a recognized data standard — common[].type includes "Standard"/"Conformance", or a Vocabulary/JSON-LD context is published
Privacy policy (data handling)4 / 4common[].type includes "PrivacyPolicy"
Terms of service (legal basis)4 / 4common[].type includes "TermsOfService"
Agent readiness — 14.5 of 30 points
Typed Event Surface6 / 6AsyncAPI document, OR webhooks/callbacks objects in the as-published OpenAPI, OR common[].type includes Webhooks
Idempotency4.5 / 9OpenAPI mutating operations declare an idempotency key — a header, a request-body property, or a named de-duplication token whose own description says so (verified); else common[].type matches /idempoten/i (documented)
Stable Error Semantics4 / 8OpenAPI $refs a shared error schema across 4xx/5xx responses (verified), else common[].type includes ErrorCatalog / ErrorCodes / DeclineCodes

What the file does not say yet

97.5 more points depend on entries this file does not have. A missing pointer means the file does not link to it. It does not mean Unit has not published it.

  • Self-service sign-up (5 pts) — common[].type includes "SignUp" or "Login"
  • Accessibility conformance report (4 pts) — common[].type includes "AccessibilityConformance"
  • Age assurance (4 pts) — common[].type includes "AgeAssurance"
  • Data residency statement (4 pts) — common[].type includes "DataResidency"
  • Data-subject request route (4 pts) — common[].type includes "DataSubjectRequest"
  • Declared support lifetime (4 pts) — common[].type includes "SupportLifetime"
  • Exit assistance / switching terms (4 pts) — common[].type includes "ExitAssistance"
  • Global Privacy Control honoured (4 pts) — common[].type includes "GlobalPrivacyControl"
  • Incident notification commitment (4 pts) — common[].type includes "IncidentNotification"
  • Notice-and-action mechanism (4 pts) — common[].type includes "NoticeAndAction"
  • Pricing published (4 pts) — common[].type includes "Pricing"
  • Published example corpus (4 pts) — common[].type includes "Examples" (alias-aware: CodeExamples, Samples, CodeSamples, Demos)
  • Self-hosts the APIs.json index (4 pts) — apis.yml url points at a host the provider controls, not the catalog
  • Software bill of materials (4 pts) — common[].type includes "SBOM"
  • Subprocessor list (4 pts) — common[].type includes "Subprocessors"
  • Three or more SDKs (4 pts) — count(common[].type == "SDK" alias-aware) >= 3
  • Transparency report (4 pts) — common[].type includes "TransparencyReport"
  • Well-Known Catalog (4 pts) — common[].type includes WellKnown, APICatalog, or api-catalog
  • Command-line interface (3 pts) — common[].type includes "CLI"
  • Consent & Bot Identity (3 pts) — common[].type includes AIPREF, ContentSignal, WebBotAuth, or HTTPMessageSignatures
  • Public roadmap (2 pts) — common[].type includes "RoadMap" or "Roadmap"
  • Leadership page (1 pt) — common[].type includes Leadership, LeadershipTeam, Management or ExecutiveTeam

Who keeps this file

API Evangelist maintains this file at github.com/api-evangelist/unit-co. If you work at Unit, you can open an issue or a pull request to add or correct an entry. You can also publish your own APIs.json at /.well-known/apis.json on your domain, which earns the self-hosting check and makes the file yours.

See the full rating on the Unit profile, and how every check is scored at apis.io/rating.

← What's New in APIs.json 0.24
What is in the Leanplum apis.yml →