Fleet is profiled on APIs.io from a single APIs.json file, apis.yml. Fleet is an open-source device management platform built on osquery. The file indexes 1 API and 34 common properties. 64 Kin Score checks read this file, and it earns 155.1 of their 267 points. Fleet scored 55.2 (strong) on 2026-10-29; the badge above is live and shows the current score.
What the file contains
- 9 tags: Company, Developer Tools, Device Management, MDM, Endpoint Security, Vulnerability Management, osquery, Open Source, DevOps
- Specification version: 0.23
- Created: 2026-07-17
- Modified: 2026-09-16
- Maintainers: 2 listed
Common properties (34 types) apply across every API in the file:
AgenticAccess · AgentSkill · APIReference · Authentication · Blog · ChangeLog · CLI · Compliance · Conformance · Conventions · DataModel · DeveloperPortal · Documentation · DomainSecurity · ErrorCatalog · GettingStarted · GitHubOrganization · Lifecycle · LLMsTxt · Overlay · Packages · Plans · Pricing · PrivacyPolicy · Security · SignUp · StatusPage · Support · TermsOfService · TrustCenter · VulnerabilityDisclosure · Webhooks · Website · X-MCPServerCandidate
APIs (1):
- Fleet API — AgenticAccess, Authentication, Conventions, DataModel, ErrorCatalog, OpenAPI
How the file drives the Kin Score
64 checks in rubric 0.25.0 read this file. 33 are earned, 4 partly, and 27 are not.
| Check | Points | What it reads |
|---|---|---|
| Discoverability — 37 of 43 points | ||
| Publishes an apis.yml index | 10 / 10 | source_filename == "apis.yml" |
| Base URL on every API | 5 / 5 | every api has baseURL and no baseURL contains "localhost" |
| Human URL on every API | 5 / 5 | every api has humanURL |
| Substantive description | 5 / 5 | len(description) >= 200 |
| Tagged for discovery | 5 / 5 | len(tags) >= 5 |
| Named maintainer | 3 / 3 | maintainers[0].email is set |
| Created and modified dates | 2 / 2 | created and modified both ISO dates |
| Provider image | 2 / 2 | image is set |
| Operational transparency — 20 of 26 points | ||
| Change log | 6 / 6 | common[].type includes "ChangeLog" (alias-aware) |
| Status page | 6 / 6 | common[].type includes "StatusPage" |
| Security disclosure | 4 / 4 | common[].type includes "Security" (alias-aware) |
| Webhooks advertised | 3 / 3 | common[].type includes "Webhooks" |
| GitHub organization | 1 / 2 | common[].type includes "GitHubOrganization" or "GitHubRepository" (alias-aware) |
| Developer ergonomics — 29.7 of 42 points | ||
| Authentication documented | 5 / 5 | common[].type includes "Authentication" |
| Getting started guide | 5 / 5 | common[].type includes "GettingStarted" or "Quickstart" |
| Developer portal | 4 / 4 | common[].type includes "DeveloperPortal" (alias-aware) |
| Documentation | 4 / 4 | common[].type includes "Documentation" |
| API reference | 3 / 3 | common[].type includes "APIReference" (alias-aware) |
| Command-line interface | 3 / 3 | common[].type includes "CLI" |
| Agent Skill | 2.7 / 3 | common[].type includes "AgentSkill", graded by who authored it |
| Support channel | 2 / 2 | common[].type includes "Support" or "HelpCenter" or "Community" |
| Blog | 1 / 1 | common[].type includes "Blog" |
| Access clarity — 23 of 23 points | ||
| Self-service sign-up | 5 / 5 | common[].type includes "SignUp" or "Login" |
| Pricing published | 4 / 4 | common[].type includes "Pricing" |
| Privacy policy | 4 / 4 | common[].type includes "PrivacyPolicy" (alias-aware) |
| Terms of service | 4 / 4 | common[].type includes "TermsOfService" (alias-aware) |
| Compliance published | 3 / 3 | common[].type includes "Compliance" |
| Trust center | 3 / 3 | common[].type includes "TrustCenter" or "Trust" |
| Regulatory — 36 of 94 points | ||
| Authentication model documented | 6 / 6 | common[].type includes "Authentication" or "OpenIDConnect" |
| Security posture published | 6 / 6 | common[].type includes "Security" or "DomainSecurity" |
| Vulnerability disclosure program | 6 / 6 | common[].type includes "VulnerabilityDisclosure" |
| Compliance / certification disclosure | 5 / 5 | common[].type includes "Compliance" or "TrustCenter" or "Trust" |
| Data-standard conformance | 5 / 5 | implements a recognized data standard — common[].type includes "Standard"/"Conformance", or a Vocabulary/JSON-LD context is published |
| Privacy policy (data handling) | 4 / 4 | common[].type includes "PrivacyPolicy" |
| Terms of service (legal basis) | 4 / 4 | common[].type includes "TermsOfService" |
| Agent readiness — 9.4 of 30 points | ||
| Typed Event Surface | 5.4 / 6 | AsyncAPI document, OR webhooks/callbacks objects in the as-published OpenAPI, OR common[].type includes Webhooks |
| Stable Error Semantics | 4 / 8 | OpenAPI $refs a shared error schema across 4xx/5xx responses (verified), else common[].type includes ErrorCatalog / ErrorCodes / DeclineCodes |
What the file does not say yet
111.9 more points depend on entries this file does not have. A missing pointer means the file does not link to it. It does not mean Fleet has not published it.
- Consent-scoped authorization (10 pts) —
common[].type includes "OAuthScopes" OR a scopes artifact is present - Idempotency (9 pts) —
OpenAPI mutating operations declare an idempotency key — a header, a request-body property, or a named de-duplication token whose own description says so (verified); else common[].type matches /idempoten/i (documented) - Publishes a vocabulary (5 pts) —
common[].type includes "Vocabulary" - Accessibility conformance report (4 pts) —
common[].type includes "AccessibilityConformance" - Age assurance (4 pts) —
common[].type includes "AgeAssurance" - Data residency statement (4 pts) —
common[].type includes "DataResidency" - Data-subject request route (4 pts) —
common[].type includes "DataSubjectRequest" - Declared support lifetime (4 pts) —
common[].type includes "SupportLifetime" - Exit assistance / switching terms (4 pts) —
common[].type includes "ExitAssistance" - Global Privacy Control honoured (4 pts) —
common[].type includes "GlobalPrivacyControl" - Incident notification commitment (4 pts) —
common[].type includes "IncidentNotification" - Notice-and-action mechanism (4 pts) —
common[].type includes "NoticeAndAction" - Published example corpus (4 pts) —
common[].type includes "Examples" (alias-aware: CodeExamples, Samples, CodeSamples, Demos) - Self-hosts the APIs.json index (4 pts) —
apis.yml url points at a host the provider controls, not the catalog - Software bill of materials (4 pts) —
common[].type includes "SBOM" - Subprocessor list (4 pts) —
common[].type includes "Subprocessors" - Three or more SDKs (4 pts) —
count(common[].type == "SDK" alias-aware) >= 3 - Transparency report (4 pts) —
common[].type includes "TransparencyReport" - Well-Known Catalog (4 pts) —
common[].type includes WellKnown, APICatalog, or api-catalog - At least one SDK (3 pts) —
count(common[].type == "SDK" alias-aware) >= 1 - Consent & Bot Identity (3 pts) —
common[].type includes AIPREF, ContentSignal, WebBotAuth, or HTTPMessageSignatures - Console or sandbox (3 pts) —
common[].type includes "Console" or "Sandbox" or "Playground" - Deprecation policy (3 pts) —
common[].type includes "Deprecation" (alias-aware) - Postman collection (2 pts) —
common[].type includes "Postman" (alias-aware), graded by who authored it - Public roadmap (2 pts) —
common[].type includes "RoadMap" or "Roadmap" - Leadership page (1 pt) —
common[].type includes Leadership, LeadershipTeam, Management or ExecutiveTeam - Newsroom (1 pt) —
common[].type includes Newsroom, PressReleases, Press or News
Who keeps this file
API Evangelist maintains this file at github.com/api-evangelist/fleet. If you work at Fleet, you can open an issue or a pull request to add or correct an entry. You can also publish your own APIs.json at /.well-known/apis.json on your domain, which earns the self-hosting check and makes the file yours.
See the full rating on the Fleet profile, and how every check is scored at apis.io/rating.