What is in the Automattic apis.yml

Automattic on APIs.io — Kin Score by API Evangelist

Automattic is profiled on APIs.io from a single APIs.json file, apis.yml. Automattic is the company behind WordPress.com, Jetpack, WooCommerce, Tumblr, Gravatar, Akismet, WordPress VIP, Pocket Casts, Day One, Beeper and Simplenote. The file indexes 385 APIs and 56 common properties. 64 Kin Score checks read this file, and it earns 173.8 of their 267 points. Automattic scored 54.5 (strong) on 2026-10-30; the badge above is live and shows the current score.

What the file contains

  • 16 tags: Company, Content Management, Publishing, Blogging, Website Hosting, Web Publishing, Content, Comments, Spam Filtering, Media, Analytics, Domains…
  • Specification version: 0.23
  • Created: 2026-07-31
  • Modified: 2026-10-06
  • Maintainers: 2 listed

Common properties (49 types) apply across every API in the file:

AgenticAccess · AgentSkill · APIReference · Authentication · Blog · BlogRSS · ChangeLog · CLI · Compliance · Components · Conformance · Console · Conventions · DataModel · DeveloperPortal · Documentation · DomainSecurity · ErrorCatalog · GettingStarted · GitHubOrganization · IssueTracker · Lifecycle · LLMsTxt · Login · MCPServer · OAuthScopes · OpenIDConnect · Overlay · Packages · Plans · Pricing · PrivacyPolicy · ReleaseNotes · Releases · Sandbox · SDKs · SecondaryMarketListing · Security · SecurityTxt · SignUp · StatusPage · Support · TermsOfService · ToolCrosswalk · TrustCenter · VulnerabilityDisclosure · Webhooks · Website · WellKnown

APIs (385), the first 12:

How the file drives the Kin Score

64 checks in rubric 0.25.0 read this file. 38 are earned, 2 partly, and 24 are not.

CheckPointsWhat it reads
Discoverability — 37 of 43 points
Publishes an apis.yml index10 / 10source_filename == "apis.yml"
Base URL on every API5 / 5every api has baseURL and no baseURL contains "localhost"
Human URL on every API5 / 5every api has humanURL
Substantive description5 / 5len(description) >= 200
Tagged for discovery5 / 5len(tags) >= 5
Named maintainer3 / 3maintainers[0].email is set
Created and modified dates2 / 2created and modified both ISO dates
Provider image2 / 2image is set
Operational transparency — 20 of 26 points
Change log6 / 6common[].type includes "ChangeLog" (alias-aware)
Status page6 / 6common[].type includes "StatusPage"
Security disclosure4 / 4common[].type includes "Security" (alias-aware)
Webhooks advertised3 / 3common[].type includes "Webhooks"
GitHub organization1 / 2common[].type includes "GitHubOrganization" or "GitHubRepository" (alias-aware)
Developer ergonomics — 33.8 of 42 points
Authentication documented5 / 5common[].type includes "Authentication"
Getting started guide5 / 5common[].type includes "GettingStarted" or "Quickstart"
Developer portal4 / 4common[].type includes "DeveloperPortal" (alias-aware)
Documentation4 / 4common[].type includes "Documentation"
API reference3 / 3common[].type includes "APIReference" (alias-aware)
At least one SDK3 / 3count(common[].type == "SDK" alias-aware) >= 1
Command-line interface3 / 3common[].type includes "CLI"
Console or sandbox3 / 3common[].type includes "Console" or "Sandbox" or "Playground"
Support channel2 / 2common[].type includes "Support" or "HelpCenter" or "Community"
Blog1 / 1common[].type includes "Blog"
Agent Skill0.8 / 3common[].type includes "AgentSkill", graded by who authored it
Access clarity — 23 of 23 points
Self-service sign-up5 / 5common[].type includes "SignUp" or "Login"
Pricing published4 / 4common[].type includes "Pricing"
Privacy policy4 / 4common[].type includes "PrivacyPolicy" (alias-aware)
Terms of service4 / 4common[].type includes "TermsOfService" (alias-aware)
Compliance published3 / 3common[].type includes "Compliance"
Trust center3 / 3common[].type includes "TrustCenter" or "Trust"
Regulatory — 46 of 94 points
Consent-scoped authorization10 / 10common[].type includes "OAuthScopes" OR a scopes artifact is present
Authentication model documented6 / 6common[].type includes "Authentication" or "OpenIDConnect"
Security posture published6 / 6common[].type includes "Security" or "DomainSecurity"
Vulnerability disclosure program6 / 6common[].type includes "VulnerabilityDisclosure"
Compliance / certification disclosure5 / 5common[].type includes "Compliance" or "TrustCenter" or "Trust"
Data-standard conformance5 / 5implements a recognized data standard — common[].type includes "Standard"/"Conformance", or a Vocabulary/JSON-LD context is published
Privacy policy (data handling)4 / 4common[].type includes "PrivacyPolicy"
Terms of service (legal basis)4 / 4common[].type includes "TermsOfService"
Agent readiness — 14 of 30 points
Stable Error Semantics8 / 8OpenAPI $refs a shared error schema across 4xx/5xx responses (verified), else common[].type includes ErrorCatalog / ErrorCodes / DeclineCodes
Typed Event Surface6 / 6AsyncAPI document, OR webhooks/callbacks objects in the as-published OpenAPI, OR common[].type includes Webhooks

What the file does not say yet

93.2 more points depend on entries this file does not have. A missing pointer means the file does not link to it. It does not mean Automattic has not published it.

  • Idempotency (9 pts) — OpenAPI mutating operations declare an idempotency key — a header, a request-body property, or a named de-duplication token whose own description says so (verified); else common[].type matches /idempoten/i (documented)
  • Publishes a vocabulary (5 pts) — common[].type includes "Vocabulary"
  • Accessibility conformance report (4 pts) — common[].type includes "AccessibilityConformance"
  • Age assurance (4 pts) — common[].type includes "AgeAssurance"
  • Data residency statement (4 pts) — common[].type includes "DataResidency"
  • Data-subject request route (4 pts) — common[].type includes "DataSubjectRequest"
  • Declared support lifetime (4 pts) — common[].type includes "SupportLifetime"
  • Exit assistance / switching terms (4 pts) — common[].type includes "ExitAssistance"
  • Global Privacy Control honoured (4 pts) — common[].type includes "GlobalPrivacyControl"
  • Incident notification commitment (4 pts) — common[].type includes "IncidentNotification"
  • Notice-and-action mechanism (4 pts) — common[].type includes "NoticeAndAction"
  • Published example corpus (4 pts) — common[].type includes "Examples" (alias-aware: CodeExamples, Samples, CodeSamples, Demos)
  • Self-hosts the APIs.json index (4 pts) — apis.yml url points at a host the provider controls, not the catalog
  • Software bill of materials (4 pts) — common[].type includes "SBOM"
  • Subprocessor list (4 pts) — common[].type includes "Subprocessors"
  • Three or more SDKs (4 pts) — count(common[].type == "SDK" alias-aware) >= 3
  • Transparency report (4 pts) — common[].type includes "TransparencyReport"
  • Well-Known Catalog (4 pts) — common[].type includes WellKnown, APICatalog, or api-catalog
  • Consent & Bot Identity (3 pts) — common[].type includes AIPREF, ContentSignal, WebBotAuth, or HTTPMessageSignatures
  • Deprecation policy (3 pts) — common[].type includes "Deprecation" (alias-aware)
  • Postman collection (2 pts) — common[].type includes "Postman" (alias-aware), graded by who authored it
  • Public roadmap (2 pts) — common[].type includes "RoadMap" or "Roadmap"
  • Leadership page (1 pt) — common[].type includes Leadership, LeadershipTeam, Management or ExecutiveTeam
  • Newsroom (1 pt) — common[].type includes Newsroom, PressReleases, Press or News

Who keeps this file

API Evangelist maintains this file at github.com/api-evangelist/automattic. If you work at Automattic, you can open an issue or a pull request to add or correct an entry. You can also publish your own APIs.json at /.well-known/apis.json on your domain, which earns the self-hosting check and makes the file yours.

See the full rating on the Automattic profile, and how every check is scored at apis.io/rating.

← What is in the Fleet apis.yml
What is in the Mintlify apis.yml →