Firma.dev is profiled on APIs.io from a single APIs.json file, apis.yml. Firma.dev provides an electronic signature API for developers, with pay-as-you-go pricing starting at €0.049 per envelope and no minimums or contracts. The file indexes 12 APIs and 38 common properties. 64 Kin Score checks read this file, and it earns 127 of their 267 points. Firma.dev scored 63.3 (strong) on 2026-11-02; the badge above is live and shows the current score.
What the file contains
- 4 tags: Company, E-Signature, Developer Tools, LowCost
- Specification version: 0.20
- Created: 2026-09-25
- Modified: 2026-10-06
- Maintainers: 2 listed
Common properties (35 types) apply across every API in the file:
AgentCard · AgenticAccess · AgentSkill · APIReference · Authentication · Blog · CapabilityMap · Compliance · Conformance · DataModel · Documentation · DomainSecurity · ErrorCatalog · GettingStarted · Hosts · JSONLD · LLMsTxt · MCPServer · Newsroom · Plans · Postman · Pricing · PrivacyPolicy · Security · SignUp · Spectral · StatusPage · Support · TermsOfService · ToolCrosswalk · TrustCenter · Vendors · Vocabulary · Webhooks · Website
APIs (12):
- Firma.dev Company API — JSONSchema, OpenAPI
- Firma.dev Custom Fields API — JSONSchema, OpenAPI
- Firma.dev Email Domains API — JSONSchema, OpenAPI
- Firma.dev Email Templates API — JSONSchema, OpenAPI
- Firma.dev JWT Management API — JSONSchema, OpenAPI
- Firma.dev Organization Seals API — JSONSchema, OpenAPI
- Firma.dev Signer Terms API — JSONSchema, OpenAPI
- Firma.dev Signing Requests API — JSONSchema, OpenAPI
- Firma.dev Templates API — JSONSchema, OpenAPI
- Firma.dev Webhooks API — JSONSchema, OpenAPI
- Firma.dev Workspace Settings API — JSONSchema, OpenAPI
- Firma.dev Workspaces API — JSONSchema, OpenAPI
How the file drives the Kin Score
64 checks in rubric 0.26.0 read this file. 30 are earned, 2 partly, and 32 are not.
| Check | Points | What it reads |
|---|---|---|
| Discoverability — 23 of 43 points | ||
| Publishes an apis.yml index | 10 / 10 | source_filename == "apis.yml" |
| Substantive description | 5 / 5 | len(description) >= 200 |
| Named maintainer | 3 / 3 | maintainers[0].email is set |
| Created and modified dates | 2 / 2 | created and modified both ISO dates |
| Provider image | 2 / 2 | image is set |
| Newsroom | 1 / 1 | common[].type includes Newsroom, PressReleases, Press or News |
| Contract governance — 1.2 of 5 points | ||
| Publishes a vocabulary | 1.2 / 5 | common[].type includes "Vocabulary" |
| Operational transparency — 13 of 26 points | ||
| Status page | 6 / 6 | common[].type includes "StatusPage" |
| Security disclosure | 4 / 4 | common[].type includes "Security" (alias-aware) |
| Webhooks advertised | 3 / 3 | common[].type includes "Webhooks" |
| Developer ergonomics — 22.8 of 42 points | ||
| Authentication documented | 5 / 5 | common[].type includes "Authentication" |
| Getting started guide | 5 / 5 | common[].type includes "GettingStarted" or "Quickstart" |
| Documentation | 4 / 4 | common[].type includes "Documentation" |
| API reference | 3 / 3 | common[].type includes "APIReference" (alias-aware) |
| Postman collection | 2 / 2 | common[].type includes "Postman" (alias-aware), graded by who authored it |
| Support channel | 2 / 2 | common[].type includes "Support" or "HelpCenter" or "Community" |
| Blog | 1 / 1 | common[].type includes "Blog" |
| Agent Skill | 0.8 / 3 | common[].type includes "AgentSkill", graded by who authored it |
| Access clarity — 23 of 23 points | ||
| Self-service sign-up | 5 / 5 | common[].type includes "SignUp" or "Login" |
| Pricing published | 4 / 4 | common[].type includes "Pricing" |
| Privacy policy | 4 / 4 | common[].type includes "PrivacyPolicy" (alias-aware) |
| Terms of service | 4 / 4 | common[].type includes "TermsOfService" (alias-aware) |
| Compliance published | 3 / 3 | common[].type includes "Compliance" |
| Trust center | 3 / 3 | common[].type includes "TrustCenter" or "Trust" |
| Regulatory — 30 of 94 points | ||
| Authentication model documented | 6 / 6 | common[].type includes "Authentication" or "OpenIDConnect" |
| Security posture published | 6 / 6 | common[].type includes "Security" or "DomainSecurity" |
| Compliance / certification disclosure | 5 / 5 | common[].type includes "Compliance" or "TrustCenter" or "Trust" |
| Data-standard conformance | 5 / 5 | implements a recognized data standard — common[].type includes "Standard"/"Conformance", or a Vocabulary/JSON-LD context is published |
| Privacy policy (data handling) | 4 / 4 | common[].type includes "PrivacyPolicy" |
| Terms of service (legal basis) | 4 / 4 | common[].type includes "TermsOfService" |
| Agent readiness — 14 of 30 points | ||
| Stable Error Semantics | 8 / 8 | OpenAPI $refs a shared error schema across 4xx/5xx responses (verified), else common[].type includes ErrorCatalog / ErrorCodes / DeclineCodes |
| Typed Event Surface | 6 / 6 | AsyncAPI document, OR webhooks/callbacks objects in the as-published OpenAPI, OR common[].type includes Webhooks |
What the file does not say yet
140 more points depend on entries this file does not have. A missing pointer means the file does not link to it. It does not mean Firma.dev has not published it.
- Consent-scoped authorization (10 pts) —
common[].type includes "OAuthScopes" OR a scopes artifact is present - Idempotency (9 pts) —
OpenAPI mutating operations declare an idempotency key — a header, a request-body property, or a named de-duplication token whose own description says so (verified); else common[].type matches /idempoten/i (documented) - Change log (6 pts) —
common[].type includes "ChangeLog" (alias-aware) - Vulnerability disclosure program (6 pts) —
common[].type includes "VulnerabilityDisclosure" - Base URL on every API (5 pts) —
every api has baseURL and no baseURL contains "localhost" - Human URL on every API (5 pts) —
every api has humanURL - Tagged for discovery (5 pts) —
len(tags) >= 5 - Accessibility conformance report (4 pts) —
common[].type includes "AccessibilityConformance" - Age assurance (4 pts) —
common[].type includes "AgeAssurance" - Data residency statement (4 pts) —
common[].type includes "DataResidency" - Data-subject request route (4 pts) —
common[].type includes "DataSubjectRequest" - Declared support lifetime (4 pts) —
common[].type includes "SupportLifetime" - Developer portal (4 pts) —
common[].type includes "DeveloperPortal" (alias-aware) - Exit assistance / switching terms (4 pts) —
common[].type includes "ExitAssistance" - Global Privacy Control honoured (4 pts) —
common[].type includes "GlobalPrivacyControl" - Incident notification commitment (4 pts) —
common[].type includes "IncidentNotification" - Notice-and-action mechanism (4 pts) —
common[].type includes "NoticeAndAction" - Published example corpus (4 pts) —
common[].type includes "Examples" (alias-aware: CodeExamples, Samples, CodeSamples, Demos) - Self-hosts the APIs.json index (4 pts) —
apis.yml url points at a host the provider controls, not the catalog - Software bill of materials (4 pts) —
common[].type includes "SBOM" - Subprocessor list (4 pts) —
common[].type includes "Subprocessors" - Three or more SDKs (4 pts) —
count(common[].type == "SDK" alias-aware) >= 3 - Transparency report (4 pts) —
common[].type includes "TransparencyReport" - Well-Known Catalog (4 pts) —
common[].type includes WellKnown, APICatalog, or api-catalog - At least one SDK (3 pts) —
count(common[].type == "SDK" alias-aware) >= 1 - Command-line interface (3 pts) —
common[].type includes "CLI" - Consent & Bot Identity (3 pts) —
common[].type includes AIPREF, ContentSignal, WebBotAuth, or HTTPMessageSignatures - Console or sandbox (3 pts) —
common[].type includes "Console" or "Sandbox" or "Playground" - Deprecation policy (3 pts) —
common[].type includes "Deprecation" (alias-aware) - GitHub organization (2 pts) —
common[].type includes "GitHubOrganization" or "GitHubRepository" (alias-aware) - Public roadmap (2 pts) —
common[].type includes "RoadMap" or "Roadmap" - Leadership page (1 pt) —
common[].type includes Leadership, LeadershipTeam, Management or ExecutiveTeam
Who keeps this file
API Evangelist maintains this file at github.com/api-evangelist/firma-dev. If you work at Firma.dev, you can open an issue or a pull request to add or correct an entry. You can also publish your own APIs.json at /.well-known/apis.json on your domain, which earns the self-hosting check and makes the file yours.
See the full rating on the Firma.dev profile, and how every check is scored at apis.io/rating.