Codesignal is profiled on APIs.io from a single APIs.json file, apis.yml. CodeSignal is a technical interview and skills-assessment platform used by companies to screen, interview, and upskill software engineers. The file indexes 3 APIs and 34 common properties. 63 Kin Score checks read this file, and it earns 138.8 of their 258 points. Codesignal scored 56.5 (strong) on 2026-11-07; the badge above is live and shows the current score.
What the file contains
- 10 tags: Company, Technical Interview, Skills Assessment, Hiring, Recruiting, Developer Skills, Assessment, Education, GraphQL, Webhook
- Specification version: 0.23
- Created: 2026-07-17
- Modified: 2026-10-06
- Maintainers: 2 listed
Common properties (33 types) apply across every API in the file:
AgentSkill · APIReference · Authentication · Blog · BlogRSS · CapabilityMap · Conformance · Conventions · DataModel · DeveloperPortal · Documentation · DomainSecurity · ErrorCatalog · GitHubOrganization · Lifecycle · LLMsTxt · MCPServer · OAuthScopes · Overlay · Plans · Pricing · PrivacyPolicy · Security · SecurityTxt · SignUp · StatusPage · Support · TermsOfService · TrustCenter · VulnerabilityDisclosure · Webhooks · Website · WellKnown
APIs (3):
- CodeSignal GraphQL API — Documentation, GraphQL
- CodeSignal Webhook API — Webhooks
- Codesignal Organization API — OpenAPI
How the file drives the Kin Score
63 checks in rubric 0.26.0 read this file. 30 are earned, 3 partly, and 30 are not.
| Check | Points | What it reads |
|---|---|---|
| Discoverability — 37 of 43 points | ||
| Publishes an apis.yml index | 10 / 10 | source_filename == "apis.yml" |
| Base URL on every API | 5 / 5 | every api has baseURL and no baseURL contains "localhost" |
| Human URL on every API | 5 / 5 | every api has humanURL |
| Substantive description | 5 / 5 | len(description) >= 200 |
| Tagged for discovery | 5 / 5 | len(tags) >= 5 |
| Named maintainer | 3 / 3 | maintainers[0].email is set |
| Created and modified dates | 2 / 2 | created and modified both ISO dates |
| Provider image | 2 / 2 | image is set |
| Operational transparency — 14 of 26 points | ||
| Status page | 6 / 6 | common[].type includes "StatusPage" |
| Security disclosure | 4 / 4 | common[].type includes "Security" (alias-aware) |
| Webhooks advertised | 3 / 3 | common[].type includes "Webhooks" |
| GitHub organization | 1 / 2 | common[].type includes "GitHubOrganization" or "GitHubRepository" (alias-aware) |
| Developer ergonomics — 19.8 of 42 points | ||
| Authentication documented | 5 / 5 | common[].type includes "Authentication" |
| Developer portal | 4 / 4 | common[].type includes "DeveloperPortal" (alias-aware) |
| Documentation | 4 / 4 | common[].type includes "Documentation" |
| API reference | 3 / 3 | common[].type includes "APIReference" (alias-aware) |
| Support channel | 2 / 2 | common[].type includes "Support" or "HelpCenter" or "Community" |
| Blog | 1 / 1 | common[].type includes "Blog" |
| Agent Skill | 0.8 / 3 | common[].type includes "AgentSkill", graded by who authored it |
| Access clarity — 15 of 23 points | ||
| Pricing published | 4 / 4 | common[].type includes "Pricing" |
| Privacy policy | 4 / 4 | common[].type includes "PrivacyPolicy" (alias-aware) |
| Terms of service | 4 / 4 | common[].type includes "TermsOfService" (alias-aware) |
| Trust center | 3 / 3 | common[].type includes "TrustCenter" or "Trust" |
| Regulatory — 46 of 94 points | ||
| Consent-scoped authorization | 10 / 10 | common[].type includes "OAuthScopes" OR a scopes artifact is present |
| Authentication model documented | 6 / 6 | common[].type includes "Authentication" or "OpenIDConnect" |
| Security posture published | 6 / 6 | common[].type includes "Security" or "DomainSecurity" |
| Vulnerability disclosure program | 6 / 6 | common[].type includes "VulnerabilityDisclosure" |
| Compliance / certification disclosure | 5 / 5 | common[].type includes "Compliance" or "TrustCenter" or "Trust" |
| Data-standard conformance | 5 / 5 | implements a recognized data standard — common[].type includes "Standard"/"Conformance", or a Vocabulary/JSON-LD context is published |
| Privacy policy (data handling) | 4 / 4 | common[].type includes "PrivacyPolicy" |
| Terms of service (legal basis) | 4 / 4 | common[].type includes "TermsOfService" |
| Agent readiness — 7 of 21 points | ||
| Typed Event Surface | 6 / 6 | AsyncAPI document, OR webhooks/callbacks objects in the as-published OpenAPI, OR common[].type includes Webhooks |
| Stable Error Semantics | 1 / 8 | OpenAPI $refs a shared error schema across 4xx/5xx responses (verified), else common[].type includes ErrorCatalog / ErrorCodes / DeclineCodes |
What the file does not say yet
119.2 more points depend on entries this file does not have. A missing pointer means the file does not link to it. It does not mean Codesignal has not published it.
- Change log (6 pts) —
common[].type includes "ChangeLog" (alias-aware) - Getting started guide (5 pts) —
common[].type includes "GettingStarted" or "Quickstart" - Publishes a vocabulary (5 pts) —
common[].type includes "Vocabulary" - Self-service sign-up (5 pts) —
common[].type includes "SignUp" or "Login" - Accessibility conformance report (4 pts) —
common[].type includes "AccessibilityConformance" - Age assurance (4 pts) —
common[].type includes "AgeAssurance" - Data residency statement (4 pts) —
common[].type includes "DataResidency" - Data-subject request route (4 pts) —
common[].type includes "DataSubjectRequest" - Declared support lifetime (4 pts) —
common[].type includes "SupportLifetime" - Exit assistance / switching terms (4 pts) —
common[].type includes "ExitAssistance" - Global Privacy Control honoured (4 pts) —
common[].type includes "GlobalPrivacyControl" - Incident notification commitment (4 pts) —
common[].type includes "IncidentNotification" - Notice-and-action mechanism (4 pts) —
common[].type includes "NoticeAndAction" - Published example corpus (4 pts) —
common[].type includes "Examples" (alias-aware: CodeExamples, Samples, CodeSamples, Demos) - Self-hosts the APIs.json index (4 pts) —
apis.yml url points at a host the provider controls, not the catalog - Software bill of materials (4 pts) —
common[].type includes "SBOM" - Subprocessor list (4 pts) —
common[].type includes "Subprocessors" - Three or more SDKs (4 pts) —
count(common[].type == "SDK" alias-aware) >= 3 - Transparency report (4 pts) —
common[].type includes "TransparencyReport" - Well-Known Catalog (4 pts) —
common[].type includes WellKnown, APICatalog, or api-catalog - At least one SDK (3 pts) —
count(common[].type == "SDK" alias-aware) >= 1 - Command-line interface (3 pts) —
common[].type includes "CLI" - Compliance published (3 pts) —
common[].type includes "Compliance" - Consent & Bot Identity (3 pts) —
common[].type includes AIPREF, ContentSignal, WebBotAuth, or HTTPMessageSignatures - Console or sandbox (3 pts) —
common[].type includes "Console" or "Sandbox" or "Playground" - Deprecation policy (3 pts) —
common[].type includes "Deprecation" (alias-aware) - Postman collection (2 pts) —
common[].type includes "Postman" (alias-aware), graded by who authored it - Public roadmap (2 pts) —
common[].type includes "RoadMap" or "Roadmap" - Leadership page (1 pt) —
common[].type includes Leadership, LeadershipTeam, Management or ExecutiveTeam - Newsroom (1 pt) —
common[].type includes Newsroom, PressReleases, Press or News
Who keeps this file
API Evangelist maintains this file at github.com/api-evangelist/codesignal. If you work at Codesignal, you can open an issue or a pull request to add or correct an entry. You can also publish your own APIs.json at /.well-known/apis.json on your domain, which earns the self-hosting check and makes the file yours.
See the full rating on the Codesignal profile, and how every check is scored at apis.io/rating.