iOS is profiled on APIs.io from a single APIs.json file, apis.yml. iOS is Apple's mobile operating system and the developer platform behind iPhone apps. The file indexes 199 APIs and 47 common properties. 64 Kin Score checks read this file, and it earns 145 of their 267 points. iOS scored 59.1 (strong) on 2026-11-09; the badge above is live and shows the current score.
What the file contains
- 9 tags: iOS, Apple, Mobile, App Store, Push Notifications, In-App Purchases, Subscription, Authentication, Developer Platform
- Specification version: 0.23
- Created: 2026-05-11
- Modified: 2026-05-23
- Maintainers: 1 listed
Common properties (35 types) apply across every API in the file:
AgenticAccess · APIReference · Arazzo · AsyncAPI · Authentication · Blog · Capabilities · CapabilityMap · DeveloperPortal · Documentation · DomainSecurity · Events · FinOps · Forums · GitHubOrganization · JSONLD · JSONSchema · OpenAPI · Plans · Portal · PostmanWorkspace · Pricing · Privacy · RateLimits · ReleaseNotes · RSS · Signup · Spectral · StatusPage · Support · TermsOfService · Vocabulary · VulnerabilityDisclosure · Website · YouTube
APIs (199), the first 12:
- App Store Server API — APIReference, Documentation, SDKs, Sandbox
- App Store Server Notifications — APIReference, AsyncAPI, Documentation
- Apple Push Notification Service (APNs) — APIReference, Authentication, Documentation, Sandbox
- DeviceCheck and App Attest — APIReference, Documentation, Sandbox
- Sign in with Apple REST API — APIReference, Authentication, Documentation
- Apple Music API — APIReference, Authentication, Documentation
- Wallet / PassKit Web Service — APIReference, Documentation
- iOS AccessibilityDeclarations API — APIReference, Authentication, Documentation, GettingStarted, OpenAPI, ReleaseNotes, SDKs
- iOS Actors API — APIReference, Authentication, Documentation, GettingStarted, OpenAPI, ReleaseNotes, SDKs
- iOS AgeRatingDeclarations API — APIReference, Authentication, Documentation, GettingStarted, OpenAPI, ReleaseNotes, SDKs
- iOS AlternativeDistributionDomains API — APIReference, Authentication, Documentation, GettingStarted, OpenAPI, ReleaseNotes, SDKs
- iOS AlternativeDistributionKeys API — APIReference, Authentication, Documentation, GettingStarted, OpenAPI, ReleaseNotes, SDKs
How the file drives the Kin Score
64 checks in rubric 0.26.0 read this file. 31 are earned, 4 partly, and 29 are not.
| Check | Points | What it reads |
|---|---|---|
| Discoverability — 32 of 43 points | ||
| Publishes an apis.yml index | 10 / 10 | source_filename == "apis.yml" |
| Human URL on every API | 5 / 5 | every api has humanURL |
| Substantive description | 5 / 5 | len(description) >= 200 |
| Tagged for discovery | 5 / 5 | len(tags) >= 5 |
| Named maintainer | 3 / 3 | maintainers[0].email is set |
| Created and modified dates | 2 / 2 | created and modified both ISO dates |
| Provider image | 2 / 2 | image is set |
| Contract governance — 4.5 of 5 points | ||
| Publishes a vocabulary | 4.5 / 5 | common[].type includes "Vocabulary" |
| Operational transparency — 18 of 26 points | ||
| Change log | 6 / 6 | common[].type includes "ChangeLog" (alias-aware) |
| Status page | 6 / 6 | common[].type includes "StatusPage" |
| Security disclosure | 4 / 4 | common[].type includes "Security" (alias-aware) |
| GitHub organization | 2 / 2 | common[].type includes "GitHubOrganization" or "GitHubRepository" (alias-aware) |
| Developer ergonomics — 33 of 42 points | ||
| Authentication documented | 5 / 5 | common[].type includes "Authentication" |
| Getting started guide | 5 / 5 | common[].type includes "GettingStarted" or "Quickstart" |
| Developer portal | 4 / 4 | common[].type includes "DeveloperPortal" (alias-aware) |
| Documentation | 4 / 4 | common[].type includes "Documentation" |
| Three or more SDKs | 4 / 4 | count(common[].type == "SDK" alias-aware) >= 3 |
| API reference | 3 / 3 | common[].type includes "APIReference" (alias-aware) |
| At least one SDK | 3 / 3 | count(common[].type == "SDK" alias-aware) >= 1 |
| Support channel | 2 / 2 | common[].type includes "Support" or "HelpCenter" or "Community" |
| Console or sandbox | 1.5 / 3 | common[].type includes "Console" or "Sandbox" or "Playground" |
| Blog | 1 / 1 | common[].type includes "Blog" |
| Postman collection | 0.5 / 2 | common[].type includes "Postman" (alias-aware), graded by who authored it |
| Access clarity — 17 of 23 points | ||
| Self-service sign-up | 5 / 5 | common[].type includes "SignUp" or "Login" |
| Pricing published | 4 / 4 | common[].type includes "Pricing" |
| Privacy policy | 4 / 4 | common[].type includes "PrivacyPolicy" (alias-aware) |
| Terms of service | 4 / 4 | common[].type includes "TermsOfService" (alias-aware) |
| Regulatory — 31 of 94 points | ||
| Authentication model documented | 6 / 6 | common[].type includes "Authentication" or "OpenIDConnect" |
| Security posture published | 6 / 6 | common[].type includes "Security" or "DomainSecurity" |
| Vulnerability disclosure program | 6 / 6 | common[].type includes "VulnerabilityDisclosure" |
| Data-standard conformance | 5 / 5 | implements a recognized data standard — common[].type includes "Standard"/"Conformance", or a Vocabulary/JSON-LD context is published |
| Privacy policy (data handling) | 4 / 4 | common[].type includes "PrivacyPolicy" |
| Terms of service (legal basis) | 4 / 4 | common[].type includes "TermsOfService" |
| Agent readiness — 9.5 of 30 points | ||
| Stable Error Semantics | 8 / 8 | OpenAPI $refs a shared error schema across 4xx/5xx responses (verified), else common[].type includes ErrorCatalog / ErrorCodes / DeclineCodes |
| Typed Event Surface | 1.5 / 6 | AsyncAPI document, OR webhooks/callbacks objects in the as-published OpenAPI, OR common[].type includes Webhooks |
What the file does not say yet
122 more points depend on entries this file does not have. A missing pointer means the file does not link to it. It does not mean iOS has not published it.
- Consent-scoped authorization (10 pts) —
common[].type includes "OAuthScopes" OR a scopes artifact is present - Idempotency (9 pts) —
OpenAPI mutating operations declare an idempotency key — a header, a request-body property, or a named de-duplication token whose own description says so (verified); else common[].type matches /idempoten/i (documented) - Base URL on every API (5 pts) —
every api has baseURL and no baseURL contains "localhost" - Compliance / certification disclosure (5 pts) —
common[].type includes "Compliance" or "TrustCenter" or "Trust" - Accessibility conformance report (4 pts) —
common[].type includes "AccessibilityConformance" - Age assurance (4 pts) —
common[].type includes "AgeAssurance" - Data residency statement (4 pts) —
common[].type includes "DataResidency" - Data-subject request route (4 pts) —
common[].type includes "DataSubjectRequest" - Declared support lifetime (4 pts) —
common[].type includes "SupportLifetime" - Exit assistance / switching terms (4 pts) —
common[].type includes "ExitAssistance" - Global Privacy Control honoured (4 pts) —
common[].type includes "GlobalPrivacyControl" - Incident notification commitment (4 pts) —
common[].type includes "IncidentNotification" - Notice-and-action mechanism (4 pts) —
common[].type includes "NoticeAndAction" - Published example corpus (4 pts) —
common[].type includes "Examples" (alias-aware: CodeExamples, Samples, CodeSamples, Demos) - Self-hosts the APIs.json index (4 pts) —
apis.yml url points at a host the provider controls, not the catalog - Software bill of materials (4 pts) —
common[].type includes "SBOM" - Subprocessor list (4 pts) —
common[].type includes "Subprocessors" - Transparency report (4 pts) —
common[].type includes "TransparencyReport" - Well-Known Catalog (4 pts) —
common[].type includes WellKnown, APICatalog, or api-catalog - Agent Skill (3 pts) —
common[].type includes "AgentSkill", graded by who authored it - Command-line interface (3 pts) —
common[].type includes "CLI" - Compliance published (3 pts) —
common[].type includes "Compliance" - Consent & Bot Identity (3 pts) —
common[].type includes AIPREF, ContentSignal, WebBotAuth, or HTTPMessageSignatures - Deprecation policy (3 pts) —
common[].type includes "Deprecation" (alias-aware) - Trust center (3 pts) —
common[].type includes "TrustCenter" or "Trust" - Webhooks advertised (3 pts) —
common[].type includes "Webhooks" - Public roadmap (2 pts) —
common[].type includes "RoadMap" or "Roadmap" - Leadership page (1 pt) —
common[].type includes Leadership, LeadershipTeam, Management or ExecutiveTeam - Newsroom (1 pt) —
common[].type includes Newsroom, PressReleases, Press or News
Who keeps this file
API Evangelist maintains this file at github.com/api-evangelist/ios. If you work at iOS, you can open an issue or a pull request to add or correct an entry. You can also publish your own APIs.json at /.well-known/apis.json on your domain, which earns the self-hosting check and makes the file yours.
See the full rating on the iOS profile, and how every check is scored at apis.io/rating.