For API providers
See who is really using your API
See which businesses and products really use your API, spot the ones your terms don't allow, and keep an audit trail your compliance team can rely on, next to the errors and requests your API serves.
Plans: Server errors on every plan · requests and API calls from Starter · API Trust as an add-on · See pricing
- checkout.example-shop.comWebsite Allowed
- com.example.walletMobile app Allowed
- promo.example-site.netWebsite Outside your terms
- Server networkServerNot reviewed
What you get
- Every consumer of your APIEach business calling your API, by its API key, JWT or OAuth2 client, or client certificate, with how much it calls and when.Add-on
- The products behind the callsThe websites, mobile apps and servers each consumer's traffic comes from, and what kind of business each one is.Add-on
- Findings when your terms are crossedChoose the kinds of business your terms don't allow, including your own categories, and review each finding: confirm, dismiss, allow or block.Add-on
- An audit trail you can verifyEvery policy change and decision in a record that can't be edited or deleted, plus an evidence file per consumer for compliance or a partner dispute.Add-on
- Your API's errors and requestsErrors from your API in Python, Node.js, Java, Go or PHP on every plan, and from Starter the requests it serves and the APIs it calls.Every plan
- Alerts on failures and slowdownsAlert rules for new errors, spikes, regressions and slow or failing APIs, sent to Slack, WhatsApp, email or a webhook.Starter and above
Workflow
One SDK for monitoring and API Trust
The server SDK that monitors your API also feeds API Trust, so there's one integration to add.
- 1
Add a Codeskop server SDK
Errors on every plan; the requests your API serves and the calls it makes from Starter.
Every plan - 2
Say how you identify consumers
An API-key header, a JWT or OAuth2 claim, or the client certificate.
Add-on - 3
Choose what your terms don't allow
Pick the business categories that are off-limits for your API, or add your own.
Add-on - 4
Review and decide
Work through findings, allow or block consumers, and keep the record for your compliance team or a partner.
Add-on
Frequently asked questions
Do we need a different SDK for API Trust?
No. It uses the same server SDK that monitors your API: Python, Node.js, Java and Kotlin, Go or PHP.
Does Codeskop see our consumers' API keys?
No. Raw consumer IDs never leave your servers, client IP addresses are hashed before they're stored, and request and response bodies, cookies and Authorization headers are never captured.
Will it block traffic on its own?
No. Blocking is off until you turn it on, and only consumers you've chosen to block are refused.
How do we get API Trust?
It's an add-on for API providers. Talk to us and we'll set it up for your organization.
Know what broke. Fix it faster.
Bring your whole team into the same issues.
Set up in minutes. Free plan for up to 5 team members, no credit card required.