aid: cerby
name: Cerby
description: Cerby is an identity, access, and password management platform for nonfederated and disconnected
  applications — the enterprise software that does not support SAML, SCIM, or an integration API of its
  own. Cerby extends existing IAM, IGA, and PAM systems to those applications through browser and robotic
  automation, adding provisioning and deprovisioning, credential rotation, MFA enrollment, and access
  governance where no standards-based integration exists. Cerby publishes a public RESTful API (JSON:API-style
  envelope, X-API-Key authentication, scoped API keys) over eight resources — accounts, secrets, collections,
  users, teams, integrations, jobs, and vaults — plus a signed webhook notification service, a cross-platform
  CLI, and SCIM 2.0 endpoints for provisioning from Okta, Entra ID, and OneLogin.
url: https://raw.githubusercontent.com/api-evangelist/cerby/refs/heads/main/apis.yml
image: https://www.cerby.com/hubfs/Logos/Cerby%20Favicon%20-%20Alternate.png
x-type: company
x-source: harvest:secondary-market
specificationVersion: '0.23'
created: '2026-08-09'
modified: '2026-08-09'
tags:
- Identity
- Access Management
- Security
- Password Management
- Provisioning
- SCIM
- Identity Governance
- Nonfederated Applications
- Automation
- Webhooks
apis:
- aid: cerby:cerby-api
  name: Cerby API
  description: The public Cerby REST API. Programmatic access to accounts, secrets, collections, users,
    teams, integrations, jobs, and vaults in a Cerby workspace. Requests are authenticated with a scoped
    API key sent in the X-API-Key header; responses use a JSON:API-style envelope of data, links, and
    meta objects with page[number]/page[size] pagination, filter[...] filtering, and sort ordering.
  humanURL: https://developer.cerby.com/
  baseURL: https://my-workspace.cerby.com/api/v1/
  tags:
  - Identity
  - Access Management
  - Secrets
  - Provisioning
  properties:
  - type: Documentation
    url: https://developer.cerby.com/
  - type: APIReference
    url: https://developer.cerby.com/#api-reference
  - type: Authentication
    url: authentication/cerby-authentication.yml
  - type: OAuthScopes
    url: scopes/cerby-scopes.yml
  - type: Conventions
    url: conventions/cerby-conventions.yml
  - type: Idempotency
    url: conventions/cerby-conventions.yml
  - type: ErrorCatalog
    url: errors/cerby-problem-types.yml
  - type: DataModel
    url: data-model/cerby-data-model.yml
- aid: cerby:cerby-webhooks
  name: Cerby Webhooks
  description: Cerby's webhook notification service delivers real-time signed HTTPS events for account,
    credential, MFA, and automation lifecycle changes. Deliveries carry a fixed JSON envelope (envelope_version,
    event_id, event_type, occurred_at, workspace_id, data), an Ed25519 or HMAC-SHA256 signature over timestamp.body,
    an Idempotency-Key header, at-least-once semantics with documented dedup keys, and a six-attempt exponential
    retry policy with a 24-hour hard deadline.
  humanURL: https://help.cerby.com/developer-tools/cerby-webhooks/implement-a-webhook-receiver
  baseURL: https://my-workspace.cerby.com/api/v1/
  tags:
  - Webhooks
  - Events
  - Identity
  properties:
  - type: Webhooks
    url: asyncapi/cerby-webhooks.yml
  - type: Documentation
    url: https://help.cerby.com/developer-tools/cerby-webhooks/implement-a-webhook-receiver
  - type: ErrorCatalog
    url: errors/cerby-automation-failure-codes.yml
- aid: cerby:cerby-scim
  name: Cerby SCIM 2.0
  description: Cerby exposes SCIM 2.0 endpoints so an identity provider can automatically provision and
    deprovision users and groups into a Cerby workspace. Documented for Okta, Microsoft Entra ID, and
    OneLogin, authenticated with a SCIM API token generated and rotated from the Cerby web app.
  humanURL: https://help.cerby.com/setup-and-admin/workspace-identity-federation/retrieve-the-scim-api-authentication-token-from-cerby
  baseURL: https://api.cerby.com/v1/scim/v2
  tags:
  - SCIM
  - Provisioning
  - Identity
  properties:
  - type: Documentation
    url: https://help.cerby.com/setup-and-admin/workspace-identity-federation/retrieve-the-scim-api-authentication-token-from-cerby
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: DomainSecurity
  url: security/cerby-domain-security.yml
- type: Website
  url: https://www.cerby.com/
- type: DeveloperPortal
  url: https://developer.cerby.com/
- type: Documentation
  url: https://help.cerby.com/developer-tools/readme
- type: APIReference
  url: https://developer.cerby.com/#api-reference
- type: GettingStarted
  url: https://help.cerby.com/getting-started
- type: Support
  url: https://help.cerby.com/
- type: Blog
  url: https://www.cerby.com/resources/blog
- type: SignUp
  url: https://app.cerby.com/
- type: Pricing
  url: https://www.cerby.com/contact-us
- type: StatusPage
  url: https://status.cerby.com/
- type: ChangeLog
  url: changelog/cerby-changelog.yml
- type: CLI
  url: cli/cerby-cli.yml
- type: LLMsTxt
  url: llms/cerby-llms.txt
- type: Lifecycle
  url: lifecycle/cerby-lifecycle.yml
- type: Conformance
  url: conformance/cerby-conformance.yml
- type: Packages
  url: packages/cerby-packages.yml
- type: TrustCenter
  url: security/cerby-trust-center.yml
- type: VulnerabilityDisclosure
  url: security/cerby-vulnerability-disclosure.yml
- type: Authentication
  url: authentication/cerby-authentication.yml
- type: OAuthScopes
  url: scopes/cerby-scopes.yml
- type: Conventions
  url: conventions/cerby-conventions.yml
- type: Idempotency
  url: conventions/cerby-conventions.yml
- type: ErrorCatalog
  url: errors/cerby-problem-types.yml
- type: Webhooks
  url: asyncapi/cerby-webhooks.yml
- type: DataModel
  url: data-model/cerby-data-model.yml
- type: GitHubOrganization
  url: https://github.com/cerbyinc
x-enrichment:
  date: '2026-08-09'
  status: enriched
  artifacts_added: 17
  pass: local-v1