aid: finite-state name: Finite State description: 'Finite State is a product security platform for connected-device and embedded software manufacturers. It performs binary and firmware composition analysis, source-code scanning and third-party scan ingestion, SBOM generation and lifecycle management (CycloneDX and SPDX), VEX, EPSS- and reachability-based vulnerability prioritization, license-policy enforcement, and evidence-backed compliance reporting for regimes such as the EU Cyber Resilience Act, FDA 524B, ISO 21434 and IEC 62443. Programmatic access is offered through a token-authenticated REST API on the platform host, a legacy GraphQL API with an official Python SDK, the fs-cli command-line tool, and CI/CD integrations for GitHub Actions, Jenkins and Azure DevOps. Finite State also publishes an anonymous, read-only A2A JSON-RPC content API described by an agent card at its canonical well-known path.' image: https://finitestate.io/images/backgrounds/hero-space.jpg url: https://raw.githubusercontent.com/api-evangelist/finite-state/refs/heads/main/apis.yml x-type: company x-source: harvest:secondary-market specificationVersion: '0.23' created: '2026-08-04' modified: '2026-08-04' tags: - Product Security - Software Supply Chain Security - SBOM - Firmware Analysis - Vulnerability Management - Binary Analysis - Connected Devices - Compliance - Cybersecurity - IoT apis: - aid: finite-state:platform-api name: Finite State Platform API description: 'Token-authenticated REST API for the Finite State platform, served under /api/public/v0 on the platform host. Interactive Swagger documentation is published per organization at https://[org].finitestate.io/swagger and the underlying OpenAPI document is served at /api/docs/openapi.json. Both the spec and every operation sit behind an API token, so no machine-readable contract is retrievable anonymously.' humanURL: https://docs.finitestate.io/docs/dev-tools/finite-state-api/ baseURL: https://app.finitestate.io/api/public/v0 tags: - Product Security - SBOM - Vulnerability Management properties: - type: Documentation url: https://docs.finitestate.io/docs/dev-tools/finite-state-api/ - type: APIReference url: https://docs.finitestate.io/docs/dev-tools/finite-state-api/ - type: Authentication url: authentication/finite-state-authentication.yml - aid: finite-state:a2a-content-api name: Finite State A2A Content API description: 'Public, anonymous, read-only JSON-RPC 2.0 API exposing Finite State''s published content: blog posts, resources, videos, events, podcasts and press articles. Four allowlisted methods (content.list, content.get, content.search, content.metadata) are described by an A2A agent card served from the canonical well-known path. POST only; GET returns 405.' humanURL: https://finitestate.io/.well-known/agent-card.json baseURL: https://finitestate.io/api/a2a tags: - Content - Agents - A2A properties: - type: AgentCard url: a2a/finite-state-a2a.yml - aid: finite-state:graphql-api name: Finite State GraphQL API description: 'GraphQL API historically documented at https://platform.finitestate.io/api/v1/graphql and still the transport used by the official Python SDK, which authenticates via a client-credentials exchange at /api/v1/auth/token and passes an organization context on every request. An anonymous POST to the documented endpoint returned 404 on 2026-08-04, so the surface is recorded as legacy alongside the newer REST API.' humanURL: https://github.com/FiniteStateInc/finite-state-sdk-python baseURL: https://platform.finitestate.io/api/v1/graphql tags: - GraphQL - SBOM - Vulnerability Management properties: - type: SourceCode url: https://github.com/FiniteStateInc/finite-state-sdk-python maintainers: - FN: Kin Lane email: kin@apievangelist.com - FN: APIs.json email: info@apis.io common: - type: MCPServer url: mcp/finite-state-mcp.yml - type: IssueTracker url: https://github.com/FiniteStateInc/finite-state-sdk-python/issues - type: Releases url: https://github.com/FiniteStateInc/finite-state-sdk-python/releases - type: ContributionGuide url: https://github.com/FiniteStateInc/finite-state-sdk-python/blob/main/CONTRIBUTING.md - type: License name: MIT url: https://github.com/FiniteStateInc/finite-state-sdk-python/blob/main/LICENSE - type: Website url: https://finitestate.io - type: DeveloperPortal url: https://docs.finitestate.io/ - type: Documentation url: https://docs.finitestate.io/docs/ - type: APIReference url: https://docs.finitestate.io/docs/dev-tools/finite-state-api/ - type: GettingStarted url: https://docs.finitestate.io/docs/get-started - type: Support url: https://finitestate.io/support - type: Blog url: https://finitestate.io/blog - type: BlogRSS url: https://finitestate.io/rss.xml - type: GitHubOrganization url: https://github.com/FiniteStateInc - type: Pricing url: https://finitestate.io/pricing - type: SignUp url: https://finitestate.io/request-demo - type: TermsOfService url: https://finitestate.io/terms-of-use - type: PrivacyPolicy url: https://finitestate.io/privacy-policy - type: StatusPage url: https://status.finitestate.io - type: ChangeLog url: https://docs.finitestate.io/changelog - type: AgentCard url: a2a/finite-state-a2a.yml - type: LLMsTxt url: llms/finite-state-llms.txt - type: WellKnown url: well-known/finite-state-well-known.yml - type: Packages url: packages/finite-state-packages.yml - type: SDKs url: packages/finite-state-packages.yml - type: CLI url: cli/finite-state-cli.yml - type: Authentication url: authentication/finite-state-authentication.yml - type: Conventions url: conventions/finite-state-conventions.yml - type: ErrorCatalog url: errors/finite-state-problem-types.yml - type: Conformance url: conformance/finite-state-conformance.yml - type: Lifecycle url: lifecycle/finite-state-lifecycle.yml - type: Deprecation url: lifecycle/finite-state-lifecycle.yml - type: DomainSecurity url: security/finite-state-domain-security.yml - type: DataModel url: data-model/finite-state-data-model.yml - type: AgentSkill url: skills/_index.yml x-enrichment: date: '2026-08-04' status: enriched artifacts_added: 19 pass: local-v1