# ISN (ISN Software Corporation)

> ISN is a Dallas, Texas contractor and supplier information management company founded in 2001.
> Its subscription platform ISNetworld collects, verifies and continuously monitors health and
> safety, quality, insurance, training, cybersecurity and sustainability data on contractors and
> suppliers, and connects that record to the hiring clients who engage them. ISN operates in more
> than 85 countries. This file is generated by API Evangelist from public sources; it is not
> published by ISN.

ISN runs a production REST API at https://api.isnetworld.com that lets subscribers download their
own ISNetworld data into internal systems. The API is real and live, but it is documented only to
customers: there is no public developer portal, no OpenAPI description, no SDK, and the API's own
help surface is authentication-gated. Everything below was established by public probe or from
ISN's own published material.

## API

- [ISNetworld API](https://api.isnetworld.com): RESTful, bearer-token authenticated. Requires TLS
  1.2 or later. Versioned by URI path under /1.0/.

## Authentication

- Send `UserKey` and `CompanyKey` headers with `Content-Type: application/json` to
  `GET https://api.isnetworld.com/token` to receive a bearer token.
- Validate a token at `GET https://api.isnetworld.com/validate-token`.
- Pass the token as `Authorization: Bearer <token>` on all resource calls. Tokens expire and are
  renewed by repeating the exchange.
- Keys are issued by ISN to subscribers. There is no self-service key generation and no developer
  signup.

## Endpoints confirmed live (HTTP 401 unauthenticated, against a 404 control)

- `GET /token` — obtain a bearer token
- `GET /validate-token` — check token validity
- `GET /help` — the API's own reference surface (authentication-gated)
- `GET /1.0/VendorConnections/ConnectedContractors` — contractors connected to the account
- `GET /1.0/CompanyProfile/Scorecard/{isnId}` — a company's ISNetworld scorecard

## Error semantics

- Errors use RFC 9457 Problem Details (`application/problem+json`) with `type`, `title`, `status`
  and `traceId`, where `traceId` is a W3C Trace Context traceparent.
- The envelope is applied inconsistently: `/validate-token` returns a bare JSON boolean and `/1.0/`
  resource paths return an empty 401 body.

## What ISN does not publish

- No OpenAPI, Swagger, GraphQL, AsyncAPI or gRPC contract
- No public API reference, quickstart or developer portal
- No SDK or client library in any language, and no public source repository
- No MCP server and no A2A agent card
- No `/.well-known/` document of any kind, including `security.txt`
- No rate limits, and no rate-limit response headers on any observable response
- No status page, changelog, deprecation policy or SLA
- No published pricing figures

## Compliance

- [Trust Center](https://www.isnetworld.com/en/trust-center): ISO/IEC 27001:2022, ISO 9001:2015,
  SOC 2, NIST CSF, GDPR, CCPA, EU-US Data Privacy Framework.

## Site

- [ISN home](https://www.isnetworld.com/en)
- [For hiring clients](https://www.isnetworld.com/en/hiring-clients)
- [For contractors and suppliers](https://www.isnetworld.com/en/contractors-suppliers)
- [ISN Empower](https://www.isnetworld.com/en/empower)
- [FAQs](https://www.isnetworld.com/en/faqs)
- [Blog](https://www.isnetworld.com/en/blog)
- [Publications](https://www.isnetworld.com/en/publications)
- [Contact](https://www.isnetworld.com/en/contact)
- [Sign up](https://www.isnetworld.com/en/signup)
- [Terms and conditions](https://www.isnetworld.com/en/terms-conditions)
- [Privacy](https://www.isnetworld.com/en/privacy)

## API Evangelist artifacts

- [apis.yml](https://raw.githubusercontent.com/api-evangelist/isn/refs/heads/main/apis.yml)
- authentication/isn-authentication.yml
- conventions/isn-conventions.yml
- errors/isn-problem-types.yml
- conformance/isn-conformance.yml
- lifecycle/isn-lifecycle.yml
- rate-limits/isn-rate-limits.yml
- plans/isn-plans-pricing.yml
- security/isn-domain-security.yml
- security/isn-trust-center.yml
- well-known/isn-well-known.yml