# Kevala

> Kevala Inc. is a San Francisco based grid intelligence company (founded 2014) whose cloud platform
> turns utility network models, address-level geospatial data and hyper-granular time-series into
> electric-grid analytics for utilities, regulators, renewable developers and transportation
> electrification planners. Kevala licenses data and analysis by subscription and runs an
> authenticated platform API — but publishes no public developer portal, reference or specification.

Generated by the API Evangelist enrichment pipeline on 2026-08-23 from probes of Kevala's own hosts.
Everything below was fetched; nothing is inferred. Source of record:
https://github.com/api-evangelist/kevala

## What an agent can and cannot do with Kevala today

- There is NO anonymously readable API contract. The DER service at https://api.kevala.com/der/
  generates an OpenAPI document at https://api.kevala.com/der/openapi/ (Content-Type
  application/vnd.oai.openapi) and a ReDoc reference at https://api.kevala.com/der/redoc/, but both
  answer HTTP 403 `{"detail":"Authentication credentials were not provided."}` without credentials.
- Access is by subscription. Tokens are issued by Kevala's Auth0 tenant
  (https://kevalaanalytics.auth0.com/) for the audience https://api.kevala.com. There is no public
  signup for API credentials; the published route is a demo request or a sales conversation.
- No MCP server, no A2A agent card, no GraphQL endpoint, no webhooks or AsyncAPI, no SDKs in any
  package registry, no CLI, no sandbox, no status page, no published rate limits, and no pricing.

## API surface (observed, gated)

- Kevala Platform API — DER Metering: https://api.kevala.com/der/ (Django REST Framework)
  - Auth: OAuth 2.0 / OIDC bearer token from https://kevalaanalytics.auth0.com/, audience
    https://api.kevala.com, authorization code + PKCE (S256), scopes openid profile email
    offline_access.
  - Errors: `{"detail": "..."}` (DRF), not RFC 9457 problem+json.
  - Conventions: trailing slash required (/der 301 -> /der/); DRF content negotiation via `?format=`;
    `Allow: GET, HEAD, OPTIONS` on the collection root; no rate-limit headers observed.
  - Product context: Kevala's September 2024 release notes describe "DER Metering — New portal for
    accessing meter status and PV generation data".

## Company

- Website: https://www.kevala.com
- Platform overview: https://www.kevala.com/platform
- About: https://www.kevala.com/company
- Application (login): https://app.kevala.com/
- Sign up: https://www.kevala.com/sign-up
- Release notes: https://www.kevala.com/release-notes (dated Dec 2023 – Sep 2024; not updated since)
- Resources / news: https://www.kevala.com/resources
- Terms of Service: https://www.kevala.com/terms-of-service
- Privacy Policy: https://www.kevala.com/privacy-policy
- GitHub: https://github.com/KevalaAnalytics (1 public repo, a BigQuery SQLAlchemy dialect fork)
- LinkedIn: https://www.linkedin.com/company/kevalaanalytics/
- Contact: https://www.kevala.com/contact-us · privacy@kevala.com · 550 California St #625, San
  Francisco, CA 94104

## Products and solutions (from https://www.kevala.com/platform)

- Search the Grid · DER Adoption Trends · Locate Development Sites · Power Flow · Carbon Intensity ·
  Integrated Grid Planning · Project Siting · Electrification Impacts Study · Carbon Accounting ·
  Electrification of Transportation · Predictive Interconnection Siting Metrics · Production Cost
  Modeling
- Scenario outputs are exportable to industry planning tools: CYME, Synergi, PSS/E, OpenDSS.

## Security and compliance

- SOC 2 Type I (AICPA SOC for Service Organizations), stated on https://www.kevala.com/platform.
  No Type II claim, no trust center, no report request process published.
- TLS 1.3 and HSTS (max-age 31536000, includeSubDomains, preload) on www.kevala.com and
  api.kevala.com. SPF and DMARC present (p=none); no DNSSEC, no CAA records.
- No /.well-known/security.txt on any host; no published vulnerability disclosure program.

## Artifacts in this repo

- authentication/kevala-authentication.yml — OAuth2/OIDC profile (probed)
- scopes/kevala-scopes.yml — OIDC scopes observed; API resource scopes unpublished
- errors/kevala-problem-types.yml — DRF error envelope observed anonymously
- conventions/kevala-conventions.yml — URL, negotiation, versioning, idempotency and reversibility
- conformance/kevala-conformance.yml — standards conformance incl. SOC 2 and domain standards check
- lifecycle/kevala-lifecycle.yml · changelog/kevala-changelog.yml — release notes, versioning, SLA
- plans/kevala-plans-pricing.yml · rate-limits/kevala-rate-limits.yml — honest zeros
- packages/kevala-packages.yml — no SDK in any registry
- well-known/kevala-well-known.yml — every /.well-known/ probe and its status
- security/kevala-domain-security.yml — TLS/HSTS/DNS posture
- mcp/kevala-mcp.yml — no MCP server exists