# Qlik Sense / Qlik Cloud

> Qlik Cloud is a business intelligence, data integration and AI analytics platform.
> It exposes a large, fully machine-readable API surface: 78 OpenAPI 3.0.0 documents
> covering 681 REST operations, 29 AsyncAPI 3.0.0 event documents, an OpenRPC 1.0.0
> document for the QIX Associative Engine WebSocket API, 39 published JSON Schemas for
> Qlik Talend Cloud pipelines, and a proto3 gRPC contract for the engine's Server-Side
> Extension protocol. A first-party remote MCP server has been generally available since
> 2026-02-10.

This file was GENERATED by API Evangelist from Qlik's own published specifications and
documentation on 2026-08-29. Qlik does not serve an llms.txt of its own
(https://qlik.dev/llms.txt returned 404). Qlik DOES serve a markdown twin of every
documentation page: append `.md` to any qlik.dev page path (e.g.
https://qlik.dev/apis/rest/rate-limiting.md) to get clean markdown with `source` and
`last_updated` frontmatter.

## Start here

- [Developer portal](https://qlik.dev/): everything below is indexed here.
- [Get started](https://qlik.dev/get-started): first API call.
- [Authentication](https://qlik.dev/authenticate): API keys, OAuth 2.0 (M2M, authorization code, impersonation, private-key JWT, dynamic client registration) and JWT.
- [OAuth scopes](https://qlik.dev/manage/access-control/scopes/): 225 platform scopes, 101 usable on an OAuth token.
- [API namespaces](https://qlik.dev/apis/namespaces/): the migration from /api/v1/<resource> to /api/<namespace>/<resource>, with a minimum 12-month deprecation notice per API.
- [Pagination, sorting, filtering](https://qlik.dev/apis/rest/pagination-sorting-filtering/): opaque cursors via links.next, ?sort=+field,-field, and a SCIM (RFC 7644) ?filter= grammar.
- [Rate limiting](https://qlik.dev/apis/rest/rate-limiting/): tier 1 = 1,000/min, tier 2 = 100/min, special = per-endpoint; identical on every plan; 429 + Retry-After.
- [API policy](https://qlik.dev/apis/api-policy/): the terms of use. Note that use of any UNPUBLISHED Qlik API is a stated violation.
- [Changelog](https://qlik.dev/changelog/): the formal deprecation-notice channel. RSS at https://qlik.dev/rss.xml.

## Base URL

All REST calls go to `https://{tenant}.{region}.qlikcloud.com`, where `{tenant}` is your
tenant name and `{region}` is its hosting region (e.g. `us`, `eu`). There is no shared
public host — every call is tenant-scoped.

## Agents

- [Qlik MCP Server](https://www.qlik.com/us/products/model-context-protocol): remote MCP endpoint at `<your-tenant-url>/api/ai/mcp`. OAuth 2.0 only; no anonymous access. GA 2026-02-10. Qlik states 70+ tools across 9 categories; no public tool manifest is published.
- [Qlik Agentic Skills](https://github.com/qlik-oss/agentic-skills): Qlik's public Agent Skills hub, SKILL.md format, installable with `npx skills add qlik-oss/agentic-skills`.
- [MCP telemetry contract](https://qlik.dev/apis/event/ai/mcps/): AsyncAPI 3.0.0 for com.qlik.ai.mcp.tool.executed and com.qlik.ai.mcp.tool.calls.aggregated.
- No A2A agent card is served (/.well-known/agent-card.json returns 404).

## Toolkits

- [qlik-cli](https://qlik.dev/toolkits/qlik-cli/): first-party CLI, 60+ resource command groups. Handles pagination and 429 retries for you.
- [@qlik/api](https://qlik.dev/toolkits/qlik-api/): TypeScript/JavaScript client for REST + QIX.
- [enigma.js](https://qlik.dev/toolkits/enigma-js/) / [enigma-go](https://qlik.dev/toolkits/enigma-go/): QIX JSON-RPC clients.
- [qlik-embed](https://qlik.dev/embed/qlik-embed/): web components for embedding analytics, with React and Svelte wrappers.
- [nebula.js](https://qlik.dev/embed/nebula/) and [picasso.js](https://qlik.dev/extend/extensions/picasso-js/get-started/): visualization rendering and charting grammar.
- [SDK versioning policy](https://qlik.dev/toolkits/sdks-tools-versions/): semver, with an explicit discontinued list.

## Non-REST contracts

- [QIX Engine API](https://qlik.dev/apis/json-rpc/qix): JSON-RPC over WebSocket, published as OpenRPC 1.0.0 at https://qlik.dev/specs/json-rpc/qix.json
- [Events](https://qlik.dev/apis/event/): 29 AsyncAPI 3.0.0 documents at https://qlik.dev/specs/event/<name>.json, CloudEvents 1.0 payloads, delivered by webhook.
- [Server-Side Extension](https://github.com/qlik-oss/server-side-extension): proto3 gRPC service for extending the engine with external compute (R, Python).
- [Declarative pipeline schemas](https://github.com/qlik-oss/schemas): 39 JSON Schemas for Qlik Talend Cloud projects and tasks.

## Known gaps

An agent should know these before generating a client:

- The published OpenAPI documents declare NO securitySchemes and NO security requirements on any of the 681 operations. Add the `Authorization: Bearer` header yourself.
- 177 of 681 operations have no operationId. Address them by method and path.
- No idempotency-key support anywhere on the write surface.
- Errors use a JSON:API-style `{"errors":[...]}` envelope, not RFC 9457 problem+json.
- No RateLimit-* quota headers on successful responses — only `Retry-After` on the 429.

## REST APIs
- [apps API](https://qlik.dev/apis/rest/apps/): OpenAPI 3.0.0, 48 operations. Spec: https://qlik.dev/specs/rest/apps.json
- [ml API](https://qlik.dev/apis/rest/ml/): OpenAPI 3.0.0, 42 operations. Spec: https://qlik.dev/specs/rest/ml.json
- [assistants API](https://qlik.dev/apis/rest/assistants/): OpenAPI 3.0.0, 29 operations. Spec: https://qlik.dev/specs/rest/assistants.json
- [di-projects API](https://qlik.dev/apis/rest/di-projects/): OpenAPI 3.0.0, 25 operations. Spec: https://qlik.dev/specs/rest/di-projects.json
- [glossaries API](https://qlik.dev/apis/rest/glossaries/): OpenAPI 3.0.0, 24 operations. Spec: https://qlik.dev/specs/rest/glossaries.json
- [workflows/automations API](https://qlik.dev/apis/rest/workflows/automations/): OpenAPI 3.0.0, 21 operations. Spec: https://qlik.dev/specs/rest/workflows/automations.json
- [automations API](https://qlik.dev/apis/rest/automations/): OpenAPI 3.0.0, 18 operations. Spec: https://qlik.dev/specs/rest/automations.json
- [knowledgebases API](https://qlik.dev/apis/rest/knowledgebases/): OpenAPI 3.0.0, 18 operations. Spec: https://qlik.dev/specs/rest/knowledgebases.json
- [spaces API](https://qlik.dev/apis/rest/spaces/): OpenAPI 3.0.0, 17 operations. Spec: https://qlik.dev/specs/rest/spaces.json
- [data-alerts API](https://qlik.dev/apis/rest/data-alerts/): OpenAPI 3.0.0, 16 operations. Spec: https://qlik.dev/specs/rest/data-alerts.json
- [scheduling/tasks API](https://qlik.dev/apis/rest/scheduling/tasks/): OpenAPI 3.0.0, 16 operations. Spec: https://qlik.dev/specs/rest/scheduling/tasks.json
- [direct-access-agents API](https://qlik.dev/apis/rest/direct-access-agents/): OpenAPI 3.0.0, 15 operations. Spec: https://qlik.dev/specs/rest/direct-access-agents.json
- [sharing-tasks API](https://qlik.dev/apis/rest/sharing-tasks/): OpenAPI 3.0.0, 13 operations. Spec: https://qlik.dev/specs/rest/sharing-tasks.json
- [brands API](https://qlik.dev/apis/rest/brands/): OpenAPI 3.0.0, 12 operations. Spec: https://qlik.dev/specs/rest/brands.json
- [data-files API](https://qlik.dev/apis/rest/data-files/): OpenAPI 3.0.0, 12 operations. Spec: https://qlik.dev/specs/rest/data-files.json
- [collections API](https://qlik.dev/apis/rest/collections/): OpenAPI 3.0.0, 11 operations. Spec: https://qlik.dev/specs/rest/collections.json
- [conditions API](https://qlik.dev/apis/rest/conditions/): OpenAPI 3.0.0, 11 operations. Spec: https://qlik.dev/specs/rest/conditions.json
- [data-governance/data-products API](https://qlik.dev/apis/rest/data-governance/data-products/): OpenAPI 3.0.0, 11 operations. Spec: https://qlik.dev/specs/rest/data-governance/data-products.json
- [oauth-clients API](https://qlik.dev/apis/rest/oauth-clients/): OpenAPI 3.0.0, 11 operations. Spec: https://qlik.dev/specs/rest/oauth-clients.json
- [data-stores API](https://qlik.dev/apis/rest/data-stores/): OpenAPI 3.0.0, 10 operations. Spec: https://qlik.dev/specs/rest/data-stores.json
- [encryption API](https://qlik.dev/apis/rest/encryption/): OpenAPI 3.0.0, 10 operations. Spec: https://qlik.dev/specs/rest/encryption.json
- [tasks API](https://qlik.dev/apis/rest/tasks/): OpenAPI 3.0.0, 10 operations. Spec: https://qlik.dev/specs/rest/tasks.json
- [webhooks API](https://qlik.dev/apis/rest/webhooks/): OpenAPI 3.0.0, 10 operations. Spec: https://qlik.dev/specs/rest/webhooks.json
- [data-connections API](https://qlik.dev/apis/rest/data-connections/): OpenAPI 3.0.0, 9 operations. Spec: https://qlik.dev/specs/rest/data-connections.json
- [licenses API](https://qlik.dev/apis/rest/licenses/): OpenAPI 3.0.0, 9 operations. Spec: https://qlik.dev/specs/rest/licenses.json
- [users API](https://qlik.dev/apis/rest/users/): OpenAPI 3.0.0, 9 operations. Spec: https://qlik.dev/specs/rest/users.json
- [analytics/odag-links API](https://qlik.dev/apis/rest/analytics/odag-links/): OpenAPI 3.0.0, 8 operations. Spec: https://qlik.dev/specs/rest/analytics/odag-links.json
- [automation-connections API](https://qlik.dev/apis/rest/automation-connections/): OpenAPI 3.0.0, 8 operations. Spec: https://qlik.dev/specs/rest/automation-connections.json
- [groups API](https://qlik.dev/apis/rest/groups/): OpenAPI 3.0.0, 8 operations. Spec: https://qlik.dev/specs/rest/groups.json
- [identity-providers API](https://qlik.dev/apis/rest/identity-providers/): OpenAPI 3.0.0, 8 operations. Spec: https://qlik.dev/specs/rest/identity-providers.json
- [items API](https://qlik.dev/apis/rest/items/): OpenAPI 3.0.0, 8 operations. Spec: https://qlik.dev/specs/rest/items.json
- [lineage-graphs API](https://qlik.dev/apis/rest/lineage-graphs/): OpenAPI 3.0.0, 8 operations. Spec: https://qlik.dev/specs/rest/lineage-graphs.json
- [workflows/automation-connections API](https://qlik.dev/apis/rest/workflows/automation-connections/): OpenAPI 3.0.0, 8 operations. Spec: https://qlik.dev/specs/rest/workflows/automation-connections.json
- [analytics/apps API](https://qlik.dev/apis/rest/analytics/apps/): OpenAPI 3.0.0, 7 operations. Spec: https://qlik.dev/specs/rest/analytics/apps.json
- [api-keys API](https://qlik.dev/apis/rest/api-keys/): OpenAPI 3.0.0, 7 operations. Spec: https://qlik.dev/specs/rest/api-keys.json
- [audits API](https://qlik.dev/apis/rest/audits/): OpenAPI 3.0.0, 7 operations. Spec: https://qlik.dev/specs/rest/audits.json
- [extensions API](https://qlik.dev/apis/rest/extensions/): OpenAPI 3.0.0, 7 operations. Spec: https://qlik.dev/specs/rest/extensions.json
- [report-templates API](https://qlik.dev/apis/rest/report-templates/): OpenAPI 3.0.0, 7 operations. Spec: https://qlik.dev/specs/rest/report-templates.json
- [tenant-settings API](https://qlik.dev/apis/rest/tenant-settings/): OpenAPI 3.0.0, 7 operations. Spec: https://qlik.dev/specs/rest/tenant-settings.json
- [themes API](https://qlik.dev/apis/rest/themes/): OpenAPI 3.0.0, 7 operations. Spec: https://qlik.dev/specs/rest/themes.json
- [transports API](https://qlik.dev/apis/rest/transports/): OpenAPI 3.0.0, 7 operations. Spec: https://qlik.dev/specs/rest/transports.json
- [ui-config API](https://qlik.dev/apis/rest/ui-config/): OpenAPI 3.0.0, 7 operations. Spec: https://qlik.dev/specs/rest/ui-config.json
- [analytics/odag-requests API](https://qlik.dev/apis/rest/analytics/odag-requests/): OpenAPI 3.0.0, 6 operations. Spec: https://qlik.dev/specs/rest/analytics/odag-requests.json
- [automl-predictions API](https://qlik.dev/apis/rest/automl-predictions/): OpenAPI 3.0.0, 6 operations. Spec: https://qlik.dev/specs/rest/automl-predictions.json
- [csp-origins API](https://qlik.dev/apis/rest/csp-origins/): OpenAPI 3.0.0, 6 operations. Spec: https://qlik.dev/specs/rest/csp-origins.json
- [data-governance/data-qualities API](https://qlik.dev/apis/rest/data-governance/data-qualities/): OpenAPI 3.0.0, 6 operations. Spec: https://qlik.dev/specs/rest/data-governance/data-qualities.json
- [data-sets API](https://qlik.dev/apis/rest/data-sets/): OpenAPI 3.0.0, 6 operations. Spec: https://qlik.dev/specs/rest/data-sets.json
- [tenants API](https://qlik.dev/apis/rest/tenants/): OpenAPI 3.0.0, 6 operations. Spec: https://qlik.dev/specs/rest/tenants.json
- [web-notifications API](https://qlik.dev/apis/rest/web-notifications/): OpenAPI 3.0.0, 6 operations. Spec: https://qlik.dev/specs/rest/web-notifications.json
- [analytics/change-stores API](https://qlik.dev/apis/rest/analytics/change-stores/): OpenAPI 3.0.0, 5 operations. Spec: https://qlik.dev/specs/rest/analytics/change-stores.json
- [core/ip-policies API](https://qlik.dev/apis/rest/core/ip-policies/): OpenAPI 3.0.0, 5 operations. Spec: https://qlik.dev/specs/rest/core/ip-policies.json
- [data-assets API](https://qlik.dev/apis/rest/data-assets/): OpenAPI 3.0.0, 5 operations. Spec: https://qlik.dev/specs/rest/data-assets.json
- [data-credentials API](https://qlik.dev/apis/rest/data-credentials/): OpenAPI 3.0.0, 5 operations. Spec: https://qlik.dev/specs/rest/data-credentials.json
- [data-sources API](https://qlik.dev/apis/rest/data-sources/): OpenAPI 3.0.0, 5 operations. Spec: https://qlik.dev/specs/rest/data-sources.json
- [reload-tasks API](https://qlik.dev/apis/rest/reload-tasks/): OpenAPI 3.0.0, 5 operations. Spec: https://qlik.dev/specs/rest/reload-tasks.json
- [roles API](https://qlik.dev/apis/rest/roles/): OpenAPI 3.0.0, 5 operations. Spec: https://qlik.dev/specs/rest/roles.json
- [temp-contents API](https://qlik.dev/apis/rest/temp-contents/): OpenAPI 3.0.0, 5 operations. Spec: https://qlik.dev/specs/rest/temp-contents.json
- [web-integrations API](https://qlik.dev/apis/rest/web-integrations/): OpenAPI 3.0.0, 5 operations. Spec: https://qlik.dev/specs/rest/web-integrations.json
- [reloads API](https://qlik.dev/apis/rest/reloads/): OpenAPI 3.0.0, 4 operations. Spec: https://qlik.dev/specs/rest/reloads.json
- [analytics/odag-settings API](https://qlik.dev/apis/rest/analytics/odag-settings/): OpenAPI 3.0.0, 3 operations. Spec: https://qlik.dev/specs/rest/analytics/odag-settings.json
- [data-qualities API](https://qlik.dev/apis/rest/data-qualities/): OpenAPI 3.0.0, 3 operations. Spec: https://qlik.dev/specs/rest/data-qualities.json
- [reports API](https://qlik.dev/apis/rest/reports/): OpenAPI 3.0.0, 3 operations. Spec: https://qlik.dev/specs/rest/reports.json
- [workflows/automation-connectors API](https://qlik.dev/apis/rest/workflows/automation-connectors/): OpenAPI 3.0.0, 3 operations. Spec: https://qlik.dev/specs/rest/workflows/automation-connectors.json
- [banners API](https://qlik.dev/apis/rest/banners/): OpenAPI 3.0.0, 2 operations. Spec: https://qlik.dev/specs/rest/banners.json
- [core/auth-settings API](https://qlik.dev/apis/rest/core/auth-settings/): OpenAPI 3.0.0, 2 operations. Spec: https://qlik.dev/specs/rest/core/auth-settings.json
- [login API](https://qlik.dev/apis/rest/login/): OpenAPI 3.0.0, 2 operations. Spec: https://qlik.dev/specs/rest/login.json
- [notes API](https://qlik.dev/apis/rest/notes/): OpenAPI 3.0.0, 2 operations. Spec: https://qlik.dev/specs/rest/notes.json
- [oauth-tokens API](https://qlik.dev/apis/rest/oauth-tokens/): OpenAPI 3.0.0, 2 operations. Spec: https://qlik.dev/specs/rest/oauth-tokens.json
- [questions API](https://qlik.dev/apis/rest/questions/): OpenAPI 3.0.0, 2 operations. Spec: https://qlik.dev/specs/rest/questions.json
- [quotas API](https://qlik.dev/apis/rest/quotas/): OpenAPI 3.0.0, 2 operations. Spec: https://qlik.dev/specs/rest/quotas.json
- [analytics/discovery-agent/adaptive-cards API](https://qlik.dev/apis/rest/analytics/discovery-agent/adaptive-cards/): OpenAPI 3.0.0, 1 operations. Spec: https://qlik.dev/specs/rest/analytics/discovery-agent/adaptive-cards.json
- [analytics/odag-apps API](https://qlik.dev/apis/rest/analytics/odag-apps/): OpenAPI 3.0.0, 1 operations. Spec: https://qlik.dev/specs/rest/analytics/odag-apps.json
- [automation-connectors API](https://qlik.dev/apis/rest/automation-connectors/): OpenAPI 3.0.0, 1 operations. Spec: https://qlik.dev/specs/rest/automation-connectors.json
- [automl-deployments API](https://qlik.dev/apis/rest/automl-deployments/): OpenAPI 3.0.0, 1 operations. Spec: https://qlik.dev/specs/rest/automl-deployments.json
- [consumption API](https://qlik.dev/apis/rest/consumption/): OpenAPI 3.0.0, 1 operations. Spec: https://qlik.dev/specs/rest/consumption.json
- [csrf-token API](https://qlik.dev/apis/rest/csrf-token/): OpenAPI 3.0.0, 1 operations. Spec: https://qlik.dev/specs/rest/csrf-token.json
- [data-governance/trust-scores API](https://qlik.dev/apis/rest/data-governance/trust-scores/): OpenAPI 3.0.0, 1 operations. Spec: https://qlik.dev/specs/rest/data-governance/trust-scores.json
- [notifications API](https://qlik.dev/apis/rest/notifications/): OpenAPI 3.0.0, 1 operations. Spec: https://qlik.dev/specs/rest/notifications.json

## Pricing and support

- [Pricing](https://www.qlik.com/us/pricing): Starter $300/mo, Standard $825/mo, Premium $2,750/mo (all billed annually), Enterprise by quote. Priced on data capacity and users, not API calls. No free tier.
- [Support](https://support.qlik.com/) and [Community](https://community.qlik.com/)
- [Status](https://status.qlikcloud.com/)
- [Trust and compliance](https://www.qlik.com/us/trust) — ISO 27001/27017/27018/42001, SOC 1/2/3, HITRUST, FedRAMP (Qlik Cloud Government). Security contact: security@qlik.com
- [Terms of service](https://www.qlik.com/us/legal/terms-of-service) | [Privacy](https://www.qlik.com/us/legal/privacy)