# SkyKick

> SkyKick is a Seattle-based cloud automation company whose Microsoft 365 migration, cloud backup, SaaS security and cloud automation products for managed service providers were acquired by ConnectWise in September 2024. The products now ship as ConnectWise Cloud Backup and ConnectWise SaaS Security. The SkyKick Partner Integration API is still live on ConnectWise Cloud Services, but its reference documentation is gated behind a partner sign-in and no machine-readable contract is published.

This file is GENERATED by API Evangelist from an independent third-party profile of SkyKick's public API surface. It is not published by SkyKick or ConnectWise. Probed 2026-08-28. Provenance: https://apievangelist.com/about/where-our-data-comes-from

## Status

- Company status: acquired by ConnectWise, LLC (announced September 2024).
- skykick.com: resolves, but serves "Site Not Configured | 404 Not Found" on every path (HTTP 404, probed 2026-08-28).
- www.skykick.com: does not resolve in DNS.
- No subdomain of skykick.com resolves — status., docs., help., trust., developers., api., portal. were all probed.
- The API surface moved to ConnectWise Cloud Services and is still operating.

## API

- API: SkyKick Partner Integration API
- Base URL: https://apis.cloudservices.connectwise.com
- Style: REST over HTTPS, JSON, fronted by Azure API Management, ASP.NET Web API backend.
- Known path roots: /auth/token (token exchange), /whoami (identity), /Backup (backup resources).
- Machine-readable contract: NONE published. No OpenAPI, Swagger, GraphQL SDL, AsyncAPI, Protobuf or WSDL.
- Live proof the API exists: GET /whoami returns HTTP 401 with WWW-Authenticate: Bearer.

## Authentication

Two credentials are required on every call.

1. Azure API Management subscription key, sent as `Ocp-Apim-Subscription-Key`.
2. An OAuth 2.0 client-credentials bearer token.

Token request:

    POST https://apis.cloudservices.connectwise.com/auth/token
    Ocp-Apim-Subscription-Key: {subscription key}
    Authorization: Basic base64(ClientId:Secret)
    Content-Type: application/x-www-form-urlencoded

    grant_type=client_credentials&scope=Partner

Valid scopes: `Partner`, `Distributor`.

Credentials are not self-service. An administrator of an existing partner tenant must add a user with the Developer Access flag in the Cloud Services portal; the ClientId, Secret and subscription keys then appear under Admin > User Profile > Developer API Access.

## Error envelopes

Two distinct shapes are in use and they disagree on field casing.

- Gateway (unrouted path): `{ "statusCode": 404, "message": "Resource not found" }`
- Backend (authorization failure): `{"Message":"Authorization has been denied for this request."}`

Neither is RFC 9457 `application/problem+json`.

## What is NOT published

- No OpenAPI or any other machine-readable contract.
- No MCP server, hosted or local.
- No A2A agent card (`/.well-known/agent-card.json` and `/.well-known/agent.json` both 404 on all four hosts).
- No `/.well-known/` documents of any kind, including security.txt, openid-configuration and oauth-authorization-server (all 404).
- No first-party SDK, in any language, on any registry.
- No CLI, sandbox, embedded components or changelog.
- No published rate limits, pagination convention, idempotency guarantee or deprecation policy.
- No published pricing: the successor products are quote-only.

## Docs (public)

- Get Started (auth flow, base URL, scopes): https://skykick.developer.azure-api.net/getstarted
- Developer portal: https://skykick.developer.azure-api.net/
- Developer portal (vanity host): https://developers.cloudservices.connectwise.com
- Partner portal sign-in: https://portal.cloudservices.connectwise.com/

The operation-level API reference requires sign-in. An anonymous query of the Azure APIM developer-portal data API returned an empty API list (`{"value":[],"nextLink":null}`), confirming nothing is exposed to unauthenticated readers.

## Successor product pages

- ConnectWise Cloud Backup: https://www.connectwise.com/platform/bcdr/cloud-backup
- ConnectWise SaaS Security: https://www.connectwise.com/platform/saas-security
- Status page (monitors "Cloud Backup" and "SaaS Security & Cloud Automation"): https://status.connectwise.com/
- Trust Center: https://trust.connectwise.com/
- Compliance: https://www.connectwise.com/company/trust/compliance
- Vulnerability disclosure policy: https://www.connectwise.com/company/trust/security/vulnerability-disclosure-policy (reports to disclosure@connectwise.com)

## Certifications

ConnectWise states that "the ConnectWise Cloud Backup and ConnectWise SaaS Security services, acquired by ConnectWise in September 2024, have been certified against the following standards: ISO 27001:2013, ISO 27701:2019, and Cloud Security Alliance STAR Level 2 certification." Reports are released on request to Compliance@ConnectWise.com; none is downloadable.

## Community clients (not official)

- Ruby: https://rubygems.org/gems/skykick — v0.3.0, 2025-09-01, read-only wrapper by Janco Tanis.
- PowerShell: https://www.powershellgallery.com/packages/SkykickAPI — v1.1.1, 2019-12-09, unmaintained.

## Repo artifacts

- authentication/skykick-authentication.yml
- scopes/skykick-scopes.yml
- conventions/skykick-conventions.yml
- errors/skykick-problem-types.yml
- lifecycle/skykick-lifecycle.yml
- conformance/skykick-conformance.yml
- security/skykick-domain-security.yml
- security/skykick-vulnerability-disclosure.yml
- security/skykick-trust-center.yml
- packages/skykick-packages.yml
- plans/skykick-plans-pricing.yml
- rate-limits/skykick-rate-limits.yml
- well-known/skykick-well-known.yml
- mcp/skykick-mcp.yml