generated: '2026-07-21'
method: derived
source: openapi/tako-openapi-original.yml
standards:
  - id: apikey-auth
    conforms: true
    evidence: openapi securityScheme type apiKey in header (X-API-Key)
  - id: oauth2
    conforms: false
    evidence: no oauth2 securityScheme in spec
  - id: oidc
    conforms: false
  - id: rfc9457-problem-details
    conforms: false
    evidence: errors use BaseAPIError/ErrorObject JSON envelopes, not application/problem+json
  - id: json-api
    conforms: false
  - id: cursor-pagination
    conforms: true
    evidence: list endpoints return data/has_more/next_cursor with cursor+limit params
  - id: sse-streaming
    conforms: true
    evidence: agent run endpoints support Accept text/event-stream with Last-Event-ID resume
  - id: openapi-3.1
    conforms: true
    evidence: published OpenAPI 3.1.0 at docs.tako.com/api-reference/openapi.yaml
  - id: soc2
    conforms: true
    evidence: SOC 2 compliance stated on tako.com (zero data retention, guaranteed SLAs)
    note: searched from marketing site; confirm named report tier via trust/security page