aid: tigera
name: Tigera
description: >-
  Tigera is the creator of Project Calico, the open-source networking and network-security
  engine for Kubernetes, and the company behind Calico Open Source, Calico Enterprise and
  Calico Cloud. Its products deliver container networking (BGP, eBPF, VPP and standard Linux
  data planes), tiered network policy and microsegmentation, egress gateways and egress access
  control, cluster mesh, an Envoy-based ingress gateway, workload-based IDS/IPS/WAF and threat
  detection, and full-stack observability (Service Graph, flow/DNS/L7 logs, packet capture) for
  Kubernetes clusters. The programmable surface is Kubernetes-native: the projectcalico.org/v3
  aggregated API server exposes 27 custom resources through a published Swagger 2.0 definition,
  the Goldmane gRPC service exposes aggregated flow observability, calicoctl and kubectl are the
  first-party CLIs, and Calico Cloud adds a SaaS management plane with a read-only Usage API and
  security-event webhooks.
image: https://www.tigera.io/app/uploads/2026/01/generic-Tigera-1200x628-1.png
url: https://raw.githubusercontent.com/api-evangelist/tigera/refs/heads/main/apis.yml
x-type: company
x-source: harvest:secondary-market
specificationVersion: '0.20'
created: '2026-08-05'
modified: '2026-08-05'
tags:
- Company
- Kubernetes
- Networking
- Network Security
- Container Security
- Cloud Native
- Observability
- Microsegmentation
- Zero Trust
- eBPF
- Open Source
apis:
- aid: tigera:goldmane-flows-api
  name: Goldmane Flows API
  description: >-
    Goldmane is the Calico flow aggregation and network-observability service introduced in Calico Open
    Source 3.30. It exposes a gRPC API for querying aggregated flow data — List for point-in-time queries,
    Stream for a long-running stream of new flows, FilterHints for progressive discovery of filter criteria
    such as namespaces and source/destination names — plus statistics and flow-ingestion services. Tigera
    publishes the proto3 definition in the projectcalico/calico repository and documents it on the company
    blog.
  humanURL: >-
    https://www.tigera.io/blog/calico-open-source-3-30-exploring-the-goldmane-api-for-custom-kubernetes-network-observability/
  baseURL: https://goldmane.calico-system.svc:7443
  tags:
  - Observability
  - gRPC
  - Networking
  properties:
  - type: Protobuf
    url: grpc/tigera-goldmane-api.proto
  - type: SourceCode
    url: https://github.com/projectcalico/calico/tree/master/goldmane
  x-evidence:
    proto_url: https://raw.githubusercontent.com/projectcalico/calico/master/goldmane/proto/api.proto
    http_status: 200
    fetched: '2026-08-05'
    base_url_note: >-
      Goldmane runs in-cluster in the calico-system namespace; the address above is the in-cluster service
      address for the component, not a vendor-hosted endpoint.
- aid: tigera:tigera-mcp-server
  name: Tigera MCP Server
  description: >-
    A remote Model Context Protocol server published on the tigera.io host, advertised through RFC 8414
    OAuth authorization-server metadata and RFC 9728 protected-resource metadata. The server fronts the
    Tigera WordPress content estate (the marketing site, blog and resources), not the Calico cluster API.
    Authorization is OAuth 2.1 authorization-code with PKCE (S256), a single `mcp` scope, public clients
    (token_endpoint_auth_method none) and client-ID metadata documents. tools/list is authenticated —
    an anonymous JSON-RPC call returns 401 mcp_unauthorized — so the live tool schemas require an authorized
    session.
  humanURL: https://www.tigera.io/
  baseURL: https://www.tigera.io/wp-json/mcp/mcp-oauth-server
  tags:
  - MCP
  - Agents
  - Content
  properties:
  - type: MCPServer
    url: mcp/tigera-mcp.yml
  - type: ToolCrosswalk
    url: mcp/tigera-tool-crosswalk.yml
  - type: OAuthScopes
    url: scopes/tigera-scopes.yml
  x-evidence:
    protected_resource: https://www.tigera.io/.well-known/oauth-protected-resource
    authorization_server: https://www.tigera.io/.well-known/oauth-authorization-server
    http_status: 200
    tools_list_status: 401
    fetched: '2026-08-05'
- aid: tigera:calico-cloud-usage-api
  name: Calico Cloud Usage API
  description: >-
    A read-only REST API on the Calico Cloud SaaS management plane that returns the same vCPU usage and
    managed-cluster data shown on the Usage Metrics page, for capacity planning, FinOps and license-compliance
    workflows. Three documented datasets — contracts (start/end dates, vCPU hours, package, add-ons),
    summary (per-project vCPU totals and usage over time) and managed clusters (per-cluster usage rows,
    optional project filter, CSV output) — with startTime, endTime and granularity query parameters. Authentication
    is an organization-scoped read-only API key generated in the web console.
  humanURL: https://docs.tigera.io/calico-cloud/operations/usage-api
  tags:
  - FinOps
  - Usage
  - SaaS
  properties:
  - type: Documentation
    url: https://docs.tigera.io/calico-cloud/operations/usage-api
  - type: Authentication
    url: authentication/tigera-authentication.yml
  x-evidence:
    docs_url: https://docs.tigera.io/calico-cloud/operations/usage-api
    http_status: 200
    fetched: '2026-08-05'
    base_url_note: >-
      Tigera does not publish the Usage API host in public documentation. The console generates a ready-made
      command per API key ("Actions > Generate commands"), so the base URL is only visible to authenticated
      customers. Recorded without a baseURL rather than guessed.
- aid: tigera:tigera-apis-api
  name: Tigera APIS API
  description: The apis API from Tigera — 1 operation(s) for apis.
  humanURL: https://docs.tigera.io/calico-cloud/reference/rest-api-reference
  baseURL: https://kubernetes.default.svc/apis/projectcalico.org/v3
  tags:
  - apis
  properties:
  - type: OpenAPI
    url: openapi/tigera-apis-api-openapi.yml
  - type: Documentation
    url: https://docs.tigera.io/calico/latest/reference/
  - type: APIReference
    url: https://docs.tigera.io/calico-cloud/reference/rest-api-reference
  - type: ErrorCatalog
    url: errors/tigera-problem-types.yml
  - type: DataModel
    url: data-model/tigera-data-model.yml
- aid: tigera:tigera-projectcalicoorg-api
  name: Tigera Projectcalico Org API
  description: The projectcalicoOrg API from Tigera — 1 operation(s) for projectcalicoorg.
  humanURL: https://docs.tigera.io/calico-cloud/reference/rest-api-reference
  baseURL: https://kubernetes.default.svc/apis/projectcalico.org/v3
  tags:
  - projectcalicoOrg
  properties:
  - type: OpenAPI
    url: openapi/tigera-projectcalicoorg-api-openapi.yml
  - type: Documentation
    url: https://docs.tigera.io/calico/latest/reference/
  - type: APIReference
    url: https://docs.tigera.io/calico-cloud/reference/rest-api-reference
  - type: ErrorCatalog
    url: errors/tigera-problem-types.yml
  - type: DataModel
    url: data-model/tigera-data-model.yml
- aid: tigera:tigera-projectcalicoorg-v3-api
  name: Tigera Projectcalico Org V3 API
  description: The projectcalicoOrg_v3 API from Tigera — 121 operation(s) for projectcalicoorg_v3.
  humanURL: https://docs.tigera.io/calico-cloud/reference/rest-api-reference
  baseURL: https://kubernetes.default.svc/apis/projectcalico.org/v3
  tags:
  - projectcalicoOrg_v3
  properties:
  - type: OpenAPI
    url: openapi/tigera-projectcalicoorg-v3-api-openapi.yml
  - type: Documentation
    url: https://docs.tigera.io/calico/latest/reference/
  - type: APIReference
    url: https://docs.tigera.io/calico-cloud/reference/rest-api-reference
  - type: ErrorCatalog
    url: errors/tigera-problem-types.yml
  - type: DataModel
    url: data-model/tigera-data-model.yml
- aid: tigera:tigera-version-api
  name: Tigera Version API
  description: The version API from Tigera — 1 operation(s) for version.
  humanURL: https://docs.tigera.io/calico-cloud/reference/rest-api-reference
  baseURL: https://kubernetes.default.svc/apis/projectcalico.org/v3
  tags:
  - version
  properties:
  - type: OpenAPI
    url: openapi/tigera-version-api-openapi.yml
  - type: Documentation
    url: https://docs.tigera.io/calico/latest/reference/
  - type: APIReference
    url: https://docs.tigera.io/calico-cloud/reference/rest-api-reference
  - type: ErrorCatalog
    url: errors/tigera-problem-types.yml
  - type: DataModel
    url: data-model/tigera-data-model.yml
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: License
  name: Apache-2.0
  url: https://github.com/projectcalico/calico/blob/master/LICENSE
- type: Website
  url: https://www.tigera.io/
- type: DeveloperPortal
  url: https://docs.tigera.io/
- type: Documentation
  url: https://docs.tigera.io/
- type: APIReference
  url: https://docs.tigera.io/calico-cloud/reference/rest-api-reference
- type: GettingStarted
  url: https://docs.tigera.io/calico/latest/getting-started/kubernetes/quickstart
- type: Support
  url: https://www.tigera.io/calico-support/
- type: Community
  url: https://www.tigera.io/project-calico/community/
- type: Blog
  url: https://www.tigera.io/blog/
- type: GitHubOrganization
  url: https://github.com/tigera
- type: SourceCode
  url: https://github.com/projectcalico/calico
- type: Pricing
  url: https://www.tigera.io/tigera-products/calico-cloud-pricing/
- type: SignUp
  url: https://www.calicocloud.io/signup
- type: TermsOfService
  url: https://www.tigera.io/legal/terms-of-use/
- type: PrivacyPolicy
  url: https://www.tigera.io/legal/privacy-policy/
- type: Contact
  url: https://www.tigera.io/contact/
- type: StatusPage
  url: https://status.calicocloud.io/
- type: Security
  url: https://www.tigera.io/vulnerability-disclosure/
- type: SecurityBulletins
  url: https://www.tigera.io/security-bulletins/
- type: Compliance
  url: https://www.tigera.io/tigera-products/calico-cloud-trust-center/
- type: TrustCenter
  url: security/tigera-trust-center.yml
- type: VulnerabilityDisclosure
  url: security/tigera-vulnerability-disclosure.yml
- type: DomainSecurity
  url: security/tigera-domain-security.yml
- type: Authentication
  url: authentication/tigera-authentication.yml
- type: OAuthScopes
  url: scopes/tigera-scopes.yml
- type: WellKnown
  url: well-known/tigera-well-known.yml
- type: LLMsTxt
  url: llms/tigera-llms.txt
- type: MCPServer
  url: mcp/tigera-mcp.yml
- type: ToolCrosswalk
  url: mcp/tigera-tool-crosswalk.yml
- type: Packages
  url: packages/tigera-packages.yml
- type: SDKs
  url: packages/tigera-packages.yml
- type: CLI
  url: cli/tigera-cli.yml
- type: Conventions
  url: conventions/tigera-conventions.yml
- type: Idempotency
  url: conventions/tigera-conventions.yml
- type: Conformance
  url: conformance/tigera-conformance.yml
- type: ErrorCatalog
  url: errors/tigera-problem-types.yml
- type: Lifecycle
  url: lifecycle/tigera-lifecycle.yml
- type: ChangeLog
  url: changelog/tigera-changelog.yml
- type: DataModel
  url: data-model/tigera-data-model.yml
- type: Webhooks
  url: asyncapi/tigera-calico-cloud-webhooks.yml
- type: AgentSkill
  url: skills/_index.yml
- type: Overlay
  url: overlays/tigera-calico-api-overlay.yaml
- type: Protobuf
  url: grpc/tigera-goldmane-api.proto
x-enrichment:
  date: '2026-08-05'
  status: enriched
  artifacts_added: 27
  pass: local-v1
x-coverage:
  state: covered
  reason: null
  detail: >-
    Contract discovery succeeded. The docs host renders its REST reference client-side via
    swagger-ui-react, so the page body is empty to a crawler — but the real Swagger 2.0 document
    (124 paths, 261 operations) is served at https://docs.tigera.io/json/calico-api-swagger.json
    and was harvested verbatim.
  evidence:
  - url: https://docs.tigera.io/json/calico-api-swagger.json
    status: 200
  - url: https://www.tigera.io/.well-known/oauth-protected-resource
    status: 200
  checked: '2026-08-05'