generated: '2026-07-21'
method: derived
source: openapi/unitrends-public-api-openapi.json + https://login.backup.net/.well-known/openid-configuration + docs
standards:
- id: oauth2
  conforms: true
  evidence: >-
    Public API access tokens are issued with the OAuth 2.0 client_credentials
    grant at https://login.backup.net/connect/token (documented at
    https://help.unitrends.kaseya.com/uniview-help/Content/MSP/public-api.htm).
- id: oidc
  conforms: true
  evidence: >-
    login.backup.net publishes an OIDC discovery document at
    /.well-known/openid-configuration (saved in well-known/); docs state "we
    generally support OIDC protocol".
- id: pagination
  conforms: true
  evidence: >-
    Every list operation takes page_number/page_size query params and returns
    Paging-Page-Size, Paging-Page-Number, Paging-Total-Records,
    Paging-Total-Pages response headers.
- id: rfc9457-problem-details
  conforms: false
  evidence: OpenAPI documents no application/problem+json responses (only 200s are described).
- id: json:api
  conforms: false
- id: odata
  conforms: false
- id: scim
  conforms: false
- id: idempotency
  conforms: false
  evidence: No idempotency-key mechanism documented; the public API surface is read-only GETs.
- id: rfc9116-security-txt
  conforms: false
  evidence: /.well-known/security.txt returned 404 on www.unitrends.com and public-api.backup.net.