Standards From Practice

Some of the most widely implemented API contracts in the world were never ratified by anybody. S3, the OpenAI API, CKAN's Action API and Ethereum JSON-RPC became standards by being copied — and "compatible" stayed a marketing word until someone wrote down what it commits you to.

One of these is different. SCIM was ratified, in 2015, so describing it again would add nothing. Its profile carries the other axis instead: what the RFC says about each operation, quoted, beside what the industry actually built.

6 standards · published by API Commons

Models

The OpenAI Interface

211 providers in the API Evangelist catalog state OpenAI compatibility. 120 of them publish an OpenAPI harvested byte-identical from their own site, and those are the denominator. A provi...

338 graded 2 core 175 adopters 9 artifacts
Models

The Anthropic Messages Dialect

34 providers in the API Evangelist catalog state Anthropic compatibility. The cohort here is the 29 providers whose published OpenAPI declares at least one operation UNIQUE to the Anthrop...

244 graded 2 core 20 adopters 7 artifacts
Blockchain

The Ethereum JSON-RPC Interface

86 providers in the API Evangelist catalog claim EVM or Ethereum JSON-RPC compatibility. 42 declare an RPC-shaped endpoint and were probed; 21 returned usable results and are the denomina...

78 graded 22 core 40 adopters 10 artifacts
Open Data

The CKAN Action API

220 portals in the API Evangelist catalog run CKAN, across 210 distinct hosts. A version-spread sample was probed read-only; 36 produced usable results and are the denominator.

134 graded 63 core 48 adopters 9 artifacts
Storage

The S3 Interface

58 providers in the API Evangelist catalog claim S3 compatibility. 12 of them declare an S3 operation in a published OpenAPI. That is the denominator, and it is small — the weakest eviden...

116 graded 8 core 46 adopters 10 artifacts
Identity · ratified

SCIM 2.0

368 providers in the API Evangelist catalog mention SCIM — the largest claim cohort of any standard in this programme. 77 of them publish an OpenAPI containing a SCIM path, and those are ...

24 graded 5 core 320 adopters 9 artifacts
These are not designed APIs. Every profile here describes what the industry already implements, graded into core, extended and vendor tiers by measured adoption — from published specs where providers publish them, and by calling live endpoints where that is possible. Each standard was measured differently, each detail page says which method it used and why the others were unavailable, and every adopter entry carries the URL it was read from and the date it was read. A claim is recorded as a claim until something verifies it.

Formal standards

The ratified and published ones — specifications, industry standards, protocols, formats and security standards — read from the API Evangelist standards directory. Each has a page here, and each page lists the providers in the catalog whose own APIs.json carries the standard as a tag: the provider's statement that it is part of what they do, not a measurement by APIs.io. The six profiles above are where measurement exists.

441 standards · 189 carried by at least one provider in the catalog

Cross Domain 262

AAuth
security identity · IETF — individual submiss... · no provider tagged yet
AAuth R3
security identity · IETF — individual submiss... · no provider tagged yet
ABNF
specification · no provider tagged yet
AI Agent Authentication and Authorization
security identity · IETF — individual submiss... · no provider tagged yet
AI Catalog
specification · no provider tagged yet
AMQP
protocol · 6 providers
API Blueprint
specification · 2 providers
API Commons
specification · no provider tagged yet
APIs.json
specification · 2 providers
AT Protocol
protocol · no provider tagged yet
ActivityPub
protocol · 6 providers
ActivityStreams
format · no provider tagged yet
Agent Skills
format · 72 providers
Agent2Agent
specification · no provider tagged yet
Agentic Resource Discovery
specification · no provider tagged yet
Amazon S3 API
specification · Amazon Web Services (vend... · no provider tagged yet
Apache Kafka Protocol
protocol · no provider tagged yet
Apache ORC
format · no provider tagged yet
Apache Thrift
format · no provider tagged yet
AsyncAPI
specification · AsyncAPI Initiative · 12 providers
Atom
protocol · no provider tagged yet
Atom Publishing Protocol
protocol · IETF · 1 provider
BGP
protocol · 2 providers
Backstage Software Catalog Format
specification · no provider tagged yet
Bean Validation
specification · no provider tagged yet
Binary Format
format · 3 providers
Bruno Collection
specification · no provider tagged yet
Bruno Environment
specification · no provider tagged yet
CALM
specification · FINOS · no provider tagged yet
CBOR
format · no provider tagged yet
CDMI
specification · Storage Networking Indust... · no provider tagged yet
CIBA
security identity · no provider tagged yet
CLI Agent Spec
specification · no provider tagged yet
CMIS
specification · OASIS Open · no provider tagged yet
CSS
format · 2 providers
CSV
format · 5 providers
CXL
protocol · no provider tagged yet
CalDAV
protocol · no provider tagged yet
CardDAV
protocol · no provider tagged yet
Certificate Enrolment Protocols
security identity · 6 providers
Certificate Transparency
specification · no provider tagged yet
Chantico
specification · no provider tagged yet
CloudEvents
specification · CNCF — graduated · 7 providers
CobaltCore
specification · no provider tagged yet
Collection+JSON
specification · no provider tagged yet
Communication Protocols
protocol · no provider tagged yet
Configuration Language
format · 3 providers
Cross-Origin Resource Sharing (CORS)
protocol · no provider tagged yet
DDS
protocol · no provider tagged yet
DFDL
format · no provider tagged yet
DHCP
protocol · 1 provider
DNS
protocol · 56 providers
DPoP (Demonstrating Proof of Possession)
security identity · no provider tagged yet
Data Format
format · 3 providers
Dataspace Protocol
protocol · 33 providers
Defense In Depth
security identity · 4 providers
DevSecOps
security identity · 87 providers
EIP-1559
specification · no provider tagged yet
ERC-20
specification · no provider tagged yet
ERC-721
specification · 3 providers
FTP
protocol · 2 providers
File Format
format · 5 providers
Fixed Format
format · no provider tagged yet
Garden Linux
security identity · no provider tagged yet
Gardener
specification · no provider tagged yet
Git LFS
protocol · Git LFS project (open sou... · no provider tagged yet
GraphQL
specification · GraphQL Foundation · 375 providers
Greenhouse
specification · 5 providers
HAL
specification · no provider tagged yet
HTML
format · 10 providers
HTML5
format · 7 providers
HTNG
industry standard · no provider tagged yet
HTTP
protocol · 20 providers
HTTP 2.0
protocol · no provider tagged yet
HTTP 3.0
protocol · no provider tagged yet
HTTP Message Signatures
security identity · no provider tagged yet
HTTP QUERY Method
specification · IETF — HTTP Working Group... · 1 provider
HTTP/2
protocol · no provider tagged yet
HTTP/3
protocol · no provider tagged yet
I/O Docs
specification · no provider tagged yet
IAM
security identity · 41 providers
IMAP
protocol · 3 providers
IPsec
protocol · no provider tagged yet
ISO
umbrella · 1 provider
ISO 10218
industry standard · no provider tagged yet
ISO 8601
format · no provider tagged yet
ISO Standard
umbrella · no provider tagged yet
IT Standards
umbrella · no provider tagged yet
Internet Assigned Numbers Authority (IANA)
format · no provider tagged yet
IronCore
specification · no provider tagged yet
JAX-WS
specification · no provider tagged yet
JCR
format · no provider tagged yet
JDBC
protocol · 2 providers
JMAP
protocol · IETF · no provider tagged yet
JMAP FileNode
protocol · IETF JMAP Working Group · no provider tagged yet
JMESPath
format · no provider tagged yet
JMS
protocol · 1 provider
JPA
specification · 3 providers
JSF
specification · no provider tagged yet
JSON
format · 21 providers
JSON Binding
format · no provider tagged yet
JSON Feed
protocol · no provider tagged yet
JSON Pointer
specification · no provider tagged yet
JSON Processing
format · no provider tagged yet
JSON RPC
protocol · 59 providers
JSON Schema
specification · OpenJS Foundation · 20 providers
JSON Web Token
format · no provider tagged yet
JSON Web Token (JWT)
security identity · no provider tagged yet
JSON-LD
specification · 5 providers
JSON:API
specification · 32 providers
JSONPath
format · no provider tagged yet
JSR-303
specification · no provider tagged yet
JWE
security identity · no provider tagged yet
JWK
security identity · no provider tagged yet
JWS
security identity · no provider tagged yet
Jakarta EE
specification · 11 providers
Java EE
specification · 4 providers
Katalis
industry standard · no provider tagged yet
Kerberos
security identity · no provider tagged yet
LDAP
security identity · 7 providers
Linked Data Platform
protocol · W3C · no provider tagged yet
MAVLink
industry standard · no provider tagged yet
MXML
format · no provider tagged yet
Markdown
format · 20 providers
Markup Language
format · 3 providers
MessagePack
format · no provider tagged yet
Messaging Protocol
protocol · no provider tagged yet
Microcks Examples
specification · no provider tagged yet
Mutual TLS
security identity · 5 providers
Mutual TLS (mTLS) for OAuth
security identity · no provider tagged yet
NFC
protocol · 3 providers
NIO
protocol · 2 providers
NTP
protocol · 1 provider
NeoNephos
umbrella · no provider tagged yet
Network Protocols
protocol · no provider tagged yet
OAuth
security identity · no provider tagged yet
OAuth 2.0
security identity · no provider tagged yet
OAuth 2.0 Protected Resource Metadata
specification · IETF — OAuth working grou... · no provider tagged yet
OAuth 2.0 Security Best Current Practice
security identity · no provider tagged yet
OAuth 2.0 Token Exchange
security identity · no provider tagged yet
OAuth 2.1
security identity · no provider tagged yet
OCI
specification · Open Container Initiative · no provider tagged yet
OCI Distribution Specification
specification · Open Container Initiative · no provider tagged yet
OCI Image Specification
specification · Open Container Initiative · no provider tagged yet
OCI Runtime Specification
specification · Open Container Initiative · no provider tagged yet
ODBC
protocol · no provider tagged yet
OData
specification · 28 providers
OIDC
security identity · 13 providers
OSGi
protocol · no provider tagged yet
OWASP
security identity · no provider tagged yet
Open Collections
specification · no provider tagged yet
Open Component Model
specification · no provider tagged yet
Open Compute Project
protocol · no provider tagged yet
Open Graph Protocol
specification · no provider tagged yet
Open Resource Discovery
specification · no provider tagged yet
OpenAPI
specification · OpenAPI Initiative · 145 providers
OpenAPI Overlays
specification · OpenAPI Initiative · 3 providers
OpenCLI Specification
specification · no provider tagged yet
OpenControlPlane
specification · no provider tagged yet
OpenKCM
security identity · no provider tagged yet
OpenPredicate (formerly JSON Query Language)
specification · None — an open source pro... · no provider tagged yet
OpenXR
specification · 3 providers
PASETO
security identity · no provider tagged yet
PDF
format · 47 providers
PKCE (Proof Key for Code Exchange)
security identity · no provider tagged yet
POP3
protocol · no provider tagged yet
POSIX
protocol · no provider tagged yet
Personal Agent Protocol
specification · no provider tagged yet
Platform Mesh
specification · no provider tagged yet
Postman Collections
specification · no provider tagged yet
Postman Environments
specification · no provider tagged yet
Privacy By Design
security identity · no provider tagged yet
Problem Details for HTTP APIs
specification · no provider tagged yet
Problem Details for HTTP APIs
protocol · no provider tagged yet
Product Tree Standard
specification · no provider tagged yet
Protocol Buffers
format · Google IDL — used pervasi... · 16 providers
Pub/Sub
protocol · 20 providers
QUIC
protocol · no provider tagged yet
QoS
protocol · 2 providers
Quality Of Service
protocol · 3 providers
RAML
specification · no provider tagged yet
RBAC
security identity · 15 providers
RDF
specification · 8 providers
RDP
protocol · 3 providers
REST
protocol · 135 providers
RFID
protocol · 14 providers
RISC-V
protocol · 14 providers
ROS
protocol · 11 providers
RPC
protocol · 27 providers
RSS
protocol · 23 providers
RTSP
protocol · 3 providers
Redfish
protocol · no provider tagged yet
Regular Expressions
format · no provider tagged yet
Resumable Uploads for HTTP
protocol · IETF HTTP Working Group · no provider tagged yet
Rich Authorization Requests (RAR)
security identity · no provider tagged yet
SAE J3016
industry standard · no provider tagged yet
SAML
security identity · 48 providers
SCADA
protocol · 10 providers
SEMI SECS/GEM
industry standard · no provider tagged yet
SFTP
protocol · 2 providers
SMTP
protocol · 20 providers
SNMP
protocol · 2 providers
SOAP
protocol · 19 providers
SPIFFE
security identity · CNCF — graduated · no provider tagged yet
SSH
protocol · 11 providers
SSL/TLS
security identity · 2 providers
SSO
security identity · 77 providers
STOMP
protocol · no provider tagged yet
Schema.org
specification · 4 providers
SecOps
security identity · 3 providers
Secure Tunneling Protocols
protocol · no provider tagged yet
Secure-by-Default
security identity · no provider tagged yet
Secure-by-Design
security identity · no provider tagged yet
Semantic Versioning (SemVer)
format · no provider tagged yet
Server-Sent Events
protocol · 2 providers
Shared Signals Framework
protocol · OpenID Foundation — Share... · no provider tagged yet
Siren
specification · no provider tagged yet
Software-Defined Networking
protocol · 6 providers
Solid Protocol
protocol · W3C Solid Community Group · no provider tagged yet
Specification
specification · 30 providers
Spectral
specification · 2 providers
Standard Webhooks
specification · no provider tagged yet
Swagger
specification · 7 providers
TCP/IP
protocol · 1 provider
TOML
format · no provider tagged yet
Table Format
format · no provider tagged yet
Transaction Tokens
security identity · IETF — OAuth working grou... · no provider tagged yet
Turbo EA Reference Catalog
specification · no provider tagged yet
UMA
security identity · no provider tagged yet
UTF-8
format · no provider tagged yet
VNC
protocol · no provider tagged yet
VPN
protocol · 24 providers
Vacuum
specification · no provider tagged yet
W3C Trace Context
protocol · no provider tagged yet
WADL
specification · no provider tagged yet
WIMSE
security identity · IETF — Applications and R... · 2 providers
WSDL
specification · no provider tagged yet
Web Standards
specification · 3 providers
WebAuthn
security identity · 7 providers
WebDAV
protocol · 2 providers
WebDAV Collection Synchronization
protocol · IETF · no provider tagged yet
WebFinger
protocol · no provider tagged yet
WebHDFS
specification · Apache Software Foundation · no provider tagged yet
WebMention
protocol · no provider tagged yet
WebSockets
protocol · 98 providers
WebSub
protocol · 9 providers
WireGuard
protocol · no provider tagged yet
XML
format · 10 providers
XSLT
format · no provider tagged yet
YAML
format · 2 providers
Zero Trust
security identity · no provider tagged yet
Zero Trust Architecture
security identity · no provider tagged yet
Zero Trust Network Access
security identity · 8 providers
Zero-Trust Security Model
security identity · no provider tagged yet
gRPC
protocol · CNCF · 89 providers
iCalendar
format · no provider tagged yet
llms.txt
convention · 42 providers
private_key_jwt
security identity · no provider tagged yet
tus
protocol · tus community (Transloadit) · no provider tagged yet
vCard
format · no provider tagged yet
vCard Ontology
format · no provider tagged yet
xDS
specification · CNCF — Envoy / cncf/xds · no provider tagged yet

Each standard lives in its own repository in the api-commons GitHub organization, with its profile, artifacts and adopter registry. The schema behind every registry is adopters.