OneLogin

Fair

Agent Native Score

API Key AuthOpenAPI Spec

Enterprise identity and access management (IAM) platform providing single sign-on (SSO), multi-factor authentication, and user provisioning. Enables secure authentication and authorization across applications and infrastructure.

Categories: Security · Identity · Sso

#43 of 58 in Security · #13 of 15 in Identity

Checklist Breakdown

10 of 33 checks passed. 14 unscored.

Discovery 63%

Can an agent find and understand this tool without a web search?

✓ Published OpenAPI/Swagger spec

✗ Has llms.txt or llms-full.txt

✗ Has an MCP server (official or well-maintained)

✗ MCP server listed in a public registry

✓ API reference docs are publicly accessible

✓ Docs include runnable code examples

✓ Has a public changelog or release notes

✓ Has a public status page

Auth & Onboarding 33%

Can an agent create an account and get credentials without human intervention?

✗ Signup does not require CAPTCHA

✗ Signup does not require phone verification

✓ Supports API key auth (not only OAuth)

✗ API key obtainable without manual approval

✗ No mandatory billing info to start

✓ Can sign up without creating an organization

Pricing 60%

Can an agent operate autonomously without upfront payment or contracts?

✗ Has a free tier

✓ Usage-based pricing available

✓ No minimum contract or commitment

✓ Pricing page is public (no 'contact sales')

✗ Free tier sufficient for testing (not just a trial)

Agent Tooling Not yet scored

How well does the API work for non-human consumers?

— SDK available in 2+ languages

— Structured error responses (JSON with error codes)

— Idempotency support on write endpoints

— Pagination on list endpoints

— Webhook/event support

— Sandbox or test mode available

— Rate limit headers in responses

— Consistent REST resource naming

Reliability Not yet scored

Does the tool fail gracefully when an agent makes a mistake?

— Meaningful error messages (not just 500)

— 429 responses include Retry-After header

— Documented uptime SLA (99.9%+)

— Graceful degradation under rate limits

— Request IDs in responses for debugging

— API versioning supported

Reviewer Notes

OneLogin has a documented REST API and sandbox environment, but lacks MCP server and agent-friendly discovery mechanisms. Account creation requires manual enrollment and approval—agents cannot self-register. The API is solid for programmatic access once authenticated, but the enterprise-focused product design, mandatory paid plans, and human-approval workflows significantly limit autonomous agent adoption.

OneLogin

Let your agents find tools like OneLogin