Developers · API

A diligence scorecard from one API call.

POST a company or founder, get back a cited, scored, audited risk × upside verdict — every finding with its source. Token auth. Per-tenant isolation. Your data never trains a model.

QuickstartMCP server →
POST/v1/assess200verdict · cited

POST /v1/diligence → a cited 200.

Quickstart

Your first cited scorecard

Send a company or founder and receive a scored verdict where each finding carries its source.

curl https://api.marketprior.com/v1/diligence \
  -H "Authorization: Bearer $KEY" \
  -H "Content-Type: application/json" \
  -d '{"subject": {"name": "Acme Payments Inc.", "domain": "acmepay.com"}}'

Response

200 OK · application/json
{
  "verdict": "proceed_with_conditions",
  "risk": {
    "value": 0.31,
    "citations": [
      {
        "source": "courtlistener",
        "id": "gov.uscourts.cand.401284",
        "url": "https://www.courtlistener.com/docket/401284/"
      }
    ]
  },
  "upside": {
    "value": 0.72,
    "citations": [
      {
        "source": "sec-edgar",
        "id": "0001234567-25-000042",
        "url": "https://www.sec.gov/cgi-bin/browse-edgar?action=getcompany"
      }
    ]
  },
  "audit": {
    "hash": "e7a1…9f",
    "tamperEvident": true
  }
}

Every score — risk, upside — ships with the citations it was derived from, and the whole run is fixed to a tamper-evident audit.hash.

Core endpoints

A small, scannable REST surface

Submit a company, fetch the cited scorecard, pull its audit trail, or call a single scorer directly.

  • POST
    /v1/diligencecited

    Run a diligence scorecard

    Submit a company or founder (name plus any identifiers — domain, registration number, LEI) to start a diligence run. Returns a run id; poll the run endpoint for the cited risk × upside scorecard.

  • GET
    /v1/runs/{id}cited

    Get a diligence run

    Fetch the scorecard for a run, including every finding with its citations and source snapshot dates.

  • GET
    /v1/runs/{id}/auditcited

    Get the audit trail for a run

    Return the tamper-evident, hash-chained audit records for a run: inputs, scorer versions, citations, and outputs.

  • GET
    /v1/sources

    List public data sources

    Enumerate the public data sources the engine reads from, with their current snapshot dates and update cadence.

  • POST
    /v1/score/{scorer}cited

    Run a single scorer

    Run one deterministic scorer directly — one of risk, upside, sanctions, litigation, officers — and get a cited result without a full run.

These canonical /v1/* routes are the public API surface. (openapi.json documents the internal /api/* app API and is not the public contract.)

Operating model

Auth, limits, and isolation

Auth

Bearer token in the Authorization header. Issue and rotate keys per workspace; scope them to read or run. Keys are never logged or returned in responses.

Rate limits

Per-key limits are returned on every response via X-RateLimit-* headers. A throttled request gets 429 with a Retry-After hint — back off and retry.

Tenant isolation

Every key is bound to one tenant. Runs, documents, and audit records are partitioned per tenant and enforced at the data layer — a key can only ever read its own workspace’s data.

No training on your data

Subjects you submit are used only to compute your scorecard. They are never used to train or fine-tune a model, and are not shared across tenants.

Full API reference →

See a verdict you can actually check.

Name a company or founder. We'll return a fully cited risk × upside verdict you can trace, line by line, back to source documents — yours to keep monitoring, defend at IC, or share with an LP.

Book a demoSign in