# Trust Centers API reference

Use this as compact context for the live bluedoor Trust Centers API.

Primary URLs:

- API base URL: https://api.bluedoor.sh/trust-centers/v1
- OpenAPI JSON: https://bluedoor.sh/apis/trust-centers/docs/openapi.json
- Upstream OpenAPI JSON: https://api.bluedoor.sh/trust-centers/v1/openapi.json
- Docs: https://bluedoor.sh/apis/trust-centers/docs
- Landing page: https://bluedoor.sh/apis/trust-centers
- Data pages: https://bluedoor.sh/data/trust-centers

Authentication and rate limits:

- Anonymous reads are public and rate limited.
- Email-authenticated API keys are minted through POST /v1/auth/otp and POST /v1/auth/verify.
- Use Authorization: Bearer <key>, x-api-key, or api_key query.
- Responses expose x-rate-limit-limit, x-rate-limit-remaining, x-rate-limit-reset, and x-rate-limit-tier.
- fresh=true, refresh=true, and live=true require a verified email API key.
- Limit increase requests use POST /v1/auth/limits/requests.

Important routes:

- GET /health
- GET /v1/meta
- GET /v1/scorecard
- GET /v1/coverage/providers
- GET /v1/coverage/providers/{provider_id}
- GET /v1/companies
- GET /v1/companies/{id}
- GET /v1/companies/{id}/profile
- GET /v1/trust-centers
- GET /v1/trust-centers/{id}
- GET /v1/trust-centers/{id}/profile
- GET /v1/certifications
- GET /v1/certifications/{id}
- GET /v1/controls
- GET /v1/controls/{id}
- GET /v1/subprocessors
- GET /v1/subprocessors/{id}
- GET /v1/documents
- GET /v1/documents/{id}
- GET /v1/security-updates
- GET /v1/security-updates/{id}
- GET /v1/sources
- GET /v1/sources/{id}
- GET /v1/search
- GET /v1/usage
- POST /v1/auth/otp
- POST /v1/auth/verify
- POST /v1/auth/limits/requests

Examples:

```bash
curl "https://api.bluedoor.sh/trust-centers/v1/meta"
curl "https://api.bluedoor.sh/trust-centers/v1/companies?q=openai"
curl "https://api.bluedoor.sh/trust-centers/v1/coverage/providers/vanta"
curl "https://api.bluedoor.sh/trust-centers/v1/documents?q=SOC%202&limit=5"
curl "https://api.bluedoor.sh/trust-centers/v1/search?q=subprocessors"
curl "https://api.bluedoor.sh/trust-centers/v1/meta?fresh=true" -H "Authorization: Bearer $TRUST_CENTERS_API_KEY"
```