# 1KOMMA5°

> 1KOMMA5° (1Komma5 Grad) is a Hamburg-headquartered smart-energy company that sells,
> installs and operates integrated residential energy systems — rooftop photovoltaics,
> battery storage, heat pumps and EV charging — and ties them together with Heartbeat AI,
> its energy-management platform, which aggregates customer hardware into one of Europe's
> largest residential virtual power plants. It operates in Germany, Australia, the
> Netherlands, Sweden, Finland, Denmark and Belgium.

Generated by the API Evangelist enrichment pipeline on 2026-08-02. 1KOMMA5° does not
publish an llms.txt of its own (probed on 1komma5.com and every API host — 404 or a
Next.js HTML catch-all). This file is generated from the artifacts in this repo.

## What is actually callable

1KOMMA5° has no developer programme, no developer portal, no API documentation, no API
keys and no published SDKs. Two real HTTP APIs are nonetheless reachable:

- [Offer Tool API](https://api.offer.1komma5grad.com/): sales configuration and quoting
  system. Serves a live OpenAPI 3.0.0 at
  [/swagger-json](https://api.offer.1komma5grad.com/swagger-json) — 60 paths, 73
  operations, 130 schemas. The API itself requires an Auth0 bearer token; the Swagger UI
  at /swagger is behind HTTP Basic.
- [Heartbeat API](https://heartbeat.1komma5grad.com): the customer energy API behind the
  1KOMMA5° mobile apps. Undocumented — no OpenAPI, no reference. OAuth 2.0 authorization
  code + PKCE against auth.1komma5grad.com.

## APIs

- [1KOMMA5° Offer Tool API](https://api.offer.1komma5grad.com/): customers, sites,
  products, pricebook, concepts, offer configurations, PDF generation, German
  effective-price simulation, Zoho CRM deal lookup, tenant/branch/user administration,
  audit logs.
- [1KOMMA5° Heartbeat API](https://help.1komma5.com.au/heartbeat/): sites and systems,
  live PV/battery/heat-pump/EV-charger power, energy summaries, dynamic electricity
  prices, self-sufficiency, Heartbeat AI optimisation decisions. Versions v1–v4 are live
  simultaneously; version discovery at /api/v1/supported-versions.

## Specs

- [Offer Tool OpenAPI 3.0.0 (verbatim)](openapi/1komma5-offer-tool-openapi-original.json)
- [API Evangelist overlay](overlays/1komma5-offer-tool-overlay.yaml)

## Authentication

- [Authentication profile](authentication/1komma5-authentication.yml) — Auth0 OIDC,
  bearer JWT
- [OAuth scopes](scopes/1komma5-scopes.yml) — only standard OIDC identity scopes are
  discoverable; there are no product-resource scopes
- [OIDC discovery document (verbatim)](well-known/1komma5-openid-configuration.json)
- Issuer: https://auth.1komma5grad.com/ · token endpoint
  https://auth.1komma5grad.com/oauth/token · PKCE S256 · DPoP ES256 · dynamic client
  registration at /oidc/register

## Conventions and semantics

- [API conventions](conventions/1komma5-conventions.yml) — page/limit paging on a subset
  of list endpoints, sortBy/sortOrder, no idempotency contract, no rate-limit headers
- [Error catalog](errors/1komma5-problem-types.yml) — proprietary JSON envelopes, not RFC
  9457; the two APIs use *different* envelopes
- [Lifecycle](lifecycle/1komma5-lifecycle.yml) — URI-path versioning, no deprecation
  policy, no SLA, no status page
- [Data model](data-model/1komma5-data-model.yml) — 18 entities, 20 relationships derived
  from the Offer Tool spec
- [Conformance](conformance/1komma5-conformance.yml)

## Agent skills

- [Skill index](skills/_index.yml)
- [Build and send a solar offer](skills/1komma5-build-and-send-offer.md)
- [Browse the product catalogue and pricebook](skills/1komma5-browse-product-catalogue.md)
- [Administer tenant users and branches](skills/1komma5-administer-tenant-users.md)

## Security

- [security.txt (verbatim)](well-known/1komma5-security.txt) — Contact
  security@1komma5grad.com
- [Vulnerability disclosure](security/1komma5-vulnerability-disclosure.yml)
- [Domain security](security/1komma5-domain-security.yml) — DNSSEC yes, CAA no, DMARC
  quarantine, HSTS on all hosts except api.offer.1komma5grad.com
- [Well-known index](well-known/1komma5-well-known.yml)

## Client libraries

- [Packages](packages/1komma5-packages.yml) — no first-party SDK exists. The only client
  is the community-built `onekommafive` on PyPI plus three Home Assistant integrations.

## Company

- [Website](https://1komma5.com/en/)
- [Contact](https://1komma5.com/en/about-us/contact/)
- [Help centre](https://help.1komma5.com.au/)
- [Press releases](https://1komma5.com/en/press/press-releases/)
- [Careers](https://1komma5.com/en/about-us/jobs/)
- [Imprint](https://1komma5.com/en/legal/imprint/)
- [Privacy policy](https://1komma5.com/en/legal/privacy-policy/)
- [Terms (AGB, DE)](https://1komma5.com/de/legal/agb/)

## What does not exist

Probed and confirmed absent on 2026-08-02: developer portal, API reference, getting
started, pricing for API access, sign-up for API access, sandbox, CLI, public Postman
collection, MCP server, A2A agent card (/.well-known/agent-card.json and
/.well-known/agent.json both miss on every host), AsyncAPI, webhook catalogue, GraphQL
endpoint, gRPC/protobuf, status page, API changelog, trust centre, published
certifications. Do not assume any of these; ask 1KOMMA5° directly.