# Abercrombie & Fitch Co.

> Abercrombie & Fitch Co. is a global specialty retailer of casual apparel, accessories and
> personal care products, operating the Abercrombie & Fitch, abercrombie kids, Hollister and
> Gilly Hicks brands through e-commerce and physical stores across North America, EMEA and APAC.

Generated by the API Evangelist enrichment pipeline from this repository's apis.yml and probed
artifacts on 2026-08-29. Abercrombie & Fitch does not publish a public API, developer portal,
SDK or machine-readable contract; this file records what the company does publish and what was
probed and not found, so an agent does not go looking for a developer surface that is not there.

## API surface

- No public API. No developer portal, API reference, OpenAPI/AsyncAPI/GraphQL contract, SDK,
  webhook catalog, MCP server or A2A agent card was found on any Abercrombie & Fitch host.
- api.anfcorp.com is a live corporate API gateway (it returns a JSON `{"statusCode":404,
  "message":"Resource not found"}` envelope rather than HTML) but publishes nothing anonymously:
  no root document, no /openapi.json, /swagger.json or /api-docs, and no /.well-known/ document.
- Business-to-business integration with Abercrombie & Fitch runs through EDI trading-partner
  onboarding and affiliate networks, not through a self-serve API program.

## Company

- Corporate site: https://corporate.abercrombie.com/
- Storefront: https://www.abercrombie.com/
- Newsroom / blog (The Journal): https://corporate.abercrombie.com/news/the-journal/
- Press releases: https://corporate.abercrombie.com/news/press-releases/
- Contact: https://corporate.abercrombie.com/contact-us/
- GitHub organization: https://github.com/AbercrombieAndFitch — five public repositories, all
  forks of third-party mobile/UI libraries, none updated since 2016. No first-party code.

## Security

- Vulnerability disclosure policy: https://corporate.abercrombie.com/vulnerability-disclosure/
- Reports are taken through HackerOne: https://hackerone.com/abercrombie_fitch
- No RFC 9116 security.txt is served at any host.

## Legal

- Privacy notice: https://corporate.abercrombie.com/privacy-notice/
- Website terms of use:
  https://www.abercrombie.com/shop/CustomerService?pageName=site-use&textKey=LEGAL_SITE_USE&storeId=10051&catalogId=10901&langId=-1

## Notes for agents

- www.abercrombie.com answers HTTP 403 to non-browser clients on every path, including its own
  homepage. That is an edge bot challenge, not a missing page.
- There is no rate-limit documentation, plan/pricing tier, authentication model or error catalog
  to read, because there is no published API to attach them to.