# Agora Data

> Agora Data, Inc. is an Arlington, Texas fintech serving the non-prime and Buy Here Pay Here (BHPH) automotive finance market. It provides capital, portfolio analytics and loan-servicing technology that let independent auto dealers and other loan originators publish, analyze and sell their retail installment contract portfolios. Its public API is a loan-data import surface used by dealer management system (DMS) vendors and integration partners.

This file was generated by API Evangelist from Agora Data's public surface on 2026-08-06. Agora Data does not publish an llms.txt of its own (https://agoradata.com/llms.txt returns 404). It is an independent third-party profile, not a document from Agora Data.

## API

- [Agora Data Loan Import API](https://api.agoradata.com): OpenAPI 3.1.0, 21 operations. Multipart loan-file import per DMS vendor and upload subtype (with a priority lane), import-format lookup, asynchronous upload status polling, loan listing and deletion, a third-party provider passthrough, OAuth and password authentication endpoints, inbound DMS file-delivery webhook receivers, and a health check.
- [OpenAPI definition](https://api.agoradata.com/openapi.json): served live at the API host root.
- [Swagger UI reference](https://api.agoradata.com/docs)
- [ReDoc reference](https://api.agoradata.com/redoc)
- [Health endpoint](https://api.agoradata.com/health): anonymous liveness check.

## Authentication

- API key required on all `/api/v1/*` operations. The header name is not published; unauthenticated calls return HTTP 400 `{"detail":"Api Key is required"}`.
- `Authorization` header required on `/providers` and `/providers/{provider_name}/{rest_of_path}`; unauthenticated calls return HTTP 400 `{"detail":"Authorization header is required"}`.
- OAuth authorization code at `POST /oauth/authorize` and `POST /oauth/token` (returns access_token, refresh_token, expires_in, scope). No scope vocabulary is published.
- Username/password at `POST /login/authenticate`.
- Webhook receivers verify an `x-agora-files-key` header (declared optional in the spec).
- AgoraPortal logs in through an Auth0 OIDC tenant: [discovery document](https://agora-data.us.auth0.com/.well-known/openid-configuration).

## What an agent should know before calling this API

- Imports are asynchronous: POST a file, receive an `api_activity_uuid`, then poll `GET /api/v1/uploads/{api_activity_uuid}`.
- There is NO idempotency key on any write operation, including file imports. A retried upload after a timeout may duplicate a loan portfolio. Poll for status before retrying.
- `account_uuid_and_id` is the tenant selector and appears on 13 of 21 operations, but is declared OPTIONAL and untyped. Always send it explicitly.
- No pagination on `GET /api/v1/loans`.
- Errors use the FastAPI `{"detail": ...}` envelope, not RFC 9457 problem+json. Auth failures come back as 400, not 401/403.
- `DELETE /api/v1/loans/{rest_of_path}` is destructive, has no dry-run and no idempotency protection.
- The OpenAPI declares no securitySchemes and no typed 200 responses, so generated clients will be untyped and unauthenticated by default.
- An unversioned legacy path tree (`/import/*`, `/status/*`, `/loans/*`) duplicates most of `/api/v1/*`. Prefer `/api/v1`.

## Products

- [Dealers](https://agoradata.com/dealers/): contract funding for subprime independent dealers.
- [Financial Institutions](https://agoradata.com/financial-institutions/)
- [AgoraCapital subscription](https://agoradata.com/agoracapital-subscription/): structured financing connecting originators to capital-markets funding.
- [AgoraInsights](https://agoradata.com/agorainsights/): portfolio performance analytics.
- [AgoraPortal](https://portal.agoradata.com/): originator-facing management console.
- [Quantitative modeling / Nuron](https://agoradata.com/quantitative-modeling/): AI risk, pricing and fraud modeling.
- [Altruvo](https://agoradata.com/altruvo/): blockchain-based auto finance platform.

## Company

- [Website](https://agoradata.com/)
- [About](https://agoradata.com/about-us/)
- [News (ReveNews)](https://agoradata.com/revenews/)
- [Get started](https://agoradata.com/get-started-onramp-subprime-auto-finance/)
- [Contact](https://agoradata.com/contact-us/)
- [Careers](https://agoradata.com/careers/)
- [Help center](https://support.agoradata.com/hc/en-us): carries the DMS API integration articles; served behind a bot challenge.
- [GitHub](https://github.com/AgoraData): two archived forks of third-party projects; no first-party SDK.
- [Terms of use](https://agoradata.com/terms/)
- [Privacy policy](https://agoradata.com/privacy-policy/)

## Not published

No SDKs or client libraries on npm, PyPI, Maven Central, NuGet, RubyGems, Packagist or crates.io. No CLI. No MCP server. No A2A agent card (`/.well-known/agent-card.json` and `/.well-known/agent.json` both 404). No AsyncAPI. No status page. No changelog. No security.txt. No published SLA, deprecation policy, rate limits, pricing page or trust center.