generated: '2026-09-04'
method: searched
source: https://www.benchmarkminerals.com/price-assessments + https://www.benchmarkminerals.com/independent-practitioners-assurance-report
  + openapi/benchmark-minerals-prices-api.yml + live discovery probes
provider: Benchmark Minerals
providerId: benchmark-minerals
conformance:
- id: iosco-pra-principles
  name: IOSCO Principles for Oil Price Reporting Agencies (applied to metals/minerals PRAs)
  conforms: true
  assurance: independent external assurance, report available on request
  evidence: https://www.benchmarkminerals.com/price-assessments — "IOSCO-assured BMI Prices ... audited
    to the industry's most rigorous standards"; assurance report request form at https://www.benchmarkminerals.com/independent-practitioners-assurance-report
  domain_standard: true
  note: This is the domain standard for this market. A price reporting agency whose assessments are IOSCO-assured
    can be referenced directly in supply contracts and exchange-settled instruments — Benchmark BMI lithium
    and cobalt futures list on ICE — where an unassured price cannot. The assurance report itself is form-gated,
    so the assurance TYPE (Type 1 vs Type 2), the practitioner name and the period are not publicly stated
    on the page; the Type 2 claim in this catalog record predates this pass and is not re-verified here.
- id: oauth2
  name: OAuth 2.0
  conforms: true
  evidence: 'https://mcp.benchmarkminerals.com/mcp returns RFC 6750 WWW-Authenticate: Bearer error="invalid_token"
    with scope and resource_metadata'
- id: rfc9728
  name: RFC 9728 OAuth 2.0 Protected Resource Metadata
  conforms: true
  evidence: https://mcp.benchmarkminerals.com/.well-known/oauth-protected-resource returns HTTP 200 with
    authorization_servers, resource and scopes_supported
- id: oidc
  name: OpenID Connect Discovery 1.0
  conforms: true
  evidence: https://cognito-idp.eu-west-2.amazonaws.com/eu-west-2_GuiZRnNNK/.well-known/openid-configuration
    returns HTTP 200 with issuer, jwks_uri and token/authorization endpoints branded on mcp-auth.benchmarkminerals.com
- id: mcp
  name: Model Context Protocol (JSON-RPC 2.0)
  conforms: true
  evidence: https://mcp.benchmarkminerals.com/mcp answers tools/list with a JSON-RPC 2.0 envelope; the
    gateway reports protocol type MCP
- id: openapi
  name: OpenAPI 3.0.3
  conforms: true
  evidence: 'https://www.benchmarkminerals.com/prices-api.yml declares openapi: 3.0.3 and parses; 36 operations,
    95 component schemas'
- id: rfc9457
  name: RFC 9457 Problem Details
  conforms: false
  evidence: no application/problem+json media type anywhere in the contract; the only error schema is
    a bare JSON array
- id: idempotency
  name: Idempotency-Key
  conforms: false
  evidence: 'no idempotency header in the contract — and none is required: the surface has zero mutating
    operations'
- id: pagination
  name: Standard pagination
  conforms: false
  evidence: no limit/offset/cursor/page parameter and no paging fields in any response schema
- id: rfc8594
  name: RFC 8594 Sunset header
  conforms: false
  evidence: no deprecation or sunset policy published
- id: rfc9116
  name: RFC 9116 security.txt
  conforms: false
  evidence: /.well-known/security.txt returns 404 on www.benchmarkminerals.com and source.benchmarkminerals.com
- id: asyncapi
  name: AsyncAPI
  conforms: false
  evidence: no event, webhook or streaming surface documented; price updates are pull-only
- id: a2a
  name: A2A Agent Card
  conforms: false
  evidence: /.well-known/agent-card.json and /.well-known/agent.json miss on every host in the estate
compliance_programs:
- name: IOSCO assurance
  published: true
  access: request form
  url: https://www.benchmarkminerals.com/independent-practitioners-assurance-report
- name: Price Assessment Control Documents
  published: true
  url: https://www.benchmarkminerals.com/price-assessments
- name: Complaints Handling Policy
  published: true
  url: https://www.benchmarkminerals.com/price-assessments
- name: Modern Slavery statement
  published: true
  url: https://www.benchmarkminerals.com/modern-slavery
certifications: []
note: No SOC 2, ISO 27001, PCI or HIPAA certification is published — Benchmark is a price reporting agency,
  and its regulatory posture is market-conduct (IOSCO), not information-security certification. Recorded
  as an empty certifications list rather than omitted, so the gap is legible as checked.
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com