# BuildOps

> BuildOps is an AI-native, all-in-one commercial contractor management platform for
> multi-trade service and construction companies, unifying project management, service
> operations, dispatch and scheduling, financials and invoicing, and sales/CRM. BuildOps
> operates a public Dev Center and states that its platform exposes a public REST API with
> webhook callbacks — but that API documentation is marked "Invite Required" and is not
> reachable without a customer relationship, so no machine-readable contract (OpenAPI,
> AsyncAPI, GraphQL SDL, Postman collection) is published anywhere.

generated: 2026-08-10
method: generated
source: apis.yml + probed BuildOps public surface (API Evangelist enrichment pipeline)

## API surface

- [BuildOps Public API](https://developer.buildops.com/docs/buildops-public-api): REST API
  with webhook callbacks, named by the BuildOps Dev Center. **Invite required** — the
  documentation page returns HTTP 404 to the public. The production host is
  `https://public-api.live.buildops.com` (live; root and `/health` return `OK!`), but it
  serves no specification on any conventional path. No endpoints, no authentication model
  and no rate limits are published.

The contracts exist and are auth-gated rather than absent. Probed 2026-08-10:
`https://api.core.live.buildops.com/v3/api-docs` returns **401** ("Authorization token
isn't provided") — a springdoc-generated OpenAPI is being served behind auth, since a
missing spec would 404. `https://graphql.live.buildops.com/graphql` refuses an
introspection POST with **403** ("Your authorization token is invalid"). Any agent or
integrator therefore needs a BuildOps customer relationship before it can read the
contract at all.
- [BuildOps Data Dictionary](https://developer.buildops.com/docs/data-dictionary/4b402d5ab3edd-build-ops-datasets):
  the only public project in the Dev Center. Documents the datasets BuildOps offers via the
  Dashboard module and a Snowflake private share. Articles only — zero API nodes, zero
  operations.

## Developer resources

- [BuildOps Dev Center](https://developer.buildops.com/): Stoplight-hosted developer portal
- [Integrations catalogue](https://www.buildops.com/platform/integrations): pre-built ERP,
  accounting, field-intelligence, payroll and procurement integrations (QuickBooks, Sage
  Intacct, Viewpoint Vista, Viewpoint Spectrum, NetSuite, Bluon, Inspect Point,
  ServiceChannel, Coast, Miter, Avalara, Kojo)
- [GitHub organisation](https://github.com/BuildHero): 21 public repositories, all forks of
  third-party projects. No first-party client library.
- [BuildOps Academy](https://academy.buildops.com/): customer training and support

## Security and compliance

- [Security policy](https://buildops.com/security-policy): AWS infrastructure, encryption at
  rest and in transit, enforced MFA, annual independent penetration testing, formal incident
  response plan, quarterly access reviews. Security contact: security@buildops.com
- [Trust Center](https://trust.buildops.com/): Vanta-hosted. SOC 2 Type I. Penetration test
  certificate from Astra. Subprocessors: AWS, Okta, Payabli, Snowflake.

## Commercial

- [Pricing](https://www.buildops.com/pricing): no published tiers. Per-user licensing,
  quoted per contractor after a discovery call and demo.
- [Book a demo](https://www.buildops.com/book-demo)
- [Terms of service](https://www.buildops.com/terms-of-service): confirms a "BuildOps
  application programming interface (API)" that third-party integrations use
- [Privacy policy](https://www.buildops.com/privacy-policy)

## Not published

The following were probed on 2026-08-10 and are genuinely absent from BuildOps' public
surface:

- OpenAPI / Swagger — no spec served publicly at any BuildOps host or docs path (one is
  generated behind auth at api.core.live.buildops.com/v3/api-docs)
- AsyncAPI — none, despite webhook callbacks being advertised
- GraphQL SDL — a GraphQL endpoint exists at graphql.live.buildops.com/graphql but
  introspection is gated (403)
- MCP server — none for the BuildOps API
- A2A agent card — /.well-known/agent-card.json and /.well-known/agent.json miss on every host
- /.well-known/security.txt, openid-configuration, oauth-authorization-server, api-catalog — none
- Status page — the widget in the Dev Center belongs to Stoplight, not BuildOps
- Public changelog, SDKs, CLI, sandbox, published rate limits, published plans

## About this file

This file was generated by [API Evangelist](https://apievangelist.com) as part of an
independent third-party profile of BuildOps' publicly available API surface. It is not
published by BuildOps. Profile: https://apis.io/provider/buildops