# Cerapedics

> Cerapedics is a global, commercial-stage orthobiologics company headquartered in Westminster, Colorado. It develops and commercializes bone repair products built on P-15, a proprietary osteogenic cell-binding synthetic small peptide discovered in 1996. Its two FDA premarket-approved (PMA) products are i-FACTOR Peptide Enhanced Bone Graft (approved 2015 for single-level anterior cervical discectomy and fusion) and PearlMatrix P-15 Peptide Enhanced Bone Graft (approved 2025 for single-level transforaminal lumbar interbody fusion).

This file was generated by the API Evangelist enrichment pipeline on 2026-08-02 from a live probe of Cerapedics' public surface. Cerapedics does not publish an llms.txt of its own (https://www.cerapedics.com/llms.txt returns 404).

## API surface

Cerapedics publishes **no public developer program**: no developer portal, no OpenAPI or Swagger definition, no GraphQL endpoint, no AsyncAPI or webhook catalog, no SDKs on npm/PyPI/Maven/NuGet/RubyGems, no CLI, no Postman collection, and no A2A agent card. The corporate site is a Drupal 10 install with JSON:API and REST disabled.

The one machine-readable surface found is an OAuth-protected Model Context Protocol server:

- [Cerapedics MCP Server](https://mcp.cerapedics.com/mcp): JSON-RPC over streamable HTTP. Every call requires a bearer token; the tool list is not publicly readable.
- [Protected resource metadata](https://mcp.cerapedics.com/.well-known/oauth-protected-resource): RFC 9728 document naming the resource, its authorization server and its scopes.
- [Authorization server metadata](https://mcp.cerapedics.com/.well-known/oauth-authorization-server): RFC 8414 document; issuer is Microsoft Entra ID, authorization_code + refresh_token grants, PKCE S256.

Authorization is delegated to the company's Microsoft Entra ID tenant and gated behind a single scope, `https://mcp.cerapedics.com/mcp/user_impersonation`. There is no self-service registration, which indicates an internal/tenant-restricted deployment rather than a public API. Agents outside that tenant cannot call it.

## Products

- [i-FACTOR Peptide Enhanced Bone Graft](https://www.cerapedics.com/products/i-FACTOR)
- [PearlMatrix P-15 Peptide Enhanced Bone Graft](https://www.cerapedics.com/products/pearlmatrix)
- [P-15 peptide technology](https://www.cerapedics.com/science/p-15)
- [Clinical evidence](https://www.cerapedics.com/science/evidence)

## Company

- [Cerapedics](https://www.cerapedics.com/)
- [Who we are](https://www.cerapedics.com/about-us/who-we-are)
- [News](https://www.cerapedics.com/news-and-events/news) ([RSS](https://www.cerapedics.com/rss.xml))
- [Events](https://www.cerapedics.com/news-and-events/events)
- [Resources](https://www.cerapedics.com/resources)
- [Careers](https://www.cerapedics.com/careers)
- [Contact](https://www.cerapedics.com/contact-us)
- [Request medical information](https://www.cerapedics.com/mirf)
- [Grants and giving](https://grants.cerapedics.com/)

## Legal

- [Privacy policy](https://www.cerapedics.com/privacy-policy)
- [Terms of use](https://www.cerapedics.com/terms-of-use)
- [California declaration](https://www.cerapedics.com/california-declaration)

## Artifacts in this repo

- mcp/cerapedics-mcp.yml — the MCP server manifest, with the probe evidence
- authentication/cerapedics-authentication.yml — the OAuth profile
- scopes/cerapedics-scopes.yml — the published scopes
- well-known/cerapedics-well-known.yml — every /.well-known/ path probed, with status
- conformance/cerapedics-conformance.yml — standards conformance, probed
- errors/cerapedics-problem-types.yml — the observed error envelope
- security/cerapedics-domain-security.yml — TLS/HSTS/DNSSEC/CAA/SPF/DMARC