# The Coca-Cola Company

> The world's largest non-alcoholic beverage company, marketing more than 200 brands in over 200 countries through a bottling and distribution partner network. Coca-Cola is an API CONSUMER, not an API provider: it runs a large internal API program but publishes no public developer program, no machine-readable contract, and no reachable agent surface.

This file is generated by API Evangelist from the profile at
https://github.com/api-evangelist/coca-cola. It is not published by The
Coca-Cola Company. Generated 2026-09-05, method: generated, from apis.yml plus
the probe artifacts in this repository.

## What is NOT here

Read this section first, because it is the finding.

- There is no public API, developer portal, API reference or machine-readable contract.
- No /.well-known/ document is served on any Coca-Cola host (7 hosts x 6 paths probed 2026-09-05, all miss).
- No A2A agent card at /.well-known/agent-card.json or /.well-known/agent.json on any host.
- No reachable MCP server, no llms.txt published by the company, no OpenAPI, AsyncAPI, GraphQL SDL, WSDL or .proto.
- No SDK or client library on npm, PyPI, RubyGems, crates.io, NuGet or Maven Central.
- No published plans or pricing, no documented rate limits, no status page, no versioning or deprecation policy, no security.txt, no vulnerability disclosure program and no public trust center.
- The historical Coca-Cola Enterprises developer program is retired with no notice, redirect or archive: developer.cokecce.com returns Mashery's "Unrecognized domain" and api.cokecce.com returns 596 "Service Not Found".

## API surfaces

- [Coca-Cola internal API platform (MuleSoft Anypoint)](https://www.mulesoft.com/webinars/api/evaluation-to-implementation-coca-cola-company-journey): API-led connectivity across bottling, marketing, ecommerce and supply chain, governed by a Center for Enablement. Internal and partner only; no public contract.
- [TCCC Soft Bottler Agent Hub](https://github.com/The-Coca-Cola-Company/bottler-soft-infra-poc): a multi-tenant hub-spoke agent architecture on Azure API Management. Bottlers deploy a spoke into their own Azure tenant and register it with the TCCC hub. Base URL is templated per deployment: https://tccc-soft-prod-apim-{uniqueid}.azure-api.net. Auth is an Ocp-Apim-Subscription-Key issued by TCCC. Documented operations: POST /api/agents/register (register a bottler agent with capabilities, endpoint, region) and GET /api/health on the spoke Function App (x-functions-key). Partner-gated; not callable by a third party.
- Retired: Coca-Cola Enterprises Product API and Location API, developer.cokecce.com / api.cokecce.com (Mashery). See lifecycle/coca-cola-lifecycle.yml.

## Agent posture

The Coca-Cola Company builds with agents but publishes nothing agents can call.
Its own bottler repository declares Model Context Protocol servers (Cosmos DB,
Blob Storage, Service Bus), Semantic Kernel plugins and memory, AutoGen
agent-to-agent orchestration, and Azure AI Foundry model routing — all of it
provisioned into a bottler's private Azure subscription behind the TCCC APIM
hub. There is no hosted MCP endpoint and no installable package. See
mcp/coca-cola-mcp.yml.

## Source code

- [github.com/The-Coca-Cola-Company](https://github.com/The-Coca-Cola-Company): the verified corporate organization, 53 public repositories. Five are first-party: bottler-soft-infra-poc (Azure ARM template for the bottler agent spoke), kolingo-komply-integration (Python Azure Functions with six function-key-protected HTTP triggers for product registration, translation and compliance data), DNAIQ_POWERBI_PROD, ICOE_SCP-test and experimental. The remaining 48 are GitHub Learning Lab course forks.
- [github.com/C0k3](https://github.com/C0k3): an older Coca-Cola organization. Holds `session`, a serverless reference implementation of a KO session API (POST/PUT/GET/DELETE /session, x-koms-clientid header plus Bearer access/refresh tokens) with a hand-written api-reference.md; `commandments`, TCCC code standards and DevOps practice notes; and `go-serverless`. These are example and internal-practice repositories, not operated services — no host, no live base URL.

## Company

- [Corporate site](https://www.coca-colacompany.com/)
- [Brands](https://www.coca-colacompany.com/brands)
- [About](https://www.coca-colacompany.com/about-us)
- [Contact](https://www.coca-colacompany.com/about-us/contact-us)
- [Media center](https://www.coca-colacompany.com/media-center)
- [Investors](https://investors.coca-colacompany.com/)
- [Careers](https://www.coca-colacompany.com/careers)
- [Sustainability](https://www.coca-colacompany.com/sustainability)
- [Policies and practices](https://www.coca-colacompany.com/policies-and-practices)
- [Privacy notice](https://datatrust.coca-cola.com/us/en/notices/global-consumer-privacy-notice)
- [Terms of service](https://www.coca-cola.com/us/en/legal/terms-of-service)

## Artifacts in this profile

- apis.yml — the APIs.json index for this company
- well-known/coca-cola-well-known.yml — 7 hosts x 6 /.well-known/ paths, all miss (probed)
- security/coca-cola-domain-security.yml — TLS, HSTS, DNSSEC, CAA, SPF, DMARC (probed)
- lifecycle/coca-cola-lifecycle.yml — the retired CCE developer program, with evidence (probed)
- mcp/coca-cola-mcp.yml — MCP declared in first-party source, no reachable server (searched)
- packages/coca-cola-packages.yml — zero first-party SDKs across six registries (searched)
- plans/coca-cola-plans-pricing.yml — zero published plans (searched)
- rate-limits/coca-cola-rate-limits.yml — zero documented limits (searched)
- finops/coca-cola-finops.yml — FinOps shape of bilateral B2B/EDI contracts (generated)