# Cosmose AI

> Generated: 2026-08-11 | method: generated | source: apis.yml + repo artifacts
> Cosmose AI does not publish an llms.txt. Probed https://cosmose.ai/llms.txt, https://cosmose.co/llms.txt and
> https://kaikai.ai/llms.txt on 2026-08-11 — all returned HTTP 200 with the Angular single-page-app shell, which is
> a soft 200, not a document. This file is generated by API Evangelist from the provider's public surface.

Cosmose AI (Cosmose Inc.) is a Singapore-headquartered, Polish-founded retail intelligence company that measures,
predicts and influences offline shopping behaviour, claiming reach across roughly one billion consumers through an
SDK embedded in partner mobile applications. Founded in 2014 by Miron Mironiuk. Customers include LVMH, Richemont,
L'Oreal and Estee Lauder. Two consumer products: Cosmose Media (advertising) and KaiKai / KaiKaiNow (a gamified
"shoppertainment" and lock-screen app built with the NEAR Foundation).

## What is and is not callable

Cosmose AI runs no public developer program. There is no developer portal, no API reference site, no pricing page,
no self-serve signup and no key-issuance flow. The analytics and ad-targeting product it actually sells has no
public machine-readable contract at all.

One API surface is nonetheless public: a springdoc-generated OpenAPI 3.0.1 document for the KaiKai Deal Hunter
registration service, served anonymously from the Singapore gateway.

## APIs

- [Cosmose AI Deal Hunter Registration API](https://api.sg.cosmose.co/deal-hunter-registration-api/swagger-ui.html):
  Registration, onboarding, invitation and account-lifecycle service behind the KaiKai / Deal Hunter consumer app,
  plus the merchant, school, newsletter and contact lead-capture forms on kaikai.ai and cosmose.ai. 22 paths,
  24 operations. Base URL `https://api.sg.cosmose.co/deal-hunter-registration-api`.
  Live spec: https://api.sg.cosmose.co/deal-hunter-registration-api/v3/api-docs

## Specifications

- [OpenAPI 3.0.1 (refined)](openapi/cosmose-ai-deal-hunter-registration-api-openapi.yml): servers[] corrected to the
  reachable gateway; title and provenance added.
- [OpenAPI 3.0.1 (verbatim harvest)](openapi/_original/cosmose-ai-deal-hunter-registration-api.json)
- [Overlay of our changes](overlays/cosmose-ai-deal-hunter-registration-api-overlay.yaml)

## Runtime semantics

- [Authentication](authentication/cosmose-ai-authentication.yml): one scheme, HTTP bearer JWT, applied globally to
  all 24 operations. `POST /v2/token` is OAuth-shaped (`grant_type`, `refresh_token`, `scope=kaikai`) but is not
  OAuth 2.0 — query parameters, no oauth2 security scheme, no discovery document.
- [Conventions](conventions/cosmose-ai-conventions.yml): Spring Data page/size/sort pagination on one operation; no
  idempotency keys anywhere; no request-id or correlation header; v1 and v2 path versions coexisting with no stated
  migration.
- [Error catalog](errors/cosmose-ai-problem-types.yml): proprietary `{errorCode, message}` envelope with a closed
  9-value enum. Not RFC 9457. 401 is returned by the gateway but never declared, and in a different envelope.
- [Rate limits](rate-limits/cosmose-ai-rate-limits.yml): none published. A daily invitation quota is provably
  enforced (`INVITATION_DAILY_LIMIT_EXCEEDED`) but never quantified, and surfaces as 400 rather than 429.
- [Data model](data-model/cosmose-ai-data-model.yml): 8 entities, write-mostly, no GET-by-id for any resource.
- [Lifecycle](lifecycle/cosmose-ai-lifecycle.yml): no changelog, no status page, no deprecation policy, no SLA.

## SDKs and packages

- [Packages](packages/cosmose-ai-packages.yml): four first-party iOS xcframeworks distributed through a private
  CocoaPods spec repository at https://github.com/Cosmose/pod-specs, resolving binaries from an authenticated Nexus
  at repo.cosmose.co. Nothing is published to npm, PyPI, Maven Central, CocoaPods trunk or any other public
  registry. CosmoseSDK and CosmoseNotificationsSDK are frozen at 2.0.18 (2021-12-09); the newest first-party package
  of any kind is HartAiSdk 1.0.0-preprod (2024-09-05), still marked pre-production. No Android SDK is published.

## Agent surfaces

- No MCP server. [Derived candidate tool list](mcp/cosmose-ai-mcp.yml) — a candidate only; Cosmose serves no MCP
  endpoint, and no `MCPServer` pointer is claimed.
- No A2A agent card. Probed `/.well-known/agent-card.json` and `/.well-known/agent.json` on six hosts; see
  [well-known probe](well-known/cosmose-ai-well-known.yml).
- [Agent Skills](skills/_index.yml): two packaged skills grounded in real operationIds — invite-and-onboard, and
  erase-and-restore.

## Governance

- [Conformance](conformance/cosmose-ai-conformance.yml): OpenAPI yes; OAuth 2.0, OIDC, RFC 9457, RFC 9116, RFC 8594,
  SCIM, MCP and A2A all no. No SOC 2, ISO 27001, PCI, HIPAA or FedRAMP claim is published anywhere.
- [Domain security](security/cosmose-ai-domain-security.yml): TLS 1.3 on both hosts; no HSTS on cosmose.ai, no
  DNSSEC, no CAA on either domain, no DMARC on cosmose.ai.
- [Plans and pricing](plans/cosmose-ai-plans-pricing.yml): none published; enterprise contact-sales only.

## Company links

- Website: https://cosmose.ai/
- About: https://cosmose.ai/about-us
- Blog: https://cosmose.ai/blog
- Careers: https://cosmose.ai/careers
- Privacy policy: https://cosmose.ai/privacy-policy
- Consumer opt-out: https://cosmose.ai/opt-out
- KaiKai: https://kaikai.ai/
- GitHub: https://github.com/Cosmose
- Support email (from the podspecs): support@cosmose.co