# Dealer.com > Dealer.com, a Cox Automotive brand, builds automotive dealership websites, digital > advertising and digital marketing technology used by thousands of franchise and independent > dealers across North America. It publishes two distinct API surfaces: a read-only REST data > API family for dealer accounts, manufacturer incentives and vehicle inventory (the Dealer > Developer Portal, key-authenticated), and a browser-side JavaScript integration API that lets > approved partners insert experiences into dealer websites (the Website Integration API, part > of the Integrated Partner Program). Platform-level lead, deal and digital-retail data flows > through the separately gated Cox Automotive Integration Platform. Generated by the API Evangelist enrichment pipeline on 2026-08-12 from Dealer.com's own published documentation. Dealer.com does not serve an llms.txt of its own (https://www.dealer.com/llms.txt returns 404). ## Read this first - Base URL for every Developer Portal API call is documented as `https://api.dealer.com`. As of 2026-08-12 that host does NOT resolve in DNS. The per-service hosts it fronts (`vehicles.inv.dealer.com`, `incentives.inv.dealer.com`, `equipment.inv.dealer.com`, `price.inv.dealer.com`) are live AWS API Gateway endpoints and answer 403 without a key. - Authentication is a single API key, passed as `?api_key={key}`. Register at https://coxautoinc.mashery.com/member/register. - Default quota: 2 requests/second and 5,000 requests/day per key, raised case-by-case. - Everything documented is GET. No write operations are published. - There is no working machine-readable specification. The Swagger documents the portal's own API Explorer loads have contained an AWS error string since February 2020. ## APIs - [Dealer Developer Portal](https://developer.inv.dealer.com/): entry point for the Accounts, Incentives and Inventory APIs, plus the (non-functional) API Explorer. - [Accounts API](https://developer.inv.dealer.com/content/accounts/accountsApi.html): `GET /accounts/search`, `GET /accounts/id/{accountId}`. Dealership identity, address, contact, franchises, external dealer codes, and the group hierarchy via parentIds/ancestorIds/decendantIds. - [Incentives API](https://developer.inv.dealer.com/content/incentives/incentivesApi.html): `GET /incentives`, `GET /incentives/id/{uniqueId}`. Manufacturer cash, lease and finance offers with disclaimers, effective and expiration dates, and trim applicability. - [Vehicle API](https://developer.inv.dealer.com/content/inventory/vehicleApi.html): `GET /vehicles/search`, `GET /vehicles/id/{uuid}`. 66 selectable properties covering identity, specification, appearance and up to twenty distinct price fields. - [Equipment API](https://developer.inv.dealer.com/content/inventory/inventory-home.html): `GET /vehicles/equipment`, `GET /vehicles/equipment/id/{uuid}`. - [Price API](https://developer.inv.dealer.com/content/inventory/inventory-home.html): vehicle price data as its own resource. - [Website Integration API](https://dealerdotcom.github.io/web-integration-api-docs/): browser-side JavaScript. `window.DDC.APILoader` โ†’ `API.subscribe`, `API.insert`, `API.insertCallToAction`, `API.insertGalleryContent`, `API.utils.*`. Events: `page-load-v1`, `dealership-info-v1`, `vehicle-shown-v1`, `vehicle-data-updated-v1`. - [Cox Automotive Integration Platform](https://developer.coxautoinc.com/): OAuth (Okta), approved partner agreement required. Leads, inventory, deal and digital-retail data across Cox Automotive brands. Reference is not public. ## Conventions - Sparse fieldsets: repeat `select=` for each property you want back. This is the most important convention on the API โ€” the Vehicle resource alone exposes 66 selectable fields. - Pagination: `start` and `size`. Collections return a bare JSON array with no total and no next link, so end-of-collection is inferred from a short page. - Filtering: flat query parameters, exact match, AND-combined. - Hypermedia: every resource carries a HAL-style `links[]` array with `rel`, `href`, `templated` and `deprecation`. - Versioning: "version 1.0" is stated in prose only. The only version signal on the wire is the payload `@type` discriminator (e.g. `acct_v1`). - Errors: HTTP status codes only (400, 401, 403, 404, 502, 503, 504) with a prose troubleshooting table. No RFC 9457, no application error codes, no 429 documented despite published quotas. - Idempotency: not published, and not applicable to a GET-only surface. ## Authentication - Developer Portal APIs: `api_key` query parameter (a header form is documented but the header name is not published). No OAuth, no scopes, no rotation policy. - Website Integration API: an integration key configures the integration, and Dealer.com signs RS256 JWTs asserting that it rendered a given page for a given account on a given domain with given vehicles. Validate them against the live JWK Set: https://api.web.dealer.com/ipp/keys/jwks.json (31 rotating RSA keys). Tokens carry `iat` and deliberately no `exp`; the consumer defines its own freshness window. ## Testing - There is no sandbox and no test key. Use the public demo account `ddcdemo` and the demo dealership site https://www.roimotors.com/. - For the Website Integration API, `API.test('https://your.cdn/your-script.js')` cookies your own browser session on any live Dealer.com site, then add `?_integrationMode=debug` (and `&_integrationLogLevel=trace`) to see log output. ## Access - Developer Portal API key: https://coxautoinc.mashery.com/member/register - Integrated Partner Program (Website Integration API): https://forms.dealer.com/integrated-partner-program.htm, IntegratedPartners@coxautoinc.com - Website Integration API onboarding contact: Website.Integration.API@coxautoinc.com - No published pricing for API access; all access is under a commercial partner agreement. ## Optional - [Website Integration API changelog](https://github.com/DealerDotCom/web-integration-api-docs/blob/master/CHANGELOG.md): Keep a Changelog format, last entry 2024-07-24. - [Cox Automotive API status](https://coxautoapi.statuspage.io): covers the Cox Automotive Integration Platform components, not the Dealer Developer Portal APIs. - [security.txt](https://www.dealer.com/.well-known/security.txt) โ€” Cox Automotive Security Engineering, https://www.coxautoinc.com/responsible-disclosure - [Integrated Partner Program](https://www.dealer.com/products/integrated-partner-program/) - [Terms of use](https://www.dealer.com/company/terms-of-use/) ยท [Privacy policy](https://www.dealer.com/company/dealer-com-privacy-policy/)