# DSW (Designer Shoe Warehouse)

> DSW is the footwear and accessories retail banner of Designer Brands Inc. (NYSE: DBI),
> operating roughly 500 US stores plus dsw.com and a mobile app. It sells athletic shoes,
> sneakers, boots, sandals and accessories, and runs the DSW VIP Rewards loyalty program.
> DSW does not publish a public API, SDK, developer portal or machine-readable contract.

## Machine-readable surface

- No OpenAPI, AsyncAPI, GraphQL SDL, Protobuf or WSDL contract is published anywhere on
  a DSW-controlled host (probed 2026-09-06).
- No `/.well-known/` discovery document is served on `www.dsw.com`, `dsw.com`,
  `api.dsw.com` or `designerbrands.com`. See `well-known/dsw-well-known.yml` for the
  full probe with HTTP statuses.
- No A2A agent card, no MCP server, no `llms.txt` published by DSW itself. This file is
  generated by API Evangelist from the profile; DSW does not serve it.
- `api.dsw.com` is DSW's private storefront backend (services: config, content, order,
  profile, location, message, metric, payment, offer, item, identity), discovered in the
  `window.__env` configuration block on the dsw.com homepage. It is not documented, not
  offered to third parties, and its routed paths answer with an Akamai bot interstitial.
- `developer.dsw.com` does not resolve (NXDOMAIN).

## How machines actually reach DSW

- **Storefront crawl.** `https://www.dsw.com/robots.txt` is served and points at a real
  sitemap index, `https://www.dsw.com/sitemap/cs_index.xml` (products, brands, categories,
  articles, custom pages). The sitemap is the only crawlable, machine-readable index DSW
  publishes.
- **Vendor / supplier integration is EDI, not API.** Designer Brands routes supplier
  onboarding and compliance through its vendor portal at
  `https://designerbrands.com/vendors/`; third-party order-management platforms connect
  to DSW over EDI rather than a REST API.
- **Caveat for crawlers and agents.** dsw.com is a client-side Angular application. Every
  unrouted path returns HTTP 200 with the same ~20KB empty app shell, including
  `/openapi.json`, `/apis.json` and every `/.well-known/*` path. Treat a 200 from
  dsw.com as unproven: read the body, not the status code.

## Company pages

- Storefront: https://www.dsw.com
- Parent company: https://designerbrands.com
- Vendor / supplier information: https://designerbrands.com/vendors/
- Customer service: https://www.dsw.com/customer-service/general-questions
- Terms of use: https://www.dsw.com/legal/web-terms
- Privacy policy: https://www.dsw.com/legal/privacy-policy
- Press room: https://www.dsw.com/press-room
- LinkedIn: https://www.linkedin.com/company/dswinc

## Profile artifacts in this repository

- `well-known/dsw-well-known.yml` — probed discovery surface (all misses, with statuses)
- `security/dsw-domain-security.yml` — TLS / HSTS / DNSSEC / CAA / SPF / DMARC probe
- `plans/dsw-plans-pricing.yml` — no API plans published
- `rate-limits/dsw-rate-limits.yml` — no API rate limits published