# EatStreet

> EatStreet is a Madison, Wisconsin online food ordering and delivery marketplace
> connecting diners with local restaurants for takeout and delivery across US
> college towns and midsize metros. It ran a documented public API through 2019;
> that surface has since been retired and its developer portal removed. The live
> API is an OAuth 2.0 protected v2 service on the consumer host, discoverable only
> through the RFC 8414 authorization server metadata EatStreet still publishes.

Generated by API Evangelist from public sources on 2026-08-12. EatStreet does not
publish an llms.txt; https://eatstreet.com/llms.txt returns the site's single-page
app HTML shell, not a document.

## API surface

- [EatStreet API v2](https://eatstreet.com/api/v2): Live OAuth 2.0 protected API on
  the consumer host. Only the OAuth endpoints are publicly discoverable. No OpenAPI,
  GraphQL SDL, AsyncAPI or MCP manifest is published on any EatStreet host.
- [Authorization server metadata](https://eatstreet.com/.well-known/oauth-authorization-server):
  RFC 8414 document. Issuer https://eatstreet.com; authorization endpoint
  https://eatstreet.com/authorize; token, introspection and revocation endpoints
  under https://eatstreet.com/api/v2/oauth/. PKCE S256 supported. Scopes:
  merchant_integration, customer, example.
- [JWKS](https://eatstreet.com/.well-known/jwks.json): RSA signing keys referenced
  by jwks_uri.

## Retired

- EatStreet Public API v1 (https://api.eatstreet.com/publicapi/v1) — restaurant
  search, menus, order placement and user management. Retired; every documented
  path returns 404.
- developers.eatstreet.com — the public API documentation host. Returns 404, though
  it is still advertised in the description of https://github.com/eatstreet.

## Company

- [EatStreet](https://eatstreet.com/): consumer ordering marketplace.
- [GetEatStreet](https://geteatstreet.com/): merchant/restaurant side.
- [Help center](https://help.eatstreet.com/)
- [Blog](https://blog.eatstreet.com/)
- [Legal — terms of use and privacy policy](https://eatstreet.com/app/Legal.jsp)
- [Terms of use](https://eatstreet.com/terms)
- [GitHub organization](https://github.com/eatstreet): 20 public repositories, all
  forks of third-party infrastructure. No first-party SDK.

## Profile artifacts (API Evangelist)

- authentication/eatstreet-authentication.yml — OAuth 2.0 profile from the RFC 8414 metadata
- scopes/eatstreet-scopes.yml — the three advertised scopes
- well-known/eatstreet-well-known.yml — full /.well-known probe, hits and soft-200 misses
- conformance/eatstreet-conformance.yml — standards conformance, evidence-backed
- conventions/eatstreet-conventions.yml — runtime semantics observed on live probes
- errors/eatstreet-problem-types.yml — error envelopes observed without credentials
- lifecycle/eatstreet-lifecycle.yml — v1 retirement and the dead developer portal
- packages/eatstreet-packages.yml — no first-party SDK; one abandoned community wrapper
- plans/eatstreet-plans-pricing.yml — no published API pricing
- rate-limits/eatstreet-rate-limits.yml — no documented limits, no runtime signal
- security/eatstreet-domain-security.yml — TLS/HSTS/DNS posture

## Optional

- No status page (status.eatstreet.com does not resolve).
- No changelog, no deprecation policy, no SLA.
- No MCP server, no A2A agent card, no agent skills.
- No security.txt: https://eatstreet.com/.well-known/security.txt returns the SPA shell.