# Elephas Biosciences

> Elephas Biosciences Corporation (Madison, Wisconsin) builds elive, a functional
> immune-profiling platform that measures how a patient's own live tumor tissue
> responds to immunotherapy. Elephas publishes no public API, no developer portal
> and no machine-readable contract. Its only digital surface is the Elephas Portal,
> a customer-authenticated web application through which clinicians and research
> partners receive elive test reports. This file was generated by API Evangelist
> from probed evidence; it is not published by Elephas.

## Provenance

- generated: 2026-08-12
- method: generated
- source: apis.yml + the probed artifacts in this repository
- note: Elephas serves no /llms.txt (https://elephas.com/llms.txt returns 404).

## What Elephas does

- [What We Do](https://elephas.com/what-we-do): the elive platform — elive Edge
  (automated cutting of core-needle biopsies into uniform 300-micron viable
  fragments), elive Gel (hydrogel preserving the native tumor microenvironment) and
  the elive Method (sequential treatment plus cytokine analysis).
- [Research products and services](https://elephas.com/products-services/research)
- [Biopharma services](https://elephas.com/products-services-pharma)
- [Early access program](https://elephas.com/products-services/early-access-program)
- [Data](https://elephas.com/data)
- [Publications](https://elephas.com/resources/publications)
- [Clinical trials](https://elephas.com/resources/clinical-trials)

## APIs

- Elephas Portal API — https://portal.elephasapis.com — PRIVATE. An ASP.NET Core
  (Kestrel) service that answers every path, including /swagger and
  /swagger/v1/swagger.json, with HTTP 401 and a WWW-Authenticate: Bearer challenge.
  Human entry point: https://portal.elephas.com/
- There is no public API, no sandbox, no API key issuance and no developer sign-up.

## Authentication

- Azure AD B2C on the company-controlled host na.login.elephas.com.
- OpenID Connect discovery (anonymous, HTTP 200):
  https://na.login.elephas.com/bf865bf1-740f-49ec-922c-9b2c233faa13/B2C_1A_SMART_HRD_SUSI/v2.0/.well-known/openid-configuration
- Authorization code flow; policy B2C_1A_SMART_HRD_SUSI (home-realm discovery, so
  institutional users federate to their own identity provider).
- Access requires an Elephas tenant account. There is no self-service registration.

## Artifacts in this repository

- apis.yml — the APIs.json profile
- well-known/elephas-biosciences-well-known.yml — /.well-known probe across every host
- well-known/elephas-biosciences-openid-configuration.json — the real OIDC discovery document
- authentication/elephas-biosciences-authentication.yml — probed auth profile
- scopes/elephas-biosciences-scopes.yml — the two observable OAuth scopes
- errors/elephas-biosciences-problem-types.yml — the observed error envelope
- conventions/elephas-biosciences-conventions.yml — probed runtime semantics
- conformance/elephas-biosciences-conformance.yml — standards the surface does and does not meet
- security/elephas-biosciences-domain-security.yml — TLS/HSTS/DNS posture
- plans/elephas-biosciences-plans-pricing.yml — no published pricing
- rate-limits/elephas-biosciences-rate-limits.yml — no published or signalled limits
- packages/elephas-biosciences-packages.yml — no first-party SDKs on any registry

## What does not exist

No OpenAPI or Swagger. No GraphQL. No AsyncAPI or webhooks. No MCP server. No A2A
agent card. No SDKs, CLI or Postman collection. No changelog, status page,
deprecation policy, security.txt, bug bounty or trust center. Each was probed; see
the artifacts above for the URLs and status codes.

## Company

- [Home](https://elephas.com/)
- [About](https://elephas.com/about-us)
- [News](https://elephas.com/news) ([RSS](https://elephas.com/news/rss.xml))
- [Contact](https://elephas.com/get-in-touch)
- [Careers](https://elephas.com/careers)
- [Terms of Service](https://elephas.com/terms-of-service)
- [Privacy Policy](https://elephas.com/privacy-policy)
- [LinkedIn](https://www.linkedin.com/company/elephasbiosciences)