generated: '2026-07-19'
method: derived
source: openapi/even-financial-openapi-original.json
docs: https://engine.tech/docs/api-reference/
standards:
- id: openapi-3.0
  conforms: true
  evidence: Provider publishes an OpenAPI 3.0.3 description at engine.tech.
- id: rest-json
  conforms: true
  evidence: RESTful API, JSON request/response bodies over HTTPS.
- id: http-bearer-auth
  conforms: true
  evidence: securitySchemes use type http scheme bearer (publishable/confidential/experimental tokens).
- id: oauth2
  conforms: false
  evidence: No oauth2 securityScheme; bearer-token auth only.
- id: oidc
  conforms: false
- id: rfc9457-problem-details
  conforms: false
  evidence: Errors returned as a JSON array of ApiError objects, not application/problem+json.
- id: date-based-versioning
  conforms: true
  evidence: API-Version request header selects date-stamped API versions (e.g. 2025-10-15, 2026-02-25).
- id: cursor-pagination
  conforms: true
  evidence: Analytics endpoints paginate via paginationToken cursor plus since/until timestamps.
notes: >-
  Engine by MoneyLion publishes partner-facing compliance guidelines, disclosures and consent
  requirements for lending/savings/credit-card marketplaces, but no independently published security
  certification program (SOC 2 / ISO 27001 / PCI DSS) was found on a public trust page, so no
  Compliance pointer is wired.