# Globacap

> Globacap is a London-based private capital markets technology company, founded in 2017, that builds workflow-automation software-as-a-service for issuance, share register management, ongoing administration, transferability and settlement of private securities. In November 2025 Apex Group agreed to acquire the company; the change of control completed in early 2026 and Globacap technology now sits inside Apex Group's digital/tokenisation initiative alongside Tokeny.

This file is generated by API Evangelist from the public Globacap surface. Globacap does not publish an llms.txt of its own (https://globacap.com/llms.txt returns HTTP 403).

## What an agent can and cannot do here

- There is NO public Globacap API. No OpenAPI, Swagger, AsyncAPI, GraphQL SDL, WSDL or protobuf contract is published on any Globacap host.
- There is NO developer portal, API reference, quickstart, sandbox, changelog, status page, CLI, SDK or MCP server.
- Globacap's application API does exist at https://investor.globacap.com/api/ but every path returns HTTP 401 to anonymous callers and the host is fronted by an oauth2-proxy that redirects browsers to /oauth2/start. It is a first-party application backend, not a published product API.
- The one machine-readable document Globacap serves anonymously is its OpenID Connect discovery document at https://login.globacap.com/.well-known/openid-configuration.
- As of 2026-08-22 the marketing site has been reduced to a single acquisition-announcement page; product and news pages return HTTP 403.

## Company

- [Globacap](https://globacap.com/): Acquisition announcement page — the only substantive page still served on globacap.com.
- [Apex Group](https://www.apexgroup.com/): Parent company following the 2025/2026 acquisition.
- [Terms & Conditions](https://globacap.com/terms-conditions/): Site Terms, Customer Terms of Service, Liquidity Terms and Conditions, Placement Terms of Service.
- [Privacy Policy](https://globacap.com/privacy-policy/)
- [Cookie Policy](https://globacap.com/cookie-policy/)

## Platform surfaces (all authenticated)

- [Investor platform](https://investor.globacap.com/): oauth2-proxy protected; also the target of a 301 from platform.globacap.com.
- [Console](https://console.globacap.com/): oauth2-proxy protected.
- [Login](https://login.globacap.com/): Kinde-hosted identity provider on a Globacap hostname.
- [Help centre](https://knowledge.globacap.com/): redirects to globacap.zendesk.com/hc/en-gb, which is sign-in restricted.

## Identity and security

- [OpenID Connect discovery](https://login.globacap.com/.well-known/openid-configuration): issuer https://login.globacap.com, authorization_code + PKCE (S256), RS256 ID tokens, scopes openid/profile/email/phone/address/offline.
- [JWKS](https://login.globacap.com/.well-known/jwks)
- [Trust Center](https://trust.globacap.com/): Vanta-hosted. Content is client-side rendered; no certification list is readable anonymously.
- No /.well-known/security.txt is served (HTTP 404 on login.globacap.com, HTTP 403 on globacap.com).

## Source code

- [github.com/Globacap](https://github.com/Globacap): verified organisation, one public repository (a fork of oauth2-proxy). No first-party SDK on npm, PyPI, RubyGems or crates.io.

## API Evangelist profile artifacts

- [apis.yml](https://raw.githubusercontent.com/api-evangelist/globacap/refs/heads/main/apis.yml)
- [Well-known probe index](well-known/globacap-well-known.yml)
- [Authentication profile](authentication/globacap-authentication.yml)
- [OAuth scopes](scopes/globacap-scopes.yml)
- [Conformance](conformance/globacap-conformance.yml)
- [Domain security](security/globacap-domain-security.yml)
- [Trust center](security/globacap-trust-center.yml)
- [Lifecycle](lifecycle/globacap-lifecycle.yml)
- [Packages](packages/globacap-packages.yml)
- [Plans and pricing](plans/globacap-plans-pricing.yml)
- [Rate limits](rate-limits/globacap-rate-limits.yml)