# IRALOGIX

> IRALOGIX is a Pittsburgh, Pennsylvania fintech running a cloud-native, white-label
> IRA (Individual Retirement Account) recordkeeping and administration platform for
> financial institutions — banks, wealth managers, brokerages, recordkeepers and
> advisors — who use it to offer digital IRA programs under their own brand. The
> company markets "API-driven connectivity and real-time data flows", but its
> developer surface is partner-gated: no public OpenAPI, AsyncAPI, SDK, MCP server,
> agent card or sandbox is published.

Generated by the API Evangelist enrichment pipeline on 2026-08-04. IRALOGIX does not
publish its own llms.txt — https://docs.iralogix.com/llms.txt returns the Okta
sign-in shell, not a document.

## APIs

- [IRALOGIX Partner Authorization Server](https://auth.partner.iralogix.com/): the only
  anonymously machine-readable IRALOGIX API surface. An Auth0-hosted OpenID Connect /
  OAuth 2.0 authorization server fronting the partner platform. Supports
  authorization_code (with PKCE S256), client_credentials, refresh_token, device_code,
  token-exchange and jwt-bearer grants; private_key_jwt client authentication; dynamic
  client registration; DPoP; and OIDC back-channel logout.

## Specs and discovery documents

- [OpenID Connect discovery](https://auth.partner.iralogix.com/.well-known/openid-configuration)
- [OAuth 2.0 authorization server metadata (RFC 8414)](https://auth.partner.iralogix.com/.well-known/oauth-authorization-server)
- [JWKS](https://auth.partner.iralogix.com/.well-known/jwks.json)

## API Evangelist artifacts

- authentication/iralogix-authentication.yml — the full auth profile read off the OIDC discovery document
- scopes/iralogix-scopes.yml — the 14 advertised scopes (all OIDC standard / claim scopes; no business scopes published)
- well-known/iralogix-well-known.yml — every /.well-known/* path probed on every host, with status
- conformance/iralogix-conformance.yml — OAuth/OIDC RFC conformance plus the published SOC attestation claims
- security/iralogix-domain-security.yml — TLS, HSTS, DNSSEC, CAA, SPF and DMARC posture

## Docs

- [Website](https://iralogix.com/)
- [Platform overview](https://iralogix.com/platform/)
- [What we offer](https://iralogix.com/what-we-offer/)
- [Who we serve](https://iralogix.com/who-we-serve/)
- [Partner portal / login](https://partner.iralogix.com/) — Auth0-gated
- [Documentation](https://docs.iralogix.com/) — GitBook behind Okta visitor authentication
- [News](https://iralogix.com/news/) ([RSS](https://iralogix.com/feed/))
- [Contact](https://iralogix.com/contact/)
- [Privacy policy](https://iralogix.com/privacy-policy/)

## What is NOT published (probed 2026-08-04)

- No OpenAPI, Swagger, GraphQL or AsyncAPI on any host. api.iralogix.com is a dangling
  CNAME to a retired AWS API Gateway ELB and no longer resolves.
- No /llms.txt, /.well-known/security.txt, /.well-known/api-catalog,
  /.well-known/ai-plugin.json, /.well-known/agent-card.json or /.well-known/agent.json.
- No hosted MCP server, no public GitHub organization, no npm / PyPI / other registry
  packages, no CLI, no Postman collection, no status page, no changelog, no sandbox.
- Compliance is asserted as SSAE SOC 2 Type 1 and SSAE SOC 1 Type 2 in the site footer,
  with no trust centre or report request flow.

## Caution for agents

- `*.iralogix.com` has a catch-all wildcard A record (107.180.9.42). Subdomains such as
  status., trust., security., blog. and app. resolve but are not real hosts.
- partner.iralogix.com and docs.iralogix.com both answer HTTP 200 with an HTML sign-in
  shell for *every* path, including /openapi.json and /llms.txt. A 200 from those hosts
  is not evidence that a document exists.