# JUUL Labs

> JUUL Labs is the maker of the JUUL vaporizer, a closed-system electronic nicotine delivery system
> sold to adult smokers in the United States, the United Kingdom, Canada and a small number of other
> regulated markets. It is a consumer hardware and regulated tobacco-products company. **JUUL Labs
> publishes no public API, no developer portal, and no machine-readable API contract.** This file is
> generated by API Evangelist from an independent third-party profile; it is not published by JUUL.

## What JUUL does publish

- [OAuth 2.0 / OIDC discovery document](https://www.juul.com/.well-known/openid-configuration): the
  only machine-readable document JUUL serves. It describes JUUL's own first-party sign-in for
  juul.com and the JUUL mobile app — authorization, token, userinfo and revocation endpoints, four
  scopes (conx_web, mobileapp, keychain, keychain-force-rebuild), and three grant types. There is no
  public client registration and no way for an outside integrator to obtain credentials.
- [JuulLabs on GitHub](https://github.com/JuulLabs): 55 public repositories. The actively maintained
  ones are general-purpose Kotlin Multiplatform libraries — Kable (Bluetooth Low Energy), koap
  (CoAP), krayon (canvas/charting), khronicle (logging), tuulbox (utilities), indexeddb, datadog-kmp
  — released to Maven Central under the `com.juul.*` group IDs. None of them is a client for a JUUL
  service.

## What JUUL does not publish

- No OpenAPI, Swagger, AsyncAPI, GraphQL SDL, Protobuf, or WSDL on any JUUL host.
- No developer portal, API reference, getting-started guide, sandbox, changelog, CLI, status page,
  or Postman collection.
- No MCP server and no A2A agent card (`/.well-known/agent-card.json` and `/.well-known/agent.json`
  return 403 on www.juul.com and 404 on www.juullabs.com).
- No security.txt, no published vulnerability-disclosure program, and no trust center.

## Company

- [JUUL Labs corporate site](https://www.juullabs.com/)
- [Our technology](https://www.juullabs.com/about/company/our-technology/)
- [Newsroom](https://www.juullabs.com/about/newsroom/)
- [Regulation and policy](https://www.juullabs.com/regulation-and-policy/)
- [Terms and conditions](https://www.juullabs.com/terms-and-conditions/)
- [Privacy policy](https://www.juullabs.com/legal/privacy-policy/)
- [Contact](https://www.juullabs.com/contact-us/)

## API Evangelist profile

- [apis.yml](https://raw.githubusercontent.com/api-evangelist/juul/refs/heads/main/apis.yml)
- [Well-known probe](https://raw.githubusercontent.com/api-evangelist/juul/refs/heads/main/well-known/juul-well-known.yml)
- [Authentication profile](https://raw.githubusercontent.com/api-evangelist/juul/refs/heads/main/authentication/juul-authentication.yml)
- [OAuth scopes](https://raw.githubusercontent.com/api-evangelist/juul/refs/heads/main/scopes/juul-scopes.yml)
- [Packages](https://raw.githubusercontent.com/api-evangelist/juul/refs/heads/main/packages/juul-packages.yml)
- [Conformance](https://raw.githubusercontent.com/api-evangelist/juul/refs/heads/main/conformance/juul-conformance.yml)
- [Domain security](https://raw.githubusercontent.com/api-evangelist/juul/refs/heads/main/security/juul-domain-security.yml)