generated: '2026-07-19'
method: searched
source: openapi/linqalpha-openapi-original.json
standards:
- id: openapi-3.0
  conforms: true
  evidence: openapi 3.0.1 document published at https://docs.linqalpha.com/api-reference/openapi.json
- id: oauth2
  conforms: true
  evidence: >-
    authorization_code flow advertised in RFC 8414 metadata at
    https://api.linqalpha.com/.well-known/oauth-authorization-server
- id: rfc8414-oauth-authorization-server-metadata
  conforms: true
  evidence: /.well-known/oauth-authorization-server returns 200 on api.linqalpha.com
- id: rfc7636-pkce
  conforms: true
  evidence: code_challenge_methods_supported = ["S256"]
- id: rfc7591-dynamic-client-registration
  conforms: true
  evidence: registration_endpoint = https://api.linqalpha.com/oauth/register
- id: model-context-protocol
  conforms: true
  evidence: >-
    first-party remote MCP server at https://api.linqalpha.com/v1/mcp, JSON-RPC 2.0 transport,
    documented tool catalog
- id: jsonrpc-2.0
  conforms: true
  evidence: MCP endpoint speaks JSON-RPC 2.0 with standard -32600/-32601/-32602/-32603 error codes
- id: sse-server-sent-events
  conforms: true
  evidence: 7 operations respond with text/event-stream
- id: openidconnect
  conforms: false
  evidence: /.well-known/openid-configuration returns 404 on all hosts
- id: rfc9457-problem-details
  conforms: false
  evidence: >-
    errors are returned as application/json in a vendor envelope
    ({error:{code,message}, payload:null}); application/problem+json appears nowhere in the spec
- id: rfc9116-security-txt
  conforms: false
  evidence: /.well-known/security.txt returns 404 on linqalpha.com and api.linqalpha.com
- id: rfc9727-api-catalog
  conforms: false
  evidence: /.well-known/api-catalog returns 404
- id: rfc8594-sunset-header
  conforms: false
  evidence: no Sunset or Deprecation header support documented
- id: idempotency-key
  conforms: false
  evidence: no idempotency key header or parameter in the spec or docs
compliance_program:
  published: true
  url: https://linqalpha.com/security
  trust_portal: https://app.drata.com/trust/7345a1c9-8470-48d2-b680-9563e60fb8ff
  certifications:
  - SOC 1 Type II
  - SOC 2 Type II
  - ISO 27001
  additional_commitments:
  - Zero Data Retention Agreement
  artifact: security/linqalpha-trust-center.yml