# LocBox Labs (Hownd, Inc.)

> LocBox Labs is the engineering identity behind Hownd, Inc. (formerly FetchRev, originally LocBox), a Tempe, Arizona automated promotions and local-merchant marketing platform. Hownd runs automated marketing for restaurants, health and beauty businesses, family entertainment centers, attractions and retail merchants across website popups, email drip and birthday campaigns, social media, buy-now promos, gift cards, a promo discovery portal, the MyHownd consumer mobile app, and guest-WiFi capture.

Generated by the API Evangelist enrichment pipeline on 2026-08-13. Hownd does not publish an llms.txt; this file is generated from the API Evangelist catalog entry and the artifacts in this repository. Every URL below was fetched and its status recorded.

## What an agent can and cannot do here

- There is **no OpenAPI, GraphQL SDL, AsyncAPI, MCP server or A2A agent card** for this provider. Probes of every base host, application host and marketing host missed.
- There **is** a real API: the **Hownd Partner API** at `https://partner-api.hownd.com`. It is not self-service. Client credentials and a per-merchant Tenant ID are issued by Hownd to approved partners, and the HTTP method and path for its one documented resource are not published.
- The only surface a merchant can integrate without talking to Hownd is a **per-account JavaScript popup embed**.

## APIs

- [Hownd Partner API](https://github.com/LocBoxLabs/hownd-examples): Secured REST API for approved partners to manage Subscribers on behalf of Hownd merchants. Base URL `https://partner-api.hownd.com`. OAuth 2.0 client-credentials bearer token from `https://hownd.auth0.com/oauth/token` with audience `https://partner-api.hownd.com`. Requires `Authorization: Bearer`, `Content-Type: application/json` and `X-Tenant-Id`. Server-to-server only.

## Specs and artifacts

- [Authentication profile](authentication/locbox-labs-authentication.yml): OAuth 2.0 client-credentials, Auth0 tenant metadata, required headers, credential issuance.
- [API conventions](conventions/locbox-labs-conventions.yml): tenant scoping, content types, and an explicit record of what is undocumented (idempotency, pagination, versioning, error envelope).
- [Conformance](conformance/locbox-labs-conformance.yml): OAuth 2.0, RFC 8414, OIDC discovery, JWKS, GDPR/SCC — and the standards that miss.
- [Well-known documents](well-known/locbox-labs-well-known.yml): the two documents Hownd actually serves, plus every 404 and every SPA-shell false positive.
- [OpenID Connect discovery](well-known/locbox-labs-openid-configuration.json): verbatim, from `https://hownd.auth0.com/.well-known/openid-configuration`.
- [OAuth authorization server metadata](well-known/locbox-labs-oauth-authorization-server.json): verbatim, from `https://hownd.auth0.com/.well-known/oauth-authorization-server`.
- [Packages](packages/locbox-labs-packages.yml): no client SDK exists in any language.
- [Embedded components](components/locbox-labs-components.yml): the per-account website plugin script tag.
- [Plans and pricing](plans/locbox-labs-plans-pricing.yml): $247/month plus 5% per transaction.
- [Rate limits](rate-limits/locbox-labs-rate-limits.yml): none published.
- [Lifecycle](lifecycle/locbox-labs-lifecycle.yml): no versioning policy, no deprecation policy, no SLA, status page deactivated.
- [Domain security](security/locbox-labs-domain-security.yml): TLS, HSTS, DNSSEC, CAA, SPF, DMARC probe results.

## Docs

- [Hownd](https://hownd.com): current marketing site.
- [Knowledge Base](https://hownd.com/knowledge-base/): merchant help centre. 110 articles, none of them developer-facing.
- [Quickstart onboarding guide](https://hownd.com/quickstart/)
- [Pricing](https://hownd.com/pricing/)
- [Website plugin install](https://hownd.com/kb/how-do-i-install-the-website-plugin/)
- [Integrations](https://hownd.com/kb/integrations-customers/): MINDBODY, ServiceGuru, Active8, Semnox, CenterEdge, Party Center, PartyWirks, Constant Contact, Facebook, Stripe. All connected inside the merchant application; none exposes an API to a third party.
- [Blog](https://hownd.com/blog/) / [RSS](https://hownd.com/feed/)
- [Terms of Service](https://hownd.com/terms-of-service/)
- [Privacy Policy](https://hownd.com/privacy-policy/)
- [Data Protection Addendum](https://hownd.com/data-protection-addendum/): incorporates the EU Standard Contractual Clauses.
- [Sub-processors](https://hownd.com/sub-processors/)
- [Contact](https://hownd.com/contact/)

## Code

- [LocBoxLabs on GitHub](https://github.com/LocBoxLabs): the Hownd engineering organization, 18 public repositories, 15 of them forks of third-party Ruby gems.
- [hownd-examples](https://github.com/LocBoxLabs/hownd-examples): the only public documentation of the Hownd Partner API. Go example of the Auth0 token exchange. Last commit 2022-07-20.

## Legacy properties

- [FetchRev](https://fetchrev.com): previous brand, still live with its own terms, privacy policy and knowledge base.
- [FetchRev merchant application](https://app.locbox.com/sign_in/): legacy Rails application; `locbox.com` redirects to `fetchrev.com`.
- [Hownd merchant application](https://hownd.app/sign-in/): current Nuxt application.