# Porsche

> Porsche AG is a German luxury sports-car manufacturer and a Volkswagen Group brand. It
> operates a developer estate, but almost none of it is public: the Porsche ID Developer
> Portal states plainly that Porsche offers no public APIs, and both it and the Porsche
> Developer Hub are restricted to Porsche AG and approved Porsche Partner Companies. The
> one substantial public developer surface is the Porsche Design System — an open web
> component library with its own documentation site, npm packages and CDN.

Generated by the API Evangelist enrichment pipeline on 2026-08-27 from probed Porsche
surfaces. Porsche does not publish an llms.txt of its own; /llms.txt returns 404 on
porsche.com, developer.porsche.com, developerhub.porsche.io, designsystem.porsche.com,
opensource.porsche.com and identity.porsche.com.

## What is and is not callable

- There is **no public Porsche API**. No OpenAPI, Swagger, GraphQL SDL, AsyncAPI, WSDL or
  Protobuf contract is published on any anonymously reachable Porsche host.
- API access requires becoming a **Porsche Partner Company** through the VW Group Supply
  Portal, then being onboarded by Porsche's integration team.
- There is **no A2A agent card** and **no publicly reachable MCP endpoint**.

## Developer surfaces

- [Porsche ID Developer Portal](https://developer.porsche.com/): landing page, terms,
  privacy policy and FAQ are public; everything else requires partner access.
- [Porsche ID API portal (gated)](https://portal.developer.porsche.com): redirects to a
  Microsoft Entra ID login.
- [Porsche Developer Hub](https://developerhub.porsche.io/): APIs plus "Streamzilla"
  real-time streaming. Public landing page only; /docs redirects to a sign-in offering
  Entra ID or KUMS MFA.
- [Developer Portal FAQ](https://developer.porsche.com/faq): the authoritative statement of
  the access policy.
- Integration contact: touchpoint-integration-porsche-id@porsche.de
- [VW Group Supply Portal](https://www.vwgroupsupply.com/one-kbp-pub/en/kbp_public/homepage/homepage.html):
  where partner status is applied for.

## Identity (public and machine-readable)

- [Porsche ID OpenID Connect discovery](https://identity.porsche.com/.well-known/openid-configuration):
  issuer https://identity.porsche.com/. Supports authorization_code, client_credentials,
  refresh_token, device_code, token-exchange and jwt-bearer grants; PKCE S256; DPoP
  (ES256); CIBA backchannel authentication; dynamic client registration; back-channel
  logout. Credentials are still partner-gated.
- [Porsche CIAM discovery](https://login.porsche.com/.well-known/openid-configuration):
  a thin second document; authorization delegates back to identity.porsche.com.

## Porsche Design System (the public surface)

- [Documentation](https://designsystem.porsche.com/v4/)
- [Changelog](https://designsystem.porsche.com/v4/news/changelog)
- [Repository](https://github.com/porsche-design-system/porsche-design-system)
- [Agent context (AGENTS.md)](https://raw.githubusercontent.com/porsche-design-system/porsche-design-system/main/AGENTS.md)
- [Security policy](https://github.com/porsche-design-system/porsche-design-system/blob/main/SECURITY.md):
  supported versions, response-time targets, safe harbor, npm provenance.
- Packages, all at 4.6.0 published 2026-08-20:
  `@porsche-design-system/components-js`, `components-react`, `components-angular`,
  `components-vue`.
- CDN: https://cdn.ui.porsche.com/porsche-design-system/components/ (version-pinned files)
- 78 web components across layout, typography, actions, forms, overlays and data display.

## Open source

- [Porsche Open Source Platform](https://opensource.porsche.com/)
- [porscheofficial on GitHub](https://github.com/porscheofficial): cookie consent banner,
  technology radar, ESLint/Prettier configs, Terraform modules, research code.
- [porsche-design-system on GitHub](https://github.com/porsche-design-system)

## Security

- [security.txt](https://www.porsche.com/.well-known/security.txt): contact
  security@porsche.de, expires 2027-03-31.
- [Information security policy](https://www.porsche.com/international/information-security/)
- Note: the copy at https://identity.porsche.com/.well-known/security.txt expired
  2025-12-31 and names a different contact (vulnerability@porsche.de).

## Optional

- [Newsroom](https://newsroom.porsche.com/)
- [Terms of use](https://developer.porsche.com/terms)
- [Privacy policy](https://developer.porsche.com/privacy-policy)