# Sorare

> Sorare is a global fantasy sports platform (football/soccer, NBA basketball, MLB baseball) built on digital collectible player cards stored on Ethereum and a StarkWare rollup. Its public API is a single GraphQL endpoint that exposes cards, users, auctions, offers and real-time subscriptions.

This llms.txt was generated by the API Evangelist enrichment pipeline from the Sorare developer documentation and network catalog; it is not published by Sorare.

## API
- [Sorare GraphQL API](https://api.sorare.com/graphql): Single GraphQL endpoint for cards, users, auctions and offers.
- [GraphQL Playground](https://api.sorare.com/graphql/playground): Interactive schema explorer and query console.
- [GraphQL Schema](https://api.sorare.com/graphql/schema): Downloadable SDL schema.

## Authentication
- JWT bearer via the `signIn` mutation (30-day tokens; `Authorization: Bearer` + `JWT-AUD`), with TOTP 2FA support.
- OAuth 2.0 Authorization Code and Client Credentials grants (authorize/token/revoke on api.sorare.com; 2-hour access tokens + refresh).
- Optional `APIKEY` header for elevated rate limits.
- Blockchain writes (bids/offers) require StarkWare signatures via `@sorare/crypto`.

## Docs
- [Sorare API docs (GitHub)](https://github.com/sorare/api): Official developer documentation, auth guide, rate limits and examples.
- [Sorare Help Center](https://help.sorare.com): Support and OAuth client onboarding.

## SDKs
- [@sorare/crypto (npm)](https://www.npmjs.com/package/@sorare/crypto): StarkWare payload signing.
- [@sorare/actioncable (npm)](https://www.npmjs.com/package/@sorare/actioncable): GraphQL subscriptions over ActionCable WebSockets.
- [gqlactioncable (PyPI)](https://pypi.org/project/gqlactioncable/): Python ActionCable transport for graphql-python/gql.

## Rate limits
- Unauthenticated: 20 req/min; authenticated: 60 req/min; API key: 600 req/min; NBA/MLB queries: 150 req/min; 40 concurrent in-flight queries. HTTP 429 + `Retry-After`.

## Security
- [security.txt](https://sorare.com/.well-known/security.txt): Security contact tech@sorare.com.