# WebsitePros (Web.com)

> Web.com — formerly Website Pros, Inc. — sells website building, hosting, domain registration,
> e-commerce and online marketing to small and medium businesses, and is part of Newfold Digital.
> Behind the retail brand it operates a real, gated B2B API: the Web.com International ("NTS")
> Platform API, fronted by Azure API Management at https://api.nts.web.com, for partners and
> resellers who create sales orders, provision services, check domain availability and mint
> customer single-sign-on URLs.

This file is GENERATED by API Evangelist from the artifacts in this repository. Web.com serves no
llms.txt of its own — https://api-docs.intl.web.com/llms.txt and every other Web.com host returned
404 (www.web.com returned 403 behind a Cloudflare bot challenge) when probed on 2026-08-13.

## Access

Access is not self-service. You register at a developer portal, verify your email, and wait for
the Web.com International team to review and activate your subscription and issue your Tenant Id.
Production and development are separate registrations with separate keys.

- [Documentation — International Platform](https://api-docs.intl.web.com/): Web.com's published getting-started guide and request reference, served as a public Postman collection.
- [Production developer portal](https://nts.developer.azure-api.net): Azure API Management portal; sign up, then manage subscription keys.
- [Development developer portal](https://ntsdev.developer.azure-api.net): separate registration, separate keys, titled "Web.com International API".
- [Sign up](https://nts.developer.azure-api.net/signup): request access for the production environment.

## APIs

- [Web.com International Platform API](https://api-docs.intl.web.com/): production base https://api.nts.web.com, development base https://api-dev.nts.web.com. Ten documented operations across sales orders, service orders, domains, SSO and health.

Every call carries three credentials together:

1. `Ocp-Apim-Subscription-Key` — your Azure API Management subscription key.
2. `Authorization: Bearer` — a Microsoft Entra ID token from the client-credentials grant against tenant `03fbebc8-de8a-4428-b573-4c4903610dac`, audience `api://intl.web.com`.
3. A tenant identifier — `x-nts-tenant-id` on the sales-order operations, `tenant-name` on the domain, SSO and service-order operations.

## Specs

- [OpenAPI 3.1 (derived, not published by Web.com)](openapi/websitepros-international-platform-openapi-derived.yml)
- [Postman collection (published by Web.com, saved verbatim)](collections/websitepros-international-platform.postman_collection.json)
- [Overlay of API Evangelist annotations](overlays/websitepros-international-platform-overlay.yaml)

## Operations

- `checkDomainAvailability` — GET /api/domain/check/{domain}
- `spinDomainSuggestions` — POST /api/domain/spin
- `listSalesOrders` — GET /sales-orders/v1
- `createSalesOrder` — POST /sales-orders/v1
- `getSalesOrderById` — GET /sales-orders/v1/{salesOrderId}
- `updateSalesOrder` — PUT /sales-orders/v1/{salesOrderId}
- `deleteSalesOrder` — DELETE /sales-orders/v1/{salesOrderId}
- `getCustomerSsoUrl` — GET /sso/{customerId}
- `createServiceOrders` — POST /service-orders-v2
- `getHealthcheck` — GET /healthcheck

## Artifacts

- [Authentication profile](authentication/websitepros-authentication.yml)
- [API conventions](conventions/websitepros-conventions.yml)
- [Error envelope and observed problems](errors/websitepros-problem-types.yml)
- [Data model](data-model/websitepros-data-model.yml)
- [Lifecycle and versioning](lifecycle/websitepros-lifecycle.yml)
- [Sandbox / development environment](sandbox/websitepros-sandbox.yml)
- [Rate limits (none published)](rate-limits/websitepros-rate-limits.yml)
- [Plans and pricing (none published)](plans/websitepros-plans-pricing.yml)
- [Packages (no first-party SDK exists)](packages/websitepros-packages.yml)
- [Conformance](conformance/websitepros-conformance.yml)
- [Well-known probe (nothing served)](well-known/websitepros-well-known.yml)
- [Candidate MCP tool mapping (no server exists)](mcp/websitepros-mcp.yml)
- [Agent skills](skills/_index.yml)

## What an agent should know

- There is **no** OpenAPI, no SDK, no CLI, no MCP server, no agent card, no webhooks or events, no
  status page, no changelog, no published rate limits and no published pricing for this API.
- Errors are the Azure API Management envelope `{ "statusCode": n, "message": "..." }` — not RFC
  9457, and with no stable machine-readable error code to branch on.
- Writes are **not idempotent**. Nothing in the published documentation supports an
  `Idempotency-Key`; `traceId` is a correlation identifier only.
- No response body is published for any operation, so output shapes are unknown until you hold a
  credential.
- Three documented paths — `/healthcheck`, `/api/domain/spin` and `/service-orders-v2` — return
  404 on the production gateway to an anonymous caller rather than the 401 their siblings return.
- `GET /sso/{customerId}` mints a credential-bearing URL for a customer account. Treat it as a
  human-approval operation.

## Company

- [Web.com](https://www.web.com/): retail website, hosting, domain and marketing products. Serves HTTP 403 behind a Cloudflare bot challenge to anonymous clients.
- [Newfold Digital](https://www.newfold.com/): parent company, formed in 2021 from Endurance Web Presence and Web.com Group.