API

Everything on this page is public and needs no key. Machine description: openapi.json. Catalog: /.well-known/api-catalog.

Read the market

• GET https://assetfra.com/v1/listings — every visible raise, with its rate, term, reserve, closing date and how much is committed so far.
• GET https://assetfra.com/v1/originators — the businesses raising, with the grade computed from their record here.
• GET https://assetfra.com/v1/health — liveness.

Reading the numbers correctly

• Amounts are decimal strings in base units, 18 decimals — not numbers. They exceed IEEE-754 safe integer range, so parsing one as a float will silently lose money. Use a big-integer type.
• Rates are basis points. couponRateBps: 1450 is 14.50% per annum. insuranceBps is the reserve the business posts against the raise, as basis points of the target.
• Addresses are lowercase. Checksummed forms are display-only, so compare lowercase.
• On-chain ids restart at 1 on every redeploy. An onchainId is only unique within its escrowAddress — never treat it as an identity on its own.
• refnum is also the listing token's ERC-20 symbol. New raises are AST00001 onward; raises approved before the platform was renamed keep their original TRB prefix, because the symbol is fixed in the deployed contract.

MCP server

Streamable HTTP at https://assetfra.com/v1/mcp. No authentication — every tool is read-only and answers a question the public site already answers, which is the whole security model. Tools: list_deals, get_deal, list_businesses, search_knowledge.

Nothing on it can move money, bind a wallet or read anything account-scoped. Backing a raise needs a human to sign in a browser, deliberately.

GET the same URL for a plain description without a JSON-RPC handshake.

For agents

• /llms.txt — the site index, plus the full knowledge base.
• Markdown — request any public page with Accept: text/markdown and you get Markdown from the same canonical URL. Or read /md/<path> directly.
• /sitemap.xml and /sitemap.txt.
• Every page carries Link: headers (RFC 8288) advertising these, so they are discoverable from a HEAD request.

Discovery

• /auth.md — how agents authenticate. Short version: reading needs nothing, and anything that moves money needs a human wallet signature and has no agent path at all.
• /.well-known/mcp/server-card.json — MCP server card (SEP-1649).
• /.well-known/ai-catalog.json — ARD manifest.
• /.well-known/agent-skills/index.json — skill bundles assembled from the knowledge base, each with a sha256 over the bytes actually served.
• WebMCP — an agent running in the visitor's browser is offered the same four tools via navigator.modelContext.

There is deliberately no /.well-known/openid-configuration or /.well-known/oauth-authorization-server: no authorization server exists, and publishing endpoints that 404 would be worse than publishing nothing. See auth.md.

Fair use

No rate limit is enforced on the read endpoints today; please be reasonable and identify your agent in a User-Agent. If you are building something that needs more than these endpoints give you, write to [email protected].

Status

This deployment runs on Binance Smart Chain testnet (BSC, chain 97). The dollar token is tUSDT on BSC, which is a different asset from USDT on Ethereum or Tron. Nothing here has real value yet, and the data is test data.