aiassure
Get started

aiassure developer resources

This is the public developer index for aiassure. Use it when an agent or engineer needs the OpenAPI spec, authentication model, MCP server, or webhook policy. The production app is hosted on Vercel; these URLs are the canonical developer resources for the product, not the host platform.

When to use these docs

Use aiassure developer resources to:

  • Connect an AI agent to the aiassure MCP server
  • Read the OpenAPI description of public HTTP endpoints
  • Understand how session auth works (Better Auth cookies; no public deal API without a login)
  • Confirm that inbound webhooks are not part of the current public surface

Do not use these pages to pull confidential deal files. Deal data stays behind an authenticated workspace.

OpenAPI spec

Machine-readable spec:

  • aiassure OpenAPI — OpenAPI 3.1 JSON for public discovery, auth, MCP, and agent routes

Authentication

aiassure uses cookie session auth (Better Auth).

  • Browser sign-in: /sign-in
  • Browser sign-up: /sign-up
  • Auth HTTP handlers: /api/auth/* (Better Auth catch-all)

There is no unauthenticated REST API for deals, documents, or findings. Agents that need engagement data must run inside a signed-in human workflow or a future scoped OAuth client. Today the public agent surface is documentation, markdown negotiation, and MCP tools that return public pages only.

MCP server

aiassure exposes a documentation MCP server over Streamable HTTP:

Handshake with JSON-RPC initialize, then tools/list. Tools search and fetch public markdown (home, docs, FAQ, blog, legal). They cannot read a deal workspace.

Webhooks

aiassure does not currently publish a public inbound webhook catalog. Outbound notifications are email (invites, password reset, digest jobs) inside the product. If you need an event subscription for a firm integration, email legal@aiassure.com.

Agent files

Product context

aiassure is AI-assisted financial due diligence with CPA control: QoE, working capital, a findings risk register, and human approval gates. Deterministic numbers stay in the calc engine. Sessions summarize; they are not the system of record.