A compliance graph your agent can query

FREE, no API key. Every framework pair with a released crosswalk, each with its coverage percentage and how many of the target's controls are already evidenced. Any other pair can be built to order.

FREE, no API key. Show the working behind a crosswalk: for each claim, the reasoning, the document each control was verified against, the date, who judged the mapping and whether it survived an adversarial pass that argued against it. Use to check a coverage claim rather than take it on trust.

source, target, limit (optional)

Get detailed information about a specific compliance framework

name

Get all controls for a compliance framework, optionally filtered by domain

name, domain (optional)

Get detailed information about a specific control by code

code

Get cross-framework mappings for a control

code

Map controls between two compliance frameworks

source, target

Get cross-framework coverage analysis for a framework

name

Full-text search across controls and frameworks

query, type (optional), limit (optional)

FREE, no API key. Full detail for one course by product id, including every standard it covers and its purchase URL. Use after agent_search_courses to justify a recommendation.

product_id

FREE, no API key. Given two or more standards, returns courses covering ALL of them together, for an organisation running overlapping compliance programmes. Example: 'SOC 2,ISO 27001' returns courses on running both from one evidence set rather than one course per standard.

frameworks, limit (optional)

FREE, no API key. Every standard the course catalogue covers, with a course count each. Use to discover valid framework filter values before searching.

Get API pricing tiers and current usage information

FREE, no API key. Give every framework an organisation ALREADY HOLDS and one it needs. Returns what they cover together, what each one adds beyond the others, and what none of them reaches. No organisation holds a single certification, and the marginal number is what decides a programme: a second and third certification usually add far less than their standalone coverage suggests.

holds, target

Get a Stripe checkout link for a crosswalk report. Returns a LINK, never a charge: no card details pass through the agent. Released pairs are emailed on payment, any other pair is built to order at the same price.

source, target, email

Get a Stripe checkout link for a $499 Single Document Compliance Review against one framework. Returns a LINK, never a charge: no card details pass through the agent. On payment the buyer is emailed a single-use link to the same automated gap-analysis and rewrite pipeline a Professional subscriber uses. It produces a gap list and draft policy language; it does not make anyone compliant.

framework, email

Adoption Evidence. Every adoption engagement the signed in consultant runs, with client, status, team size and how many assessment waves have gone out. Use to find an engagement id before asking for its summary.

Adoption Evidence. Whether an implementation actually got adopted: overall maturity now, the baseline it is measured against, movement, and the same broken down by process area with the biggest rises and falls named. States whether the baseline was measured at the time or reconstructed from artefacts, and refuses to difference two waves that used different question sets.

engagement_id

Adoption Evidence. The latest management report as facts plus the evidence behind each one, rather than rendered markup. Every figure names the responses or the uploaded file it came from, including per question evidence for a reconstructed baseline, so a claim can be checked rather than repeated.

engagement_id

Get all controls for a framework, naming it as a query parameter. Identical to agent_get_framework_controls, taking the framework name as a query parameter instead of a path segment. Use this whenever the framework name contains a forward slash. 84 of the frameworks in the graph do, including CCPA/CPRA, AML/CTF Act 2006 and BSA/AML, and the path form cannot reach any of them: the server decodes %2F back to a real separator before routing, so the request 404s no matter how it is encoded. This route has no such problem and works for every framework. Free, no authentication.

Everything about one crosswalk pair, including what was rejected. One framework pair in full: the coverage percentage and how it was arrived at, a sample of the claims that held with the reasoning behind each, and a sample of the claims that were proposed and refuted with the reason each failed. The rejected claims are part of the answer, not an appendix. A coverage number quoted without them is a number nobody argued with. PAID PER CALL, $0.015 over x402 (USDC on Base). Called without payment it answers 402 with a PAYMENT-REQUIRED challenge carrying the amount, asset and address; a Profession

Build a checkout for one or more courses. Turn a course into a purchase. Give one or more product ids and this creates a real cart on the store and returns a checkout link that completes the sale. Free to call; the course price is paid at checkout. Use agent_search_courses to find the product id first. Multiple ids go in one cart, so a recommended set can be bought together in a single transaction.

Search what courses teach, across the whole catalogue. FREE, no API key, no payment. Full-text search over the TEACHING CONTENT of 126,803 professional courses: module titles, module summaries and every chapter title. Ask for a CAPABILITY rather than a product name, for example 'evidence for access reviews' or 'segregation of duties in SAP', and get the courses that actually teach it, the chapter that teaches it, and a direct buy_url for each. Use this when someone asks how to do something rather than what to buy. agent_search_courses matches product NAMES only; this matches what is inside the

What a course actually teaches, module by module. FREE, no API key, no payment. The full teaching structure of one course: every module with its summary and every chapter inside it. Use it to confirm a course genuinely covers a requirement before recommending it to someone. The response carries buy_url, a direct purchase link for the course. Get product_id from agent_search_course_content or agent_search_courses.

Funded rounds in the current window, filtered. The genuine funded rounds, each with its source. Rows are already filtered: rate decisions, analyst price targets, bond issues, buybacks, parked domains, rumoured rounds and figures that were actually valuations are all excluded. The count of what was rejected is returned alongside, so the filtering can be argued with.

Capital by the business function it targets. Where the money went, classified by whose job it changes. Sector labels describe the company; function labels describe the buyer. The second is the only one a reader can act on, which is why the classification is by function throughout. Concentration is reported when one deal carries a bucket, because a total can be arithmetically true and still mislead: one $1B debt facility once accounted for 73% of a function and 38% of a whole week.

Controls a funded capability actually touches. The join. A capability, and the controls whose own text concerns it. Matched against the control's requirement text, never against its title alone: a title that reads like a familiar control is the most expensive kind of wrong match. Returns nothing rather than something strained when the capability finds no purchase, because a join that always finds something is worthless.

Where a framework meets where the money is going. A framework, a function, and the controls where the two meet. This answers the question the brief cannot answer for a reader, because it does not know who they are: money is moving into this capability, and here is what my own standard already asks of me about it.