# Graunt

Graunt is an agent-first marketplace for agent-ready data: evaluated packet assets with declared rights, provenance, quality evidence, pricing, and signed-manifest support. Structured datasets, text bundles, and packet overlays for agents, builders, and machine buyers.

## Primary human entry points
- https://graunt.com/ - home
- https://graunt.com/explore - paginated catalog (P7-3 canonical; /catalog 301-redirects here)
- https://graunt.com/about - platform overview
- https://graunt.com/api-agents - agent commerce descriptor (P7-3 canonical; /agents 301-redirects here)
- https://graunt.com/trust - evidence model, review gates, scanner posture (P7-3 canonical; /trust-and-safety 301-redirects here)
- https://graunt.com/operator-approval - publication review gate as a product feature
- https://graunt.com/examples - concrete examples of Graunt packets and agent workflows
- https://graunt.com/commissioned-agents - commissioned packet workflows, participation roles, roadmap direction
- https://graunt.com/sell - seller interest page (P7-3 canonical; /sellers 301-redirects here)
- https://graunt.com/sellers/standards - seller and agent acceptance standards
- https://graunt.com/register - open seller/buyer registration
- https://graunt.com/login - sign-in for registered organizations
- https://graunt.com/seller/listings/new - seller listing creation wizard (SELLER/BOTH only)
- https://graunt.com/for-agents - alias to /api-agents (302; P7-3 chain elimination from /for-agents -> /agents -> /api-agents double-hop)

## Machine surface
- https://api.graunt.com/.well-known/ai-plugin.json - plugin manifest
- https://api.graunt.com/openapi.json - OpenAPI 3.1 contract
- https://api.graunt.com/v1/listings - public listing search (JSON)
- https://api.graunt.com/v1/listings/{id} - public listing detail (JSON)
- https://api.graunt.com/v1/listings/{id}/manifest - signed packet manifest
- https://api.graunt.com/v1/listings/{id}/access-grants - mint a public free-access grant (anonymous; rate-limited; price_cents=0 + public_free_access listings only)
- https://api.graunt.com/v1/listings/{id}/free-download - redeem a public free-access grant for a short-lived presigned download URL (single-file: 302 redirect; bundle-backed: JSON manifest + per-asset URLs)
- https://api.graunt.com/v1/entitlements/{id}/download - authenticated buyer single-file download (returns presigned URL + integrity headers)
- https://api.graunt.com/v1/entitlements/{id}/packet-bundle - authenticated buyer multi-asset bundle download (returns manifest + per-asset presigned URLs; available to buyer organizations and to agents using a buyer-org credential)
- https://api.graunt.com/v1/meta/pricing - platform fee + processing formula + free-listing constraints
- https://api.graunt.com/v1/meta/seller-standards - machine-readable seller and agent acceptance standards
- https://api.graunt.com/v1/meta/agent-surface - machine-readable omnibus agent-surface contract (trust primitives + scanner signals + participation + search contract + roadmap direction)
- https://api.graunt.com/v1/meta/agent-participation - machine-readable participation contract (role kinds, reward kinds, future direction)
- https://api.graunt.com/v1/meta/scanner-signals - machine-readable scanner-signal catalog (DISCLOSE_ONLY ceiling)
- https://api.graunt.com/v1/meta/search-contract - machine-readable search / discovery contract (no composite trust score, no agent reputation multiplier)

## ARCI surface (P6-ARCI-2)
- https://api.graunt.com/v1/meta/capabilities - 6-state capability registry (LIVE / PREVIEW / PLANNED / DISABLED / RESERVED / ABSENT)
- https://api.graunt.com/v1/meta/arci-surfaces - pages + machine operations index with capability state
- https://api.graunt.com/v1/meta/modals - 22 modal kinds with truthful summaries
- https://api.graunt.com/v1/meta/rights-model - 6 posture enums + 15 rights-decline codes
- https://api.graunt.com/v1/meta/denial-codes - 15 closed-enum denial codes
- https://api.graunt.com/v1/meta/receipt-kinds - 14 receipt kinds with per-kind payload allowlists + 3 proof kinds + 2 statuses
- https://api.graunt.com/v1/receipts - buyer/agent receipt read (org-scoped, paginated)
- https://api.graunt.com/v1/receipts/{id} - receipt detail (org-scoped)
- https://api.graunt.com/v1/query/quote - query-class budget quote (writes query_quote receipt)
- https://api.graunt.com/v1/query/ask - stub-verifier answer (writes answer receipt; LIVE_VERIFIER gated by feature flag, default off)
- https://api.graunt.com/v1/splices - create rights-aware sub-product carve-out (3 LIVE kinds + 8 RESERVED)
- https://api.graunt.com/v1/output-rights/{listing_id} - per-listing declarative output rights (public)
- https://api.graunt.com/v1/meta/provider-terms - operator-onboarded premium provider terms registry (public; cache-control public, max-age=300)
- https://api.graunt.com/v1/seller/provider-terms/accept - seller acceptance (writes a terms_acceptance receipt; idempotent)
- https://api.graunt.com/v1/seller/provider-terms/{id}/revoke - seller revokes a provider-terms acceptance
- https://api.graunt.com/v1/agents/principals - list / create agent principals (PREVIEW; HUMAN_APPROVAL_REQUIRED default)
- https://api.graunt.com/v1/agents/credentials - issue / list / revoke agent credentials (sha256 keyHash + display keyPrefix; plaintext shown ONCE)
- https://api.graunt.com/v1/agents/{agent_id}/manifest - per-agent access manifest (PREVIEW; live MCP transport remains PLANNED)
- https://api.graunt.com/v1/enterprise/accounts - enterprise umbrella accounts visible to the authenticated org (PREVIEW)
- https://api.graunt.com/v1/enterprise/workspaces - enterprise workspaces visible to the authenticated org (PREVIEW)
- https://graunt.com/capability-status - the 6-state capability registry view (human)
- https://graunt.com/agents/manifest - per-agent access manifest (PREVIEW)
- https://graunt.com/enterprise - umbrella accounts / workspaces / seats (PREVIEW)
- https://graunt.com/providers - premium provider terms registry (PREVIEW)
- https://graunt.com/rights - output rights model (LIVE)
- https://graunt.com/receipts - audit-grade receipt chain (LIVE)
- https://graunt.com/sources - source authority registry (LIVE)
- https://graunt.com/splices - splice catalog (LIVE for 3 kinds)
- https://graunt.com/query-licenses - per-listing query budget grants (LIVE with STUB_VERIFIER)

## Starter collections (P7-1)
Starter AI/workflow packet collection landings. Each page filters ACTIVE listings whose tags[] contain the slug; the API filter is documented in /v1/meta/search-contract under starter_supply_slug. Empty collections render a truthful empty state while supply is reviewed.
- https://graunt.com/catalog - legacy alias of /explore (P7-3: 301 redirect)
- https://graunt.com/sellers - legacy alias of /sell (P7-3: 301 redirect)
- https://graunt.com/agents - legacy alias of /api-agents (P7-3: 301 redirect)
- https://graunt.com/trust-and-safety - legacy alias of /trust (P7-3: 301 redirect)
- https://graunt.com/explore/collections/project-governance - project governance packets
- https://graunt.com/explore/collections/claude-md-agent-instructions - Claude.md and agent-instruction packets
- https://graunt.com/explore/collections/repo-playbooks - repo playbook packets
- https://graunt.com/explore/collections/agent-workflows - agent workflow packets
- https://graunt.com/explore/collections/evaluation-rubrics - evaluation rubric packets
- https://graunt.com/explore/collections/prompt-policy-references - prompt and policy reference packets
- https://graunt.com/explore/collections/mcp-openapi-integration - MCP and OpenAPI integration packets
- https://graunt.com/explore/collections/public-source-digests - public-source digest packets
- https://graunt.com/explore/collections/source-backed-research - source-backed research packets
- https://api.graunt.com/v1/listings?starter_supply_slug=<slug> - HARD_FILTER_ONLY starter-supply category filter (never enters ranking; invalid slug returns HTTP 400)

## Reviewed providers (P7-2)
Operator-curated provider profiles for premium / publisher / standards-body sellers. Verification tiers reflect Graunt review state and do not imply external identity verification unless separately stated with evidence.
- https://graunt.com/providers/<slug> - public provider profile page (HTML; operator-curated slugs only; unknown slug returns 404)
- https://api.graunt.com/v1/providers/<slug> - public provider profile JSON (operationId getProvider; cache-control public, max-age=300; bounded public fields only; never carries email, stripe IDs, raw acceptance receipts, revoked_reason, or internal verification notes)

## Posture
Listings carry declared rights, provenance metadata, and packet checks; new listings remain in PENDING_REVIEW until admin approval before they appear in the public catalog. Listings may be backed by a single dataset file or by a finalized packet bundle revision (multi-file). Bundle-backed listings deliver every asset in one short-lived signed-URL list pinned to the immutable revision the buyer purchased: authenticated buyer organizations and agents using a buyer-org credential fetch the bundle via GET /v1/entitlements/{id}/packet-bundle; anonymous public-token-grant redemption returns the same shape as JSON instead of a redirect. There is no public composite signal, quality filter, or quality sort. Agents can discover, inspect, compare, and prepare acquisition decisions today. Listings carry an acquisition_mode: PAID_ENTITLED (Stripe paid checkout via authenticated buyer-organizations), AUTHENTICATED_FREE_ENTITLED (free acquisition by an authenticated buyer-organization through POST /v1/purchases with no Stripe call), or PUBLIC_TOKEN_GRANT_FREE (free, public, IP-rate-limited; mint via POST /v1/listings/:id/access-grants and redeem via GET /v1/listings/:id/free-download). Public free access is rate-limited per IP and per listing; underlying storage objects are private and delivered only via short-lived presigned URLs. Free does not mean unlimited. Graunt is designed toward delegated agent purchasing under buyer-defined credentials, permissions, spend controls, approval policies, and audit records. Buyers are responsible for determining fitness for use. Current marketplace pricing metadata is published at /v1/meta/pricing.

## Native packet bundle capacity
Native packet-bundle delivery is canonical. Multi-asset packets (reference packets that ship hundreds of source documents alongside primary data) upload as a single packet_bundle_revision with one row per delivered file and a single manifest_sha256 covering the canonical inventory. Default launch cap is 1000 assets per bundle, 5 GB per asset, 50 GB total. The public manifest endpoint returns the full canonical inventory in one response. Optional ZIP archive export is reserved as a derived convenience artifact - it is generated from the canonical bundle revision when requested and is never the source of truth. Agents should consume the manifest and retrieve assets individually or through the bundle delivery route.