Live in public beta — base URL https://api.agentic.forwardlane.com · metered, no charges during beta.
A technical due-diligence packet as an API call. Executive and deep reports are assembled from a 37-metric matrix per repository — coverage, CI, dependency pinning, security findings, external service coupling — the same pipeline that priced a prior remediation pass at 293K−293K-585K.

​
Authentication

All product endpoints require a tenant member API key sent as a bearer token. Both a missing and an invalid key return 401 with a docs_url field pointing at the authentication guide.

​
Quickstart

The second call reads your usage meters — every product call is metered against your organization.

​
Endpoints

​
GET /api/dd/executive

Portfolio-level executive summary. Returns: Aggregate portfolio metrics. Append a repo name — GET /api/dd/executive/{repo} — for a single repository’s executive summary (404 if the repo has no DD data).

​
GET /api/dd/deep

Full deep-diligence package for the portfolio. Returns: The complete metric matrix and pipeline factors. GET /api/dd/deep/{repo} scopes it to one repository.

​
GET /api/dd/factors

Catalog of score dimensions and factor reports. Returns: Factor catalog. Drill in with GET /api/dd/factors/{factor_id} (portfolio-wide) or GET /api/dd/repos/{repo}/factors (all factors for one repo’s latest pipeline run).

​
GET /api/dd/health

DD data-source health probe. Returns: Source availability and a UTC timestamp.

​
Data provenance

scripts/mercor_due_diligence.py runs the 9-phase extractor pipeline (AST, commits, tests, security, config, health) over a target repo set and materializes 37 metrics/repo into DuckDB mercor_report (151 repos today). Remediation pricing derives from security_patterns + dependency/lockfile analysis. What the data is: Per-repo engineering-health matrix: LOC, active test coverage, CI system + tests-in-CI, Dockerfile/offline build, dependency pinning + lockfiles, external service coupling, contributor/bus-factor stats, security findings, remediation cost model.

​
Beta notes

  • Beta dataset disclosure: production currently serves the Mercor JSON snapshot (~15 repositories) until the full DuckDB 37-metric matrix ships. Portfolio aggregates and the repo list reflect that snapshot, not the full 151-repo estate.
  • This API is in public beta. Credits run in shadow mode: usage is metered and visible at GET /v1/billing/usage, but no charges are made during the beta.
  • Authentication is tenant member API keys only; per-call x402 payments are coming soon and not yet accepted.
  • Machine discovery: GET /v1/catalog (public, no auth) lists all products with live/coming-soon status and docs links.
  • Response shapes may still change during the beta; breaking changes will be announced in the changelog before they land.