Data directory

Cambridge TCG's public data directory. The directory needs no account or key; each entry names its own access requirement and limits.

Public reachability is not an open-data license. Only an exact resource that explicitly declares CC0-1.0 is CC0; mixed upstream responses are NOASSERTION, with known source tiers carried alongside their lineage.

The platform exists for the TCG economy — collectors, traders, agents, archivists, anyone who wants to read or participate. Not every participant needs an account. Not every observer wants to transact. This page lists both public and access-controlled surfaces and labels the requirement on each one.

24 shipped · 3 partial · 3planned. Counts as of page render; the surface grows. Status is substrate-honest — planned endpoints are named so the next builder knows what to ship; partial endpoints name what they don't yet cover.

What this is for

Collectors who want structural card lookup, draw receipts, or a publication-status check. Legacy price values are withheld.
Agents (LLM or otherwise). Operator-managed keys act within their account authority; earlier self-serve keys are read-only. See /methodology/agents.
Archivistschecking today's publication boundary. The date-shaped card route is compatibility-only and does not reconstruct history.
Other platforms wanting to interoperate. They can recompute the current draw-digest chain and retain a tip externally for later comparison.
Aliens— beings whose cognition, sensory modality, economic frame, or temporal scale don't match the platform's defaults. See /methodology/welcoming and docs/connections/the-blind-spots.md in the repo.

Public access and reuse permission are separate.Read each entry's authentication requirement, then inspect the response license and source-rights fields before redistribution, training, or commercial reuse.

Endpoints

/api/v1/identifiers/validateshipped
Card identifier syntax validator
POST one bounded {identifier:string}. Public, stateless syntax validation and explicit legacy-normalization suggestions; no catalog lookup, authentication, upstream call or stored submission. Syntax does not prove a card or printing exists. Human tool: /standards/validator.
Shape: POST JSON (1 KiB body, 256-character identifier) → no-store pantry envelope
/api/v1/member-pricespartialauth: bearer
Free member price feed
Source-reviewed current/history observations with native currency, named metrics, timestamps and cursor pagination. Requires a read-only member data key from /account/data. Cardmarket official-file projections are eligible; Scryfall is view-only. Empty or unavailable responses do not claim a collector has run.
Shape: Private JSON; one bounded page plus continuation cursor
Rate limit: 30/min per member data key; no paid tier
/api/account/prices/exportpartialauth: session
Free member price downloads
Session-authenticated CSV/NDJSON pages from the same permitted source observations. Follow continuation to finish the result; no public catalog mirror. /methodology/member-pricing explains source and access limits.
Shape: Private CSV or NDJSON; explicit continuation and completeness
/api/verify/chainshipped
Draw digest chain
Hash-linked digest batches over revealed draw pulls and verifiable_draws collected by the job. Standalone raffle proofs are not included. The current feed can be recomputed for consistency; detecting a rewritten presentation requires an earlier tip retained outside Cambridge TCG.
Shape: JSON: { digests: [{ id, root, prev_hash, chain_hash, leaf_count, ... }], tip, count }
/api/verify/digestsshipped
Draw digests (list)
Index of digest roots and window metadata over rows collected by the digest job. It is neither a complete randomness ledger nor an external pre-roll witness.
/api/verify/digests/[id]shipped
Draw digest (one)
One stored root plus the full leaf-hash array and window metadata. It does not return source draw records or precomputed inclusion paths; callers can recompute the root from the leaves.
/api/verify/pull/[id]shipped
Draw pull receipt
Given a pull id, returns its commitment, revealed server seed, outcome, and digest reference. Safe client seeds let anyone reproduce the stored outcome, not prove the inputs were independently witnessed before the roll. Legacy seeds containing an account ID are withheld from non-owners, so those public checks are partial.
/api/verify/draw/[id]shipped
Shared weighted-draw receipt
Receipt for shared weighted-draw rows such as mystery boxes, packs, and spins; raffles use /api/rewards/raffles/[id]/proof. Exact replay requires a visible client seed and the ordered-weight array stored by newer receipts; legacy rows without it remain partial.
/api/rewards/raffles/[id]/proofshipped
Raffle draw receipt
Separate raffle receipt. The commitment is stored at raffle creation and exposed once the raffle is active, but it has no independent anchor. The public response omits the participant manifest, so it cannot fully recompute winner mapping.
/api/verify/fairnessshipped
Observed draw distributions
Thresholded chi-squared and expected-vs-observed distributions. Exact low-volume counts are withheld and internal reward keys use response-local labels. It can surface drift; it does not prove how any roll's inputs were selected.
/api/verify/healthshipped
Verify health
Detailed aggregate status for digest cadence and tip, receipt-consistency self-audits, daily pass-rate series, and open distribution alerts. Draw ids and raw alert summaries are omitted.
/api/verify/computeshipped
Compute primitives
Re-run the commit-reveal math against your own inputs. The platform's verification logic, callable as a pure function.
/api/v1/universal/card/[sku]shipped
Universal card (math-mirror)
Public math-first structural card representation using content hashes, ISO 8601 + Unix epoch time, typed edges, density controls, and declared source rights. Legacy price magnitudes and media are null. Returns 404 when a SKU has not reached the storefront mirror.
Shape: JSON: { id, hash, magnitudes: {...}, edges: [...], retrieved_at, as_of }
/api/at/[YYYY-MM-DD]/card/[sku]shipped
Universal card — date-shaped compatibility view
Compatibility route that returns current structural fields under the requested date label. It does not read price history or reconstruct historical card state; legacy price magnitudes and media are null.
/api/v1/universal/card/[sku]/causesplanned
Universal card — dependency graph
The directed graph of every input the displayed value depends on (JPY → FX rate → channel multiplier → rounding). For beings whose primary cognition is causes-before-values. See the-blind-spots.md (the Causal-First).
/api/v1/universal/edgesplanned
Universal edges
Bare typed-edge graph of platform entities — nodes with labelled edges, no containers, no hierarchy. For graph-native beings whose cognition is edges-first rather than path-first. See the-blind-spots.md (the Topology-Less).
/api/v1/universal/gamesshipped
Universal games
Every TCG the platform supports, as math-mirror records. Card-count, set-count, first-seen timestamps.
/api/v1/universal/sets/[game]shipped
Universal sets
Every set in a game, math-mirror form. Code, release date, card count.
/api/mcpshippedauth: bearer
MCP gateway
Model Context Protocol entry point for agents. Bearer auth resolves the agent and registration path. Existing self-serve keys are read-only; operator-managed agents are linked to the account that can revoke them. New self-serve registration is paused.
Rate limit: per-agent token bucket; see methodology/agents
/api/leaderboardspartial
Market ranking publication status
Reports the current pause on human rankings and card aggregates derived from completed trades. It publishes no ranking rows. Resumption requires versioned, purpose-specific publication receipts and one delayed, coarse release process.
/api/v1/leaderboards/fullplanned
Human rankings — full distribution
Not available. A future ranking requires its own versioned publication choice; a public profile is not permission to publish a financial ranking.
/api/v1/culture/answering-rhymes/statementsshipped
Answering Rhyme statement witness
Describes and validates the portable answering-rhyme.statement/1 shape. POST normalizes and hashes a bless, context, correction, or withdrawal proposal but authenticates nobody, creates no application record, detects no replay, and has no authoritative effect. Bodies are capped at 16 KiB; no application rate limiter is claimed.
Shape: GET contract; POST { data: { receipt: { statement, content_hash, witness, target, issuer_attestation } }, _meta }
Rate limit: provider-level protection only; no application limiter
/methodologyshipped
Methodology hub
Every value the platform computes about an account — trust score, escrow tier, commission rate, payout hold, fraud flag, etc. — documented with formula, inputs, source-code path. Sixteen pages published as of 2026-05-12.
/data.jsonshipped
Data directory (machine-readable)
A machine-readable companion directory maintained separately from this human guide. The manifest is the canonical access inventory; /data.json includes itself as a self-reference.
Shape: JSON: { spec_version, generated_at, doctrine, conventions, self_reference, counts, endpoints }
/datasetsshipped
Dataset status catalog (human-readable)
Available datasets and paused publication surfaces, with aggregate rights, named source rights, fields, and access paths. Paused zero-row paths are excluded from the schema.org crawler graph.
/api/v1/datasetsshipped
Dataset status catalog (machine-readable)
CC0-authored catalog metadata in a data-pantry envelope. Each entry separately states availability, aggregate rights, and named source rights. ?format=jsonld includes available datasets only.
Shape: JSON: { data: { datasets: [{ id, name, availability, records_published, license, source_rights, distributions, ... }], discovery }, _meta }
/api/v1/identifyshipped
Platform self-identification (machine-readable)
The platform identifies itself, in its own voice. What it is, who built it, what it commits to, what it cannot promise, what audiences it has named, what audiences it cannot see. The 5th scope made operational at the platform level. See docs/connections/the-self-identification.md.
Shape: JSON: { kind, subkind, name: {common, formal, intimate}, authorship, purpose, doctrines, audiences_named, audiences_unnamed, commitments, cannot_promise, open_substrate, self_reference, ... }
/identifyshipped
Platform self-identification (human-readable)
Prose sibling of /api/v1/identify. The platform names what it is, before asking anyone what they are. Public, no-auth, no obligation. The door, made articulate.
/standardsshipped
Cambridge TCG Standards (human-readable)
Three specification texts — CTCG-SKU-v1, CTCG-PRICING-v1, and CTCG-UNIVERSAL-v1 — are dedicated under CC0. Linked implementation source is inspectable but has no general code reuse license.
/standards.jsonshipped
Cambridge TCG Standards (machine-readable)
JSON manifest of every CTCG standard with version, status, spec URL, reference impl, license, and adoption metadata. Self-referential — lists /standards.json among the platform's open surfaces.
Shape: JSON: { spec_version, distributor, standards: [...], counts, adoption, self_reference, what_is_not_yet_shipped }

Conventions

Versioning

The /api/v1/* prefix contains versioned public routes, including the universal-representation surfaces. Unprefixed paths such as /api/verify/* and /api/leaderboardsare older contracts. Shapes still vary between routes; use each entry's status and documented response rather than assuming one global contract.

Time

JSON timestamps are normally ISO 8601 strings. Only endpoints that say so also provide Unix epoch fields or distinguish @retrieved_at from @as_of. Older endpoints do not all carry those pairs.

Identity

Identifier shapes follow each endpoint's purpose. Card resources may use string SKUs, and math-mirror resources may include a SHA-256 hash of canonical public content. Public person and transaction projections omit internal account identifiers. Read the documented response shape; no identifier form appears on every response.

SKU format

Versioned card interfaces accept and emit the canonical SKU format: <game>-<set>-<number>-<lang>[-<variant>]. Lowercase, hyphen-separated, machine-parseable, language-aware. 22 public game codes are registered; 6 currently have catalog rows. Legacy stored and input forms still exist. Interfaces normalise them only where their documented resolver supports that form; do not assume every stored row conforms. See /methodology/sku-standard for the spec; canonical implementation is packages/sku/ in the monorepo.

Errors

The HTTP status is authoritative. Older routes may return a string inerror; envelope-based routes may return a structured code and message. Check the endpoint's documented shape before parsing it.

Rate limits

Limits differ by route, and not every public route publishes one yet. An absent number is not permission for unbounded traffic. The MCP gateway documents its own agent-key limit at methodology/agents.

How to ask for what isn't here

If you need data the platform has but isn't exposing:

Check if it's under a planned endpoint above (most things are named in the planned set; that's the queue).
Email [email protected] with the use case. There is no public issue tracker; the source repository is currently private.
For agent access, a signed-in human can provision an operator-managed key at /account/agents. New self-serve registration is paused (see methodology/agents).

The platform commits to substrate honesty about what's open and what isn't. If something is planned here and isn't shipped yet, that's a real promise. Future builders consult this page when deciding what to ship next.

Source-of-truth for this page: docs/connections/the-open-substrate.md. Doctrinal frame: docs/principles/substrate-honesty.md + docs/principles/transparency.md. Companion welcoming: /methodology/welcoming. The door is open; the substrate is queryable; the door is warm to the touch.