Agora Client Platform API
The tenant-scoped HTTPS API behind Agora's client platform and investor portal. Its existence and shape are established from Agora's own production surface: certificate transparency shows per-tenant hosts under agorareal.com (390 .acp.agorareal.com client-platform hosts, 389 .portal.agorareal.com investor-portal hosts and 192 api..agorareal.com hosts), and the client-platform single-page app served from cdn-prod.acp.agorareal.com calls same-origin /api/* routes — /api/crm/..., /api/investor/..., /api/admin/cognito/..., /api/account-subscription — indicating AWS Cognito as the platform identity provider. The surface is unreachable anonymously: every anonymous request to /api and /api/* on the demo tenant and on sampled live tenants returned nginx HTTP 502, and app.agorareal.com (an AWS API Gateway custom domain) returns {"message":"Not Found"} for every path including a nonsense control probe. Agora publishes no reference, no OpenAPI and no authentication documentation for it; "API Access" appears on the pricing page as an Enterprise line item marked "Priced Separately". Recorded as a measured, gated surface — no operations, parameters or auth scheme are asserted.