Avarra API
The production Avarra API, served from api.avarra.ai behind an AWS application load balancer. Every path under /v1/ is protected and returns a JSON 401 envelope without a bearer token; tokens are issued from /oauth/token using the OAuth 2.0 client_credentials grant with client_secret_basic or client_secret_post client authentication. The authorization server advertises itself through RFC 8414 metadata at /.well-known/oauth-authorization-server and publishes its signing keys at /.well-known/jwks.json, both anonymously. An anonymous /health endpoint returns {"status":"ok"}. Avarra publishes no OpenAPI, no API reference and no developer documentation, so the operation surface behind the auth wall is not publicly described; access is granted through a commercial relationship rather than self-serve signup.