Offerpad Helix API (private customer backend)

aid: offerpad:offerpad-helix-api
name: Offerpad Helix API (private customer backend)
description: 'Offerpad''s real transaction API, and it is closed. Discovered on 2026-07-26 as the API_URL
  constant compiled into the Offerpad Connect single-page-app bundle at https://connect.offerpad.com/bundle.js,
  the host at https://helix.offerpad.com serves the customer identity, cash-offer transaction, contract,
  document, form and device endpoints that the Offerpad Connect web portal and the Offerpad mobile apps
  call. It is entirely undocumented: there is no developer portal, no reference, no schema and no public
  client registration, and every path except /.well-known/oauth-authorization-server returns {"statusCode":404,"message":"Resource
  not found"} to an anonymous caller. That one live discovery document is a conformant RFC 8414 authorization-server
  metadata document delegating to an Okta custom authorization server, which is why Offerpad''s identity
  layer is machine-discoverable while none of its business capability is. Catalogued as evidence that
  the capability exists and is deliberately closed, not absent — the observed endpoint inventory is recorded
  verbatim from the first-party client with no schemas inferred.'
humanURL: https://connect.offerpad.com/auth/login
baseURL: https://helix.offerpad.com
tags:
- Private API
- iBuyer
- Real Estate
- Transactions
- Undocumented
properties:
- type: EndpointInventory
  name: Observed endpoints, recorded from the first-party client bundle
  url: helix/offerpad-helix-observed-endpoints.yml
- type: WellKnown
  name: RFC 8414 authorization server metadata (live, anonymous)
  url: well-known/offerpad-helix-oauth-authorization-server.json
- type: Authentication
  name: Auth profile for both Offerpad API surfaces
  url: authentication/offerpad-authentication.yml
- type: Portal
  name: Offerpad Connect (the client for this backend)
  url: https://connect.offerpad.com/auth/login