# 100 Thieves

**Canonical:** https://apis.io/providers/100-thieves/  
**Website:** https://100thieves.com/  
**APIs profiled:** 3

100 Thieves is an American lifestyle brand and gaming organization founded in 2017 by Call of Duty World Champion Matthew "Nadeshot" Haag, headquartered in Los Angeles, California. The company operates championship esports franchises in League of Legends, VALORANT and Call of Duty, a roster of content creators, and a premium streetwear apparel line sold through its own direct-to-consumer online store. Its public machine-readable surface is that storefront: a Shopify-hosted commerce platform that publishes agent-facing instructions at /agents.md and /llms.txt, a Universal Commerce Protocol (UCP) merchant profile at /.well-known/ucp, an anonymous Model Context Protocol endpoint exposing thirteen catalog, cart, checkout and order tools, and a Storefront GraphQL API whose schema is openly introspectable. 100 Thieves publishes no developer portal, API reference, or SDKs of its own.

## Kin Score — 34.1 / 100 (thin)

Scored 2026-08-17 under rubric 0.11.0. Trend: flat (+0.0 from 34.1).

| Facet | Score |
|---|---|
| Discoverability | 81.5 |
| Contract Quality | 48.1 |
| Governance | 12.5 |
| Operational Transparency | 0.0 |
| Developer Ergonomics | 27.7 |
| Commercial Clarity | 34.2 |

## Agent readiness — 39.0 (agent-ready)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | yes |
| MCP Server | no |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | documented |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | derived |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## APIs (3)

- **100 Thieves UCP Commerce MCP API** — An anonymous Model Context Protocol endpoint implementing the Universal Commerce Protocol (UCP) shopping service for the 100 Thieves online store. Exposes thirteen tools coverin...
- **100 Thieves Storefront GraphQL API** — The Shopify Storefront GraphQL API as deployed on the 100 Thieves domain, version 2024-04. Schema introspection is open to anonymous callers and returns 414 types, 35 query root...
- **100 Thieves Storefront JSON Endpoints** — The read-only JSON surface the store documents for agents that only need to browse catalog data without transacting - product JSON by handle, collection product listings, and pr...

## MCP servers (1)

- **100-thieves-mcp.yml**

## Agentic access (1)

- **100 Thieves Agentic Access** — 13 operations · 7 acting · 1 human-in-the-loop

## Security (2)

- **100 Thieves Authentication** — none/oauth2/openIdConnect · 6 schemes
- **100 Thieves Domain Security** — TLSv1.3 · HSTS · DMARC

## Tags

Company, Esports, Gaming, Apparel, Retail, E-Commerce, Entertainment, Media, Direct To Consumer, Agentic Commerce

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/100-thieves/). Scores are computed from the provider's own public artifacts under a published rubric.