AltoIRA website screenshot

AltoIRA

Alto (AltoIRA) is a Nashville-based self-directed IRA platform that lets everyday investors hold alternative assets — private equity, venture funds, startups, real estate, farmland, private credit and cryptocurrency — inside tax-advantaged Traditional, Roth and SEP retirement accounts. Alto Trust Company acts as the IRA custodian and Alto Securities, LLC (FINRA/SIPC) operates the Alto Marketplace of curated private-market offerings. Alto reports custody of roughly $2B in assets for about 30,000 self-directed IRA investors and support for more than 2,500 issuers who have raised capital on the platform. For issuers and investment platforms, Alto publishes a partner REST API (the "AltoIRA.com API") on a ReadMe developer hub that covers OAuth investor handoff, offering creation, document upload, investor invitation, investment retrieval, refunds, cancellations, distributions and capital calls, plus an investment-status webhook feed.

AltoIRA publishes 5 APIs on the APIs.io network, including Handoffs API, Investment API, OAUTH API, and 2 more. Tagged areas include Company, Financial Services, Retirement, Self-Directed IRA, and Alternative Investments.

The AltoIRA catalog on APIs.io includes 2 event-driven AsyncAPI specifications.

AltoIRA’s developer surface includes documentation, API reference, getting-started guide, support, engineering blog, pricing, signup flow, and 27 more developer resources.

🌐 Visit website 📡 Source on GitHub
53.5/100 developing ▬ flat Agent 47/100 agent ready Full breakdown ↓
scored 2026-08-17 · rubric v0.11.0
5 APIs 1 MCP Servers
CompanyFinancial ServicesRetirementSelf-Directed IRAAlternative InvestmentsPrivate MarketsFintechCustodyCryptocurrencyWealth ManagementInvestingCapital Raising

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-08-17 · rubric v0.11.0
Composite quality — 53.5/100 · developing
Contract Quality 16.1 / 25
Developer Ergonomics 12.5 / 20
Commercial Clarity 10.5 / 20
Operational Transparency 3.8 / 13
Governance 1.4 / 12
Discoverability 9.3 / 10
Agent readiness — 47/100 · agent ready
Machine-Readable Contract 18 / 18
Agentic Access Contract 10 / 10
MCP Server 12 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 8 / 8
Request/Response Examples 7 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 6 / 6
Agent Skills 5 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/altoira: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 5

Individual APIs this provider publishes, each with its own machine-readable definition.

AltoIRA Handoffs API

These are the endpoints you will redirect your investors to (these are NOT api endpoints so you cannot use the Try it out tool)

AltoIRA Investment API

The actions are performed as the manager of an offering, not as a specific user. Authentication uses the `Basic Auth` header (same as the Offering endpoints)

AltoIRA OAUTH API

Provides access to an investor's account. Generates a token to be used with the "user" endpoints below

AltoIRA Offering API

The actions are performed as the manager of an offering, not as a specific user. Authentication uses the `Basic Auth` header

AltoIRA User API

These actions are performed within the context of a specific user (uses OAuth2 with an `Authorization: Bearer` header)

Open Collections 6

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

API Collection

OPEN COLLECTION

AltoIRA.com Handoffs API

OPEN COLLECTION

AltoIRA.com Investment API

OPEN COLLECTION

AltoIRA.com OAUTH API

OPEN COLLECTION

AltoIRA.com Offering API

OPEN COLLECTION

AltoIRA.com User API

OPEN COLLECTION

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

altoira-mcp.yml

MCP SERVER

Event Specifications 2

AsyncAPI definitions for this provider's event-driven and streaming APIs.

Alto Investment Status Webhooks

Alto pushes investment-lifecycle events to a Platform Partner's registered webhook endpoint so the partner can track an investor's progress through the Direction of Investment (...

ASYNCAPI

Altoira Investments Webhooks

ASYNCAPI

Security Posture 3

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Altoira Authentication

http/oauth2 · 3 schemes

SECURITY

Altoira Domain Security

TLSv1.3 · HSTS · DNSSEC · DMARC

SECURITY

Altoira Trust Center

trust center published

SECURITY

Scopes 1

OAuth scopes governing access to this provider's APIs.

Altoira Scopes

OAuth 2.0 · no documented scopes

0 scopes

SCOPES

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Altoira Agentic Access

17 operations · 11 acting

17 operations · 11 acting

AGENTIC

Resources

Get Started 5

Portal, sign-up, and the first successful call

DeveloperPortal
DeveloperPortal
 GettingStarted
GettingStarted
 SignUp
SignUp
 Login
Login
 Sandbox
Sandbox

Documentation 4

Reference material describing how the API behaves

Documentation
Documentation
 APIReference
APIReference
 OpenAPI
OpenAPI
 AsyncAPI
AsyncAPI

Agent Surfaces 5

MCP servers, agent skills, and machine-readable catalogs

LLMsTxt
LLMsTxt
 WellKnown
WellKnown
 AgenticAccess
AgenticAccess
 MCPServer
MCPServer
 AgentSkill
AgentSkill

Design & Contract 6

Pagination, idempotency, versioning, errors, and events

Lifecycle
Lifecycle
 Conformance
Conformance
 Conventions
Conventions
 DataModel
DataModel
 Webhooks
Webhooks
 ErrorCatalog
ErrorCatalog

Build 2

SDKs, sample code, and the tooling you integrate with

GitHubOrganization
GitHubOrganization
 ToolCrosswalk
ToolCrosswalk

Access & Security 4

Authentication, authorization, and security posture

TrustCenter
TrustCenter
 Authentication
Authentication
 OAuthScopes
OAuthScopes
 DomainSecurity
DomainSecurity

Operate 2

Status, limits, changes, and where to get help

Support
Support
 StatusPage
StatusPage

Commercial 3

Pricing, plans, and the legal terms of use

Pricing
Pricing
 TermsOfService
TermsOfService
 PrivacyPolicy
PrivacyPolicy

Company 2

The organization behind the API

Website
Website
 Blog
Blog

Other 1

Properties that don't map to a standard resource type

Overlay
Overlay

Source (apis.yml)

apis.yml Raw ↑ 
aid: altoira
name: AltoIRA
description: Alto (AltoIRA) is a Nashville-based self-directed IRA platform that lets everyday investors hold alternative
  assets — private equity, venture funds, startups, real estate, farmland, private credit and cryptocurrency — inside tax-advantaged
  Traditional, Roth and SEP retirement accounts. Alto Trust Company acts as the IRA custodian and Alto Securities, LLC (FINRA/SIPC)
  operates the Alto Marketplace of curated private-market offerings. Alto reports custody of roughly $2B in assets for about
  30,000 self-directed IRA investors and support for more than 2,500 issuers who have raised capital on the platform. For
  issuers and investment platforms, Alto publishes a partner REST API (the "AltoIRA.com API") on a ReadMe developer hub that
  covers OAuth investor handoff, offering creation, document upload, investor invitation, investment retrieval, refunds, cancellations,
  distributions and capital calls, plus an investment-status webhook feed.
image: https://cdn.prod.website-files.com/662048df2bce7baa72aab3f3/662ae161e60cc17317200006_Altologo.svg
url: https://raw.githubusercontent.com/api-evangelist/altoira/refs/heads/main/apis.yml
x-type: company
x-source: harvest:secondary-market
specificationVersion: '0.20'
created: '2026-08-06'
modified: '2026-08-06'
tags:
- Company
- Financial Services
- Retirement
- Self-Directed IRA
- Alternative Investments
- Private Markets
- Fintech
- Custody
- Cryptocurrency
- Wealth Management
- Investing
- Capital Raising
apis:
- aid: altoira:altoira-handoffs-api
  name: AltoIRA Handoffs API
  description: These are the endpoints you will redirect your investors to (these are NOT api endpoints so you cannot use
    the Try it out tool)
  humanURL: https://readme.altoira.com/reference
  baseURL: https://www.altoira.com
  tags:
  - handoffs
  properties:
  - type: OpenAPI
    url: openapi/altoira-handoffs-api-openapi.yml
  - type: Documentation
    url: https://readme.altoira.com/docs/understand-the-oauth-process-to-alto
  - type: APIReference
    url: https://readme.altoira.com/reference
  - type: GettingStarted
    url: https://readme.altoira.com/docs/understand-the-oauth-process-to-alto
  - type: Webhooks
    url: asyncapi/altoira-investments-webhooks.yml
  - type: AsyncAPI
    url: asyncapi/altoira-investments-asyncapi.yml
  - type: Authentication
    url: authentication/altoira-authentication.yml
  - type: OAuthScopes
    url: scopes/altoira-scopes.yml
  - type: ErrorCatalog
    url: errors/altoira-problem-types.yml
  - type: Conventions
    url: conventions/altoira-conventions.yml
  - type: DataModel
    url: data-model/altoira-data-model.yml
  - type: Sandbox
    url: sandbox/altoira-sandbox.yml
  - type: ToolCrosswalk
    url: mcp/altoira-tool-crosswalk.yml
- aid: altoira:altoira-investment-api
  name: AltoIRA Investment API
  description: The actions are performed as the manager of an offering, not as a specific user. Authentication uses the `Basic
    Auth` header (same as the Offering endpoints)
  humanURL: https://readme.altoira.com/reference
  baseURL: https://www.altoira.com
  tags:
  - investment
  properties:
  - type: OpenAPI
    url: openapi/altoira-investment-api-openapi.yml
  - type: Documentation
    url: https://readme.altoira.com/docs/understand-the-oauth-process-to-alto
  - type: APIReference
    url: https://readme.altoira.com/reference
  - type: GettingStarted
    url: https://readme.altoira.com/docs/understand-the-oauth-process-to-alto
  - type: Webhooks
    url: asyncapi/altoira-investments-webhooks.yml
  - type: AsyncAPI
    url: asyncapi/altoira-investments-asyncapi.yml
  - type: Authentication
    url: authentication/altoira-authentication.yml
  - type: OAuthScopes
    url: scopes/altoira-scopes.yml
  - type: ErrorCatalog
    url: errors/altoira-problem-types.yml
  - type: Conventions
    url: conventions/altoira-conventions.yml
  - type: DataModel
    url: data-model/altoira-data-model.yml
  - type: Sandbox
    url: sandbox/altoira-sandbox.yml
  - type: ToolCrosswalk
    url: mcp/altoira-tool-crosswalk.yml
- aid: altoira:altoira-oauth-api
  name: AltoIRA OAUTH API
  description: Provides access to an investor's account. Generates a token to be used with the "user" endpoints below
  humanURL: https://readme.altoira.com/reference
  baseURL: https://www.altoira.com
  tags:
  - oauth
  properties:
  - type: OpenAPI
    url: openapi/altoira-oauth-api-openapi.yml
  - type: Documentation
    url: https://readme.altoira.com/docs/understand-the-oauth-process-to-alto
  - type: APIReference
    url: https://readme.altoira.com/reference
  - type: GettingStarted
    url: https://readme.altoira.com/docs/understand-the-oauth-process-to-alto
  - type: Webhooks
    url: asyncapi/altoira-investments-webhooks.yml
  - type: AsyncAPI
    url: asyncapi/altoira-investments-asyncapi.yml
  - type: Authentication
    url: authentication/altoira-authentication.yml
  - type: OAuthScopes
    url: scopes/altoira-scopes.yml
  - type: ErrorCatalog
    url: errors/altoira-problem-types.yml
  - type: Conventions
    url: conventions/altoira-conventions.yml
  - type: DataModel
    url: data-model/altoira-data-model.yml
  - type: Sandbox
    url: sandbox/altoira-sandbox.yml
  - type: ToolCrosswalk
    url: mcp/altoira-tool-crosswalk.yml
- aid: altoira:altoira-offering-api
  name: AltoIRA Offering API
  description: The actions are performed as the manager of an offering, not as a specific user. Authentication uses the `Basic
    Auth` header
  humanURL: https://readme.altoira.com/reference
  baseURL: https://www.altoira.com
  tags:
  - offering
  properties:
  - type: OpenAPI
    url: openapi/altoira-offering-api-openapi.yml
  - type: Documentation
    url: https://readme.altoira.com/docs/understand-the-oauth-process-to-alto
  - type: APIReference
    url: https://readme.altoira.com/reference
  - type: GettingStarted
    url: https://readme.altoira.com/docs/understand-the-oauth-process-to-alto
  - type: Webhooks
    url: asyncapi/altoira-investments-webhooks.yml
  - type: AsyncAPI
    url: asyncapi/altoira-investments-asyncapi.yml
  - type: Authentication
    url: authentication/altoira-authentication.yml
  - type: OAuthScopes
    url: scopes/altoira-scopes.yml
  - type: ErrorCatalog
    url: errors/altoira-problem-types.yml
  - type: Conventions
    url: conventions/altoira-conventions.yml
  - type: DataModel
    url: data-model/altoira-data-model.yml
  - type: Sandbox
    url: sandbox/altoira-sandbox.yml
  - type: ToolCrosswalk
    url: mcp/altoira-tool-crosswalk.yml
- aid: altoira:altoira-user-api
  name: AltoIRA User API
  description: 'These actions are performed within the context of a specific user (uses OAuth2 with an `Authorization: Bearer`
    header)'
  humanURL: https://readme.altoira.com/reference
  baseURL: https://www.altoira.com
  tags:
  - user
  properties:
  - type: OpenAPI
    url: openapi/altoira-user-api-openapi.yml
  - type: Documentation
    url: https://readme.altoira.com/docs/understand-the-oauth-process-to-alto
  - type: APIReference
    url: https://readme.altoira.com/reference
  - type: GettingStarted
    url: https://readme.altoira.com/docs/understand-the-oauth-process-to-alto
  - type: Webhooks
    url: asyncapi/altoira-investments-webhooks.yml
  - type: AsyncAPI
    url: asyncapi/altoira-investments-asyncapi.yml
  - type: Authentication
    url: authentication/altoira-authentication.yml
  - type: OAuthScopes
    url: scopes/altoira-scopes.yml
  - type: ErrorCatalog
    url: errors/altoira-problem-types.yml
  - type: Conventions
    url: conventions/altoira-conventions.yml
  - type: DataModel
    url: data-model/altoira-data-model.yml
  - type: Sandbox
    url: sandbox/altoira-sandbox.yml
  - type: ToolCrosswalk
    url: mcp/altoira-tool-crosswalk.yml
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: Website
  url: https://www.altoira.com/
- type: DeveloperPortal
  url: https://readme.altoira.com/
- type: Documentation
  url: https://readme.altoira.com/docs/understand-the-oauth-process-to-alto
- type: APIReference
  url: https://readme.altoira.com/reference
- type: GettingStarted
  url: https://readme.altoira.com/docs/understand-the-oauth-process-to-alto
- type: Support
  url: https://www.altoira.com/help-center
- type: Blog
  url: https://www.altoira.com/insights
- type: GitHubOrganization
  url: https://github.com/AltoIRA
- type: Pricing
  url: https://www.altoira.com/pricing
- type: SignUp
  url: https://app.altoira.com/register
- type: Login
  url: https://app.altoira.com/login
- type: TermsOfService
  url: https://www.altoira.com/terms-of-service
- type: PrivacyPolicy
  url: https://www.altoira.com/privacy-policy
- type: StatusPage
  url: https://status.altoira.com/
- type: TrustCenter
  url: https://trust.altoira.com/
- type: Lifecycle
  url: lifecycle/altoira-lifecycle.yml
- type: LLMsTxt
  url: llms/altoira-llms.txt
- type: WellKnown
  url: well-known/altoira-well-known.yml
- type: Authentication
  url: authentication/altoira-authentication.yml
- type: OAuthScopes
  url: scopes/altoira-scopes.yml
- type: Conformance
  url: conformance/altoira-conformance.yml
- type: DomainSecurity
  url: security/altoira-domain-security.yml
- type: Conventions
  url: conventions/altoira-conventions.yml
- type: DataModel
  url: data-model/altoira-data-model.yml
- type: Sandbox
  url: sandbox/altoira-sandbox.yml
- type: AgenticAccess
  url: agentic-access/altoira-agentic-access.yml
- type: OpenAPI
  url: openapi/_original/altoira-partner-api-openapi.yml
- type: Overlay
  url: overlays/altoira-partner-api-overlay.yaml
- type: AsyncAPI
  url: asyncapi/altoira-investments-asyncapi.yml
- type: Webhooks
  url: asyncapi/altoira-investments-webhooks.yml
- type: ErrorCatalog
  url: errors/altoira-problem-types.yml
- type: MCPServer
  url: mcp/altoira-mcp.yml
- type: ToolCrosswalk
  url: mcp/altoira-tool-crosswalk.yml
- type: AgentSkill
  url: skills/_index.yml
x-enrichment:
  date: '2026-08-06'
  status: enriched
  artifacts_added: 22
  pass: local-v1