Atolls

aid: atolls
accessModel:
  pricing: unknown
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Unknown
  confidence: low
  source: []
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/atolls.png
name: Atolls
description: 'Atolls (formerly Global Savings Group) is a Munich-based consumer commerce-content company that operates the
  world''s largest shopping engagement platform, running coupon, cashback, deals, and shopping-community destinations across
  more than 20 markets. Its brand portfolio includes Coupons.com, Cuponation, iGraal, Shoop, Pouch, mydealz, hotukdeals, and
  Deala, connecting millions of shoppers with offers from thousands of retailers and brands through affiliate marketing, cashback,
  and AI-enhanced shopping insights. Founded in 2012 as CupoNation with Rocket Internet and rebranded to Atolls in 2024, it
  is backed by investors including HV Capital, RTP Global, and Rocket Internet. Atolls publishes no public developer API,
  developer portal, OpenAPI document or SDK — api., developer. and docs.atolls.com do not resolve — but it does serve real
  machine-readable documents: RFC 9116 security.txt files on five owned hosts pointing at a single group-wide Intigriti vulnerability
  disclosure program, and OpenID Connect discovery documents on seven Pepper community properties (mydealz, hotukdeals, Dealabs,
  Preisjaeger, Chollometro, Pepper PL, Promodescuentos) that expose an OAuth 2.0 authorization server for consumer sign-in.
  This profile captures that security, identity, and legal surface for the API Evangelist network.'
url: https://raw.githubusercontent.com/api-evangelist/atolls/refs/heads/main/apis.yml
x-type: company
x-source: vc-portfolio
x-backed-by:
- hv-capital
x-tier: stub
x-tier-reason: portfolio-lead
specificationVersion: '0.20'
created: '2026-07-17'
modified: '2026-08-13'
tags:
- Company
- Consumer
- E-Commerce
- Affiliate Marketing
- Cashback
- Coupons
- Shopping
- Retail
- Identity
- OpenID Connect
apis: []
common:
- type: VulnerabilityDisclosure
  url: security/atolls-vulnerability-disclosure.yml
- type: Security
  url: https://atolls.com/disclosure-policy
- type: DomainSecurity
  url: security/atolls-domain-security.yml
- type: Website
  url: https://atolls.com
- type: About
  url: https://atolls.com/about-us/
- type: Blog
  url: https://atolls.com/insights/
- type: Careers
  url: https://atolls.com/careers/
- type: PrivacyPolicy
  url: https://atolls.com/privacy-policy/
- type: Imprint
  url: https://atolls.com/imprint/
- type: SecurityTxt
  url: well-known/atolls-security.txt
- type: WellKnown
  url: well-known/atolls-well-known.yml
- type: Authentication
  url: authentication/atolls-authentication.yml
- type: OpenIDConnect
  url: well-known/atolls-mydealz-openid-configuration.json
- type: OAuthScopes
  url: scopes/atolls-scopes.yml
- type: Conformance
  url: conformance/atolls-conformance.yml
- type: ErrorCatalog
  url: errors/atolls-problem-types.yml
- type: LLMsTxt
  url: llms/atolls-llms.txt
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
x-enrichment:
  date: '2026-08-13'
  status: enriched
  artifacts_added: 11
  pass: local-v1
  note: 'Contract discovery run across the whole owned-brand portfolio rather than the corporate host. Found and saved verbatim:
    four additional RFC 9116 security.txt files and two OpenID Connect discovery documents. No OpenAPI, agent card, SDK or
    developer portal exists on any Atolls host.'