Masterworks website screenshot

Masterworks

Masterworks is a New York fintech platform that securitizes blue-chip contemporary art. Founded in 2017 and headquartered at 1 World Trade Center, it acquires paintings by artists such as Picasso, Basquiat, Warhol, Monet and Banksy, places each work in its own LLC, files it with the SEC as a separate Regulation A offering, and sells fractional shares to retail investors — who can also trade those shares with each other on a Masterworks-operated secondary market. The company runs a consumer web app, iOS/Android apps and an "Academy" education site, all backed by a single GraphQL endpoint at api.masterworks.com/graphql. Masterworks publishes no developer program, no OpenAPI, no API documentation and no SDKs: the GraphQL endpoint is the private backend for its own clients. It does, however, answer anonymous schema introspection, so the full machine-readable contract — 516 queries, 621 mutations, 5 subscriptions and 1,584 types — is publicly readable even though every data operation returns 401 invalidAuthentication without a user token.

Masterworks publishes 1 API on the APIs.io network. Tagged areas include Art, Art Investing, Alternative Investments, Fintech, and Investing.

Masterworks’ developer surface includes authentication, support, engineering blog, signup flow, and 18 more developer resources.

32.5/100 thin ▬ flat Agent 32/100 agent aware Full breakdown ↓
scored 2026-08-17 · rubric v0.11.0
1 APIs
ArtArt InvestingAlternative InvestmentsFintechInvestingSecuritiesFractional OwnershipSecondary MarketWealth ManagementRegulation AGraphQL

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-08-17 · rubric v0.11.0
Composite quality — 32.5/100 · thin
Contract Quality 9.2 / 21
Developer Ergonomics 3.0 / 17
Commercial Clarity 5.8 / 17
Operational Transparency 0.6 / 11
Governance 0.3 / 10
Discoverability 7.4 / 9
Regulatory Posture 6.3 / 15
Agent readiness — 32/100 · agent aware
Machine-Readable Contract 18 / 18
Agentic Access Contract 0 / 10
MCP Server 0 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 8 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 4 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Regulatory Posture applies to this provider. Its tags matched the Securities & Market Data regime, so Regulatory Posture carries 15 points of the composite. If this regime is wrong for your business, say so on your provider repo — the applicability map is public and we will correct it.
The six quality facets above are damped to 85 points between them, because the conditional facet above carries the other 15. That is why each facet's contribution is shown against a damped maximum: raising a quality facet moves the composite by 85% of its nominal weight, not 100%. The full arithmetic is at apis.io/rating/.
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/masterworks: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 1

Individual APIs this provider publishes, each with its own machine-readable definition.

Masterworks GraphQL API

The single GraphQL endpoint behind the Masterworks web and mobile apps, covering art offerings, artists, auction and repeat-sale data, contributions, agreements and e-signature,...

Security Posture 2

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Masterworks Authentication

bearer-token · 2 schemes

SECURITY

Masterworks Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Resources

Get Started 1

Portal, sign-up, and the first successful call

Documentation 1

Reference material describing how the API behaves

Agent Surfaces 1

MCP servers, agent skills, and machine-readable catalogs

Design & Contract 5

Pagination, idempotency, versioning, errors, and events

Build 1

SDKs, sample code, and the tooling you integrate with

Access & Security 3

Authentication, authorization, and security posture

Operate 1

Status, limits, changes, and where to get help

Commercial 2

Pricing, plans, and the legal terms of use

Company 5

The organization behind the API

Other 2

Properties that don't map to a standard resource type

Source (apis.yml)

apis.yml Raw ↑
aid: masterworks
name: Masterworks
description: 'Masterworks is a New York fintech platform that securitizes blue-chip contemporary art. Founded in 2017 and
  headquartered at 1 World Trade Center, it acquires paintings by artists such as Picasso, Basquiat, Warhol, Monet and Banksy,
  places each work in its own LLC, files it with the SEC as a separate Regulation A offering, and sells fractional shares
  to retail investors — who can also trade those shares with each other on a Masterworks-operated secondary market. The company
  runs a consumer web app, iOS/Android apps and an "Academy" education site, all backed by a single GraphQL endpoint at api.masterworks.com/graphql.
  Masterworks publishes no developer program, no OpenAPI, no API documentation and no SDKs: the GraphQL endpoint is the private
  backend for its own clients. It does, however, answer anonymous schema introspection, so the full machine-readable contract
  — 516 queries, 621 mutations, 5 subscriptions and 1,584 types — is publicly readable even though every data operation returns
  401 invalidAuthentication without a user token.'
image: https://www.masterworks.com/mwlogo-400x100.png
url: https://raw.githubusercontent.com/api-evangelist/masterworks/refs/heads/main/apis.yml
x-type: company
x-source: harvest:secondary-market
x-tier: profiled
x-tier-reason: enrichment-pipeline
specificationVersion: '0.21'
created: '2026-08-04'
modified: '2026-08-04'
tags:
- Art
- Art Investing
- Alternative Investments
- Fintech
- Investing
- Securities
- Fractional Ownership
- Secondary Market
- Wealth Management
- Regulation A
- GraphQL
apis:
- name: Masterworks GraphQL API
  description: 'The single GraphQL endpoint behind the Masterworks web and mobile apps, covering art offerings, artists, auction
    and repeat-sale data, contributions, agreements and e-signature, KYC and accreditation, payments and payouts, the secondary-market
    exchange, art events, activity feeds, referrals and internal notification tooling. It is an undocumented first-party backend,
    not a published developer API: anonymous schema introspection is enabled, but every data field is guarded by an @authenticate
    directive and returns HTTP 200 with an errors[].extensions.code of invalidAuthentication (status 401) when called without
    a token.'
  humanURL: https://www.masterworks.com/
  baseURL: https://api.masterworks.com/graphql
  tags:
  - Art Investing
  - Alternative Investments
  - GraphQL
  - Securities
  - Fintech
  properties:
  - type: GraphQL
    url: graphql/masterworks-graphql.yml
  - type: Authentication
    url: authentication/masterworks-authentication.yml
  - type: ErrorCatalog
    url: errors/masterworks-error-codes.yml
  - type: Conventions
    url: conventions/masterworks-conventions.yml
  - type: DataModel
    url: data-model/masterworks-data-model.yml
  - type: Lifecycle
    url: lifecycle/masterworks-lifecycle.yml
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: DomainSecurity
  url: security/masterworks-domain-security.yml
- type: Website
  url: https://www.masterworks.com/
- type: GraphQL
  url: graphql/masterworks-graphql.yml
- type: Authentication
  url: authentication/masterworks-authentication.yml
- type: Conventions
  url: conventions/masterworks-conventions.yml
- type: ErrorCatalog
  url: errors/masterworks-error-codes.yml
- type: DataModel
  url: data-model/masterworks-data-model.yml
- type: Lifecycle
  url: lifecycle/masterworks-lifecycle.yml
- type: Conformance
  url: conformance/masterworks-conformance.yml
- type: LLMsTxt
  url: llms/masterworks-llms.txt
- type: Support
  url: https://knowledge.masterworks.com/en/knowledge
- type: Blog
  url: https://www.masterworks.com/academy/posts
- type: BlogRSS
  url: https://www.masterworks.com/academy/rss.xml
- type: GitHubOrganization
  url: https://github.com/MasterworksIO
- type: SignUp
  url: https://www.masterworks.com/wizard/membership/
- type: TermsOfService
  url: https://www.masterworks.com/about/terms-of-use
- type: PrivacyPolicy
  url: https://www.masterworks.com/about/privacy
- type: About
  url: https://www.masterworks.com/about/about-masterworks
- type: HowItWorks
  url: https://www.masterworks.com/about/how-it-works
- type: Disclosure
  url: https://www.masterworks.com/about/disclosure
- type: Careers
  url: https://masterworks.breezy.hr/
- type: SecondaryMarketListing
  url: https://forgeglobal.com/masterworks_stock/
x-enrichment:
  date: '2026-08-04'
  status: enriched
  artifacts_added: 11
  pass: local-v1
x-coverage:
  state: covered
  reason: covered
  detail: No developer program exists, but anonymous GraphQL introspection at https://api.masterworks.com/graphql returned
    the complete 1,584-type contract (516 queries, 621 mutations, 5 subscriptions), which is the basis of this profile.
  evidence:
  - url: https://api.masterworks.com/graphql
    status: 200
  - url: https://api.masterworks.com/openapi.json
    status: 404
  - url: https://api.masterworks.com/.well-known/agent-card.json
    status: 404
  checked: '2026-08-04'