# FingerTrackID

> B2B device intelligence and access-risk platform. A customer backend signs `POST https://api.fingertrackid.com/v1/assessments` with HMAC and receives a recommendation in shadow mode; the customer system always decides and executes every action.

- The published contracts (OpenAPI and JSON Schema under `/downloads/`) win over any prose or example.
- Never ask for, print, log, commit or store the HMAC secret value: the customer backend reads it from its own secret manager at runtime. `key_id`, public key, collection origin and DNS records come from the customer's console, never from an example.
- References are keyed pseudonyms created by the customer backend; never send an email, tax ID, phone number, name or account number.
- `trust_score: null` means no score, never 0 or 100. Start in `SHADOW`: a recommendation never blocks or allows anything by itself.
- Rules for a repository that integrates FingerTrackID, the integration file `fingertrackid.integration.json` and the local MCP server `@fingertrackid/mcp`: https://docs.fingertrackid.com/getting-started/ai-agents/
- Node.js backends can use the server SDK `@fingertrackid/server`: https://docs.fingertrackid.com/api/server-sdk/

## Documentation Sets

- [Abridged documentation](https://docs.fingertrackid.com/llms-small.txt): a compact version of the documentation for FingerTrackID, with non-essential content removed
- [Complete documentation](https://docs.fingertrackid.com/llms-full.txt): the full documentation for FingerTrackID

## Notes

- The complete documentation includes all content from the official documentation
- The content is automatically generated from the same source as the official documentation