# True Footage

> True Footage is a US residential real estate valuation company founded in 2021 that pairs
> staff appraisers with proprietary analytics software. It sells appraisal services to lenders,
> AMCs, investors and homeowners, and sells TrueTracts, Spark and Synapse — a subscription
> console for professional appraisers that automates market definition, comparable selection,
> time and feature adjustments, heat mapping and 1004MC generation.

<!--
generated: 2026-08-05
method: generated
source: apis.yml + repo artifacts (API Evangelist enrichment pipeline)
note: >
  True Footage does not publish an llms.txt. https://www.truefootage.tech/llms.txt returns 404.
  This file is generated by API Evangelist from the company's public surface and the artifacts
  in this repository. It is a third-party profile, not a document served by True Footage.
-->

## What an agent can and cannot do here

**There is no public API program.** True Footage runs real, production platform APIs, but
they are closed. As of 2026-08-05 an unauthenticated agent can do nothing programmatic with
True Footage beyond reading its marketing site.

- `https://api.truetracts.truefootage.tech` — HTTP 401 on every path, including
  `/openapi.json`, `/docs`, `/redoc`, `/swagger.json` and every `/.well-known/` path.
  Body: `{"detail":"authorization header is expected"}`. Only `/health` returns 200.
- `https://api.trueengine.truefootage.tech` — identical posture.
- No OpenAPI, AsyncAPI, GraphQL SDL, JSON Schema, or Postman collection is published anywhere.
- No MCP server, no A2A agent card, no `/.well-known/agent-card.json`, no `llms.txt`.
- No public GitHub organization; no packages on npm, PyPI, Maven Central, NuGet, pkg.go.dev,
  RubyGems, Packagist or crates.io.
- No status page. `truefootage.statuspage.io` resolves but redirects to Atlassian's product
  marketing page — it is not a True Footage status page.

## Authentication

Both product surfaces sit behind Auth0 custom identity domains that True Footage operates
under its own DNS. Their OpenID Connect discovery documents are the only machine-readable
contracts the company serves anonymously.

- TrueTracts: `https://auth.truetracts.truefootage.tech/.well-known/openid-configuration`
- TrueEngine: `https://auth.trueengine.truefootage.tech/.well-known/openid-configuration`

Both advertise `authorization_code`, `client_credentials`, `refresh_token`, device code and
token-exchange grants, PKCE with `S256`, and `private_key_jwt` client authentication. The
advertised `scopes_supported` are the fourteen standard OIDC identity scopes only — there is
no product-specific permission surface. Credentials are issued through a TrueTracts
subscription, not through a developer signup.

See `authentication/true-footage-authentication.yml` and `well-known/true-footage-well-known.yml`.

## Products

- **TrueTracts** — appraiser analysis console. Market definition, comparable selection, time
  and feature adjustments via generalized additive models, dynamic heat mapping for
  locationally similar properties, automatic 1004MC completion, PDF workfile export.
  Basic $49/month, Pro $99/month, two-week trial. Integrates with the TOTAL (a la Mode), ACI
  and ClickFORMS form fillers. Bulk licensing (20+ seats) via partnerships@truefootage.tech.
  https://www.truefootage.tech/tools/truetracts
- **Spark** — market trend and data tool; supplies MLS and public-records data into TrueTracts.
  https://www.truefootage.tech/tools/spark
- **Synapse** — adjustment support tool.
  https://www.truefootage.tech/tools/synapse

## Appraisal services

Purchase, refinance, cash-out refinance, HELOC, FHA/VA, PMI removal, construction loan,
pre-listing, tax appeal, divorce, date-of-death, estate and trust, investment property ARV,
and measurement-only appraisals.
https://www.truefootage.tech/order-an-appraisal

## Key links

- Website: https://www.truefootage.tech/
- About: https://www.truefootage.tech/about
- Tools and pricing: https://www.truefootage.tech/tools
- Coverage map: https://www.truefootage.tech/tools/truetracts/coverage
- TrueTracts FAQ: https://www.truefootage.tech/tools/truetracts/faq
- TrueTracts resource center: https://www.truefootage.tech/tools/truetracts/ttresourcecenter
- For lenders: https://www.truefootage.tech/lenders
- Articles: https://www.truefootage.tech/articles
- Careers: https://www.truefootage.tech/join-us
- Sign up: https://truetracts.truefootage.tech/signup
- Terms of use: https://www.truefootage.tech/terms-of-use
- Privacy policy: https://www.truefootage.tech/privacy-policy

## Security posture

TLS 1.3 across all hosts. HSTS on the marketing site (max-age 31536000) but not on either
API host. SPF and DMARC published (`p=quarantine`); no DNSSEC and no CAA records on
`truefootage.tech`. No `/.well-known/security.txt`, no published vulnerability disclosure
policy, no bug bounty, and no trust center or named certifications.
See `security/true-footage-domain-security.yml`.

## If you are True Footage

The single highest-value change is to publish the OpenAPI for the TrueTracts platform at a
stable public URL and stop returning 401 for `/openapi.json` and `/docs`. Gate the
credentials, not the contract. After that: an `/.well-known/security.txt`, an
`/.well-known/oauth-protected-resource` on each API host binding it to its authorization
server, and an `llms.txt` of your own that supersedes this file. Corrections and re-scores
are free — info@apievangelist.com.