> Toden documentation. For the full index fetch /llms.txt. Every page is available as Markdown by appending .md to its URL. Identity verification uses /api/kyc, Risk Intelligence uses /api/v1; they are separate contracts with different error shapes. Never invent an endpoint, field or enum value: read the API reference page for the operation first.

# Machine-readable docs

> llms.txt, per-page Markdown, OpenAPI contracts, the documentation MCP server and agent skills for Toden.

Everything on this site is available in a form a program can read. The machine-readable copies are generated from the same sources as the pages you are reading, so they do not drift.

## Surfaces

| Surface                        | Where                                                 | What it contains                                                                                                                                  |
| ------------------------------ | ----------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------- |
| Site index                     | `/llms.txt`                                           | Every page with its description and a link to its Markdown. Also available per section, for example `/api-reference/llms.txt`.                    |
| Page as Markdown               | Add `.md` to any page URL                             | The page content, including API reference pages with their schemas and examples. Sending `Accept: text/markdown` works too.                       |
| Risk Intelligence contract     | `https://api.toden.co/api/openapi.json`               | OpenAPI 3.1 for `/api/v1`.                                                                                                                        |
| Identity verification contract | `https://api.toden.co/api/openapi/verification.json`  | OpenAPI 3.1 for `/api/kyc` and `/api/identity`.                                                                                                   |
| Webhook catalogue              | `GET /api/v1/webhooks/catalogue`                      | The current event types, read from the running service with a secret key.                                                                         |
| Documentation MCP server       | `/_mcp/server` on this site                           | A tool an agent can call to search these docs. It does not call the Toden API and takes no API key. See [MCP server](/get-started/ai/mcp-server). |
| Agent skills                   | [Agent skills](/get-started/ai/overview#agent-skills) | One brief per product.                                                                                                                            |

Every page also has **Copy page** and **View as Markdown** actions at the top.

## Reading order for an agent

1. Fetch `/llms.txt` and pick the guides for the product in hand.
2. Fetch the OpenAPI contract for the API family, and resolve the schemas it references.
3. Read the endpoint's reference page as Markdown for its error codes and examples.
4. Read [Requests, retries and idempotency](/api-reference/conventions) and [Verify signatures](/integrate/webhooks/signatures) before writing any retry or webhook code.

## What the contracts guarantee

* Every documented operation exists in the released API. The build fails if a documented endpoint is not mounted.
* A removed endpoint, removed field or newly required field on `/api/v1` fails the build until it is reviewed as a breaking change.
* The identity verification contract documents the server-to-server and SDK-entry endpoints. Routes that only the SDKs use internally during capture are deliberately left out and can change.

## When the docs and the API disagree

Treat the API's actual response as the truth, tell us at [hello@toden.co](mailto:hello@toden.co), and do not guess a field that is not in the contract.