# Colabra

> Colabra is the AI workspace for M&A due diligence. It turns sell-side document dumps into a clause-linked risk register, entity map, and live gap analysis.

Use this file as the curated starting point for understanding Colabra, connecting to its API or MCP server, and evaluating trust and operational fit.

## Preferred entry points

- [Product site](https://www.colabra.ai/): Homepage and product positioning for the AI workspace used in M&A due diligence.
- [Docs home](https://www.colabra.ai/docs/): Product documentation hub.
- [API overview](https://www.colabra.ai/docs/api/overview/): REST API surface, response conventions, and integration model.
- [Authentication](https://www.colabra.ai/docs/api/authentication/): Service-account auth, user auth, and MCP OAuth details.
- [Resource endpoints](https://www.colabra.ai/docs/api/resource-endpoints/): Read/search endpoint catalog for projects, files, entities, findings, and reports.
- [Writeback endpoints](https://www.colabra.ai/docs/api/writeback-endpoints/): Mutation endpoint catalog for requests, comments, reports, templates, and files.
- [MCP guide](https://www.colabra.ai/docs/mcp-and-integrations/mcp/): Remote MCP setup for ChatGPT, Claude, Codex, and other tools.
- [Trust and security](https://www.colabra.ai/trust/): Security posture, compliance, backups, and data handling.
- [Responsible disclosure](https://www.colabra.ai/rdp/): Security disclosure policy and contact details.
- [OpenAPI spec](https://www.colabra.ai/openapi.json): Machine-readable REST API specification.

## Preferred Markdown docs

- [Docs home (Markdown)](https://www.colabra.ai/docs.md)
- [API overview (Markdown)](https://www.colabra.ai/docs/api/overview.md)
- [Authentication (Markdown)](https://www.colabra.ai/docs/api/authentication.md)
- [Resource endpoints (Markdown)](https://www.colabra.ai/docs/api/resource-endpoints.md)
- [Writeback endpoints (Markdown)](https://www.colabra.ai/docs/api/writeback-endpoints.md)
- [MCP guide (Markdown)](https://www.colabra.ai/docs/mcp-and-integrations/mcp.md)

## Integration facts

- Primary product: AI workspace for M&A due diligence.
- Core outputs: clause-linked risk register, entity map, and live gap analysis.
- REST API host: `https://api.colabra.ai`
- REST API base: `https://api.colabra.ai/v1`
- Remote MCP URL: `https://api.colabra.ai/mcp`
- MCP OAuth authorization server metadata: `https://api.colabra.ai/.well-known/oauth-authorization-server`
- MCP protected resource metadata: `https://api.colabra.ai/.well-known/oauth-protected-resource/mcp`
- Published MCP OAuth scope: `mcp:tools`
- Preferred machine-readable resources: `llms.txt`, `llms-full.txt`, Markdown docs under `/docs*.md`, and `openapi.json`.

## Trust and operations

- Trust page: https://www.colabra.ai/trust/
- Responsible disclosure: https://www.colabra.ai/rdp/
- Security contact: `mailto:trust@colabra.ai`
- Status page: https://status.colabra.ai
- Stated trust signals: SOC 2 Type II, regular third-party penetration testing, GDPR and CCPA compliance, SAML SSO, SCIM, MFA, encryption at rest and in transit, and explicit no-training-on-customer-data language.