# SupplySphere

> Industrial equipment & supplier intelligence for oil & gas, energy and process industries: a catalog of ~100 product types across 17 categories, AI supplier matching, demand forecasting, RFQs and webhooks.

## For AI agents
- MCP server (Streamable HTTP): https://supplysphere.xyz/mcp — send `Authorization: Bearer <api key>`. Tools: list_categories, search_catalog, get_catalog_record, match_suppliers, forecast_demand, create_rfq, list_rfqs, get_rfq, update_rfq_status.
- OpenAPI: https://supplysphere.xyz/swagger/v1/swagger.json
- API keys: https://supplysphere.xyz/developers/keys (scopes: catalog:read, ai:match, ai:forecast, rfq:read, rfq:write, webhooks:manage)

## REST API v1
- GET https://supplysphere.xyz/api/v1/catalog/categories — categories and product type keys
- GET https://supplysphere.xyz/api/v1/catalog/search?q=&category=&type=&country=&supplier=&page=&pageSize= — search listings
- GET https://supplysphere.xyz/api/v1/catalog/records/{type}/{id} — full record
- POST https://supplysphere.xyz/api/v1/match — rank suppliers for a requirement
- POST https://supplysphere.xyz/api/v1/forecast — demand forecast
- GET/POST https://supplysphere.xyz/api/v1/rfqs — list/create RFQs; POST /api/v1/rfqs/{id}/status
- GET/POST/DELETE https://supplysphere.xyz/api/v1/webhooks — manage webhook endpoints

## Webhooks
Events: rfq.created, rfq.updated, rfq.matched, rfq.closed, match.completed, api_key.created, api_key.revoked, webhook.test.
Each POST carries `SupplySphere-Signature: t=<unix>,v1=<hex>` where v1 = HMAC-SHA256(secret, "{t}.{raw body}").

## Web app
- Catalog explorer (stable, linkable URLs): https://supplysphere.xyz/app/catalog?q=<terms>&category=<slug>&type=<key>&country=<name>
- Developer portal: https://supplysphere.xyz/developers