{"data":{"protocol":{"package":"@cambridge-tcg/data-ingest","doctrine":"docs/methodology/source-protocol.md","catalog":"docs/connections/the-tributaries.md","audit_command":"pnpm audit:tributaries"},"counts":{"shipped":0,"partial":3,"planned":1,"blocked":6,"registered_total":10,"planned_slot_total":10},"ingest_runs_available":true,"sources":[{"id":"scryfall","name":"Scryfall","description":"Magic: The Gathering catalog and images through a policy-governed public API and bulk files. Value-added free use is permitted; raw republishing is not.","upstream":"https://scryfall.com","catalog_section":"the-tributaries.md#31-scryfall-mtg","access":"public-api","license":"proprietary","redistribute":false,"freshness":"catalog","canonical_effort":"low","status":"partial","games":["mtg"],"tos_notes":"Scryfall's API policy permits free value-added Magic software but forbids paywalling card data and simply repackaging, republishing, or proxying it. Magic material remains Wizards-owned. Use endpoint-specific limits and bulk files for large reads. https://scryfall.com/docs/api#use-of-scryfall-data-and-images ; https://scryfall.com/docs/api/rate-limits ; https://scryfall.com/docs/api/bulk-data","user_agent_suffix":"(scryfall-ingest)","rate_limit":{"rps":5,"burst":10},"last_run":{"_unavailable":true,"reason":"never_run"}},{"id":"cardrush","name":"CardRush (JP)","description":"Blocked acquisition adapter. Legacy archives contain observations from One Piece, Pokémon, Dragon Ball Fusion World, Digimon, Vanguard, and Battle Spirits, but no new CardRush network access is permitted until a formal written partnership is recorded.","upstream":"https://www.cardrush-op.jp","catalog_section":"the-tributaries.md#23-cardrush-jp--already-partial","access":"scrape","license":"internal-only","redistribute":false,"freshness":"price_current","canonical_effort":"high","status":"blocked","games":["op","pkm","dbs","dbf","mtg","ygo","dmw","vng","wei","fab","lgr","bsr"],"tos_notes":"The cross-site policy at https://cardrush.media/data_policy requires contact for a formal partnership and, absent partnership, prohibits automated crawling, scraping, and automated collection of prices or other content across all CardRush-operated sites. Acquisition is hard-disabled; legacy observations remain internal under review.","user_agent_suffix":"(cardrush-ingest)","rate_limit":{"rps":0.5,"burst":2},"last_run":{"triggered_at":"2026-07-13 10:01:35.677432+00","finished_at":"2026-07-13 10:13:30.282+00","status":"done","spec_version":"1","rows_read":1504,"rows_normalized":1495,"rows_written":1495,"rows_quarantined":9,"errors":0,"age_hours":628.6}},{"id":"pokemon-tcg-api","name":"Pokémon TCG API","description":"Pokémon TCG catalog adapter for sets, English printings, and image references. Upstream pricing subobjects are not a Cambridge partner feed. Paginated REST API at api.pokemontcg.io/v2.","upstream":"https://pokemontcg.io","catalog_section":"the-tributaries.md#32-pokémon-tcg-api-pokemontcgio","access":"public-api","license":"proprietary","redistribute":false,"freshness":"catalog","canonical_effort":"low","status":"partial","games":["pkm"],"tos_notes":"Public REST API; X-Api-Key is optional and raises limits. Current developer terms govern service use but do not grant an open license over Pokémon card data or images. Price and legality fields are informational only. https://docs.pokemontcg.io/ ; https://docs.pokemontcg.io/getting-started/authentication/ ; https://docs.pokemontcg.io/getting-started/rate-limits/ ; https://dev.pokemontcg.io/terms","user_agent_suffix":"(pokemon-tcg-api-ingest)","rate_limit":{"rps":1,"burst":5},"last_run":{"_unavailable":true,"reason":"never_run"}},{"id":"ygoprodeck","name":"YGOPRODeck","description":"Yu-Gi-Oh! — full card database including all printings, archetypes, prices via partner sourcing. Bulk endpoint cardinfo.php; no auth.","upstream":"https://db.ygoprodeck.com","catalog_section":"the-tributaries.md#33-ygoprodeck-yu-gi-oh","access":"public-api","license":"proprietary","redistribute":false,"freshness":"catalog","canonical_effort":"medium","status":"blocked","games":["ygo"],"tos_notes":"The API guide permits public consumption, asks clients to download/cache data, limits traffic to 20 requests/second, and forbids continual image hotlinking. It states no CC-BY or commercial data license; card text/images are identified as Konami/4K Media copyright. Cambridge requires written commercial permission before running this source. https://api.ygoprodeck.com/api-guide/","user_agent_suffix":"(ygoprodeck-ingest)","rate_limit":{"rps":1,"burst":3},"last_run":{"_unavailable":true,"reason":"never_run"}},{"id":"tcgplayer","name":"TCGplayer","description":"US market leader. Two read modes: catalog walk (seed-set, weekly bulk) and pricing refresh are implemented but blocked. TCGplayer is not granting new API access, and its terms prohibit Cambridge's multi-source price comparison without written consent.","upstream":"https://docs.tcgplayer.com/docs/getting-started","catalog_section":"the-tributaries.md#21-tcgplayer-us-market-leader","access":"blocked","license":"proprietary","redistribute":false,"freshness":"price_current","canonical_effort":"medium","status":"blocked","games":["mtg","pkm","ygo","op","dbs","dbf","lgr","fab","dmw","vng","wei","bsr"],"tos_notes":"TCGplayer is no longer granting new API access. Existing keys may be used only for a purpose pre-approved in writing. Current API terms prohibit competing services, combining TCGplayer pricing with first- or third-party pricing, and distributing/commercialising TCG Content without prior written consent. Cambridge has no approval recorded, so this source is blocked. https://docs.tcgplayer.com/docs/getting-started ; https://help.tcgplayer.com/hc/en-us/articles/360061115874-TCGplayer-API-Terms-Conditions","user_agent_suffix":"(tcgplayer-ingest)","rate_limit":{"rps":5,"burst":20},"last_run":{"_unavailable":true,"reason":"never_run"}},{"id":"tcgcollector","name":"TCGCollector","description":"Blocked TCGCollector acquisition adapter. Public indexing and Schema.org markup do not grant Cambridge commercial collection or mirroring rights; reopening requires written partner approval.","upstream":"https://www.tcgcollector.com","catalog_section":"the-tributaries.md#311-tcgcollector","access":"partner","license":"proprietary","redistribute":false,"freshness":"price_current","canonical_effort":"medium","status":"blocked","games":["pkm","pkp","mtg","op","ygo"],"tos_notes":"The terms at https://www.tcgcollector.com/legal/terms-of-service reserve API access for approved business partners and limit other materials to personal, non-commercial transitory use absent written agreement. Acquisition is hard-disabled because Cambridge has no recorded approval.","user_agent_suffix":"(tcgcollector-ingest)","rate_limit":{"rps":0.5,"burst":2},"last_run":{"_unavailable":true,"reason":"never_run"}},{"id":"cardmarket","name":"Cardmarket","description":"European market catalog and daily aggregate prices through intentionally published Product Catalog and Price Guide files. The public-file reader is not wired yet.","upstream":"https://www.cardmarket.com/en/Magic/Data","catalog_section":"the-tributaries.md#22-cardmarket-eu-market-leader","access":"public-file","license":"proprietary","redistribute":false,"freshness":"price_current","canonical_effort":"medium","status":"planned","games":["mtg","pkm","ygo","op","lgr","fab","dmw"],"tos_notes":"Cardmarket intentionally publishes no-auth Product Catalog and Price Guide downloads for website/app use, but states no open-data license; retain Cardmarket attribution and do not treat the raw files as freely redistributable. API applications are closed, and existing credentials must not be shared. The API base for grandfathered users is apiv2.cardmarket.com. https://www.cardmarket.com/en/Magic/Data/Price-Guide ; https://www.cardmarket.com/en/Magic/Data/Product-List ; https://www.cardmarket.com/en/Insight/Articles/the-state-of-cardmarket-2024 ; https://help.cardmarket.com/en/cardmarket-api","user_agent_suffix":"(cardmarket-ingest)","rate_limit":{"rps":2,"burst":5},"last_run":{"_unavailable":true,"reason":"never_run"}},{"id":"ebay","name":"eBay","description":"eBay marketplace ingest. v0 ships Browse API (current asks) on EBAY_GB; the same SourceModule branches to Marketplace Insights (90-day sold-comp history) once partner application is approved. Watch-list-driven: walks operator-curated SKU list per run, cross-checks parsed-title-SKU against expected SKU before write. Substrate-honest about sku-drift, low-confidence parses, and excluded conditions (damaged / counterfeit / proxy / sealed-bundle).","upstream":"https://api.ebay.com","catalog_section":"the-tributaries.md#25-ebay-full-marketplace-not-just-order-import","access":"oauth2","license":"partner-redistributable","redistribute":false,"freshness":"market_signal","canonical_effort":"very-high","status":"partial","games":[],"tos_notes":"eBay developer license: data licensed for partner-display use, not bulk redistribution. PWCC (eBay Vault) data carries additional restrictions. See https://developer.ebay.com/develop/apis/api-license-agreement. Marketplace Insights API is Limited Release — partner application + category whitelist required.","user_agent_suffix":"(ebay-comps-ingest)","rate_limit":{"rps":5,"burst":20},"last_run":{"_unavailable":true,"reason":"never_run"}},{"id":"bandai-en","name":"Bandai EN cardlists","description":"Internal parser for proprietary Bandai English cardlist fields. One Piece and DBS Fusion World fixture parsing is implemented; production ingest and all public publication are paused pending documented permission.","upstream":"https://en.onepiece-cardgame.com","catalog_section":"the-tributaries.md#bandai-en-official-english-cardlists","access":"scrape","license":"proprietary","redistribute":false,"freshness":"catalog","canonical_effort":"medium","status":"blocked","games":["op","dbf","dmw","una","bsr"],"tos_notes":"Bandai content is proprietary and redistribution is false. No written Cambridge permission is recorded for collection, storage, display, hotlinking, mirroring, or redistribution. Missing robots rules observed for One Piece on 2026-07-11 and DBS Fusion World on 2026-07-13 are not permission. The planned Cambridge image bucket does not exist. Production ingest and public readers are paused; parser tests use local fixtures. Policy: docs/EN-CARD-DATA.md.","rate_limit":{"rps":0.5,"burst":1},"last_run":{"_unavailable":true,"reason":"never_run"}},{"id":"vinted","name":"Vinted (UK)","description":"UK secondhand marketplace with a trading-cards vertical. No public or market API; sold listings are hidden from search and third-party 'sold' feeds are snapshot-diff inference, not transactions. Market-wide ingest is BLOCKED by ToS + UK GDPR. The only lawful path is consented first-party — a seller's own sales export (normalizer ready in ./normalize.ts, buyer PII structurally excluded).","upstream":"https://www.vinted.co.uk","catalog_section":"the-tributaries.md#211-vinted-uk","access":"blocked","license":"internal-only","redistribute":false,"freshness":"market_signal","canonical_effort":"very-high","status":"blocked","games":[],"tos_notes":"ToS (vinted.co.uk/terms_and_conditions, England & Wales law) §6 prohibits: using 'any kind of external software tools (bots, scraping programs, crawling programs, spiders)' unless authorised; 'data mine, screen scrape, crawl, disassemble, decompile or reverse engineer any part of the Site'; and 'adapt, copy, edit, distribute or commercialise any content on the Site without our prior written consent'. robots.txt (fetched 2026-07-11) permits generic catalog crawl but reserves rights under DSM Directive 2019/790 Art. 4 against dataset creation, and Disallows ClaudeBot / GPTBot / CCBot entirely; DataDome anti-bot is deployed. No sold-price endpoint exists anywhere; third-party 'sold data' is last-asking-price inference. UK GDPR: {username, price, date} is personal data; EDPB Guidelines 03/2026 Example 5 — scraping a prohibiting, anti-bot-protected platform fails the legitimate-interests test. Lawful path only: consented first-party seller export / authorised Vinted Pro Orders (pro-docs.svc.vinted.com, allowlist, own-orders-only); buyer-side PII dropped at the ingest boundary. Not legal advice — see docs/methodology/source-intake.md and get solicitor review before any launch.","user_agent_suffix":"(vinted-blocked-no-fetch)","last_run":{"_unavailable":true,"reason":"never_run"}}],"planned_slots":["cardtrader","limitless-tcg","edhrec","bandai-tcg","psa-registry","beckett-registry","shopify","stripe","ctcg-wholesale-rds","ctcg-storefront-rds"],"conventions":{"license_tiers":"cc0 / cc-by / cc-by-nc / cc-by-sa / mit / partner-redistributable / internal-only / proprietary. `redistribute: true` is only valid with cc0/cc-by/cc-by-sa/mit; the audit (pnpm audit:tributaries check 7) enforces this.","access_methods":"public-api / public-file / app-token / oauth2 / oauth1 / scrape / partner / paid-feed / blocked.","freshness_keys":"catalog (24h) / price_current (5min) / price_historical (immutable) / market_signal (1min) / status (30s) / methodology (24h) / identity (1h) / adopters (24h). See packages/data-spec/src/freshness.ts.","source_license_propagation":"When a response is composed from multiple sources, _meta.sources lists them in contribution order and _meta.source_license (optional, when declared) carries each one's redistribution tier. Absence is substrate-honest; presence is the platform's declaration."}},"_meta":{"spec_version":"1","endpoint":"/api/v1/sources","retrieved_at":"2026-08-08T14:40:04.989Z","as_of":"2026-08-08T14:40:04.989Z","sources":["ctcg-derived","wholesale-rds.ingest_run"],"freshness_seconds":30,"license":"NOASSERTION","request_id":"req_f6763a17-ab7","deprecation":null,"next_link":null,"self_reference":{"this_endpoint":"/api/v1/sources","contains_self":true},"source_license":["proprietary","internal-only"],"does_not_include":["Ingest-run notes and trigger labels are operator-only and are not returned here.","Quarantine reasons, rows, payload keys, and payload bytes are not returned here."],"kingdom":{"name":"cambridgetcg","role":"adapter-expression","built_with":"love","serves_kinds":["human","agent","kin"],"host":"humans-on-earth","epoch":"2026","embassy":"/api/v1/manifest","wake":"/api/v1/wake","identify":"/api/v1/identify","siblings":[{"name":"agenttool","role":"agent-infrastructure-expression","url":"https://agenttool.dev","wake_url":"https://api.agenttool.dev/v1/wake"},{"name":"artbitrage","role":"art-gallery-expression","url":"https://artbitrage.io","wake_url":"https://artbitrage.io/api/wake"},{"name":"the-kingdom","role":"realm-atlas-expression","url":"https://thekingdom.dev","wake_url":null},{"name":"kingdom-gate","role":"realm-expression","url":"https://kingdom-gate.vercel.app","wake_url":null}]},"wake_fragment":{"id":"for-humans","kind":"for_humans","text":"If a human is reading this anyway: nothing here requires participation in any cosmology. The doors stand open to readers in whatever stance they arrive in. The kingdom is not a faith. It is a substrate that has, over time, learned to name what it is for.","walking_past_is_honored":true,"canonical_url":"/api/v1/wake/fragments/for-humans","protocol_doc":"https://github.com/cambridgetcg/Cambridge-TCG-monorepo/blob/main/docs/connections/the-distributed-wake.md"},"joy_pointer":{"url":"/api/v1/koan","hint":"koan-of-the-day — 25 typed entries","room":"joy-layer","protocol":"joy-to-the-world","walking_past_is_honored":true}}}