{
 "categories": [
  "marketing",
  "customer-service"
 ],
 "deployment": "saas",
 "evidence": [
  {
   "date": "2026-10-16",
   "fact": "homepage",
   "note": "The developer home is Trustpilot's documentation for Trustpilot for Business APIs and the Data Solutions API.",
   "source": "https://developers.trustpilot.com/",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "name",
   "note": "The site name and product name on the page are Trustpilot.",
   "source": "https://developers.trustpilot.com/",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "vendor",
   "note": "The authentication overview is published as Trustpilot documentation and uses api.trustpilot.com.",
   "source": "https://developers.trustpilot.com/authentication",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "license",
   "note": "The developer home describes Trustpilot for Business and a separate Data Solutions product for access to Trustpilot's review database. The product is a commercial service. A pricing page was not opened.",
   "source": "https://developers.trustpilot.com/",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "deployment",
   "note": "Token requests go to https://api.trustpilot.com. The APIs are hosted.",
   "source": "https://developers.trustpilot.com/authentication",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "modalities.api.exists",
   "note": "The developer home documents Trustpilot for Business APIs for invitations, business units, locations, product reviews, and service reviews, plus a Data Solutions API.",
   "source": "https://developers.trustpilot.com/",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "modalities.api.auth[0]",
   "note": "Public APIs take the API key, also called the client ID, in an apikey HTTP header. The page says not to put the key in a query parameter.",
   "source": "https://developers.trustpilot.com/authentication",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "modalities.api.auth[1]",
   "note": "Private APIs use OAuth 2.0. Documented grants are authorization code, implicit, and client credentials. Access tokens last 100 hours. Calls send Authorization Bearer. The password grant is listed as deprecated.",
   "source": "https://developers.trustpilot.com/authentication",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "modalities.api.coverage",
   "note": "The home page names invitations, business units, locations, product reviews, service reviews, and Data Solutions. Individual operation pages were not opened, and some grants do not support MFA, so coverage is partial.",
   "source": "https://developers.trustpilot.com/",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "modalities.api.docs",
   "note": "Opened as the current authentication overview.",
   "source": "https://developers.trustpilot.com/authentication",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "modalities.data_access.export[0]",
   "note": "The refresh-token response example is a JSON object with access_token and refresh_token.",
   "source": "https://developers.trustpilot.com/authentication",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "verdict.scores.api",
   "note": "Public and private APIs with an API key and OAuth 2.0 are a usable production path. Deprecated password grant, MFA limits, and the unread module references keep the score at 6.",
   "source": "https://developers.trustpilot.com/authentication",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "freshness.watch[0].url",
   "note": "Opened and verified as the current Trustpilot developer home.",
   "source": "https://developers.trustpilot.com/",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "freshness.watch[1].url",
   "note": "Opened and verified as the current authentication overview, including the apikey header and OAuth grants.",
   "source": "https://developers.trustpilot.com/authentication",
   "tier": "declared"
  }
 ],
 "freshness": {
  "last_verified": "2026-10-16",
  "volatility": "medium",
  "watch": [
   {
    "type": "docs",
    "url": "https://developers.trustpilot.com/"
   },
   {
    "type": "docs",
    "url": "https://developers.trustpilot.com/authentication"
   }
  ]
 },
 "homepage": "https://developers.trustpilot.com/",
 "id": "trustpilot",
 "license": "commercial",
 "modalities": {
  "agent_docs": {
   "llms_txt": "unknown"
  },
  "api": {
   "auth": [
    "api-key",
    "oauth2"
   ],
   "coverage": "partial",
   "docs": "https://developers.trustpilot.com/authentication",
   "exists": true,
   "kinds": []
  },
  "cli": {
   "exists": "unknown"
  },
  "computer_use": {
   "issues": [],
   "viability": "unknown"
  },
  "data_access": {
   "export": [
    "json"
   ],
   "import": []
  },
  "extensibility": {
   "scripting": [],
   "webhooks": "unknown"
  },
  "integrations": {
   "make": "unknown",
   "n8n": "unknown",
   "power_automate": "unknown",
   "zapier": "unknown"
  },
  "mcp": {
   "first_party": "unknown",
   "third_party": [],
   "verdict": "unknown"
  },
  "rpa": {
   "drivability": "unknown",
   "notes": "No repeatable UI probe was run. Trustpilot for Business is a web application. The documented machine path is the Trustpilot API. A registry listing for a third-party review scraper was not opened and is not treated as an MCP implementation.\n",
   "ui_stack": [
    "web-dom"
   ],
   "vendor_support": []
  },
  "sdk": {
   "exists": "unknown",
   "languages": [],
   "official": "unknown"
  }
 },
 "name": "Trustpilot",
 "platforms": [
  "web"
 ],
 "related": {
  "alternatives": [],
  "our_products": []
 },
 "schema_version": 1,
 "score_version": 1,
 "status": "active",
 "vendor": "Trustpilot",
 "verdict": {
  "best_path": "api",
  "scores": {
   "api": 6,
   "cli": null,
   "computer_use": null,
   "integrations": null,
   "mcp": null,
   "overall": 6,
   "rpa": null
  },
  "search": {
   "description": "Trustpilot documents an API key for public APIs and OAuth 2.0 for private APIs, including invitations, business units, and reviews.",
   "title": "Trustpilot is automatable through its API"
  },
  "summary": "Trustpilot is automatable today through its APIs. Public APIs take the API key, which Trustpilot also calls the client ID, in an apikey header. Private APIs use OAuth 2.0. The authentication overview documents authorization-code, implicit, and client-credentials grants. Access tokens expire after 100 hours and refresh tokens after 30 days. Private calls send Authorization Bearer. The password grant is still listed and is marked deprecated. The same page says password, authorization-code, and implicit grants do not support multi-factor authentication. Refreshing too often returns 429. The developer home and the authentication navigation list invitations, business units, locations, product reviews, service reviews, and a Data Solutions API for business profiles and consumer reviews. This pass did not open each module reference, so coverage is partial. No Trustpilot MCP server was established from the pages opened here. Zapier, Make, Power Automate, and n8n were not opened. Computer-use viability is unassessed. The API scores 6 because the grants and resource families are documented and MFA and module details remain limited.\n"
 }
}