This is not our API. This repository is an independent, third-party profile of a company's publicly available API surface, maintained by API Evangelist. API Evangelist does not operate, host, resell, or support this company's APIs, and is not affiliated with or endorsed by the company unless stated on the profile.
Where the information came from. Everything here is assembled from material a member of the public can reach with a browser and no credentials — the company's own website, developer portal and documentation, the specifications it publishes for public use (OpenAPI, AsyncAPI, JSON Schema,
apis.json,llms.txtand similar), its public repositories, and its public status, pricing and changelog pages. Nothing here is obtained by breaching a system, defeating an access control, or using credentials of any kind.The rating is an independent assessment. The Kin Score and Agent Readiness rating are independently calculated scores of a company's public API artifacts, produced by API Evangelist against a published rubric. They are not certifications, endorsements, security assessments, or audits, and they score published artifacts — not the quality, safety, or security of the software.
Corrections, re-scores, and removal are free. No partnership, contract, or purchase is required, and you do not need to justify the request.
- Something wrong? Open an issue on this repository, or email info@apievangelist.com.
- Published something new? Ask for a re-score and we will re-run the rating.
- Want the listing taken down? Say so and we will honor it. The profile is reduced to your company name, a factual description, and a link to your own site, and the company is recorded as unrated — never scored zero for having asked.
Response times. Acknowledgement within one business day; removal or restriction within two business days; corrections and re-scores within five business days.
On a security or compliance team? Email info@apievangelist.com with security in the subject line and you will get a person, not a form. We will tell you exactly which public URLs this profile was built from so your team can see the same surface we did, and we will take the listing down on request while you work through it.
Full detail: Where this data comes from
REA Group Limited is an ASX-listed (ASX:REA) digital real estate advertising business headquartered in Melbourne, Australia and majority-owned by News Corp. It operates realestate.com.au and realcommercial.com.au, the property data and analytics brand PropTrack, the Mortgage Choice broking network, and REA India (Housing.com, PropTiger, and Makaan). REA Group's public developer surface is delivered through PropTrack, whose developer portal publishes nine OpenAPI 3.1 service documents covering 32 operations — address matching, property attributes and history, listings, sold transactions, automated valuations (AVM), PDF reports and suburb-level market analytics for Australia.
APIs.json: https://raw.githubusercontent.com/api-evangelist/rea-group/refs/heads/main/apis.yml
- Real Estate
- Property Data
- Valuations
- AVM
- Market Insights
- Listings
- Transactions
- Address Matching
- Geospatial
- REAXML
- Partner Portal
- PropTech
- Australia
- Created: 2026-07-20
- Modified: 2026-07-27
The PropTrack developer portal (developer.proptrack.com.au) is publicly readable and fully specified, but the underlying data APIs are partner-gated: https://data.proptrack.com returns HTTP 403 without credentials. Authentication is OAuth 2.0 client credentials — an api_key and api_secret issued by an Account Manager under a commercial agreement, Base64-encoded as HTTP Basic on POST /oauth2/token, exchanged for a JWT bearer token with a 3600 second TTL. There is no self-serve signup.
What makes this provider unusual for a gated API: every service also publishes a live, unauthenticated Stoplight mock server that serves the documented response examples — including the real error envelopes. The contract is testable before a commercial agreement is signed. See sandbox/.
A quota- and expiry-bounded trial programme is documented, with honest disclosure of its data restrictions (reduced attribute coverage and withheld Valuer-General transactions for Victorian properties). See plans/.
| Service | Operations | Spec | Mock |
|---|---|---|---|
| OAuth 2.0 Token | 1 | oauth | mock |
| Address | 2 | address | mock |
| Properties | 15 | properties | mock |
| Listings | 3 | listings | mock |
| Transactions | 2 | transactions | mock |
| Market | 5 | market | mock |
| Reports | 2 | reports | mock |
| Disclaimers | 1 | disclaimers | mock |
| Upcoming (Schools) | 1 | coming-soon | mock |
Plus the realestate.com.au Partner Portal and the REAXML listing feed (propertyList DTD) — REA Group's own XML schema, implemented by the majority of Australian agency CRMs. Australia has no MLS and no RESO mandate; REAXML is the structural substitute.
The spine is address → propertyId → everything. Resolve a free-text address with address.match, then fan out on the returned propertyId for attributes, listings, transactions, planning, tenure and valuations. The Market API is the one branch that does not join to propertyId — it is keyed by suburb geography and returns aggregates. See data-model/.
| Artifact | What it holds |
|---|---|
openapi/ |
9 provider-published OpenAPI 3.1.0 documents, 32 operations, 189 named examples |
authentication/ |
OAuth 2.0 client credentials profile, token URL, TTL, error codes |
conventions/ |
Cursor pagination, error envelope, X-Transaction-Id tracing, concurrent v1/v2 |
errors/ |
18 numbered error codes (7xxx validation, 9xxx platform) with per-endpoint applicability |
rate-limits/ |
16 published per-endpoint limits plus the quota model |
plans/ |
Trial quota/expiry, Victoria data restrictions, contract pricing |
sandbox/ |
9 live unauthenticated mock servers, verified |
examples/ |
189 named response examples indexed per operation |
data-model/ |
Entity graph reconstructed from inline response schemas |
skills/ |
3 agent skills — resolve an address, order a valuation, search listings and market |
agentic-access/ |
Recommended x-agentic-access contracts for all 32 operations |
overlays/ |
Our enhancements — the missing security scheme, contact block, spec findings |
mcp/ |
Candidate tool surface. PropTrack publishes no MCP server. |
conformance/ |
13 standards assessed, including why RESO does not apply |
lifecycle/ |
Versioning, roadmap, and the verified absence of a status page |
Recorded in full in review.yml and overlays/:
- No
securitySchemesin any of the nine documents, despite OAuth 2.0 being required. Generated clients read the API as unauthenticated. - Six invalid path templates in the Properties document — query strings and prose embedded in path keys, e.g.
/api/v1/properties/valuations/sale ~ Pro. - No idempotency on three billable, side-effecting POST operations that document 504 timeouts. A retried timeout may be a second paid valuation.
- Empty
info.versionin all nine documents. - No
components.schemas— everything inlined, inflating the Properties document to 591KB. - No rate-limit response headers, no status page, no deprecation policy, no changelog, no SDKs, no MCP server.
- Website
- Documentation
- Developer Portal
- API Reference
- Getting Started
- Partner Portal
- Terms of Use
- FAQ
- GitHub Organization
- X
- YouTube
- Blog
- Support
- Privacy Policy
FN: Kin Lane Email: kin@apievangelist.com