Principles (both kinds)

  • Neutrality — same terms and access for all partners in the same tier.
  • Auditability — every write action is attributable: partner, actor, timestamp, source.
  • Privacy by design — minimum necessary data; no cross-partner tracking.
  • Interoperability — partners preserve UFTA canonical IDs when syncing.
  • Receipts everywhere — durable actions return receipts for reconciliation and dispute handling.

App partners

Consumer apps, operator tools, and personal agents that integrate with UFTA's canonical objects via the Partner API. Three tiers — P0 Developer, P1 Certified, P2 Preferred — with publicly documented requirements and rate limits.

App partner tiers

P0 — Developer

  • Sandbox access
  • Read-only endpoints (limited)
  • Documentation and test data

P1 — Certified

  • Production access
  • Read endpoints + approved write endpoints (bookings, lifecycle updates)
  • Webhooks required for lifecycle sync
  • Compliance checks: rate limits, logging, receipts

P2 — Preferred

  • Higher rate limits + dedicated support path
  • Advanced endpoints — operational-signal ingestion, organizer-tooling hooks
  • Optional non-exclusive co-marketing

API surface

UFTA exposes a clean REST API with a JSON-LD context, an OpenAPI contract, and a published /.well-known/agents.json. Personal agents, partner integrations, and human-facing apps all read the same canonical truth.

Read (common across all tiers)

  • Providers, units, offerings
  • Availability and schedules
  • Events and vendor rosters (as permitted)
  • Operational signals (public or partner-scoped)
  • Compliance status indicators (role-based, privacy-preserving)

Write (Certified and above)

  • Create booking (REQUESTED)
  • Update booking lifecycle: HELD, CONFIRMED, CANCELLED, FULFILLED — as permitted
  • Submit operational signals if enabled for the partner and role

Restricted by default

  • Compliance document uploads
  • Verification attestations
  • Identity changes (IDConnect)

Authentication and identity

Partners receive a partner_id and authenticate via OIDC (issuer: IDConnect). Write actions carry actor_id, actor_role, and source, so every receipt is attributable end-to-end.

Personal agents authenticate as themselves and act on behalf of a principal via RFC 8693 token exchange — the agent's sub and the principal's act.sub are both visible to UFTA and to receipt readers.

Webhooks (Certified and above)

Partners must support webhooks for:

  • Booking lifecycle updates
  • Availability changes
  • Operational signal updates (opt-in)

Specialists — vetted service partners

The independent food economy doesn't run on food alone. Trucks need wraps, menus, and signage. Kitchens need refrigeration and HVAC. Everyone needs insurance, accounting, and legal counsel that understand the realities of mobile food. UFTA vets specialists on the same trust ladder as providers (U0–U4) so that vendors, organizers, and agents can find safe, effective third parties without guesswork.

Categories (v0, non-exhaustive)

  • Design and branding — logos, menus, truck wraps, signage, web and social assets, photography
  • Equipment — refrigeration, HVAC, generators, propane, repair
  • Compliance and operations — food-safety consulting, permitting, licensing, fire-safety
  • Professional services — insurance, accounting, legal counsel
  • Marketing and media — content, photography, video, PR

How specialist vetting works

  • Specialists hold the same U0–U4 trust tier as providers, on the same evidence basis: identity verification, compliance current, operational reliability, consistent positive signal.
  • Specialist categories are tagged so providers and agents can filter and route by need.
  • Specialists agree to the published Charter and accept dispute and appeal workflows.
  • UFTA does not promise specialists business volume; it promises a fair, evidence-based surface to be discovered on.

Apply

App partners

Building a consumer app, operator tool, or personal-agent integration on top of UFTA? Reach the partner team at partners@ufta.online with: a one-paragraph description of the surface, the canonical objects you'll read or write, expected request volume, and a contact.

Specialists

Service business in design, equipment, compliance, professional services, or media that wants to be a vetted UFTA specialist? Reach partners@ufta.online with: business name, category, the regions you serve, and a contact for credential verification.