Authentication
All server-to-server integrations use OAuth 2.0 client credentials. Additional security options:Loan Servicing
Direct integrations with major credit union servicing platforms:
For platforms not listed above, 9Squid supports standard loan tape formats via SFTP with field-level validation and auto-mapping.
Typical Data Flow
Fund Administration and Shadow Accounting
Treasury and Banking
CRM and Distribution
To connect your CRM, contact support@9squid.com.
Webhooks
Every webhook event is delivered with:- A signed payload (HMAC-SHA256 via
X-9Squid-Signature) - A monotonically increasing event ID — use this to deduplicate at-least-once deliveries
- At-least-once delivery semantics — your endpoint must be idempotent
Event Reference
See the Webhooks workflow for setup instructions and signature verification.
API Endpoints Reference
Originator Endpoints
Investor Endpoints
Service Provider Endpoints
Rate Limits
See Error Handling for how to handle
429 Too Many Requests responses.
Versioning and Change Management
- All endpoints are versioned under
/v1/ - Breaking changes are introduced only in new major versions
- Each new version runs parallel with the prior version for at least 180 days
- Non-breaking changes are announced in advance via the Changelog
AI Agents (MCP)
The 9squid Platform exposes a Model Context Protocol (MCP) server that lets AI agents like Claude interact directly with the platform through structured tool calls — loan uploads, pool analysis, deal browsing, portfolio queries, and more. See the MCP Integration guide for setup and usage.Sandbox
A full sandbox environment is available with:- Deterministic test data
- Simulated remittances
- Mock investor wallets