generated: '2026-07-18'
method: searched
host: https://www.authlete.com
notes: >-
  Authlete's marketing/company host publishes a signed RFC 9116 security.txt.
  The regional API clusters (us/jp/eu/br.authlete.com) do not expose OIDC/OAuth
  discovery for the management API itself (Authlete builds authorization servers
  for its customers rather than being one at these hosts), so those endpoints 404.
documents:
  - path: /.well-known/security.txt          # RFC 9116 (PGP-signed)
    host: https://www.authlete.com
    status: 200
    file: authlete-security.txt
  - path: /.well-known/openid-configuration   # OIDC discovery
    host: https://us.authlete.com
    status: 404
  - path: /.well-known/oauth-authorization-server  # RFC 8414
    host: https://us.authlete.com
    status: 404
  - path: /.well-known/api-catalog             # RFC 9727
    host: https://us.authlete.com
    status: 404
  - path: /.well-known/ai-plugin.json
    host: https://www.authlete.com
    status: 404