generated: '2026-07-18' method: searched source: https://api.autopass.xyz/.well-known/ host: https://api.autopass.xyz notes: api.autopass.xyz publishes RFC 8414 OAuth Authorization Server metadata and OpenID Connect discovery. issuer=https://www.autopass.xyz. No security.txt, api-catalog, or ai-plugin.json present. hosts: - host: https://api.autopass.xyz documents: - path: /.well-known/openid-configuration status: 200 file: autopass-openid-configuration.json - path: /.well-known/oauth-authorization-server status: 200 file: autopass-oauth-authorization-server.json - path: /.well-known/security.txt status: 404 - path: /.well-known/api-catalog status: 404 - path: /.well-known/ai-plugin.json status: 404 x-shape-fix: converted: '2026-08-20' from: documents note: Rewritten into hosts[] -> documents[], the only shape well_known_docs() in score.rb reads. A served .well-known surface recorded in any other shape scores as absent.