generated: '2026-08-09'
method: searched
source: live probe of https://avora-agent-forge.netlify.app/.well-known/*
host: https://avora-agent-forge.netlify.app
documents:
  - path: /.well-known/agent-card.json
    status: 200
    file: ../a2a/avora-agent-forge-agent-card.json
    kind: A2A Agent Card
  - path: /.well-known/jwks.json
    status: 200
    file: avora-agent-forge-jwks.json
    kind: JSON Web Key Set (Ed25519 receipt verification keys)
    content_type: application/jwk-set+json
  - path: /.well-known/ai-governance.json
    status: 200
    file: avora-agent-forge-ai-governance.json
    kind: >-
      Voluntary AI governance alignment profile (self-declared NIST AI RMF 1.0 reference;
      explicitly claims no certification and no government approval)
  - path: /.well-known/mcp.json
    status: 200
    file: avora-agent-forge-mcp.json
    kind: MCP server descriptor
  - path: /.well-known/avora-agent.json
    status: 200
    file: avora-agent-forge-avora-agent.json
    kind: Vendor-specific agent descriptor (non-standard path)
  - path: /.well-known/security.txt
    status: 404
  - path: /.well-known/openid-configuration
    status: 404
  - path: /.well-known/oauth-authorization-server
    status: 404
  - path: /.well-known/oauth-protected-resource
    status: 404
  - path: /.well-known/api-catalog
    status: 404
  - path: /.well-known/ai-plugin.json
    status: 404
  - path: /.well-known/agent.json
    status: 404
    note: Pre-0.3 legacy A2A path; the card is served at the canonical location instead.
other_discovery:
  - path: /apis.json
    status: 200
    kind: APIs.json index (provider-published, self-hosted)
  - path: /mcp-server.json
    status: 200
    file: ../mcp/avora-agent-forge-mcp-server.json
    kind: MCP server registry descriptor
  - path: /llms.txt
    status: 200
    file: ../llms/avora-agent-forge-llms.txt
  - path: /public-sector/catalog.jsonld
    status: 200
    file: ../json-ld/avora-agent-forge-catalog.jsonld
    kind: DCAT 3 JSON-LD data catalog
  - path: /agent-forge/pricing.json
    status: 200
    file: ../plans/avora-agent-forge-pricing.json
    kind: Machine-readable pricing catalog
notes: >-
  No security.txt is published, so there is no RFC 9116 contact for vulnerability reports.
  All 404s above returned genuine 404 status codes with an HTML error page - this host does
  not soft-404, so the absences recorded here are real absences rather than probe failures.