generated: '2026-07-24'
method: searched
source: live probes of /.well-known/* on api + docs + website hosts
note: >-
  No /.well-known/ discovery documents are published on any Halo Connect host. The API
  is Azure API Management fronted (subscription-key auth, no OAuth2/OIDC), so there is no
  openid-configuration or oauth-authorization-server surface. Absence is recorded as valid data.
hosts:
- host: https://api.haloconnect.io
  documents:
  - {path: /.well-known/security.txt, status: 404}
  - {path: /.well-known/openid-configuration, status: 404}
  - {path: /.well-known/oauth-authorization-server, status: 404}
  - {path: /.well-known/oauth-protected-resource, status: 404}
  - {path: /.well-known/api-catalog, status: 404}
  - {path: /.well-known/ai-plugin.json, status: 404}
- host: https://docs.haloconnect.io
  documents:
  - {path: /.well-known/security.txt, status: 404}
- host: https://bpsoftware.net
  documents:
  - {path: /.well-known/security.txt, status: 403}