generated: '2026-09-19' method: probed source: live HTTPS probes of every host in apis.yml, every OpenAPI servers[] host, the docs host, the three API hosts named by Better Stack's own /.well-known/api-catalog, and the MCP host named by the WWW-Authenticate resource_metadata challenge. provider: Better Stack providerId: betterstack note: 'Better Stack serves three real discovery documents. /.well-known/api-catalog (RFC 9727) on betterstack.com is a linkset naming three API surfaces — uptime v2, telemetry v1 and errors v1 — each with a service-doc link. /.well-known/oauth-authorization-server (RFC 8414) on the same host advertises an OAuth 2.1 authorization server with dynamic client registration, PKCE S256 and read/write scopes; it is the authorization server for the Better Stack MCP server. mcp.betterstack.com serves /.well-known/oauth-protected-resource (RFC 9728), discovered from the WWW-Authenticate challenge on a tools/list POST. status.betterstack.com is an SPA catch-all that answers 200 with an HTML shell for EVERY /.well-known/* path; those are recorded as html-shell misses, not documents. MCP-host OAuth discovery added 2026-09-19 (roadmap#321/#337): the harvest visits a provider''s primary hosts, and RFC 9728 protected-resource metadata lives on the MCP host, so these documents existed and were invisible to the scorer. Fetched live and validated on `resource`/`issuer`; one negative control per host.' hosts: - host: betterstack.com documents: - path: /.well-known/api-catalog status: 200 content_type: application/json file: betterstack-api-catalog.json - path: /.well-known/oauth-authorization-server status: 200 content_type: application/json file: betterstack-oauth-authorization-server.json - path: /.well-known/security.txt status: 404 - path: /.well-known/openid-configuration status: 404 - path: /.well-known/oauth-protected-resource status: 404 - path: /.well-known/ai-plugin.json status: 404 - path: /.well-known/agent-card.json status: 404 - path: /.well-known/agent.json status: 404 - path: /.well-known/oauth-authorization-server status: 200 file: betterstack-betterstack-oauth-authorization-server.json bytes: 451 path_echo_control: passed - host: www.betterstack.com documents: - path: /.well-known/api-catalog status: 200 content_type: application/json note: identical body to the apex host; not saved twice - path: /.well-known/oauth-authorization-server status: 200 content_type: application/json note: identical body to the apex host; not saved twice - path: /.well-known/security.txt status: 404 - path: /.well-known/openid-configuration status: 404 - path: /.well-known/ai-plugin.json status: 404 - path: /.well-known/agent-card.json status: 404 - path: /.well-known/agent.json status: 404 - host: mcp.betterstack.com documents: - path: /.well-known/oauth-protected-resource status: 200 content_type: application/json file: betterstack-mcp-oauth-protected-resource.json - path: /.well-known/oauth-authorization-server status: 302 note: redirects; the authoritative document is on betterstack.com - path: /.well-known/security.txt status: 404 path_echo_control: passed - host: uptime.betterstack.com documents: - path: /.well-known/security.txt status: 404 - path: /.well-known/openid-configuration status: 404 - path: /.well-known/oauth-authorization-server status: 404 - path: /.well-known/oauth-protected-resource status: 404 - path: /.well-known/api-catalog status: 404 - path: /.well-known/ai-plugin.json status: 404 - path: /.well-known/agent-card.json status: 404 - path: /.well-known/agent.json status: 404 - host: telemetry.betterstack.com documents: - path: /.well-known/security.txt status: 404 - path: /.well-known/openid-configuration status: 404 - path: /.well-known/oauth-authorization-server status: 404 - path: /.well-known/oauth-protected-resource status: 404 - path: /.well-known/api-catalog status: 404 - path: /.well-known/ai-plugin.json status: 404 - path: /.well-known/agent-card.json status: 404 - path: /.well-known/agent.json status: 404 - host: errors.betterstack.com documents: - path: /.well-known/api-catalog status: 404 - host: logs.betterstack.com documents: - path: /.well-known/security.txt status: 404 - path: /.well-known/openid-configuration status: 404 - path: /.well-known/oauth-authorization-server status: 404 - path: /.well-known/api-catalog status: 404 - path: /.well-known/agent-card.json status: 404 - path: /.well-known/agent.json status: 404 - host: status.betterstack.com documents: - path: /.well-known/security.txt status: 200 content_type: text/html note: html-shell — SPA catch-all returns the same 496KB status-page HTML for every path; not a document, treated as a miss - path: /.well-known/openid-configuration status: 200 content_type: text/html note: html-shell — see above - path: /.well-known/oauth-authorization-server status: 200 content_type: text/html note: html-shell — see above - path: /.well-known/api-catalog status: 200 content_type: text/html note: html-shell — see above - path: /.well-known/ai-plugin.json status: 200 content_type: text/html note: html-shell — see above - path: /.well-known/agent-card.json status: 200 content_type: text/html note: html-shell — see above; NOT an agent card - path: /.well-known/agent.json status: 200 content_type: text/html note: html-shell — see above; NOT an agent card x-mcp-probe: probed: '2026-09-19' issue: roadmap#321, roadmap#337 documents: - host: https://mcp.betterstack.com path: /.well-known/oauth-protected-resource file: betterstack-mcp-oauth-protected-resource.json - host: https://betterstack.com path: /.well-known/oauth-authorization-server file: betterstack-betterstack-oauth-authorization-server.json validated_on: resource (RFC 9728) / issuer (RFC 8414, OIDC) negative_control: one per host; a 2xx JSON object at an impossible path discards the host