generated: '2026-08-07'
method: probed
source: live GET probes of the /.well-known/ surface on every bioflyte.com host, 2026-08-07
host: https://www.bioflyte.com
note: BioFlyte serves no /.well-known/ discovery document on any host. Every RFC 8615 path below returned
  the WordPress 404 page (text/html) on www.bioflyte.com and a 404 from Kestrel on portal.bioflyte.com
  — including both agent-card paths, on both hosts. Recorded as observed; absence is valid data and nothing
  was authored on BioFlyte's behalf. The apex bioflyte.com 301-redirects /.well-known/* to the www host,
  so the www results are authoritative.
hosts_probed:
- host: www.bioflyte.com
  resolves: true
  note: WordPress on WP Engine behind Cloudflare
- host: bioflyte.com
  resolves: true
  note: 301 redirect to www.bioflyte.com
- host: portal.bioflyte.com
  resolves: true
  note: ASP.NET Core (Kestrel) customer portal — serves an OpenAPI at /swagger/v1/swagger.json
- host: api.bioflyte.com
  resolves: false
  note: NXDOMAIN — no API host
- host: docs.bioflyte.com
  resolves: false
  note: NXDOMAIN — no docs host
- host: developer.bioflyte.com
  resolves: false
  note: NXDOMAIN — no developer host
- host: status.bioflyte.com
  resolves: false
  note: NXDOMAIN — no status host
- host: trust.bioflyte.com
  resolves: false
  note: NXDOMAIN — no trust center host
adjacent_discovery_found:
- path: /wp-json/
  host: www.bioflyte.com
  status: 200
  content_type: application/json
  note: The WordPress REST route-discovery document — 305 routes across 14 namespaces (oembed/1.0, wpe/cache-plugin/v1,
    wpe_sign_on_plugin/v1, df-menu-settings/v2, difl/v5, yoast/v1, cptui/v1, google-site-kit/v1, divi/v1,
    wpforms/v1, wp/v2, wp-site-health/v1, wp-block-editor/v1, wp-abilities/v1). This is the real machine-readable
    contract on the marketing host and is the source openapi/bioflyte-content-openapi.yml was derived
    from. Saved verbatim at openapi/_source/bioflyte-wp-json-root.json.
- path: /swagger/v1/swagger.json
  host: portal.bioflyte.com
  status: 200
  content_type: application/json
  file: ../openapi/bioflyte-portal-openapi-original.json
  note: An OpenAPI 3.0.1 document titled "AdminWeb", 40 operations, served openly by the customer portal.
    The document is public; the API is not — every operation returns 302 to /identity/account/login anonymously.
    Saved verbatim.
- path: /swagger/index.html
  host: portal.bioflyte.com
  status: 200
  note: Swagger UI rendering the AdminWeb document.
- path: /robots.txt
  host: www.bioflyte.com
  status: 200
  note: 'Yoast/WPForms block only. `User-agent: *` with `Disallow:` (empty — everything allowed) plus
    a disallow on /wp-content/uploads/wpforms/, a `Crawl-delay: 10`, and the sitemap pointer. No AI crawler
    is named, allowed or blocked — there is no AI-specific policy either way, and no /wp-json/ disallow,
    so the content API is crawlable.'
- path: /sitemap_index.xml
  host: www.bioflyte.com
  status: 200
  note: Yoast sitemap index (post, page, resource, category).
- path: /robots.txt
  host: portal.bioflyte.com
  status: 404
  note: The portal publishes no robots.txt, so the openly served Swagger document has no crawl directive.
gated:
- path: /wp-json/wp-abilities/v1/abilities
  host: www.bioflyte.com
  status: 401
  body: '{"code":"rest_forbidden","message":"Sorry, you are not allowed to do that.","data":{"status":401}}'
  note: The WordPress Abilities API registry is present in the route index but returns 401 to an anonymous
    caller, so the ability set could not be enumerated. No MCP adapter namespace is registered on this
    site.
hosts:
- host: https://www.bioflyte.com
  documents:
  - path: /.well-known/security.txt
    status: 404
  - path: /.well-known/openid-configuration
    status: 404
  - path: /.well-known/oauth-authorization-server
    status: 404
  - path: /.well-known/oauth-protected-resource
    status: 404
  - path: /.well-known/api-catalog
    status: 404
  - path: /.well-known/ai-plugin.json
    status: 404
  - path: /.well-known/agent-card.json
    status: 404
  - path: /.well-known/agent.json
    status: 404
  - path: /.well-known/mcp.json
    status: 404
  - path: /.well-known/dnt-policy.txt
    status: 404
x-shape-fix:
  converted: '2026-08-20'
  from: documents
  note: Rewritten into hosts[] -> documents[], the only shape well_known_docs() in score.rb reads. A served
    .well-known surface recorded in any other shape scores as absent.