generated: '2026-07-18'
method: searched
source: live probe of /.well-known/ on Campfire API + web hosts
host: https://api.meetcampfire.com
documents:
  - path: /.well-known/openid-configuration       # OIDC discovery (RFC 8414 style)
    status: 200
    file: campfire-openid-configuration.json
  - path: /.well-known/oauth-authorization-server  # RFC 8414 OAuth AS metadata
    status: 200
    file: campfire-oauth-authorization-server.json
  - path: /.well-known/security.txt                # RFC 9116
    status: 404
  - path: /.well-known/api-catalog                  # RFC 9727
    status: 404
  - path: /.well-known/ai-plugin.json
    status: 404
other_hosts:
  - host: https://campfire.ai
    checked: [/.well-known/security.txt, /.well-known/openid-configuration, /.well-known/oauth-authorization-server, /.well-known/api-catalog, /.well-known/ai-plugin.json]
    result: all 404
  - host: https://app.meetcampfire.com
    checked: [/.well-known/security.txt, /.well-known/openid-configuration, /.well-known/oauth-authorization-server, /.well-known/api-catalog, /.well-known/ai-plugin.json]
    result: all 404
notes: >
  api.meetcampfire.com publishes both OIDC and OAuth 2.0 Authorization Server
  metadata. Both advertise issuer https://api.meetcampfire.com, authorization_code
  and client_credentials grants, PKCE (S256), a dynamic client registration
  endpoint, and scopes openid/email/profile. This OAuth/OIDC surface is in
  addition to the Token (apiKey) scheme declared in the OpenAPI.