generated: '2026-09-05' method: probed source: live GET of the named /.well-known path list on every host in apis.yml (registrable domain + www, each apis[].baseURL host, the corporate/parent host, the streaming host and the Salesforce-hosted help centre) hit_count: 1 note: 'One document is genuinely served: https://help.cbs.com/.well-known/openid-configuration returns HTTP 200 with a real RFC 8414 / OIDC discovery document whose issuer is https://help.cbs.com — the Salesforce Experience Cloud identity provider behind the CBS Help Center. Its sibling paths on that same host answer 401, and the negative-control path answers 401 as well, so the host is not a path-echoing catch-all and the hit is real. Every other host in the record 404s (or, on www.paramount.com, is refused by an Akamai edge policy with 403) on all twelve named paths. No security.txt, no api-catalog, no apis.json, no ai-plugin.json, no llms.txt and no agent card anywhere on the CBS or Paramount estate. api.cbssports.com additionally serves `Disallow: /` to every user agent in robots.txt.' hosts: - host: https://www.cbs.com documents: - path: /.well-known/security.txt status: 404 - path: /.well-known/openid-configuration status: 307 - path: /.well-known/oauth-authorization-server status: 307 - path: /.well-known/oauth-protected-resource status: 307 - path: /.well-known/api-catalog status: 307 - path: /.well-known/ai-plugin.json status: 404 - path: /.well-known/agent-card.json status: 404 - path: /.well-known/agent.json status: 404 - path: /.well-known/apis.json status: 404 - path: /apis.json status: 404 - path: /apis.yml status: 404 - path: /llms.txt status: 404 path_echo_control: passed control_status: 404 - host: https://cbs.com documents: - path: /.well-known/security.txt status: 301 - path: /.well-known/openid-configuration status: 301 - path: /.well-known/oauth-authorization-server status: 301 - path: /.well-known/oauth-protected-resource status: 301 - path: /.well-known/api-catalog status: 301 - path: /.well-known/ai-plugin.json status: 301 - path: /.well-known/agent-card.json status: 301 - path: /.well-known/agent.json status: 301 - path: /.well-known/apis.json status: 301 - path: /apis.json status: 301 - path: /apis.yml status: 301 - path: /llms.txt status: 301 path_echo_control: passed control_status: 301 - host: https://www.cbsnews.com documents: - path: /.well-known/security.txt status: 404 - path: /.well-known/openid-configuration status: 404 - path: /.well-known/oauth-authorization-server status: 404 - path: /.well-known/oauth-protected-resource status: 404 - path: /.well-known/api-catalog status: 404 - path: /.well-known/ai-plugin.json status: 404 - path: /.well-known/agent-card.json status: 404 - path: /.well-known/agent.json status: 404 - path: /.well-known/apis.json status: 404 - path: /apis.json status: 301 - path: /apis.yml status: 301 - path: /llms.txt status: 301 path_echo_control: passed control_status: 404 - host: https://www.cbssports.com documents: - path: /.well-known/security.txt status: 301 - path: /.well-known/openid-configuration status: 301 - path: /.well-known/oauth-authorization-server status: 301 - path: /.well-known/oauth-protected-resource status: 301 - path: /.well-known/api-catalog status: 301 - path: /.well-known/ai-plugin.json status: 301 - path: /.well-known/agent-card.json status: 301 - path: /.well-known/agent.json status: 301 - path: /.well-known/apis.json status: 301 - path: /apis.json status: 404 - path: /apis.yml status: 404 - path: /llms.txt status: 404 path_echo_control: passed control_status: 301 - host: https://api.cbssports.com documents: - path: /.well-known/security.txt status: 404 - path: /.well-known/openid-configuration status: 404 - path: /.well-known/oauth-authorization-server status: 404 - path: /.well-known/oauth-protected-resource status: 404 - path: /.well-known/api-catalog status: 404 - path: /.well-known/ai-plugin.json status: 404 - path: /.well-known/agent-card.json status: 404 - path: /.well-known/agent.json status: 404 - path: /.well-known/apis.json status: 404 - path: /apis.json status: 404 - path: /apis.yml status: 404 - path: /llms.txt status: 404 path_echo_control: passed control_status: 404 - host: https://api.paramount.com documents: - path: /.well-known/security.txt status: 404 - path: /.well-known/openid-configuration status: 404 - path: /.well-known/oauth-authorization-server status: 404 - path: /.well-known/oauth-protected-resource status: 404 - path: /.well-known/api-catalog status: 404 - path: /.well-known/ai-plugin.json status: 404 - path: /.well-known/agent-card.json status: 404 - path: /.well-known/agent.json status: 404 - path: /.well-known/apis.json status: 404 - path: /apis.json status: 404 - path: /apis.yml status: 404 - path: /llms.txt status: 404 path_echo_control: passed control_status: 404 - host: https://www.paramount.com documents: - path: /.well-known/security.txt status: 404 - path: /.well-known/openid-configuration status: 404 - path: /.well-known/oauth-authorization-server status: 404 - path: /.well-known/oauth-protected-resource status: 404 - path: /.well-known/api-catalog status: 404 - path: /.well-known/ai-plugin.json status: 404 - path: /.well-known/agent-card.json status: 404 - path: /.well-known/agent.json status: 404 - path: /.well-known/apis.json status: 404 - path: /apis.json status: 403 - path: /apis.yml status: 403 - path: /llms.txt status: 403 path_echo_control: passed control_status: 404 - host: https://www.paramountplus.com documents: - path: /.well-known/security.txt status: 404 - path: /.well-known/openid-configuration status: 404 - path: /.well-known/oauth-authorization-server status: 404 - path: /.well-known/oauth-protected-resource status: 404 - path: /.well-known/api-catalog status: 404 - path: /.well-known/ai-plugin.json status: 404 - path: /.well-known/agent-card.json status: 404 - path: /.well-known/agent.json status: 404 - path: /.well-known/apis.json status: 404 - path: /apis.json status: 404 - path: /apis.yml status: 404 - path: /llms.txt status: 404 path_echo_control: passed control_status: 404 - host: https://help.cbs.com documents: - path: /.well-known/security.txt status: 401 - path: /.well-known/openid-configuration status: 200 file: cbs-openid-configuration.json - path: /.well-known/oauth-authorization-server status: 401 - path: /.well-known/oauth-protected-resource status: 401 - path: /.well-known/api-catalog status: 401 - path: /.well-known/ai-plugin.json status: 401 - path: /.well-known/agent-card.json status: 401 - path: /.well-known/agent.json status: 401 - path: /.well-known/apis.json status: 401 - path: /apis.json status: 401 - path: /apis.yml status: 401 - path: /llms.txt status: 401 path_echo_control: passed control_status: 401