generated: '2026-07-18'
method: searched
source: https://chill.com/.well-known/* + https://chill.com/llms.txt
standards:
- id: oauth2
  conforms: true
  evidence: /.well-known/oauth-authorization-server (RFC 8414) advertises authorizationCode flow with PKCE S256
- id: oidc-discovery
  conforms: true
  evidence: /.well-known/openid-configuration published (Shopify Customer Account OIDC)
- id: rfc7636-pkce
  conforms: true
  evidence: code_challenge_methods_supported includes S256
- id: mcp
  conforms: true
  evidence: live JSON-RPC MCP endpoint at /api/ucp/mcp
- id: ucp-2026-04-08
  conforms: true
  evidence: /.well-known/ucp advertises UCP 2026-04-08 shopping service + capabilities
- id: rfc9116-security-txt
  conforms: false
  evidence: /.well-known/security.txt returns 404
- id: rfc8615-well-known
  conforms: true
  evidence: multiple RFC 8615 well-known documents served (openid-configuration, oauth-authorization-server, ucp)