generated: '2026-08-12'
method: probed
source: https://www.dragonflytx.com/_api/mcp
note: >-
  Conformance is asserted only against surfaces that were actually probed. Dragonfly Therapeutics
  publishes no OpenAPI, no AsyncAPI, no GraphQL SDL and no vocabulary, so every spec-derived
  standard below is recorded as not applicable rather than false. No published compliance
  program (SOC 2, ISO 27001, HIPAA, GDPR posture page) was found, so NO Compliance pointer is
  emitted in apis.yml.
standards:
- id: mcp
  name: Model Context Protocol
  conforms: true
  evidence: >-
    POST https://www.dragonflytx.com/_api/mcp with method tools/list returned HTTP 200, a
    jsonrpc 2.0 envelope, an mcp-session-id response header, and a result.tools array of 9 tools
    each carrying an inputSchema.
- id: jsonrpc-2.0
  name: JSON-RPC 2.0
  conforms: true
  evidence: Responses carry "jsonrpc":"2.0" and echo the request id.
- id: llmstxt
  name: llms.txt
  conforms: true
  evidence: >-
    https://www.dragonflytx.com/llms.txt returned HTTP 200 with an H1 name, a blockquote summary
    and link sections, per the llms.txt convention. Wix-generated.
- id: rfc9116-security-txt
  name: RFC 9116 security.txt
  conforms: false
  evidence: /.well-known/security.txt returned HTTP 400 (Wix error page, not a document).
- id: a2a
  name: A2A Agent Card
  conforms: false
  evidence: >-
    Both /.well-known/agent-card.json and the legacy /.well-known/agent.json returned HTTP 400
    with an HTML body on www.dragonflytx.com; the apex 301s to the same result.
- id: rfc8414-oauth-authorization-server
  name: RFC 8414 OAuth 2.0 Authorization Server Metadata
  conforms: false
  evidence: /.well-known/oauth-authorization-server returned HTTP 400.
- id: oidc-discovery
  name: OpenID Connect Discovery
  conforms: false
  evidence: /.well-known/openid-configuration returned HTTP 400.
- id: rfc8615-well-known
  name: RFC 8615 well-known URIs
  conforms: false
  evidence: No /.well-known/* path on either host returned a document.
not_applicable:
- id: openapi
  reason: No OpenAPI or Swagger document is published at any probed path.
- id: asyncapi
  reason: No event, streaming or webhook surface is published.
- id: graphql
  reason: /graphql returned HTTP 404.
- id: rfc9457-problem-details
  reason: No machine-readable contract to evaluate error media types against.
- id: fhir-r4
  reason: >-
    Dragonfly Therapeutics is a drug developer, not a health IT vendor; it exposes no clinical
    data interface.
- id: oauth2
  reason: No OAuth surface; the only credential is an anonymously issued Wix visitor token.
x-evidence:
  fetched: '2026-08-12'
  hosts: [www.dragonflytx.com, dragonflytx.com]