generated: '2026-09-06' method: probed source: live anonymous GET of the named /.well-known/ paths on every host this record knows provider: ECI Solutions providerId: eci-solutions note: >- Named-path probe (never a glob) across the registrable domain, the developer-portal host, every OpenAPI servers[] host / apis.yml baseURL host, and the third host named as the OpenID Connect authorization server in the Authentication and Management API securitySchemes (an Amazon Cognito user pool operated for ECI). Three real documents were served. Every 200 recorded against integrations.ecimanufacturing.com other than security.txt is the Swagger-UI static index answering as a catch-all (identical 3,590-byte HTML body for every path) and is a MISS, not a document; trust.ecisolutions.com answers every path with the same 210KB SafeBase SPA shell and is likewise a miss. api-jb2 and api-m1 return 401 on every path because the whole host requires a bearer token. hosts: - host: www.ecisolutions.com documents: - path: /.well-known/security.txt status: 200 file: eci-solutions-security.txt - path: /.well-known/openid-configuration status: 404 - path: /.well-known/oauth-authorization-server status: 404 - path: /.well-known/api-catalog status: 404 - path: /.well-known/ai-plugin.json status: 404 - path: /.well-known/agent-card.json status: 404 - path: /.well-known/agent.json status: 404 - host: ecisolutions.com documents: - path: /.well-known/security.txt status: 200 file: eci-solutions-security.txt note: same document as www; the apex serves the identical body - path: /.well-known/api-catalog status: 404 - path: /.well-known/agent-card.json status: 404 - path: /.well-known/agent.json status: 404 - host: integrations.ecimanufacturing.com documents: - path: /.well-known/security.txt status: 200 file: eci-solutions-integrations-security.txt note: >- Two-line RFC 9116 file for the ECI Manufacturing Integration Engine. Its Expires value is 2023-06-22, so the document is more than three years past its own stated expiry. - path: /.well-known/openid-configuration status: 200 note: HTML catch-all (Swagger-UI index, 3590 bytes) — not a document. MISS. - path: /.well-known/oauth-authorization-server status: 200 note: HTML catch-all — not a document. MISS. - path: /.well-known/api-catalog status: 200 note: HTML catch-all — not a document. MISS. - path: /.well-known/ai-plugin.json status: 200 note: HTML catch-all — not a document. MISS. - path: /.well-known/agent-card.json status: 200 note: HTML catch-all — not a document. MISS. - path: /.well-known/agent.json status: 200 note: HTML catch-all — not a document. MISS. - host: api-erp.integrations.ecimanufacturing.com documents: - path: /.well-known/security.txt status: 404 - path: /.well-known/openid-configuration status: 404 - path: /.well-known/oauth-authorization-server status: 404 - path: /.well-known/api-catalog status: 404 - path: /.well-known/agent-card.json status: 404 - path: /.well-known/agent.json status: 404 - host: api-user.integrations.ecimanufacturing.com documents: - path: /.well-known/security.txt status: 404 - path: /.well-known/openid-configuration status: 404 - path: /.well-known/oauth-authorization-server status: 404 - path: /.well-known/api-catalog status: 404 - path: /.well-known/agent-card.json status: 404 - path: /.well-known/agent.json status: 404 - host: api-jb2.integrations.ecimanufacturing.com documents: - path: /.well-known/security.txt status: 401 - path: /.well-known/openid-configuration status: 401 - path: /.well-known/oauth-authorization-server status: 401 - path: /.well-known/api-catalog status: 401 - path: /.well-known/agent-card.json status: 401 - path: /.well-known/agent.json status: 401 - host: api-m1.integrations.ecimanufacturing.com documents: - path: /.well-known/security.txt status: 401 - path: /.well-known/openid-configuration status: 401 - path: /.well-known/oauth-authorization-server status: 401 - path: /.well-known/api-catalog status: 401 - path: /.well-known/agent-card.json status: 401 - path: /.well-known/agent.json status: 401 - host: platform.lassocrm.com documents: - path: /.well-known/security.txt status: 404 - path: /.well-known/openid-configuration status: 404 - path: /.well-known/api-catalog status: 404 - path: /.well-known/agent-card.json status: 404 - path: /.well-known/agent.json status: 404 - host: api.lassocrm.com documents: - path: /.well-known/security.txt status: 404 - path: /.well-known/openid-configuration status: 404 - path: /.well-known/api-catalog status: 404 - path: /.well-known/agent-card.json status: 404 - path: /.well-known/agent.json status: 404 - host: trust.ecisolutions.com documents: - path: /.well-known/security.txt status: 200 note: SafeBase SPA shell answers every path with the same 210KB HTML body. MISS. - path: /.well-known/api-catalog status: 200 note: SPA shell. MISS. - path: /.well-known/agent-card.json status: 200 note: SPA shell. MISS. - host: cognito-idp.us-east-1.amazonaws.com documents: - path: /us-east-1_9IYBf4TpD/.well-known/openid-configuration status: 200 file: eci-solutions-openid-configuration.json note: >- The OpenID Connect discovery document for the ECI Manufacturing Integration Engine user pool, named by openIdConnectUrl in the Authentication API and Management API securitySchemes. Issuer is the Cognito pool; authorization, token, userInfo, logout and revocation endpoints are all on login.integrations.ecimanufacturing.com. Recorded because the auth-server metadata lives on a third host, not on either API host. - path: /us-east-1_9IYBf4TpD/.well-known/jwks.json status: 200 note: JWKS named by the discovery document; not saved (key material rotates). - host: login.integrations.ecimanufacturing.com documents: - path: /.well-known/openid-configuration status: 404 note: >- The Cognito hosted-UI domain does not republish discovery; the canonical document is on the cognito-idp host above. findings: - agent_card: none note: >- No A2A Agent Card on any host. Every 200 on an agent-card path was an HTML catch-all, which is a miss, so no a2a/ artifact and no AgentCard pointer were written. - api_catalog: none - security_txt_expiry_risk: >- www.ecisolutions.com/.well-known/security.txt carries Expiration 2026-09-06T08:52:51-05:00 — it expires the day this probe ran. Its Policy (/security-policy), Acknowledgements (/hall-of-fame) and Encryption (/pgp-key.txt) URLs all return 404.