generated: '2026-08-12'
method: searched
source: live probes of every apis.yml + OpenAPI servers[] host
note: >-
  platform.fatsecret.com is a single-page application whose catch-all returns HTTP 200 with the same
  15,126-byte HTML shell for every unrouted path, including every /.well-known/* path. Those 200s are
  NOT documents and are recorded here as soft-404 misses. The only real discovery document served on
  any fatsecret host is the OpenID Connect metadata on the authorization server, oauth.fatsecret.com.
hosts:
  - host: https://oauth.fatsecret.com
    role: authorization server (OAuth 2.0 client_credentials + OAuth 1.0a; issuer for the Platform API)
    documents:
      - path: /.well-known/openid-configuration
        status: 200
        content_type: application/json
        file: fatsecret-openid-configuration.json
        real_document: true
      - path: /.well-known/oauth-authorization-server
        status: 404
        real_document: false
      - path: /.well-known/security.txt
        status: 404
        real_document: false
      - path: /.well-known/api-catalog
        status: 404
        real_document: false
      - path: /.well-known/ai-plugin.json
        status: 404
        real_document: false
      - path: /.well-known/agent-card.json
        status: 404
        real_document: false
  - host: https://platform.fatsecret.com
    role: developer portal + REST base (https://platform.fatsecret.com/rest)
    documents:
      - path: /.well-known/security.txt
        status: 200
        content_type: text/html
        real_document: false
        note: SPA catch-all HTML shell, not a document — treated as a miss
      - path: /.well-known/openid-configuration
        status: 200
        content_type: text/html
        real_document: false
        note: SPA catch-all HTML shell, not a document — treated as a miss
      - path: /.well-known/oauth-authorization-server
        status: 200
        content_type: text/html
        real_document: false
        note: SPA catch-all HTML shell, not a document — treated as a miss
      - path: /.well-known/api-catalog
        status: 200
        content_type: text/html
        real_document: false
        note: SPA catch-all HTML shell, not a document — treated as a miss
      - path: /.well-known/ai-plugin.json
        status: 200
        content_type: text/html
        real_document: false
        note: SPA catch-all HTML shell, not a document — treated as a miss
      - path: /.well-known/agent-card.json
        status: 200
        content_type: text/html
        real_document: false
        note: SPA catch-all HTML shell, not a document — treated as a miss
      - path: /.well-known/agent.json
        status: 200
        content_type: text/html
        real_document: false
        note: SPA catch-all HTML shell, not a document — treated as a miss
  - host: https://www.fatsecret.com
    role: consumer web property (Webflow-hosted)
    documents:
      - path: /.well-known/security.txt
        status: 404
        real_document: false
      - path: /.well-known/agent-card.json
        status: 404
        real_document: false
summary:
  real_documents: 1
  soft_200_html_shells: 7
  security_txt: false
  api_catalog: false
  agent_card: false
  openid_configuration: true