generated: '2026-07-19'
method: probed
source: >-
  Direct HTTP probes of every konfetti host on 2026-07-19. No .well-known
  document was found on any host — an empty result is a real result, recorded
  here so later runs do not re-probe blindly.
description: >-
  Well-known URI discovery for konfetti. konfetti publishes no security.txt
  (RFC 9116), no OpenID Connect discovery document, no OAuth 2.0 authorization
  server metadata (RFC 8414) despite operating an OAuth 2.0 token endpoint, no
  RFC 9727 api-catalog, and no ai-plugin.json.

hosts_probed:
  - gokonfetti.com
  - api.gokonfetti.com
  - backoffice.gokonfetti.com
  - help.gokonfetti.com

found: []

probes:
  - host: gokonfetti.com
    path: /.well-known/security.txt
    status: 301
    final_status: 404
    file: null
    note: >-
      The marketing host 301-redirects every unmatched path into the locale
      prefix (/de-de/...), where it resolves to a 404. No well-known document
      is served.
  - host: gokonfetti.com
    path: /.well-known/openid-configuration
    status: 301
    final_status: 404
    file: null
  - host: gokonfetti.com
    path: /.well-known/oauth-authorization-server
    status: 301
    final_status: 404
    file: null
  - host: gokonfetti.com
    path: /.well-known/api-catalog
    status: 301
    final_status: 404
    file: null
  - host: gokonfetti.com
    path: /.well-known/ai-plugin.json
    status: 301
    final_status: 404
    file: null
  - host: api.gokonfetti.com
    path: /.well-known/security.txt
    status: 404
    file: null
  - host: api.gokonfetti.com
    path: /.well-known/openid-configuration
    status: 404
    file: null
  - host: api.gokonfetti.com
    path: /.well-known/oauth-authorization-server
    status: 404
    file: null
    note: >-
      Notable gap: api.gokonfetti.com DOES operate an OAuth 2.0 token endpoint
      at POST /v1/oauth/token (confirmed by a League OAuth2 Server
      `unsupported_grant_type` response), but publishes no RFC 8414 metadata
      describing it.
  - host: api.gokonfetti.com
    path: /.well-known/api-catalog
    status: 404
    file: null
  - host: api.gokonfetti.com
    path: /.well-known/ai-plugin.json
    status: 404
    file: null
  - host: backoffice.gokonfetti.com
    path: /.well-known/security.txt
    status: 403
    file: null
    note: The partner back-office denies all unauthenticated requests, including well-known paths.
  - host: backoffice.gokonfetti.com
    path: /.well-known/openid-configuration
    status: 403
    file: null
  - host: backoffice.gokonfetti.com
    path: /.well-known/oauth-authorization-server
    status: 403
    file: null
  - host: backoffice.gokonfetti.com
    path: /.well-known/api-catalog
    status: 403
    file: null
  - host: backoffice.gokonfetti.com
    path: /.well-known/ai-plugin.json
    status: 403
    file: null
  - host: help.gokonfetti.com
    path: /.well-known/security.txt
    status: 404
    file: null
  - host: help.gokonfetti.com
    path: /.well-known/openid-configuration
    status: 404
    file: null
  - host: help.gokonfetti.com
    path: /.well-known/oauth-authorization-server
    status: 404
    file: null
  - host: help.gokonfetti.com
    path: /.well-known/api-catalog
    status: 404
    file: null
  - host: help.gokonfetti.com
    path: /.well-known/ai-plugin.json
    status: 404
    file: null

other_probes:
  - url: https://gokonfetti.com/llms.txt
    status: 404
    note: No provider-published llms.txt; llms/konfetti-llms.txt is generated by API Evangelist.
  - url: https://gokonfetti.com/sitemap.xml
    status: 404
    note: Not at the root; the marketing host redirects it into the locale prefix where it 404s.
  - url: https://gokonfetti.com/robots.txt
    status: 200
    note: Served, but a robots file is not a well-known URI and is not catalogued here.