generated: '2026-07-19' method: searched source: live probe of Kredivo hosts notes: | Every /.well-known/ path below was probed live on 2026-07-19 across the Kredivo API, docs, marketing and corporate hosts. Kredivo publishes no /.well-known/ discovery surface at all — no security.txt (RFC 9116), no OIDC discovery, no RFC 8414 authorization-server metadata, no api-catalog (RFC 9727) and no ai-plugin.json. Absence is the real, recorded result. The one machine-readable discovery document Kredivo Group does publish is an llms.txt on the corporate site, generated by All in One SEO; it is captured verbatim at llms/kredivo-llms.txt. hosts: - host: https://kredivo.com documents: - path: /.well-known/security.txt status: 404 - path: /security.txt status: 404 - path: /.well-known/openid-configuration status: 404 - path: /.well-known/oauth-authorization-server status: 404 - path: /.well-known/api-catalog status: 404 - path: /.well-known/ai-plugin.json status: 404 - path: /llms.txt status: 404 - host: https://sandbox.kredivo.com note: Documented sandbox API host for the Kredivo Checkout API. documents: - path: /.well-known/security.txt status: 404 - path: /.well-known/openid-configuration status: 404 - path: /.well-known/api-catalog status: 404 - path: /llms.txt status: 404 - host: https://doc.kredivo.com note: Developer documentation host. documents: - path: /.well-known/security.txt status: 404 - path: /.well-known/openid-configuration status: 404 - path: /.well-known/oauth-authorization-server status: 404 - path: /.well-known/api-catalog status: 404 - path: /.well-known/ai-plugin.json status: 404 - path: /llms.txt status: 404 - path: /openapi.json status: 404 - path: /swagger.json status: 404 - path: /asyncapi.yaml status: 404 - host: https://finaccel.co documents: - path: /.well-known/security.txt status: 404 - path: /.well-known/openid-configuration status: 404 - path: /.well-known/api-catalog status: 404 - path: /llms.txt status: 200 file: ../llms/kredivo-llms.txt - host: https://kredivocorp.com documents: - path: /.well-known/security.txt status: 404 - path: /.well-known/api-catalog status: 404 - path: /llms.txt status: 200 file: ../llms/kredivo-llms.txt security_txt: present: false note: | No RFC 9116 security.txt is published on any Kredivo host. Kredivo does publish a human-readable security policy at https://kredivo.com/security-policy/ with a security@kredivo.com contact — captured in security/kredivo-vulnerability-disclosure.yml.