generated: '2026-08-26'
method: probed
source: live GET of /.well-known/* on every apis.yml + OpenAPI servers[] host, 2026-08-26
note: >-
  Only one real document was served. developerhub.ppro.com returns HTTP 200 for /.well-known/security.txt,
  /.well-known/ai-plugin.json, /.well-known/agent-card.json and /.well-known/agent.json, but the body in
  every one of those cases is the 765KB ReadMe single-page-app HTML shell, not a document — those are
  recorded as misses. The genuine hit is /.well-known/api-catalog, an RFC 9727 linkset that points at the
  per-project catalogs, and the global-api catalog in turn names the canonical OpenAPI URL for all eleven
  specifications. www.ppro.com answers every path with a Cloudflare "Just a moment..." interstitial (403),
  so no well-known document could be read there; that is a bot-challenge, not a confirmed absence.
hosts:
- host: developerhub.ppro.com
  documents:
  - path: /.well-known/api-catalog
    status: 200
    file: well-known/ppro-api-catalog.json
    media_type: application/linkset+json
    note: RFC 9727 API catalog; anchors https://developerhub.ppro.com/global-api and /risk-management
  - path: /global-api/.well-known/api-catalog
    status: 200
    file: well-known/ppro-global-api-api-catalog.json
    media_type: application/linkset+json
    note: >-
      Second-level linkset naming a service-desc for all eleven OpenAPI documents at
      https://developerhub.ppro.com/global-api/openapi/<filename>
  - path: /.well-known/security.txt
    status: 200
    file: null
    note: HTML SPA shell, not a security.txt — treated as a miss
  - path: /.well-known/ai-plugin.json
    status: 200
    file: null
    note: HTML SPA shell, not a manifest — treated as a miss
  - path: /.well-known/agent-card.json
    status: 200
    file: null
    note: HTML SPA shell, not an AgentCard — treated as a miss
  - path: /.well-known/agent.json
    status: 200
    file: null
    note: HTML SPA shell, not an AgentCard — treated as a miss
  - path: /.well-known/openid-configuration
    status: 404
    file: null
  - path: /.well-known/oauth-authorization-server
    status: 404
    file: null
  - path: /.well-known/oauth-protected-resource
    status: 404
    file: null
  - path: /risk-management/.well-known/api-catalog
    status: 404
    file: null
- host: api.eu.ppro.com
  documents:
  - path: /.well-known/security.txt
    status: 404
    file: null
  - path: /.well-known/openid-configuration
    status: 404
    file: null
  - path: /.well-known/oauth-authorization-server
    status: 404
    file: null
  - path: /.well-known/oauth-protected-resource
    status: 404
    file: null
  - path: /.well-known/api-catalog
    status: 404
    file: null
  - path: /.well-known/ai-plugin.json
    status: 404
    file: null
  - path: /.well-known/agent-card.json
    status: 404
    file: null
  - path: /.well-known/agent.json
    status: 404
    file: null
- host: api.sandbox.eu.ppro.com
  documents:
  - path: /.well-known/security.txt
    status: 404
    file: null
  - path: /.well-known/openid-configuration
    status: 404
    file: null
  - path: /.well-known/oauth-authorization-server
    status: 404
    file: null
  - path: /.well-known/oauth-protected-resource
    status: 404
    file: null
  - path: /.well-known/api-catalog
    status: 404
    file: null
  - path: /.well-known/agent-card.json
    status: 404
    file: null
  - path: /.well-known/agent.json
    status: 404
    file: null
- host: mcp.eu.ppro.com
  documents:
  - path: /.well-known/oauth-authorization-server
    status: 404
    file: null
  - path: /.well-known/oauth-protected-resource
    status: 404
    file: null
  - path: /.well-known/security.txt
    status: 404
    file: null
  - path: /.well-known/api-catalog
    status: 404
    file: null
  - path: /.well-known/agent-card.json
    status: 404
    file: null
  - path: /.well-known/agent.json
    status: 404
    file: null
- host: www.ppro.com
  documents:
  - path: /.well-known/security.txt
    status: 403
    file: null
    note: Cloudflare bot interstitial ("Just a moment..."), not a document and not a confirmed 404
  - path: /.well-known/api-catalog
    status: 403
    file: null
    note: Cloudflare bot interstitial
  - path: /.well-known/agent-card.json
    status: 403
    file: null
    note: Cloudflare bot interstitial
  - path: /.well-known/agent.json
    status: 403
    file: null
    note: Cloudflare bot interstitial
  - path: /.well-known/openid-configuration
    status: 403
    file: null
  - path: /.well-known/oauth-authorization-server
    status: 403
    file: null
  - path: /.well-known/ai-plugin.json
    status: 403
    file: null