generated: '2026-07-20'
method: searched
source: live probe of /.well-known/ on RapidCanvas hosts
hosts:
  - host: https://app.rapidcanvas.ai
    documents:
      - path: /.well-known/oauth-authorization-server   # RFC 8414
        status: 200
        file: rapidcanvas-oauth-authorization-server.json
      - path: /.well-known/openid-configuration
        status: 404
      - path: /.well-known/security.txt
        status: 404
      - path: /.well-known/api-catalog
        status: 404
      - path: /.well-known/ai-plugin.json
        status: 404
  - host: https://www.rapidcanvas.ai
    documents:
      - path: /.well-known/security.txt
        status: 404
      - path: /.well-known/openid-configuration
        status: 404
  - host: https://docs.rapidcanvas.ai
    documents:
      - path: /.well-known/security.txt
        status: 404
notes: >-
  app.rapidcanvas.ai publishes RFC 8414 OAuth 2.0 Authorization Server Metadata
  advertising authorization_code + refresh_token grants, PKCE (S256), a dynamic
  client registration endpoint, and scopes mcp/openid/profile/email — the OAuth
  surface that fronts the platform's MCP gateway.