generated: '2026-07-20'
method: searched
source: live probes of ReadMe hosts
note: >-
  No real /.well-known/ discovery documents were served. readme.com and api.readme.com
  return 404 (api.readme.com returns RFC 9457 application/problem+json for unknown
  paths); docs.readme.com returns HTTP 200 with its HTML app shell (a soft-404) for
  arbitrary /.well-known/ paths, so those are not genuine documents. Absence is valid.
hosts:
- host: https://readme.com
  documents:
  - {path: /.well-known/security.txt, status: 404}
  - {path: /.well-known/openid-configuration, status: 404}
  - {path: /.well-known/oauth-authorization-server, status: 404}
  - {path: /.well-known/api-catalog, status: 404}
  - {path: /.well-known/ai-plugin.json, status: 404}
- host: https://api.readme.com
  documents:
  - {path: /.well-known/security.txt, status: 404, note: RFC9457 problem+json}
  - {path: /.well-known/oauth-authorization-server, status: 404, note: RFC9457 problem+json}
- host: https://docs.readme.com
  documents:
  - {path: /.well-known/security.txt, status: 200, note: soft-404 HTML app shell, not a real security.txt}
  - {path: /.well-known/mcp.json, status: 200, note: soft-404 HTML app shell, not a real document}