generated: '2026-08-09'
method: searched
source: live probes of /.well-known/* on every RouterPlex host
hosts_probed:
- https://routerplex.com
- https://api.routerplex.com
- https://docs.routerplex.com
gaps:
- No /.well-known/security.txt (RFC 9116) on any host — no published security contact or vulnerability-disclosure
  policy.
- The api-catalog is served only from the marketing host (routerplex.com), not from the API host (api.routerplex.com),
  where RFC 9727 consumers would look first.
x-evidence:
  fetched: '2026-08-09'
  checks:
  - url: https://routerplex.com/.well-known/api-catalog
    http_status: 200
  - url: https://routerplex.com/robots.txt
    http_status: 200
  - url: https://routerplex.com/.well-known/security.txt
    http_status: 404
  - url: https://api.routerplex.com/.well-known/api-catalog
    http_status: 404
hosts:
- host: ''
  documents:
  - path: /.well-known/api-catalog
    status: 200
    file: routerplex-api-catalog.json
    standard: RFC 9727 (API catalog / linkset)
    content_type: application/linkset+json; profile="https://www.rfc-editor.org/info/rfc9727"
    note: Points at the OpenAPI description (service-desc), the human documentation (service-doc), and
      a liveness resource (status). This is what confirmed the OpenAPI at https://routerplex.com/openapi.json
      is first-party.
  - path: /.well-known/security.txt
    status: 404
  - path: /.well-known/openid-configuration
    status: 404
  - path: /.well-known/oauth-authorization-server
    status: 404
  - path: /.well-known/oauth-protected-resource
    status: 404
  - path: /.well-known/ai-plugin.json
    status: 404
  - path: /.well-known/agent-card.json
    status: 404
  - path: /.well-known/agent.json
    status: 404
  - path: /.well-known/security.txt
    status: 404
  - path: /.well-known/api-catalog
    status: 404
  - path: /.well-known/oauth-authorization-server
    status: 404
  - path: /.well-known/oauth-protected-resource
    status: 404
  - path: /.well-known/agent-card.json
    status: 404
  - path: /.well-known/agent.json
    status: 404
  - path: /.well-known/security.txt
    status: 404
  - path: /.well-known/api-catalog
    status: 404
  - path: /.well-known/agent-card.json
    status: 404
  - path: /.well-known/agent.json
    status: 404
x-shape-fix:
  converted: '2026-08-20'
  from: documents
  note: Rewritten into hosts[] -> documents[], the only shape well_known_docs() in score.rb reads. A served
    .well-known surface recorded in any other shape scores as absent.