generated: '2026-07-21'
method: searched
hosts:
  - host: https://www.treasuryspring.com
    documents:
      - path: /.well-known/security.txt
        status: 404
      - path: /.well-known/openid-configuration
        status: 404
      - path: /.well-known/oauth-authorization-server
        status: 404
      - path: /.well-known/api-catalog
        status: 404
      - path: /.well-known/ai-plugin.json
        status: 404
  - host: https://api.treasuryspring.com
    documents:
      - path: /.well-known/security.txt
        status: 404
notes: >-
  No /.well-known discovery documents are published on the marketing site or the API
  host as of the probe date. The MCP OAuth flow (Auth0) advertises Dynamic Client
  Registration (RFC 7591) at the identity-provider layer, not via a site .well-known file.