generated: '2026-09-10'
method: probed
source: live HTTP probes of trickybird.com and www.trickybird.com, 2026-09-10
note: >-
  security.txt is the only /.well-known/ document served (200, text/plain, RFC 9116 fields:
  Contact, Expires 2026-12-09, Preferred-Languages, Canonical). Every other probed path returns a
  real 404 status (no SPA soft-200s on this host). www.trickybird.com 301s every path to the apex
  host. llms.txt (site root, not /.well-known/) is served and saved separately under llms/.
  /.well-known/webmcp.json is NOT served — the WebMCP tool surface is documented in prose at
  /webmcp only.
hosts:
- host: trickybird.com
  documents:
  - path: /.well-known/security.txt
    status: 200
    content_type: text/plain; charset=utf-8
    file: trickybird-security.txt
  - path: /.well-known/openid-configuration
    status: 404
  - path: /.well-known/oauth-authorization-server
    status: 404
  - path: /.well-known/oauth-protected-resource
    status: 404
  - path: /.well-known/api-catalog
    status: 404
  - path: /.well-known/ai-plugin.json
    status: 404
  - path: /.well-known/agent-card.json
    status: 404
  - path: /.well-known/agent.json
    status: 404
  - path: /.well-known/mcp.json
    status: 404
  - path: /.well-known/webmcp.json
    status: 404
  - path: /.well-known/apis.json
    status: 404
- host: www.trickybird.com
  note: 301 redirects every probed path to https://trickybird.com/ equivalents; no documents of its own.
  documents:
  - path: /.well-known/security.txt
    status: 301