generated: '2026-10-04'
method: probed
generator: harvest-well-known.py
source: Live GET of the named /.well-known/ path list on every host the record knows; every row is a request that
  was issued.
summary:
  hosts_probed: 10
  paths_probed: 110
  documents_served: 4
hosts:
- host: api.veracode.com
  control:
    path: /.well-known/apis-io-negative-control-7f3ab91c.json
    status: 403
    bytes: 0
  documents:
  - path: /.well-known/security.txt
    status: 403
    standard: RFC 9116
  - path: /.well-known/openid-configuration
    status: 403
    standard: OpenID Connect Discovery 1.0
  - path: /.well-known/oauth-authorization-server
    status: 200
    standard: RFC 8414
    content_type: application/json
    file: veracode-api-oauth-authorization-server.json
  - path: /.well-known/oauth-protected-resource
    status: 403
    standard: RFC 9728
  - path: /.well-known/api-catalog
    status: 403
    standard: RFC 9727
  - path: /.well-known/apis.json
    status: 403
    standard: APIs.json
  - path: /.well-known/ai-plugin.json
    status: 403
    standard: OpenAI plugin manifest
  - path: /.well-known/aauth-resource.json
    status: 403
    standard: AAuth
  - path: /.well-known/ucp.json
    status: 403
    standard: UCP
  - path: /.well-known/acp.json
    status: 403
    standard: ACP
  - path: /.well-known/mcp/server-card.json
    status: 403
    standard: MCP server card
- host: docs.veracode.com
  control:
    path: /.well-known/apis-io-negative-control-7f3ab91c.json
    status: 404
    bytes: 0
  documents:
  - path: /.well-known/security.txt
    status: 404
    standard: RFC 9116
  - path: /.well-known/openid-configuration
    status: 404
    standard: OpenID Connect Discovery 1.0
  - path: /.well-known/oauth-authorization-server
    status: 404
    standard: RFC 8414
  - path: /.well-known/oauth-protected-resource
    status: 404
    standard: RFC 9728
  - path: /.well-known/api-catalog
    status: 404
    standard: RFC 9727
  - path: /.well-known/apis.json
    status: 404
    standard: APIs.json
  - path: /.well-known/ai-plugin.json
    status: 404
    standard: OpenAI plugin manifest
  - path: /.well-known/aauth-resource.json
    status: 404
    standard: AAuth
  - path: /.well-known/ucp.json
    status: 404
    standard: UCP
  - path: /.well-known/acp.json
    status: 404
    standard: ACP
  - path: /.well-known/mcp/server-card.json
    status: 404
    standard: MCP server card
- host: trust.veracode.com
  control:
    path: /.well-known/apis-io-negative-control-7f3ab91c.json
    status: 404
    bytes: 0
  documents:
  - path: /.well-known/security.txt
    status: 404
    standard: RFC 9116
  - path: /.well-known/openid-configuration
    status: 200
    standard: OpenID Connect Discovery 1.0
    note: '200 but issued by app.safebase.io: the hosting platform''s document, not the provider''s'
    platform_issuer: app.safebase.io
  - path: /.well-known/oauth-authorization-server
    status: 200
    standard: RFC 8414
    note: '200 but issued by app.safebase.io: the hosting platform''s document, not the provider''s'
    platform_issuer: app.safebase.io
  - path: /.well-known/oauth-protected-resource
    status: 200
    standard: RFC 9728
    content_type: application/json; charset=utf-8
    file: veracode-trust-oauth-protected-resource.json
    platform_authorization_servers:
    - app.safebase.io
  - path: /.well-known/api-catalog
    status: 404
    standard: RFC 9727
  - path: /.well-known/apis.json
    status: 404
    standard: APIs.json
  - path: /.well-known/ai-plugin.json
    status: 404
    standard: OpenAI plugin manifest
  - path: /.well-known/aauth-resource.json
    status: 404
    standard: AAuth
  - path: /.well-known/ucp.json
    status: 404
    standard: UCP
  - path: /.well-known/acp.json
    status: 404
    standard: ACP
  - path: /.well-known/mcp/server-card.json
    status: 404
    standard: MCP server card
- host: www.veracode.com
  control:
    path: /.well-known/apis-io-negative-control-7f3ab91c.json
    status: 404
    bytes: 0
  documents:
  - path: /.well-known/security.txt
    status: 404
    standard: RFC 9116
  - path: /.well-known/openid-configuration
    status: 404
    standard: OpenID Connect Discovery 1.0
  - path: /.well-known/oauth-authorization-server
    status: 404
    standard: RFC 8414
  - path: /.well-known/oauth-protected-resource
    status: 404
    standard: RFC 9728
  - path: /.well-known/api-catalog
    status: 404
    standard: RFC 9727
  - path: /.well-known/apis.json
    status: 404
    standard: APIs.json
  - path: /.well-known/ai-plugin.json
    status: 404
    standard: OpenAI plugin manifest
  - path: /.well-known/aauth-resource.json
    status: 404
    standard: AAuth
  - path: /.well-known/ucp.json
    status: 404
    standard: UCP
  - path: /.well-known/acp.json
    status: 404
    standard: ACP
  - path: /.well-known/mcp/server-card.json
    status: 404
    standard: MCP server card
- host: status.veracode.com
  control:
    path: /.well-known/apis-io-negative-control-7f3ab91c.json
    status: 404
    bytes: 0
  documents:
  - path: /.well-known/security.txt
    status: 200
    standard: RFC 9116
    content_type: text/plain
    file: veracode-status-security.txt
  - path: /.well-known/openid-configuration
    status: 404
    standard: OpenID Connect Discovery 1.0
  - path: /.well-known/oauth-authorization-server
    status: 404
    standard: RFC 8414
  - path: /.well-known/oauth-protected-resource
    status: 404
    standard: RFC 9728
  - path: /.well-known/api-catalog
    status: 404
    standard: RFC 9727
  - path: /.well-known/apis.json
    status: 404
    standard: APIs.json
  - path: /.well-known/ai-plugin.json
    status: 404
    standard: OpenAI plugin manifest
  - path: /.well-known/aauth-resource.json
    status: 404
    standard: AAuth
  - path: /.well-known/ucp.json
    status: 404
    standard: UCP
  - path: /.well-known/acp.json
    status: 404
    standard: ACP
  - path: /.well-known/mcp/server-card.json
    status: 404
    standard: MCP server card
- host: web.analysiscenter.veracode.com
  control:
    path: /.well-known/apis-io-negative-control-7f3ab91c.json
    status: 403
    bytes: 0
  documents:
  - path: /.well-known/security.txt
    status: 403
    standard: RFC 9116
  - path: /.well-known/openid-configuration
    status: 403
    standard: OpenID Connect Discovery 1.0
  - path: /.well-known/oauth-authorization-server
    status: 403
    standard: RFC 8414
  - path: /.well-known/oauth-protected-resource
    status: 403
    standard: RFC 9728
  - path: /.well-known/api-catalog
    status: 403
    standard: RFC 9727
  - path: /.well-known/apis.json
    status: 403
    standard: APIs.json
  - path: /.well-known/ai-plugin.json
    status: 403
    standard: OpenAI plugin manifest
  - path: /.well-known/aauth-resource.json
    status: 403
    standard: AAuth
  - path: /.well-known/ucp.json
    status: 403
    standard: UCP
  - path: /.well-known/acp.json
    status: 403
    standard: ACP
  - path: /.well-known/mcp/server-card.json
    status: 403
    standard: MCP server card
- host: community.veracode.com
  control:
    path: /.well-known/apis-io-negative-control-7f3ab91c.json
    status: 401
    bytes: 0
  documents:
  - path: /.well-known/security.txt
    status: 401
    standard: RFC 9116
  - path: /.well-known/openid-configuration
    status: 200
    standard: OpenID Connect Discovery 1.0
    content_type: application/json;charset=UTF-8
    file: veracode-community-openid-configuration.json
  - path: /.well-known/oauth-authorization-server
    status: 401
    standard: RFC 8414
  - path: /.well-known/oauth-protected-resource
    status: 401
    standard: RFC 9728
  - path: /.well-known/api-catalog
    status: 401
    standard: RFC 9727
  - path: /.well-known/apis.json
    status: 401
    standard: APIs.json
  - path: /.well-known/ai-plugin.json
    status: 401
    standard: OpenAI plugin manifest
  - path: /.well-known/aauth-resource.json
    status: 401
    standard: AAuth
  - path: /.well-known/ucp.json
    status: 401
    standard: UCP
  - path: /.well-known/acp.json
    status: 401
    standard: ACP
  - path: /.well-known/mcp/server-card.json
    status: 401
    standard: MCP server card
- host: info.veracode.com
  control:
    path: /.well-known/apis-io-negative-control-7f3ab91c.json
    status: 200
    bytes: 400000
  documents:
  - path: /.well-known/security.txt
    status: 200
    standard: RFC 9116
    note: '200 carrying an HTML/SPA shell: not a document'
  - path: /.well-known/openid-configuration
    status: 200
    standard: OpenID Connect Discovery 1.0
    note: '200 carrying an HTML/SPA shell: not a document'
  - path: /.well-known/oauth-authorization-server
    status: 200
    standard: RFC 8414
    note: '200 carrying an HTML/SPA shell: not a document'
  - path: /.well-known/oauth-protected-resource
    status: 200
    standard: RFC 9728
    note: '200 carrying an HTML/SPA shell: not a document'
  - path: /.well-known/api-catalog
    status: 200
    standard: RFC 9727
    note: '200 carrying an HTML/SPA shell: not a document'
  - path: /.well-known/apis.json
    status: 200
    standard: APIs.json
    note: '200 carrying an HTML/SPA shell: not a document'
  - path: /.well-known/ai-plugin.json
    status: 200
    standard: OpenAI plugin manifest
    note: '200 carrying an HTML/SPA shell: not a document'
  - path: /.well-known/aauth-resource.json
    status: 200
    standard: AAuth
    note: '200 carrying an HTML/SPA shell: not a document'
  - path: /.well-known/ucp.json
    status: 200
    standard: UCP
    note: '200 carrying an HTML/SPA shell: not a document'
  - path: /.well-known/acp.json
    status: 200
    standard: ACP
    note: '200 carrying an HTML/SPA shell: not a document'
  - path: /.well-known/mcp/server-card.json
    status: 200
    standard: MCP server card
    note: '200 carrying an HTML/SPA shell: not a document'
- host: partners.veracode.com
  control:
    path: /.well-known/apis-io-negative-control-7f3ab91c.json
    status: 200
    bytes: 43296
  documents:
  - path: /.well-known/security.txt
    status: 200
    standard: RFC 9116
    note: '200 carrying an HTML/SPA shell: not a document'
  - path: /.well-known/openid-configuration
    status: 200
    standard: OpenID Connect Discovery 1.0
    note: '200 carrying an HTML/SPA shell: not a document'
  - path: /.well-known/oauth-authorization-server
    status: 200
    standard: RFC 8414
    note: '200 carrying an HTML/SPA shell: not a document'
  - path: /.well-known/oauth-protected-resource
    status: 200
    standard: RFC 9728
    note: '200 carrying an HTML/SPA shell: not a document'
  - path: /.well-known/api-catalog
    status: 200
    standard: RFC 9727
    note: '200 carrying an HTML/SPA shell: not a document'
  - path: /.well-known/apis.json
    status: 200
    standard: APIs.json
    note: '200 carrying an HTML/SPA shell: not a document'
  - path: /.well-known/ai-plugin.json
    status: 200
    standard: OpenAI plugin manifest
    note: '200 carrying an HTML/SPA shell: not a document'
  - path: /.well-known/aauth-resource.json
    status: 200
    standard: AAuth
    note: '200 carrying an HTML/SPA shell: not a document'
  - path: /.well-known/ucp.json
    status: 200
    standard: UCP
    note: '200 carrying an HTML/SPA shell: not a document'
  - path: /.well-known/acp.json
    status: 200
    standard: ACP
    note: '200 carrying an HTML/SPA shell: not a document'
  - path: /.well-known/mcp/server-card.json
    status: 200
    standard: MCP server card
    note: '200 carrying an HTML/SPA shell: not a document'
- host: sca.analysiscenter.veracode.com
  control:
    path: /.well-known/apis-io-negative-control-7f3ab91c.json
    status: 200
    bytes: 532
  documents:
  - path: /.well-known/security.txt
    status: 404
    standard: RFC 9116
  - path: /.well-known/openid-configuration
    status: 200
    standard: OpenID Connect Discovery 1.0
    note: '200 carrying an HTML/SPA shell: not a document'
  - path: /.well-known/oauth-authorization-server
    status: 200
    standard: RFC 8414
    note: '200 carrying an HTML/SPA shell: not a document'
  - path: /.well-known/oauth-protected-resource
    status: 200
    standard: RFC 9728
    note: '200 carrying an HTML/SPA shell: not a document'
  - path: /.well-known/api-catalog
    status: 200
    standard: RFC 9727
    note: '200 carrying an HTML/SPA shell: not a document'
  - path: /.well-known/apis.json
    status: 200
    standard: APIs.json
    note: '200 carrying an HTML/SPA shell: not a document'
  - path: /.well-known/ai-plugin.json
    status: 200
    standard: OpenAI plugin manifest
    note: '200 carrying an HTML/SPA shell: not a document'
  - path: /.well-known/aauth-resource.json
    status: 200
    standard: AAuth
    note: '200 carrying an HTML/SPA shell: not a document'
  - path: /.well-known/ucp.json
    status: 200
    standard: UCP
    note: '200 carrying an HTML/SPA shell: not a document'
  - path: /.well-known/acp.json
    status: 200
    standard: ACP
    note: '200 carrying an HTML/SPA shell: not a document'
  - path: /.well-known/mcp/server-card.json
    status: 200
    standard: MCP server card
    note: '200 carrying an HTML/SPA shell: not a document'