generated: '2026-09-13' method: probed source: direct HTTPS probes of every host named by apis.yml, the OpenAPI servers[] blocks, the docs host and the MCP hosts note: 'Visma centralises discovery on its identity and MCP hosts, not on its apex domain: visma.com and www.visma.com serve no /.well-known/ documents at all, while connect.visma.com serves a complete security.txt plus OIDC discovery, and both MCP servers serve RFC 9728 protected-resource metadata. developer.visma.com is an Angular SPA whose catch-all answers 200 with the same HTML shell for every /.well-known/ path — recorded as a miss, not a hit. No agent card was found on any host.' hosts: - host: visma.com documents: - path: /.well-known/security.txt status: 404 file: null - path: /.well-known/openid-configuration status: 404 file: null - path: /.well-known/oauth-authorization-server status: 404 file: null - path: /.well-known/api-catalog status: 404 file: null - path: /.well-known/ai-plugin.json status: 404 file: null - path: /.well-known/agent-card.json status: 404 file: null - path: /.well-known/agent.json status: 404 file: null - host: www.visma.com documents: - path: /.well-known/security.txt status: 404 file: null - path: /.well-known/openid-configuration status: 404 file: null - path: /.well-known/oauth-authorization-server status: 404 file: null - path: /.well-known/api-catalog status: 404 file: null - path: /.well-known/ai-plugin.json status: 404 file: null - path: /.well-known/agent-card.json status: 404 file: null - path: /.well-known/agent.json status: 404 file: null - host: developer.visma.com documents: - path: /.well-known/security.txt status: 200 file: null note: Angular SPA catch-all returned the same 230KB HTML shell for every /.well-known/ path — not a document. - path: /.well-known/openid-configuration status: 200 file: null note: Angular SPA catch-all returned the same 230KB HTML shell for every /.well-known/ path — not a document. - path: /.well-known/oauth-authorization-server status: 200 file: null note: Angular SPA catch-all returned the same 230KB HTML shell for every /.well-known/ path — not a document. - path: /.well-known/api-catalog status: 200 file: null note: Angular SPA catch-all returned the same 230KB HTML shell for every /.well-known/ path — not a document. - path: /.well-known/ai-plugin.json status: 200 file: null note: Angular SPA catch-all returned the same 230KB HTML shell for every /.well-known/ path — not a document. - path: /.well-known/agent-card.json status: 200 file: null note: Angular SPA catch-all returned the same 230KB HTML shell for every /.well-known/ path — not a document. - path: /.well-known/agent.json status: 200 file: null note: Angular SPA catch-all returned the same 230KB HTML shell for every /.well-known/ path — not a document. - host: api.finance.visma.net documents: - path: /.well-known/security.txt status: 404 file: null - path: /.well-known/openid-configuration status: 404 file: null - path: /.well-known/oauth-authorization-server status: 404 file: null - path: /.well-known/api-catalog status: 404 file: null - path: /.well-known/ai-plugin.json status: 404 file: null - path: /.well-known/agent-card.json status: 404 file: null - path: /.well-known/agent.json status: 404 file: null - host: finance.visma.net documents: - path: /.well-known/security.txt status: 404 file: null - path: /.well-known/openid-configuration status: 404 file: null - path: /.well-known/oauth-authorization-server status: 404 file: null - path: /.well-known/api-catalog status: 404 file: null - path: /.well-known/ai-plugin.json status: 404 file: null - path: /.well-known/agent-card.json status: 404 file: null - path: /.well-known/agent.json status: 404 file: null - host: integration.visma.net documents: - path: /.well-known/security.txt status: 404 file: null - path: /.well-known/openid-configuration status: 404 file: null - path: /.well-known/oauth-authorization-server status: 404 file: null - path: /.well-known/api-catalog status: 404 file: null - path: /.well-known/ai-plugin.json status: 404 file: null - path: /.well-known/agent-card.json status: 404 file: null - path: /.well-known/agent.json status: 404 file: null - host: eaccountingapi.vismaonline.com documents: - path: /.well-known/security.txt status: 404 file: null - path: /.well-known/openid-configuration status: 404 file: null - path: /.well-known/oauth-authorization-server status: 404 file: null - path: /.well-known/api-catalog status: 404 file: null - path: /.well-known/ai-plugin.json status: 404 file: null - path: /.well-known/agent-card.json status: 404 file: null - path: /.well-known/agent.json status: 404 file: null - host: developer.vismaonline.com documents: - path: /.well-known/security.txt status: 404 file: null - path: /.well-known/openid-configuration status: 404 file: null - path: /.well-known/oauth-authorization-server status: 404 file: null - path: /.well-known/api-catalog status: 404 file: null - path: /.well-known/ai-plugin.json status: 404 file: null - path: /.well-known/agent-card.json status: 404 file: null - path: /.well-known/agent.json status: 404 file: null - host: connect.visma.com documents: - path: /.well-known/security.txt status: 200 file: visma-connect-security.txt - path: /.well-known/openid-configuration status: 200 file: visma-connect-openid-configuration.json - path: /.well-known/oauth-authorization-server status: 200 file: visma-connect-oauth-authorization-server.json - path: /.well-known/api-catalog status: 404 file: null - path: /.well-known/ai-plugin.json status: 404 file: null - path: /.well-known/agent-card.json status: 404 file: null - path: /.well-known/agent.json status: 404 file: null - host: oauth.developers.visma.com documents: - path: /.well-known/security.txt status: 404 file: null - path: /.well-known/openid-configuration status: 404 file: null - path: /.well-known/oauth-authorization-server status: 404 file: null - path: /.well-known/api-catalog status: 404 file: null - path: /.well-known/ai-plugin.json status: 404 file: null - path: /.well-known/agent-card.json status: 404 file: null - path: /.well-known/agent.json status: 404 file: null - host: docs.vismasoftware.no documents: - path: /.well-known/security.txt status: 404 file: null - path: /.well-known/openid-configuration status: 404 file: null - path: /.well-known/oauth-authorization-server status: 404 file: null - path: /.well-known/api-catalog status: 404 file: null - path: /.well-known/ai-plugin.json status: 404 file: null - path: /.well-known/agent-card.json status: 404 file: null - path: /.well-known/agent.json status: 404 file: null - host: mcp.business.visma.net documents: - path: /.well-known/oauth-protected-resource status: 200 file: visma-business-nxt-mcp-oauth-protected-resource.json - path: /.well-known/security.txt status: 404 file: null - path: /.well-known/openid-configuration status: 200 file: visma-business-nxt-mcp-openid-configuration.json - path: /.well-known/oauth-authorization-server status: 200 file: visma-business-nxt-mcp-oauth-authorization-server.json - path: /.well-known/api-catalog status: 404 file: null - path: /.well-known/ai-plugin.json status: 404 file: null - path: /.well-known/agent-card.json status: 404 file: null - path: /.well-known/agent.json status: 404 file: null - host: mcp.spiris.se documents: - path: /.well-known/oauth-protected-resource/mcp status: 200 file: visma-spiris-mcp-oauth-protected-resource.json - path: /.well-known/oauth-protected-resource status: 200 file: visma-spiris-mcp-oauth-protected-resource.json - path: /.well-known/security.txt status: 404 file: null - path: /.well-known/openid-configuration status: 404 file: null - path: /.well-known/oauth-authorization-server status: 404 file: null - path: /.well-known/api-catalog status: 404 file: null - path: /.well-known/ai-plugin.json status: 404 file: null - path: /.well-known/agent-card.json status: 404 file: null - path: /.well-known/agent.json status: 404 file: null - host: auth.mcp.spiris.se documents: - path: /.well-known/security.txt status: 404 file: null - path: /.well-known/openid-configuration status: 404 file: null - path: /.well-known/oauth-authorization-server status: 200 file: visma-spiris-mcp-auth-oauth-authorization-server.json - path: /.well-known/api-catalog status: 404 file: null - path: /.well-known/ai-plugin.json status: 404 file: null - path: /.well-known/agent-card.json status: 404 file: null - path: /.well-known/agent.json status: 404 file: null - host: identity.vismaonline.com documents: - path: /.well-known/security.txt status: 404 file: null - path: /.well-known/openid-configuration status: 200 file: visma-identity-vismaonline-openid-configuration.json - path: /.well-known/oauth-authorization-server status: 404 file: null - path: /.well-known/api-catalog status: 404 file: null - path: /.well-known/ai-plugin.json status: 404 file: null - path: /.well-known/agent-card.json status: 404 file: null - path: /.well-known/agent.json status: 404 file: null