generated: '2026-09-04'
method: derived
source: openapi/ + live probes of https://www.xgsenergy.com 2026-09-04
conformance:
- id: openapi-3.1
  conforms: true
  evidence: openapi/ — 8 documents, all OpenAPI 3.1.0, derived by API Evangelist. XGS Energy publishes none
    itself.
- id: rest
  conforms: true
  evidence: Resource-oriented JSON over HTTPS with GET semantics; https://www.xgsenergy.com/wp-json/
- id: pagination
  conforms: true
  evidence: page/per_page with X-WP-Total, X-WP-TotalPages and an RFC 8288 Link header. Observed on GET /wp-json/wp/v2/posts?per_page=2&page=2
- id: rfc8288-web-linking
  conforms: true
  evidence: 'link: <...page=1>; rel="prev", <...page=3>; rel="next" observed live.'
- id: oembed-1.0
  conforms: true
  evidence: GET /wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.xgsenergy.com%2F -> 200 with version 1.0, provider_name,
    type rich, html.
- id: cors
  conforms: true
  evidence: 'access-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link observed live.'
- id: rfc9457
  conforms: false
  evidence: Errors are the WordPress {code,message,data} envelope with content-type application/json, not application/problem+json.
- id: oauth2
  conforms: false
  evidence: /.well-known/oauth-authorization-server -> 404; no OAuth flow anywhere in the route index.
- id: oidc
  conforms: false
  evidence: /.well-known/openid-configuration -> 404.
- id: idempotency
  conforms: false
  evidence: No mutating public surface; no Idempotency-Key header. See conventions/.
- id: rfc9116-security-txt
  conforms: false
  evidence: https://www.xgsenergy.com/.well-known/security.txt -> 404.
- id: rfc9727-api-catalog
  conforms: false
  evidence: https://www.xgsenergy.com/.well-known/api-catalog -> 404.
- id: a2a-agent-card
  conforms: false
  evidence: /.well-known/agent-card.json -> 404 and /.well-known/agent.json -> 404 on both xgsenergy.com and
    www.xgsenergy.com.
- id: llms-txt
  conforms: false
  evidence: https://www.xgsenergy.com/llms.txt -> 404. The llms/ file in this repository is generated by API
    Evangelist, not served by the provider.
domain_standard:
  applicable: false
  sector: geothermal power generation / energy infrastructure
  detail: Reward-only check, not applicable here. The energy-sector interoperability standards a producer of
    this kind would declare — IEC 61850, CIM/IEC 61970, OpenADR, Green Button, IEEE 2030.5 — govern grid and
    metering interfaces, and XGS Energy exposes no operational or metering interface of any kind. The only
    contract in scope is a CMS content API, which has no domain standard to conform to. Nothing was invented
    to fill this slot.
certifications: []
compliance_programs: []
note: No SOC 2, ISO 27001, or other certification is published anywhere on xgsenergy.com; no trust center exists.
  No Compliance pointer is emitted, because there is nothing to point at.