Probe a domain's .well-known endpoints API

Probes a domain for 10 standard .well-known endpoints in parallel (security.txt, openid-configuration, change-password, apple-app-site-association, assetlinks.json, ai.txt, gpc.json, dnt-policy.txt, nostr.json, host-meta) and reports which are present, their HTTP status, any redirect target, and content type. A one-call discovery of a domain's published machine-readable configs. Answers 'what well-known endpoints does this domain expose', 'does it support OIDC discovery / app links / GPC', 'what standards has this site adopted'.

Price$0.01per request

MethodPOST

Route/v1/dev/well-known-probe

StatusLive

MIME typeapplication/json

Rate limit60/minute

Cache86400s public

devwell-knowndiscoveryopenidoidcapp-linksprivacyprobe

API URLhttps://x402.hexl.dev/v1/dev/well-known-probe

Integration docs

Example request

{
  "domain": "google.com"
}

Example response

{
  "domain": "google.com",
  "probed": 10,
  "foundCount": 2,
  "found": [
    "security.txt",
    "assetlinks.json"
  ],
  "results": [
    {
      "key": "security.txt",
      "present": false,
      "status": 301,
      "redirect": "https://www.google.com/.well-known/security.txt",
      "contentType": "text/html; charset=UTF-8"
    },
    {
      "key": "openid-configuration",
      "present": false,
      "status": 404,
      "redirect": null,
      "contentType": "text/html; charset=UTF-8"
    },
    {
      "key": "change-password",
      "present": false,
      "status": 404,
      "redirect": null,
      "contentType": "text/html; charset=UTF-8"
    },
    {
      "key": "apple-app-site-association",
      "present": false,
      "status": 404,
      "redirect": null,
      "contentType": "text/html; charset=UTF-8"
    }
  ]
}

Input schema

{
  "type": "object",
  "required": [
    "domain"
  ],
  "properties": {
    "domain": {
      "type": "string",
      "description": "Bare domain, e.g. 'example.com'."
    }
  }
}

Output schema

{
  "type": "object",
  "additionalProperties": true
}