🔐
AB-135

AAuth metadata endpoint available

🔐 Bot Authentication Moderate effort Est. cost: $0

What it means

Your API publishes /.well-known/aauth.json with agent authorization metadata.

Why it matters

AAuth metadata lets agents discover agent-specific auth flows, scope descriptions, and grant types — the foundation for agent-safe authentication.

What's wrong

No /.well-known/aauth.json endpoint.

What's right

GET /.well-known/aauth.json returns { scope_descriptions: [...] }

Check this rule on your site

Enter your URL to check just this one rule (AB-001).

Related rules in Bot Authentication