Skip to content

No API Catalog at /.well-known/api-catalog

An API Catalog, defined by an internet standard called RFC 9727, is a file that lets AI agents automatically discover any APIs (programmatic interfaces other systems can call), documentation and status pages your business exposes. This check found no such file published at /.well-known/api-catalog. This finding is only relevant if your business exposes a public or partner-facing API; if it doesn't, there's genuinely nothing to fix here. For businesses that do offer an API, not publishing a catalog means AI agents have no standard way to find it automatically, so in practice they simply won't. Your developer needs 1-2 hours, and only if you have a public or partner API. Publish /.well-known/api-catalog as an application/linkset+json file listing your API along with service-desc, service-doc and status links. If you don't currently expose any API to partners or the public, there's nothing to action here.

Why this matters

This finding is only relevant if your business exposes a public or partner-facing API; if it doesn't, there's genuinely nothing to fix here. For businesses that do offer an API, not publishing a catalog means AI agents have no standard way to find it automatically, so in practice they simply won't.

How to fix it

Your developer needs 1-2 hours, and only if you have a public or partner API. Publish /.well-known/api-catalog as an application/linkset+json file listing your API along with service-desc, service-doc and status links. If you don't currently expose any API to partners or the public, there's nothing to action here.