PlatPhorm API - Network API Registry and Gateway

Capability	Declared	Observed	Valid	Complete	Status	Latency	URL
health	Yes	Yes	Yes	Yes	valid	87 ms	https://keys.platphormnews.com/api/health
openapi	Yes	Yes	Yes	Yes	valid	46 ms	https://keys.platphormnews.com/api/docs
mcp	Yes	Yes	Yes	Yes	valid	72 ms	https://keys.platphormnews.com/api/mcp
mcpManifest	Yes	Yes	Yes	Yes	valid	120 ms	https://keys.platphormnews.com/.well-known/mcp.json
llms	Yes	Yes	Yes	Yes	valid	54 ms	https://keys.platphormnews.com/llms.txt
llmsIndex	Yes	Yes	Yes	Yes	valid	70 ms	https://keys.platphormnews.com/llms-index.json
rss	Yes	Yes	Yes	No	valid	17 ms	https://keys.platphormnews.com/rss.xml
atom	Yes	Yes	Yes	Yes	valid	31 ms	https://keys.platphormnews.com/atom.xml
openai	Yes	Yes	Yes	Yes	valid	36 ms	https://keys.platphormnews.com/.well-known/ai-plugin.json
sitemap	Yes	Yes	Yes	Yes	valid	19 ms	https://keys.platphormnews.com/sitemap.xml
robots	No	Yes	Yes	Yes	valid	67 ms	https://keys.platphormnews.com/robots.txt
trust	No	Yes	Yes	Yes	valid	124 ms	https://keys.platphormnews.com/.well-known/trust.json
agents	No	Yes	Yes	Yes	valid	48 ms	https://keys.platphormnews.com/.well-known/agents.json
manifest	No	Yes	Yes	Yes	valid	12 ms	https://keys.platphormnews.com/manifest.webmanifest

mediumOPENAPI_MISSING_OPERATION_ID

8 operations lack operationId

Add stable operationId values for client and MCP correlation.

GET https://keys.platphormnews.com/api/docs
HTTP 200
Content-Type: application/json
46 ms
Digest: sha256:dbe8fa6aa9f0bda3a8a06894c8012aa846b0ac252493c05dc5f8a30b752076cb
Preview: {"openapi":"3.0.0","info":{"title":"PlatPhorm Keys API","description":"Canonical public-safe PLATPHORM_API_KEY issuer, lifecycle manager, validator, rotation/revocation service, scoped-access policy layer, and audit/telemetry hub for the PlatPhormNews web mesh.","version":"0.5.1","contact":{"name":"PlatPhorm Support","url":"https://keys.platphormnews.com"},"license":{"name":"MIT"}},"servers":[{"url":"https://keys.platphormnews.com","description":"Production"},{"url":"http://localhost:3000","description":"Development"}],"tags":[{"name":"Health","description":"System health and status"},{"name":"Provisioning","description":"Protected, bounded key provisioning"},{"name":"Keys","description":"API Key management operations"},{"name":"Telemetry","description":"Observability and monitoring"}],"paths":{"/api/health":{"get":{"tags":["Health"],"summary":"Health Check Alias","description":"Canonical unversioned alias for the public-safe Keys health envelope.","operationId":"getHealthAlias","responses":{"200":{"description":"System is healthy or honestly degraded"},"503":{"description":"System is unhealthy"}}}},"/api/v1/certification/lifecycle":{"post":{"tags":["Telemetry","Keys"],"summary":"Run a bounded production lifecycle certification","description":"Creates, reads, rotates, and revokes one certification key; verifies durable audit events; exports a redacted trace; and never returns key material. Requires PLATPHORM_API_KEY or the configured Vercel cron credential.","operationId":"certifyKeyLifecycle","security":[{"platphormBearer":[]},{"platphormHeader":[]}],"responses":{"200":{"description":"Lifecycle, audit readback, trace export, and propagation certified"},"401":{"$ref":"#/components/responses/Unauthorized"},"502":{"description":"Lifecycle completed and key was revoked, but trace export failed"},"503":{"description":"Certification failed and revocation cleanup was attempted"}}}},"/api/v1/keys/bbs/issue":{"post":{"tags":["Keys"],"summary":"Issue BBS Member Key","description":"Protected integration endpoint for bbs.pl

highMCP_ENDPOINT_INVALID

mediumRSS_DUPLICATE_GUID

2 duplicate RSS GUIDs found

Use stable unique GUIDs.

GET https://keys.platphormnews.com/rss.xml
HTTP 200
Content-Type: application/xml
17 ms
Digest: sha256:3d83e28833ec73ce4c41b759d9549cdbee22fcec935f0165db8e75d65ba67f25
Preview: <?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>PlatPhorm Keys</title>
    <link>https://keys.platphormnews.com</link>
    <description>Enterprise-grade API key management with AES-256-GCM encryption, comprehensive audit logging, rate limiting, and OpenTelemetry observability for the PlatPhorm News Network.</description>
    <language>en-US</language>
    <lastBuildDate>Sun, 23 Aug 2026 06:53:53 GMT</lastBuildDate>
    <atom:link href="https://keys.platphormnews.com/rss.xml" rel="self" type="application/rss+xml"/>
    <item>
      <title>PlatPhorm Keys Phase 1 key issuer contract</title>
      <link>https://keys.platphormnews.com</link>
      <description>Keys is the protected issuer and lifecycle manager for PLATPHORM_API_KEY.</description>
      <guid isPermaLink="false">keys:phase-1-key-issuer</guid>
    </item>
    <item>
      <title>Self-service provisioning is bounded and shown once</title>
      <link>https://keys.platphormnews.com/faq</link>
      <description>Generated secrets are shown once, rate limited, and never included in discovery outputs.</description>
      <guid isPermaLink="false">keys:provisioning-policy</guid>
    </item>
    <item>
      <title>OpenAPI documents PLATPHORM_API_KEY lifecycle auth</title>
      <link>https://keys.platphormnews.com/docs</link>
      <description>The API reference uses keys.platphormnews.com and describes Bearer [REDACTED] X-PlatPhorm-API-Key auth.</description>
      <guid isPermaLink="false">keys:api-docs-auth-policy</guid>
    </item>
  </channel>
</rss>

infoUNDECLARED_CAPABILITY_OBSERVED

Undeclared robots capability was observed

https://keys.platphormnews.com/robots.txt

GET https://keys.platphormnews.com/robots.txt
HTTP 200
Content-Type: text/plain; charset=utf-8
67 ms
Digest: sha256:d71456177ebf7bc8764a97346bbbb4ce2d1f5d9d97b0c8981791a5f8f6db32f3
Preview: User-Agent: *
Allow: /
Disallow: /api/v1/keys/
Disallow: /api/v1/telemetry/

User-Agent: GPTBot
Allow: /
Disallow: /api/v1/keys/
Disallow: /api/v1/telemetry/

User-Agent: ChatGPT-User
Allow: /
Disallow: /api/v1/keys/
Disallow: /api/v1/telemetry/

User-Agent: ClaudeBot
Allow: /
Disallow: /api/v1/keys/
Disallow: /api/v1/telemetry/

User-Agent: PerplexityBot
Allow: /
Disallow: /api/v1/keys/
Disallow: /api/v1/telemetry/

Host: https://keys.platphormnews.com
Sitemap: https://keys.platphormnews.com/sitemap.xml

infoUNDECLARED_CAPABILITY_OBSERVED

Undeclared trust capability was observed

https://keys.platphormnews.com/.well-known/trust.json

GET https://keys.platphormnews.com/.well-known/trust.json
HTTP 200
Content-Type: application/json
124 ms
Digest: sha256:4b6a4536fc6d6f321601f7affa0b4e8f0bb9d71cd506e6c78b2232f8f406ce68
Preview: {"service":"platphorm-keys","version":"0.5.1","baseUrl":"https://keys.platphormnews.com","publicSafeAccess":true,"authPolicy":{"keyName":"PLATPHORM_API_KEY","requireApiKey":true,"acceptedHeaders":["Authorization: [REDACTED] $PLATPHORM_API_KEY","X-PlatPhorm-API-Key: [REDACTED],"publicSafePhase1":true,"enforcementDefault":true},"issuanceRole":"Protected source of truth for PLATPHORM_API_KEY values across PlatPhormNews platform actions.","keyStoragePolicy":{"rawSecretsStored":false,"oneTimeReveal":true,"storedMaterial":["key hash","AES-256-GCM encrypted material where backend persistence is available","public prefix"]},"keyRotationPolicy":"Rotation generates a new secret for an existing key id and reveals it once to authorized callers.","keyRevocationPolicy":"Revocation disables validation while preserving audit history.","rateLimitPolicy":"Provisioning and validation are bounded by atomic fixed-window counters in same-account DynamoDB. Identifiers are stored only as SHA-256 hashes; storage failure denies closed.","scopes":[{"scope":"read","access":"operator-issued","description":"Read public-safe platform resources."},{"scope":"write","access":"operator-issued","description":"Create or update resources where a service permits writes."},{"scope":"mcp","access":"operator-issued","description":"Use MCP introspection and permitted MCP actions."},{"scope":"trace","access":"operator-issued","description":"Attach trace context and inspect permitted trace links."},{"scope":"admin","access":"protected only","description":"Administrative key-management actions."},{"scope":"sync","access":"protected only","description":"Refresh network/discovery metadata."},{"scope":"report","access":"protected only","description":"Generate Sheets, Docs, and Decks reports."},{"scope":"workflow","access":"protected only","description":"Run remediation/workflow integrations."},{"scope":"site","access":"protected only","description":"Manage site-scoped access."},{"scope":"registry","access":"protected only","description":"Mutate trusted re

infoUNDECLARED_CAPABILITY_OBSERVED

Undeclared agents capability was observed

https://keys.platphormnews.com/.well-known/agents.json

GET https://keys.platphormnews.com/.well-known/agents.json
HTTP 200
Content-Type: application/json
48 ms
Digest: sha256:c9532874170483c250c472453911796b789e0687ab01b8f5c4921f13adc9cfe1
Preview: {"service":"platphorm-keys","version":"0.5.1","baseUrl":"https://keys.platphormnews.com","purpose":"Canonical protected PLATPHORM_API_KEY issuer and lifecycle manager.","agentGuidance":["Use /api/v1/keys/provision with PLATPHORM_API_KEY for bounded key provisioning.","Generated full key secrets are shown once only.","Never store generated full key secrets in client storage, logs, traces, discovery files, or URLs.","Use Authorization: [REDACTED] $PLATPHORM_API_KEY or X-PlatPhorm-API-Key for protected actions.","Use /api/mcp for JSON-RPC 2.0 public introspection and authenticated Keys-specific mutations."]}

infoUNDECLARED_CAPABILITY_OBSERVED

Undeclared manifest capability was observed

https://keys.platphormnews.com/manifest.webmanifest

GET https://keys.platphormnews.com/manifest.webmanifest
HTTP 200
Content-Type: application/manifest+json; charset=utf-8
12 ms
Digest: sha256:3ab5231e9bc9662bef9c54cb293eb6776e384db3716aa81d949d84c25f961641
Preview: {"name":"PlatPhorm Keys","short_name":"Keys","description":"Enterprise-grade API key management with AES-256-GCM encryption, comprehensive audit logging, rate limiting, and OpenTelemetry observability for the PlatPhorm News Network.","start_url":"/","display":"standalone","background_color":"#0a0a0a","theme_color":"#0a0a0a","icons":[{"src":"/icon.svg","sizes":"any","type":"image/svg+xml"}]}

mediumOPENAPI_GET_NOT_OBSERVED

Documented public GET /api/v1/keys was not observed

The safe contract probe returned 401.

GET https://keys.platphormnews.com/api/v1/keys
HTTP 401
Content-Type: application/json
112 ms
Digest: sha256:ffcb924ef200ec19ba98a48e47535f5217fdbd22e7e1d39aba7979871ef702ed
Preview: {"ok":false,"error":{"code":"AUTH_REQUIRED","message":"Authentication required. Provide Authorization: [REDACTED] $PLATPHORM_API_KEY or X-PlatPhorm-API-Key."}}

mediumOPENAPI_GET_NOT_OBSERVED

Documented public GET /api/cron/refresh was not observed

The safe contract probe returned 401.

GET https://keys.platphormnews.com/api/cron/refresh
HTTP 401
Content-Type: application/json
60 ms
Digest: sha256:43f68d8573c3a696196485fc34ecd29109e2519b992f13ea9326d74b6950642d
Preview: {"ok":false,"error":{"code":"AUTH_REQUIRED","message":"Cron refresh requires PLATPHORM_API_KEY or Vercel Cron context."}}

mediumOPENAPI_GET_NOT_OBSERVED

Documented public GET /api/cron/trace-outbox was not observed

The safe contract probe returned 401.

GET https://keys.platphormnews.com/api/cron/trace-outbox
HTTP 401
Content-Type: application/json
42 ms
Digest: sha256:0dc19d0ee52e7508cfdc8d7b73cc6a467673c062dd8767d3e183aef652a484ea
Preview: {"ok":false,"error":{"code":"AUTH_REQUIRED","message":"Trace outbox drain requires PLATPHORM_API_KEY or Vercel Cron context."}}

keys.platphormnews.com

Declared vs observed

Findings and evidence

8 operations lack operationId

MCP manifest endpoint is not a valid URL

2 duplicate RSS GUIDs found

Undeclared robots capability was observed

Undeclared trust capability was observed

Undeclared agents capability was observed

Undeclared manifest capability was observed

Documented public GET /api/v1/keys was not observed

Documented public GET /api/cron/refresh was not observed

Documented public GET /api/cron/trace-outbox was not observed