Agent Disco check

JSON error bodies for API callers

← Back to all checks

passive · Category API discoverability · Weight 5 · Key api.json_error_body

Requests a random non-existent path with Accept: application/json. Passes when the server returns a JSON error body (application/json or application/problem+json); fails when it returns an HTML 404 page for an API-like caller. The random suffix prevents the check from being gamed by whitelisting a single URL.