GET /canary.txt

api-reference / v1

Operation projection

Soft agent canary (unauthorized stop / legitimate doors)

Full operation schema

{
  "operationId": "canary",
  "security": [],
  "summary": "Soft agent canary (unauthorized stop / legitimate doors)",
  "responses": {
    "200": {
      "description": "Shared reviewed canary plain text",
      "content": {
        "text/plain": {
          "schema": {
            "type": "string"
          }
        }
      }
    },
    "403": {
      "description": "Host or browser origin refused"
    }
  }
}

Responses

Status-specific responses from the published operation.

HTTP	Definition
200	{"description":"Shared reviewed canary plain text","content":{"text/plain":{"schema":{"type":"string"}}}}
403	{"description":"Host or browser origin refused"}

Authentication and errors

Credentials and runtime policy have distinct owners. The surface uses MCP transport errors; the guard runtime taxonomy is separate.

Authentication ↗
Runtime error taxonomy ↗