Discovery endpoints

These four paths are fixed by specification, so a client can find everything else from them. This page fetches each one and checks the fields a client would go looking for.

Server base URL

Any server, not only this one — but a cross-origin check needs CORS allowed there. These endpoints send Access-Control-Allow-Origin: *.