---
title: "Openai Apps Challenge"
method: GET
path: "/.well-known/openai-apps-challenge"
tags: ["agent-discovery"]
---

# Openai Apps Challenge

`GET /.well-known/openai-apps-challenge`

## Request

- Base URL: `https://astranl.com`
- URL: `https://astranl.com/.well-known/openai-apps-challenge`
- Auth: none declared

m405: domain-verification token for the OpenAI plugin portal.

The portal issues a token AFTER the founder signs in; only he can obtain it.
So this route serves whatever he drops into runtime/openai/apps-challenge.txt
and 404s honestly until then - never a placeholder, because a fake token
would fail verification while looking done.

## Response `200`

Successful Response

- unknown

---

[API](https://skmtc.dev/astranl/apis/astranl-public-api-positive-allowlist.md) · [All operations](https://skmtc.dev/astranl/apis/astranl-public-api-positive-allowlist/llms.txt) · [OpenAPI document](https://skmtc.dev/astranl/apis/astranl-public-api-positive-allowlist/revisions/5f86bcffe30d?raw)