Personal Agent Protocol draft 0.2 published, draft 0.3 in progress · What changes in poppy.json →
PAP Checker
PAP Checker/Sites/archon.technology
PAP discovery report

archon.technology

Publishes a poppy.json with no problems found. Organization: archon.social.

Publishes poppy.json
0problems
HTTP 200 Version 0.2 Sign-in direct, device Routes APIs Checked 18 hours ago First seen 23 Oct 2026
Open poppy.json ↗
Findings15 passed
Discovery
OK
poppy.json published
Served over HTTPS at /.well-known/poppy.json.
§3
OK
Protocol version 0.2
Checked against the rules of draft 0.2, the version the document declares.
§3.1
OK
organization.domain matches the host that serves it
It must be the host that serves the document, after any redirects, compared ignoring case.
§3.1
Sign-in
OK
OAuth issuer: https://archon.technology/names/poppy
An HTTPS issuer identifier.
§3.1
OK
Sign-in types: direct, device
How a user can sign in through a personal agent.
§4.4
Sign-in server
OK
OAuth server metadata published
Found at the issuer (RFC 8414).
§3.2
OK
issuer matches auth.issuer
Exact match, as agents must check.
§3.2
OK
poppy_domains lists archon.technology
The issuer confirms this domain may use it.
§3.2
OK
DPoP algorithms published: ES256, RS256
dpop_signing_alg_values_supported lists ES256, which every company must accept.
§3.2, §4.3
OK
token_endpoint published
Issues Session and Account Tokens.
§3.2
OK
revocation_endpoint published
Revokes Account Tokens (sign-out).
§3.2
OK
authorization_endpoint published
Starts Direct Sign-In.
§3.2
OK
device_authorization_endpoint published
Starts Device Sign-In.
§3.2
Routes
OK
Offers: APIs
At least one of agent, apis or web is listed.
§3.1
APIs
OK
apis[0]: OpenAPI 3.1.0 description
Reachable, and a version the draft allows (3.0 or 3.1).
§6

poppy.json as served

0.5 KB
{
    "protocol_version": "0.2",
    "organization": {
        "name": "archon.social",
        "domain": "archon.technology"
    },
    "auth": {
        "issuer": "https://archon.technology/names/poppy",
        "direct": {
            "scopes": [
                "poppy:read",
                "poppy:write"
            ]
        },
        "device": {
            "scopes": [
                "poppy:read",
                "poppy:write"
            ]
        }
    },
    "apis": [
        {
            "type": "openapi",
            "url": "https://archon.technology/names/poppy/openapi.json",
            "description": "Look up names and member profiles at archon.technology and resolve DIDs; once signed in, read the User's profile and membership credential and manage their name."
        }
    ]
}

OAuth server metadata as served

1.0 KB
{
    "issuer": "https://archon.technology/names/poppy",
    "token_endpoint": "https://archon.technology/names/poppy/token",
    "revocation_endpoint": "https://archon.technology/names/poppy/revoke",
    "authorization_endpoint": "https://archon.technology/names/poppy/authorize",
    "device_authorization_endpoint": "https://archon.technology/names/poppy/device_authorization",
    "dpop_signing_alg_values_supported": [
        "ES256",
        "RS256"
    ],
    "poppy_domains": [
        "archon.technology"
    ],
    "grant_types_supported": [
        "urn:ietf:params:oauth:grant-type:jwt-bearer",
        "authorization_code",
        "refresh_token",
        "urn:ietf:params:oauth:grant-type:device_code"
    ],
    "response_types_supported": [
        "code"
    ],
    "code_challenge_methods_supported": [
        "S256"
    ],
    "token_endpoint_auth_methods_supported": [
        "private_key_jwt"
    ],
    "token_endpoint_auth_signing_alg_values_supported": [
        "ES256",
        "RS256"
    ],
    "revocation_endpoint_auth_methods_supported": [
        "private_key_jwt"
    ],
    "authorization_response_iss_parameter_supported": true,
    "client_id_metadata_document_supported": true,
    "scopes_supported": [
        "poppy:read",
        "poppy:write"
    ]
}

Each document is checked against the Personal Agent Protocol draft it declares in protocol_version: 0.1, 0.2 or 0.3. Section numbers refer to that draft's specification. Drafts 0.1 and 0.2 are published and frozen; draft 0.3 is in progress, and any draft can change before a stable version; see the path to 1.0.