A site advertises AIP through public, cacheable documents. None of them contain session tokens or user state.

/.well-known/agent-interface

string
required
Always "AIP".
string
required
Protocol version.
object[]
required
Every agent-enabled page, with absolute url, manifest (TOON) and json URLs, login_required, and browser_connection_required.
string
Human-readable hints for agents on how to obtain a session.

Other entry points

All discovery endpoints accept GET and HEAD only and are served with Cache-Control: public, max-age=60. URLs are built from the request origin.
robots.txt rules are crawler guidance, not authorization.