| URI suffix | Description | Reference | Date of IANA registration |
| acme-challenge | Automated Certificate Management Environment (ACME) | | 2019-03-01 |
| agent-card.json | Details for an A2A Server's Agent Card | | |
| ai-plugin.json | Manifest for a ChatGPT plugin | | |
| apple-app-site-association | An Apple service that enables secure data exchange between iOS and a website | | |
| apple-developer-merchantid-domain-association | Apple Pay | | |
| appspecific | Used by some application to get some informations about the application (e.g chrome devtools: appspecific/com.chrome.devtools.json) | | |
| ashrae | BACnet – A data communication protocol for building automation and control networks | | 2016-01-22 |
| assetlinks.json | AssetLinks protocol used to identify one or more digital assets (such as web sites or mobile apps) that are related to the hosting web site in some fashion | | 2015-09-28 |
| atproto-did | Handle-to-DID resolution for AT Protocol | | |
| autoconfig/mail | Mozilla Thunderbird mail autoconfiguration service | | |
| browserid | Mozilla Persona | | |
| caldav | Calendaring Extensions to WebDAV (CalDAV) and vCard Extensions to WebDAV (CardDAV) | | |
| carddav | Calendaring Extensions to WebDAV (CalDAV) and vCard Extensions to WebDAV (CardDAV) | | |
| change-password | Helps password managers find the URL for changing client account passwords | | |
| coap | CoAP (Constrained Application Protocol) over TCP, TLS, and WebSockets | | 2017-12-22 |
| com.apple.remotemanagement | Apple-Account–based user enrollment for mobile device management | | |
| com.chrome.devtools.json | Automatic Workspace Folders - Chromium DevTools Ecosystem Guide for Web_development_tools | |
| core | Constrained RESTful Environments (CoRE) Link Format | | |
| csvm | CSV metadata, Model for Tabular Data and Metadata on the Web | | 2015-09-28 |
| dat | Links domain to Dat identifier, used by Beaker web browser | | |
| did.json | did:web Decentralized Identifiers (DIDs) for the Web | | |
| discord | Domain verification for Discord account connection | | |
| dnt | Site-wide tracking status resource | | 2015-08-19 |
| dnt-policy.txt | A privacy-friendly Do Not Track (DNT) Policy | | 2015-08-19 |
| est | Enrollment over Secure Transport (EST) | | 2013-08-16 |
| genid | Resource Description Framework (RDF) Skolem IRIs | | 2012-11-15 |
| gpc.json | Global Privacy Control (GPC) | | |
| hoba | HTTP Origin-Bound Authentication (HOBA) | | 2015-01-20 |
| host-meta | Web Host Metadata | | |
| host-meta.json | Web Host Metadata | | |
| http-opportunistic | Opportunistic Security for HTTP/2 | | 2017-03-20 |
| keybase.txt | Used by the Keybase project to identify a proof that one or more people whose public keys may be retrieved using the Keybase service have administrative control over the origin server from which it is retrieved | | 2014-04-08 |
| keyparc | Used by the Bloombase Keyparc project to secure online digital assets using cryptography over web services | | 2012-09-23 |
| matrix | Provides discovery for both client and server APIs to the Matrix federated protocol | | |
| mercure | Discovery of Mercure hubs. Mercure is a protocol enabling the pushing of data updates to web browsers and other HTTP clients in a fast, reliable and battery-efficient way. | | |
| mta-sts.txt | SMTP MTA Strict Transport Security Policy | | 2018-06-21 |
| ni | Naming Things with Hashes | | |
| nodeinfo | for federated social networking servers | | |
| nostr.json | Discovery of Nostr public keys and related relays, according to NIP-05 | | 2024-03-18 |
| oauth-authorization-server | OAuth Authorization Server Metadata | | 2018-03-27 |
| openid-configuration | OpenID Connect | | 2013-08-27 |
| openorg | Organisation Profile Document | | 2015-05-29 |
| openpgpkey | OpenPGP Web Key Service | | |
| org.flathub.VerifiedApps.txt | Verifies that an app is associated with given domain in Flathub | | |
| passkey-endpoints | Formally advertises support for passkeys and provides direct links for enrollment and management for password managers to automatically create/upgrade. | | |
| pki-validation | CA/Browser Forum’s Baseline Requirements Certificate Policy for the Issuance and Management of Publicly-Trusted Certificates | | 2017-02-06 |
| posh | PKIX over Secure HTTP (POSH) | | 2015-09-20 |
| privacy-sandbox-attestations.json | The Google Chrome Privacy Sandbox attestation file | | |
| pubvendors.json | The IAB pubvendors.json tech spec, which provide a standard for publishers to publicly declare the vendors that they work with, and their respective data rights/configuration | | 2020-09-07 |