That's a great thought, I'd need to make some kind of translation between manifests and the json, getting knowledge of those relationships might be tricky?
Service discovery is another route, would hate to get someones IT department angry for aggressive port scanning though lol