Agent Readiness Score

2checkout.com

28 — Limited. Agents will struggle to discover or use this site without human help.

42 of 42 checks conclusive · Confidence High · Evidence coverage 100%

HonestClaw measured initial public content available from 2checkout.com to an identified HTTP agent, without browser rendering or login, across 9 dimensions and 42 automated checks. This does not measure access from another agent provider's infrastructure.

Open interactive report →

Open free scan fixes separately

Dimensions

Discoverability8.8/18.1
Content Accessibility4.9/20.1
Bot Access Control1.4/3.8
Protocol & Capability Discovery9.8/39.7
Authentication & Credentials0/19
Documentation Quality6.8/10
Structured Data I/O8/13
Observable State & Reliability1.8/13.2
Agent Safety & Trust0/11

Checks

At a glance

All 8 scored areas have measured gaps. Interfaces & data is furthest along; Authentication & credentials has the largest measured point gap.

Needs a fix
27
conclusive findings
Furthest along
19.5/37.8 pts
Interfaces & data
Largest measured gap
24 pts
Authentication & credentials · 0/24 pts
Conclusive results
42 conclusive
No unverified checks

89 additional observations provide context and do not affect the score.

Discovery

4.3/14 ptsCan agents find the right entry points? · 7 conclusive · 8 additional

Reachable entry points

DNS-AID

0/3 ptsNot detected
What we found

No DNS-AID index found at _index._agents.2checkout.com.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public pages; interfaces when present

Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Subdomain sweep

1/3 ptsParseable
What we found

An agent-relevant subdomain is live and serves its expected content kind (docs.2checkout.com).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public pages; interfaces when present

Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Canonical domain

0.2/2 ptsDetected
What we found

The origin https://2checkout.com/ is reachable, but root/www do not converge on one host.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public pages; interfaces when present

Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

.well-known index

0/0.7 ptsNot detected
What we found

No non-owned /.well-known/ descriptors found.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public pages; interfaces when present

Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

API catalog

0/0.3 ptsNot detected
What we found

No RFC 9727 API Catalog found at /.well-known/api-catalog.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public pages; interfaces when present

Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

sitemap.xml

3/3 ptsCross-verified
What we found

https://www.2checkout.com/docs/sitemap.xml is a dated sitemap whose URLs include docs/pricing/api surfaces.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public pages; interfaces when present

Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Attributable ecosystem discovery

MCP Registry listing

UnscoredNot observed

Off-domain evidence

What we found

The fetched official MCP Registry search page returned no listing attributable to the scanned company.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Only the relevant verified distribution surface

An attributable directory entry can help agents discover a supported interface. Popularity, company size and directory count do not establish that the interface works.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Agent rules repository

UnscoredNot observed

Off-domain evidence

What we found

The fetched GitHub agent-rules repository search page returned no listing attributable to the scanned company.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Only the relevant verified distribution surface

An attributable directory entry can help agents discover a supported interface. Popularity, company size and directory count do not establish that the interface works.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Agent plugins repository

UnscoredNot observed

Off-domain evidence

What we found

The fetched GitHub agent-plugin repository search page returned no listing attributable to the scanned company.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Only the relevant verified distribution surface

An attributable directory entry can help agents discover a supported interface. Popularity, company size and directory count do not establish that the interface works.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

skills.sh listing

UnscoredObserved

Off-domain evidence

What we found

skills.sh returned 3 listing(s) attributable to the company. Presence alone is capped at detected.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Only the relevant verified distribution surface

An attributable directory entry can help agents discover a supported interface. Popularity, company size and directory count do not establish that the interface works.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

skills.sh listing metadata

UnscoredObserved

Off-domain evidence

What we found

3 attributable skills.sh listing(s) expose a named source and install metadata. This records directory metadata, not a claim of editorial quality, and is capped at detected.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Only the relevant verified distribution surface

An attributable directory entry can help agents discover a supported interface. Popularity, company size and directory count do not establish that the interface works.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Registry branding

UnscoredNot observed

Off-domain evidence

What we found

The fetched official MCP Registry search page returned no listing attributable to the scanned company.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Only the relevant verified distribution surface

An attributable directory entry can help agents discover a supported interface. Popularity, company size and directory count do not establish that the interface works.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

ChatGPT directory listing

UnscoredCould not verify

Off-domain evidence

What we found

ChatGPT directory lookup was blocked (HTTP 403). Listing unverified; absence was not inferred. This does not affect your score.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Only the relevant verified distribution surface

An attributable directory entry can help agents discover a supported interface. Popularity, company size and directory count do not establish that the interface works.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Commerce distribution

x402 Bazaar listing

UnscoredNot observed

Off-domain evidence

What we found

The fetched x402 Bazaar discovery search returned no listing attributable to the scanned company.

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Payment-enabled products

A payment directory is useful context. Making it a general ARS requirement would indirectly score a business-model choice.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Access & rendering

1.5/11.9 ptsCan agents read the content? · 3 conclusive · 12 additional

Content available to the tested client

Raw content extractability

0/8 ptsNot detected
What we found

The homepage is a JS-rendered shell with no meaningful content in the initial HTML — content is behind JavaScript.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public pages; distinguish HTTP and browser clients

Critical content available in the response is a direct prerequisite for the tested client. An extraction ratio alone does not prove that the needed facts were captured.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Observed client access

Agent crawler reachability

0.4/2.8 ptsDetected
What we found

3 of 9 completed identified HTTP probes returned substantive initial content across 3 sampled page(s). This is HonestClaw's network observation, not access from vendor infrastructure.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Up to three first-party pages; ChatGPT-User, Claude-User and Perplexity-User token markers on an explicitly identified HonestClaw client

One combined access contribution measures substantive initial content in completed identified HonestClaw HTTP probes. Refusals and incomplete observations remain unknown. This does not establish access from vendor infrastructure.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Agent bot-challenge handling

UnscoredObserved
What we found

3 of 9 completed identified HTTP probes returned substantive initial content across 3 sampled page(s). This is HonestClaw's network observation, not access from vendor infrastructure.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

The same named public HTTP sample and network vantage as the access check

Reuses the scored public HTTP sample to explain denials, challenges and degraded content. The same responses earn no second contribution.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Equivalent readable representations

Markdown twin

1/1.1 ptsParseable
What we found

A markdown twin is published at https://docs.2checkout.com/index.md alongside the docs HTML surface (https://docs.2checkout.com/).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Only representations the site offers; all sites can satisfy readable-content outcome with HTML

Headers, routes and frontmatter support one readable representation. Plain HTML must be able to receive full content-access credit.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Agent user-agent Markdown

UnscoredObserved
What we found

The transparent ClaudeBot-compatibility probe switched the page from HTML to a Markdown-structured text/markdown response without requiring Accept: text/markdown.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Only representations the site offers; all sites can satisfy readable-content outcome with HTML

Headers, routes and frontmatter support one readable representation. Plain HTML must be able to receive full content-access credit.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Markdown negotiation cache safety

UnscoredObserved
What we found

The page switches from HTML to Markdown for Accept: text/markdown and declares Vary: Accept.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Only representations the site offers; all sites can satisfy readable-content outcome with HTML

Headers, routes and frontmatter support one readable representation. Plain HTML must be able to receive full content-access credit.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Direct Markdown URL

UnscoredObserved
What we found

A direct Markdown representation is available at https://docs.2checkout.com/index.md.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Only representations the site offers; all sites can satisfy readable-content outcome with HTML

Headers, routes and frontmatter support one readable representation. Plain HTML must be able to receive full content-access credit.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Markdown frontmatter

UnscoredNot observed
What we found

No readable Markdown representation began with YAML frontmatter.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Only representations the site offers; all sites can satisfy readable-content outcome with HTML

Headers, routes and frontmatter support one readable representation. Plain HTML must be able to receive full content-access credit.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Reachable critical content

Static content crawl depth

UnscoredCould not verify
What we found

The raw homepage was unreachable, truncated, non-HTML, or a JavaScript shell; static crawl depth is inconclusive.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Sites with linked public content

Bounded path traversal can explain missing content. Absolute clicks from the homepage is not a validated universal quality scale.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Retrieval cost

Crawl-cost estimate

UnscoredObserved
What we found

A manageable sitemap (1210 page URLs) helps agents estimate crawl cost.

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Measured retrieval path

Tokens, bytes and elapsed time explain retrieval cost and tradeoffs. They are context and do not affect the readiness score.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Accessibility-tree operability signals

Accessible names

UnscoredCould not verify
What we found

Accessibility-tree probe unavailable (deep_scan_only): Accessibility-tree checks are deep-scan only to avoid always-on browser probe cost.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Deep scans with an available browser accessibility tree snapshot

Accessible names, form labels, document structure and native semantics are direct operability signals for agents acting through accessibility trees. The current reading is deep-scan gated and intentionally unweighted pending calibration.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Document structure

UnscoredCould not verify
What we found

Accessibility-tree probe unavailable (deep_scan_only): Accessibility-tree checks are deep-scan only to avoid always-on browser probe cost.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Deep scans with an available browser accessibility tree snapshot

Accessible names, form labels, document structure and native semantics are direct operability signals for agents acting through accessibility trees. The current reading is deep-scan gated and intentionally unweighted pending calibration.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Form labeling

UnscoredCould not verify
What we found

Accessibility-tree probe unavailable (deep_scan_only): Accessibility-tree checks are deep-scan only to avoid always-on browser probe cost.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Deep scans with an available browser accessibility tree snapshot

Accessible names, form labels, document structure and native semantics are direct operability signals for agents acting through accessibility trees. The current reading is deep-scan gated and intentionally unweighted pending calibration.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Native controls

UnscoredCould not verify
What we found

Accessibility-tree probe unavailable (deep_scan_only): Accessibility-tree checks are deep-scan only to avoid always-on browser probe cost.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Deep scans with an available browser accessibility tree snapshot

Accessible names, form labels, document structure and native semantics are direct operability signals for agents acting through accessibility trees. The current reading is deep-scan gated and intentionally unweighted pending calibration.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Permissions & policy

2.1/4 ptsWhat access does the publisher permit? · 2 conclusive · 4 additional

Clear and consistent publisher policy

robots.txt

1/3 ptsParseable
What we found

robots.txt at https://2checkout.com/robots.txt is a valid robots file (no Sitemap: declared).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Published policy for the relevant use: indexing, training or user retrieval

Different policy syntaxes and business permissions are not independent readiness capabilities. Blocking training should not imply that an agent cannot use a public API.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

AI bot rules

1/1 ptsCross-verified
What we found

Explicit access policy covers 3 of 3 user-directed tokens, including applicable wildcard rules. Allow and deny receive the same legibility credit. Training preferences receive no credit.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

ChatGPT-User, Claude-User and Perplexity-User access declarations

A small legibility contribution for explicit user-directed access rules, including wildcard defaults. Permission and denial earn equal legibility; training-only groups add no points.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Content signals

UnscoredNot observed
What we found

robots.txt is readable but declares no Content-Signal line.

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Publisher-declared policy; no obligation to permit training, indexing or licensing

Published licensing, indexing and training preferences remain inspectable without separate readiness points. User-directed policy legibility is measured once; observed public HTTP access is separate.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

RSL licensing

UnscoredNot observed
What we found

robots.txt is readable but declares no RSL License directive.

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Publisher-declared policy; no obligation to permit training, indexing or licensing

Published licensing, indexing and training preferences remain inspectable without separate readiness points. User-directed policy legibility is measured once; observed public HTTP access is separate.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

TDM reservation

UnscoredNot observed
What we found

No TDMRep policy found at /.well-known/tdmrep.json.

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Publisher-declared policy; no obligation to permit training, indexing or licensing

Published licensing, indexing and training preferences remain inspectable without separate readiness points. User-directed policy legibility is measured once; observed public HTTP access is separate.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

ai.txt

UnscoredNot observed
What we found

No ai.txt file found (HTML pages at .txt paths do not qualify).

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Publisher-declared policy; no obligation to permit training, indexing or licensing

Published licensing, indexing and training preferences remain inspectable without separate readiness points. User-directed policy legibility is measured once; observed public HTTP access is separate.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Documentation & meaning

5.6/17 ptsCan agents understand the documentation? · 5 conclusive · 14 additional

Usable API reference and examples

API reference depth

1.8/5 ptsParseable
What we found

An API reference page exists at https://docs.2checkout.com/api-reference, but it doesn't show parameters with example requests and responses.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

A documented API or tool interface

Reference depth and valid fenced examples contribute to the same documentation outcome. Parsing an example is weaker than executing it successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Code fence validity

UnscoredCould not verify
What we found

4 discovered Markdown candidate(s) were omitted by the 14-candidate safety cap, so a complete fence audit was not possible.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

A documented API or tool interface

Reference depth and valid fenced examples contribute to the same documentation outcome. Parsing an example is weaker than executing it successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Usable documentation entry and references

llms-full.txt

0/3 ptsNot detected
What we found

No llms-full.txt file found (HTML pages at .txt paths do not qualify).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public documentation; llms files optional

An index, full text and modular files offer different routes to documentation. Useful content and working references matter more than the number of formats. This check has no external governing spec; its weight is product judgment.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

llms.txt

3.5/5 ptsUseful
What we found

A curated llms.txt index is published on a non-top subdomain at https://docs.2checkout.com/llms.txt: 1382 links across 28 sections. Its credit is capped at useful because it is not published on the main domain.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public documentation; llms files optional

An index, full text and modular files offer different routes to documentation. Useful content and working references matter more than the number of formats.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Scoped llms.txt indexes

UnscoredCould not verify
What we found

No scoped llms.txt was found.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Public documentation; llms files optional

An index, full text and modular files offer different routes to documentation. Useful content and working references matter more than the number of formats.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Document freshness evidence

Freshness signals

0.3/3 ptsDetected
What we found

Minimal freshness signaling (sitemap lastmod).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Resources whose currency can be assessed

A timestamp or ETag supports freshness provenance; it does not by itself prove factual accuracy or current behavior.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Machine-readable facts

Machine-readable pricing

0/1 ptsNot detected
What we found

No machine-readable pricing endpoint found (HTML pricing pages do not qualify).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Facts relevant to the product; pricing only when there is a price to disclose

Structured facts can help agents interpret a page. Markup volume and the number of schema types alone do not establish accuracy, consistency or task success. This check has no external governing spec; its weight is product judgment.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

JSON-LD depth

UnscoredNot observed
What we found

Observed 0 JSON-LD script(s); 0 parsed as JSON-LD objects.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Facts relevant to the product; pricing only when there is a price to disclose

Structured facts can help agents interpret a page. Markup volume and the number of schema types alone do not establish accuracy, consistency or task success.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

JSON-LD entity linking

UnscoredNot observed
What we found

Observed 0 resolvable identifier(s) and 0 verified entity link(s).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Facts relevant to the product; pricing only when there is a price to disclose

Structured facts can help agents interpret a page. Markup volume and the number of schema types alone do not establish accuracy, consistency or task success.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Schema.org type breadth

UnscoredNot observed
What we found

Observed 0 Schema.org type(s): none; 0 meaningfully populated.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Facts relevant to the product; pricing only when there is a price to disclose

Structured facts can help agents interpret a page. Markup volume and the number of schema types alone do not establish accuracy, consistency or task success.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Usable agent guidance

Agent Skills index v0.2

UnscoredNot observed
What we found

No v0.2.0 index could be read.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Only a declared agent-guide surface

Alternative guide files may help agents locate instructions; file presence is supporting evidence and must not be required in every format.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Agent discovery index

UnscoredNot observed
What we found

No usable Agent Skills discovery index was found.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Only a declared agent-guide surface

Alternative guide files may help agents locate instructions; file presence is supporting evidence and must not be required in every format.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Agent usage instructions

UnscoredNot observed
What we found

No actionable agent instruction file was found.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Only a declared agent-guide surface

Alternative guide files may help agents locate instructions; file presence is supporting evidence and must not be required in every format.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Explicit product purpose

Product purpose

UnscoredNot observed
What we found

No explicit answer matched the documented English extraction rules in the complete bounded initial HTML sample.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

At most six first-party pages under the public HTTP profile; documented English extraction rules. Incomplete or unsupported-language absence is unknown.

A bounded, source-linked answer from non-rendered first-party HTML. It is published source material, not independently verified truth or agent comprehension. Scoring remains staged pending precision, language, overlap and weight calibration.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Explicit intended audience

Intended audience

UnscoredNot observed
What we found

No explicit answer matched the documented English extraction rules in the complete bounded initial HTML sample.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

At most six first-party pages under the public HTTP profile; documented English extraction rules. Incomplete or unsupported-language absence is unknown.

A bounded, source-linked answer from non-rendered first-party HTML. It is published source material, not independently verified truth or agent comprehension. Scoring remains staged pending precision, language, overlap and weight calibration.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Published plan terms

Published plan terms

UnscoredNot observed
What we found

No explicit answer matched the documented English extraction rules in the complete bounded initial HTML sample.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

At most six first-party pages under the public HTTP profile; documented English extraction rules. Incomplete or unsupported-language absence is unknown.

A bounded, source-linked answer from non-rendered first-party HTML. It is published source material, not independently verified truth or agent comprehension. Scoring remains staged pending precision, language, overlap and weight calibration.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Advertised account access

Account access instructions

UnscoredNot observed
What we found

No explicit answer matched the documented English extraction rules in the complete bounded initial HTML sample.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

At most six first-party pages under the public HTTP profile; documented English extraction rules. Incomplete or unsupported-language absence is unknown.

A bounded, source-linked answer from non-rendered first-party HTML. It is published source material, not independently verified truth or agent comprehension. Scoring remains staged pending precision, language, overlap and weight calibration.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Concrete getting-started instructions

Getting-started instructions

UnscoredCould not verify
What we found

The candidate sample was unread, incomplete, outside first-party provenance, or outside supported language rules; absence cannot be established.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

At most six first-party pages under the public HTTP profile; documented English extraction rules. Incomplete or unsupported-language absence is unknown.

A bounded, source-linked answer from non-rendered first-party HTML. It is published source material, not independently verified truth or agent comprehension. Scoring remains staged pending precision, language, overlap and weight calibration.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Interfaces & data

19.5/37.8 ptsWhich interfaces can agents use? · 9 conclusive · 33 additional

Usable supported interface

SDK availability

0/5 ptsNot detected
What we found

No SDK or client library documentation found.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Interface-enabled product; no requirement to implement every protocol

REST, GraphQL, MCP, SDKs and CLIs offer alternative or complementary access paths. The useful choice depends on the task and client; no single format serves every workflow.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

MCP support

1.8/5 ptsParseable
What we found

A first-party MCP support page exists at https://docs.verifone.com/support/connect-this-site-via-mcp, but it does not identify a concrete HTTPS MCP endpoint or fully establish a company-operated service.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Interface-enabled product; no requirement to implement every protocol

REST, GraphQL, MCP, SDKs and CLIs offer alternative or complementary access paths. The useful choice depends on the task and client; no single format serves every workflow.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

GraphQL surface

0/3 ptsNot detected
What we found

No GraphQL transport surface found at conventional paths (GET-only; no introspection issued).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Interface-enabled product; no requirement to implement every protocol

REST, GraphQL, MCP, SDKs and CLIs offer alternative or complementary access paths. The useful choice depends on the task and client; no single format serves every workflow.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

API existence

1.8/1.8 ptsParseable
What we found

A real API surface is declared at https://openapi.gitbook.com/o/uOpE0pwQaikBOHcfkMgY/spec/2checkout.yaml: the spec lists servers and paths. (source: spec)

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Interface-enabled product; no requirement to implement every protocol

REST, GraphQL, MCP, SDKs and CLIs offer alternative or complementary access paths. The useful choice depends on the task and client; no single format serves every workflow.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

OpenAPI specification

5/5 ptsCross-verified
What we found

Valid OpenAPI 3.0.0 spec at https://openapi.gitbook.com/o/uOpE0pwQaikBOHcfkMgY/spec/2checkout.yaml: 211 operations, 445 schemas, 100% response coverage, servers declared.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Interface-enabled product; no requirement to implement every protocol

REST, GraphQL, MCP, SDKs and CLIs offer alternative or complementary access paths. The useful choice depends on the task and client; no single format serves every workflow.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

CLI availability

UnscoredNot observed
What we found

No command-line tool was mentioned on any page checked.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Interface-enabled product; no requirement to implement every protocol

REST, GraphQL, MCP, SDKs and CLIs offer alternative or complementary access paths. The useful choice depends on the task and client; no single format serves every workflow.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Complete and usable operation contracts

Data export API

0/4 ptsNot detected
What we found

No data export or bulk API documentation found at the standard docs locations an agent would check.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations

Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Structured data I/O

8/8 ptsCross-verified
What we found

The spec at https://openapi.gitbook.com/o/uOpE0pwQaikBOHcfkMgY/spec/2checkout.yaml declares typed, consistent response schemas (77% of operations) with a pagination pattern and a structured error envelope. (source: spec)

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations

Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

REST pagination shape

UnscoredObserved
What we found

The spec declares a typed pagination parameter or response continuation field, but not a complete cursor round trip.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations

Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

REST async-job pattern

UnscoredObserved
What we found

The POST /invoices/{OrderReference}/resend/ operation declares 202 Accepted without a poll location or sufficient job-tracking fields.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations

Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

REST batch endpoints

UnscoredObserved
What we found

An operation accepts an array request body, but it is not explicitly identified as batch or bulk.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations

Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Parameter constraint coverage

UnscoredObserved
What we found

2269 parameter/request-body leaves across 211 operation(s): 310 machine-checkable (14%), 240 declare an enum (11%), 1236 carry a description (54%), 823 have neither a constraint nor a description (36%).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations

Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Function-calling compatibility

UnscoredObserved
What we found

32/211 operations have operationIds; some are missing, duplicated, longer than 64 characters, or contain function-unsafe characters.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations

Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Emerging interface declarations

A2A Agent Card

0/3 ptsNot detected
What we found

No A2A Agent Card found at the standard well-known locations.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Only a positively identified matching protocol

Versioned interface declarations are observable signals. Broad adoption and cross-client utility are not established by declaration presence.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

MCP Server Card

3/3 ptsCross-verified
What we found

A fully described MCP Server Card is published at https://docs.2checkout.com/~gitbook/mcp/server-card with identity, version, and protocol-versioned remote endpoints.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Only a positively identified matching protocol

Versioned interface declarations are observable signals. Broad adoption and cross-client utility are not established by declaration presence.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

WebMCP

UnscoredCould not verify
What we found

WebMCP browser probing is not yet available in this scanner release.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Only a positively identified matching protocol

Versioned interface declarations are observable signals. Broad adoption and cross-client utility are not established by declaration presence.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Additional GraphQL contract evidence

GraphQL schema completeness

UnscoredNot observed
What we found

No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response. GraphQL depth probe: No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

GraphQL and relevant operation shape; introspection optional

Additional contract evidence may substantiate an existing capability. Disabled production introspection must not create a penalty.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

GraphQL pagination

UnscoredNot observed
What we found

No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response. GraphQL depth probe: No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

GraphQL and relevant operation shape; introspection optional

Additional contract evidence may substantiate an existing capability. Disabled production introspection must not create a penalty.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

GraphQL batch mutations

UnscoredNot observed
What we found

No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response. GraphQL depth probe: No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

GraphQL and relevant operation shape; introspection optional

Additional contract evidence may substantiate an existing capability. Disabled production introspection must not create a penalty.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

GraphQL async job patterns

UnscoredNot observed
What we found

No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response. GraphQL depth probe: No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

GraphQL and relevant operation shape; introspection optional

Additional contract evidence may substantiate an existing capability. Disabled production introspection must not create a penalty.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP discovery evidence

MCP descriptor

UnscoredNot observed
What we found

No MCP descriptor found at the standard locations an agent would check.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

MCP surface

An MCP descriptor helps clients locate a service. This additional observation does not earn separate points for evidence already represented by the scored MCP check.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Usable MCP tools and resources

MCP parameter constraint form

UnscoredObserved
What we found

7 input leaves across 4 tool(s): 0 machine-checkable (0%), 0 declare an enum (0%), 6 carry a description (86%), 1 have neither a constraint nor a description (14%). Summary: weakest conclusive server; 1/1 declared endpoint(s) produced evidence, and every endpoint is reported separately. Live MCP probe: 4792 ms, 6 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool capability

Machine-checkable constraints on tool inputs let something other than the model enforce them. The reading claims constraint form only, never that a server rejects bad input, and remains unscored pending calibration against the live MCP panel.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://docs.2checkout.com/~gitbook/mcp: 7 input leaves across 4 tool(s): 0 machine-checkable (0%), 0 declare an enum (0%), 6 carry a description (86%), 1 have neither a constraint nor a description (14%). (Observed)

MCP tool listing

UnscoredObserved
What we found

The server returned 4 tools in a valid list. Summary: weakest conclusive server; 1/1 declared endpoint(s) produced evidence, and every endpoint is reported separately. Live MCP probe: 4792 ms, 6 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://docs.2checkout.com/~gitbook/mcp: The server returned 4 tools in a valid list. (Observed)

MCP tool naming

UnscoredObserved
What we found

All 4 tool names are non-empty, machine-safe, and unique. Summary: weakest conclusive server; 1/1 declared endpoint(s) produced evidence, and every endpoint is reported separately. Live MCP probe: 4792 ms, 6 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://docs.2checkout.com/~gitbook/mcp: All 4 tool names are non-empty, machine-safe, and unique. (Observed)

MCP tool descriptions

UnscoredObserved
What we found

All 4 tools have descriptions. Summary: weakest conclusive server; 1/1 declared endpoint(s) produced evidence, and every endpoint is reported separately. Live MCP probe: 4792 ms, 6 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://docs.2checkout.com/~gitbook/mcp: All 4 tools have descriptions. (Observed)

MCP tool annotations

UnscoredObserved
What we found

All 4 tools carry behavior annotations. Summary: weakest conclusive server; 1/1 declared endpoint(s) produced evidence, and every endpoint is reported separately. Live MCP probe: 4792 ms, 6 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://docs.2checkout.com/~gitbook/mcp: All 4 tools carry behavior annotations. (Observed)

MCP parameter schemas

UnscoredObserved
What we found

All 4 tools publish usable object parameter schemas. Summary: weakest conclusive server; 1/1 declared endpoint(s) produced evidence, and every endpoint is reported separately. Live MCP probe: 4792 ms, 6 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://docs.2checkout.com/~gitbook/mcp: All 4 tools publish usable object parameter schemas. (Observed)

MCP resource listing

UnscoredNot observed
What we found

The server did not advertise resource support. Summary: weakest conclusive server; 1/1 declared endpoint(s) produced evidence, and every endpoint is reported separately. Live MCP probe: 4792 ms, 6 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://docs.2checkout.com/~gitbook/mcp: The server did not advertise resource support. (Not observed)

MCP resource quality

UnscoredNot observed
What we found

No resources are exposed. Summary: weakest conclusive server; 1/1 declared endpoint(s) produced evidence, and every endpoint is reported separately. Live MCP probe: 4792 ms, 6 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://docs.2checkout.com/~gitbook/mcp: No resources are exposed. (Not observed)

MCP multi-surface coverage

UnscoredObserved
What we found

One MCP surface was declared; 1 completed a live session. Live MCP probe: 4792 ms, 6 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://docs.2checkout.com/~gitbook/mcp: This declared MCP surface completed a live metadata session. (Observed)

Compatible MCP transport

MCP transport version

UnscoredObserved
What we found

The server uses Streamable HTTP with the legacy initialize handshake (2025-06-18). Summary: weakest conclusive server; 1/1 declared endpoint(s) produced evidence, and every endpoint is reported separately. Live MCP probe: 4792 ms, 6 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP transport and negotiated version

A compatible negotiated protocol version helps clients and servers communicate. An older supported transport can still be usable.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://docs.2checkout.com/~gitbook/mcp: The server uses Streamable HTTP with the legacy initialize handshake (2025-06-18). (Observed)

MCP application UI

A2UI over MCP

UnscoredCould not verify
What we found

No adoption signal was detected, but endpoint discovery was incomplete or at least one declared MCP endpoint lacked readable list metadata, so site-level absence is unmeasurable. This metadata-only check did not call tools or read app resources.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected application UI surface

An embedded interface can support interactive workflows. Many tools work without a user interface, so its absence is not a general readiness failure.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://docs.2checkout.com/~gitbook/mcp: No listed MCP tool or resource declares A2UI. (Not observed)

MCP Apps UI metadata quality

UnscoredCould not verify
What we found

No adoption signal was detected, but endpoint discovery was incomplete or at least one declared MCP endpoint lacked readable list metadata, so site-level absence is unmeasurable. This metadata-only check did not call tools or read app resources.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected application UI surface

An embedded interface can support interactive workflows. Many tools work without a user interface, so its absence is not a general readiness failure.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://docs.2checkout.com/~gitbook/mcp: No app-linked tool has the complete descriptive tool, schema, and matching UI resource metadata checked. (Not observed)

Payment capabilities

Agentic Commerce Protocol

UnscoredCould not verify
What we found

Could not conclusively inspect published API specifications for Agentic Commerce Protocol checkout support.

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Payment-enabled business model

Payment support describes what the business offers. It must not make a research publication or free public service appear less ready.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

ACP delegated payments

UnscoredCould not verify
What we found

Could not conclusively inspect published API specifications for ACP delegated-payment support.

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Payment-enabled business model

Payment support describes what the business offers. It must not make a research publication or free public service appear less ready.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Agent Payments Protocol

UnscoredCould not verify
What we found

Could not conclusively inspect the UCP profile and published API specifications for AP2.

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Payment-enabled business model

Payment support describes what the business offers. It must not make a research publication or free public service appear less ready.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Universal Commerce Protocol

UnscoredNot observed
What we found

No UCP discovery profile was found at /.well-known/ucp.

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Payment-enabled business model

Payment support describes what the business offers. It must not make a research publication or free public service appear less ready.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Machine payments (x402/MPP)

UnscoredCould not verify
What we found

No machine-payment signal observed (no HTTP 402, no payment-required response header, and no /.well-known/x402.json manifest). Payment support cannot be ruled out from an unauthenticated probe.

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Payment-enabled business model

Payment support describes what the business offers. It must not make a research publication or free public service appear less ready.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

NLWeb support

NLWeb ask endpoint

UnscoredCould not verify
What we found

An NLWeb /ask operation could not be checked conclusively across the shared OpenAPI discovery surface.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected NLWeb service

Useful protocol observations; optional implementation is not universal readiness.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

NLWeb streaming

UnscoredCould not verify
What we found

NLWeb streaming support could not be checked conclusively across the shared OpenAPI discovery surface.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected NLWeb service

Useful protocol observations; optional implementation is not universal readiness.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

NLWeb schema feeds

UnscoredNot observed
What we found

No valid HTTPS SchemaMap directive was found in robots.txt.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected NLWeb service

Useful protocol observations; optional implementation is not universal readiness.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Authentication & credentials

0/24 ptsCan agents authenticate and manage credentials? · 5 conclusive · 9 additional

Usable least-privilege authentication

Auth discovery

0/5 ptsNot detected
What we found

No standardized authentication-discovery surface found.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Protected operations; anonymous access is valid when intended

Discovery, documentation and credential lifecycle jointly support a usable authorization flow. A public read-only service need not require OAuth.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Programmatic auth flow

0/5 ptsNot detected
What we found

No programmatic authentication documentation found at the standard docs locations an agent would check.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Protected operations; anonymous access is valid when intended

Discovery, documentation and credential lifecycle jointly support a usable authorization flow. A public read-only service need not require OAuth.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Auth documentation

0/5 ptsNot detected
What we found

No authentication documentation found at the standard docs locations an agent would check.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Protected operations; anonymous access is valid when intended

Discovery, documentation and credential lifecycle jointly support a usable authorization flow. A public read-only service need not require OAuth.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Credential management

0/4 ptsNot detected
What we found

No credential management documentation found at the standard docs locations an agent would check.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Protected operations; anonymous access is valid when intended

Discovery, documentation and credential lifecycle jointly support a usable authorization flow. A public read-only service need not require OAuth.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Safe integration environment

Sandbox environment

0/5 ptsNot detected
What we found

No sandbox or test environment documentation found at the standard docs locations an agent would check.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Operations whose side effects or onboarding require a safe test environment

A sandbox helps validate consequential integrations; it is not necessary for every public content site or read-only API.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

MCP authorization evidence

MCP authentication mechanism

UnscoredNot observed
What we found

The endpoint is publicly readable and advertised no authentication mechanism. Summary: weakest conclusive server; 1/1 declared endpoint(s) produced evidence, and every endpoint is reported separately. Live MCP probe: 4792 ms, 6 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Protected HTTP MCP; OAuth/PKCE only for applicable flow

Authentication metadata and challenges help clients understand how to obtain access. Observing a declaration does not prove that credentials can be issued or used successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://docs.2checkout.com/~gitbook/mcp: The endpoint is publicly readable and advertised no authentication mechanism. (Not observed)

MCP OAuth metadata

UnscoredNot observed
What we found

No OAuth challenge was advertised. Summary: weakest conclusive server; 1/1 declared endpoint(s) produced evidence, and every endpoint is reported separately. Live MCP probe: 4792 ms, 6 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Protected HTTP MCP; OAuth/PKCE only for applicable flow

Authentication metadata and challenges help clients understand how to obtain access. Observing a declaration does not prove that credentials can be issued or used successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://docs.2checkout.com/~gitbook/mcp: No OAuth challenge was advertised. (Not observed)

MCP PKCE S256

UnscoredNot observed
What we found

No discoverable PKCE methods were advertised. Summary: weakest conclusive server; 1/1 declared endpoint(s) produced evidence, and every endpoint is reported separately. Live MCP probe: 4792 ms, 6 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Protected HTTP MCP; OAuth/PKCE only for applicable flow

Authentication metadata and challenges help clients understand how to obtain access. Observing a declaration does not prove that credentials can be issued or used successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://docs.2checkout.com/~gitbook/mcp: No discoverable PKCE methods were advertised. (Not observed)

Emerging authentication guidance

auth.md structure

UnscoredNot observed
What we found

The root auth.md document does not satisfy the structured criteria.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected emerging authentication scheme

An auth.md file is one possible guide. Reachable metadata and bounded simulation are not proof that credentials can be issued successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

auth.md walkthrough simulation

UnscoredNot observed
What we found

The root auth.md document does not satisfy the walkthrough criteria.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected emerging authentication scheme

An auth.md file is one possible guide. Reachable metadata and bounded simulation are not proof that credentials can be issued successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

auth.md

UnscoredNot observed
What we found

The root auth.md document does not satisfy the exists criteria.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected emerging authentication scheme

An auth.md file is one possible guide. Reachable metadata and bounded simulation are not proof that credentials can be issued successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Agent Auth challenge

UnscoredNot observed
What we found

No observed API response advertised an AgentAuth discovery challenge.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected emerging authentication scheme

An auth.md file is one possible guide. Reachable metadata and bounded simulation are not proof that credentials can be issued successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Agent Auth discovery metadata

UnscoredNot observed
What we found

No conforming public Agent Auth discovery document was found.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected emerging authentication scheme

An auth.md file is one possible guide. Reachable metadata and bounded simulation are not proof that credentials can be issued successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Agent Auth endpoint reachability

UnscoredNot observed
What we found

No conforming public Agent Auth discovery document was found.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected emerging authentication scheme

An auth.md file is one possible guide. Reachable metadata and bounded simulation are not proof that credentials can be issued successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Reliability & recovery

8.5/28.2 ptsCan agents handle changes and failures? · 7 conclusive · 5 additional

Actionable limits

Rate limit documentation

0/5 ptsNot detected
What we found

No rate limit documentation found at the standard docs locations an agent would check.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

An interface with quotas or throttling

Published limits and response headers help clients pace requests and recover from throttling. They describe related aspects of the same service constraint.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Rate-limit response headers

UnscoredCould not verify
What we found

No confirmed live API response was available for rate-limit header inspection.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

An interface with quotas or throttling

Published limits and response headers help clients pace requests and recover from throttling. They describe related aspects of the same service constraint.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Observable outcomes and recovery

Error documentation

0/5 ptsNot detected
What we found

No error documentation found at the standard docs locations an agent would check.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Detected interface; idempotency for repeatable writes, webhooks only for event-driven workflows

Observable state and actionable errors help recovery. A status page or error schema does not prove successful repair.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Webhook documentation

1.8/5 ptsParseable
What we found

A webhook documentation page exists at https://docs.2checkout.com/2checkout-apis/2checkout-apis/webhooks, but it doesn't list specific event types with their payload shape.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Detected interface; idempotency for repeatable writes, webhooks only for event-driven workflows

Observable state and actionable errors help recovery. A status page or error schema does not prove successful repair.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Retry & idempotency

0/3 ptsNot detected
What we found

No retry or idempotency documentation found at the standard docs locations an agent would check.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Detected interface; idempotency for repeatable writes, webhooks only for event-driven workflows

Observable state and actionable errors help recovery. A status page or error schema does not prove successful repair.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Status & health endpoints

0/0.2 ptsNot detected
What we found

No health or status endpoint found.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Detected interface; idempotency for repeatable writes, webhooks only for event-driven workflows

Observable state and actionable errors help recovery. A status page or error schema does not prove successful repair.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Agent-friendly 404s

UnscoredNot observed
What we found

The missing path returned HTTP 200 instead of 404 or 410.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Detected interface; idempotency for repeatable writes, webhooks only for event-driven workflows

Observable state and actionable errors help recovery. A status page or error schema does not prove successful repair.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

MCP error handling

UnscoredObserved
What we found

The server returned the standard JSON-RPC method-not-found error (-32601). Summary: weakest conclusive server; 1/1 declared endpoint(s) produced evidence, and every endpoint is reported separately. Live MCP probe: 4792 ms, 6 protocol request(s).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Detected interface; idempotency for repeatable writes, webhooks only for event-driven workflows

Observable state and actionable errors help recovery. A status page or error schema does not prove successful repair.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://docs.2checkout.com/~gitbook/mcp: The server returned the standard JSON-RPC method-not-found error (-32601). (Observed)

Change and compatibility information

API versioning

1.8/5 ptsParseable
What we found

The API version is declared in the spec (info.version) at https://openapi.gitbook.com/o/uOpE0pwQaikBOHcfkMgY/spec/2checkout.yaml. (source: spec)

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Maintained interface or evolving product

Version identifiers and change records help clients manage compatibility as an interface evolves.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Changelog presence

5/5 ptsCross-verified
What we found

A changelog is published at https://docs.2checkout.com/release-notes with multiple recent dated entries, indicating it is actively maintained.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Maintained interface or evolving product

Version identifiers and change records help clients manage compatibility as an interface evolves.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Additional GraphQL recovery evidence

GraphQL error type definitions

UnscoredNot observed
What we found

No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response. GraphQL depth probe: No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

GraphQL service; schema evidence obtainable under permitted scope

GraphQL error definitions and evolution policies help clients recover and manage compatibility. Disabled production introspection does not establish a defect.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

GraphQL versioning policy

UnscoredNot observed
What we found

No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response. GraphQL depth probe: No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

GraphQL service; schema evidence obtainable under permitted scope

GraphQL error definitions and evolution policies help clients recover and manage compatibility. Disabled production introspection does not establish a defect.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Identity & safeguards

0/11 ptsCan agents identify the publisher and its safeguards? · 4 conclusive · 4 additional

Attributable identity and consistent claims

security.txt

0/3 ptsNot detected
What we found

No security.txt found at /.well-known/security.txt or /security.txt.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public company/service identity; MCP identity only for MCP

These establish provenance, disclosure routes and consistency. They cannot certify prompt-injection resistance or safe transactions.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Org identity signals

0/3 ptsNot detected
What we found

No org-identity signals detected on the homepage.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public company/service identity; MCP identity only for MCP

These establish provenance, disclosure routes and consistency. They cannot certify prompt-injection resistance or safe transactions.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Metadata consistency

0/3 ptsNot detected
What we found

Insufficient homepage metadata to assess consistency.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public company/service identity; MCP identity only for MCP

These establish provenance, disclosure routes and consistency. They cannot certify prompt-injection resistance or safe transactions.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

MCP server identity

UnscoredObserved
What we found

The server identifies itself as docs.2checkout.com/~gitbook/mcp 0.28.0. Summary: weakest conclusive server; 1/1 declared endpoint(s) produced evidence, and every endpoint is reported separately. Live MCP probe: 4792 ms, 6 protocol request(s).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Public company/service identity; MCP identity only for MCP

These establish provenance, disclosure routes and consistency. They cannot certify prompt-injection resistance or safe transactions.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://docs.2checkout.com/~gitbook/mcp: The server identifies itself as docs.2checkout.com/~gitbook/mcp 0.28.0. (Observed)

Instruction-safe interaction surfaces

Accessibility-tree injection safety

UnscoredCould not verify
What we found

Accessibility-tree probe unavailable (deep_scan_only): Accessibility-tree checks are deep-scan only to avoid always-on browser probe cost.

Why this is unscored

A limited scanner observation, not proof of access from real agent infrastructure. It remains unscored until the probe can support that claim.

When this matters

Deep scans with an available browser accessibility tree snapshot

Prompt-injection-like instructions in accessibility text are a real manipulation risk for agent operators. This bounded probe can surface risky text but cannot prove complete absence, so it remains unscored.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Application isolation declarations

MCP App content security policy

UnscoredCould not verify
What we found

No adoption signal was detected, but endpoint discovery was incomplete or at least one declared MCP endpoint lacked readable list metadata, so site-level absence is unmeasurable. This metadata-only check did not call tools or read app resources.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected MCP application UI

Declared origins and CSP are relevant safeguards for an embedded UI, but declarations alone do not establish effective isolation.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://docs.2checkout.com/~gitbook/mcp: No listed resource declares MCP Apps CSP metadata. (Not observed)

MCP App rendering domain

UnscoredCould not verify
What we found

No adoption signal was detected, but endpoint discovery was incomplete or at least one declared MCP endpoint lacked readable list metadata, so site-level absence is unmeasurable. This metadata-only check did not call tools or read app resources.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected MCP application UI

Declared origins and CSP are relevant safeguards for an embedded UI, but declarations alone do not establish effective isolation.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://docs.2checkout.com/~gitbook/mcp: No listed resource declares MCP Apps rendering-domain metadata. (Not observed)

Agent Comprehension

Informational — not scored

Agent Comprehension was unavailable for this scan.

Scanned · scanner v1.70.5Measured by HonestClaw