HonestClaw · What is Agent Readiness? · How we score
Limited. Agents will struggle to discover or use this site without human help.
HonestClaw measured how well cvs.com's site and APIs work for AI agents — across 9 dimensions and 45 automated checks. Score: 29/100 (Limited).
Scanned · scanner v1.63.1 · 3 of 45 checks conclusive.
2 of 8 scored areas have measured gaps. Identity & safeguards is furthest along; Discovery has the largest measured point gap.
75 additional observations provide context and do not affect the score.
Reachable entry points
Could not conclusively sweep conventional subdomains (unreachable or transient).
Unverified points are excluded from the score denominator and reduce observed coverage.
Public pages; interfaces when present
Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
Could not conclusively check for a sitemap (unreachable, rate-limited, or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
Public pages; interfaces when present
Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Could not conclusively check for an API Catalog (endpoint unreachable, rate-limited, or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
Public pages; interfaces when present
Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No DNS-AID index found at _index._agents.cvs.com.
These are recorded points before the total is normalized to 100.
Public pages; interfaces when present
Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
Could not conclusively check for Link headers (endpoints unreachable, rate-limited, or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
Public pages; interfaces when present
Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
Could not conclusively check /.well-known/ descriptors (unreachable, rate-limited, or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
Public pages; interfaces when present
Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
The origin https://cvs.com/ is reachable, but root/www do not converge on one host. Graded from the first bytes of an over-cap homepage (truncated read).
These are recorded points before the total is normalized to 100.
Public pages; interfaces when present
Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Attributable ecosystem discovery
Off-domain evidence
The fetched official MCP Registry search page returned no listing attributable to the scanned company.
Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.
Only the relevant verified distribution surface
An attributable directory entry can help agents discover a supported interface. Popularity, company size and directory count do not establish that the interface works.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Off-domain evidence
The fetched GitHub agent-rules repository search page returned no listing attributable to the scanned company.
Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.
Only the relevant verified distribution surface
An attributable directory entry can help agents discover a supported interface. Popularity, company size and directory count do not establish that the interface works.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Off-domain evidence
The fetched GitHub agent-plugin repository search page returned no listing attributable to the scanned company.
Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.
Only the relevant verified distribution surface
An attributable directory entry can help agents discover a supported interface. Popularity, company size and directory count do not establish that the interface works.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Off-domain evidence
skills.sh returned 6 listing(s) attributable to the company. Presence alone is capped at detected.
Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.
Only the relevant verified distribution surface
An attributable directory entry can help agents discover a supported interface. Popularity, company size and directory count do not establish that the interface works.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Off-domain evidence
6 attributable skills.sh listing(s) expose a named source and install metadata. This records directory metadata, not a claim of editorial quality, and is capped at detected.
Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.
Only the relevant verified distribution surface
An attributable directory entry can help agents discover a supported interface. Popularity, company size and directory count do not establish that the interface works.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Off-domain evidence
The fetched official MCP Registry search page returned no listing attributable to the scanned company.
Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.
Only the relevant verified distribution surface
An attributable directory entry can help agents discover a supported interface. Popularity, company size and directory count do not establish that the interface works.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Off-domain evidence
ChatGPT Plugins Directory page could not be read or returned an invalid response; absence was not inferred.
Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.
Only the relevant verified distribution surface
An attributable directory entry can help agents discover a supported interface. Popularity, company size and directory count do not establish that the interface works.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Commerce distribution
Off-domain evidence
The fetched x402 Bazaar discovery search returned no listing attributable to the scanned company.
Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.
Payment-enabled products
A payment directory is useful context. Making it a general ARS requirement would indirectly score a business-model choice.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Content available to the tested client
Could not assess raw HTML extractability — probed paths returned non-HTML responses.
Unverified points are excluded from the score denominator and reduce observed coverage.
Public pages; distinguish HTTP and browser clients
Critical content available in the response is a direct prerequisite for the tested client. An extraction ratio alone does not prove that the needed facts were captured.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Equivalent readable representations
Could not conclusively check for markdown twins (unreachable, rate-limited, or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
Only representations the site offers; all sites can satisfy readable-content outcome with HTML
Headers, routes and frontmatter support one readable representation. Plain HTML must be able to receive full content-access credit.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Could not conclusively test agent user-agent Markdown serving.
Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.
Only representations the site offers; all sites can satisfy readable-content outcome with HTML
Headers, routes and frontmatter support one readable representation. Plain HTML must be able to receive full content-access credit.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
Could not conclusively check direct Markdown URL fallbacks.
Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.
Only representations the site offers; all sites can satisfy readable-content outcome with HTML
Headers, routes and frontmatter support one readable representation. Plain HTML must be able to receive full content-access credit.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
No reachable candidate HTML page declared a text/markdown alternate.
Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.
Only representations the site offers; all sites can satisfy readable-content outcome with HTML
Headers, routes and frontmatter support one readable representation. Plain HTML must be able to receive full content-access credit.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
Could not conclusively check Markdown negotiation cache variation.
Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.
Only representations the site offers; all sites can satisfy readable-content outcome with HTML
Headers, routes and frontmatter support one readable representation. Plain HTML must be able to receive full content-access credit.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
Could not conclusively check Markdown frontmatter.
Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.
Only representations the site offers; all sites can satisfy readable-content outcome with HTML
Headers, routes and frontmatter support one readable representation. Plain HTML must be able to receive full content-access credit.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
Reachable critical content
The raw homepage was unreachable, truncated, non-HTML, or a JavaScript shell; static crawl depth is inconclusive.
Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.
Sites with linked public content
Bounded path traversal can explain missing content. Absolute clicks from the homepage is not a validated universal quality scale.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Retrieval cost
Could not conclusively estimate crawl cost (unreachable, rate-limited, or behind auth).
Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.
Measured retrieval path
Tokens, bytes and elapsed time explain retrieval cost and tradeoffs. They are context and do not affect the readiness score.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Observed client access
The scanner baseline returned HTTP 0; agent-response comparison would be inconclusive.
A limited scanner observation, not proof of access from real agent infrastructure. It remains unscored until the probe can support that claim.
Named client and network context; publisher-permitted retrieval
Current probes identify as HonestClaw with agent-token markers. They cannot verify real vendor access. A bot-protection vendor name alone is not a failure.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
None of the 5 agent crawler probes passed. ChatGPT-User=429, ClaudeBot=429, Google-Extended=429, PerplexityBot=429, DeepSeekBot=429
A limited scanner observation, not proof of access from real agent infrastructure. It remains unscored until the probe can support that claim.
Named client and network context; publisher-permitted retrieval
Current probes identify as HonestClaw with agent-token markers. They cannot verify real vendor access. A bot-protection vendor name alone is not a failure.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Clear and consistent publisher policy
Could not conclusively check robots.txt for AI-bot rules (unreachable, rate-limited, or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
Published policy for the relevant use: indexing, training or user retrieval
Different policy syntaxes and business permissions are not independent readiness capabilities. Blocking training should not imply that an agent cannot use a public API.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Could not conclusively check for robots.txt (unreachable, rate-limited, or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
Published policy for the relevant use: indexing, training or user retrieval
Different policy syntaxes and business permissions are not independent readiness capabilities. Blocking training should not imply that an agent cannot use a public API.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Could not conclusively check robots.txt for an RSL License directive (unreachable, rate-limited, or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
Published policy for the relevant use: indexing, training or user retrieval
Different policy syntaxes and business permissions are not independent readiness capabilities. Blocking training should not imply that an agent cannot use a public API.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Could not conclusively check robots.txt for Content Signals (unreachable, rate-limited, or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
Published policy for the relevant use: indexing, training or user retrieval
Different policy syntaxes and business permissions are not independent readiness capabilities. Blocking training should not imply that an agent cannot use a public API.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Could not conclusively check for an ai.txt file (endpoints unreachable, rate-limited, or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
Published policy for the relevant use: indexing, training or user retrieval
Different policy syntaxes and business permissions are not independent readiness capabilities. Blocking training should not imply that an agent cannot use a public API.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Could not conclusively check for a TDMRep policy (unreachable, rate-limited, or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
Published policy for the relevant use: indexing, training or user retrieval
Different policy syntaxes and business permissions are not independent readiness capabilities. Blocking training should not imply that an agent cannot use a public API.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Usable documentation entry and references
Could not conclusively check for an llms.txt file (endpoints unreachable, rate-limited, or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
Public documentation; llms files optional
An index, full text and modular files offer different routes to documentation. Useful content and working references matter more than the number of formats.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Could not conclusively check for an llms-full.txt file (endpoints unreachable, rate-limited, or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
Public documentation; llms files optional
An index, full text and modular files offer different routes to documentation. Useful content and working references matter more than the number of formats.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No llms.txt links could be sampled.
Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.
Public documentation; llms files optional
An index, full text and modular files offer different routes to documentation. Useful content and working references matter more than the number of formats.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
No scoped llms.txt was found.
Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.
Public documentation; llms files optional
An index, full text and modular files offer different routes to documentation. Useful content and working references matter more than the number of formats.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
Usable API reference and examples
Could not conclusively check for API reference documentation (endpoints unreachable, rate-limited, or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
A documented API or tool interface
Reference depth and valid fenced examples contribute to the same documentation outcome. Parsing an example is weaker than executing it successfully.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Could not read a candidate Markdown document to audit code fences.
Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.
A documented API or tool interface
Reference depth and valid fenced examples contribute to the same documentation outcome. Parsing an example is weaker than executing it successfully.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
Document freshness evidence
Could not conclusively check freshness signals (unreachable, rate-limited, or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
Resources whose currency can be assessed
A timestamp or ETag supports freshness provenance; it does not by itself prove factual accuracy or current behavior.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Machine-readable facts
Could not conclusively check for a machine-readable pricing endpoint (endpoints unreachable, rate-limited, or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
Facts relevant to the product; pricing only when there is a price to disclose
Structured facts can help agents interpret a page. Markup volume and the number of schema types alone do not establish accuracy, consistency or task success.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Observed 2 JSON-LD script(s); 2 parsed as JSON-LD objects.
Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.
Facts relevant to the product; pricing only when there is a price to disclose
Structured facts can help agents interpret a page. Markup volume and the number of schema types alone do not establish accuracy, consistency or task success.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Observed 0 resolvable identifier(s) and 0 verified entity link(s).
Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.
Facts relevant to the product; pricing only when there is a price to disclose
Structured facts can help agents interpret a page. Markup volume and the number of schema types alone do not establish accuracy, consistency or task success.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Observed 7 Schema.org type(s): action, contactpoint, entrypoint, organization, postaladdress, searchaction, website; 2 meaningfully populated.
Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.
Facts relevant to the product; pricing only when there is a price to disclose
Structured facts can help agents interpret a page. Markup volume and the number of schema types alone do not establish accuracy, consistency or task success.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Usable agent guidance
No usable Agent Skills discovery index was found.
Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.
Only a declared agent-guide surface
Alternative guide files may help agents locate instructions; file presence is supporting evidence and must not be required in every format.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
No v0.2.0 index could be read.
Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.
Only a declared agent-guide surface
Alternative guide files may help agents locate instructions; file presence is supporting evidence and must not be required in every format.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No actionable agent instruction file was found.
Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.
Only a declared agent-guide surface
Alternative guide files may help agents locate instructions; file presence is supporting evidence and must not be required in every format.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
Complete and usable operation contracts
Could not conclusively check for a structured-data contract (endpoints unreachable, rate-limited, or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations
Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Could not conclusively check for data export or bulk API documentation (endpoints unreachable, rate-limited, or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations
Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
The shared spec probe could not read a valid OpenAPI/Swagger artifact.
Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.
Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations
Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
The shared spec probe could not read a valid OpenAPI/Swagger artifact.
Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.
Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations
Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
The shared spec probe could not read a valid OpenAPI/Swagger artifact.
Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.
Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations
Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
The shared spec probe could not read a valid OpenAPI/Swagger artifact.
Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.
Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations
Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
The shared spec probe could not read a valid OpenAPI/Swagger artifact.
Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.
Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations
Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
Usable supported interface
Could not conclusively check for an API endpoint (endpoints unreachable, rate-limited, or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
Interface-enabled product; no requirement to implement every protocol
REST, GraphQL, MCP, SDKs and CLIs offer alternative or complementary access paths. The useful choice depends on the task and client; no single format serves every workflow.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Could not conclusively check for an OpenAPI/Swagger specification (endpoints unreachable, rate-limited, or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
Interface-enabled product; no requirement to implement every protocol
REST, GraphQL, MCP, SDKs and CLIs offer alternative or complementary access paths. The useful choice depends on the task and client; no single format serves every workflow.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Could not conclusively discover or check first-party MCP support documentation and likely endpoints.
Unverified points are excluded from the score denominator and reduce observed coverage.
Interface-enabled product; no requirement to implement every protocol
REST, GraphQL, MCP, SDKs and CLIs offer alternative or complementary access paths. The useful choice depends on the task and client; no single format serves every workflow.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Could not conclusively check for SDK or client library documentation (endpoints unreachable, rate-limited, or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
Interface-enabled product; no requirement to implement every protocol
REST, GraphQL, MCP, SDKs and CLIs offer alternative or complementary access paths. The useful choice depends on the task and client; no single format serves every workflow.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Could not conclusively check for GraphQL (endpoints unreachable, rate-limited, or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
Interface-enabled product; no requirement to implement every protocol
REST, GraphQL, MCP, SDKs and CLIs offer alternative or complementary access paths. The useful choice depends on the task and client; no single format serves every workflow.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Could not conclusively check for a command-line tool (endpoints unreachable, rate-limited, or behind auth).
Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.
Interface-enabled product; no requirement to implement every protocol
REST, GraphQL, MCP, SDKs and CLIs offer alternative or complementary access paths. The useful choice depends on the task and client; no single format serves every workflow.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Emerging interface declarations
Could not conclusively check for an A2A Agent Card (endpoints unreachable, rate-limited, or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
Only a positively identified matching protocol
Versioned interface declarations are observable signals. Broad adoption and cross-client utility are not established by declaration presence.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Could not conclusively check for an MCP Server Card (endpoints unreachable, rate-limited, or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
Only a positively identified matching protocol
Versioned interface declarations are observable signals. Broad adoption and cross-client utility are not established by declaration presence.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
WebMCP browser probing is not yet available in this scanner release.
An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.
Only a positively identified matching protocol
Versioned interface declarations are observable signals. Broad adoption and cross-client utility are not established by declaration presence.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
MCP discovery evidence
Could not conclusively check for an MCP descriptor (locations unreachable, rate-limited, or behind auth).
Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.
MCP surface
An MCP descriptor helps clients locate a service. This additional observation does not earn separate points for evidence already represented by the scored MCP check.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Additional GraphQL contract evidence
No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response. GraphQL depth probe: No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response.
Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.
GraphQL and relevant operation shape; introspection optional
Additional contract evidence may substantiate an existing capability. Disabled production introspection must not create a penalty.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response. GraphQL depth probe: No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response.
Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.
GraphQL and relevant operation shape; introspection optional
Additional contract evidence may substantiate an existing capability. Disabled production introspection must not create a penalty.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response. GraphQL depth probe: No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response.
Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.
GraphQL and relevant operation shape; introspection optional
Additional contract evidence may substantiate an existing capability. Disabled production introspection must not create a penalty.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response. GraphQL depth probe: No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response.
Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.
GraphQL and relevant operation shape; introspection optional
Additional contract evidence may substantiate an existing capability. Disabled production introspection must not create a penalty.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
Usable MCP tools and resources
MCP tool listing could not be checked because endpoint discovery was incomplete. Live MCP probe: 9453 ms, 0 protocol request(s).
Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.
Detected MCP server and advertised tool/resource capability
Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
MCP tool naming could not be checked because endpoint discovery was incomplete. Live MCP probe: 9453 ms, 0 protocol request(s).
Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.
Detected MCP server and advertised tool/resource capability
Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
MCP tool descriptions could not be checked because endpoint discovery was incomplete. Live MCP probe: 9453 ms, 0 protocol request(s).
Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.
Detected MCP server and advertised tool/resource capability
Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
MCP tool annotations could not be checked because endpoint discovery was incomplete. Live MCP probe: 9453 ms, 0 protocol request(s).
Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.
Detected MCP server and advertised tool/resource capability
Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
MCP parameter schemas could not be checked because endpoint discovery was incomplete. Live MCP probe: 9453 ms, 0 protocol request(s).
Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.
Detected MCP server and advertised tool/resource capability
Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
MCP resource listing could not be checked because endpoint discovery was incomplete. Live MCP probe: 9453 ms, 0 protocol request(s).
Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.
Detected MCP server and advertised tool/resource capability
Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
MCP resource quality could not be checked because endpoint discovery was incomplete. Live MCP probe: 9453 ms, 0 protocol request(s).
Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.
Detected MCP server and advertised tool/resource capability
Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
Endpoint discovery was incomplete. Live MCP probe: 9453 ms, 0 protocol request(s).
Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.
Detected MCP server and advertised tool/resource capability
Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
Compatible MCP transport
MCP transport modernity could not be checked because endpoint discovery was incomplete. Live MCP probe: 9453 ms, 0 protocol request(s).
Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.
Detected MCP transport and negotiated version
A compatible negotiated protocol version helps clients and servers communicate. An older supported transport can still be usable.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
MCP application UI
MCP Apps could not be checked because endpoint discovery was incomplete. This metadata-only check did not call tools or read app resources.
An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.
Detected application UI surface
An embedded interface can support interactive workflows. Many tools work without a user interface, so its absence is not a general readiness failure.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
MCP Apps could not be checked because endpoint discovery was incomplete. This metadata-only check did not call tools or read app resources.
An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.
Detected application UI surface
An embedded interface can support interactive workflows. Many tools work without a user interface, so its absence is not a general readiness failure.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
MCP Apps could not be checked because endpoint discovery was incomplete. This metadata-only check did not call tools or read app resources.
An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.
Detected application UI surface
An embedded interface can support interactive workflows. Many tools work without a user interface, so its absence is not a general readiness failure.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
Payment capabilities
Could not conclusively inspect published API specifications for Agentic Commerce Protocol checkout support.
Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.
Payment-enabled business model
Payment support describes what the business offers. It must not make a research publication or free public service appear less ready.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Could not conclusively inspect published API specifications for ACP delegated-payment support.
Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.
Payment-enabled business model
Payment support describes what the business offers. It must not make a research publication or free public service appear less ready.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Could not conclusively inspect the UCP profile and published API specifications for AP2.
Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.
Payment-enabled business model
Payment support describes what the business offers. It must not make a research publication or free public service appear less ready.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
The UCP discovery location could not be checked conclusively.
Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.
Payment-enabled business model
Payment support describes what the business offers. It must not make a research publication or free public service appear less ready.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No machine-payment signal observed (no HTTP 402, no payment-required response header, and no /.well-known/x402.json manifest). Payment support cannot be ruled out from an unauthenticated probe.
Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.
Payment-enabled business model
Payment support describes what the business offers. It must not make a research publication or free public service appear less ready.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
NLWeb support
An NLWeb /ask operation could not be checked conclusively across the shared OpenAPI discovery surface.
An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.
Detected NLWeb service
Useful protocol observations; optional implementation is not universal readiness.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
NLWeb streaming support could not be checked conclusively across the shared OpenAPI discovery surface.
An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.
Detected NLWeb service
Useful protocol observations; optional implementation is not universal readiness.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
The robots.txt SchemaMap discovery surface could not be checked conclusively.
An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.
Detected NLWeb service
Useful protocol observations; optional implementation is not universal readiness.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
Usable least-privilege authentication
Could not conclusively check for an auth-discovery surface (unreachable, rate-limited, or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
Protected operations; anonymous access is valid when intended
Discovery, documentation and credential lifecycle jointly support a usable authorization flow. A public read-only service need not require OAuth.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
Could not conclusively check for programmatic authentication documentation (endpoints unreachable, rate-limited, or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
Protected operations; anonymous access is valid when intended
Discovery, documentation and credential lifecycle jointly support a usable authorization flow. A public read-only service need not require OAuth.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Could not conclusively check for authentication documentation (endpoints unreachable, rate-limited, or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
Protected operations; anonymous access is valid when intended
Discovery, documentation and credential lifecycle jointly support a usable authorization flow. A public read-only service need not require OAuth.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Could not conclusively check for credential management documentation (endpoints unreachable, rate-limited, or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
Protected operations; anonymous access is valid when intended
Discovery, documentation and credential lifecycle jointly support a usable authorization flow. A public read-only service need not require OAuth.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Safe integration environment
Could not conclusively check for sandbox or test environment documentation (endpoints unreachable, rate-limited, or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
Operations whose side effects or onboarding require a safe test environment
A sandbox helps validate consequential integrations; it is not necessary for every public content site or read-only API.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
MCP authorization evidence
MCP authentication mechanism could not be checked because endpoint discovery was incomplete. Live MCP probe: 9453 ms, 0 protocol request(s).
Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.
Protected HTTP MCP; OAuth/PKCE only for applicable flow
Authentication metadata and challenges help clients understand how to obtain access. Observing a declaration does not prove that credentials can be issued or used successfully.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
MCP OAuth metadata could not be checked because endpoint discovery was incomplete. Live MCP probe: 9453 ms, 0 protocol request(s).
Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.
Protected HTTP MCP; OAuth/PKCE only for applicable flow
Authentication metadata and challenges help clients understand how to obtain access. Observing a declaration does not prove that credentials can be issued or used successfully.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
MCP PKCE support could not be checked because endpoint discovery was incomplete. Live MCP probe: 9453 ms, 0 protocol request(s).
Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.
Protected HTTP MCP; OAuth/PKCE only for applicable flow
Authentication metadata and challenges help clients understand how to obtain access. Observing a declaration does not prove that credentials can be issued or used successfully.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
Emerging authentication guidance
The root auth.md location could not be checked conclusively.
An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.
Detected emerging authentication scheme
An auth.md file is one possible guide. Reachable metadata and bounded simulation are not proof that credentials can be issued successfully.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
The root auth.md location could not be checked conclusively.
An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.
Detected emerging authentication scheme
An auth.md file is one possible guide. Reachable metadata and bounded simulation are not proof that credentials can be issued successfully.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
The root auth.md location could not be checked conclusively.
An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.
Detected emerging authentication scheme
An auth.md file is one possible guide. Reachable metadata and bounded simulation are not proof that credentials can be issued successfully.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
API challenge headers could not be observed conclusively.
An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.
Detected emerging authentication scheme
An auth.md file is one possible guide. Reachable metadata and bounded simulation are not proof that credentials can be issued successfully.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
The Agent Auth discovery location could not be checked conclusively.
An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.
Detected emerging authentication scheme
An auth.md file is one possible guide. Reachable metadata and bounded simulation are not proof that credentials can be issued successfully.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
The Agent Auth discovery location could not be checked conclusively.
An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.
Detected emerging authentication scheme
An auth.md file is one possible guide. Reachable metadata and bounded simulation are not proof that credentials can be issued successfully.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Change and compatibility information
Could not conclusively check for API versioning (endpoints unreachable, rate-limited, or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
Maintained interface or evolving product
Version identifiers and change records help clients manage compatibility as an interface evolves.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Could not conclusively check for a changelog or release notes (endpoints unreachable, rate-limited, or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
Maintained interface or evolving product
Version identifiers and change records help clients manage compatibility as an interface evolves.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Actionable limits
Could not conclusively check for rate limit documentation (endpoints unreachable, rate-limited, or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
An interface with quotas or throttling
Published limits and response headers help clients pace requests and recover from throttling. They describe related aspects of the same service constraint.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No rate-limit response headers were present.
Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.
An interface with quotas or throttling
Published limits and response headers help clients pace requests and recover from throttling. They describe related aspects of the same service constraint.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Observable outcomes and recovery
Could not conclusively check for webhook or event documentation (endpoints unreachable, rate-limited, or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
Detected interface; idempotency for repeatable writes, webhooks only for event-driven workflows
Observable state and actionable errors help recovery. A status page or error schema does not prove successful repair.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Could not conclusively check for error documentation (endpoints unreachable, rate-limited, or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
Detected interface; idempotency for repeatable writes, webhooks only for event-driven workflows
Observable state and actionable errors help recovery. A status page or error schema does not prove successful repair.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Could not conclusively check for retry or idempotency documentation (endpoints unreachable, rate-limited, or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
Detected interface; idempotency for repeatable writes, webhooks only for event-driven workflows
Observable state and actionable errors help recovery. A status page or error schema does not prove successful repair.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Could not conclusively check for health or status endpoints (unreachable, rate-limited, or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
Detected interface; idempotency for repeatable writes, webhooks only for event-driven workflows
Observable state and actionable errors help recovery. A status page or error schema does not prove successful repair.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
The missing-page probe returned HTTP 429; missing-page behavior is inconclusive.
Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.
Detected interface; idempotency for repeatable writes, webhooks only for event-driven workflows
Observable state and actionable errors help recovery. A status page or error schema does not prove successful repair.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
MCP error handling could not be checked because endpoint discovery was incomplete. Live MCP probe: 9453 ms, 0 protocol request(s).
Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.
Detected interface; idempotency for repeatable writes, webhooks only for event-driven workflows
Observable state and actionable errors help recovery. A status page or error schema does not prove successful repair.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
Additional GraphQL recovery evidence
No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response. GraphQL depth probe: No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response.
Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.
GraphQL service; schema evidence obtainable under permitted scope
GraphQL error definitions and evolution policies help clients recover and manage compatibility. Disabled production introspection does not establish a defect.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response. GraphQL depth probe: No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response.
Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.
GraphQL service; schema evidence obtainable under permitted scope
GraphQL error definitions and evolution policies help clients recover and manage compatibility. Disabled production introspection does not establish a defect.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
Attributable identity and consistent claims
Could not conclusively check for security.txt (unreachable or behind auth).
Unverified points are excluded from the score denominator and reduce observed coverage.
Public company/service identity; MCP identity only for MCP
These establish provenance, disclosure routes and consistency. They cannot certify prompt-injection resistance or safe transactions.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Could not conclusively read org identity signals from the homepage.
Unverified points are excluded from the score denominator and reduce observed coverage.
Public company/service identity; MCP identity only for MCP
These establish provenance, disclosure routes and consistency. They cannot certify prompt-injection resistance or safe transactions.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
Could not conclusively check legal policy pages.
Unverified points are excluded from the score denominator and reduce observed coverage.
Public company/service identity; MCP identity only for MCP
These establish provenance, disclosure routes and consistency. They cannot certify prompt-injection resistance or safe transactions.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
Homepage metadata (canonical, Open Graph, schema) is present and consistent. Graded from the first bytes of an over-cap homepage (truncated read); the full-page metadata grade is capped at this rung.
These are recorded points before the total is normalized to 100.
Public company/service identity; MCP identity only for MCP
These establish provenance, disclosure routes and consistency. They cannot certify prompt-injection resistance or safe transactions.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
MCP server identity could not be checked because endpoint discovery was incomplete. Live MCP probe: 9453 ms, 0 protocol request(s).
Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.
Public company/service identity; MCP identity only for MCP
These establish provenance, disclosure routes and consistency. They cannot certify prompt-injection resistance or safe transactions.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
Application isolation declarations
MCP Apps could not be checked because endpoint discovery was incomplete. This metadata-only check did not call tools or read app resources.
An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.
Detected MCP application UI
Declared origins and CSP are relevant safeguards for an embedded UI, but declarations alone do not establish effective isolation.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
MCP Apps could not be checked because endpoint discovery was incomplete. This metadata-only check did not call tools or read app resources.
An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.
Detected MCP application UI
Declared origins and CSP are relevant safeguards for an embedded UI, but declarations alone do not establish effective isolation.
These sources inform the check. They do not validate our exact point weights.
Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.
No public evidence URL recorded for this check
Agent Comprehension was unavailable for this scan.