HonestClaw · What is Agent Readiness? · How we score

instacart.com — Agent Readiness Score 26/100

Limited. Agents will struggle to discover or use this site without human help.

HonestClaw measured how well instacart.com's site and APIs work for AI agents — across 9 dimensions and 45 automated checks. Score: 26/100 (Limited).

Scanned · scanner v1.63.1 · 45 of 45 checks conclusive.

Dimensions

Checks

At a glance

All 8 scored areas have measured gaps. Authentication & credentials is furthest along; Interfaces & data has the largest measured point gap.

Needs a fix
32
conclusive findings
Furthest along
14.6/24 pts
Authentication & credentials
Largest measured gap
36 pts
Interfaces & data · 5/41 pts
Conclusive results
45 conclusive
No unverified checks

75 additional observations provide context and do not affect the score.

Discovery

1.1/18 ptsCan agents find the right entry points? · 7 conclusive · 8 additional

Reachable entry points

sitemap.xml

0/3 ptsNot detected
What we found

Could not conclusively check for a sitemap (unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public pages; interfaces when present

Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

API catalog

0/3 ptsNot detected
What we found

Could not conclusively check for an API Catalog (endpoint unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public pages; interfaces when present

Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

DNS-AID

0/3 ptsNot detected
What we found

No DNS-AID index found at _index._agents.instacart.com.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public pages; interfaces when present

Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Canonical domain

0/2 ptsNot detected
What we found

Could not conclusively reach the root origin (unreachable or transient). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public pages; interfaces when present

Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

.well-known index

0/2 ptsNot detected
What we found

Could not conclusively check /.well-known/ descriptors (unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public pages; interfaces when present

Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Subdomain sweep

1/3 ptsParseable
What we found

An agent-relevant subdomain is live and serves its expected content kind (docs.instacart.com).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public pages; interfaces when present

Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Attributable ecosystem discovery

MCP Registry listing

UnscoredCould not verify

Off-domain evidence

What we found

official MCP Registry search page could not be read or returned an invalid response; absence was not inferred.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Only the relevant verified distribution surface

An attributable directory entry can help agents discover a supported interface. Popularity, company size and directory count do not establish that the interface works.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Agent rules repository

UnscoredNot observed

Off-domain evidence

What we found

The fetched GitHub agent-rules repository search page returned no listing attributable to the scanned company.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Only the relevant verified distribution surface

An attributable directory entry can help agents discover a supported interface. Popularity, company size and directory count do not establish that the interface works.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Agent plugins repository

UnscoredNot observed

Off-domain evidence

What we found

The fetched GitHub agent-plugin repository search page returned no listing attributable to the scanned company.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Only the relevant verified distribution surface

An attributable directory entry can help agents discover a supported interface. Popularity, company size and directory count do not establish that the interface works.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

skills.sh listing

UnscoredObserved

Off-domain evidence

What we found

skills.sh returned 7 listing(s) attributable to the company. Presence alone is capped at detected.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Only the relevant verified distribution surface

An attributable directory entry can help agents discover a supported interface. Popularity, company size and directory count do not establish that the interface works.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

skills.sh listing metadata

UnscoredObserved

Off-domain evidence

What we found

7 attributable skills.sh listing(s) expose a named source and install metadata. This records directory metadata, not a claim of editorial quality, and is capped at detected.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Only the relevant verified distribution surface

An attributable directory entry can help agents discover a supported interface. Popularity, company size and directory count do not establish that the interface works.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Registry branding

UnscoredCould not verify

Off-domain evidence

What we found

official MCP Registry search page could not be read or returned an invalid response; absence was not inferred.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Only the relevant verified distribution surface

An attributable directory entry can help agents discover a supported interface. Popularity, company size and directory count do not establish that the interface works.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

ChatGPT directory listing

UnscoredCould not verify

Off-domain evidence

What we found

ChatGPT Plugins Directory page could not be read or returned an invalid response; absence was not inferred.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Only the relevant verified distribution surface

An attributable directory entry can help agents discover a supported interface. Popularity, company size and directory count do not establish that the interface works.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Commerce distribution

x402 Bazaar listing

UnscoredNot observed

Off-domain evidence

What we found

The fetched x402 Bazaar discovery search returned no listing attributable to the scanned company.

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Payment-enabled products

A payment directory is useful context. Making it a general ARS requirement would indirectly score a business-model choice.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Access & rendering

1.1/11 ptsCan agents read the content? · 2 conclusive · 9 additional

Content available to the tested client

Raw content extractability

0/8 ptsNot detected
What we found

Could not assess raw HTML extractability — probed paths returned non-HTML responses. Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public pages; distinguish HTTP and browser clients

Critical content available in the response is a direct prerequisite for the tested client. An extraction ratio alone does not prove that the needed facts were captured.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Equivalent readable representations

Markdown twin

1/3 ptsParseable
What we found

A markdown twin is published at https://docs.instacart.com/index.md alongside the docs HTML surface (https://docs.instacart.com/).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Only representations the site offers; all sites can satisfy readable-content outcome with HTML

Headers, routes and frontmatter support one readable representation. Plain HTML must be able to receive full content-access credit.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Direct Markdown URL

UnscoredObserved
What we found

A direct Markdown representation is available at https://docs.instacart.com/index.md.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Only representations the site offers; all sites can satisfy readable-content outcome with HTML

Headers, routes and frontmatter support one readable representation. Plain HTML must be able to receive full content-access credit.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Agent user-agent Markdown

UnscoredNot observed
What we found

No reachable candidate page served Markdown to the scanner agent without an Accept header. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Only representations the site offers; all sites can satisfy readable-content outcome with HTML

Headers, routes and frontmatter support one readable representation. Plain HTML must be able to receive full content-access credit.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Markdown negotiation cache safety

UnscoredNot observed
What we found

No reachable candidate page negotiated from HTML to Markdown. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Only representations the site offers; all sites can satisfy readable-content outcome with HTML

Headers, routes and frontmatter support one readable representation. Plain HTML must be able to receive full content-access credit.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Markdown frontmatter

UnscoredNot observed
What we found

No readable Markdown representation began with YAML frontmatter. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Only representations the site offers; all sites can satisfy readable-content outcome with HTML

Headers, routes and frontmatter support one readable representation. Plain HTML must be able to receive full content-access credit.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Reachable critical content

Static content crawl depth

UnscoredNot observed
What we found

The raw homepage was unreachable, truncated, non-HTML, or a JavaScript shell; static crawl depth is inconclusive. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Sites with linked public content

Bounded path traversal can explain missing content. Absolute clicks from the homepage is not a validated universal quality scale.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Retrieval cost

Crawl-cost estimate

UnscoredNot observed
What we found

No crawl-cost signals found (no sitemap URL inventory or Crawl-delay directive). Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Measured retrieval path

Tokens, bytes and elapsed time explain retrieval cost and tradeoffs. They are context and do not affect the readiness score.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Observed client access

Agent crawler reachability

UnscoredNot observed
What we found

Every agent crawler probe was unreachable. ChatGPT-User=0, ClaudeBot=0, Google-Extended=0, PerplexityBot=0, DeepSeekBot=0 Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

A limited scanner observation, not proof of access from real agent infrastructure. It remains unscored until the probe can support that claim.

When this matters

Named client and network context; publisher-permitted retrieval

Current probes identify as HonestClaw with agent-token markers. They cannot verify real vendor access. A bot-protection vendor name alone is not a failure.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Agent bot-challenge handling

UnscoredNot observed
What we found

The scanner baseline returned HTTP 0; agent-response comparison would be inconclusive. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

A limited scanner observation, not proof of access from real agent infrastructure. It remains unscored until the probe can support that claim.

When this matters

Named client and network context; publisher-permitted retrieval

Current probes identify as HonestClaw with agent-token markers. They cannot verify real vendor access. A bot-protection vendor name alone is not a failure.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Permissions & policy

6.1/17 ptsWhat access does the publisher permit? · 6 conclusive · 0 additional

Clear and consistent publisher policy

RSL licensing

0/3 ptsNot detected
What we found

robots.txt is readable but declares no RSL License directive.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Published policy for the relevant use: indexing, training or user retrieval

Different policy syntaxes and business permissions are not independent readiness capabilities. Blocking training should not imply that an agent cannot use a public API.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

ai.txt

0/2 ptsNot detected
What we found

Could not conclusively check for an ai.txt file (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Published policy for the relevant use: indexing, training or user retrieval

Different policy syntaxes and business permissions are not independent readiness capabilities. Blocking training should not imply that an agent cannot use a public API.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Content signals

0/2 ptsNot detected
What we found

robots.txt is readable but declares no Content-Signal line.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Published policy for the relevant use: indexing, training or user retrieval

Different policy syntaxes and business permissions are not independent readiness capabilities. Blocking training should not imply that an agent cannot use a public API.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

TDM reservation

0/2 ptsNot detected
What we found

Could not conclusively check for a TDMRep policy (unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Published policy for the relevant use: indexing, training or user retrieval

Different policy syntaxes and business permissions are not independent readiness capabilities. Blocking training should not imply that an agent cannot use a public API.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

robots.txt

1/3 ptsParseable
What we found

robots.txt at https://instacart.com/robots.txt is a valid robots file (no Sitemap: declared).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Published policy for the relevant use: indexing, training or user retrieval

Different policy syntaxes and business permissions are not independent readiness capabilities. Blocking training should not imply that an agent cannot use a public API.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

AI bot rules

5/5 ptsCross-verified
What we found

robots.txt declares explicit rules for 5 AI bot(s): oai-searchbot, perplexitybot, perplexity-user, chatgpt-user, meta-externalagent.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Published policy for the relevant use: indexing, training or user retrieval

Different policy syntaxes and business permissions are not independent readiness capabilities. Blocking training should not imply that an agent cannot use a public API.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Documentation & meaning

3.5/17 ptsCan agents understand the documentation? · 5 conclusive · 9 additional

Usable API reference and examples

API reference depth

0/5 ptsNot detected
What we found

API reference documentation lacks depth or was not found. Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

A documented API or tool interface

Reference depth and valid fenced examples contribute to the same documentation outcome. Parsing an example is weaker than executing it successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Code fence validity

UnscoredNot observed
What we found

4 discovered Markdown candidate(s) were omitted by the 14-candidate safety cap, so a complete fence audit was not possible. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

A documented API or tool interface

Reference depth and valid fenced examples contribute to the same documentation outcome. Parsing an example is weaker than executing it successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Usable documentation entry and references

llms-full.txt

0/3 ptsNot detected
What we found

Could not conclusively check for an llms-full.txt file (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public documentation; llms files optional

An index, full text and modular files offer different routes to documentation. Useful content and working references matter more than the number of formats.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

llms.txt

3.5/5 ptsUseful
What we found

A curated llms.txt index is published on a non-top subdomain at https://docs.instacart.com/llms.txt: 654 links across 18 sections. Its credit is capped at useful because it is not published on the main domain.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public documentation; llms files optional

An index, full text and modular files offer different routes to documentation. Useful content and working references matter more than the number of formats.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Scoped llms.txt indexes

UnscoredNot observed
What we found

No scoped llms.txt was found. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Public documentation; llms files optional

An index, full text and modular files offer different routes to documentation. Useful content and working references matter more than the number of formats.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Document freshness evidence

Freshness signals

0/3 ptsNot detected
What we found

Could not conclusively check freshness signals (unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Resources whose currency can be assessed

A timestamp or ETag supports freshness provenance; it does not by itself prove factual accuracy or current behavior.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Machine-readable facts

Machine-readable pricing

0/1 ptsNot detected
What we found

Could not conclusively check for a machine-readable pricing endpoint (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Facts relevant to the product; pricing only when there is a price to disclose

Structured facts can help agents interpret a page. Markup volume and the number of schema types alone do not establish accuracy, consistency or task success.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

JSON-LD depth

UnscoredObserved
What we found

Observed 1 JSON-LD script(s); 1 parsed as JSON-LD objects.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Facts relevant to the product; pricing only when there is a price to disclose

Structured facts can help agents interpret a page. Markup volume and the number of schema types alone do not establish accuracy, consistency or task success.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

JSON-LD entity linking

UnscoredNot observed
What we found

Observed 0 resolvable identifier(s) and 0 verified entity link(s). Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Facts relevant to the product; pricing only when there is a price to disclose

Structured facts can help agents interpret a page. Markup volume and the number of schema types alone do not establish accuracy, consistency or task success.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Schema.org type breadth

UnscoredObserved
What we found

Observed 2 Schema.org type(s): breadcrumblist, listitem; 1 meaningfully populated.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Facts relevant to the product; pricing only when there is a price to disclose

Structured facts can help agents interpret a page. Markup volume and the number of schema types alone do not establish accuracy, consistency or task success.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Usable agent guidance

Agent discovery index

UnscoredNot observed
What we found

No usable Agent Skills discovery index was found. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Only a declared agent-guide surface

Alternative guide files may help agents locate instructions; file presence is supporting evidence and must not be required in every format.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Agent usage instructions

UnscoredNot observed
What we found

No actionable agent instruction file was found. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Only a declared agent-guide surface

Alternative guide files may help agents locate instructions; file presence is supporting evidence and must not be required in every format.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Agent Skills index v0.2

UnscoredNot observed
What we found

No v0.2.0 index could be read. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Only a declared agent-guide surface

Alternative guide files may help agents locate instructions; file presence is supporting evidence and must not be required in every format.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Interfaces & data

5/41 ptsWhich interfaces can agents use? · 9 conclusive · 32 additional

Complete and usable operation contracts

Structured data I/O

0/8 ptsNot detected
What we found

Could not conclusively check for a structured-data contract (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations

Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Data export API

0/4 ptsNot detected
What we found

No data export or bulk API documentation found at the standard docs locations an agent would check. Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations

Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

REST pagination shape

UnscoredNot observed
What we found

The shared spec probe could not read a valid OpenAPI/Swagger artifact. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations

Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

REST async-job pattern

UnscoredNot observed
What we found

The shared spec probe could not read a valid OpenAPI/Swagger artifact. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations

Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

REST batch endpoints

UnscoredNot observed
What we found

The shared spec probe could not read a valid OpenAPI/Swagger artifact. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations

Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Function-calling compatibility

UnscoredNot observed
What we found

The shared spec probe could not read a valid OpenAPI/Swagger artifact. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations

Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Parameter constraint coverage

UnscoredNot observed
What we found

The shared spec probe could not read a valid OpenAPI/Swagger artifact. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations

Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Usable supported interface

API existence

0/5 ptsNot detected
What we found

Could not conclusively check for an API endpoint (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Interface-enabled product; no requirement to implement every protocol

REST, GraphQL, MCP, SDKs and CLIs offer alternative or complementary access paths. The useful choice depends on the task and client; no single format serves every workflow.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

OpenAPI specification

0/5 ptsNot detected
What we found

Could not conclusively check for an OpenAPI/Swagger specification (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Interface-enabled product; no requirement to implement every protocol

REST, GraphQL, MCP, SDKs and CLIs offer alternative or complementary access paths. The useful choice depends on the task and client; no single format serves every workflow.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

SDK availability

0/5 ptsNot detected
What we found

No SDK or client library documentation found. Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Interface-enabled product; no requirement to implement every protocol

REST, GraphQL, MCP, SDKs and CLIs offer alternative or complementary access paths. The useful choice depends on the task and client; no single format serves every workflow.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

GraphQL surface

0/3 ptsNot detected
What we found

Could not conclusively check for GraphQL (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Interface-enabled product; no requirement to implement every protocol

REST, GraphQL, MCP, SDKs and CLIs offer alternative or complementary access paths. The useful choice depends on the task and client; no single format serves every workflow.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

MCP support

5/5 ptsCross-verified
What we found

First-party documentation at https://docs.instacart.com/developer_platform_api/guide/tutorials/mcp identifies the MCP endpoint https://mcp.instacart.com/mcp and explains both its capabilities and how clients connect or authenticate.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Interface-enabled product; no requirement to implement every protocol

REST, GraphQL, MCP, SDKs and CLIs offer alternative or complementary access paths. The useful choice depends on the task and client; no single format serves every workflow.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

CLI availability

UnscoredNot observed
What we found

No command-line tool was mentioned on any page checked. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Interface-enabled product; no requirement to implement every protocol

REST, GraphQL, MCP, SDKs and CLIs offer alternative or complementary access paths. The useful choice depends on the task and client; no single format serves every workflow.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Emerging interface declarations

MCP Server Card

0/3 ptsNot detected
What we found

Could not conclusively check for an MCP Server Card (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Only a positively identified matching protocol

Versioned interface declarations are observable signals. Broad adoption and cross-client utility are not established by declaration presence.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

A2A Agent Card

0/3 ptsNot detected
What we found

Could not conclusively check for an A2A Agent Card (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Only a positively identified matching protocol

Versioned interface declarations are observable signals. Broad adoption and cross-client utility are not established by declaration presence.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

WebMCP

UnscoredCould not verify
What we found

WebMCP browser probing is not yet available in this scanner release.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Only a positively identified matching protocol

Versioned interface declarations are observable signals. Broad adoption and cross-client utility are not established by declaration presence.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

MCP discovery evidence

MCP descriptor

UnscoredNot observed
What we found

Could not conclusively check for an MCP descriptor (locations unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

MCP surface

An MCP descriptor helps clients locate a service. This additional observation does not earn separate points for evidence already represented by the scored MCP check.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Additional GraphQL contract evidence

GraphQL schema completeness

UnscoredCould not verify
What we found

No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response. GraphQL depth probe: No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response. Blocked by robots.txt for a generic compliant agent (Disallow: /). This protocol's availability cannot be inferred from crawler policy.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

GraphQL and relevant operation shape; introspection optional

Additional contract evidence may substantiate an existing capability. Disabled production introspection must not create a penalty.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

GraphQL pagination

UnscoredNot observed
What we found

No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response. GraphQL depth probe: No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

GraphQL and relevant operation shape; introspection optional

Additional contract evidence may substantiate an existing capability. Disabled production introspection must not create a penalty.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

GraphQL batch mutations

UnscoredNot observed
What we found

No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response. GraphQL depth probe: No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

GraphQL and relevant operation shape; introspection optional

Additional contract evidence may substantiate an existing capability. Disabled production introspection must not create a penalty.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

GraphQL async job patterns

UnscoredNot observed
What we found

No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response. GraphQL depth probe: No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

GraphQL and relevant operation shape; introspection optional

Additional contract evidence may substantiate an existing capability. Disabled production introspection must not create a penalty.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Usable MCP tools and resources

MCP tool listing

UnscoredObserved
What we found

The server returned 2 tools in a valid list. Summary: weakest conclusive server; 1/1 declared endpoint(s) produced evidence, and every endpoint is reported separately. Live MCP probe: 4724 ms, 5 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://mcp.instacart.com/mcp: The server returned 2 tools in a valid list. (Observed)

MCP tool naming

UnscoredObserved
What we found

All 2 tool names are non-empty, machine-safe, and unique. Summary: weakest conclusive server; 1/1 declared endpoint(s) produced evidence, and every endpoint is reported separately. Live MCP probe: 4724 ms, 5 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://mcp.instacart.com/mcp: All 2 tool names are non-empty, machine-safe, and unique. (Observed)

MCP tool descriptions

UnscoredObserved
What we found

All 2 tools have descriptions. Summary: weakest conclusive server; 1/1 declared endpoint(s) produced evidence, and every endpoint is reported separately. Live MCP probe: 4724 ms, 5 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://mcp.instacart.com/mcp: All 2 tools have descriptions. (Observed)

MCP tool annotations

UnscoredNot observed
What we found

No listed tool carries behavior annotations. Summary: weakest conclusive server; 1/1 declared endpoint(s) produced evidence, and every endpoint is reported separately. Live MCP probe: 4724 ms, 5 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://mcp.instacart.com/mcp: No listed tool carries behavior annotations. (Not observed)

MCP parameter schemas

UnscoredObserved
What we found

All 2 tools publish usable object parameter schemas. Summary: weakest conclusive server; 1/1 declared endpoint(s) produced evidence, and every endpoint is reported separately. Live MCP probe: 4724 ms, 5 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://mcp.instacart.com/mcp: All 2 tools publish usable object parameter schemas. (Observed)

MCP resource listing

UnscoredNot observed
What we found

The server did not advertise resource support. Summary: weakest conclusive server; 1/1 declared endpoint(s) produced evidence, and every endpoint is reported separately. Live MCP probe: 4724 ms, 5 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://mcp.instacart.com/mcp: The server did not advertise resource support. (Not observed)

MCP resource quality

UnscoredNot observed
What we found

No resources are exposed. Summary: weakest conclusive server; 1/1 declared endpoint(s) produced evidence, and every endpoint is reported separately. Live MCP probe: 4724 ms, 5 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://mcp.instacart.com/mcp: No resources are exposed. (Not observed)

MCP multi-surface coverage

UnscoredObserved
What we found

One MCP surface was declared; 1 completed a live session. Live MCP probe: 4724 ms, 5 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://mcp.instacart.com/mcp: This declared MCP surface completed a live metadata session. (Observed)

Compatible MCP transport

MCP transport version

UnscoredObserved
What we found

The server uses Streamable HTTP with the legacy initialize handshake (2024-11-05). Summary: weakest conclusive server; 1/1 declared endpoint(s) produced evidence, and every endpoint is reported separately. Live MCP probe: 4724 ms, 5 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP transport and negotiated version

A compatible negotiated protocol version helps clients and servers communicate. An older supported transport can still be usable.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://mcp.instacart.com/mcp: The server uses Streamable HTTP with the legacy initialize handshake (2024-11-05). (Observed)

MCP application UI

A2UI over MCP

UnscoredCould not verify
What we found

No adoption signal was detected, but endpoint discovery was incomplete or at least one declared MCP endpoint lacked readable list metadata, so site-level absence is unmeasurable. This metadata-only check did not call tools or read app resources.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected application UI surface

An embedded interface can support interactive workflows. Many tools work without a user interface, so its absence is not a general readiness failure.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://mcp.instacart.com/mcp: No listed MCP tool or resource declares A2UI. (Not observed)

MCP App registration

UnscoredCould not verify
What we found

No adoption signal was detected, but endpoint discovery was incomplete or at least one declared MCP endpoint lacked readable list metadata, so site-level absence is unmeasurable. This metadata-only check did not call tools or read app resources.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected application UI surface

An embedded interface can support interactive workflows. Many tools work without a user interface, so its absence is not a general readiness failure.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://mcp.instacart.com/mcp: No tool-to-app link or MCP App UI resource was listed. (Not observed)

MCP Apps UI metadata quality

UnscoredCould not verify
What we found

No adoption signal was detected, but endpoint discovery was incomplete or at least one declared MCP endpoint lacked readable list metadata, so site-level absence is unmeasurable. This metadata-only check did not call tools or read app resources.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected application UI surface

An embedded interface can support interactive workflows. Many tools work without a user interface, so its absence is not a general readiness failure.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://mcp.instacart.com/mcp: No app-linked tool has the complete descriptive tool, schema, and matching UI resource metadata checked. (Not observed)

Payment capabilities

Agentic Commerce Protocol

UnscoredCould not verify
What we found

Could not conclusively inspect published API specifications for Agentic Commerce Protocol checkout support. Blocked by robots.txt for a generic compliant agent (Disallow: /). This protocol's availability cannot be inferred from crawler policy.

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Payment-enabled business model

Payment support describes what the business offers. It must not make a research publication or free public service appear less ready.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

ACP delegated payments

UnscoredCould not verify
What we found

Could not conclusively inspect published API specifications for ACP delegated-payment support. Blocked by robots.txt for a generic compliant agent (Disallow: /). This protocol's availability cannot be inferred from crawler policy.

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Payment-enabled business model

Payment support describes what the business offers. It must not make a research publication or free public service appear less ready.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Universal Commerce Protocol

UnscoredCould not verify
What we found

The UCP discovery location could not be checked conclusively. Blocked by robots.txt for a generic compliant agent (Disallow: /). This protocol's availability cannot be inferred from crawler policy.

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Payment-enabled business model

Payment support describes what the business offers. It must not make a research publication or free public service appear less ready.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Agent Payments Protocol

UnscoredCould not verify
What we found

Could not conclusively inspect the UCP profile and published API specifications for AP2. Blocked by robots.txt for a generic compliant agent (Disallow: /). This protocol's availability cannot be inferred from crawler policy.

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Payment-enabled business model

Payment support describes what the business offers. It must not make a research publication or free public service appear less ready.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Machine payments (x402/MPP)

UnscoredNot observed
What we found

No machine-payment signal observed (no HTTP 402, no payment-required response header, and no /.well-known/x402.json manifest). Payment support cannot be ruled out from an unauthenticated probe. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Payment-enabled business model

Payment support describes what the business offers. It must not make a research publication or free public service appear less ready.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

NLWeb support

NLWeb ask endpoint

UnscoredNot observed
What we found

An NLWeb /ask operation was not observed in the bounded shared OpenAPI discovery surface.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected NLWeb service

Useful protocol observations; optional implementation is not universal readiness.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

NLWeb streaming

UnscoredNot observed
What we found

NLWeb streaming support was not observed in the bounded shared OpenAPI discovery surface.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected NLWeb service

Useful protocol observations; optional implementation is not universal readiness.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

NLWeb schema feeds

UnscoredNot observed
What we found

No valid HTTPS SchemaMap directive was found in robots.txt.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected NLWeb service

Useful protocol observations; optional implementation is not universal readiness.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Authentication & credentials

14.6/24 ptsCan agents authenticate and manage credentials? · 5 conclusive · 9 additional

Usable least-privilege authentication

Auth discovery

0/5 ptsNot detected
What we found

Could not conclusively check for an auth-discovery surface (unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Protected operations; anonymous access is valid when intended

Discovery, documentation and credential lifecycle jointly support a usable authorization flow. A public read-only service need not require OAuth.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Credential management

2.8/4 ptsUseful
What we found

Credential management is documented at https://docs.instacart.com/developer_platform_api/api/key-rotation, covering how to rotate or revoke credentials. To reach the top level, it would need rotation, revocation, and scoping/expiry all documented.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Protected operations; anonymous access is valid when intended

Discovery, documentation and credential lifecycle jointly support a usable authorization flow. A public read-only service need not require OAuth.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Programmatic auth flow

5/5 ptsCross-verified
What we found

A programmatic auth flow is fully documented at https://docs.instacart.com/ads/api/authentication, with a non-interactive grant, token endpoint, scopes, and token expiry/refresh.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Protected operations; anonymous access is valid when intended

Discovery, documentation and credential lifecycle jointly support a usable authorization flow. A public read-only service need not require OAuth.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Auth documentation

5/5 ptsCross-verified
What we found

Authentication is fully documented at https://docs.instacart.com/ads/api/authentication, naming complete method(s) and how they are sent, corroborated across surfaces or covering multiple methods.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Protected operations; anonymous access is valid when intended

Discovery, documentation and credential lifecycle jointly support a usable authorization flow. A public read-only service need not require OAuth.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Safe integration environment

Sandbox environment

1.8/5 ptsParseable
What we found

A sandbox/testing page exists at https://docs.instacart.com/connect/sandbox, but it doesn't show how to obtain test credentials or a test base URL.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Operations whose side effects or onboarding require a safe test environment

A sandbox helps validate consequential integrations; it is not necessary for every public content site or read-only API.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

MCP authorization evidence

MCP authentication mechanism

UnscoredNot observed
What we found

The endpoint is publicly readable and advertised no authentication mechanism. Summary: weakest conclusive server; 1/1 declared endpoint(s) produced evidence, and every endpoint is reported separately. Live MCP probe: 4724 ms, 5 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Protected HTTP MCP; OAuth/PKCE only for applicable flow

Authentication metadata and challenges help clients understand how to obtain access. Observing a declaration does not prove that credentials can be issued or used successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://mcp.instacart.com/mcp: The endpoint is publicly readable and advertised no authentication mechanism. (Not observed)

MCP OAuth metadata

UnscoredNot observed
What we found

No OAuth challenge was advertised. Summary: weakest conclusive server; 1/1 declared endpoint(s) produced evidence, and every endpoint is reported separately. Live MCP probe: 4724 ms, 5 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Protected HTTP MCP; OAuth/PKCE only for applicable flow

Authentication metadata and challenges help clients understand how to obtain access. Observing a declaration does not prove that credentials can be issued or used successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://mcp.instacart.com/mcp: No OAuth challenge was advertised. (Not observed)

MCP PKCE S256

UnscoredNot observed
What we found

No discoverable PKCE methods were advertised. Summary: weakest conclusive server; 1/1 declared endpoint(s) produced evidence, and every endpoint is reported separately. Live MCP probe: 4724 ms, 5 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Protected HTTP MCP; OAuth/PKCE only for applicable flow

Authentication metadata and challenges help clients understand how to obtain access. Observing a declaration does not prove that credentials can be issued or used successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://mcp.instacart.com/mcp: No discoverable PKCE methods were advertised. (Not observed)

Emerging authentication guidance

auth.md

UnscoredCould not verify
What we found

The root auth.md location could not be checked conclusively. Blocked by robots.txt for a generic compliant agent (Disallow: /). This protocol's availability cannot be inferred from crawler policy.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected emerging authentication scheme

An auth.md file is one possible guide. Reachable metadata and bounded simulation are not proof that credentials can be issued successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

auth.md structure

UnscoredCould not verify
What we found

The root auth.md location could not be checked conclusively. Blocked by robots.txt for a generic compliant agent (Disallow: /). This protocol's availability cannot be inferred from crawler policy.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected emerging authentication scheme

An auth.md file is one possible guide. Reachable metadata and bounded simulation are not proof that credentials can be issued successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

auth.md walkthrough simulation

UnscoredCould not verify
What we found

The root auth.md location could not be checked conclusively. Blocked by robots.txt for a generic compliant agent (Disallow: /). This protocol's availability cannot be inferred from crawler policy.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected emerging authentication scheme

An auth.md file is one possible guide. Reachable metadata and bounded simulation are not proof that credentials can be issued successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Agent Auth discovery metadata

UnscoredCould not verify
What we found

The Agent Auth discovery location could not be checked conclusively. Blocked by robots.txt for a generic compliant agent (Disallow: /). This protocol's availability cannot be inferred from crawler policy.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected emerging authentication scheme

An auth.md file is one possible guide. Reachable metadata and bounded simulation are not proof that credentials can be issued successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Agent Auth challenge

UnscoredCould not verify
What we found

API challenge headers could not be observed conclusively. Blocked by robots.txt for a generic compliant agent (Disallow: /). This protocol's availability cannot be inferred from crawler policy.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected emerging authentication scheme

An auth.md file is one possible guide. Reachable metadata and bounded simulation are not proof that credentials can be issued successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Agent Auth endpoint reachability

UnscoredCould not verify
What we found

The Agent Auth discovery location could not be checked conclusively. Blocked by robots.txt for a generic compliant agent (Disallow: /). This protocol's availability cannot be inferred from crawler policy.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected emerging authentication scheme

An auth.md file is one possible guide. Reachable metadata and bounded simulation are not proof that credentials can be issued successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Reliability & recovery

12/30 ptsCan agents handle changes and failures? · 7 conclusive · 5 additional

Actionable limits

Rate limit documentation

0/5 ptsNot detected
What we found

No rate limit documentation found at the standard docs locations an agent would check. Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

An interface with quotas or throttling

Published limits and response headers help clients pace requests and recover from throttling. They describe related aspects of the same service constraint.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Rate-limit response headers

UnscoredNot observed
What we found

No confirmed live API response was available for rate-limit header inspection. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

An interface with quotas or throttling

Published limits and response headers help clients pace requests and recover from throttling. They describe related aspects of the same service constraint.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Observable outcomes and recovery

Webhook documentation

0/5 ptsNot detected
What we found

No webhook or event documentation found at the standard docs locations an agent would check. Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Detected interface; idempotency for repeatable writes, webhooks only for event-driven workflows

Observable state and actionable errors help recovery. A status page or error schema does not prove successful repair.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Retry & idempotency

0/3 ptsNot detected
What we found

No retry or idempotency documentation found at the standard docs locations an agent would check. Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Detected interface; idempotency for repeatable writes, webhooks only for event-driven workflows

Observable state and actionable errors help recovery. A status page or error schema does not prove successful repair.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Status & health endpoints

0/2 ptsNot detected
What we found

Could not conclusively check for health or status endpoints (unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Detected interface; idempotency for repeatable writes, webhooks only for event-driven workflows

Observable state and actionable errors help recovery. A status page or error schema does not prove successful repair.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Error documentation

3.5/5 ptsUseful
What we found

Errors are documented at https://docs.instacart.com/ads/error_and_status_codes with specific codes or a documented response shape. To reach the top level, it would need recovery guidance and a machine-readable error format, or corroboration against the API spec.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Detected interface; idempotency for repeatable writes, webhooks only for event-driven workflows

Observable state and actionable errors help recovery. A status page or error schema does not prove successful repair.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Agent-friendly 404s

UnscoredNot observed
What we found

The missing-page probe returned HTTP 0; missing-page behavior is inconclusive. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Detected interface; idempotency for repeatable writes, webhooks only for event-driven workflows

Observable state and actionable errors help recovery. A status page or error schema does not prove successful repair.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

MCP error handling

UnscoredObserved
What we found

The server returned the standard JSON-RPC method-not-found error (-32601). Summary: weakest conclusive server; 1/1 declared endpoint(s) produced evidence, and every endpoint is reported separately. Live MCP probe: 4724 ms, 5 protocol request(s).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Detected interface; idempotency for repeatable writes, webhooks only for event-driven workflows

Observable state and actionable errors help recovery. A status page or error schema does not prove successful repair.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://mcp.instacart.com/mcp: The server returned the standard JSON-RPC method-not-found error (-32601). (Observed)

Change and compatibility information

API versioning

3.5/5 ptsUseful
What we found

API versioning is documented at https://docusaurus.io/docs/versioning (the versioning scheme). To reach the top level, it would need a documented deprecation/sunset lifecycle. (source: docs)

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Maintained interface or evolving product

Version identifiers and change records help clients manage compatibility as an interface evolves.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Changelog presence

5/5 ptsCross-verified
What we found

A changelog is published at https://docs.instacart.com/ads_manager/changelog with multiple recent dated entries, indicating it is actively maintained.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Maintained interface or evolving product

Version identifiers and change records help clients manage compatibility as an interface evolves.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Additional GraphQL recovery evidence

GraphQL error type definitions

UnscoredNot observed
What we found

No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response. GraphQL depth probe: No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

GraphQL service; schema evidence obtainable under permitted scope

GraphQL error definitions and evolution policies help clients recover and manage compatibility. Disabled production introspection does not establish a defect.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

GraphQL versioning policy

UnscoredNot observed
What we found

No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response. GraphQL depth probe: No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

GraphQL service; schema evidence obtainable under permitted scope

GraphQL error definitions and evolution policies help clients recover and manage compatibility. Disabled production introspection does not establish a defect.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Identity & safeguards

0/11 ptsCan agents identify the publisher and its safeguards? · 4 conclusive · 3 additional

Attributable identity and consistent claims

security.txt

0/3 ptsNot detected
What we found

Could not conclusively check for security.txt (unreachable or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public company/service identity; MCP identity only for MCP

These establish provenance, disclosure routes and consistency. They cannot certify prompt-injection resistance or safe transactions.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Org identity signals

0/3 ptsNot detected
What we found

Could not conclusively read org identity signals from the homepage. Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public company/service identity; MCP identity only for MCP

These establish provenance, disclosure routes and consistency. They cannot certify prompt-injection resistance or safe transactions.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Metadata consistency

0/3 ptsNot detected
What we found

Could not conclusively assess homepage metadata consistency. Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public company/service identity; MCP identity only for MCP

These establish provenance, disclosure routes and consistency. They cannot certify prompt-injection resistance or safe transactions.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

MCP server identity

UnscoredObserved
What we found

The server identifies itself as InstacartRecipeServer 1.0.0. Summary: weakest conclusive server; 1/1 declared endpoint(s) produced evidence, and every endpoint is reported separately. Live MCP probe: 4724 ms, 5 protocol request(s).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Public company/service identity; MCP identity only for MCP

These establish provenance, disclosure routes and consistency. They cannot certify prompt-injection resistance or safe transactions.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://mcp.instacart.com/mcp: The server identifies itself as InstacartRecipeServer 1.0.0. (Observed)

Application isolation declarations

MCP App content security policy

UnscoredCould not verify
What we found

No adoption signal was detected, but endpoint discovery was incomplete or at least one declared MCP endpoint lacked readable list metadata, so site-level absence is unmeasurable. This metadata-only check did not call tools or read app resources.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected MCP application UI

Declared origins and CSP are relevant safeguards for an embedded UI, but declarations alone do not establish effective isolation.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://mcp.instacart.com/mcp: No listed resource declares MCP Apps CSP metadata. (Not observed)

MCP App rendering domain

UnscoredCould not verify
What we found

No adoption signal was detected, but endpoint discovery was incomplete or at least one declared MCP endpoint lacked readable list metadata, so site-level absence is unmeasurable. This metadata-only check did not call tools or read app resources.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected MCP application UI

Declared origins and CSP are relevant safeguards for an embedded UI, but declarations alone do not establish effective isolation.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence
Per-server results
  • https://mcp.instacart.com/mcp: No listed resource declares MCP Apps rendering-domain metadata. (Not observed)

Agent Comprehension

Agent Comprehension was unavailable for this scan.

Run a full scan of instacart.com