HonestClaw · What is Agent Readiness? · How we score

netflix.com — Agent Readiness Score 4/100

Limited. Agents will struggle to discover or use this site without human help.

HonestClaw measured how well netflix.com's site and APIs work for AI agents — across 9 dimensions and 45 automated checks. Score: 4/100 (Limited).

Scanned · scanner v1.63.1 · 43 of 45 checks conclusive.

Dimensions

Checks

At a glance

All 8 scored areas have measured gaps. Permissions & policy is furthest along; Interfaces & data has the largest measured point gap.

Needs a fix
41
conclusive findings
Furthest along
7.1/17 pts
Permissions & policy
Largest measured gap
36 pts
Interfaces & data · 0/36 pts
Conclusive results
43 conclusive
2 unverified

75 additional observations provide context and do not affect the score.

Discovery

0/15 ptsCan agents find the right entry points? · 6 conclusive · 1 unverified · 8 additional

Reachable entry points

Subdomain sweep

3 pts unverifiedCould not verify
What we found

Could not conclusively sweep conventional subdomains (unreachable or transient).

How this affects the score

Unverified points are excluded from the score denominator and reduce observed coverage.

When this matters

Public pages; interfaces when present

Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

sitemap.xml

0/3 ptsNot detected
What we found

Could not conclusively check for a sitemap (unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public pages; interfaces when present

Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

API catalog

0/3 ptsNot detected
What we found

Could not conclusively check for an API Catalog (endpoint unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public pages; interfaces when present

Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

DNS-AID

0/3 ptsNot detected
What we found

No DNS-AID index found at _index._agents.netflix.com.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public pages; interfaces when present

Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Canonical domain

0/2 ptsNot detected
What we found

Could not conclusively reach the root origin (unreachable or transient). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public pages; interfaces when present

Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

.well-known index

0/2 ptsNot detected
What we found

Could not conclusively check /.well-known/ descriptors (unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public pages; interfaces when present

Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Attributable ecosystem discovery

MCP Registry listing

UnscoredNot observed

Off-domain evidence

What we found

The fetched official MCP Registry search page returned no listing attributable to the scanned company.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Only the relevant verified distribution surface

An attributable directory entry can help agents discover a supported interface. Popularity, company size and directory count do not establish that the interface works.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Agent rules repository

UnscoredNot observed

Off-domain evidence

What we found

The fetched GitHub agent-rules repository search page returned no listing attributable to the scanned company.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Only the relevant verified distribution surface

An attributable directory entry can help agents discover a supported interface. Popularity, company size and directory count do not establish that the interface works.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Agent plugins repository

UnscoredNot observed

Off-domain evidence

What we found

The fetched GitHub agent-plugin repository search page returned no listing attributable to the scanned company.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Only the relevant verified distribution surface

An attributable directory entry can help agents discover a supported interface. Popularity, company size and directory count do not establish that the interface works.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

skills.sh listing

UnscoredObserved

Off-domain evidence

What we found

skills.sh returned 7 listing(s) attributable to the company. Presence alone is capped at detected.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Only the relevant verified distribution surface

An attributable directory entry can help agents discover a supported interface. Popularity, company size and directory count do not establish that the interface works.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

skills.sh listing metadata

UnscoredObserved

Off-domain evidence

What we found

7 attributable skills.sh listing(s) expose a named source and install metadata. This records directory metadata, not a claim of editorial quality, and is capped at detected.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Only the relevant verified distribution surface

An attributable directory entry can help agents discover a supported interface. Popularity, company size and directory count do not establish that the interface works.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Registry branding

UnscoredNot observed

Off-domain evidence

What we found

The fetched official MCP Registry search page returned no listing attributable to the scanned company.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Only the relevant verified distribution surface

An attributable directory entry can help agents discover a supported interface. Popularity, company size and directory count do not establish that the interface works.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

ChatGPT directory listing

UnscoredCould not verify

Off-domain evidence

What we found

ChatGPT Plugins Directory page could not be read or returned an invalid response; absence was not inferred.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Only the relevant verified distribution surface

An attributable directory entry can help agents discover a supported interface. Popularity, company size and directory count do not establish that the interface works.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Commerce distribution

x402 Bazaar listing

UnscoredNot observed

Off-domain evidence

What we found

The fetched x402 Bazaar discovery search returned no listing attributable to the scanned company.

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Payment-enabled products

A payment directory is useful context. Making it a general ARS requirement would indirectly score a business-model choice.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Access & rendering

0/11 ptsCan agents read the content? · 2 conclusive · 9 additional

Content available to the tested client

Raw content extractability

0/8 ptsNot detected
What we found

Could not assess raw HTML extractability — probed paths returned non-HTML responses. Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public pages; distinguish HTTP and browser clients

Critical content available in the response is a direct prerequisite for the tested client. An extraction ratio alone does not prove that the needed facts were captured.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Equivalent readable representations

Markdown twin

0/3 ptsNot detected
What we found

Could not conclusively check for markdown twins (unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Only representations the site offers; all sites can satisfy readable-content outcome with HTML

Headers, routes and frontmatter support one readable representation. Plain HTML must be able to receive full content-access credit.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Agent user-agent Markdown

UnscoredNot observed
What we found

Could not conclusively test agent user-agent Markdown serving. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Only representations the site offers; all sites can satisfy readable-content outcome with HTML

Headers, routes and frontmatter support one readable representation. Plain HTML must be able to receive full content-access credit.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Markdown frontmatter

UnscoredNot observed
What we found

Could not conclusively check Markdown frontmatter. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Only representations the site offers; all sites can satisfy readable-content outcome with HTML

Headers, routes and frontmatter support one readable representation. Plain HTML must be able to receive full content-access credit.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Markdown negotiation cache safety

UnscoredNot observed
What we found

Could not conclusively check Markdown negotiation cache variation. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Only representations the site offers; all sites can satisfy readable-content outcome with HTML

Headers, routes and frontmatter support one readable representation. Plain HTML must be able to receive full content-access credit.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Direct Markdown URL

UnscoredNot observed
What we found

Could not conclusively check direct Markdown URL fallbacks. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Only representations the site offers; all sites can satisfy readable-content outcome with HTML

Headers, routes and frontmatter support one readable representation. Plain HTML must be able to receive full content-access credit.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Reachable critical content

Static content crawl depth

UnscoredNot observed
What we found

The raw homepage was unreachable, truncated, non-HTML, or a JavaScript shell; static crawl depth is inconclusive. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Sites with linked public content

Bounded path traversal can explain missing content. Absolute clicks from the homepage is not a validated universal quality scale.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Retrieval cost

Crawl-cost estimate

UnscoredNot observed
What we found

No crawl-cost signals found (no sitemap URL inventory or Crawl-delay directive). Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Measured retrieval path

Tokens, bytes and elapsed time explain retrieval cost and tradeoffs. They are context and do not affect the readiness score.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Observed client access

Agent bot-challenge handling

UnscoredNot observed
What we found

The scanner baseline returned HTTP 0; agent-response comparison would be inconclusive. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

A limited scanner observation, not proof of access from real agent infrastructure. It remains unscored until the probe can support that claim.

When this matters

Named client and network context; publisher-permitted retrieval

Current probes identify as HonestClaw with agent-token markers. They cannot verify real vendor access. A bot-protection vendor name alone is not a failure.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Agent crawler reachability

UnscoredNot observed
What we found

Every agent crawler probe was unreachable. ChatGPT-User=0, ClaudeBot=0, Google-Extended=0, PerplexityBot=0, DeepSeekBot=0 Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

A limited scanner observation, not proof of access from real agent infrastructure. It remains unscored until the probe can support that claim.

When this matters

Named client and network context; publisher-permitted retrieval

Current probes identify as HonestClaw with agent-token markers. They cannot verify real vendor access. A bot-protection vendor name alone is not a failure.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Permissions & policy

7.1/17 ptsWhat access does the publisher permit? · 6 conclusive · 0 additional

Clear and consistent publisher policy

RSL licensing

0/3 ptsNot detected
What we found

robots.txt is readable but declares no RSL License directive.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Published policy for the relevant use: indexing, training or user retrieval

Different policy syntaxes and business permissions are not independent readiness capabilities. Blocking training should not imply that an agent cannot use a public API.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

ai.txt

0/2 ptsNot detected
What we found

Could not conclusively check for an ai.txt file (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Published policy for the relevant use: indexing, training or user retrieval

Different policy syntaxes and business permissions are not independent readiness capabilities. Blocking training should not imply that an agent cannot use a public API.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Content signals

0/2 ptsNot detected
What we found

robots.txt is readable but declares no Content-Signal line.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Published policy for the relevant use: indexing, training or user retrieval

Different policy syntaxes and business permissions are not independent readiness capabilities. Blocking training should not imply that an agent cannot use a public API.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

TDM reservation

0/2 ptsNot detected
What we found

Could not conclusively check for a TDMRep policy (unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Published policy for the relevant use: indexing, training or user retrieval

Different policy syntaxes and business permissions are not independent readiness capabilities. Blocking training should not imply that an agent cannot use a public API.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

robots.txt

2.1/3 ptsUseful
What we found

robots.txt at https://netflix.com/robots.txt is valid and declares a Sitemap: reference.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Published policy for the relevant use: indexing, training or user retrieval

Different policy syntaxes and business permissions are not independent readiness capabilities. Blocking training should not imply that an agent cannot use a public API.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

AI bot rules

5/5 ptsCross-verified
What we found

robots.txt declares explicit rules for 6 AI bot(s): gptbot, chatgpt-user, oai-searchbot, google-extended, claudebot, perplexitybot.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Published policy for the relevant use: indexing, training or user retrieval

Different policy syntaxes and business permissions are not independent readiness capabilities. Blocking training should not imply that an agent cannot use a public API.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Documentation & meaning

0/17 ptsCan agents understand the documentation? · 5 conclusive · 9 additional

Usable documentation entry and references

llms.txt

0/5 ptsNot detected
What we found

Could not conclusively check for an llms.txt file (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public documentation; llms files optional

An index, full text and modular files offer different routes to documentation. Useful content and working references matter more than the number of formats.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

llms-full.txt

0/3 ptsNot detected
What we found

Could not conclusively check for an llms-full.txt file (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public documentation; llms files optional

An index, full text and modular files offer different routes to documentation. Useful content and working references matter more than the number of formats.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Scoped llms.txt indexes

UnscoredNot observed
What we found

No scoped llms.txt was found. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Public documentation; llms files optional

An index, full text and modular files offer different routes to documentation. Useful content and working references matter more than the number of formats.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Usable API reference and examples

API reference depth

0/5 ptsNot detected
What we found

Could not conclusively check for API reference documentation (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

A documented API or tool interface

Reference depth and valid fenced examples contribute to the same documentation outcome. Parsing an example is weaker than executing it successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Code fence validity

UnscoredNot observed
What we found

Could not read a candidate Markdown document to audit code fences. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

A documented API or tool interface

Reference depth and valid fenced examples contribute to the same documentation outcome. Parsing an example is weaker than executing it successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Document freshness evidence

Freshness signals

0/3 ptsNot detected
What we found

Could not conclusively check freshness signals (unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Resources whose currency can be assessed

A timestamp or ETag supports freshness provenance; it does not by itself prove factual accuracy or current behavior.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Machine-readable facts

Machine-readable pricing

0/1 ptsNot detected
What we found

Could not conclusively check for a machine-readable pricing endpoint (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Facts relevant to the product; pricing only when there is a price to disclose

Structured facts can help agents interpret a page. Markup volume and the number of schema types alone do not establish accuracy, consistency or task success.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

JSON-LD depth

UnscoredNot observed
What we found

Observed 0 JSON-LD script(s); 0 parsed as JSON-LD objects. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Facts relevant to the product; pricing only when there is a price to disclose

Structured facts can help agents interpret a page. Markup volume and the number of schema types alone do not establish accuracy, consistency or task success.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

JSON-LD entity linking

UnscoredNot observed
What we found

Observed 0 resolvable identifier(s) and 0 verified entity link(s). Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Facts relevant to the product; pricing only when there is a price to disclose

Structured facts can help agents interpret a page. Markup volume and the number of schema types alone do not establish accuracy, consistency or task success.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Schema.org type breadth

UnscoredNot observed
What we found

Observed 0 Schema.org type(s): none; 0 meaningfully populated. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Facts relevant to the product; pricing only when there is a price to disclose

Structured facts can help agents interpret a page. Markup volume and the number of schema types alone do not establish accuracy, consistency or task success.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Usable agent guidance

Agent discovery index

UnscoredNot observed
What we found

No usable Agent Skills discovery index was found. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Only a declared agent-guide surface

Alternative guide files may help agents locate instructions; file presence is supporting evidence and must not be required in every format.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Agent Skills index v0.2

UnscoredNot observed
What we found

No v0.2.0 index could be read. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Only a declared agent-guide surface

Alternative guide files may help agents locate instructions; file presence is supporting evidence and must not be required in every format.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Agent usage instructions

UnscoredNot observed
What we found

No actionable agent instruction file was found. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Only a declared agent-guide surface

Alternative guide files may help agents locate instructions; file presence is supporting evidence and must not be required in every format.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Interfaces & data

0/36 ptsWhich interfaces can agents use? · 8 conclusive · 1 unverified · 32 additional

Complete and usable operation contracts

Structured data I/O

0/8 ptsNot detected
What we found

Could not conclusively check for a structured-data contract (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations

Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Data export API

0/4 ptsNot detected
What we found

Could not conclusively check for data export or bulk API documentation (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations

Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

REST pagination shape

UnscoredNot observed
What we found

The shared spec probe could not read a valid OpenAPI/Swagger artifact. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations

Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

REST async-job pattern

UnscoredNot observed
What we found

The shared spec probe could not read a valid OpenAPI/Swagger artifact. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations

Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

REST batch endpoints

UnscoredNot observed
What we found

The shared spec probe could not read a valid OpenAPI/Swagger artifact. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations

Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Function-calling compatibility

UnscoredNot observed
What we found

The shared spec probe could not read a valid OpenAPI/Swagger artifact. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations

Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Parameter constraint coverage

UnscoredNot observed
What we found

The shared spec probe could not read a valid OpenAPI/Swagger artifact. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations

Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Usable supported interface

API existence

0/5 ptsNot detected
What we found

Could not conclusively check for an API endpoint (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Interface-enabled product; no requirement to implement every protocol

REST, GraphQL, MCP, SDKs and CLIs offer alternative or complementary access paths. The useful choice depends on the task and client; no single format serves every workflow.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

OpenAPI specification

0/5 ptsNot detected
What we found

Could not conclusively check for an OpenAPI/Swagger specification (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Interface-enabled product; no requirement to implement every protocol

REST, GraphQL, MCP, SDKs and CLIs offer alternative or complementary access paths. The useful choice depends on the task and client; no single format serves every workflow.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

SDK availability

0/5 ptsNot detected
What we found

Could not conclusively check for SDK or client library documentation (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Interface-enabled product; no requirement to implement every protocol

REST, GraphQL, MCP, SDKs and CLIs offer alternative or complementary access paths. The useful choice depends on the task and client; no single format serves every workflow.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

MCP support

5 pts unverifiedCould not verify
What we found

Could not conclusively discover or check first-party MCP support documentation and likely endpoints. Blocked by robots.txt for a generic compliant agent (Disallow: /). This protocol's availability cannot be inferred from crawler policy.

How this affects the score

Unverified points are excluded from the score denominator and reduce observed coverage.

When this matters

Interface-enabled product; no requirement to implement every protocol

REST, GraphQL, MCP, SDKs and CLIs offer alternative or complementary access paths. The useful choice depends on the task and client; no single format serves every workflow.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

GraphQL surface

0/3 ptsNot detected
What we found

Could not conclusively check for GraphQL (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Interface-enabled product; no requirement to implement every protocol

REST, GraphQL, MCP, SDKs and CLIs offer alternative or complementary access paths. The useful choice depends on the task and client; no single format serves every workflow.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

CLI availability

UnscoredNot observed
What we found

Could not conclusively check for a command-line tool (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Interface-enabled product; no requirement to implement every protocol

REST, GraphQL, MCP, SDKs and CLIs offer alternative or complementary access paths. The useful choice depends on the task and client; no single format serves every workflow.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Emerging interface declarations

A2A Agent Card

0/3 ptsNot detected
What we found

Could not conclusively check for an A2A Agent Card (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Only a positively identified matching protocol

Versioned interface declarations are observable signals. Broad adoption and cross-client utility are not established by declaration presence.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

MCP Server Card

0/3 ptsNot detected
What we found

Could not conclusively check for an MCP Server Card (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Only a positively identified matching protocol

Versioned interface declarations are observable signals. Broad adoption and cross-client utility are not established by declaration presence.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

WebMCP

UnscoredCould not verify
What we found

WebMCP browser probing is not yet available in this scanner release.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Only a positively identified matching protocol

Versioned interface declarations are observable signals. Broad adoption and cross-client utility are not established by declaration presence.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

MCP discovery evidence

MCP descriptor

UnscoredNot observed
What we found

Could not conclusively check for an MCP descriptor (locations unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

MCP surface

An MCP descriptor helps clients locate a service. This additional observation does not earn separate points for evidence already represented by the scored MCP check.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Additional GraphQL contract evidence

GraphQL schema completeness

UnscoredCould not verify
What we found

No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response. GraphQL depth probe: No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response. Blocked by robots.txt for a generic compliant agent (Disallow: /). This protocol's availability cannot be inferred from crawler policy.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

GraphQL and relevant operation shape; introspection optional

Additional contract evidence may substantiate an existing capability. Disabled production introspection must not create a penalty.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

GraphQL pagination

UnscoredNot observed
What we found

No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response. GraphQL depth probe: No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

GraphQL and relevant operation shape; introspection optional

Additional contract evidence may substantiate an existing capability. Disabled production introspection must not create a penalty.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

GraphQL batch mutations

UnscoredNot observed
What we found

No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response. GraphQL depth probe: No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

GraphQL and relevant operation shape; introspection optional

Additional contract evidence may substantiate an existing capability. Disabled production introspection must not create a penalty.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

GraphQL async job patterns

UnscoredNot observed
What we found

No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response. GraphQL depth probe: No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

GraphQL and relevant operation shape; introspection optional

Additional contract evidence may substantiate an existing capability. Disabled production introspection must not create a penalty.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Usable MCP tools and resources

MCP tool listing

UnscoredCould not verify
What we found

MCP tool listing could not be checked because endpoint discovery was incomplete. Live MCP probe: 48 ms, 0 protocol request(s). Blocked by robots.txt for a generic compliant agent (Disallow: /). This protocol's availability cannot be inferred from crawler policy.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP tool naming

UnscoredCould not verify
What we found

MCP tool naming could not be checked because endpoint discovery was incomplete. Live MCP probe: 48 ms, 0 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP tool descriptions

UnscoredCould not verify
What we found

MCP tool descriptions could not be checked because endpoint discovery was incomplete. Live MCP probe: 48 ms, 0 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP tool annotations

UnscoredCould not verify
What we found

MCP tool annotations could not be checked because endpoint discovery was incomplete. Live MCP probe: 48 ms, 0 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP parameter schemas

UnscoredCould not verify
What we found

MCP parameter schemas could not be checked because endpoint discovery was incomplete. Live MCP probe: 48 ms, 0 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP resource listing

UnscoredCould not verify
What we found

MCP resource listing could not be checked because endpoint discovery was incomplete. Live MCP probe: 48 ms, 0 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP resource quality

UnscoredCould not verify
What we found

MCP resource quality could not be checked because endpoint discovery was incomplete. Live MCP probe: 48 ms, 0 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP multi-surface coverage

UnscoredCould not verify
What we found

Endpoint discovery was incomplete. Live MCP probe: 48 ms, 0 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Compatible MCP transport

MCP transport version

UnscoredCould not verify
What we found

MCP transport modernity could not be checked because endpoint discovery was incomplete. Live MCP probe: 48 ms, 0 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP transport and negotiated version

A compatible negotiated protocol version helps clients and servers communicate. An older supported transport can still be usable.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP application UI

A2UI over MCP

UnscoredCould not verify
What we found

MCP Apps could not be checked because endpoint discovery was incomplete. This metadata-only check did not call tools or read app resources.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected application UI surface

An embedded interface can support interactive workflows. Many tools work without a user interface, so its absence is not a general readiness failure.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP App registration

UnscoredCould not verify
What we found

MCP Apps could not be checked because endpoint discovery was incomplete. This metadata-only check did not call tools or read app resources.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected application UI surface

An embedded interface can support interactive workflows. Many tools work without a user interface, so its absence is not a general readiness failure.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP Apps UI metadata quality

UnscoredCould not verify
What we found

MCP Apps could not be checked because endpoint discovery was incomplete. This metadata-only check did not call tools or read app resources.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected application UI surface

An embedded interface can support interactive workflows. Many tools work without a user interface, so its absence is not a general readiness failure.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Payment capabilities

Agentic Commerce Protocol

UnscoredCould not verify
What we found

Could not conclusively inspect published API specifications for Agentic Commerce Protocol checkout support. Blocked by robots.txt for a generic compliant agent (Disallow: /). This protocol's availability cannot be inferred from crawler policy.

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Payment-enabled business model

Payment support describes what the business offers. It must not make a research publication or free public service appear less ready.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

ACP delegated payments

UnscoredCould not verify
What we found

Could not conclusively inspect published API specifications for ACP delegated-payment support. Blocked by robots.txt for a generic compliant agent (Disallow: /). This protocol's availability cannot be inferred from crawler policy.

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Payment-enabled business model

Payment support describes what the business offers. It must not make a research publication or free public service appear less ready.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Universal Commerce Protocol

UnscoredCould not verify
What we found

The UCP discovery location could not be checked conclusively. Blocked by robots.txt for a generic compliant agent (Disallow: /). This protocol's availability cannot be inferred from crawler policy.

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Payment-enabled business model

Payment support describes what the business offers. It must not make a research publication or free public service appear less ready.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Agent Payments Protocol

UnscoredCould not verify
What we found

Could not conclusively inspect the UCP profile and published API specifications for AP2. Blocked by robots.txt for a generic compliant agent (Disallow: /). This protocol's availability cannot be inferred from crawler policy.

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Payment-enabled business model

Payment support describes what the business offers. It must not make a research publication or free public service appear less ready.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Machine payments (x402/MPP)

UnscoredNot observed
What we found

No machine-payment signal observed (no HTTP 402, no payment-required response header, and no /.well-known/x402.json manifest). Payment support cannot be ruled out from an unauthenticated probe. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Payment-enabled business model

Payment support describes what the business offers. It must not make a research publication or free public service appear less ready.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

NLWeb support

NLWeb ask endpoint

UnscoredCould not verify
What we found

An NLWeb /ask operation could not be checked conclusively across the shared OpenAPI discovery surface. Blocked by robots.txt for a generic compliant agent (Disallow: /). This protocol's availability cannot be inferred from crawler policy.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected NLWeb service

Useful protocol observations; optional implementation is not universal readiness.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

NLWeb streaming

UnscoredCould not verify
What we found

NLWeb streaming support could not be checked conclusively across the shared OpenAPI discovery surface. Blocked by robots.txt for a generic compliant agent (Disallow: /). This protocol's availability cannot be inferred from crawler policy.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected NLWeb service

Useful protocol observations; optional implementation is not universal readiness.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

NLWeb schema feeds

UnscoredNot observed
What we found

No valid HTTPS SchemaMap directive was found in robots.txt.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected NLWeb service

Useful protocol observations; optional implementation is not universal readiness.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Authentication & credentials

0/24 ptsCan agents authenticate and manage credentials? · 5 conclusive · 9 additional

Usable least-privilege authentication

Programmatic auth flow

0/5 ptsNot detected
What we found

Could not conclusively check for programmatic authentication documentation (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Protected operations; anonymous access is valid when intended

Discovery, documentation and credential lifecycle jointly support a usable authorization flow. A public read-only service need not require OAuth.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Auth documentation

0/5 ptsNot detected
What we found

Could not conclusively check for authentication documentation (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Protected operations; anonymous access is valid when intended

Discovery, documentation and credential lifecycle jointly support a usable authorization flow. A public read-only service need not require OAuth.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Auth discovery

0/5 ptsNot detected
What we found

Could not conclusively check for an auth-discovery surface (unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Protected operations; anonymous access is valid when intended

Discovery, documentation and credential lifecycle jointly support a usable authorization flow. A public read-only service need not require OAuth.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Credential management

0/4 ptsNot detected
What we found

Could not conclusively check for credential management documentation (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Protected operations; anonymous access is valid when intended

Discovery, documentation and credential lifecycle jointly support a usable authorization flow. A public read-only service need not require OAuth.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Safe integration environment

Sandbox environment

0/5 ptsNot detected
What we found

Could not conclusively check for sandbox or test environment documentation (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Operations whose side effects or onboarding require a safe test environment

A sandbox helps validate consequential integrations; it is not necessary for every public content site or read-only API.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

MCP authorization evidence

MCP authentication mechanism

UnscoredCould not verify
What we found

MCP authentication mechanism could not be checked because endpoint discovery was incomplete. Live MCP probe: 48 ms, 0 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Protected HTTP MCP; OAuth/PKCE only for applicable flow

Authentication metadata and challenges help clients understand how to obtain access. Observing a declaration does not prove that credentials can be issued or used successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP OAuth metadata

UnscoredCould not verify
What we found

MCP OAuth metadata could not be checked because endpoint discovery was incomplete. Live MCP probe: 48 ms, 0 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Protected HTTP MCP; OAuth/PKCE only for applicable flow

Authentication metadata and challenges help clients understand how to obtain access. Observing a declaration does not prove that credentials can be issued or used successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP PKCE S256

UnscoredCould not verify
What we found

MCP PKCE support could not be checked because endpoint discovery was incomplete. Live MCP probe: 48 ms, 0 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Protected HTTP MCP; OAuth/PKCE only for applicable flow

Authentication metadata and challenges help clients understand how to obtain access. Observing a declaration does not prove that credentials can be issued or used successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Emerging authentication guidance

auth.md

UnscoredCould not verify
What we found

The root auth.md location could not be checked conclusively. Blocked by robots.txt for a generic compliant agent (Disallow: /). This protocol's availability cannot be inferred from crawler policy.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected emerging authentication scheme

An auth.md file is one possible guide. Reachable metadata and bounded simulation are not proof that credentials can be issued successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

auth.md structure

UnscoredCould not verify
What we found

The root auth.md location could not be checked conclusively. Blocked by robots.txt for a generic compliant agent (Disallow: /). This protocol's availability cannot be inferred from crawler policy.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected emerging authentication scheme

An auth.md file is one possible guide. Reachable metadata and bounded simulation are not proof that credentials can be issued successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

auth.md walkthrough simulation

UnscoredCould not verify
What we found

The root auth.md location could not be checked conclusively. Blocked by robots.txt for a generic compliant agent (Disallow: /). This protocol's availability cannot be inferred from crawler policy.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected emerging authentication scheme

An auth.md file is one possible guide. Reachable metadata and bounded simulation are not proof that credentials can be issued successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Agent Auth discovery metadata

UnscoredCould not verify
What we found

The Agent Auth discovery location could not be checked conclusively. Blocked by robots.txt for a generic compliant agent (Disallow: /). This protocol's availability cannot be inferred from crawler policy.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected emerging authentication scheme

An auth.md file is one possible guide. Reachable metadata and bounded simulation are not proof that credentials can be issued successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Agent Auth challenge

UnscoredCould not verify
What we found

API challenge headers could not be observed conclusively. Blocked by robots.txt for a generic compliant agent (Disallow: /). This protocol's availability cannot be inferred from crawler policy.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected emerging authentication scheme

An auth.md file is one possible guide. Reachable metadata and bounded simulation are not proof that credentials can be issued successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Agent Auth endpoint reachability

UnscoredCould not verify
What we found

The Agent Auth discovery location could not be checked conclusively. Blocked by robots.txt for a generic compliant agent (Disallow: /). This protocol's availability cannot be inferred from crawler policy.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected emerging authentication scheme

An auth.md file is one possible guide. Reachable metadata and bounded simulation are not proof that credentials can be issued successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Reliability & recovery

0/30 ptsCan agents handle changes and failures? · 7 conclusive · 5 additional

Change and compatibility information

API versioning

0/5 ptsNot detected
What we found

Could not conclusively check for API versioning (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Maintained interface or evolving product

Version identifiers and change records help clients manage compatibility as an interface evolves.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Changelog presence

0/5 ptsNot detected
What we found

Could not conclusively check for a changelog or release notes (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Maintained interface or evolving product

Version identifiers and change records help clients manage compatibility as an interface evolves.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Actionable limits

Rate limit documentation

0/5 ptsNot detected
What we found

Could not conclusively check for rate limit documentation (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

An interface with quotas or throttling

Published limits and response headers help clients pace requests and recover from throttling. They describe related aspects of the same service constraint.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Rate-limit response headers

UnscoredNot observed
What we found

No confirmed live API response was available for rate-limit header inspection. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

An interface with quotas or throttling

Published limits and response headers help clients pace requests and recover from throttling. They describe related aspects of the same service constraint.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Observable outcomes and recovery

Webhook documentation

0/5 ptsNot detected
What we found

Could not conclusively check for webhook or event documentation (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Detected interface; idempotency for repeatable writes, webhooks only for event-driven workflows

Observable state and actionable errors help recovery. A status page or error schema does not prove successful repair.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Error documentation

0/5 ptsNot detected
What we found

Could not conclusively check for error documentation (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Detected interface; idempotency for repeatable writes, webhooks only for event-driven workflows

Observable state and actionable errors help recovery. A status page or error schema does not prove successful repair.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Retry & idempotency

0/3 ptsNot detected
What we found

Could not conclusively check for retry or idempotency documentation (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Detected interface; idempotency for repeatable writes, webhooks only for event-driven workflows

Observable state and actionable errors help recovery. A status page or error schema does not prove successful repair.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Status & health endpoints

0/2 ptsNot detected
What we found

Could not conclusively check for health or status endpoints (unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Detected interface; idempotency for repeatable writes, webhooks only for event-driven workflows

Observable state and actionable errors help recovery. A status page or error schema does not prove successful repair.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Agent-friendly 404s

UnscoredNot observed
What we found

The missing-page probe returned HTTP 0; missing-page behavior is inconclusive. Blocked by robots.txt for a generic compliant agent (Disallow: /).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Detected interface; idempotency for repeatable writes, webhooks only for event-driven workflows

Observable state and actionable errors help recovery. A status page or error schema does not prove successful repair.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

MCP error handling

UnscoredCould not verify
What we found

MCP error handling could not be checked because endpoint discovery was incomplete. Live MCP probe: 48 ms, 0 protocol request(s).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Detected interface; idempotency for repeatable writes, webhooks only for event-driven workflows

Observable state and actionable errors help recovery. A status page or error schema does not prove successful repair.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Additional GraphQL recovery evidence

GraphQL error type definitions

UnscoredNot observed
What we found

No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response. GraphQL depth probe: No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

GraphQL service; schema evidence obtainable under permitted scope

GraphQL error definitions and evolution policies help clients recover and manage compatibility. Disabled production introspection does not establish a defect.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

GraphQL versioning policy

UnscoredNot observed
What we found

No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response. GraphQL depth probe: No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

GraphQL service; schema evidence obtainable under permitted scope

GraphQL error definitions and evolution policies help clients recover and manage compatibility. Disabled production introspection does not establish a defect.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Identity & safeguards

0/11 ptsCan agents identify the publisher and its safeguards? · 4 conclusive · 3 additional

Attributable identity and consistent claims

Org identity signals

0/3 ptsNot detected
What we found

Could not conclusively read org identity signals from the homepage. Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public company/service identity; MCP identity only for MCP

These establish provenance, disclosure routes and consistency. They cannot certify prompt-injection resistance or safe transactions.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

security.txt

0/3 ptsNot detected
What we found

Could not conclusively check for security.txt (unreachable or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public company/service identity; MCP identity only for MCP

These establish provenance, disclosure routes and consistency. They cannot certify prompt-injection resistance or safe transactions.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

Metadata consistency

0/3 ptsNot detected
What we found

Could not conclusively assess homepage metadata consistency. Blocked by robots.txt for a generic compliant agent (Disallow: /).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public company/service identity; MCP identity only for MCP

These establish provenance, disclosure routes and consistency. They cannot certify prompt-injection resistance or safe transactions.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

MCP server identity

UnscoredCould not verify
What we found

MCP server identity could not be checked because endpoint discovery was incomplete. Live MCP probe: 48 ms, 0 protocol request(s).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Public company/service identity; MCP identity only for MCP

These establish provenance, disclosure routes and consistency. They cannot certify prompt-injection resistance or safe transactions.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Application isolation declarations

MCP App content security policy

UnscoredCould not verify
What we found

MCP Apps could not be checked because endpoint discovery was incomplete. This metadata-only check did not call tools or read app resources.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected MCP application UI

Declared origins and CSP are relevant safeguards for an embedded UI, but declarations alone do not establish effective isolation.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP App rendering domain

UnscoredCould not verify
What we found

MCP Apps could not be checked because endpoint discovery was incomplete. This metadata-only check did not call tools or read app resources.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected MCP application UI

Declared origins and CSP are relevant safeguards for an embedded UI, but declarations alone do not establish effective isolation.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-09-09. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Agent Comprehension

Agent Comprehension was unavailable for this scan.

Run a full scan of netflix.com