Agent Readiness Score

storeybox.co

15 — Limited. Agents will struggle to discover or use this site without human help.

42 of 42 checks conclusive · Confidence High · Evidence coverage 100%

HonestClaw measured initial public content available from storeybox.co to an identified HTTP agent, without browser rendering or login, across 9 dimensions and 42 automated checks. This does not measure access from another agent provider's infrastructure.

Open interactive report →

Open free scan fixes separately

Dimensions

Discoverability7.1/18.1
Content Accessibility7.1/20.1
Bot Access Control3.8/3.8
Protocol & Capability Discovery0/39.7
Authentication & Credentials0/19
Documentation Quality0/10
Structured Data I/O0/13
Observable State & Reliability0/13.2
Agent Safety & Trust4.1/11

Checks

At a glance

7 of 8 scored areas have measured gaps. Permissions & policy is furthest along; Interfaces & data has the largest measured point gap.

Needs a fix
33
conclusive findings
Furthest along
4/4 pts
Permissions & policy
Largest measured gap
37.8 pts
Interfaces & data · 0/37.8 pts
Conclusive results
42 conclusive
No unverified checks

89 additional observations provide context and do not affect the score.

Discovery

4.1/14 ptsCan agents find the right entry points? · 7 conclusive · 8 additional

Reachable entry points

Subdomain sweep

0/3 ptsNot detected
What we found

No agent-relevant conventional subdomain (api.*, docs.*) is live.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public pages; interfaces when present

Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

DNS-AID

0/3 ptsNot detected
What we found

No DNS-AID index found at _index._agents.storeybox.co.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public pages; interfaces when present

Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

sitemap.xml

2.1/3 ptsUseful
What we found

https://www.storeybox.co/sitemap.xml is a valid sitemap with lastmod and real (non-homepage) URLs.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public pages; interfaces when present

Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

.well-known index

0/0.7 ptsNot detected
What we found

No non-owned /.well-known/ descriptors found.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public pages; interfaces when present

Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

API catalog

0/0.3 ptsNot detected
What we found

No RFC 9727 API Catalog found at /.well-known/api-catalog. Blocked by robots.txt for a generic compliant agent (Disallow: /api/).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public pages; interfaces when present

Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Canonical domain

2/2 ptsCross-verified
What we found

Root and www converge on www.storeybox.co, with a matching canonical tag.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public pages; interfaces when present

Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Attributable ecosystem discovery

MCP Registry listing

UnscoredNot observed

Off-domain evidence

What we found

The fetched official MCP Registry search page returned no listing attributable to the scanned company.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Only the relevant verified distribution surface

An attributable directory entry can help agents discover a supported interface. Popularity, company size and directory count do not establish that the interface works.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Agent rules repository

UnscoredNot observed

Off-domain evidence

What we found

The fetched GitHub agent-rules repository search page returned no listing attributable to the scanned company.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Only the relevant verified distribution surface

An attributable directory entry can help agents discover a supported interface. Popularity, company size and directory count do not establish that the interface works.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Agent plugins repository

UnscoredNot observed

Off-domain evidence

What we found

The fetched GitHub agent-plugin repository search page returned no listing attributable to the scanned company.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Only the relevant verified distribution surface

An attributable directory entry can help agents discover a supported interface. Popularity, company size and directory count do not establish that the interface works.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

skills.sh listing

UnscoredNot observed

Off-domain evidence

What we found

The fetched skills.sh directory search page returned no listing attributable to the scanned company.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Only the relevant verified distribution surface

An attributable directory entry can help agents discover a supported interface. Popularity, company size and directory count do not establish that the interface works.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

skills.sh listing metadata

UnscoredNot observed

Off-domain evidence

What we found

The fetched skills.sh directory search page returned no listing attributable to the scanned company.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Only the relevant verified distribution surface

An attributable directory entry can help agents discover a supported interface. Popularity, company size and directory count do not establish that the interface works.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Registry branding

UnscoredNot observed

Off-domain evidence

What we found

The fetched official MCP Registry search page returned no listing attributable to the scanned company.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Only the relevant verified distribution surface

An attributable directory entry can help agents discover a supported interface. Popularity, company size and directory count do not establish that the interface works.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

ChatGPT directory listing

UnscoredCould not verify

Off-domain evidence

What we found

ChatGPT directory lookup was blocked (HTTP 403). Listing unverified; absence was not inferred. This does not affect your score.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Only the relevant verified distribution surface

An attributable directory entry can help agents discover a supported interface. Popularity, company size and directory count do not establish that the interface works.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Commerce distribution

x402 Bazaar listing

UnscoredNot observed

Off-domain evidence

What we found

The fetched x402 Bazaar discovery search returned no listing attributable to the scanned company.

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Payment-enabled products

A payment directory is useful context. Making it a general ARS requirement would indirectly score a business-model choice.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Access & rendering

2.8/11.9 ptsCan agents read the content? · 3 conclusive · 12 additional

Content available to the tested client

Raw content extractability

0/8 ptsNot detected
What we found

The homepage is a JS-rendered shell with no meaningful content in the initial HTML — content is behind JavaScript.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public pages; distinguish HTTP and browser clients

Critical content available in the response is a direct prerequisite for the tested client. An extraction ratio alone does not prove that the needed facts were captured.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Equivalent readable representations

Markdown twin

0/1.1 ptsNot detected
What we found

No markdown twin found alongside probed docs HTML surfaces.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Only representations the site offers; all sites can satisfy readable-content outcome with HTML

Headers, routes and frontmatter support one readable representation. Plain HTML must be able to receive full content-access credit.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Agent user-agent Markdown

UnscoredNot observed
What we found

No reachable candidate page served Markdown to the scanner agent without requiring Accept: text/markdown.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Only representations the site offers; all sites can satisfy readable-content outcome with HTML

Headers, routes and frontmatter support one readable representation. Plain HTML must be able to receive full content-access credit.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Direct Markdown URL

UnscoredNot observed
What we found

No direct .md or /index.md representation was found for reachable candidate pages.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Only representations the site offers; all sites can satisfy readable-content outcome with HTML

Headers, routes and frontmatter support one readable representation. Plain HTML must be able to receive full content-access credit.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Markdown negotiation cache safety

UnscoredNot observed
What we found

No reachable candidate page negotiated from HTML to Markdown.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Only representations the site offers; all sites can satisfy readable-content outcome with HTML

Headers, routes and frontmatter support one readable representation. Plain HTML must be able to receive full content-access credit.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Markdown frontmatter

UnscoredNot observed
What we found

No readable Markdown representation began with YAML frontmatter.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Only representations the site offers; all sites can satisfy readable-content outcome with HTML

Headers, routes and frontmatter support one readable representation. Plain HTML must be able to receive full content-access credit.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Observed client access

Agent crawler reachability

2.8/2.8 ptsUseful
What we found

3 of 3 completed identified HTTP probes returned substantive initial content across 1 sampled page(s). This is HonestClaw's network observation, not access from vendor infrastructure.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Up to three first-party pages; ChatGPT-User, Claude-User and Perplexity-User token markers on an explicitly identified HonestClaw client

One combined access contribution measures substantive initial content in completed identified HonestClaw HTTP probes. Refusals and incomplete observations remain unknown. This does not establish access from vendor infrastructure.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Agent bot-challenge handling

UnscoredObserved
What we found

3 of 3 completed identified HTTP probes returned substantive initial content across 1 sampled page(s). This is HonestClaw's network observation, not access from vendor infrastructure.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

The same named public HTTP sample and network vantage as the access check

Reuses the scored public HTTP sample to explain denials, challenges and degraded content. The same responses earn no second contribution.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Reachable critical content

Static content crawl depth

UnscoredCould not verify
What we found

The raw homepage was unreachable, truncated, non-HTML, or a JavaScript shell; static crawl depth is inconclusive.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Sites with linked public content

Bounded path traversal can explain missing content. Absolute clicks from the homepage is not a validated universal quality scale.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Accessibility-tree operability signals

Accessible names

UnscoredCould not verify
What we found

Accessibility-tree probe unavailable (deep_scan_only): Accessibility-tree checks are deep-scan only to avoid always-on browser probe cost.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Deep scans with an available browser accessibility tree snapshot

Accessible names, form labels, document structure and native semantics are direct operability signals for agents acting through accessibility trees. The current reading is deep-scan gated and intentionally unweighted pending calibration.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Document structure

UnscoredCould not verify
What we found

Accessibility-tree probe unavailable (deep_scan_only): Accessibility-tree checks are deep-scan only to avoid always-on browser probe cost.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Deep scans with an available browser accessibility tree snapshot

Accessible names, form labels, document structure and native semantics are direct operability signals for agents acting through accessibility trees. The current reading is deep-scan gated and intentionally unweighted pending calibration.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Form labeling

UnscoredCould not verify
What we found

Accessibility-tree probe unavailable (deep_scan_only): Accessibility-tree checks are deep-scan only to avoid always-on browser probe cost.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Deep scans with an available browser accessibility tree snapshot

Accessible names, form labels, document structure and native semantics are direct operability signals for agents acting through accessibility trees. The current reading is deep-scan gated and intentionally unweighted pending calibration.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Native controls

UnscoredCould not verify
What we found

Accessibility-tree probe unavailable (deep_scan_only): Accessibility-tree checks are deep-scan only to avoid always-on browser probe cost.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Deep scans with an available browser accessibility tree snapshot

Accessible names, form labels, document structure and native semantics are direct operability signals for agents acting through accessibility trees. The current reading is deep-scan gated and intentionally unweighted pending calibration.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Retrieval cost

Crawl-cost estimate

UnscoredObserved
What we found

A manageable sitemap (3 page URLs) helps agents estimate crawl cost.

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Measured retrieval path

Tokens, bytes and elapsed time explain retrieval cost and tradeoffs. They are context and do not affect the readiness score.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Permissions & policy

4/4 ptsWhat access does the publisher permit? · 2 conclusive · 4 additional

Clear and consistent publisher policy

robots.txt

3/3 ptsCross-verified
What we found

robots.txt at https://storeybox.co/robots.txt declares a sitemap. Declared sitemap https://www.storeybox.co/sitemap.xml resolves as valid XML.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Published policy for the relevant use: indexing, training or user retrieval

Different policy syntaxes and business permissions are not independent readiness capabilities. Blocking training should not imply that an agent cannot use a public API.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

AI bot rules

1/1 ptsCross-verified
What we found

Explicit access policy covers 3 of 3 user-directed tokens, including applicable wildcard rules. Allow and deny receive the same legibility credit. Training preferences receive no credit.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

ChatGPT-User, Claude-User and Perplexity-User access declarations

A small legibility contribution for explicit user-directed access rules, including wildcard defaults. Permission and denial earn equal legibility; training-only groups add no points.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Content signals

UnscoredNot observed
What we found

robots.txt is readable but declares no Content-Signal line.

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Publisher-declared policy; no obligation to permit training, indexing or licensing

Published licensing, indexing and training preferences remain inspectable without separate readiness points. User-directed policy legibility is measured once; observed public HTTP access is separate.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

RSL licensing

UnscoredNot observed
What we found

robots.txt is readable but declares no RSL License directive.

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Publisher-declared policy; no obligation to permit training, indexing or licensing

Published licensing, indexing and training preferences remain inspectable without separate readiness points. User-directed policy legibility is measured once; observed public HTTP access is separate.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

TDM reservation

UnscoredNot observed
What we found

No TDMRep policy found at /.well-known/tdmrep.json.

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Publisher-declared policy; no obligation to permit training, indexing or licensing

Published licensing, indexing and training preferences remain inspectable without separate readiness points. User-directed policy legibility is measured once; observed public HTTP access is separate.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

ai.txt

UnscoredNot observed
What we found

No ai.txt file found (HTML pages at .txt paths do not qualify).

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Publisher-declared policy; no obligation to permit training, indexing or licensing

Published licensing, indexing and training preferences remain inspectable without separate readiness points. User-directed policy legibility is measured once; observed public HTTP access is separate.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Documentation & meaning

7.1/17 ptsCan agents understand the documentation? · 5 conclusive · 14 additional

Usable API reference and examples

API reference depth

0/5 ptsNot detected
What we found

API reference documentation lacks depth or was not found.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

A documented API or tool interface

Reference depth and valid fenced examples contribute to the same documentation outcome. Parsing an example is weaker than executing it successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Code fence validity

UnscoredNot observed
What we found

No fenced code blocks were found across 1 readable Markdown document(s).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

A documented API or tool interface

Reference depth and valid fenced examples contribute to the same documentation outcome. Parsing an example is weaker than executing it successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Usable documentation entry and references

llms-full.txt

0/3 ptsNot detected
What we found

No llms-full.txt file found (HTML pages at .txt paths do not qualify).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public documentation; llms files optional

An index, full text and modular files offer different routes to documentation. Useful content and working references matter more than the number of formats. This check has no external governing spec; its weight is product judgment.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

llms.txt

5/5 ptsCross-verified
What we found

A curated llms.txt index is published at https://www.storeybox.co/llms.txt: 12 links across 7 sections.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public documentation; llms files optional

An index, full text and modular files offer different routes to documentation. Useful content and working references matter more than the number of formats.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Scoped llms.txt indexes

UnscoredNot observed
What we found

No scoped llms.txt was found. Blocked by robots.txt for a generic compliant agent (Disallow: /api/).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Public documentation; llms files optional

An index, full text and modular files offer different routes to documentation. Useful content and working references matter more than the number of formats.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Machine-readable facts

Machine-readable pricing

0/1 ptsNot detected
What we found

No machine-readable pricing endpoint found (HTML pricing pages do not qualify). Blocked by robots.txt for a generic compliant agent (Disallow: /api/).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Facts relevant to the product; pricing only when there is a price to disclose

Structured facts can help agents interpret a page. Markup volume and the number of schema types alone do not establish accuracy, consistency or task success. This check has no external governing spec; its weight is product judgment.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

JSON-LD depth

UnscoredObserved
What we found

Observed 1 JSON-LD script(s); 1 parsed as JSON-LD objects.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Facts relevant to the product; pricing only when there is a price to disclose

Structured facts can help agents interpret a page. Markup volume and the number of schema types alone do not establish accuracy, consistency or task success.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

JSON-LD entity linking

UnscoredObserved
What we found

Observed 3 resolvable identifier(s) and 2 verified entity link(s).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Facts relevant to the product; pricing only when there is a price to disclose

Structured facts can help agents interpret a page. Markup volume and the number of schema types alone do not establish accuracy, consistency or task success.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Schema.org type breadth

UnscoredObserved
What we found

Observed 3 Schema.org type(s): organization, person, website; 2 meaningfully populated.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Facts relevant to the product; pricing only when there is a price to disclose

Structured facts can help agents interpret a page. Markup volume and the number of schema types alone do not establish accuracy, consistency or task success.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Document freshness evidence

Freshness signals

2.1/3 ptsUseful
What we found

Freshness signals present: ETag header, sitemap lastmod.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Resources whose currency can be assessed

A timestamp or ETag supports freshness provenance; it does not by itself prove factual accuracy or current behavior.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Usable agent guidance

Agent Skills index v0.2

UnscoredNot observed
What we found

No v0.2.0 index could be read.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Only a declared agent-guide surface

Alternative guide files may help agents locate instructions; file presence is supporting evidence and must not be required in every format.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Agent discovery index

UnscoredNot observed
What we found

No usable Agent Skills discovery index was found.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Only a declared agent-guide surface

Alternative guide files may help agents locate instructions; file presence is supporting evidence and must not be required in every format.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Agent usage instructions

UnscoredObserved
What we found

The guidance is structured, but lacks both specific when-to-use and invocation guidance.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Only a declared agent-guide surface

Alternative guide files may help agents locate instructions; file presence is supporting evidence and must not be required in every format.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Explicit product purpose

Product purpose

UnscoredNot observed
What we found

No explicit answer matched the documented English extraction rules in the complete bounded initial HTML sample.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

At most six first-party pages under the public HTTP profile; documented English extraction rules. Incomplete or unsupported-language absence is unknown.

A bounded, source-linked answer from non-rendered first-party HTML. It is published source material, not independently verified truth or agent comprehension. Scoring remains staged pending precision, language, overlap and weight calibration.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Explicit intended audience

Intended audience

UnscoredNot observed
What we found

No explicit answer matched the documented English extraction rules in the complete bounded initial HTML sample.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

At most six first-party pages under the public HTTP profile; documented English extraction rules. Incomplete or unsupported-language absence is unknown.

A bounded, source-linked answer from non-rendered first-party HTML. It is published source material, not independently verified truth or agent comprehension. Scoring remains staged pending precision, language, overlap and weight calibration.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Published plan terms

Published plan terms

UnscoredNot observed
What we found

No explicit answer matched the documented English extraction rules in the complete bounded initial HTML sample.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

At most six first-party pages under the public HTTP profile; documented English extraction rules. Incomplete or unsupported-language absence is unknown.

A bounded, source-linked answer from non-rendered first-party HTML. It is published source material, not independently verified truth or agent comprehension. Scoring remains staged pending precision, language, overlap and weight calibration.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Advertised account access

Account access instructions

UnscoredNot observed
What we found

No explicit answer matched the documented English extraction rules in the complete bounded initial HTML sample.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

At most six first-party pages under the public HTTP profile; documented English extraction rules. Incomplete or unsupported-language absence is unknown.

A bounded, source-linked answer from non-rendered first-party HTML. It is published source material, not independently verified truth or agent comprehension. Scoring remains staged pending precision, language, overlap and weight calibration.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Concrete getting-started instructions

Getting-started instructions

UnscoredNot observed
What we found

No explicit answer matched the documented English extraction rules in the complete bounded initial HTML sample.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

At most six first-party pages under the public HTTP profile; documented English extraction rules. Incomplete or unsupported-language absence is unknown.

A bounded, source-linked answer from non-rendered first-party HTML. It is published source material, not independently verified truth or agent comprehension. Scoring remains staged pending precision, language, overlap and weight calibration.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Interfaces & data

0/37.8 ptsWhich interfaces can agents use? · 9 conclusive · 33 additional

Complete and usable operation contracts

Structured data I/O

0/8 ptsNot detected
What we found

No published structured-data contract found (no typed spec response schemas). Blocked by robots.txt for a generic compliant agent (Disallow: /api/).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations

Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Data export API

0/4 ptsNot detected
What we found

No data export or bulk API documentation found at the standard docs locations an agent would check.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations

Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

REST pagination shape

UnscoredNot observed
What we found

The shared spec probe could not read a valid OpenAPI/Swagger artifact. Blocked by robots.txt for a generic compliant agent (Disallow: /api/).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations

Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

REST async-job pattern

UnscoredNot observed
What we found

The shared spec probe could not read a valid OpenAPI/Swagger artifact. Blocked by robots.txt for a generic compliant agent (Disallow: /api/).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations

Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

REST batch endpoints

UnscoredNot observed
What we found

The shared spec probe could not read a valid OpenAPI/Swagger artifact. Blocked by robots.txt for a generic compliant agent (Disallow: /api/).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations

Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Function-calling compatibility

UnscoredNot observed
What we found

The shared spec probe could not read a valid OpenAPI/Swagger artifact. Blocked by robots.txt for a generic compliant agent (Disallow: /api/).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations

Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Parameter constraint coverage

UnscoredNot observed
What we found

The shared spec probe could not read a valid OpenAPI/Swagger artifact. Blocked by robots.txt for a generic compliant agent (Disallow: /api/).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations

Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Usable supported interface

OpenAPI specification

0/5 ptsNot detected
What we found

No OpenAPI/Swagger specification found. Blocked by robots.txt for a generic compliant agent (Disallow: /api/).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Interface-enabled product; no requirement to implement every protocol

REST, GraphQL, MCP, SDKs and CLIs offer alternative or complementary access paths. The useful choice depends on the task and client; no single format serves every workflow.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

MCP support

0/5 ptsNot detected
What we found

No first-party MCP support documentation or MCP-specific endpoint response was found.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Interface-enabled product; no requirement to implement every protocol

REST, GraphQL, MCP, SDKs and CLIs offer alternative or complementary access paths. The useful choice depends on the task and client; no single format serves every workflow.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

SDK availability

0/5 ptsNot detected
What we found

No SDK or client library documentation found.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Interface-enabled product; no requirement to implement every protocol

REST, GraphQL, MCP, SDKs and CLIs offer alternative or complementary access paths. The useful choice depends on the task and client; no single format serves every workflow.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

GraphQL surface

0/3 ptsNot detected
What we found

No GraphQL transport surface found at conventional paths (GET-only; no introspection issued). Blocked by robots.txt for a generic compliant agent (Disallow: /api/).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Interface-enabled product; no requirement to implement every protocol

REST, GraphQL, MCP, SDKs and CLIs offer alternative or complementary access paths. The useful choice depends on the task and client; no single format serves every workflow.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

API existence

0/1.8 ptsNot detected
What we found

No API endpoint found at common paths (only HTML pages or 404s). Blocked by robots.txt for a generic compliant agent (Disallow: /api/).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Interface-enabled product; no requirement to implement every protocol

REST, GraphQL, MCP, SDKs and CLIs offer alternative or complementary access paths. The useful choice depends on the task and client; no single format serves every workflow.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

CLI availability

UnscoredNot observed
What we found

No command-line tool was mentioned on any page checked.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Interface-enabled product; no requirement to implement every protocol

REST, GraphQL, MCP, SDKs and CLIs offer alternative or complementary access paths. The useful choice depends on the task and client; no single format serves every workflow.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Emerging interface declarations

A2A Agent Card

0/3 ptsNot detected
What we found

No A2A Agent Card found at the standard well-known locations.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Only a positively identified matching protocol

Versioned interface declarations are observable signals. Broad adoption and cross-client utility are not established by declaration presence.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

MCP Server Card

0/3 ptsNot detected
What we found

No MCP Server Card found at the standard locations an agent would check.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Only a positively identified matching protocol

Versioned interface declarations are observable signals. Broad adoption and cross-client utility are not established by declaration presence.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

WebMCP

UnscoredCould not verify
What we found

WebMCP browser probing is not yet available in this scanner release.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Only a positively identified matching protocol

Versioned interface declarations are observable signals. Broad adoption and cross-client utility are not established by declaration presence.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

MCP discovery evidence

MCP descriptor

UnscoredNot observed
What we found

No MCP descriptor found at the standard locations an agent would check.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

MCP surface

An MCP descriptor helps clients locate a service. This additional observation does not earn separate points for evidence already represented by the scored MCP check.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Additional GraphQL contract evidence

GraphQL schema completeness

UnscoredCould not verify
What we found

No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response. GraphQL depth probe: No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response. Blocked by robots.txt for a generic compliant agent (Disallow: /api/). This protocol's availability cannot be inferred from crawler policy.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

GraphQL and relevant operation shape; introspection optional

Additional contract evidence may substantiate an existing capability. Disabled production introspection must not create a penalty.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

GraphQL pagination

UnscoredNot observed
What we found

No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response. GraphQL depth probe: No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

GraphQL and relevant operation shape; introspection optional

Additional contract evidence may substantiate an existing capability. Disabled production introspection must not create a penalty.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

GraphQL batch mutations

UnscoredNot observed
What we found

No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response. GraphQL depth probe: No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

GraphQL and relevant operation shape; introspection optional

Additional contract evidence may substantiate an existing capability. Disabled production introspection must not create a penalty.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

GraphQL async job patterns

UnscoredNot observed
What we found

No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response. GraphQL depth probe: No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

GraphQL and relevant operation shape; introspection optional

Additional contract evidence may substantiate an existing capability. Disabled production introspection must not create a penalty.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Usable MCP tools and resources

MCP tool listing

UnscoredNot observed
What we found

No first-party HTTPS MCP endpoint was declared, so live tool listing was not detected. Live MCP probe: 2501 ms, 0 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP tool naming

UnscoredNot observed
What we found

No first-party HTTPS MCP endpoint was declared, so live tool naming was not detected. Live MCP probe: 2501 ms, 0 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP tool descriptions

UnscoredNot observed
What we found

No first-party HTTPS MCP endpoint was declared, so live tool descriptions was not detected. Live MCP probe: 2501 ms, 0 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP tool annotations

UnscoredNot observed
What we found

No first-party HTTPS MCP endpoint was declared, so live tool annotations was not detected. Live MCP probe: 2501 ms, 0 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP parameter constraint form

UnscoredNot observed
What we found

No first-party HTTPS MCP endpoint was declared, so live parameter constraint form was not detected. Live MCP probe: 2501 ms, 0 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool capability

Machine-checkable constraints on tool inputs let something other than the model enforce them. The reading claims constraint form only, never that a server rejects bad input, and remains unscored pending calibration against the live MCP panel.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP parameter schemas

UnscoredNot observed
What we found

No first-party HTTPS MCP endpoint was declared, so live parameter schemas was not detected. Live MCP probe: 2501 ms, 0 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP resource listing

UnscoredNot observed
What we found

No first-party HTTPS MCP endpoint was declared, so live resource listing was not detected. Live MCP probe: 2501 ms, 0 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP resource quality

UnscoredNot observed
What we found

No first-party HTTPS MCP endpoint was declared, so live resource quality was not detected. Live MCP probe: 2501 ms, 0 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP multi-surface coverage

UnscoredNot observed
What we found

No first-party MCP endpoint was declared. Live MCP probe: 2501 ms, 0 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Compatible MCP transport

MCP transport version

UnscoredNot observed
What we found

No first-party HTTPS MCP endpoint was declared, so live transport modernity was not detected. Live MCP probe: 2501 ms, 0 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP transport and negotiated version

A compatible negotiated protocol version helps clients and servers communicate. An older supported transport can still be usable.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP application UI

A2UI over MCP

UnscoredNot observed
What we found

No first-party HTTPS MCP endpoint was declared. This metadata-only check did not call tools or read app resources.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected application UI surface

An embedded interface can support interactive workflows. Many tools work without a user interface, so its absence is not a general readiness failure.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP Apps UI metadata quality

UnscoredNot observed
What we found

No first-party HTTPS MCP endpoint was declared. This metadata-only check did not call tools or read app resources.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected application UI surface

An embedded interface can support interactive workflows. Many tools work without a user interface, so its absence is not a general readiness failure.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Payment capabilities

Agentic Commerce Protocol

UnscoredCould not verify
What we found

Could not conclusively inspect published API specifications for Agentic Commerce Protocol checkout support. Blocked by robots.txt for a generic compliant agent (Disallow: /api/). This protocol's availability cannot be inferred from crawler policy.

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Payment-enabled business model

Payment support describes what the business offers. It must not make a research publication or free public service appear less ready.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

ACP delegated payments

UnscoredCould not verify
What we found

Could not conclusively inspect published API specifications for ACP delegated-payment support. Blocked by robots.txt for a generic compliant agent (Disallow: /api/). This protocol's availability cannot be inferred from crawler policy.

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Payment-enabled business model

Payment support describes what the business offers. It must not make a research publication or free public service appear less ready.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Agent Payments Protocol

UnscoredCould not verify
What we found

Could not conclusively inspect the UCP profile and published API specifications for AP2. Blocked by robots.txt for a generic compliant agent (Disallow: /api/). This protocol's availability cannot be inferred from crawler policy.

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Payment-enabled business model

Payment support describes what the business offers. It must not make a research publication or free public service appear less ready.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Universal Commerce Protocol

UnscoredNot observed
What we found

No UCP discovery profile was found at /.well-known/ucp.

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Payment-enabled business model

Payment support describes what the business offers. It must not make a research publication or free public service appear less ready.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Machine payments (x402/MPP)

UnscoredNot observed
What we found

No machine-payment signal observed (no HTTP 402, no payment-required response header, and no /.well-known/x402.json manifest). Payment support cannot be ruled out from an unauthenticated probe. Blocked by robots.txt for a generic compliant agent (Disallow: /api/).

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Payment-enabled business model

Payment support describes what the business offers. It must not make a research publication or free public service appear less ready.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

NLWeb support

NLWeb ask endpoint

UnscoredCould not verify
What we found

An NLWeb /ask operation could not be checked conclusively across the shared OpenAPI discovery surface. Blocked by robots.txt for a generic compliant agent (Disallow: /api/). This protocol's availability cannot be inferred from crawler policy.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected NLWeb service

Useful protocol observations; optional implementation is not universal readiness.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

NLWeb streaming

UnscoredCould not verify
What we found

NLWeb streaming support could not be checked conclusively across the shared OpenAPI discovery surface. Blocked by robots.txt for a generic compliant agent (Disallow: /api/). This protocol's availability cannot be inferred from crawler policy.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected NLWeb service

Useful protocol observations; optional implementation is not universal readiness.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

NLWeb schema feeds

UnscoredNot observed
What we found

No valid HTTPS SchemaMap directive was found in robots.txt.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected NLWeb service

Useful protocol observations; optional implementation is not universal readiness.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Authentication & credentials

0/24 ptsCan agents authenticate and manage credentials? · 5 conclusive · 9 additional

Usable least-privilege authentication

Auth discovery

0/5 ptsNot detected
What we found

No standardized authentication-discovery surface found.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Protected operations; anonymous access is valid when intended

Discovery, documentation and credential lifecycle jointly support a usable authorization flow. A public read-only service need not require OAuth.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Programmatic auth flow

0/5 ptsNot detected
What we found

No programmatic authentication documentation found at the standard docs locations an agent would check.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Protected operations; anonymous access is valid when intended

Discovery, documentation and credential lifecycle jointly support a usable authorization flow. A public read-only service need not require OAuth.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Auth documentation

0/5 ptsNot detected
What we found

No authentication documentation found at the standard docs locations an agent would check.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Protected operations; anonymous access is valid when intended

Discovery, documentation and credential lifecycle jointly support a usable authorization flow. A public read-only service need not require OAuth.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Credential management

0/4 ptsNot detected
What we found

No credential management documentation found at the standard docs locations an agent would check.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Protected operations; anonymous access is valid when intended

Discovery, documentation and credential lifecycle jointly support a usable authorization flow. A public read-only service need not require OAuth.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Safe integration environment

Sandbox environment

0/5 ptsNot detected
What we found

No sandbox or test environment documentation found at the standard docs locations an agent would check.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Operations whose side effects or onboarding require a safe test environment

A sandbox helps validate consequential integrations; it is not necessary for every public content site or read-only API.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

MCP authorization evidence

MCP authentication mechanism

UnscoredNot observed
What we found

No first-party HTTPS MCP endpoint was declared, so live authentication mechanism was not detected. Live MCP probe: 2501 ms, 0 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Protected HTTP MCP; OAuth/PKCE only for applicable flow

Authentication metadata and challenges help clients understand how to obtain access. Observing a declaration does not prove that credentials can be issued or used successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP OAuth metadata

UnscoredNot observed
What we found

No first-party HTTPS MCP endpoint was declared, so live OAuth metadata was not detected. Live MCP probe: 2501 ms, 0 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Protected HTTP MCP; OAuth/PKCE only for applicable flow

Authentication metadata and challenges help clients understand how to obtain access. Observing a declaration does not prove that credentials can be issued or used successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP PKCE S256

UnscoredNot observed
What we found

No first-party HTTPS MCP endpoint was declared, so live PKCE support was not detected. Live MCP probe: 2501 ms, 0 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Protected HTTP MCP; OAuth/PKCE only for applicable flow

Authentication metadata and challenges help clients understand how to obtain access. Observing a declaration does not prove that credentials can be issued or used successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Emerging authentication guidance

auth.md structure

UnscoredNot observed
What we found

The root auth.md document does not satisfy the structured criteria.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected emerging authentication scheme

An auth.md file is one possible guide. Reachable metadata and bounded simulation are not proof that credentials can be issued successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

auth.md

UnscoredNot observed
What we found

The root auth.md document does not satisfy the exists criteria.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected emerging authentication scheme

An auth.md file is one possible guide. Reachable metadata and bounded simulation are not proof that credentials can be issued successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

auth.md walkthrough simulation

UnscoredNot observed
What we found

The root auth.md document does not satisfy the walkthrough criteria.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected emerging authentication scheme

An auth.md file is one possible guide. Reachable metadata and bounded simulation are not proof that credentials can be issued successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Agent Auth discovery metadata

UnscoredNot observed
What we found

No conforming public Agent Auth discovery document was found.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected emerging authentication scheme

An auth.md file is one possible guide. Reachable metadata and bounded simulation are not proof that credentials can be issued successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Agent Auth endpoint reachability

UnscoredNot observed
What we found

No conforming public Agent Auth discovery document was found.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected emerging authentication scheme

An auth.md file is one possible guide. Reachable metadata and bounded simulation are not proof that credentials can be issued successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Agent Auth challenge

UnscoredCould not verify
What we found

API challenge headers could not be observed conclusively. Blocked by robots.txt for a generic compliant agent (Disallow: /api/). This protocol's availability cannot be inferred from crawler policy.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected emerging authentication scheme

An auth.md file is one possible guide. Reachable metadata and bounded simulation are not proof that credentials can be issued successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Reliability & recovery

0/28.2 ptsCan agents handle changes and failures? · 7 conclusive · 5 additional

Change and compatibility information

API versioning

0/5 ptsNot detected
What we found

No versioning signal found (no spec info.version, version header, /vN API surface, or versioning docs). Blocked by robots.txt for a generic compliant agent (Disallow: /api/).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Maintained interface or evolving product

Version identifiers and change records help clients manage compatibility as an interface evolves.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Changelog presence

0/5 ptsNot detected
What we found

No changelog or release notes found at the standard docs locations an agent would check.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Maintained interface or evolving product

Version identifiers and change records help clients manage compatibility as an interface evolves.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Actionable limits

Rate limit documentation

0/5 ptsNot detected
What we found

No rate limit documentation found at the standard docs locations an agent would check.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

An interface with quotas or throttling

Published limits and response headers help clients pace requests and recover from throttling. They describe related aspects of the same service constraint.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Rate-limit response headers

UnscoredNot observed
What we found

No confirmed live API response was available for rate-limit header inspection. Blocked by robots.txt for a generic compliant agent (Disallow: /api/).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

An interface with quotas or throttling

Published limits and response headers help clients pace requests and recover from throttling. They describe related aspects of the same service constraint.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Observable outcomes and recovery

Webhook documentation

0/5 ptsNot detected
What we found

No webhook or event documentation found at the standard docs locations an agent would check.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Detected interface; idempotency for repeatable writes, webhooks only for event-driven workflows

Observable state and actionable errors help recovery. A status page or error schema does not prove successful repair.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Error documentation

0/5 ptsNot detected
What we found

No error documentation found at the standard docs locations an agent would check. Blocked by robots.txt for a generic compliant agent (Disallow: /api/).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Detected interface; idempotency for repeatable writes, webhooks only for event-driven workflows

Observable state and actionable errors help recovery. A status page or error schema does not prove successful repair.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Retry & idempotency

0/3 ptsNot detected
What we found

No retry or idempotency documentation found at the standard docs locations an agent would check.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Detected interface; idempotency for repeatable writes, webhooks only for event-driven workflows

Observable state and actionable errors help recovery. A status page or error schema does not prove successful repair.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Status & health endpoints

0/0.2 ptsNot detected
What we found

No health or status endpoint found. Blocked by robots.txt for a generic compliant agent (Disallow: /api/).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Detected interface; idempotency for repeatable writes, webhooks only for event-driven workflows

Observable state and actionable errors help recovery. A status page or error schema does not prove successful repair.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Agent-friendly 404s

UnscoredObserved
What we found

The missing path returned HTTP 404 with a readable explanation, but no agent-followable recovery link.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Detected interface; idempotency for repeatable writes, webhooks only for event-driven workflows

Observable state and actionable errors help recovery. A status page or error schema does not prove successful repair.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

MCP error handling

UnscoredNot observed
What we found

No first-party HTTPS MCP endpoint was declared, so live error handling was not detected. Live MCP probe: 2501 ms, 0 protocol request(s).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Detected interface; idempotency for repeatable writes, webhooks only for event-driven workflows

Observable state and actionable errors help recovery. A status page or error schema does not prove successful repair.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Additional GraphQL recovery evidence

GraphQL error type definitions

UnscoredNot observed
What we found

No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response. GraphQL depth probe: No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

GraphQL service; schema evidence obtainable under permitted scope

GraphQL error definitions and evolution policies help clients recover and manage compatibility. Disabled production introspection does not establish a defect.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

GraphQL versioning policy

UnscoredNot observed
What we found

No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response. GraphQL depth probe: No GraphQL endpoint was observed in a scanner-fetched declaration or GraphQL-shaped response.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

GraphQL service; schema evidence obtainable under permitted scope

GraphQL error definitions and evolution policies help clients recover and manage compatibility. Disabled production introspection does not establish a defect.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Identity & safeguards

4.1/11 ptsCan agents identify the publisher and its safeguards? · 4 conclusive · 4 additional

Attributable identity and consistent claims

security.txt

0/3 ptsNot detected
What we found

No security.txt found at /.well-known/security.txt or /security.txt.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public company/service identity; MCP identity only for MCP

These establish provenance, disclosure routes and consistency. They cannot certify prompt-injection resistance or safe transactions.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Org identity signals

1/3 ptsParseable
What we found

Homepage exposes two org-identity signal types (legal_name, social).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public company/service identity; MCP identity only for MCP

These establish provenance, disclosure routes and consistency. They cannot certify prompt-injection resistance or safe transactions.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Metadata consistency

3/3 ptsCross-verified
What we found

Homepage metadata (canonical, Open Graph, schema) is present and consistent.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public company/service identity; MCP identity only for MCP

These establish provenance, disclosure routes and consistency. They cannot certify prompt-injection resistance or safe transactions.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

MCP server identity

UnscoredNot observed
What we found

No first-party HTTPS MCP endpoint was declared, so live server identity was not detected. Live MCP probe: 2501 ms, 0 protocol request(s).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Public company/service identity; MCP identity only for MCP

These establish provenance, disclosure routes and consistency. They cannot certify prompt-injection resistance or safe transactions.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Instruction-safe interaction surfaces

Accessibility-tree injection safety

UnscoredCould not verify
What we found

Accessibility-tree probe unavailable (deep_scan_only): Accessibility-tree checks are deep-scan only to avoid always-on browser probe cost.

Why this is unscored

A limited scanner observation, not proof of access from real agent infrastructure. It remains unscored until the probe can support that claim.

When this matters

Deep scans with an available browser accessibility tree snapshot

Prompt-injection-like instructions in accessibility text are a real manipulation risk for agent operators. This bounded probe can surface risky text but cannot prove complete absence, so it remains unscored.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Application isolation declarations

MCP App content security policy

UnscoredNot observed
What we found

No first-party HTTPS MCP endpoint was declared. This metadata-only check did not call tools or read app resources.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected MCP application UI

Declared origins and CSP are relevant safeguards for an embedded UI, but declarations alone do not establish effective isolation.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP App rendering domain

UnscoredNot observed
What we found

No first-party HTTPS MCP endpoint was declared. This metadata-only check did not call tools or read app resources.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected MCP application UI

Declared origins and CSP are relevant safeguards for an embedded UI, but declarations alone do not establish effective isolation.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Guidance recorded with this scan · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Agent Comprehension

Informational — not scored

Agent Comprehension was unavailable for this scan.

Scanned · scanner v1.70.5Measured by HonestClaw