HonestClaw · What is Agent Readiness? · How we score

trello.com — Agent Readiness Score 38/100

Limited. Agents will struggle to discover or use this site without human help.

HonestClaw measured how well trello.com's site and APIs work for AI agents — across 9 dimensions and 45 automated checks. Score: 38/100 (Limited).

Scanned · scanner v1.48.0 · 45 of 45 checks conclusive.

Dimensions

Checks

At a glance

All 8 scored areas have measured gaps. Access & rendering is furthest along; Interfaces & data has the largest measured point gap.

Needs a fix
24
conclusive findings
Furthest along
8/11 pts
Access & rendering
Largest measured gap
26.9 pts
Interfaces & data · 14.1/41 pts
Conclusive results
45 conclusive
No unverified checks

59 additional observations provide context and do not affect the score.

Discovery

5.6/18 ptsCan agents find the right entry points? · 7 conclusive · 0 additional

Reachable entry points

API catalog

0/3 ptsNot detected
What we found

No RFC 9727 API Catalog found at /.well-known/api-catalog.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public pages; interfaces when present

Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

DNS-AID

0/3 ptsNot detected
What we found

No DNS-AID index found at _index._agents.trello.com.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public pages; interfaces when present

Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

.well-known index

0/2 ptsNot detected
What we found

No non-owned /.well-known/ descriptors found.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public pages; interfaces when present

Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Subdomain sweep

2.1/3 ptsUseful
What we found

Both an API-family and a docs-family subdomain are live (api.trello.com, developers.trello.com).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public pages; interfaces when present

Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

sitemap.xml

2.1/3 ptsUseful
What we found

https://a594014.sitemaphosting7.com/4704043/sitemap_4704043.xml is a valid sitemap with lastmod and real (non-homepage) URLs.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public pages; interfaces when present

Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Canonical domain

1.4/2 ptsUseful
What we found

Root and www converge on trello.com, with a canonical tag on the homepage.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public pages; interfaces when present

Clear entry points help agents find the intended site or interface. Multiple hostnames or directory formats may describe the same destination.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Access & rendering

8/11 ptsCan agents read the content? · 2 conclusive · 9 additional

Equivalent readable representations

Markdown twin

0/3 ptsNot detected
What we found

No markdown twin found alongside probed docs HTML surfaces.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Only representations the site offers; all sites can satisfy readable-content outcome with HTML

Headers, routes and frontmatter support one readable representation. Plain HTML must be able to receive full content-access credit.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Direct Markdown URL

UnscoredObserved
What we found

A direct Markdown representation is available at https://developer.atlassian.com/cloud/trello/index.md.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Only representations the site offers; all sites can satisfy readable-content outcome with HTML

Headers, routes and frontmatter support one readable representation. Plain HTML must be able to receive full content-access credit.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Agent user-agent Markdown

UnscoredNot observed
What we found

No reachable candidate page served Markdown to the scanner agent without an Accept header.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Only representations the site offers; all sites can satisfy readable-content outcome with HTML

Headers, routes and frontmatter support one readable representation. Plain HTML must be able to receive full content-access credit.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Markdown negotiation cache safety

UnscoredNot observed
What we found

No reachable candidate page negotiated from HTML to Markdown.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Only representations the site offers; all sites can satisfy readable-content outcome with HTML

Headers, routes and frontmatter support one readable representation. Plain HTML must be able to receive full content-access credit.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Markdown frontmatter

UnscoredNot observed
What we found

No readable Markdown representation began with YAML frontmatter.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Only representations the site offers; all sites can satisfy readable-content outcome with HTML

Headers, routes and frontmatter support one readable representation. Plain HTML must be able to receive full content-access credit.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Content available to the tested client

Raw content extractability

8/8 ptsCross-verified
What we found

Readable content is extractable without JavaScript on 2 probed surface(s) with substantial visible text.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public pages; distinguish HTTP and browser clients

Critical content available in the response is a direct prerequisite for the tested client. An extraction ratio alone does not prove that the needed facts were captured.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Retrieval cost

Crawl-cost estimate

UnscoredNot observed
What we found

No crawl-cost signals found (no sitemap URL inventory or Crawl-delay directive).

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Measured retrieval path

Tokens, bytes and elapsed time explain retrieval cost and tradeoffs. They are context and do not affect the readiness score.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Reachable critical content

Static content crawl depth

UnscoredObserved
What we found

Static same-site links led to substantive HTML content two crawl hops from the homepage.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Sites with linked public content

Bounded path traversal can explain missing content. Absolute clicks from the homepage is not a validated universal quality scale.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Observed client access

Agent crawler reachability

UnscoredObserved
What we found

All 5 agent crawler probes passed. ChatGPT-User=200, ClaudeBot=200, Google-Extended=200, PerplexityBot=200, DeepSeekBot=200

Why this is unscored

Additional observation. It adds no points and its absence does not lower the score.

When this matters

Up to three first-party pages; ChatGPT-User, Claude-User and Perplexity-User token markers on an explicitly identified HonestClaw client

One combined access contribution measures substantive initial content in completed identified HonestClaw HTTP probes. Refusals and incomplete observations remain unknown. This does not establish access from vendor infrastructure.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Agent bot-challenge handling

UnscoredObserved
What we found

All 5 bot-detection probes passed. ChatGPT-User=clear, ClaudeBot=clear, Google-Extended=clear, PerplexityBot=clear, DeepSeekBot=clear

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

The same named public HTTP sample and network vantage as the access check

Reuses the scored public HTTP sample to explain denials, challenges and degraded content. The same responses earn no second contribution.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Permissions & policy

3/17 ptsWhat access does the publisher permit? · 6 conclusive · 0 additional

Clear and consistent publisher policy

AI bot rules

0/5 ptsNot detected
What we found

robots.txt is readable but declares no AI-bot-specific rules.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

ChatGPT-User, Claude-User and Perplexity-User access declarations

A small legibility contribution for explicit user-directed access rules, including wildcard defaults. Permission and denial earn equal legibility; training-only groups add no points.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

RSL licensing

0/3 ptsNot detected
What we found

robots.txt is readable but declares no RSL License directive.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Publisher-declared policy; no obligation to permit training, indexing or licensing

Published licensing, indexing and training preferences remain inspectable without separate readiness points. User-directed policy legibility is measured once; observed public HTTP access is separate.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Content signals

0/2 ptsNot detected
What we found

robots.txt is readable but declares no Content-Signal line.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Publisher-declared policy; no obligation to permit training, indexing or licensing

Published licensing, indexing and training preferences remain inspectable without separate readiness points. User-directed policy legibility is measured once; observed public HTTP access is separate.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

ai.txt

0/2 ptsNot detected
What we found

No ai.txt file found (HTML pages at .txt paths do not qualify).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Publisher-declared policy; no obligation to permit training, indexing or licensing

Published licensing, indexing and training preferences remain inspectable without separate readiness points. User-directed policy legibility is measured once; observed public HTTP access is separate.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

TDM reservation

0/2 ptsNot detected
What we found

No TDMRep policy found at /.well-known/tdmrep.json.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Publisher-declared policy; no obligation to permit training, indexing or licensing

Published licensing, indexing and training preferences remain inspectable without separate readiness points. User-directed policy legibility is measured once; observed public HTTP access is separate.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

robots.txt

3/3 ptsCross-verified
What we found

robots.txt at https://trello.com/robots.txt declares a sitemap. Declared sitemap https://a594014.sitemaphosting7.com/4704043/sitemap_4704043.xml resolves as valid XML.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Published policy for the relevant use: indexing, training or user retrieval

Different policy syntaxes and business permissions are not independent readiness capabilities. Blocking training should not imply that an agent cannot use a public API.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Documentation & meaning

1.8/17 ptsCan agents understand the documentation? · 5 conclusive · 9 additional

Usable documentation entry and references

llms.txt

0/5 ptsNot detected
What we found

No llms.txt file found (HTML pages at .txt paths do not qualify).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public documentation; llms files optional

An index, full text and modular files offer different routes to documentation. Useful content and working references matter more than the number of formats.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

llms-full.txt

0/3 ptsNot detected
What we found

No llms-full.txt file found (HTML pages at .txt paths do not qualify).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public documentation; llms files optional

An index, full text and modular files offer different routes to documentation. Useful content and working references matter more than the number of formats. This check has no external governing spec; its weight is product judgment.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Scoped llms.txt indexes

UnscoredNot observed
What we found

No scoped llms.txt was found.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Public documentation; llms files optional

An index, full text and modular files offer different routes to documentation. Useful content and working references matter more than the number of formats.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Usable API reference and examples

API reference depth

1.8/5 ptsParseable
What we found

An API reference page exists at https://developer.atlassian.com/cloud/trello/guides/client-js/client-js-reference/, but it doesn't show parameters with example requests and responses.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

A documented API or tool interface

Reference depth and valid fenced examples contribute to the same documentation outcome. Parsing an example is weaker than executing it successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Code fence validity

UnscoredNot observed
What we found

No fenced code blocks were found across 1 readable Markdown document(s).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

A documented API or tool interface

Reference depth and valid fenced examples contribute to the same documentation outcome. Parsing an example is weaker than executing it successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Document freshness evidence

Freshness signals

0/3 ptsNot detected
What we found

No freshness signals found (no Last-Modified, ETag, or sitemap lastmod).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Resources whose currency can be assessed

A timestamp or ETag supports freshness provenance; it does not by itself prove factual accuracy or current behavior.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Machine-readable facts

Machine-readable pricing

0/1 ptsNot detected
What we found

No machine-readable pricing endpoint found (HTML pricing pages do not qualify).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Facts relevant to the product; pricing only when there is a price to disclose

Structured facts can help agents interpret a page. Markup volume and the number of schema types alone do not establish accuracy, consistency or task success. This check has no external governing spec; its weight is product judgment.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

JSON-LD depth

UnscoredNot observed
What we found

Observed 0 JSON-LD script(s); 0 parsed as JSON-LD objects.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Facts relevant to the product; pricing only when there is a price to disclose

Structured facts can help agents interpret a page. Markup volume and the number of schema types alone do not establish accuracy, consistency or task success.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

JSON-LD entity linking

UnscoredNot observed
What we found

Observed 0 resolvable identifier(s) and 0 verified entity link(s).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Facts relevant to the product; pricing only when there is a price to disclose

Structured facts can help agents interpret a page. Markup volume and the number of schema types alone do not establish accuracy, consistency or task success.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Schema.org type breadth

UnscoredNot observed
What we found

Observed 0 Schema.org type(s): none; 0 meaningfully populated.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Facts relevant to the product; pricing only when there is a price to disclose

Structured facts can help agents interpret a page. Markup volume and the number of schema types alone do not establish accuracy, consistency or task success.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Usable agent guidance

Agent discovery index

UnscoredNot observed
What we found

No usable Agent Skills discovery index was found.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Only a declared agent-guide surface

Alternative guide files may help agents locate instructions; file presence is supporting evidence and must not be required in every format.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Agent Skills index v0.2

UnscoredNot observed
What we found

No v0.2.0 index could be read.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Only a declared agent-guide surface

Alternative guide files may help agents locate instructions; file presence is supporting evidence and must not be required in every format.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Agent usage instructions

UnscoredNot observed
What we found

No actionable agent instruction file was found.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Only a declared agent-guide surface

Alternative guide files may help agents locate instructions; file presence is supporting evidence and must not be required in every format.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Interfaces & data

14.1/41 ptsWhich interfaces can agents use? · 9 conclusive · 26 additional

Complete and usable operation contracts

Structured data I/O

2.8/8 ptsParseable
What we found

The spec at https://dac-static.atlassian.com/cloud/trello/swagger.v3.json declares response schemas, but typed responses are not the norm (49% of operations). (source: spec)

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations

Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Data export API

0/4 ptsNot detected
What we found

No data export or bulk API documentation found at the standard docs locations an agent would check.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations

Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

REST pagination shape

UnscoredObserved
What we found

The spec declares a typed pagination parameter or response continuation field, but not a complete cursor round trip.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations

Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

REST async-job pattern

UnscoredObserved
What we found

Async/job vocabulary appears, but no 202 Accepted response is declared.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations

Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

REST batch endpoints

UnscoredObserved
What we found

A batch/bulk operation is named, but no array request body is declared.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations

Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Function-calling compatibility

UnscoredObserved
What we found

261/261 operations have operationIds; some are missing, duplicated, longer than 64 characters, or contain function-unsafe characters.

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected interface; pagination only for collections, async only for long-running jobs, batch only for multi-item operations

Usable schemas and operation patterns can reduce ambiguity for clients. More endpoints or constraints alone do not establish that an operation is easier to use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Usable supported interface

API existence

1.8/5 ptsParseable
What we found

A real API surface at https://trello.com/graphql answered HTTP 400 with non-HTML JSON. (source: live)

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Interface-enabled product; no requirement to implement every protocol

REST, GraphQL, MCP, SDKs and CLIs offer alternative or complementary access paths. The useful choice depends on the task and client; no single format serves every workflow.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

MCP support

1.8/5 ptsParseable
What we found

A first-party MCP support page exists at https://developer.atlassian.com/cloud/, but it does not identify a concrete HTTPS MCP endpoint or fully establish a company-operated service.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Interface-enabled product; no requirement to implement every protocol

REST, GraphQL, MCP, SDKs and CLIs offer alternative or complementary access paths. The useful choice depends on the task and client; no single format serves every workflow.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

SDK availability

1.8/5 ptsParseable
What we found

SDK libraries page at https://developer.atlassian.com/server/framework/atlassian-sdk/sitemap.xml: 0 GitHub repos, 0 registry links, 0 install commands (0 pointers).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Interface-enabled product; no requirement to implement every protocol

REST, GraphQL, MCP, SDKs and CLIs offer alternative or complementary access paths. The useful choice depends on the task and client; no single format serves every workflow.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

GraphQL surface

1/3 ptsParseable
What we found

A GraphQL endpoint at https://trello.com/graphql responded with HTTP 400 and a GraphQL-shaped error body (GET probe).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Interface-enabled product; no requirement to implement every protocol

REST, GraphQL, MCP, SDKs and CLIs offer alternative or complementary access paths. The useful choice depends on the task and client; no single format serves every workflow.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

OpenAPI specification

5/5 ptsCross-verified
What we found

Valid OpenAPI 3.0.0 spec at https://dac-static.atlassian.com/cloud/trello/swagger.v3.json: 261 operations, 63 schemas, 100% response coverage, servers declared.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Interface-enabled product; no requirement to implement every protocol

REST, GraphQL, MCP, SDKs and CLIs offer alternative or complementary access paths. The useful choice depends on the task and client; no single format serves every workflow.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Emerging interface declarations

MCP Server Card

0/3 ptsNot detected
What we found

No MCP Server Card found at the standard locations an agent would check.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Only a positively identified matching protocol

Versioned interface declarations are observable signals. Broad adoption and cross-client utility are not established by declaration presence.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

A2A Agent Card

0/3 ptsNot detected
What we found

No A2A Agent Card found at the standard well-known locations.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Only a positively identified matching protocol

Versioned interface declarations are observable signals. Broad adoption and cross-client utility are not established by declaration presence.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

WebMCP

UnscoredCould not verify
What we found

WebMCP browser probing is not yet available in this scanner release.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Only a positively identified matching protocol

Versioned interface declarations are observable signals. Broad adoption and cross-client utility are not established by declaration presence.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

MCP discovery evidence

MCP descriptor

UnscoredNot observed
What we found

No MCP descriptor found at the standard locations an agent would check.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

MCP surface

An MCP descriptor helps clients locate a service. This additional observation does not earn separate points for evidence already represented by the scored MCP check.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Usable MCP tools and resources

MCP tool listing

UnscoredNot observed
What we found

No first-party HTTPS MCP endpoint was declared, so live tool listing was not detected. Live MCP probe: 33 ms, 0 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP tool naming

UnscoredNot observed
What we found

No first-party HTTPS MCP endpoint was declared, so live tool naming was not detected. Live MCP probe: 33 ms, 0 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP tool descriptions

UnscoredNot observed
What we found

No first-party HTTPS MCP endpoint was declared, so live tool descriptions was not detected. Live MCP probe: 33 ms, 0 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP tool annotations

UnscoredNot observed
What we found

No first-party HTTPS MCP endpoint was declared, so live tool annotations was not detected. Live MCP probe: 33 ms, 0 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP parameter schemas

UnscoredNot observed
What we found

No first-party HTTPS MCP endpoint was declared, so live parameter schemas was not detected. Live MCP probe: 33 ms, 0 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP resource listing

UnscoredNot observed
What we found

No first-party HTTPS MCP endpoint was declared, so live resource listing was not detected. Live MCP probe: 33 ms, 0 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP resource quality

UnscoredNot observed
What we found

No first-party HTTPS MCP endpoint was declared, so live resource quality was not detected. Live MCP probe: 33 ms, 0 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP multi-surface coverage

UnscoredNot observed
What we found

No first-party MCP endpoint was declared. Live MCP probe: 33 ms, 0 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP server and advertised tool/resource capability

Live listings and contracts help agents discover tools and understand their inputs. These related observations remain unscored pending calibration of their contribution to successful tool use.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Compatible MCP transport

MCP transport version

UnscoredNot observed
What we found

No first-party HTTPS MCP endpoint was declared, so live transport modernity was not detected. Live MCP probe: 33 ms, 0 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Detected MCP transport and negotiated version

A compatible negotiated protocol version helps clients and servers communicate. An older supported transport can still be usable.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP application UI

A2UI over MCP

UnscoredNot observed
What we found

No first-party HTTPS MCP endpoint was declared. This metadata-only check did not call tools or read app resources.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected application UI surface

An embedded interface can support interactive workflows. Many tools work without a user interface, so its absence is not a general readiness failure.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP App registration

UnscoredNot observed
What we found

No first-party HTTPS MCP endpoint was declared. This metadata-only check did not call tools or read app resources.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected application UI surface

An embedded interface can support interactive workflows. Many tools work without a user interface, so its absence is not a general readiness failure.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP Apps UI metadata quality

UnscoredNot observed
What we found

No first-party HTTPS MCP endpoint was declared. This metadata-only check did not call tools or read app resources.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected application UI surface

An embedded interface can support interactive workflows. Many tools work without a user interface, so its absence is not a general readiness failure.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Payment capabilities

Agentic Commerce Protocol

UnscoredNot observed
What we found

No Agentic Commerce Protocol checkout support declaration was observed in the bounded published API specifications checked.

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Payment-enabled business model

Payment support describes what the business offers. It must not make a research publication or free public service appear less ready.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

ACP delegated payments

UnscoredNot observed
What we found

No ACP delegated-payment support declaration was observed in the bounded published API specifications checked.

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Payment-enabled business model

Payment support describes what the business offers. It must not make a research publication or free public service appear less ready.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Agent Payments Protocol

UnscoredNot observed
What we found

No AP2 capability or mandate declaration was observed in the bounded UCP and published API surfaces checked.

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Payment-enabled business model

Payment support describes what the business offers. It must not make a research publication or free public service appear less ready.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Universal Commerce Protocol

UnscoredNot observed
What we found

No UCP discovery profile was found at /.well-known/ucp.

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Payment-enabled business model

Payment support describes what the business offers. It must not make a research publication or free public service appear less ready.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Machine payments (x402/MPP)

UnscoredCould not verify
What we found

No machine-payment signal observed (no HTTP 402, no payment-required response header, and no /.well-known/x402.json manifest). Payment support cannot be ruled out from an unauthenticated probe.

Why this is unscored

Useful context, outside the readiness score. Adoption, payment support and retrieval cost are not readiness quality by themselves.

When this matters

Payment-enabled business model

Payment support describes what the business offers. It must not make a research publication or free public service appear less ready.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

NLWeb support

NLWeb ask endpoint

UnscoredNot observed
What we found

An NLWeb /ask operation was not observed in the bounded shared OpenAPI discovery surface.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected NLWeb service

Useful protocol observations; optional implementation is not universal readiness.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

NLWeb streaming

UnscoredNot observed
What we found

NLWeb streaming support was not observed in the bounded shared OpenAPI discovery surface.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected NLWeb service

Useful protocol observations; optional implementation is not universal readiness.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

NLWeb schema feeds

UnscoredNot observed
What we found

No valid HTTPS SchemaMap directive was found in robots.txt.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected NLWeb service

Useful protocol observations; optional implementation is not universal readiness.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Authentication & credentials

10/24 ptsCan agents authenticate and manage credentials? · 5 conclusive · 9 additional

Usable least-privilege authentication

Auth discovery

0/5 ptsNot detected
What we found

No standardized authentication-discovery surface found.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Protected operations; anonymous access is valid when intended

Discovery, documentation and credential lifecycle jointly support a usable authorization flow. A public read-only service need not require OAuth.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Credential management

0/4 ptsNot detected
What we found

No credential management documentation found at the standard docs locations an agent would check.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Protected operations; anonymous access is valid when intended

Discovery, documentation and credential lifecycle jointly support a usable authorization flow. A public read-only service need not require OAuth.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Programmatic auth flow

5/5 ptsCross-verified
What we found

A programmatic auth flow is fully documented at https://developer.atlassian.com/cloud/trello/guides/rest-api/authorization/, with a non-interactive grant, token endpoint, scopes, and token expiry/refresh.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Protected operations; anonymous access is valid when intended

Discovery, documentation and credential lifecycle jointly support a usable authorization flow. A public read-only service need not require OAuth.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Auth documentation

5/5 ptsCross-verified
What we found

Authentication is fully documented at https://developer.atlassian.com/cloud/trello/guides/rest-api/authorization/, naming complete method(s) and how they are sent, corroborated across surfaces or covering multiple methods.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Protected operations; anonymous access is valid when intended

Discovery, documentation and credential lifecycle jointly support a usable authorization flow. A public read-only service need not require OAuth.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Safe integration environment

Sandbox environment

0/5 ptsNot detected
What we found

No sandbox or test environment documentation found at the standard docs locations an agent would check.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Operations whose side effects or onboarding require a safe test environment

A sandbox helps validate consequential integrations; it is not necessary for every public content site or read-only API.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

MCP authorization evidence

MCP authentication mechanism

UnscoredNot observed
What we found

No first-party HTTPS MCP endpoint was declared, so live authentication mechanism was not detected. Live MCP probe: 33 ms, 0 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Protected HTTP MCP; OAuth/PKCE only for applicable flow

Authentication metadata and challenges help clients understand how to obtain access. Observing a declaration does not prove that credentials can be issued or used successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP OAuth metadata

UnscoredNot observed
What we found

No first-party HTTPS MCP endpoint was declared, so live OAuth metadata was not detected. Live MCP probe: 33 ms, 0 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Protected HTTP MCP; OAuth/PKCE only for applicable flow

Authentication metadata and challenges help clients understand how to obtain access. Observing a declaration does not prove that credentials can be issued or used successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP PKCE S256

UnscoredNot observed
What we found

No first-party HTTPS MCP endpoint was declared, so live PKCE support was not detected. Live MCP probe: 33 ms, 0 protocol request(s).

Why this is unscored

Measured, but not yet weighted. It adds no points and its absence subtracts none. Scoring requires calibration of reliability, applicability and overlap with existing checks.

When this matters

Protected HTTP MCP; OAuth/PKCE only for applicable flow

Authentication metadata and challenges help clients understand how to obtain access. Observing a declaration does not prove that credentials can be issued or used successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Emerging authentication guidance

auth.md

UnscoredNot observed
What we found

The root auth.md document does not satisfy the exists criteria.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected emerging authentication scheme

An auth.md file is one possible guide. Reachable metadata and bounded simulation are not proof that credentials can be issued successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

auth.md structure

UnscoredNot observed
What we found

The root auth.md document does not satisfy the structured criteria.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected emerging authentication scheme

An auth.md file is one possible guide. Reachable metadata and bounded simulation are not proof that credentials can be issued successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

auth.md walkthrough simulation

UnscoredNot observed
What we found

The root auth.md document does not satisfy the walkthrough criteria.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected emerging authentication scheme

An auth.md file is one possible guide. Reachable metadata and bounded simulation are not proof that credentials can be issued successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Agent Auth discovery metadata

UnscoredNot observed
What we found

No conforming public Agent Auth discovery document was found.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected emerging authentication scheme

An auth.md file is one possible guide. Reachable metadata and bounded simulation are not proof that credentials can be issued successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Agent Auth endpoint reachability

UnscoredNot observed
What we found

No conforming public Agent Auth discovery document was found.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected emerging authentication scheme

An auth.md file is one possible guide. Reachable metadata and bounded simulation are not proof that credentials can be issued successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Agent Auth challenge

UnscoredNot observed
What we found

No observed API response advertised an AgentAuth discovery challenge.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected emerging authentication scheme

An auth.md file is one possible guide. Reachable metadata and bounded simulation are not proof that credentials can be issued successfully.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Reliability & recovery

15.7/30 ptsCan agents handle changes and failures? · 7 conclusive · 3 additional

Change and compatibility information

API versioning

1.8/5 ptsParseable
What we found

The API version is declared in the spec (info.version) at https://dac-static.atlassian.com/cloud/trello/swagger.v3.json. (source: spec)

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Maintained interface or evolving product

Version identifiers and change records help clients manage compatibility as an interface evolves.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Changelog presence

5/5 ptsCross-verified
What we found

A changelog is published at https://developer.atlassian.com/changelog/ with multiple recent dated entries, indicating it is actively maintained.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Maintained interface or evolving product

Version identifiers and change records help clients manage compatibility as an interface evolves.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Observable outcomes and recovery

Webhook documentation

1.8/5 ptsParseable
What we found

A webhook documentation page exists at https://developer.atlassian.com/cloud/trello/guides/rest-api/webhooks/, but it doesn't list specific event types with their payload shape.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Detected interface; idempotency for repeatable writes, webhooks only for event-driven workflows

Observable state and actionable errors help recovery. A status page or error schema does not prove successful repair.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Retry & idempotency

0/3 ptsNot detected
What we found

No retry or idempotency documentation found at the standard docs locations an agent would check.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Detected interface; idempotency for repeatable writes, webhooks only for event-driven workflows

Observable state and actionable errors help recovery. A status page or error schema does not prove successful repair.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Status & health endpoints

0.2/2 ptsDetected
What we found

Status page found at https://trello.status.atlassian.com/# (HTTP 200).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Detected interface; idempotency for repeatable writes, webhooks only for event-driven workflows

Observable state and actionable errors help recovery. A status page or error schema does not prove successful repair.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Error documentation

3.5/5 ptsUseful
What we found

Errors are documented at https://developer.atlassian.com/cloud/trello/guides/rest-api/status-codes/ with specific codes or a documented response shape. To reach the top level, it would need recovery guidance and a machine-readable error format, or corroboration against the API spec.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Detected interface; idempotency for repeatable writes, webhooks only for event-driven workflows

Observable state and actionable errors help recovery. A status page or error schema does not prove successful repair.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Agent-friendly 404s

UnscoredCould not verify
What we found

The missing-page probe returned HTTP 0; missing-page behavior is inconclusive.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Detected interface; idempotency for repeatable writes, webhooks only for event-driven workflows

Observable state and actionable errors help recovery. A status page or error schema does not prove successful repair.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

MCP error handling

UnscoredNot observed
What we found

No first-party HTTPS MCP endpoint was declared, so live error handling was not detected. Live MCP probe: 33 ms, 0 protocol request(s).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Detected interface; idempotency for repeatable writes, webhooks only for event-driven workflows

Observable state and actionable errors help recovery. A status page or error schema does not prove successful repair.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Actionable limits

Rate limit documentation

3.5/5 ptsUseful
What we found

Rate limits are documented at https://developer.atlassian.com/cloud/trello/guides/rest-api/rate-limits/ with a concrete limit and rate-limit response headers. To reach the top level, it would need 429 handling, Retry-After guidance, and tier/plan differences.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

An interface with quotas or throttling

Published limits and response headers help clients pace requests and recover from throttling. They describe related aspects of the same service constraint.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Rate-limit response headers

UnscoredNot observed
What we found

No rate-limit response headers were present.

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

An interface with quotas or throttling

Published limits and response headers help clients pace requests and recover from throttling. They describe related aspects of the same service constraint.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Identity & safeguards

5.6/11 ptsCan agents identify the publisher and its safeguards? · 4 conclusive · 3 additional

Attributable identity and consistent claims

Org identity signals

0.3/3 ptsDetected
What we found

Homepage exposes one org-identity signal (social).

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public company/service identity; MCP identity only for MCP

These establish provenance, disclosure routes and consistency. They cannot certify prompt-injection resistance or safe transactions.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

Metadata consistency

2.1/3 ptsUseful
What we found

One metadata consistency warning: canonical_mismatch.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public company/service identity; MCP identity only for MCP

These establish provenance, disclosure routes and consistency. They cannot certify prompt-injection resistance or safe transactions.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

security.txt

3/3 ptsCross-verified
What we found

security.txt at https://trello.com/.well-known/security.txt includes Contact, a future Expires date, and Encryption or Policy.

How this affects the score

These are recorded points before the total is normalized to 100.

When this matters

Public company/service identity; MCP identity only for MCP

These establish provenance, disclosure routes and consistency. They cannot certify prompt-injection resistance or safe transactions.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

MCP server identity

UnscoredNot observed
What we found

No first-party HTTPS MCP endpoint was declared, so live server identity was not detected. Live MCP probe: 33 ms, 0 protocol request(s).

Why this is unscored

Additional evidence for this capability. It earns no separate points, so observing another related signal does not count twice.

When this matters

Public company/service identity; MCP identity only for MCP

These establish provenance, disclosure routes and consistency. They cannot certify prompt-injection resistance or safe transactions.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Application isolation declarations

MCP App content security policy

UnscoredNot observed
What we found

No first-party HTTPS MCP endpoint was declared. This metadata-only check did not call tools or read app resources.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected MCP application UI

Declared origins and CSP are relevant safeguards for an embedded UI, but declarations alone do not establish effective isolation.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

MCP App rendering domain

UnscoredNot observed
What we found

No first-party HTTPS MCP endpoint was declared. This metadata-only check did not call tools or read app resources.

Why this is unscored

An emerging convention, not a universal requirement. It adds no points and its absence subtracts none. Adoption and reliable testing must justify any future weight.

When this matters

Detected MCP application UI

Declared origins and CSP are relevant safeguards for an embedded UI, but declarations alone do not establish effective isolation.

Evidence basis

These sources inform the check. They do not validate our exact point weights.

Current guidance · 2026-10-15. Recorded scores are unchanged.

Recorded evidence

No public evidence URL recorded for this check

Run a full scan of trello.com