agenticwebscore.com

• Not used 0 points Adopted Snippet and AI grounding directives — Not used: the homepage has no noarchive, nocache, nosnippet or max-snippet:0 directive, and no data-nosnippet attribute, so Bing applies none of the limits they set on snippets and Copilot answers. ⌄

  Observation

  no robots meta tag for robots, bingbot or googlebot, no X-Robots-Tag header · data-nosnippet: 0 elements

  noarchive, nocache, nosnippet and data-nosnippet limit how Bing shows a page and how Copilot uses it. Each is the site owner's choice.

  Sources: Bing Webmaster Guidelines, §10: NOARCHIVE, NOCACHE and NOSNIPPET (Microsoft Bing), Bing: robots meta tags and attributes that Bing supports (Microsoft Bing), Google: robots meta tag specifications (Google Search Central)

  Read today by

  Bing reads all five, and Copilot follows noarchive and nocache. Google reads nosnippet, max-snippet and data-nosnippet.

  Google Search

  Direct

  Note

  Each directive is your choice. noarchive keeps the page out of Copilot answers, nocache lets Copilot use only the URL, the title and the snippet, and nosnippet or data-nosnippet may limit the quality of what Copilot cites.

  Verify with

  HOMEPAGE=https://agenticwebscore.com/
  curl -sSL -o /dev/null -D - -A 'AgenticWebScore/0.3 (+https://agenticwebscore.com/bot)' -H 'Accept-Language: en' -H 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,text/plain;q=0.8,*/*;q=0.7' "$HOMEPAGE" | tr -d '\r' | grep -i '^x-robots-tag:'
  curl -sSL -A 'AgenticWebScore/0.3 (+https://agenticwebscore.com/bot)' -H 'Accept-Language: en' -H 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,text/plain;q=0.8,*/*;q=0.7' "$HOMEPAGE" | perl -0777 -ne 'my $h = /^(.*?)<\/head>/si ? $1 : substr($_, 0, 8192); while ($h =~ m{<meta\b[^>]*>}gi) { my $t = $&; next unless $t =~ /\bname=["\x27]?(robots|bingbot|googlebot)["\x27]?[\s>\/]/i; my $n = lc $1; my ($c) = $t =~ /\bcontent=["\x27]([^"\x27]*)/i; print "meta $n: ", ($c // ""), "\n" } my $body = $_; $body =~ s{<!--.*?-->}{}gs; $body =~ s{<(script|style|template|title|textarea|noscript)\b[^>]*>.*?</\1\s*>}{}gsi; my $n = 0; while ($body =~ m{<[a-z][a-z0-9-]*\b((?:[^>"\x27]|"[^"]*"|\x27[^\x27]*\x27)*)>}gi) { (my $t = $1) =~ s{"[^"]*"|\x27[^\x27]*\x27}{}g; $n++ if $t =~ /(?:^|\s)data-nosnippet(?=[\s=\/]|$)/i } print "data-nosnippet: $n\n"'

  Read the check page

• Not used 0 points Experimental Rate limits and quotas documented — Not published: the developer documentation (/docs/rate-limits answered HTTP 404) states no quota, and the probe responses carry 0 quota headers. ⌄

  Declared limits let a client pace its calls. RateLimit headers are an IETF draft.

  Sources: draft-ietf-httpapi-ratelimit-headers (IETF)

  Read today by

  API clients.

  Google Search

  None

  Note

  No IETF standard covers a machine-readable quota declaration: RateLimit and RateLimit-Policy are still an Internet-Draft (draft-ietf-httpapi-ratelimit-headers, a WG document and not an RFC), and the widely deployed X-RateLimit-* family was never specified. Publish the numbers as this documented local convention and make the server enforce them, because a page that promises a limit the API does not return 429 with Retry-After for misleads an agent more than no page at all.

  Verify with

  ORIGIN=https://agenticwebscore.com
  { curl -sSL -A 'AgenticWebScore/0.3 (+https://agenticwebscore.com/bot)' -H 'Accept-Language: en' -H 'Accept: application/json, application/linkset+json;q=0.9, */*;q=0.5' "$ORIGIN/rate-limits.json" | jq -c '{policies:[.policies[]?|{name,scope,limit,unit,window}],onExceeded}' 2>/dev/null || echo 'no rate-limits.json'; curl -sSL -A 'AgenticWebScore/0.3 (+https://agenticwebscore.com/bot)' -H 'Accept-Language: en' -H 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,text/plain;q=0.8,*/*;q=0.7' "$ORIGIN/docs/rate-limits" | grep -oiE '[0-9,]+ (requests?|calls?) per (second|minute|hour|day)|429|retry-after'; curl -sSL -A 'AgenticWebScore/0.3 (+https://agenticwebscore.com/bot)' -H 'Accept-Language: en' -H 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,text/plain;q=0.8,*/*;q=0.7' -D - -o /dev/null "$ORIGIN/" | grep -iE '^(HTTP/|ratelimit|retry-after|x-ratelimit)'; } | head -25

  Read the check page

• Not used 0 points Experimental Sandbox or test environment documented — Not published: the OpenAPI description at /openapi.json names no sandbox, staging or test environment. ⌄

  A documented sandbox lets a client test calls without touching production data.

  Sources: OpenAPI 3.1 (servers) (OpenAPI Initiative)

  Read today by

  API integrators.

  Google Search

  None

  Note

  Merge the two servers entries into the OpenAPI document you already publish rather than replacing it: OpenAPI standardises servers but says nothing about test keys, sandbox tenants, or data resets, so those can only be stated as info.description prose. A sandbox on its own host is reported as declared, not observed, because this scan requests no other host; one on the scanned host has to answer a request without credentials. The declaring source also has to say what the sandbox excludes - no live data, test data only, resets nightly - because that statement is part of what the check reads.

  Verify with

  ORIGIN=https://agenticwebscore.com
  { curl -sSL -A 'AgenticWebScore/0.3 (+https://agenticwebscore.com/bot)' -H 'Accept-Language: en' -H 'Accept: application/json, application/linkset+json;q=0.9, */*;q=0.5' "$ORIGIN/openapi.json" | jq -r '.servers[]?.url' 2>/dev/null | grep -iE 'sandbox|staging|test'; curl -sSL -A 'AgenticWebScore/0.3 (+https://agenticwebscore.com/bot)' -H 'Accept-Language: en' -H 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,text/plain;q=0.8,*/*;q=0.7' "$ORIGIN/docs/sandbox" | grep -oiE 'https://[a-z0-9.-]*(sandbox|staging)[a-z0-9./_-]*'; } | sort -u | while read -r u; do printf '%s -> ' "$u"; curl -sSL -A 'AgenticWebScore/0.3 (+https://agenticwebscore.com/bot)' -H 'Accept-Language: en' -H 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,text/plain;q=0.8,*/*;q=0.7' -o /dev/null -w '%{http_code} %{content_type}\n' "$u"; done

  Read the check page

• Present 0 points Experimental AI usage policy page — /ai-policy answered HTTP 200 with an AI policy page of 4122 characters, linked from the homepage. Checked because Content-Signal sets ai-train=no. ⌄

  Observation

  AI usage policy for this site's content — AgenticWebScore Skip to content AgenticWebScore Agent readiness Overview Scan Tools Methodology Checks Learn For agents Domain to scan Scan Scan Overview Scan Tools Methodology Checks Learn For agents Overview / AI us…

  A page that explains in prose the AI restrictions the site states. No standard defines it.

  Sources: RFC 9309 (IETF)

  Read today by

  People reading the site's terms.

  Google Search

  None

  Read the check page

• Present 0 points Adopted Breadcrumb markup on an inner page — The inner page /tools/llms-txt-checker states a BreadcrumbList of 3 named ListItems at positions 1–3, each but the last with an item URL. Google lets the last entry, the current page, omit it. ⌄

  Observation

  https://agenticwebscore.com/tools/llms-txt-checker · HTTP 200 · text/html · JSON-LD trail: Overview > Tools > llms.txt checker · ListItem: 3 · item URLs: 2

  BreadcrumbList states where an inner page sits in the site. A homepage has no trail.

  Sources: Google: breadcrumb (Google Search Central), Google blog (Google Search Central, 2025-01)

  Read today by

  Google shows breadcrumbs in desktop results.

  Google Search

  Direct

  Read the check page

• Present 0 points Adopted FAQ markup for visible questions — FAQPage states 5 questions, each typed Question with a name and an acceptedAnswer typed Answer with text. ⌄

  Observation

  visible questions under a FAQ heading: 0 · FAQPage nodes: 1 (JSON-LD) · questions: 5 · typed Question: 5 · complete: 5 · What is agent readiness? | How is this different from Lighthouse? | Why does a blocked site get no score instead of a… | Will it tell me to fix things that do not apply t…

  FAQPage marks up questions that are visible on the page. Google stopped showing FAQ rich results on 7 May 2026.

  Sources: Google Search updates (Google Search Central), Google: structured data policies (Google Search Central)

  Read today by

  Bing names FAQ markup as an example of labelled content.

  Google Search

  None

  Read the check page

• Present 0 points Adopted security.txt (RFC 9116) — security.txt at /.well-known/security.txt declares 1 Contact and an Expires 2027-10-28T00:00:00.000Z in the future. Not scored: its Policy URL /abuse answered HTTP 200. ⌄

  Observation

  Contact: mailto:hello@agenticwebscore.com Expires: 2027-10-28T00:00:00.000Z Preferred-Languages: en Canonical: https://agenticwebscore.com/.well-known/security.txt Policy: https://agenticwebscore.com/abuse#disclosure # We publish our measurement method and ou…

  security.txt tells a researcher where to report a vulnerability (RFC 9116). It has no effect on search.

  Sources: RFC 9116 (IETF, 2022-04)

  Read today by

  Security researchers and disclosure tools.

  Google Search

  None

  Read the check page

• Not used worth 5.3 points Experimental WebMCP browser tool declaration — Not used: the homepage has 2 forms, and none declares a WebMCP tool. ⌄

  WebMCP lets a page register tools for an in-browser agent. It is a W3C Community Group draft.

  Sources: WebMCP draft (W3C Web Machine Learning Community Group), Chrome: WebMCP (Chrome for Developers)

  Read today by

  Chrome, behind an origin trial. Lighthouse audits it.

  Google Search

  None

  Fix

  // WebMCP (W3C Community Group draft): register a tool an in-browser agent can call.
  if ('modelContext' in navigator) {
    navigator.modelContext.registerTool({
      name: 'search_site',
      description: 'Search this site and return the matching pages.',
      inputSchema: {
        type: 'object',
        properties: { query: { type: 'string', description: 'The words to search for' } },
        required: ['query'],
      },
      async execute({ query }) {
        // Call the site's own search here and return its results as text.
        return { content: [{ type: 'text', text: 'Results for ' + query }] };
      },
    });
  }

  Note

  WebMCP is a W3C Community Group draft, not on the W3C Standards Track, and Chrome exposes it behind an origin trial. The draft defines the in-page API only, so there is no manifest file to publish.

  Verify with

  HOMEPAGE=https://agenticwebscore.com/
  curl -sSL -A 'AgenticWebScore/0.3 (+https://agenticwebscore.com/bot)' -H 'Accept-Language: en' -H 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,text/plain;q=0.8,*/*;q=0.7' "$HOMEPAGE" | grep -oE 'registerTool\(|<form[^>]*toolname[^>]*>' | sort | uniq -c

  Read the check page

• Present Adopted AI crawler policy in robots.txt — 17 of 18 AI crawler tokens have their own robots.txt group: GPTBot, OAI-SearchBot, ChatGPT-User, ClaudeBot, Claude-User and PerplexityBot partly disallowed, and 11 more. The other 1 follow the * group (2 of the file's 36 rules). ⌄

  Observation

  GPTBot: own group, 2 rules, partly disallowed · OAI-SearchBot: own group, 2 rules, partly disallowed · ChatGPT-User: own group, 2 rules, partly disallowed · ClaudeBot: own group, 2 rules, partly disallowed · Claude-User: own group, 2 rules, partly disallowed · PerplexityBot: own group, 2 rules, partly disallowed · Perplexity-User: own group, 2 rules, partly disallowed · Google-Extended: own group, 2 rules, partly disallowed · Applebot-Extended: own group, 2 rules, partly dis…

  A crawler follows the robots.txt group that names it, otherwise the * group. A named group states the site's rules for that crawler.

  Sources: RFC 9309, 2.2.1 (IETF), Google common crawlers (Google Search Central), OpenAI bots (OpenAI)

  Read today by

  AI crawlers that document robots.txt tokens.

  Google Search

  None

  Read the check page

• Present Draft Content-Signal preferences — robots.txt states Content-Signal search=yes, ai-input=yes, ai-train=no in the User-agent: * group. 17 more lines state values for other groups. ⌄

  Observation

  robots.txt: ai-train=no, search=yes, ai-input=yes | ai-train=no, search=yes, ai-input=yes | ai-train=no, search=yes, ai-input=yes | ai-train=no, search=yes, ai-input=yes | ai-train=no, search=yes, ai-input=yes | ai-train=no, search=yes, ai-input=yes | ai-train=no, search=yes, ai-input=yes | ai-train=no, search=yes, ai-input=yes | ai-train=no, search=yes, ai-input=yes | ai-trai…

  Content-Signal states search, ai-input and ai-train preferences in robots.txt. No crawler documents honouring it.

  Sources: Cloudflare: Content Signals Policy (Cloudflare, 2025-09), IETF AIPREF (IETF)

  Read today by

  Cloudflare's scanner scores it. The IETF AIPREF drafts are the standards track.

  Google Search

  None

  Read the check page

• Present Adopted Discovery via Link response headers — The homepage Link header names /llms.txt (rel=describedby), the API catalog at /.well-known/api-catalog (rel=api-catalog), and a markdown variant of the homepage (rel=alternate). It does not name the OpenAPI document at /openapi.json. ⌄

  Observation

  link: <https://agenticwebscore.com/llms.txt>; rel="describedby"; type="text/plain", <https://agenticwebscore.com/methodology>; rel="service-doc"; type="text/html", <https://agenticwebscore.com/.well-known/api-catalog>; rel="api-catalog"; type="application/linkset+json", <https://agenticwebscore.com/index.md>; rel="alternate"; type="text/markdown"

  A Link header (RFC 8288) points a client at a resource before it parses the HTML.

  Sources: RFC 8288 (IETF), IANA link relations (IANA)

  Read today by

  Clients that follow RFC 8288 and RFC 9727 links.

  Google Search

  None

  Read the check page

• Present Draft /llms-full.txt expanded context — /llms-full.txt carries 99008 words of page text in 763 KB. /llms.txt links it. ⌄

  Observation

  HTTP 200 · text/plain · 763 KB · # AgenticWebScore — documentation > AgenticWebScore measures how well a website serves AI agents. Its 60 checks in 5 di…

  A convention that puts a site's text in one file. The llms.txt proposal does not define it.

  Sources: llmstxt.org (llmstxt.org), Mintlify (Mintlify)

  Read today by

  Some documentation tools.

  Google Search

  None

  Read the check page

• Present Draft /llms.txt published and well-structured — /llms.txt opens with H1 "AgenticWebScore", with 4 H2 link sections and 111 links, 24.5 KB. The scan requested 16 links it names, and each answered 2xx. Not requested: 93 same-origin links (the scan samples up to 6). ⌄

  Observation

  HTTP 200 · text/plain · 24.5 KB · headings: AgenticWebScore | Core | Learn | Checks | Discoverability | Content | Crawler access | API and agent (conditional) | Co…

  A 2024 proposal for a markdown index of a site. Google Search does not use it.

  Sources: llmstxt.org (llmstxt.org), Google: AI optimization guide (Google Search Central), Lighthouse llms.txt (Chrome for Developers)

  Read today by

  Some documentation tools and coding agents. Lighthouse audits it.

  Google Search

  None

  Read the check page

• Present Experimental Markdown content negotiation — The homepage serves text/markdown to `Accept: text/markdown, text/html;q=0.5`, with Vary: Accept (HTTP 200). ⌄

  Observation

  HTTP 200 · text/markdown · Vary: Accept · markdown body: yes

  Some coding agents ask for text/markdown. Google Search does not use markdown.

  Sources: RFC 7763 (IETF), Cloudflare: Markdown for Agents (Cloudflare), Google: AI optimization guide (Google Search Central)

  Read today by

  Claude Code, OpenCode and Cursor send Accept: text/markdown by default (Cloudflare, 2026-04).

  Google Search

  None

  Read the check page

• Present Adopted Structured errors for JSON requests — /aws-probe-659647ebb56f, asked for JSON, answered HTTP 404 as application/problem+json with the title "Not Found" (RFC 9457). ⌄

  Observation

  HTTP 404 · application/problem+json · 231 bytes

  An agent that asks for JSON and gets an HTML error page has to read a page meant for people. RFC 9457 defines a JSON error format.

  Sources: RFC 9457: Problem Details for HTTP APIs (IETF, 2023-07), RFC 9110, 12.5.1: Accept (IETF)

  Read today by

  API clients and agents that send Accept: application/json. No search engine reads it.

  Google Search

  None

  Read the check page

• Not used 0 points Experimental DNS-AID discovery record — Not published: 0 SVCB records and 0 TXT records resolve at _index._agents.agenticwebscore.com. ⌄

  Observation

  DNS-AID names queried for SVCB and TXT records: _index._agents.agenticwebscore.com

  DNS-AID publishes agents in DNS. It is an individual Internet-Draft with no IETF standing.

  Sources: draft-mozleywilliams-dnsop-dnsaid (IETF)

  Read today by

  Cloudflare's scanner.

  Google Search

  None

  Fix

  ; DNS-AID organization entry point (draft-mozleywilliams-dnsop-dnsaid)
  _index._agents.agenticwebscore.com. IN SVCB 1 <choose: host name that serves the agent index, ending in a dot> alpn=<choose: ALPN of the agent endpoint>
  

  Note

  DNS-AID is an individual Internet-Draft with no IETF standing. TYPE64 is the SVCB type by number, which older dig builds also answer.

  Verify with

  DOMAIN=agenticwebscore.com
  dig +short TYPE64 _index._agents.$DOMAIN; dig +short TXT _index._agents.$DOMAIN

  Read the check page

• Not used 0 points Draft MPP discovery in OpenAPI (x-payment-info) — Not declared: /openapi.json describes 5 operations, and none declares x-payment-info. ⌄

  Observation

  /openapi.json: HTTP 200, 33 KB; 5 operations read

  An operation with x-payment-info tells an agent that the call is paid, and states the intent, the payment method, and the amount. MPP is a draft, and charging agents is a business decision.

  Sources: MPP (mpp.dev), MPP: multi-method discovery (mpp.dev), draft-ryan-httpauth-payment (IETF (individual draft)), isitagentready.com: MPP skill (isitagentready.com)

  Read today by

  Agents that pay with MPP; isitagentready.com.

  Google Search

  None

  Note

  Add x-payment-info to each operation you charge for, inside the OpenAPI description you already serve. Whether to charge agents, how much, and by which method are your decisions. MPP is a draft, so the field names may change.

  Verify with

  ORIGIN=https://agenticwebscore.com
  # The scan reads the OpenAPI description it already holds. /openapi.json is the usual path; use the path your description is served at.
  curl -sSL -A 'AgenticWebScore/0.3 (+https://agenticwebscore.com/bot)' -H 'Accept-Language: en' -H 'Accept: application/json, application/linkset+json;q=0.9, */*;q=0.5' "$ORIGIN/openapi.json" | jq -c '[.paths | to_entries[] | .key as $p | .value | to_entries[] | select(.value | type == "object" and has("x-payment-info")) | {operation: ((.key | ascii_upcase) + " " + $p), "x-payment-info": .value["x-payment-info"]}]'

  Read the check page

• Present 0 points Draft Agent Skills declaration — Agent skills index at /.well-known/agent-skills/index.json lists 59 skills, each with name, type, description, url, and a sha256 digest. 10 of 59 artifacts were fetched, and each resolved with an acceptable content type. The remaining 49 declared urls are same-origin artifacts beyond this scan's 10-artifact sample, so their responses were not observed. ⌄

  An agent skills index lists skill packages for agent runtimes. It is a draft on GitHub.

  Sources: Agent Skills Discovery RFC (Cloudflare)

  Read today by

  Agent runtimes that read the draft.

  Google Search

  None

  Read the check page

• Present 0 points Draft MCP server card — MCP server card at /.well-known/mcp/server-card.json declares com.agenticwebscore/scan version 0.3.0 with 1 usable remote transport of type streamable-http. All of them answered this scan. The remote at /mcp answered HTTP 405 to a plain GET, so a server runs there that serves no stream on GET. ⌄

  Observation

  {"name":"com.agenticwebscore/scan","version":"0.3.0","remotes":["streamable-http"]}

  An MCP server card describes a remote MCP server. It is an optional extension (SEP-2127), not core MCP.

  Sources: SEP-2127 (Model Context Protocol, 2026-10), discovery.md (Model Context Protocol)

  Read today by

  MCP clients that implement SEP-2127; Cloudflare's scanner.

  Google Search

  None

  Read the check page

Sites with an API or agent surface

The scan found an MCP server and an HTTP API. A check that reads another kind of surface is not asked.

• Out of scope 0 points Draft A2A agent card — Not scored: this check applies to a site that runs an A2A agent, and the scan found none. ⌄

  An A2A agent card describes an agent the site runs. An A2A server publishes it.

  Sources: A2A specification (A2A Project)

  Read today by

  A2A clients.

  Google Search

  None

  Read the check page

• Out of scope 0 points Draft Cryptographically signed agent card — Not scored: this check applies to a site that runs an A2A agent, and the scan found none. ⌄

  An A2A card may be signed with JWS. Signing is optional in the specification.

  Sources: A2A specification (A2A Project), RFC 7515 (IETF)

  Read today by

  A2A clients that verify cards.

  Google Search

  None

  Read the check page

• Out of scope 0 points Experimental ARD resource discovery manifest — Not scored: the homepage links no ARD manifest, and the 4 manifest paths served none (/.well-known/ard.json 404 application/problem+json; /.well-known/agent-resources.json 404 application/problem+json; /.well-known/ai-catalog.json 404 application/problem+json; /ard.json 404 application/problem+json). ⌄

  An ARD manifest lists a site's agent resources. Lighthouse does not count a missing one against a site.

  Sources: Lighthouse agentic browsing (Chrome for Developers)

  Read today by

  Lighthouse (ard-schema audit).

  Google Search

  None

  Read the check page

• Out of scope 0 points Draft /auth.md agent authentication guide — Not scored: this check applies to a site that uses OAuth, and the scan found none. ⌄

  auth.md is one vendor's convention (WorkOS) for telling an agent how to authenticate.

  Sources: WorkOS auth.md (WorkOS)

  Read today by

  Agents built on WorkOS.

  Google Search

  None

  Read the check page

• Out of scope Adopted OAuth discovery documents — Not scored: this check applies to a site that uses OAuth, and the scan found none. ⌄

  OAuth metadata tells a client where and how to authorise against the API.

  Sources: RFC 8414 (IETF), RFC 9728 (IETF)

  Read today by

  OAuth clients; MCP clients use RFC 9728.

  Google Search

  None

  Read the check page

• Out of scope 0 points Draft Web Bot Auth key directory — Not scored: this check applies to a site that runs an A2A agent, and the scan found none. ⌄

  The operator of a signing agent publishes its keys here. A site that only serves content needs none.

  Sources: draft-ietf-webbotauth-httpsig-protocol (IETF, 2026-09), Cloudflare: Web Bot Auth (Cloudflare)

  Read today by

  Sites and CDNs that verify signed agents.

  Google Search

  None

  Read the check page

Sites with a commercial signal

The homepage shows no commercial signal, so commerce checks are not asked of this site.

• Out of scope 0 points Draft ACP discovery (/.well-known/acp.json) — Not scored: the homepage shows no commercial signal, so commerce checks are not asked of this site. ⌄

  An ACP discovery document at /.well-known/acp.json tells an agent where a business's checkout API is and which services it offers. The RFC behind it is a proposal.

  Sources: ACP discovery RFC (status: Proposal) (Agentic Commerce Protocol), isitagentready.com: ACP skill (isitagentready.com)

  Read today by

  Agents that implement ACP checkout; isitagentready.com.

  Google Search

  None

  Read the check page

• Out of scope 0 points Draft Agent purchase policy — Not scored: the homepage shows no commercial signal, so commerce checks are not asked of this site. ⌄

  Whether agents may buy, and with what approval, is a policy the site states.

  Sources: ACP (Agentic Commerce Protocol)

  Read today by

  Agent checkouts.

  Google Search

  None

  Read the check page

• Out of scope Adopted Inventory and price freshness — Not scored: the homepage shows no commercial signal, so commerce checks are not asked of this site. ⌄

  availability says whether an item is in stock. A past priceValidUntil can hide a product snippet.

  Sources: Google: product snippet (Google Search Central)

  Read today by

  Google product snippets.

  Google Search

  Direct

  Read the check page

• Out of scope 0 points Draft Agent payment protocol (UCP profile or x402) — Not scored: the homepage shows no commercial signal, so commerce checks are not asked of this site. ⌄

  Agent payment protocols are early. Accepting one is a business decision. This check reads UCP and x402. ACP and MPP have checks of their own.

  Sources: UCP (Universal Commerce Protocol), x402 (x402)

  Read today by

  Agent checkouts that implement UCP or x402.

  Google Search

  None

  Read the check page

• Out of scope Adopted Product/catalog schema — Not scored: the homepage shows no commercial signal, so commerce checks are not asked of this site. ⌄

  Product and Offer markup on product pages feeds merchant listings.

  Sources: Google: merchant listing (Google Search Central), Google: product (Google Search Central)

  Read today by

  Google merchant listings and shopping agents.

  Google Search

  Direct

  Read the check page

• Out of scope Adopted Return policy machine-readable — Not scored: the homepage shows no commercial signal, so commerce checks are not asked of this site. ⌄

  A MerchantReturnPolicy states return terms in markup, also under the Organization.

  Sources: Google: return policy (Google Search Central)

  Read today by

  Google merchant listings.

  Google Search

  Direct

  Read the check page

• Out of scope Adopted Seller identity declared — Not scored: the homepage shows no commercial signal, so commerce checks are not asked of this site. ⌄

  On a marketplace, the seller named on an offer is who the buyer contracts with.

  Sources: Google: merchant listing (Google Search Central)

  Read today by

  Google merchant listings.

  Google Search

  Direct

  Read the check page

• Out of scope Adopted Shipping cost and delivery declared — Not scored: the homepage shows no commercial signal, so commerce checks are not asked of this site. ⌄

  shippingDetails lets a client compute the delivered price.

  Sources: Google: merchant listing (Google Search Central)

  Read today by

  Google merchant listings.

  Google Search

  Direct

  Read the check page

• Out of scope 0 points Draft UCP manifest (/.well-known/ucp) — Not scored: the homepage shows no commercial signal, so commerce checks are not asked of this site. ⌄

  A UCP profile at /.well-known/ucp declares commerce capabilities. UCP is a draft.

  Sources: UCP (Universal Commerce Protocol), Shopify profiles (Shopify)

  Read today by

  UCP agents; Shopify stores serve it.

  Google Search

  None

  Read the check page

Every site

• Out of scope 0 points Draft Machine-readable booking action — Not scored: this check applies to services sites; this site was measured as API platform. ⌄

  A ReserveAction declares a booking target in markup. No search engine documents a feature that reads it.

  Sources: schema.org/ReserveAction (Schema.org)

  Read today by

  None documented.

  Google Search

  None

  Read the check page

• Out of scope 0 points Adopted Documents in machine-readable formats — Not scored: this check applies to institution sites; this site was measured as API platform. ⌄

  Tagged PDF or an HTML version can be read by screen readers and by machines.

  Sources: GOV.UK: HTML not PDF (Government Digital Service), ISO 14289 (PDF/UA) (ISO)

  Read today by

  Screen readers; GOV.UK publishes HTML first.

  Google Search

  None

  Read the check page

• Out of scope 0 points Draft Reuse and licensing terms declared — Not scored: this check applies to publisher or institution sites; this site was measured as API platform. ⌄

  TDMRep reserves text and data mining rights in a machine-readable form, as EU DSM Article 4(3) allows.

  Sources: TDMRep CG report (W3C), Directive (EU) 2019/790 (European Union)

  Read today by

  Text and data mining tools that implement TDMRep.

  Google Search

  None

  Read the check page

• Out of scope 0 points Adopted Content provenance declared — Not scored: this check applies to publisher or institution sites; this site was measured as API platform. ⌄

  Article markup with an author and dates lets a client attribute and date a source.

  Sources: Google: Article structured data (Google Search Central)

  Read today by

  Google article features.

  Google Search

  Direct

  Read the check page

• Out of scope Adopted Service/product scope machine-readable — Not scored: the homepage markup declares no Service-type node. ⌄

  Service markup states what is offered, by whom and where. An incomplete node leaves a client to guess.

  Sources: schema.org/Service (Schema.org)

  Read today by

  Clients that read schema.org Service. Google has no Service rich result.

  Google Search

  None

  Read the check page

• Passed Adopted MCP server answers and lists its tools — The server card at /.well-known/mcp/server-card.json names https://agenticwebscore.com/mcp. It answered initialize with protocol version 2025-11-25, and tools/list named 4 tools: "scan_site", "get_score", "list_checks", and "get_report". The scan called no tool. ⌄

  Observation

  {"endpoint":"https://agenticwebscore.com/mcp","discoveredBy":"server-card","protocolVersion":"2025-11-25","tools":["scan_site","get_score","list_checks","get_report"],"requests":["initialize 200","notifications/initialized 202","tools/list 200"]}

  An agent given the address of an MCP server can call its tools. The scan opens one session to see that the server answers and what it offers.

  Sources: MCP 2025-11-25: lifecycle (Model Context Protocol, 2025-11), MCP 2025-11-25: transports (Model Context Protocol, 2025-11), MCP 2025-11-25: tools (Model Context Protocol, 2025-11), Agentic AI Foundation: MCP joins the Linux Foundation (Linux Foundation, 2025-12)

  Read today by

  MCP clients: agent apps, coding agents, and chat products that connect to MCP servers.

  Google Search

  None

  Read the check page

• Passed Adopted OpenAPI definition — OpenAPI 3.1.0 at /openapi.json (api-catalog service-desc (/.well-known/api-catalog)) declares info.title "AgenticWebScore API", info.version 0.9, and 4 paths. Not scored: the scan requested 2 of its 2 GET operations on this origin, and 1 answered with 2xx: /api/scan answered HTTP 400; /api/health answered HTTP 200. ⌄

  Observation

  tried: /openapi.json 200

  An OpenAPI document describes an HTTP API so a client can call it without guessing.

  Sources: OpenAPI 3.1 (OpenAPI Initiative), RFC 8631 (IETF)

  Read today by

  API clients and code generators.

  Google Search

  None

  Read the check page

• Passed Adopted JSON-LD structured data — 1 JSON-LD block parses, and the page entity, Organization "AgenticWebScore", is stated under a schema.org @context. ⌄

  Observation

  JSON-LD: 1 blocks, 1 parsed · schema.org @context: yes · Microdata: 0 items · RDFa: 0 items · top-level types: Organization, WebSite, SoftwareApplication, FAQPage, WebPage

  Structured data names the entity a page describes. Google reads JSON-LD, Microdata and RDFa alike.

  Sources: Google: intro to structured data (Google Search Central), schema.org (Schema.org), Bing Webmaster Guidelines, §14: structured data (Microsoft Bing)

  Read today by

  Google rich results; any schema.org reader.

  Google Search

  Direct

  Read the check page

• Passed Adopted Content that needs no JavaScript — 14353 characters of text are in the HTML before any script runs. ⌄

  Observation

  static text: 14353 characters · inside <noscript>: 0 characters · markup: 65626 characters

  Several AI crawlers do not run JavaScript. Text that appears only after scripts run is invisible to them.

  Sources: Vercel: the rise of the AI crawler (Vercel), Google: JavaScript SEO basics (Google Search Central), Bing Webmaster Guidelines, §8: rendering (Microsoft Bing)

  Read today by

  GPTBot and ClaudeBot fetch HTML without rendering; Googlebot renders.

  Google Search

  Indirect

  Read the check page

• Passed Adopted Readable homepage — HTTP 200 text/html, 64.2 KB, 2355 words of visible text. ⌄

  Observation

  HTTP 200 · text/html · 64.2 KB

  The homepage is the first URL every agent requests. An error or an empty page gives it nothing to read.

  Sources: RFC 9110 (IETF), Google: 301 redirects (Google Search Central), Bing Webmaster Guidelines, §7: 301 and 302 redirects (Microsoft Bing)

  Read today by

  Every crawler and agent.

  Google Search

  Direct

  Read the check page

• Passed Adopted Semantic heading structure — 1 H1, 15 H2s, and 13 H3s in an outline of 29 headings, with no skipped level. ⌄

  Observation

  outline: H1 H2 H2 H3 H2 H3 H3 H3 H2 H2 H2 H3 H3 H3 H3 H2 H2 H2 H2 H3 H3 H3 H3 H3 H2 H2 H2 H2 H2

  Headings outline the page for screen readers and for any client that splits text by section.

  Sources: W3C WAI headings tutorial (W3C), Google SEO starter guide (Google Search Central), Bing Webmaster Guidelines, §13: titles, descriptions and headings (Microsoft Bing)

  Read today by

  Screen readers; clients that chunk HTML by heading.

  Google Search

  Indirect

  Read the check page

• Passed Adopted Homepage indexable: no noindex directive — No noindex: the homepage has no robots meta tag for robots, bingbot or googlebot, and no X-Robots-Tag header. ⌄

  Observation

  no robots meta tag for robots, bingbot or googlebot, no X-Robots-Tag header

  A noindex in a meta tag or in a response header keeps the page out of search results. Bing keeps it out of Copilot too.

  Sources: Bing Webmaster Guidelines, §10: NOINDEX and the other robots directives (Microsoft Bing), Bing: robots meta tags and attributes that Bing supports (Microsoft Bing), Google: block indexing with noindex (Google Search Central), Google: robots meta tag specifications (Google Search Central)

  Read today by

  Google and Bing. Bing applies the same directives to Copilot answers.

  Google Search

  Direct

  Read the check page

• Passed Adopted Title and description — Title "Agent readiness checker: see your site the way agents do" (56 characters) and a description of 156 characters. ⌄

  Observation

  title (56 characters): Agent readiness checker: see your site the way agents do · description (156 characters): Agent readiness checker: see your site the way AI agents do. AgenticWebScore runs 60 checks from the outside and shows the evidence and the source for each. · first H1: See your site the way agents do.

  The title and the description say what a page is about. Google uses them for the title link and the snippet.

  Sources: Google: title links (Google Search Central), Google: snippets (Google Search Central), Bing Webmaster Guidelines, §13: titles, descriptions and headings (Microsoft Bing), Microsoft: optimizing content for AI search answers (Microsoft Advertising, 2025-10)

  Read today by

  Google, Bing, and link previews.

  Google Search

  Direct

  Read the check page

• Passed Adopted robots.txt crawl policy — /robots.txt has 18 groups and 36 rules across all groups, and 1 Sitemap line. ⌄

  Observation

  HTTP 200 · text/plain · 2.7 KB · # AgenticWebScore — robots.txt # Policy rationale: https://agenticwebscore.com/ai-policy # Named AI agents are explicitly welcome. There is…

  Crawlers read robots.txt before they fetch a page (RFC 9309). Its Sitemap line tells them where the URL list is.

  Sources: RFC 9309 (IETF, 2022-09), Google robots.txt (Google Search Central)

  Read today by

  Google, Bing, and the AI crawlers that document robots.txt support.

  Google Search

  Direct

  Read the check page

• Passed Adopted XML sitemap — Sitemap https://agenticwebscore.com/sitemap.xml parses and lists 108 URLs, each with <lastmod>. ⌄

  Observation

  HTTP 200 · application/xml · 12.3 KB · root <urlset>

  A sitemap lists the URLs a site wants crawled. Google says a small, well-linked site may not need one.

  Sources: Google: build a sitemap (Google Search Central), sitemaps.org (sitemaps.org), Bing Webmaster Guidelines, §3: lastmod (Microsoft Bing)

  Read today by

  Google and Bing.

  Google Search

  Direct

  Read the check page

• Passed Adopted API catalog — Linkset at /.well-known/api-catalog carries 1 entry, and 1 of them pairs an anchor with a service-desc link, the first pointing at https://agenticwebscore.com/openapi.json. The scan requested the same-origin service-desc target /openapi.json, which answered HTTP 200. Not scored: the service-doc target /methodology answered HTTP 200. Not scored: the service-doc target /llms-full.txt answered HTTP 200. Not scored: the service-doc target /auth.md was not requested by this scan. Not scored: 1 further catalog target is not listed: 1 was requested and 0 were not. Not scored: that target is the API … ⌄

  Observation

  relations: service-desc, service-doc, describedby, status, item; observed target: /openapi.json

  An API catalog lists a publisher's APIs in one document at a fixed address (RFC 9727).

  Sources: RFC 9727 (IETF, 2025-06)

  Read today by

  API clients that follow RFC 9727.

  Google Search

  None

  Read the check page

• Passed Adopted Documentation reachable — Documentation is reachable at /methodology (Link header rel=service-doc) and returns HTTP 200 text/html with 8362 readable words. ⌄

  Observation

  tried: /methodology 200 | /llms-full.txt 200 | /docs 404 | /documentation 404 | /developers 404 | /gelistiriciler 404

  Documentation linked as service-doc (RFC 8631), or from the homepage, is how a client learns the API.

  Sources: RFC 8631 (IETF)

  Read today by

  Developers and agents integrating the API.

  Google Search

  None

  Read the check page

• Passed Adopted Canonical URL — Canonical https://agenticwebscore.com/ matches the page reached. ⌄

  Observation

  <link rel="canonical" href="https://agenticwebscore.com/">

  A canonical link names the one URL a page is known by. Google treats it and redirects as canonical signals.

  Sources: Google: consolidate duplicate URLs (Google Search Central), RFC 6596 (IETF), Bing Webmaster Guidelines, §6: duplicate URLs and canonicals (Microsoft Bing)

  Read today by

  Google and Bing.

  Google Search

  Direct

  Read the check page

• Passed Adopted Structured pricing information — Homepage markup carries 1 complete price node; the first, Offer (unnamed), states 0 USD. ⌄

  Observation

  {"price":0,"priceCurrency":"USD","where":"homepage"}

  A price in markup is read without parsing prose. An Offer with a price and no currency is ambiguous.

  Sources: schema.org/Offer (Schema.org), Google: product snippet (Google Search Central)

  Read today by

  Clients that read schema.org Offer. Google reads an Offer only inside a Product, which product-schema measures.

  Google Search

  None

  Read the check page

• Passed Adopted Service status and changelog feed — The status page /status (HTTP 200) and the changelog feed (application/atom+xml) /changelog (HTTP 200) both answered, and the newest feed entry is 9 days old. ⌄

  A status page and a changelog feed say whether the service is up and what changed.

  Sources: RFC 9727 (status relation) (IETF), RFC 4287 (IETF)

  Read today by

  Integrators and monitoring tools.

  Google Search

  None

  Read the check page

• Passed Adopted Structured contact information — Homepage markup declares 1 organization-type node; Organization "AgenticWebScore" has a ContactPoint of contactType "customer support" reachable at hello@agenticwebscore.com. ⌄

  A ContactPoint in the Organization markup makes the contact route machine-readable.

  Sources: Google: Organization structured data (Google Search Central)

  Read today by

  Google lists contactPoint as a recommended Organization property.

  Google Search

  Indirect

  Read the check page

• Passed Adopted HTTP caching of the homepage — The homepage sends Cache-Control "public, max-age=0, must-revalidate" and ETag, and a request with If-None-Match was answered HTTP 304 Not Modified. ⌄

  Observation

  Cache-Control: public, max-age=0, must-revalidate · ETag: "a1122c58ddaba990d49fe64c54804c37" · Last-Modified: (none) · conditional GET with If-None-Match: HTTP 304

  Cache-Control says how long the homepage may be reused. A validator lets a crawler ask whether it changed, and a 304 answer skips the body.

  Sources: RFC 9111: HTTP Caching (IETF, 2022-06), RFC 9110, 13: conditional requests (IETF), Google: HTTP caching for crawlers (Google Search Central, 2024-12), Bing Webmaster Guidelines, §3: ETag and lastmod (Microsoft Bing)

  Read today by

  Googlebot sends If-None-Match and If-Modified-Since. Every HTTP cache reads Cache-Control.

  Google Search

  Direct

  Read the check page

• Passed Adopted Language declaration and multilingual access — html lang="en" is a well-formed BCP 47 tag, with no hreflang alternates. ⌄

  Observation

  html lang="en" · alternates: none · content-language: (none)

  The lang attribute names the language of the text. WCAG 3.1.1 requires it at level A. Google reads hreflang, not lang.

  Sources: WCAG 2.2, 3.1.1 (W3C), Google: managing multi-regional sites (Google Search Central), Google: localized versions (Google Search Central)

  Read today by

  Screen readers and translation tools. Google ignores the lang attribute and reads hreflang.

  Google Search

  Indirect

  Read the check page

• Passed Adopted A real 404 for a missing page — /aws-probe-659647ebb56f, a path that does not exist, answered HTTP 404. ⌄

  Observation

  HTTP 404 · text/html · first 16 KB read

  A URL that does not exist answers 404 or 410 (RFC 9110). A 200 there makes every mistyped link look like a page.

  Sources: RFC 9110, 15.5.5: 404 Not Found (IETF), Google: HTTP status codes and soft 404s (Google Search Central), Bing Webmaster Guidelines, §9: 404 for missing pages (Microsoft Bing)

  Read today by

  Google reports a missing page that answers 200 as a soft 404. Every HTTP client reads the status first.

  Google Search

  Direct

  Read the check page

• Passed Adopted Per-page content separation (no SPA fallback) — The homepage and /about have different titles ("Agent readiness checker: see your site …" and "About this service: who runs it and wha…") and different main text (11% word overlap). ⌄

  Observation

  compared / with /about · titles "Agent readiness checker: see your site the way ag…" / "About this service: who runs it and what a score …" · skeleton 24% · main-text word overlap 11% · main text 1220 characters

  A route that answers every URL with the same page makes every URL look alike to a crawler.

  Sources: Google: HTTP errors and soft 404s (Google Search Central)

  Read today by

  Google flags such pages as soft 404s.

  Google Search

  Direct

  Read the check page

• Passed Adopted Responsive markup — viewport content "width=device-width, initial-scale=1" sets width=device-width and leaves zoom on. ⌄

  Observation

  viewport meta: width=device-width, initial-scale=1

  Google indexes the smartphone rendering of a page. A viewport that blocks zoom fails WCAG 1.4.4.

  Sources: Google: mobile-first indexing (Google Search Central), WCAG 2.2, 1.4.4 (W3C)

  Read today by

  Browsers; Google's smartphone crawler renders the page with it. No Google feature reads the tag itself.

  Google Search

  Indirect

  Read the check page