Skip to main content
METHODOLOGY

How the Agent Readiness Score is calculated

Every scan returns an Agent Readiness Score from 0 to 100, built from individual checks grouped into five readiness categories. This page explains the categories and the checks behind them, how profile-aware weighting shapes the score, what each check status and severity means, and the evidence and remediation every result carries — plus the limits of what an MVP scan can and can't tell you.

Readiness categories and checks

Every check belongs to one of five categories. Together they describe how an AI crawler or agent discovers your site, reads its content, respects your access rules, finds the protocols it needs to act, and understands your products. The checks listed below are the exact set the scanner runs.

Discoverability

Checks: 3

Can agents find your site's entry points — robots.txt, sitemaps, canonical URLs, and machine-readable discovery links?

robots.txt
Access policy for AI crawlers
sitemap.xml
Sitemap completeness
Link headers
rel="alternate", canonical

Content accessibility

Checks: 3

Can agents read your content without running JavaScript — through server-rendered HTML, Markdown content negotiation, and llms.txt?

HTML without JS
Server-side rendering
Markdown negotiation
Accept: text/markdown
Meta & structured data
JSON-LD, Open Graph

Bot governance

Checks: 2

Do you give AI crawlers clear, explicit rules — which bots may access what, content-usage signals, and crawl-rate hints?

AI bot rules
GPTBot, ClaudeBot, PerplexityBot
robots directives
Content-Signal, TDMRep, noai

Protocols

Checks: 3

Can agents discover the protocols and APIs they need to act — MCP, OAuth metadata, API catalogs, and Agent Skills?

MCP discovery
/.well-known/mcp
OAuth discovery
PKCE, scopes
API catalog
OpenAPI, JSON Schema

Commerce

Checks: 1

Can AI shopping assistants read your products, prices, and feeds, and find agentic-commerce signals?

Agent commerce
Agent payment readiness

Profile-specific score weights

The overall score is a weighted roll-up of the five categories. The scan profile you choose changes how heavily each category counts, so the result reflects what matters for your kind of site. A category weighted at 0% for a profile does not run and never penalizes the score.

CategoryAll checksContent siteAPI/ApplicationE-commerce
Discoverability25% 35% 20% 20%
Content accessibility25% 40% 20% 20%
Bot governance20% 25% 20% 20%
Protocols20% 0% 40% 15%
Commerce10% 0% 0% 25%

These category weights match the scoring engine. Within each category, individual checks are weighted further by severity (see below).

Readiness levels

The 0–100 score also maps to a readiness level from 0 to 5 — a quick label for how far along a site is.

LevelScoreInterpretation
00–19The site is almost not ready for AI agents.
120–39Basic discoverability.
240–59Content is partially available to agents.
360–74Good agent readiness for content use cases.
475–89Ready for API and authenticated interactions.
590–100An advanced, agent-ready site.

Check statuses

Every check resolves to one of five statuses:

  • Pass

    The requirement is satisfied.

  • Partial

    Partial support, or an ambiguous result that only partly meets the requirement.

  • Fail

    The requirement is not satisfied.

  • N/A

    Not applicable to the selected profile, or excluded from a custom check scope. It carries zero possible score and never penalizes the result.

  • Unknown

    The check could not complete — usually a timeout, network error, or blocked response. A single failed check never aborts the scan.

Severity levels

Severity reflects how much a failing check matters. Within a category, a check's severity sets its weight, so higher-severity failures move the score more.

SeverityCheck weightExample
Critical×3Site unavailable, scanner blocked, or a private-IP redirect.
High×2Missing robots.txt, sitemap, or Markdown/LLM representation.
Medium×1Missing content-usage policy, Agent Skills, or API Catalog.
Low×0.5Missing optional metadata or weak descriptions.

Evidence and remediation

Every result is evidence-based. Each check stores only what it needs to justify its status: HTTP status codes, selected response headers, the public files and URLs it discovered, and short content snippets. Full HTML is not stored by default, and the scanner only ever reads public pages.

For each failed or partial check, the report adds plain-language remediation guidance and a ready-to-send task for your developer — what to change, the expected result, and a copy-paste prompt for coding assistants. Reports and prompts are available in Russian, Ukrainian, and English.

What the scanner does and doesn't do

The MVP scanner is deliberately narrow and safe:

  • It scans public HTTP/HTTPS URLs only — it cannot reach pages behind a login, forms, or internal and staging environments.
  • It validates DNS and every redirect hop and blocks private, loopback, link-local, multicast, and cloud-metadata IP ranges to prevent server-side request forgery.
  • It does not execute remote JavaScript; it reasons about the content available in the raw HTTP responses.
  • It does not run login flows, submit forms, or crawl entire sites — each scan inspects the target and its well-known endpoints.

The score reflects public signals at scan time, not a guarantee about future AI traffic. For the full limits, see the disclaimer.