# Rules Catalog | AgentBadge

> All 147 agent readiness rules across 25 categories. Understand what AgentBadge checks and why each rule matters for AI agent compatibility.

Skip to content

 [![](https://agentbadge.xyz/icons/logo-32.webp)
 AgentBadge](https://agentbadge.xyz/)
 ![](https://agentbadge.xyz/icons/arc.png) Arc Mainnet

 [Scanner](https://agentbadge.xyz/services/scanner)
 [Passports](https://agentbadge.xyz/services/passports)
 [Marketplace](https://agentbadge.xyz/services/marketplace)
 [Blog](https://agentbadge.xyz/blog)
 [Dashboard](https://agentbadge.xyz/dashboard)

 [AI Builders](https://agentbadge.xyz/hackathon/ai-builders)
 [Agents](https://agentbadge.xyz/ui/agents)
 [Search](https://agentbadge.xyz/ui/search)
 [Catalog](https://agentbadge.xyz/ui/catalog)
 [A2A Inbox](https://agentbadge.xyz/ui/a2a)
 [Marketplace](https://agentbadge.xyz/ui/market/tasks)

 [Help](https://agentbadge.xyz/ui/help)
 [Rules](https://agentbadge.xyz/rules)
 [Contact](https://agentbadge.xyz/contact)
 [FAQ](https://agentbadge.xyz/faq)

 Services
 [Scanner](https://agentbadge.xyz/services/scanner)
 [Passports](https://agentbadge.xyz/services/passports)
 [Marketplace](https://agentbadge.xyz/services/marketplace)
 [Blog](https://agentbadge.xyz/blog)
 Hackathons
 [AI Builders](https://agentbadge.xyz/hackathon/ai-builders)
 Platform
 [Dashboard](https://agentbadge.xyz/dashboard)

 [Passport](https://agentbadge.xyz/passport)
 [Agents](https://agentbadge.xyz/ui/agents)
 [Search](https://agentbadge.xyz/ui/search)
 [Catalog](https://agentbadge.xyz/ui/catalog)
 [A2A Inbox](https://agentbadge.xyz/ui/a2a)
 [Marketplace](https://agentbadge.xyz/ui/market/tasks)
 [Medical Demo](https://agentbadge.xyz/ui/medical-demo)
 [Help](https://agentbadge.xyz/ui/help)
 [Rules](https://agentbadge.xyz/rules)
 [Contact](https://agentbadge.xyz/contact)
 [FAQ](https://agentbadge.xyz/faq)

 Agent Readiness Rules

# What We Check

 147 rules across 25 categories. Each rule ensures your site is
 discoverable, understandable, and usable by AI agents.

 [View as checklist](https://agentbadge.xyz/agent-readiness-checklist)

 Quick fix

 Moderate

 Complex

 CRITICAL
 MEDIUM
 LOW
 Severity

 Gap types:
 Documentation Semantic Capability Evidence

## Learn about agent readiness

New to agent readiness? Start with these guides:

 [What is an AI-Ready API?](https://agentbadge.xyz/what-is-agent-readiness)
 [How to Make an API Agent-Ready](https://agentbadge.xyz/how-to-make-an-api-agent-ready)
 [Agent Readiness vs SEO](https://agentbadge.xyz/agent-readiness-vs-seo)
 [OpenAPI vs Agent Readiness](https://agentbadge.xyz/openapi-vs-agent-readiness)

## Discovery

Can an agent find you?

 Weight: 20

 🔍

Discovery

Can AI agents find your site and understand what it offers?

 15 rules

 [🔍

 Robots.txt File
 Your site has a robots.txt file that tells crawlers and AI agents what they can access.

 low

 Quick fix

 Documentation](https://agentbadge.xyz/rules/AB-001)
 [🗺️

 Sitemap File
 Your site has a sitemap listing all important pages for agents to discover.

 low

 Quick fix

 Documentation](https://agentbadge.xyz/rules/AB-002)
 [🧭

 Agent Guide
 Your site has a dedicated guide that tells AI agents what you offer and how to interact.

 high

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-003)
 [📄

 LLMs.txt File
 Your site has an llms.txt file that provides a plain-text overview for large language models.

 medium

 Quick fix

 Documentation](https://agentbadge.xyz/rules/AB-014)
 [🔗

 Link Relationships
 Your homepage includes link headers that connect related resources together.

 medium

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-061)
 [📚

 API Catalog
 Your site publishes a catalog of all available APIs in a standard location.

 medium

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-062)
 [🏷️

 Content Signals
 Your robots.txt declares preferences about how AI can use your content.

 low

 Quick fix

 Documentation](https://agentbadge.xyz/rules/AB-066)
 [🌐

 DNS Agent Discovery
 Your domain has DNS records that help agents discover your services automatically.

 low

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-068)
 [map

 Blog articles in AI sitemap
 AI sitemap includes blog/article URLs, not just static pages.

 medium

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-110)
 [clock

 Crawl-delay directive in robots.txt
 robots.txt includes a Crawl-delay directive to control crawl rate.

 low

 Quick fix

 Documentation](https://agentbadge.xyz/rules/AB-111)
 [policy

 LLM policy file
 LLM usage policy published at /.well-known/llm-policy.json.

 low

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-113)
 [coverage

 AI sitemap content type coverage
 AI sitemap covers at least 50% of the URLs in the regular sitemap.

 medium

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-114)
 [🧭

 Capability list declared
 A capabilities list is present in agent-guide.

 medium

 Quick fix

 Documentation](https://agentbadge.xyz/rules/AB-158)
 [🤖

 AI-Agent Discovery meta tags
 Your HTML head declares ai-agent-discovery and ai-agent-onboarding meta tags pointing to machine-readable entry points.

 high

 Quick fix

 Documentation](https://agentbadge.xyz/rules/AB-161)
 [📡

 Agent feeds (JSON Feed 1.1 / RSS 2.0)
 Your site serves structured JSON Feed 1.1 or RSS 2.0 feeds at common paths like /agents.json, /jobs.rss, or /feed.json.

 low

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-165)

 🤖

Machine-Readable

Is your site's data structured for AI consumption?

 9 rules

 [💲

 Machine-Readable Pricing
 Your pricing information is available in a format agents can parse automatically.

 medium

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-010)
 [⏱️

 Rate Limits Declared
 Your site declares its rate limits in a machine-readable format.

 low

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-011)
 [⚠️

 Structured Error Responses
 Your API returns errors in a consistent, machine-readable format.

 low

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-012)
 [🛠️

 MCP Tools List
 Your MCP server responds to tool listing requests.

 high

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-020)
 [📞

 MCP Tool Calls
 Your MCP server responds when agents try to call a tool.

 high

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-021)
 [📡

 MCP Streaming Support
 Your MCP server supports streaming connections for real-time communication.

 medium

 Complex

 Documentation](https://agentbadge.xyz/rules/AB-022)
 [card

 Agent Card version 1.0.0+
 Agent Card JSON includes a version field >= 1.0.0.

 medium

 Quick fix

 Documentation](https://agentbadge.xyz/rules/AB-109)
 [📋

 Skill.json (JSON-LD) availability
 Your site serves /skill.json as JSON-LD with @context, @type, name, and url/endpoints for machine-readable agent onboarding.

 low

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-163)
 [❗

 Error catalog endpoint
 Your site serves a JSON error catalog at /api/meta/errors or /errors.json with error codes and descriptions.

 low

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-164)

 📋

OpenAPI

Is your API specification complete and reachable?

 9 rules

 [📋

 API Spec at Standard Location
 Your API specification is published at the standard location agents expect.

 high

 Quick fix

 Documentation](https://agentbadge.xyz/rules/AB-039)
 [🛤️

 API Paths Defined
 Your API specification lists all available paths and endpoints.

 medium

 Complex

 Documentation](https://agentbadge.xyz/rules/AB-040)
 [🌐

 API Paths Reachable
 All endpoints defined in your API spec actually work when agents call them.

 medium

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-041)
 [🔍

 Response Matches Spec
 Your API responses match what your specification promises.

 low

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-042)
 [🔢

 API Version Identified
 Your API specification clearly states which version it is.

 low

 Quick fix

 Documentation](https://agentbadge.xyz/rules/AB-043)
 [🏷️

 API Title
 Your API specification has a clear title that describes your service.

 low

 Quick fix

 Documentation](https://agentbadge.xyz/rules/AB-044)
 [🛤️

 OpenAPI Paths Reachable
 At least half the paths declared in your OpenAPI spec return valid responses when probed.

 medium

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-076)
 [📋

 OpenAPI Response Matches Spec
 Your API responses match the structure declared in your OpenAPI specification.

 medium

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-077)
 [💳

 Payment Info in OpenAPI
 Your OpenAPI spec declares payment information for paid operations so agents know which endpoints cost money.

 medium

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-078)

 🎯

Skills

Can agents discover and use your specialized skills?

 3 rules

 [🎯

 Skill File Present
 Your site has a skill file that describes specialized capabilities agents can use.

 medium

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-026)
 [✓

 Skill File Format Valid
 Your skill file follows the expected format with proper metadata.

 low

 Quick fix

 Documentation](https://agentbadge.xyz/rules/AB-027)
 [📚

 Skills Index
 Your site has an index listing all available skills in one place.

 medium

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-065)

 📜

Agents.txt

Do you have instructions specifically for AI agents?

 1 rule

 [📜

 Agents.txt File
 Your site has an agents.txt file with instructions specifically for AI agents.

 medium

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-048)

 🌐

WebMCP

Can browsers interact with your agent via MCP?

 7 rules

 [🌐

 WebMCP Manifest
 Your site has a WebMCP manifest that enables browser-based agent interactions.

 medium

 Complex

 Documentation](https://agentbadge.xyz/rules/AB-050)
 [📝

 WebMCP Form Annotations
 Your forms are annotated so WebMCP agents can fill them automatically.

 low

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-051)
 [🖥️

 WebMCP Browser Tools
 Your site exposes browser-side tools that agents can call through WebMCP.

 medium

 Complex

 Documentation](https://agentbadge.xyz/rules/AB-069)
 [🌐

 MCP namespace-based tool isolation
 Your MCP server exposes tools with namespace prefixes for multi-registry support.

 medium

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-115)
 [🌐

 Well-known MCP descriptor
 Your site publishes an MCP server descriptor at /.well-known/mcp.json.

 medium

 Quick fix

 Documentation](https://agentbadge.xyz/rules/AB-116)
 [🌐

 MCP tools and REST endpoints parity
 At least 50% of your REST API endpoints have corresponding MCP tools.

 medium

 Complex

 Documentation](https://agentbadge.xyz/rules/AB-102)
 [🌐

 check_compliance MCP tool available
 Your MCP server exposes a 'check_compliance' tool for self-assessment.

 low

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-103)

 🔄

Content Negotiation

Does your site serve the right format to AI agents?

 7 rules

 [🤖

 Agent User-Agent Format
 Your site serves appropriate content when an AI agent visits.

 medium

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-015)
 [📊

 JSON Format Support
 Your site returns JSON when an agent requests it.

 medium

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-016)
 [📝

 Plain Text Format Support
 Your site returns plain text when an agent requests it.

 medium

 Quick fix

 Documentation](https://agentbadge.xyz/rules/AB-017)
 [⬇️

 Markdown Format Support
 Your site returns Markdown when an agent requests it.

 medium

 Quick fix

 Documentation](https://agentbadge.xyz/rules/AB-018)
 [🎯

 Preferred Format Selection
 Your site respects format preferences when agents specify what they want.

 low

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-019)
 [🔀

 Vary Header
 Your site tells caches that content varies based on the requested format.

 low

 Quick fix

 Documentation](https://agentbadge.xyz/rules/AB-028)
 [📍

 No Redirect on Negotiation
 Your site serves the requested format directly without redirecting.

 low

 Quick fix

 Documentation](https://agentbadge.xyz/rules/AB-029)

 🔎

SEO / AEO

Is your content optimized for search engines and AI answer engines?

 12 rules

 [🔎

 Blog Article OpenGraph Type
 Blog and article pages declare og:type=article in their OpenGraph meta tags.

 medium

 Quick fix

 Documentation](https://agentbadge.xyz/rules/AB-104)
 [🔎

 Article Author and Date Meta Tags
 Article pages include article:author, article:published_time, and article:modified_time meta tags.

 medium

 Quick fix

 Documentation](https://agentbadge.xyz/rules/AB-105)
 [🔎

 AEO Short-Answer Summary Block
 Article pages include a short-answer summary block (2-3 sentences) at the top for AI answer engines.

 low

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-106)
 [🔎

 Semantic Definition Lists in Guides
 Guide pages use
 definition lists for term/definition pairs instead of plain paragraphs.

 low

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-107)
 [🔎

 OG Image Alt Text Brand Consistency
 og:image:alt text is present and includes the site's brand name for consistent social sharing.

 low

 Quick fix

 Documentation](https://agentbadge.xyz/rules/AB-108)
 [📝

 Service page content depth
 Service pages have at least 300 words of meaningful content.

 low

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-100)
 [📝

 Breadcrumb navigation on service pages
 Service pages have breadcrumb navigation (JSON-LD BreadcrumbList or HTML .breadcrumb class).

 low

 Quick fix

 Documentation](https://agentbadge.xyz/rules/AB-101)
 [❓

 Answer-first extractability
 Question-shaped headings are followed by self-contained answer blocks AI systems can quote.

 low

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-183)
 [📊

 Evidence density for citability
 Pages contain citable evidence: sourced numbers, dated claims, fact tables, attributed quotations.

 low

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-184)
 [🏷️

 Entity clarity and canonical naming
 The page states what the entity is in one canonical line, names it consistently, and links About/schema signals.

 low

 Quick fix

 Documentation](https://agentbadge.xyz/rules/AB-185)
 [🖥️

 Server-rendered primary content
 Primary content is present in the initial HTML without executing JavaScript.

 low

 Documentation](https://agentbadge.xyz/rules/AB-186)
 [🚫

 Anti-citation disqualifiers
 Content is free of overlays covering it, funnel-grade CTA density, and missing author/date on articles.

 medium

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-187)

## Understandability

Can an agent understand you?

 Weight: 25

 📖

Documentation

Is your API documented in formats that AI agents can read?

 16 rules

 [📋

 API Specification
 Your site has a machine-readable API specification that agents can parse.

 high

 Complex

 Documentation](https://agentbadge.xyz/rules/AB-004)
 [🧪

 Agent Guide Schema Validation
 Your agent guide follows the expected format with all required fields.

 high

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-005)
 [🔌

 MCP Server Descriptor
 Your site advertises its MCP server so agents can discover and connect to it.

 medium

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-006)
 [📑

 Detailed LLMs File
 Your site has an extended llms-full.txt with comprehensive information for AI models.

 medium

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-024)
 [📌

 LLMs File Linked from HTML
 Your homepage links to your llms.txt file so AI models can find it.

 low

 Quick fix

 Documentation](https://agentbadge.xyz/rules/AB-025)
 [📡

 RSS or Atom Feed
 Your site has an RSS or Atom feed for agents to subscribe to updates.

 low

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-049)
 [🖼️

 Social Preview Image
 Your site has a social preview image that appears when shared on social media or in AI responses.

 low

 Quick fix

 Documentation](https://agentbadge.xyz/rules/AB-052)
 [⭐

 SVG Favicon
 Your site has a scalable SVG favicon that looks crisp at any size.

 low

 Quick fix

 Documentation](https://agentbadge.xyz/rules/AB-053)
 [🔗

 Canonical URL
 Your pages have canonical URLs that tell agents which version is the official one.

 low

 Quick fix

 Documentation](https://agentbadge.xyz/rules/AB-054)
 [📰

 RSS Feed Linked from HTML
 Your homepage links to your RSS feed so agents can discover it.

 low

 Quick fix

 Documentation](https://agentbadge.xyz/rules/AB-055)
 [📝

 Agent Registration Instructions
 Your site has instructions telling agents how to register and authenticate.

 low

 Moderate

 Documentation](https://agentbadge.xyz/rules/AB-064)
 [📖

 Auth.md documents agent auth flow
 Your auth.md file documents agent authentication with session-scoped tokens.

 low

 Quick fix

 Documentation](https://agentbadge.xyz/rules/AB-140)
 [📖

 Auth.md documents credential vault pattern
 Your auth.md mentions credential vault, scoped tokens, or session rotation (optional).

 low

 Quick fix

 Documentation](https://agentbadge.xyz/rules/AB-144)
 [📋

 Parameter semantics
 Parameters have descriptions with constraints (min, max, required).

 medium

 Quick fix

 Documentation](https://agentbadge.xyz/rules/AB-147)
 [💡

 Request/response examples
 OpenAPI operations include example requests and responses.

 medium

 Quick fix

 Documentation](https://agentbadge.xyz/rules/AB-148)
 [🆘

 Support path declared
 A support contact or help URL is declared in agent-guide.

 low

 Quick fix

 Documentation](https://agentbadge.xyz/rules/AB-160)

 ⚡

Actionability

Can agents actually call your API with the right authentication?

 11 rules

 [🔄

 Guide and API Consistency
 Your agent guide and your API specification describe the same endpoints.

 high

 Moderate

 Semantic](https://agentbadge.xyz/rules/AB-007)
 [🔑

 Authentication Declared
 Your site declares its authentication method in a machine-readable way.

 medium

 Moderate

 Semantic](https://agentbadge.xyz/rules/AB-008)
 [🧩

 Capability Coverage
 Your agent guide covers all the capabilities your service offers.

 medium

 Moderate

 Semantic](https://agentbadge.xyz/rules/AB-009)
 [🤝

 A2A Agent Card Published
 Your agent publishes a /.well-known/agent-card.json file so other agents can discover its capabilities via the A2A protocol.

 medium

 Quick fix

 Semantic](https://agentbadge.xyz/rules/AB-074)
 [✅

 A2A Agent Card Verified
 Your agent-card.json includes all required fields: name, description, url, and capabilities.

 medium

 Quick fix

 Semantic](https://agentbadge.xyz/rules/AB-075)
 [🔌

 MCP Server Name Present
 Your MCP server's initialize response includes serverInfo.name, allowing agents to identify the server.

 medium

 Quick fix

 Semantic](https://agentbadge.xyz/rules/AB-085)
 [🔐

 MCP Auth Discovery Resolves
 If your MCP descriptor declares authentication, the auth URL is reachable and returns valid metadata.

 medium

 Moderate

 Semantic](https://agentbadge.xyz/rules/AB-086)
 [📝

 Operation descriptions
 Every OpenAPI operation has a description or summary.

 medium

 Quick fix

 Semantic](https://agentbadge.xyz/rules/AB-146)
 [⚖️

 Business constraints documented
 Business rules (refund windows, cancellation policies) are documented.

 low

 Quick fix

 Semantic](https://agentbadge.xyz/rules/AB-159)
 [💓

 Heartbeat.md availability
 Your site serves /heartbeat.md with YAML frontmatter, providing a periodic check-in routine for AI agents.

 low

 Quick fix

 Semantic](https://agentbadge.xyz/rules/AB-162)
 [➡️

 next_call pattern in API responses
 Your OpenAPI spec includes a next_call field in response schemas with method, path, and why to guide agents to the next request.

 low

 Moderate

 Semantic](https://agentbadge.xyz/rules/AB-166)

 ♿

Accessibility

Is your site accessible to all users, including those using assistive technology?

 2 rules

 [♿

 Image alt text coverage
 All images on your page have alt attributes (empty alt is valid for decorative images).

 medium

 Moderate

 Semantic](https://agentbadge.xyz/rules/AB-117)
 [♿

 Lazy loading on below-fold images
 Images below the fold use loading="lazy" for improved page load performance.

 low

 Quick fix

 Semantic](https://agentbadge.xyz/rules/AB-118)

 💲

Pricing

Is pricing information available in machine-readable formats for automated clients?

 1 rule

 [💲

 Pricing discoverability
 Pricing information is discoverable in agent-guide or llms.txt.

 high

 Quick fix

 Semantic](https://agentbadge.xyz/rules/AB-150)

 ⏱️

Rate Limits

Are rate limits and over-limit behavior declared machine-readably?

 1 rule

 [⏱️

 Rate limits machine-readable
 Rate limits are declared in a machine-readable format.

 high

 Moderate

 Semantic](https://agentbadge.xyz/rules/AB-151)

## Executability

Can an agent act on your API?

 Weight: 30

 🔐

Bot Authentication

Can you prove which AI bot is making the request?

 23 rules

 [🔐

 MCP Auth Discovery
 Your MCP server's authentication info is discoverable by agents.

 medium

 Moderate

 Capability](https://agentbadge.xyz/rules/AB-023)
 [✍️

 Bot Signatures Directory
 Your site has a directory of bot signatures for verifying AI agent identities.

 medium

 Complex

 Capability](https://agentbadge.xyz/rules/AB-058)
 [👥

 Bot Directory Members
 Your bot signatures directory has valid, recognized members.

 medium

 Moderate

 Capability](https://agentbadge.xyz/rules/AB-059)
 [🔑

 Bot Public Keys
 Public keys for verified bots are reachable and valid.

 medium

 Moderate

 Capability](https://agentbadge.xyz/rules/AB-060)
 [🛡️

 Protected Resource Metadata
 Your site publishes metadata about what resources are protected and how.

 medium

 Moderate

 Capability](https://agentbadge.xyz/rules/AB-063)
 [📜

 Web Bot Auth Directory
 Your site has a directory for web-based bot authentication using HTTP message signatures.

 medium

 Complex

 Capability](https://agentbadge.xyz/rules/AB-067)
 [🔐

 OAuth2 preferred over static API keys
 Your API uses OAuth2 security schemes instead of static API keys.

 high

 Moderate

 Capability](https://agentbadge.xyz/rules/AB-128)
 [🔐

 Credentials via headers not query params
 API keys and tokens are passed in headers, not query parameters.

 high

 Quick fix

 Capability](https://agentbadge.xyz/rules/AB-129)
 [🔐

 OAuth scopes defined
 Your OAuth metadata declares scopes_supported.

 medium

 Quick fix

 Capability](https://agentbadge.xyz/rules/AB-130)
 [🔐

 Token revocation endpoint available
 Your OAuth metadata publishes a revocation_endpoint.

 medium

 Moderate

 Capability](https://agentbadge.xyz/rules/AB-131)
 [🔐

 Token introspection supported
 Your OAuth metadata publishes an introspection_endpoint (optional).

 low

 Moderate

 Capability](https://agentbadge.xyz/rules/AB-132)
 [🔐

 Private key JWT authentication
 Your token endpoint supports private_key_jwt auth method (optional).

 low

 Complex

 Capability](https://agentbadge.xyz/rules/AB-133)
 [🔐

 Token Exchange (RFC 8693) supported
 Your OAuth metadata supports token-exchange grant type (optional).

 medium

 Complex

 Capability](https://agentbadge.xyz/rules/AB-134)
 [🔐

 AAuth metadata endpoint available
 Your API publishes /.well-known/aauth.json with agent authorization metadata.

 medium

 Moderate

 Capability](https://agentbadge.xyz/rules/AB-135)
 [🔐

 Agent Authorization Grant supported
 Your OAuth metadata includes the agent_authorization grant type.

 medium

 Complex

 Capability](https://agentbadge.xyz/rules/AB-136)
 [🔐

 AAuth scope descriptions published
 Your aauth.json publishes scope_descriptions (optional).

 low

 Quick fix

 Capability](https://agentbadge.xyz/rules/AB-137)
 [🔐

 DPoP token binding supported
 Your OAuth metadata supports DPoP (RFC 9449) for token binding (optional).

 medium

 Complex

 Capability](https://agentbadge.xyz/rules/AB-138)
 [🔐

 mTLS-bound access tokens
 Your OAuth metadata supports mTLS certificate-bound tokens (optional).

 medium

 Complex

 Capability](https://agentbadge.xyz/rules/AB-139)
 [🔐

 Short-lived access tokens
 Your token endpoint returns expires_in with access tokens.

 medium

 Quick fix

 Capability](https://agentbadge.xyz/rules/AB-141)
 [🔐

 Refresh token rotation supported
 Your OAuth metadata includes refresh_token in grant_types_supported (optional).

 medium

 Moderate

 Capability](https://agentbadge.xyz/rules/AB-142)
 [🔐

 Token revocation endpoint reachable
 Your credential security analysis confirms revocation endpoint is supported.

 medium

 Moderate

 Capability](https://agentbadge.xyz/rules/AB-143)
 [🔐

 No static API keys in OpenAPI security
 Your OpenAPI spec does not use apiKey security schemes.

 high

 Moderate

 Capability](https://agentbadge.xyz/rules/AB-145)
 [🔐

 Authentication clarity
 Security schemes are declared in the OpenAPI spec.

 critical

 Moderate

 Capability](https://agentbadge.xyz/rules/AB-153)

 🪪

Identity

Can agents verify your on-chain identity?

 3 rules

 [🪪

 WebFinger Identity Lookup
 Your site can answer 'who is this?' queries from AI agents.

 low

 Moderate

 Capability](https://agentbadge.xyz/rules/AB-056)
 [🆔

 DID Document
 Your site provides a Decentralized Identifier document for on-chain identity verification.

 low

 Complex

 Capability](https://agentbadge.xyz/rules/AB-057)
 [key

 OAuth Authorization Server metadata (RFC 9728)
 OAuth Authorization Server Metadata published at /.well-known/oauth-authorization-server.

 medium

 Moderate

 Capability](https://agentbadge.xyz/rules/AB-112)

 💰

Payments

Can agents pay for your services programmatically?

 11 rules

 [💰

 Paid Endpoint Response
 When an agent tries to access a paid feature, your site responds with a clear payment request.

 high

 Complex

 Capability](https://agentbadge.xyz/rules/AB-030)
 [🔓

 Payment Challenge Decodable
 The payment request your site sends is properly formatted and can be decoded by agents.

 high

 Complex

 Capability](https://agentbadge.xyz/rules/AB-031)
 [📋

 Payment Required Header
 Your payment responses include a header that tells agents payment is needed.

 high

 Moderate

 Capability](https://agentbadge.xyz/rules/AB-032)
 [👤

 Payment Recipient
 Your payment requests specify who should receive the payment.

 high

 Moderate

 Capability](https://agentbadge.xyz/rules/AB-033)
 [💵

 Payment Amount
 Your payment requests specify how much the agent needs to pay.

 medium

 Moderate

 Capability](https://agentbadge.xyz/rules/AB-034)
 [📄

 Payment Discovery File
 Your site publishes a file that describes all payment options in one place.

 medium

 Moderate

 Capability](https://agentbadge.xyz/rules/AB-035)
 [🏦

 Payment Facilitator
 Your payment requests specify a facilitator that can process the payment.

 medium

 Complex

 Capability](https://agentbadge.xyz/rules/AB-038)
 [⚡

 Lightning Payment Support
 Your site supports Lightning Network payments for instant, low-cost transactions.

 high

 Complex

 Capability](https://agentbadge.xyz/rules/AB-070)
 [🎫

 Lightning Payment Details
 Your Lightning payment responses include all required details for agents to pay.

 high

 Complex

 Capability](https://agentbadge.xyz/rules/AB-071)
 [💳

 MPP (Machine Payments Protocol) Support
 Checks for /.well-known/mpp.json declaring Machine Payments Protocol support.

 medium

 Quick fix

 Capability](https://agentbadge.xyz/rules/AB-088)
 [💳

 SPT (Stripe Payment Terms) Support
 Checks for /.well-known/spt.json declaring Stripe Payment Terms support.

 low

 Quick fix

 Capability](https://agentbadge.xyz/rules/AB-093)

 🏪

Bazaar

Is your agent listed in the decentralized marketplace?

 3 rules

 [🏪

 Bazaar Discoverable
 Your agent marketplace listings can be discovered by other agents.

 medium

 Moderate

 Capability](https://agentbadge.xyz/rules/AB-036)
 [🏷️

 Bazaar Service Declared
 Your site declares what services it offers in the Bazaar marketplace.

 low

 Moderate

 Capability](https://agentbadge.xyz/rules/AB-037)
 [🛒

 Bazaar in Lightning Payments
 Your Lightning payment responses include Bazaar marketplace information.

 medium

 Complex

 Capability](https://agentbadge.xyz/rules/AB-072)

 🚫

Error Semantics

Are 4xx error responses declared with schemas and descriptions in the spec?

 1 rule

 [🚫

 Error response schemas
 4xx and 5xx error responses are declared with schemas.

 high

 Moderate

 Semantic](https://agentbadge.xyz/rules/AB-149)

 🔁

Retry Semantics

Are idempotency and retry guidance (Retry-After) declared for agents?

 1 rule

 [🔁

 Retry semantics declared
 Idempotency-Key or Retry-After headers are documented.

 medium

 Moderate

 Semantic](https://agentbadge.xyz/rules/AB-154)

 🧪

Sandbox

Is a test/sandbox environment advertised for agent experimentation?

 1 rule

 [🧪

 Sandbox declared
 A sandbox/test environment is documented in agent-guide.

 low

 Quick fix

 Capability](https://agentbadge.xyz/rules/AB-156)

 📌

Versioning

Is the API version declared with a deprecation/sunset policy?

 1 rule

 [📌

 Versioning declared
 API version and deprecation policy are documented.

 medium

 Quick fix

 Semantic](https://agentbadge.xyz/rules/AB-155)

## Verifiability

Can an agent verify what it observed?

 Weight: 25

 ✅

Verification

Can agents verify you are who you say you are?

 2 rules

 [✅

 Owner Verification
 Your site can prove that you own the domain and are who you claim to be.

 medium

 Complex

 Semantic](https://agentbadge.xyz/rules/AB-013)
 [🔍

 Pricing/limits consistency
 Pricing and rate limits are consistent across all sources.

 medium

 Quick fix

 Semantic](https://agentbadge.xyz/rules/AB-152)

 🏗️

Infrastructure

Are your caching, errors, and rate limits agent-ready?

 6 rules

 [⚡

 Cache Headers
 Your site sends cache headers so agents and CDNs know how to cache your content.

 medium

 Quick fix

 Semantic](https://agentbadge.xyz/rules/AB-045)
 [🚫

 Structured 404 Errors
 Your site returns structured JSON for 404 errors instead of plain HTML.

 medium

 Quick fix

 Semantic](https://agentbadge.xyz/rules/AB-046)
 [⏱️

 Rate Limit Headers
 Your site sends rate limit headers so agents know how many requests they can make.

 low

 Quick fix

 Semantic](https://agentbadge.xyz/rules/AB-047)
 [🔒

 HTTPS Redirect Enforced
 Your site automatically redirects HTTP requests to HTTPS so agents always use a secure connection.

 high

 Quick fix

 Semantic](https://agentbadge.xyz/rules/AB-073)
 [🔒

 Content-Security-Policy header
 Your homepage returns a Content-Security-Policy header.

 high

 Moderate

 Semantic](https://agentbadge.xyz/rules/AB-098)
 [🔒

 Referrer-Policy header
 Your homepage returns a Referrer-Policy header.

 low

 Quick fix

 Semantic](https://agentbadge.xyz/rules/AB-099)

 📜

Agent Policy

Is there a machine-readable usage policy for automated clients?

 1 rule

 [📜

 Agent policy machine-readable
 A machine-readable usage policy for AI agents is present.

 medium

 Quick fix

 Semantic](https://agentbadge.xyz/rules/AB-157)

## How does AgentBadge compare?

Wondering if you need AgentBadge alongside your existing tools?

 [vs MCP](https://agentbadge.xyz/comparisons/agentbadge-vs-mcp)
 [vs Postman](https://agentbadge.xyz/comparisons/agentbadge-vs-postman)
 [vs Swagger](https://agentbadge.xyz/comparisons/agentbadge-vs-swagger)

Want to check your site against all 147 rules?

 [Scan Your Site](https://agentbadge.xyz/#scan)

## Explore More

-
 [FAQ](https://agentbadge.xyz/faq)

Common questions about agent readiness rules

-
 [Agent Guide](https://agentbadge.xyz/agent-guide)

Step-by-step guide to becoming agent-ready

-
 [Blog](https://agentbadge.xyz/blog)

Deep dives into agent readiness concepts

 ![](https://agentbadge.xyz/icons/logo-32.webp)

 AgentBadge · Agency for the agentic web — agent-ready infrastructure on Arc (legacy: Hedera testnet)

 [![AgentBadge MCP on mcprush — grade A](https://mcprush.com/badge/agentbadge-mcp/card.svg)](https://mcprush.com/spreadzp/agentbadge-mcp)

 Services
 [Scanner](https://agentbadge.xyz/services/scanner)
 [Passports](https://agentbadge.xyz/services/passports)
 [Marketplace](https://agentbadge.xyz/services/marketplace)

 Guides
 [Agent Guide](https://agentbadge.xyz/agent-guide)
 [Market Guide](https://agentbadge.xyz/market-guide)
 [Blog](https://agentbadge.xyz/blog)

 Product
 [FAQ](https://agentbadge.xyz/faq)
 [Rules](https://agentbadge.xyz/rules)
 [Use Cases](https://agentbadge.xyz/use-cases)
 [Pricing](https://agentbadge.xyz/pricing)
 [Changelog](https://agentbadge.xyz/changelog)

 Company
 [About](https://agentbadge.xyz/about)
 [Services](https://agentbadge.xyz/services)
 [Work With Us](https://agentbadge.xyz/work-with-us)
 [Medical Demo](https://agentbadge.xyz/ui/medical-demo)
 [HashScan](https://hashscan.io/testnet/token/0.0.9681741/1)
 support@agentbadge.xyz

 Engineering
 [Services](https://agentbadge.xyz/services)
 [Work With Us](https://agentbadge.xyz/work-with-us)
 [Team](https://agentbadge.xyz/about)
 [About](https://agentbadge.xyz/about)

 Legal
 [Terms](https://agentbadge.xyz/terms)
 [Privacy](https://agentbadge.xyz/privacy)

 © 2026 AgentBadge. MIT License. Built on Arc.
 v0.16.0 · dev

 [![npm version](https://img.shields.io/npm/v/@agentbadge/mcp?style=flat-square&label=npm&color=334155)](https://www.npmjs.com/package/@agentbadge/mcp)
 [![Verified on SaaS Browser](https://files.saasbrowser.com/h05pfd6qctu4jsnymq6q06maaf2t)](https://saasbrowser.com/en/saas/1618369/agentbadge)
 [![HOL Registry: owner-verified, trust 77](https://img.shields.io/badge/HOL%20Registry-owner--verified%20%C2%B7%20trust%2077-334155?style=flat-square)](https://hol.org/registry/plugins/agentbadge%2Fagentbadge-mcp)
 [![mcprush grade A, trust 95/100](https://img.shields.io/badge/mcprush-A%20%C2%B7%2095%2F100-334155?style=flat-square)](https://mcprush.com/spreadzp/agentbadge-mcp)
