C
Why this grade
A middle-of-the-pack C. Credit on robots.txt AI-agent rules, but the biggest gaps are on Public MCP registry listing and /.well-known/ai-plugin.json manifest — closing those would lift this toward a B.
Get notified when this grade changes
Subscribe to grade-change alerts for phase1b-github-mcp-gateway-canary-20260918-bursia-interop-lab.soyeladice.workers.dev — we'll email you when a new scan moves the grade or score.
Quick wins
Low-cost fixes that would nudge this grade up.
- /.well-known/ai-plugin.json manifest Publish a `/.well-known/ai-plugin.json` manifest with name_for_model, description_for_model, and an api block.
Blocking issues
High-weight checks that aren't passing.
- Public MCP registry listing Host phase1b-github-mcp-gateway-canary-20260918-bursia-interop-lab.soyeladice.workers.dev not listed in any of 2 registry/registries consulted.
Per-category breakdown
| Category | Score | Percent |
|---|---|---|
| Anti Bot | 15 / 15 | |
| Api | 15 / 15 | |
| Crawl | 23 / 23 | |
| Docs | 0 / 14 | |
| Identity | 10 / 10 | |
| Protocols | 4 / 18 | |
| Root Level | 14 / 20 | |
| Well Known | 17 / 32 |
Findings (33)
Anti Bot · 2
| Check | Status | Points | Notes |
|---|---|---|---|
| Anti-bot interstitial | pass | 10 / 10 | No anti-bot interstitial markers on a single polite homepage request — behavioural anti-bot can still challenge real crawler traffic. |
| User-agent sniffing | pass | 5 / 5 | Homepage responses for default and curl UAs are effectively identical. |
Api · 3
| Check | Status | Points | Notes |
|---|---|---|---|
| GraphQL introspection | skip | — | Probed 3 conventional paths; a 200 response was seen but none returned a GraphQL response body (likely an SPA catch-all), so no GraphQL endpoint is present. |
| JSON error bodies for API callers | pass | 5 / 5 | HTTP 200 with parseable JSON body (Content-Type: application/json; charset=utf-8). |
| OpenAPI specification discovery | pass | 10 / 10 | OpenAPI 3.1.0 served at /openapi.json (5 paths, 0 schemas). |
Crawl · 3
| Check | Status | Points | Notes |
|---|---|---|---|
| RSS/Atom feed | skip | — | No RSS/Atom feed found at probed paths or via `<link rel="alternate">`. |
| robots.txt AI-agent rules | pass | 13 / 13 | All 13 documented AI user-agents can crawl /. |
| XML sitemap discovery | pass | 10 / 10 | Sitemap at /sitemap.xml (urlset, 8 entries). |
Docs · 2
| Check | Status | Points | Notes |
|---|---|---|---|
| Docs platform discoverability | fail | 0 / 6 | No docs found at any of the conventional paths. |
| SDK availability across languages | fail | 0 / 8 | No SDKs discoverable via npm, PyPI, or the docs page. |
Html Meta · 3
| Check | Status | Points | Notes |
|---|---|---|---|
| JSON-LD structured data | skip | — | Homepage did not load as HTML — cannot inspect JSON-LD. |
| meta description | skip | — | Homepage did not load as HTML — cannot inspect meta tags. |
| Open Graph tags | skip | — | Homepage did not load as HTML — cannot inspect Open Graph tags. |
Identity · 3
| Check | Status | Points | Notes |
|---|---|---|---|
| Email auth (SPF, DMARC, DKIM) | info | — | No SPF / DMARC / DKIM found — domain has no email auth (informational — email trust, not agent discoverability). |
| security.txt responsible-disclosure declaration | info | — | security.txt present at https://phase1b-github-mcp-gateway-canary-20260918-bursia-interop-lab.soyeladice.workers.dev/.well-known/security.txt but has no `Contact:` directive (informational — not graded). |
| TLS + HSTS + HTTPS redirect | pass | 10 / 10 | Valid TLS cert (issuer: C=US, O=Let's Encrypt, CN=YE1, expires 2026-12-16), http → https redirect confirmed. (HSTS not set — informational.) |
Llm Training · 3
| Check | Status | Points | Notes |
|---|---|---|---|
| Common Crawl index presence | skip | — | Common Crawl CDX endpoint was unreachable — not penalising target. |
| Hacker News mentions | info | — | 0 verified HN mention(s) of phase1b-github-mcp-gateway-canary-20260918-bursia-interop-lab.soyeladice.workers.dev (0 raw search hits) — informational, HN chatter is a popularity signal and not graded. |
| Wikipedia article | info | — | No Wikipedia article found for "phase1b-github-mcp-gateway-canary-20260918-bursia-interop-lab.soyeladice.workers" (informational — not graded). |
Onboarding · 1
| Check | Status | Points | Notes |
|---|---|---|---|
| API-key / signup path discoverability | skip | — | Homepage and every docs probe returned non-HTML or 404 — cannot assess onboarding discoverability. |
Protocols · 2
| Check | Status | Points | Notes |
|---|---|---|---|
| Public MCP registry listing | fail | 0 / 10 | Host phase1b-github-mcp-gateway-canary-20260918-bursia-interop-lab.soyeladice.workers.dev not listed in any of 2 registry/registries consulted. |
| A2A AgentCard conformance | warn | 4 / 8 | AgentCard partially conformant: missing or empty `version`; no `endpoints[]` entry has both `url` and `type`. |
Registries · 3
| Check | Status | Points | Notes |
|---|---|---|---|
| GitHub public repository | skip | — | No GitHub repositories attributable to phase1b-github-mcp-gateway-canary-20260918-bursia-interop-lab.soyeladice.workers.dev — name matches without a verifiable attribution signal are not counted. |
| npm SDK package | skip | — | npm registry was unreachable — not penalising target. |
| PyPI SDK package | skip | — | No PyPI package at the 2 name(s) probed for phase1b-github-mcp-gateway-canary-20260918-bursia-interop-lab.soyeladice.workers.dev. |
Root Level · 3
| Check | Status | Points | Notes |
|---|---|---|---|
| /ai.txt AI-crawler directives | warn | 2 / 4 | ai.txt present (286 bytes) but Content-Type "application/json; charset=utf-8" is unexpected for a declaration file. |
| /llms-full.txt long-form index | warn | 4 / 8 | llms-full.txt present (286 bytes) but Content-Type "application/json; charset=utf-8" is not text/plain or text/markdown. |
| /llms.txt index for LLMs | pass | 8 / 8 | llms.txt present, 1.4 KB, starts with '# Bursia Interoperability Lab Canary'. |
Well Known · 5
| Check | Status | Points | Notes |
|---|---|---|---|
| /.well-known/agent.json (A2A AgentCard) | pass | 10 / 10 | agent.json present with all required keys (2 skills, 5 endpoints). |
| /.well-known/ai-plugin.json manifest | fail | 0 / 8 | ai-plugin.json parses as JSON but carries none of the load-bearing keys (name_for_model, name_for_human, description_for_model, api). |
| /.well-known/mcp.json (Model Context Protocol) | warn | 4 / 8 | mcp.json parses but lacks MCP indicator keys (server / capabilities / tools). Could be a different use of the path. |
| OpenID Connect configuration + dynamic registration | error | — | openid-configuration decoded but is missing the required `issuer` field. |
| /.well-known/openapi.{json,yaml} | warn | 3 / 6 | Well-known file at /.well-known/openapi.json parses but is not OpenAPI 3.x (top-level `openapi: <missing>`). |
Score over time
- Latest
- 62 ▲ 21
- Best
- 62
- Worst
- 41
- Scans
- 2
Scan history
Embed this grade
Paste the badge anywhere — your README, a status page, a docs site. The image always reflects the latest scan.
