F
Why this grade
This is a failing grade. The foundational signals agents look for OpenAPI specification discovery and Public MCP registry listing aren't in place yet — start there before anything else.
Get notified when this grade changes
Subscribe to grade-change alerts for postmark.com — we'll email you when a new scan moves the grade or score.
Quick wins
Low-cost fixes that would nudge this grade up.
- /ai.txt AI-crawler directives Add a short `/ai.txt` at the site root declaring your AI-crawler usage terms (see spawning.ai/ai-txt).
- /llms-full.txt long-form index Add a `/llms-full.txt` — the full-text companion to llms.txt with your key docs inlined for LLMs (see llmstxt.org).
- /.well-known/agent.json (A2A AgentCard) Publish an A2A AgentCard at `/.well-known/agent.json` with name, description, skills, and endpoints.
- /.well-known/ai-plugin.json manifest Publish a `/.well-known/ai-plugin.json` manifest with name_for_model, description_for_model, and an api block.
- /.well-known/mcp.json (Model Context Protocol) Publish an MCP manifest at `/.well-known/mcp.json` declaring your server, capabilities, or tools.
Blocking issues
High-weight checks that aren't passing.
- OpenAPI specification discovery No OpenAPI spec found at any of 9 conventional paths.
- Public MCP registry listing Host postmark.com not listed in any of 2 registry/registries consulted.
Per-category breakdown
| Category | Score | Percent |
|---|---|---|
| Anti Bot | 15 / 15 | |
| Api | 5 / 15 | |
| Crawl | 23 / 23 | |
| Docs | 0 / 14 | |
| Html Meta | 8 / 8 | |
| Identity | 10 / 10 | |
| Onboarding | 0 / 6 | |
| Protocols | 0 / 10 | |
| Root Level | 8 / 8 |
Findings (33)
Anti Bot · 2
| Check | Status | Points | Notes |
|---|---|---|---|
| Anti-bot interstitial | pass | 10 / 10 | No anti-bot interstitial markers on a single polite homepage request — behavioural anti-bot can still challenge real crawler traffic. |
| User-agent sniffing | pass | 5 / 5 | Homepage responses for default and curl UAs are effectively identical. |
Api · 3
| Check | Status | Points | Notes |
|---|---|---|---|
| GraphQL introspection | skip | — | No GraphQL endpoint found at any of 3 conventional paths. |
| JSON error bodies for API callers | pass | 5 / 5 | HTTP 404 with parseable JSON body (Content-Type: application/json; charset=utf-8). |
| OpenAPI specification discovery | fail | 0 / 10 | No OpenAPI spec found at any of 9 conventional paths. |
Crawl · 3
| Check | Status | Points | Notes |
|---|---|---|---|
| RSS/Atom feed | skip | — | No RSS/Atom feed found at probed paths or via `<link rel="alternate">`. |
| robots.txt AI-agent rules | pass | 13 / 13 | All 13 documented AI user-agents can crawl /. |
| XML sitemap discovery | pass | 10 / 10 | Sitemap at /sitemap.xml (urlset, 950 entries). |
Docs · 2
| Check | Status | Points | Notes |
|---|---|---|---|
| Docs platform discoverability | fail | 0 / 6 | No docs found at any of the conventional paths. |
| SDK availability across languages | fail | 0 / 8 | No SDKs discoverable via npm, PyPI, or the docs page. |
Html Meta · 3
| Check | Status | Points | Notes |
|---|---|---|---|
| JSON-LD structured data | pass | 8 / 8 | JSON-LD declares a machine-targeted type (SoftwareApplication). |
| meta description | info | — | Meta description present (157 characters) (informational — not graded). |
| Open Graph tags | info | — | All three core Open Graph tags present on the homepage (informational — not graded). |
Identity · 3
| Check | Status | Points | Notes |
|---|---|---|---|
| Email auth (SPF, DMARC, DKIM) | info | — | No SPF / DMARC / DKIM found — domain has no email auth (informational — email trust, not agent discoverability). |
| security.txt responsible-disclosure declaration | skip | — | No security.txt found at either probed path — secondary signal, not a negative one. |
| TLS + HSTS + HTTPS redirect | pass | 10 / 10 | Valid TLS cert (issuer: C=US, O=Let's Encrypt, CN=YE2, expires 2026-09-22), http → https redirect confirmed. (HSTS max-age=2592000 (below the 6-month preload threshold) — informational.) |
Llm Training · 3
| Check | Status | Points | Notes |
|---|---|---|---|
| Common Crawl index presence | skip | — | Common Crawl CDX endpoint was unreachable — not penalising target. |
| Hacker News mentions | info | — | 2 verified HN mention(s) of postmark.com (2 raw search hits) — informational, HN chatter is a popularity signal and not graded. |
| Wikipedia article | info | — | 3 Wikipedia article(s) match "postmark" (Postmark, Machine postmark, Digital Postmarks) but none link to postmark.com — a name match without a domain link is not attribution (informational — not graded). |
Onboarding · 1
| Check | Status | Points | Notes |
|---|---|---|---|
| API-key / signup path discoverability | fail | 0 / 6 | No signup, API-key, or developer page discoverable by anchor text or conventional path. |
Protocols · 2
| Check | Status | Points | Notes |
|---|---|---|---|
| Public MCP registry listing | fail | 0 / 10 | Host postmark.com not listed in any of 2 registry/registries consulted. |
| A2A AgentCard conformance | skip | — | No AgentCard at /.well-known/agent.json — nothing to grade. |
Registries · 3
| Check | Status | Points | Notes |
|---|---|---|---|
| GitHub public repository | skip | — | No GitHub repositories attributable to postmark.com — name matches without a verifiable attribution signal are not counted. |
| npm SDK package | skip | — | No npm packages attributable to postmark.com — name matches without a verifiable attribution signal are not counted. |
| PyPI SDK package | skip | — | PyPI package(s) exist at probed name(s) (postmark) but none carry a verifiable attribution signal — name-existence alone is not counted. |
Root Level · 3
| Check | Status | Points | Notes |
|---|---|---|---|
| /ai.txt AI-crawler directives | skip | — | No /ai.txt present (404) — this is a secondary signal, not a negative one. |
| /llms-full.txt long-form index | skip | — | No /llms-full.txt present (404). |
| /llms.txt index for LLMs | pass | 8 / 8 | llms.txt present, 27.5 KB, starts with '# Postmark'. |
Well Known · 5
| Check | Status | Points | Notes |
|---|---|---|---|
| /.well-known/agent.json (A2A AgentCard) | skip | — | No /.well-known/agent.json present (404). |
| /.well-known/ai-plugin.json manifest | skip | — | No /.well-known/ai-plugin.json present (404). |
| /.well-known/mcp.json (Model Context Protocol) | skip | — | No /.well-known/mcp.json present (404). |
| OpenID Connect configuration + dynamic registration | skip | — | No /.well-known/openid-configuration — site does not advertise an OIDC provider. |
| /.well-known/openapi.{json,yaml} | skip | — | No OpenAPI spec at either well-known path. |
Score over time
- Latest
- 36 — flat
- Best
- 36
- Worst
- 36
- Scans
- 3
Scan history
Embed this grade
Paste the badge anywhere — your README, a status page, a docs site. The image always reflects the latest scan.
