apideck.com agentic web readiness

A+ Manifest validity: 67% (4/6 valid, 12 errors, 15 warnings) · Surface score 70 (coverage 50 + breadth 15 + conformance 5). 9 standards observed across 5 of 9 steps; 6 manifests present, 12 errors, 15 warnings. Checked 2026-10-25 19:17:36 UTC via www.apideck.com. This grades the agent-facing files published at apideck.com, not the organisation's products.

Badge for a README: ![agentic web grade](https://agenticweb.wiki/badge/apideck.com.svg) · JSON · Markdown · Re-check now

Coverage by step

Manifests

{
  "$schema": "https://static.modelcontextprotocol.io/schemas/v1/server-card.schema.json",
  "name": "com.apideck/apideck",
  "title": "Apideck",
  "version": "1.0.0",
  "description": "Apideck and what it offers to agents",
  "websiteUrl": "https://apideck.com/",
  "icons": [
    {
      "src": "https://apideck.com/icon.png",
      "mimeType": "image/png",
      "sizes": [
        "180x180"
      ]
    }
  ],
  "remotes": [
    {
      "type": "streamable-http",
      "url": "https://apideck.com/mcp",
      "supportedProtocolVersions": [
        "2025-11-25",
        "2025-06-18",
        "2025-03-26"
      ]
    }
  ]
}

{
  "name": "Apideck",
  "description": "Apideck and what it offers to agents",
  "version": "1.0.0",
  "provider": {
    "organization": "Apideck",
    "url": "https://apideck.com/"
  },
  "documentationUrl": "https://apideck.com/AGENTS.md",
  "supportedInterfaces": [
    {
      "url": "https://apideck.com/a2a",
      "protocolBinding": "JSONRPC",
      "protocolVersion": "1.0"
    }
  ],
  "url": "https://apideck.com/a2a",
  "protocolVersion": "1.0",
  "capabilities": {
    "streaming": false,
    "pushNotifications": false,
    "extendedAgentCard": false
  },
  "defaultInputModes": [
    "text/plain"
  ],
  "defaultOutputModes": [
    "text/plain"
  ],
  "skills": [
    {
      "id": "answer",
      "name": "Answer questions",
      "description": "Answer questions about Apideck.",
      "tags": [
        "qa"
      ],
      "examples": [
        "What does Apideck do?"
      ]
    }
  ],
  "securitySchemes": {},
  "securityRequirements": []
}

What an agent can call

• MCP endpoint https://mcp.apideck.dev/mcp (streamable-http) — from /.well-known/mcp.json
• MCP endpoint https://mcp.apideck.dev/mcp (streamable-http) — from /.well-known/mcp/server-card.json
• A2A agent Apideck at https://mcp.apideck.dev/mcp, skills: Accounting API, CRM API, HRIS API, File Storage API, ATS API, Ecommerce API, Issue Tracking API
• A2A agent Apideck at https://www.apideck.com
• API description https://www.apideck.com/openapi.json (application/json)
• API description https://developers.apideck.com (text/html)
• API description https://specs.apideck.com/accounting.yml (application/yaml)
• API description https://developers.apideck.com/apis/accounting/reference (text/html)
• API description https://specs.apideck.com/crm.yml (application/yaml)
• API description https://developers.apideck.com/apis/crm/reference (text/html)
• API description https://specs.apideck.com/hris.yml (application/yaml)
• API description https://developers.apideck.com/apis/hris/reference (text/html)
• API description https://specs.apideck.com/ats.yml (application/yaml)
• API description https://developers.apideck.com/apis/ats/reference (text/html)
• API description https://specs.apideck.com/file-storage.yml (application/yaml)
• API description https://developers.apideck.com/apis/file-storage/reference (text/html)
• API description https://specs.apideck.com/ecommerce.yml (application/yaml)
• API description https://developers.apideck.com/apis/ecommerce/reference (text/html)
• API description https://specs.apideck.com/issue-tracking.yml (application/yaml)
• API description https://developers.apideck.com/apis/issue-tracking/reference (text/html)
• llms.txt: Apideck, 409 links, llms-full.txt present
• robots.txt AI policy: allows Claude-User; unlisted crawlers partial
• OAuth protected resource https://unify.apideck.com, authorization servers: https://unify.apideck.com
• Endpoint check (a2a https://www.apideck.com): pseudo_endpoint_html (agent card url points to the HTML homepage rather than a callable A2A endpoint)

Standards observed

• Agent2Agent Protocol https://apideck.com/.well-known/agent-card.json
• llms.txt https://apideck.com/llms.txt
• api-catalog: A Well-Known URI and Link Relation to Help Discovery of APIs https://apideck.com/.well-known/api-catalog
• AI Crawler User-Agent Tokens in robots.txt https://apideck.com/robots.txt
• OAuth Protected Resource and Authorization Server Metadata (as used for agent authorization) https://apideck.com/.well-known/oauth-protected-resource
• Agent Skills https://apideck.com/.well-known/agent-skills/index.json
• Markdown for Agents https://apideck.com/
• MCP Server Cards (SEP-2127)
• Model Context Protocol

Cheapest next steps

1. Agentic Resource Discovery: a catalog at /.well-known/ard.json lets agents discover your APIs, MCP servers and data in one fetch (emerging spec — publish only if you run the underlying endpoints; generate via MCP template({"id": "ard", "domain": "apideck.com"}))
2. AGENTS.md: instructions for coding agents working on or with the site
   Generate starter /AGENTS.md for apideck.com

   # Apideck for agents
   
   Apideck and what it offers to agents
   
   ## Read the data, not the HTML
   - Index: https://apideck.com/llms.txt
   - API description: https://apideck.com/openapi.json
   - Discovery catalog: https://apideck.com/.well-known/ard.json
   
   ## Calling
   - MCP server (Streamable HTTP): https://apideck.com/mcp
   - Rate limits and authentication: describe them here
   
   ## Conventions
   - How to cite or attribute content
   - What not to do (no scraping of /account/, no automated sign-ups, etc.)
   
   Contact: security@apideck.com
   

3. security.txt (RFC 9116): RFC 9116 contact and expiry, read by agents and people
   Generate starter /.well-known/security.txt for apideck.com

   Contact: mailto:security@apideck.com
   Expires: 2027-09-20T19:17:36Z
   Canonical: https://apideck.com/.well-known/security.txt
   Preferred-Languages: en
   Policy: https://apideck.com/security-policy
   

Agent pre-flight & practical readiness

Preferred mode: mcp (fallback openapi). Call the MCP endpoint at https://mcp.apideck.dev/mcp first. Do not scrape the HTML when a tool can answer.

Fetch: POST https://mcp.apideck.dev/mcp POST a JSON-RPC tools/list, or server/discover on the 2026-07-28 revision, before reading HTML.

Practical readability: exa_parsable yes, markdown negotiation yes, render markdown_native, HTML quality high, first content at byte 0.

AI crawler posture: open_to_all · Assistant access: OpenAI partial, Anthropic allowed, Google allowed, Perplexity allowed, Exa allowed.

Readiness subscores: reach 20/20, readability 30/30, capabilities 35/35, conformance 5/15, total 90/100, grade A+.

How the grade is made

+10 per lifecycle step with a standard observed, counting manifests that validate or that the probe rule for the standard recognises (a valid MCP server card counts for MCP; max 90); +3 per observed standard beyond the first two (max 15); conformance +15 (+10 with one manifest) minus 5 per agent-facing manifest with errors, never below 0 (security.txt is reported, not scored). Lifecycle grade: A+ >= 60, A >= 45, B >= 30, C >= 20, D >= 10. Strict 100-point composite (subscores.total_100 / subscores.grade_100): reach_and_policy (20) + readability (30) + capabilities (35) + conformance (15), where A+ >= 80, A >= 65, B >= 45, C >= 28, D >= 15. Errors are specification violations; warnings are best-practice gaps. Only public paths are fetched, without credentials, so standards that need a login (skipped in the probe) are not counted either way. The same report is the validate_manifest tool on the MCP server.

JSON · Markdown · probe rules