agenticweb.wiki

apideck.com agentic web readiness

A+ Manifest validity: 67% (4/6 valid, 12 errors, 15 warnings) · Surface score 70 (coverage 50 + breadth 15 + conformance 5). 7 standards observed across 5 of 9 steps; 6 manifests present, 12 errors, 15 warnings. Checked 2026-10-25 03:07:11 UTC via www.apideck.com. This grades the agent-facing files published at apideck.com, not the organisation's products.

Badge for a README: ![agentic web grade](https://agenticweb.wiki/badge/apideck.com.svg) · JSON · Markdown · Re-check now

Coverage by step

01 DiscoverRFC 972702 Identifynothing observed03 PermitAI Crawler User-Agent Tokens in robots.txt, OAuth Protected Resource and Authorization Server Metadata (as used for agent authorization)04 Readllms.txt, Markdown for Agents05 ActAgent Skills06 CoordinateA2A07 Paynothing observed08 Presentnothing observed

Manifests

ManifestResultFindings
Agentic Resource Discovery
/.well-known/ard.json
absent HTTP 404
AI Catalog well-known file
/.well-known/ai-catalog.json
absent HTTP 404
MCP Server Cards (SEP-2127)
/.well-known/mcp/server-card.json
errors
  • $schema missing (required: https://static.modelcontextprotocol.io/schemas/v1/server-card.schema.json)
  • name missing
  • version missing
  • Content-Type is application/json; charset=utf-8; SEP-2127 says serve application/mcp-server-card+json
  • pre-final card shape (url/transport/tools); the final SEP-2127 card uses name, version, description and remotes[]
  • description is over 100 characters
  • remotes missing: a card with no remotes gives clients nothing to connect to
  • legacy /.well-known/mcp.json is still live and may shadow /.well-known/mcp/server-card.json in older scanners
View valid /mcp/server-card template for apideck.com
{
  "$schema": "https://static.modelcontextprotocol.io/schemas/v1/server-card.schema.json",
  "name": "com.apideck/apideck",
  "title": "Apideck",
  "version": "1.0.0",
  "description": "Apideck and what it offers to agents",
  "websiteUrl": "https://apideck.com/",
  "icons": [
    {
      "src": "https://apideck.com/icon.png",
      "mimeType": "image/png",
      "sizes": [
        "180x180"
      ]
    }
  ],
  "remotes": [
    {
      "type": "streamable-http",
      "url": "https://apideck.com/mcp",
      "supportedProtocolVersions": [
        "2025-11-25",
        "2025-06-18",
        "2025-03-26"
      ]
    }
  ]
}
Agent2Agent Protocol
/.well-known/agent-card.json
errors
  • skills[0].tags missing (required)
  • skills[1].tags missing (required)
  • skills[2].tags missing (required)
  • skills[3].tags missing (required)
  • skills[4].tags missing (required)
  • skills[5].tags missing (required)
  • skills[6].tags missing (required)
  • supportedInterfaces[0].protocolBinding missing
  • supportedInterfaces[0].protocolVersion missing
  • capabilities object missing (streaming, pushNotifications, stateTransitionHistory)
  • defaultInputModes missing
  • defaultOutputModes missing
  • protocolVersion missing; clients cannot tell which A2A revision the card follows
  • declared A2A endpoint https://www.apideck.com is not a callable agent endpoint (agent card url points to the HTML homepage rather than a callable A2A endpoint)
View valid /.well-known/agent-card.json template for apideck.com
{
  "name": "Apideck",
  "description": "Apideck and what it offers to agents",
  "version": "1.0.0",
  "provider": {
    "organization": "Apideck",
    "url": "https://apideck.com/"
  },
  "documentationUrl": "https://apideck.com/AGENTS.md",
  "supportedInterfaces": [
    {
      "url": "https://apideck.com/a2a",
      "protocolBinding": "JSONRPC",
      "protocolVersion": "1.0"
    }
  ],
  "url": "https://apideck.com/a2a",
  "protocolVersion": "1.0",
  "capabilities": {
    "streaming": false,
    "pushNotifications": false,
    "extendedAgentCard": false
  },
  "defaultInputModes": [
    "text/plain"
  ],
  "defaultOutputModes": [
    "text/plain"
  ],
  "skills": [
    {
      "id": "answer",
      "name": "Answer questions",
      "description": "Answer questions about Apideck.",
      "tags": [
        "qa"
      ],
      "examples": [
        "What does Apideck do?"
      ]
    }
  ],
  "securitySchemes": {},
  "securityRequirements": []
}
llms.txt
/llms.txt
valid
  • file is large; keep llms.txt an index and put the full text in llms-full.txt
AGENTS.md
/AGENTS.md
absent HTTP 404
Agent Skills
/.well-known/agent-skills/index.json
valid
api-catalog: A Well-Known URI and Link Relation to Help Discovery of APIs
/.well-known/api-catalog
valid
AI Crawler User-Agent Tokens in robots.txt
/robots.txt
valid
  • no Sitemap: line
  • no Agentmap: line (optional convention pointing agents at /.well-known/ard.json)
  • no Content-Signal: line (optional; states ai-train / search / ai-input preferences)
security.txt (RFC 9116)
/.well-known/security.txt
absent HTTP 404
auth.md
/auth.md
absent HTTP 404
Open Knowledge Format
/okf/index.md
absent HTTP 404

What an agent can call

Standards observed

Cheapest next steps

  1. Agentic Resource Discovery: a catalog at /.well-known/ard.json lets agents discover your APIs, MCP servers and data in one fetch (emerging spec — publish only if you run the underlying endpoints; generate via MCP template({"id": "ard", "domain": "apideck.com"}))
  2. AGENTS.md: instructions for coding agents working on or with the site
    Generate starter /AGENTS.md for apideck.com
    # Apideck for agents
    
    Apideck and what it offers to agents
    
    ## Read the data, not the HTML
    - Index: https://apideck.com/llms.txt
    - API description: https://apideck.com/openapi.json
    - Discovery catalog: https://apideck.com/.well-known/ard.json
    
    ## Calling
    - MCP server (Streamable HTTP): https://apideck.com/mcp
    - Rate limits and authentication: describe them here
    
    ## Conventions
    - How to cite or attribute content
    - What not to do (no scraping of /account/, no automated sign-ups, etc.)
    
    Contact: security@apideck.com
    
  3. security.txt (RFC 9116): RFC 9116 contact and expiry, read by agents and people
    Generate starter /.well-known/security.txt for apideck.com
    Contact: mailto:security@apideck.com
    Expires: 2027-09-20T18:30:38Z
    Canonical: https://apideck.com/.well-known/security.txt
    Preferred-Languages: en
    Policy: https://apideck.com/security-policy
    

Agent pre-flight & practical readiness

Preferred mode: mcp (fallback openapi). Call the MCP endpoint at https://mcp.apideck.dev/mcp first. Do not scrape the HTML when a tool can answer.

Fetch: POST https://mcp.apideck.dev/mcp POST a JSON-RPC tools/list, or server/discover on the 2026-07-28 revision, before reading HTML.

Practical readability: exa_parsable yes, markdown negotiation yes, render markdown_native, HTML quality high, first content at byte 0.

AI crawler posture: open_to_all · Assistant access: OpenAI partial, Anthropic allowed, Google allowed, Perplexity allowed, Exa allowed.

Readiness subscores: reach 19/20, readability 30/30, capabilities 33/35, conformance 5/15, total 87/100, grade A+.

How the grade is made

+10 per lifecycle step with a standard observed, counting manifests that validate or that the probe rule for the standard recognises (a valid MCP server card counts for MCP; max 90); +3 per observed standard beyond the first two (max 15); conformance +15 (+10 with one manifest) minus 5 per agent-facing manifest with errors, never below 0 (security.txt is reported, not scored). Lifecycle grade: A+ >= 60, A >= 45, B >= 30, C >= 20, D >= 10. Strict 100-point composite (subscores.total_100 / subscores.grade_100): reach_and_policy (20) + readability (30) + capabilities (35) + conformance (15), where A+ >= 80, A >= 65, B >= 45, C >= 28, D >= 15. Errors are specification violations; warnings are best-practice gaps. Only public paths are fetched, without credentials, so standards that need a login (skipped in the probe) are not counted either way. The same report is the validate_manifest tool on the MCP server.

JSON · Markdown · probe rules