# cloudflare.com: agentic web grade A

Score 49 (coverage 30 + breadth 9 + conformance 10); 5 standards observed across 3 of 9 steps; checked 2026-10-18T22:06:00Z via www.cloudflare.com. This grades the agent-facing files published at cloudflare.com, not the organisation's products.

## Manifests

| Manifest | Path | Result | Errors | Warnings |
| --- | --- | --- | --- | --- |
| Agentic Resource Discovery | /.well-known/ard.json | absent |  |  |
| AI Catalog well-known file | /.well-known/ai-catalog.json | absent |  |  |
| MCP Server Cards (SEP-2127) | /.well-known/mcp.json | absent |  | a client-config map (mcpServers), not a SEP-2127 server card; /.well-known/mcp.json is superseded by <mcp-url>/server-card |
| Agent2Agent Protocol | /.well-known/agent.json | errors | version missing; skills[0].tags missing (required); skills[1].tags missing (required) | supportedInterfaces missing; A2A 1.0 cards declare interfaces there (url, protocolBinding, protocolVersion) and the top-level url is the 0.3 shape; defaultInputModes missing; defaultOutputModes missing; protocolVersion missing; clients cannot tell which A2A revision the card follows; provider missing (organization, url); served at /.well-known/agent.json; A2A 0.3+ reads /.well-known/agent-card.json |
| llms.txt | /llms.txt | valid |  |  |
| AGENTS.md | /AGENTS.md | absent |  |  |
| api-catalog: A Well-Known URI and Link Relation to Help Discovery of APIs | /.well-known/api-catalog | absent |  |  |
| AI Crawler User-Agent Tokens in robots.txt | /robots.txt | valid |  | no Agentmap: line (optional convention pointing agents at /.well-known/ard.json) |
| security.txt (RFC 9116) | /.well-known/security.txt | errors | Expires: missing (RFC 9116 requires it) |  |
| auth.md | /auth.md | valid |  |  |

## Standards observed

- llms.txt: https://cloudflare.com/llms.txt (https://agenticweb.wiki/protocols/llms-txt/)
- Content Signals Policy: https://cloudflare.com/robots.txt (https://agenticweb.wiki/protocols/cloudflare-content-signals-policy/)
- auth.md: https://cloudflare.com/auth.md (https://agenticweb.wiki/protocols/auth-md/)
- AI Crawler User-Agent Tokens in robots.txt: https://cloudflare.com/robots.txt (https://agenticweb.wiki/protocols/ai-crawler-tokens-robots/)
- Agent2Agent Protocol: undefined (https://agenticweb.wiki/protocols/a2a/)

## Cheapest next steps

1. Agentic Resource Discovery: a catalog at /.well-known/ard.json lets agents discover your APIs, MCP servers and data in one fetch (https://agenticweb.wiki/protocols/ard/)
2. AGENTS.md: instructions for coding agents working on or with the site (https://agenticweb.wiki/protocols/agents-md/)
3. api-catalog: A Well-Known URI and Link Relation to Help Discovery of APIs: an RFC 9727 linkset pointing at your OpenAPI description (https://agenticweb.wiki/protocols/api-catalog-rfc9727/)

## Rubric

+10 per lifecycle step with a standard observed, counting manifests that validate or that the probe rule for the standard recognises (a valid MCP server card counts for MCP; max 90); +3 per observed standard beyond the first two (max 15); conformance +15 (+10 with one manifest) minus 5 per agent-facing manifest with errors, never below 0 (security.txt is reported, not scored). A+ >= 60, A >= 45, B >= 30, C >= 20, D >= 10.

JSON: https://agenticweb.wiki/check/cloudflare.com/index.json · badge: https://agenticweb.wiki/badge/cloudflare.com.svg