coinbase.com agentic web readiness

A Score 48 (coverage 30 + breadth 3 + conformance 15). 3 standards observed across 3 of 9 steps; 4 manifests present, 1 error, 5 warnings. Checked 2026-10-18 23:43:42 UTC via www.coinbase.com. This grades the agent-facing files published at coinbase.com, not the organisation's products.

Badge for a README: ![agentic web grade](https://agenticweb.wiki/badge/coinbase.com.svg) · JSON · Markdown · Re-check now

Coverage by step

01 DiscoverRFC 9727 02 Identifynothing observed 03 Permit 04 Readllms.txt 05 Actnothing observed 06 Coordinatenothing observed 07 Paynothing observed 08 Presentnothing observed 09 Accountnothing observed

Manifests

Manifest	Result	Findings
Agentic Resource Discovery `/.well-known/ard.json`	absent HTTP 404
AI Catalog well-known file `/.well-known/ai-catalog.json`	absent HTTP 404
MCP Server Cards (SEP-2127) `/mcp/server-card`	absent HTTP 404
Agent2Agent Protocol `/.well-known/agent-card.json`	absent HTTP 404
llms.txt `/llms.txt`	valid HTTP 200
AGENTS.md `/AGENTS.md`	absent HTTP 404
api-catalog: A Well-Known URI and Link Relation to Help Discovery of APIs `/.well-known/api-catalog`	valid HTTP 200
AI Crawler User-Agent Tokens in robots.txt `/robots.txt`	valid HTTP 200	no AI crawler token named (GPTBot, OAI-SearchBot, ChatGPT-User, ClaudeBot, ...); the policy for them is whatever User-agent: * says (partial) no Agentmap: line (optional convention pointing agents at /.well-known/ard.json) no Content-Signal: line (optional; states ai-train / search / ai-input preferences)
security.txt (RFC 9116) `/.well-known/security.txt`	errors HTTP 200	Expires: is in the past Canonical: missing
auth.md `/auth.md`	absent HTTP 404

What an agent can call

API description https://docs.cdp.coinbase.com/api-reference/v2/cdp-api-v2.yaml (application/yaml)
API description https://docs.cdp.coinbase.com/api-reference/v2/introduction (text/html)
API description https://docs.cdp.coinbase.com/api-reference/advanced-trade-api/rest-api/introduction (text/html)
API description https://docs.cdp.coinbase.com/api-reference/business-api/rest-api/introduction (text/html)
API description https://docs.cdp.coinbase.com/api-reference/exchange-api/rest-api/introduction (text/html)
API description https://docs.cdp.coinbase.com/api-reference/international-exchange-api/rest-api/introduction (text/html)
API description https://docs.cdp.coinbase.com/api-reference/prime-api/rest-api/introduction (text/html)
API description https://docs.cdp.coinbase.com/api-reference/derivatives-api/rest-api/introduction (text/html)
llms.txt: Coinbase & Coinbase Developer Platform (landing pages), 38 links
robots.txt AI policy: unlisted crawlers partial

Standards observed

llms.txt https://coinbase.com/llms.txt
api-catalog: A Well-Known URI and Link Relation to Help Discovery of APIs https://coinbase.com/.well-known/api-catalog
AI Crawler User-Agent Tokens in robots.txt

Cheapest next steps

Agentic Resource Discovery: a catalog at /.well-known/ard.json lets agents discover your APIs, MCP servers and data in one fetch
AGENTS.md: instructions for coding agents working on or with the site
MCP Server Cards (SEP-2127): if you run an MCP server, a SEP-2127 card at <mcp-url>/server-card lets clients configure themselves

How the grade is made

+10 per lifecycle step with a standard observed, counting manifests that validate or that the probe rule for the standard recognises (a valid MCP server card counts for MCP; max 90); +3 per observed standard beyond the first two (max 15); conformance +15 (+10 with one manifest) minus 5 per agent-facing manifest with errors, never below 0 (security.txt is reported, not scored). A+ >= 60, A >= 45, B >= 30, C >= 20, D >= 10. Errors are specification violations; warnings are best-practice gaps. Only public paths are fetched, without credentials, so standards that need a login (skipped in the probe) are not counted either way. The same report is the validate_manifest tool on the MCP server.

JSON · Markdown · probe rules