# sentry.io: agentic web grade B

Score 39 (coverage 30 + breadth 9 + conformance 0); 5 standards observed across 3 of 9 steps; checked 2026-10-19T23:59:54Z. This grades the agent-facing files published at sentry.io, not the organisation's products.

## Manifests

| Manifest | Path | Result | Errors | Warnings |
| --- | --- | --- | --- | --- |
| Agentic Resource Discovery | /.well-known/ard.json | absent |  | not fetched: subrequest-limit |
| AI Catalog well-known file | /.well-known/ai-catalog.json | absent |  | not fetched: subrequest-limit |
| MCP Server Cards (SEP-2127) | /.well-known/mcp.json | errors | $schema missing (required: https://static.modelcontextprotocol.io/schemas/v1/server-card.schema.json); name must be reverse-DNS with exactly one slash, e.g. com.example/weather; version missing | Content-Type is application/json; SEP-2127 says serve application/mcp-server-card+json; remotes missing: a card with no remotes gives clients nothing to connect to; no Access-Control-Allow-Origin: * (required for browser clients); no ETag |
| Agent2Agent Protocol | /.well-known/agent-card.json | absent |  | not fetched: timeout |
| llms.txt | /llms.txt | valid |  | file is large; keep llms.txt an index and put the full text in llms-full.txt |
| AGENTS.md | /AGENTS.md | valid |  |  |
| api-catalog: A Well-Known URI and Link Relation to Help Discovery of APIs | /.well-known/api-catalog | valid |  |  |
| AI Crawler User-Agent Tokens in robots.txt | /robots.txt | errors | no User-agent group at all | no AI crawler token named (GPTBot, OAI-SearchBot, ChatGPT-User, ClaudeBot, ...); the policy for them is whatever User-agent: * says (unspecified); no Sitemap: line; no Agentmap: line (optional convention pointing agents at /.well-known/ard.json); no Content-Signal: line (optional; states ai-train / search / ai-input preferences) |
| security.txt (RFC 9116) | /.well-known/security.txt | absent |  | not fetched: subrequest-limit |
| auth.md | /auth.md | errors | none of the auth.md mechanism names found (identity_assertion, service_auth, anonymous) |  |

## Standards observed

- llms.txt: https://sentry.io/llms.txt (https://agenticweb.wiki/protocols/llms-txt/)
- AGENTS.md: https://sentry.io/AGENTS.md (https://agenticweb.wiki/protocols/agents-md/)
- api-catalog: A Well-Known URI and Link Relation to Help Discovery of APIs: https://sentry.io/.well-known/api-catalog (https://agenticweb.wiki/protocols/api-catalog-rfc9727/)
- agents.txt: https://sentry.io/agents.txt (https://agenticweb.wiki/protocols/agents-txt/)
- OAuth Protected Resource and Authorization Server Metadata (as used for agent authorization): https://sentry.io/.well-known/oauth-protected-resource (https://agenticweb.wiki/protocols/oauth-metadata-for-agents/)

## Cheapest next steps

1. Agentic Resource Discovery: a catalog at /.well-known/ard.json lets agents discover your APIs, MCP servers and data in one fetch (https://agenticweb.wiki/protocols/ard/)
2. security.txt (RFC 9116): RFC 9116 contact and expiry, read by agents and people (https://www.rfc-editor.org/rfc/rfc9116)

## Rubric

+10 per lifecycle step with a standard observed, counting manifests that validate or that the probe rule for the standard recognises (a valid MCP server card counts for MCP; max 90); +3 per observed standard beyond the first two (max 15); conformance +15 (+10 with one manifest) minus 5 per agent-facing manifest with errors, never below 0 (security.txt is reported, not scored). A+ >= 60, A >= 45, B >= 30, C >= 20, D >= 10.

JSON: https://agenticweb.wiki/check/sentry.io/index.json · badge: https://agenticweb.wiki/badge/sentry.io.svg