--- title: "Box agent readiness score: 66/100 · Agentrail" description: "How well AI agents can find, read, use and pay Box — agent readiness score from Agentrail (agentrail.co)." canonical: "https://www.agentrail.co/agent-readiness/box.com" --- Full report ## See what each check found, and how to fix it. Evidence, step-by-step fixes and your score over time, for your own site. [Get started →](https://app.agentrail.co/login?utm%5Fsource=agentrail.co&utm%5Fmedium=website&utm%5Fcampaign=agent-readiness%2Fbox.com&utm%5Fcontent=company-report) Free to start. No card. Usability 19 to fix - Scoped permissionsRecommendedHow to fix → - MCP auth mechanismRecommendedHow to fix → - MCP OAuth metadataRecommendedHow to fix → - MCP PKCE S256 supportRecommendedHow to fix → Fixes unlock with the full report Where the score comes from 60 of 90 points How box.com scores on each of the four questions agents ask. Discovery14/20 Access23/30 Usability23/40 Paymentsnot scored yet Strongest ### Access Content without JavaScript, Agent discovery file, and 8 more are missing. 23/30 Most to gain ### Usability Scoped permissions, MCP auth mechanism, and 14 more are missing. 23/40 Most to gain ### Discovery ARD discovery, Brand name discoverability, and 1 more are missing. 14/20 Not scored yet ### Payments ( bonus ) 6 checks partly met. Counts when scoring opens. — Every check 125checks - Passed**30** - To fix**35** - Not in the score**60** 65 checks count toward the score. The other 60 are tracked for later. Discovery14 of 202 to fix1 partly4 passed ARD discoveryRequired0 / 1 Brand name discoverabilityRequired0 / 3 Wikipedia / Wikidata entity presenceRecommended2 / 4 Developer resource discoverabilityRecommended3 / 3 robots.txt AI crawler policyRequired2 / 2 Listed in MCP registriesRecommended1 / 1 NPM/PyPI SDK packageRecommended1 / 1 \+ 8 checks not in the score AI Catalog discoveryRecommendedNot counted ARD entry validityRecommendedNot counted ARD trust manifestRecommendedNot counted Category share of voiceRecommendedNot counted Agent platform configsEmergingNot counted Agent Plugins manifestEmergingNot counted Registry brandingEmergingNot counted ChatGPT app listedRecommendedNot counted Access23 of 307 to fix3 partly17 passed Agent discovery fileRequired0 / 2 MCP well-known discoveryRecommended0 / 2 HTTP Link headers (RFC 8288)Required0 / 1 Schema type breadthRecommended0 / 2 OpenAPI spec publishedRequired0 / 7 API catalog (RFC 9727)Required0 / 2 Markdown content negotiation (acceptmarkdown.com)Recommended0 / 1 Content without JavaScriptRequired2 / 3 llms.txt formattingRecommended1 / 2 Trust anchor pagesRequired1 / 2 Sitemap existsRequired2 / 2 Not blocked by bot detectionRequired2 / 2 A2A / agent-cardRecommended2 / 2 Sitemap freshness (lastmod)Recommended1 / 1 robots.txt agent-user policyRequired2 / 2 llms.txt existsRequired1 / 1 JSON-LD structured dataRequired4 / 4 Pricing info accessibleRequired3 / 3 Public API/docs linked from homepageRequired3 / 3 JSON-LD entity linking (sameAs)Recommended2 / 2 Metadata completenessRequired2 / 2 Organization schema completenessRecommended2 / 2 llms.txt links resolveRecommended2 / 2 Redirect hygieneRecommended1 / 1 Page token budgetRecommended1 / 1 Developer portalRecommended6 / 6 Agent crawler reachabilityRecommended2 / 2 \+ 15 checks not in the score Agent Skills index conformance (v0.2.0)EmergingNot counted Listed on skills.shEmergingNot counted pricing.md existsEmergingNot counted NLWeb Schema FeedsEmergingNot counted Agent mode viewEmergingNot counted Markdown URL fallbackEmergingNot counted Modular llms.txt per product areaEmergingNot counted Agent instruction / when-to-useRequiredNot counted Skills.sh skill qualityEmergingNot counted Markdown alternate linkEmergingNot counted Markdown frontmatter metadataEmergingNot counted Code fence validityEmergingNot counted Content behind authRecommendedNot counted Markdown agent docsEmergingNot counted Bot-UA markdown servingEmergingNot counted Usability23 of 4013 to fix3 partly9 passed Scoped permissionsRecommended0 / 5 MCP OAuth metadataRecommended0 / 2 MCP PKCE S256 supportRecommended0 / 2 agent\_auth endpoints reachableRecommended0 / 2 Rate limit response headersRecommended0 / 2 Idempotency-Key supportRecommended0 / 3 JSON error responsesRequired0 / 4 REST typed error modelRecommended0 / 3 REST async-job patternRecommended0 / 2 REST batch / bulk endpointRecommended0 / 2 Agent-friendly 404sRecommended0 / 2 API schema complexity analysisRecommended0 / 2 Function calling compatibilityRecommended0 / 2 MCP auth mechanismRecommended1 / 2 Agent auth discovery metadataRecommended1 / 3 MCP server / manifestRequired5 / 6 Public API with reachable endpointsRequired7 / 7 OAuth 2.0 supportRequired5 / 5 Agent onboarding frictionRecommended2 / 2 OAuth Protected Resource metadata (RFC 9728)Required2 / 2 Agent auth WWW-Authenticate hintRecommended1 / 1 CLI tool availableRecommended3 / 3 MCP server-card.jsonRecommended2 / 2 Accessible document structureRecommended3 / 3 Accessible names on controlsRecommended2 / 2 \+ 37 checks not in the score MCP tool descriptionsRecommendedNot counted MCP parameter schemasRecommendedNot counted MCP server identityRecommendedNot counted MCP tool listingRecommendedNot counted MCP tool namingRecommendedNot counted Web Bot Auth directoryEmergingNot counted auth.md existsRequiredNot counted auth.md structureRecommendedNot counted auth.md walkthrough simulationRecommendedNot counted MCP error handlingRecommendedNot counted MCP modern transportRecommendedNot counted WebMCP supportRequiredNot counted REST versioning / deprecation policyRecommendedNot counted REST pagination patternRecommendedNot counted Multi-language SDK packagesRecommendedNot counted NLWeb /ask endpointEmergingNot counted NLWeb streaming supportEmergingNot counted REST response schema coverageRecommendedNot counted MCP tool annotationsRecommendedNot counted Product + docs MCP coverageRecommendedNot counted Sandbox / test environmentRecommendedNot counted MCP resources exposedRecommendedNot counted GraphQL typed error modelRecommendedNot counted GraphQL versioning / deprecation policyRecommendedNot counted GraphQL pagination patternRecommendedNot counted GraphQL async-job patternRecommendedNot counted GraphQL schema description coverageRecommendedNot counted GraphQL batch mutationsRecommendedNot counted Native interactive controlsRecommendedNot counted Form control labelingRecommendedNot counted Accessibility-tree injection safety (bonus)RecommendedNot counted MCP Apps supportRecommendedNot counted A2UI / generative UI supportEmergingNot counted MCP Apps UI qualityRecommendedNot counted MCP App view reachableRecommendedNot counted MCP App view CSPRecommendedNot counted MCP resource qualityRecommendedNot counted PaymentsNot scored yet6 partly MPP payment protocolRequired0 / 2 x402 payment protocolRequired0 / 2 UCP - Universal Commerce ProtocolRequired0 / 3 ACP - Agentic Commerce ProtocolRequired0 / 3 ACP delegate paymentRecommended0 / 3 AP2 - Agent Payments ProtocolRecommended0 / 3