--- title: "Xata agent readiness score: 83/100 · Agentrail" description: "Access is the strongest area, with a published OpenAPI spec and developer portal, while an MCP server or manifest and OAuth support are missed checks." canonical: "https://www.agentrail.co/agent-readiness/xata.io" --- Full report ## See what each check found, and how to fix it. Evidence, step-by-step fixes and your score over time, for your own site. [Get started →](https://app.agentrail.co/login?utm%5Fsource=agentrail.co&utm%5Fmedium=website&utm%5Fcampaign=agent-readiness%2Fxata.io&utm%5Fcontent=company-report) Free to start. No card. Usability 17 to fix - OAuth 2.0 supportRequiredHow to fix → - Agent onboarding frictionRecommendedHow to fix → - Web Bot Auth directoryEmergingHow to fix → - OAuth Protected Resource metadata (RFC 9728)RequiredHow to fix → Fixes unlock with the full report Where the score comes from 75 of 90 points How xata.io scores on each of the four questions agents ask. Discovery18/20 Access28/30 Usability29/40 Paymentsnot scored yet Strongest ### Access Content without JavaScript, MCP well-known discovery, and 3 more are missing. 28/30 Most to gain ### Usability OAuth 2.0 support, Agent onboarding friction, and 12 more are missing. 29/40 Most to gain ### Discovery ARD discovery, AI Catalog discovery, and 1 more are missing. 18/20 Not scored yet ### Payments ( bonus ) 6 checks partly met. Counts when scoring opens. — Every check 125checks - Passed**38** - To fix**28** - Not in the score**59** 66 checks count toward the score. The other 59 are tracked for later. Discovery18 of 203 to fix4 passed ARD discoveryRequired0 / 1 AI Catalog discoveryRecommended0 / 1 Wikipedia / Wikidata entity presenceRecommended0 / 4 Developer resource discoverabilityRecommended3 / 3 Brand name discoverabilityRequired3 / 3 robots.txt AI crawler policyRequired2 / 2 NPM/PyPI SDK packageRecommended1 / 1 \+ 8 checks not in the score ARD entry validityRecommendedNot counted ARD trust manifestRecommendedNot counted Category share of voiceRecommendedNot counted Listed in MCP registriesRecommendedNot counted Agent platform configsEmergingNot counted Agent Plugins manifestEmergingNot counted Registry brandingEmergingNot counted ChatGPT app listedRecommendedNot counted Access28 of 302 to fix3 partly22 passed MCP well-known discoveryRecommended0 / 2 Schema type breadthRecommended0 / 2 Content without JavaScriptRequired2 / 3 llms.txt links resolveRecommended1 / 2 API catalog (RFC 9727)Required1 / 2 Sitemap existsRequired2 / 2 Not blocked by bot detectionRequired2 / 2 Agent discovery fileRequired2 / 2 A2A / agent-cardRecommended2 / 2 HTTP Link headers (RFC 8288)Required1 / 1 Sitemap freshness (lastmod)Recommended1 / 1 robots.txt agent-user policyRequired2 / 2 llms.txt existsRequired1 / 1 llms.txt formattingRecommended2 / 2 JSON-LD structured dataRequired4 / 4 Pricing info accessibleRequired3 / 3 Public API/docs linked from homepageRequired3 / 3 JSON-LD entity linking (sameAs)Recommended2 / 2 Metadata completenessRequired2 / 2 Organization schema completenessRecommended2 / 2 Trust anchor pagesRequired2 / 2 Redirect hygieneRecommended1 / 1 Page token budgetRecommended1 / 1 OpenAPI spec publishedRequired7 / 7 Developer portalRecommended6 / 6 Markdown content negotiation (acceptmarkdown.com)Recommended1 / 1 Agent crawler reachabilityRecommended2 / 2 \+ 15 checks not in the score Agent Skills index conformance (v0.2.0)EmergingNot counted Listed on skills.shEmergingNot counted pricing.md existsEmergingNot counted NLWeb Schema FeedsEmergingNot counted Agent mode viewEmergingNot counted Markdown URL fallbackEmergingNot counted Modular llms.txt per product areaEmergingNot counted Agent instruction / when-to-useRequiredNot counted Skills.sh skill qualityEmergingNot counted Markdown alternate linkEmergingNot counted Markdown frontmatter metadataEmergingNot counted Code fence validityEmergingNot counted Content behind authRecommendedNot counted Markdown agent docsEmergingNot counted Bot-UA markdown servingEmergingNot counted Usability29 of 4010 to fix4 partly12 passed OAuth 2.0 supportRequired0 / 5 OAuth Protected Resource metadata (RFC 9728)Required0 / 2 auth.md walkthrough simulationRecommended0 / 2 Agent auth discovery metadataRecommended0 / 3 Agent auth WWW-Authenticate hintRecommended0 / 1 agent\_auth endpoints reachableRecommended0 / 2 MCP server / manifestRequired0 / 6 Rate limit response headersRecommended0 / 2 Sandbox / test environmentRecommended0 / 2 REST batch / bulk endpointRecommended0 / 2 Agent onboarding frictionRecommended1 / 2 auth.md structureRecommended1 / 2 REST async-job patternRecommended1 / 2 CLI tool availableRecommended2 / 3 Public API with reachable endpointsRequired7 / 7 Scoped permissionsRecommended5 / 5 auth.md existsRequired2 / 2 Idempotency-Key supportRecommended3 / 3 JSON error responsesRequired4 / 4 REST typed error modelRecommended3 / 3 REST versioning / deprecation policyRecommended3 / 3 Agent-friendly 404sRecommended2 / 2 Accessible document structureRecommended3 / 3 Accessible names on controlsRecommended2 / 2 API schema complexity analysisRecommended2 / 2 Function calling compatibilityRecommended2 / 2 \+ 36 checks not in the score MCP tool descriptionsRecommendedNot counted MCP parameter schemasRecommendedNot counted MCP server identityRecommendedNot counted MCP tool listingRecommendedNot counted MCP tool namingRecommendedNot counted MCP auth mechanismRecommendedNot counted MCP OAuth metadataRecommendedNot counted MCP PKCE S256 supportRecommendedNot counted Web Bot Auth directoryEmergingNot counted MCP error handlingRecommendedNot counted MCP modern transportRecommendedNot counted WebMCP supportRequiredNot counted REST pagination patternRecommendedNot counted Multi-language SDK packagesRecommendedNot counted NLWeb /ask endpointEmergingNot counted NLWeb streaming supportEmergingNot counted REST response schema coverageRecommendedNot counted MCP tool annotationsRecommendedNot counted MCP server-card.jsonRecommendedNot counted Product + docs MCP coverageRecommendedNot counted MCP resources exposedRecommendedNot counted GraphQL typed error modelRecommendedNot counted GraphQL versioning / deprecation policyRecommendedNot counted GraphQL pagination patternRecommendedNot counted GraphQL async-job patternRecommendedNot counted GraphQL schema description coverageRecommendedNot counted GraphQL batch mutationsRecommendedNot counted Native interactive controlsRecommendedNot counted Form control labelingRecommendedNot counted Accessibility-tree injection safety (bonus)RecommendedNot counted MCP Apps supportRecommendedNot counted A2UI / generative UI supportEmergingNot counted MCP Apps UI qualityRecommendedNot counted MCP App view reachableRecommendedNot counted MCP App view CSPRecommendedNot counted MCP resource qualityRecommendedNot counted PaymentsNot scored yet6 partly MPP payment protocolRequired0 / 2 x402 payment protocolRequired0 / 2 UCP - Universal Commerce ProtocolRequired0 / 3 ACP - Agentic Commerce ProtocolRequired0 / 3 ACP delegate paymentRecommended0 / 3 AP2 - Agent Payments ProtocolRecommended0 / 3