Vercel
relative to the checks that apply to this site; global measures it against a maximally agent-ready site.
Discoverability
2 / 4/robots.txt present SHOULD PASS
Goal: Publish robots.txt and state your crawl policy explicitly.
Result: Verified (https://vercel.com/robots.txt -> 200)
/sitemap.xml present MAY PASS
Goal: Publish sitemap.xml so agents can enumerate your content URLs.
Result: Verified (https://vercel.com/sitemap.xml -> 200)
Resources: sitemaps.org · Fix skill
Homepage sends RFC 8288 Link headers pointing at agent resources SHOULD MISSING
Goal: Advertise machine surfaces in a Link response header on / for header-only discovery.
Result: Not found (https://vercel.com/ -> 200 (header link no match /rel="?(service-desc|describedby|api-catalog|service-doc)"?/))
Fix: Send a `Link` response header on `/` (RFC 8288) whose `rel` points at your machine surfaces, so an agent reading only response headers finds them without parsing HTML or probing `/.well-known`. Use the RFC 8631 service trio and the RFC 9727 catalog: `rel="service-desc"` at a machine-readable description (OpenAPI, or an MCP server card), `rel="service-doc"` at the human-readable doc, `rel="service-meta"` at the service-context declaration, and `rel="api-catalog"` at your `/.well-known/api-catalog` index. Example: `Link: </.well-known/api-catalog>; rel="api-catalog", </.well-known/mcp/server-card.json>; rel="service-desc"`.
Resources: RFC 8288 (Link) · RFC 8631 (service links) · RFC 9727 (api-catalog) · Fix skill
Root HTML links to machine surfaces via <link rel> SHOULD MISSING
Goal: Point link rel elements at your machine surfaces from the root HTML head.
Result: Not found (https://vercel.com/ -> 200 (body no match /rel=["'](service-desc|service-doc|alternate)["']/))
Fix: Add `<link rel>` elements in your root HTML head pointing at your machine surfaces: `rel="service-desc"` to the OpenAPI doc, `rel="service-doc"` to human docs, and `rel="alternate"` to `llms.txt` and the MCP card. An agent that lands on the HTML can then discover the structured surfaces without scraping.
Resources: RFC 8631 (service-desc/doc) · Fix skill
DNS for AI Discovery (DNS-AID) records under _agents (IETF draft) MAY N/A
Goal: Publish DNSSEC-signed SVCB records under _agents for DNS-level agent discovery.
Result: Not implemented, optional (no DNS-AID records)
Resources: DNS-AID draft · Fix skill
Content for agents
7 / 9/llms.txt present with a summary and link index SHOULD PASS
Goal: Serve /llms.txt with a title, summary, and categorized link index.
Result: Verified (https://vercel.com/llms.txt -> 200)
Resources: llmstxt.org · Fix skill
/llms-full.txt present (single-fetch full corpus) MAY PASS
Goal: Serve the whole docs corpus as markdown at /llms-full.txt for one-fetch ingestion.
Result: Verified (https://vercel.com/llms-full.txt -> 200)
Resources: llmstxt.org · Fix skill
Root HTML has a descriptive <meta name="description"> SHOULD PASS
Goal: Add a meta description naming what the service does and its agent entry points.
Result: Verified (https://vercel.com/ -> 200)
Resources: MDN meta description · Fix skill
Root HTML embeds Schema.org JSON-LD MAY PASS
Goal: Embed Schema.org JSON-LD so agents get typed facts without inference.
Result: Verified (https://vercel.com/ -> 200)
Resources: Schema.org · Fix skill
Root HTML uses semantic landmarks MAY PASS
Goal: Use semantic landmarks so the HTML path is parseable structure, not div soup.
Result: Verified (https://vercel.com/ -> 200)
Resources: MDN content sectioning · Fix skill
Root HTML has a <noscript> with machine entry points SHOULD MISSING
Goal: Give non-JS agents a noscript block listing your machine entry points.
Result: Not found (https://vercel.com/ -> 200 (body no match /<noscript/))
Fix: Add a `<noscript>` block to your root HTML that links your machine entry points: `llms.txt`, your OpenAPI or MCP endpoint, and any `.well-known` cards. It hands a fetch-only crawler or a non-JS agent a concrete, in-body list of where the structured surfaces live, so it never has to run the client bundle or infer them from the visible page.
Resources: MDN noscript · Fix skill
Accept text/markdown content negotiation returns markdown SHOULD MISSING
Goal: Honor Accept text/markdown on content URLs with raw markdown, not HTML chrome.
Result: Not found (https://vercel.com/ -> 200 (content-type "text/html; charset=utf-8" !~ /markdown|text/plain/))
Fix: Honor `Accept: text/markdown` on content URLs and return raw markdown rather than HTML chrome. Agents parse markdown far more reliably than a JS-rendered page. Serve the markdown twin at the same URL via content negotiation, invisibly to crawlers.
Resources: RFC 7763 (text/markdown) · Fix skill
Per-section llms.txt files resolve under content subdirectories MAY PASS
Goal: Serve a scoped llms.txt inside each major content section.
Result: Verified (https://vercel.com/docs/llms.txt -> 200)
Resources: llmstxt.org · Fix skill
Per-section llms-full.txt files resolve under content subdirectories MAY PASS
Goal: Serve a scoped llms-full.txt corpus inside each major content section.
Result: Verified (https://vercel.com/docs/llms-full.txt -> 200)
Resources: llmstxt.org · Fix skill
Bot & crawl policy
3 / 3robots.txt declares AI-crawler rules (RFC 9309) SHOULD PASS
Goal: State your AI-crawler policy in robots.txt with explicit User-agent rules.
Result: Verified (https://vercel.com/robots.txt -> 200)
robots.txt declares Content-Signal AI-usage preferences SHOULD PASS
Goal: Declare Content-Signal AI-usage preferences in robots.txt.
Result: Verified (https://vercel.com/robots.txt -> 200)
Resources: contentsignals.org · Fix skill
/.well-known/security.txt present (RFC 9116) MAY PASS
Goal: Publish security.txt with a Contact and Expires field.
Result: Verified (https://vercel.com/.well-known/security.txt -> 200)
Web Bot Auth signature directory present (informational) MAY N/A
Goal: Publish an HTTP Message Signatures directory if your site sends signed bot traffic.
Result: Not implemented, optional (https://vercel.com/.well-known/http-message-signatures-directory -> 404 (status 404 not in [200]))
Resources: Web Bot Auth draft · Fix skill
API
1 / 2An OpenAPI description is published MUST PASS
Goal: Publish an OpenAPI description so non-MCP agents can call your HTTP API.
Result: Verified (https://vercel.com/openapi.json -> 200)
Resources: OpenAPI 3.1 · Fix skill
/.well-known/api-catalog published (RFC 9727) MAY N/A
Goal: Serve an RFC 9727 api-catalog linkset indexing your API descriptions.
Result: Not implemented, optional (https://vercel.com/.well-known/api-catalog -> 404 (status 404 not in [200]))
Referenced JSON Schemas resolve as application/schema+json MAY BROKEN
Goal: Serve the JSON Schemas your API references so agents can validate payloads pre-flight.
Result: Present but broken (https://vercel.com/api/schema/input.json -> 404 (status 404 not in [200]))
Fix: Serve the input and output JSON Schemas your API references (for example `/api/schema/input.json`) as `application/schema+json`. Agents validate payloads against them before calling, which turns a class of runtime failures into pre-flight validation.
Resources: JSON Schema · Fix skill
MCP
0 / 0No checks in this category apply to this site.
initialize handshake returns serverInfo + protocolVersion MUST N/A
Goal: Answer JSON-RPC initialize with serverInfo and protocolVersion so clients can begin a session.
Result: Not applicable (no MCP endpoint discovered)
Resources: MCP lifecycle · Fix skill
initialize advertises capabilities (tools / resources / prompts) SHOULD N/A
Goal: Advertise the capability groups your MCP server implements in the initialize result.
Result: Not applicable (no MCP endpoint discovered)
Resources: MCP lifecycle · Fix skill
tools/list returns a tools array with input schemas MUST N/A
Goal: Return tools/list entries with name, description, and a JSON inputSchema.
Result: Not applicable (no MCP endpoint discovered)
unknown JSON-RPC method returns -32601 SHOULD N/A
Goal: Reject unknown JSON-RPC methods with error -32601 instead of a hang or 500.
Result: Not applicable (no MCP endpoint discovered)
Resources: JSON-RPC 2.0 · Fix skill
GET on the MCP endpoint answers fast (not a held-open hang) SHOULD N/A
Goal: Answer GET on the MCP endpoint fast (a fast-fail status or a documented surface), never a held-open hang.
Result: Not applicable (no MCP endpoint discovered)
Resources: MCP transports · Fix skill
CORS preflight (OPTIONS) succeeds with Access-Control-Allow-* headers SHOULD N/A
Goal: Answer OPTIONS preflights on the MCP endpoint with Access-Control-Allow-* headers.
Result: Not applicable (no MCP endpoint discovered)
Resources: MDN CORS preflight · Fix skill
POST response carries Access-Control-Allow-Origin SHOULD N/A
Goal: Echo Access-Control-Allow-Origin on the actual MCP POST response.
Result: Not applicable (no MCP endpoint discovered)
A .well-known MCP server card is published (SEP-1649) SHOULD N/A
Goal: Publish an MCP server card at the canonical SEP-1649 path and 301 the legacy aliases to it.
Result: Not applicable (no MCP endpoint discovered)
A human/agent usage doc for the server resolves MAY N/A
Goal: Publish a one-fetch markdown usage doc for your MCP server.
Result: Not applicable (no MCP endpoint discovered)
Resources: anc.dev example · Fix skill
Root HTML exposes WebMCP browser tools MAY N/A
Goal: Expose page tools to browser agents via WebMCP.
Result: Not implemented, optional (https://vercel.com/ -> 200 (no WebMCP markers in root HTML))
Resources: WebMCP spec · Fix skill
Agent discovery & auth
1 / 2OAuth/OIDC discovery metadata published MAY PASS
Goal: Publish OAuth/OIDC discovery metadata if agents authenticate to your service.
Result: Verified (https://vercel.com/.well-known/openid-configuration -> 200)
OAuth Protected Resource Metadata published (RFC 9728) MAY N/A
Goal: Publish RFC 9728 protected-resource metadata for your authenticated MCP server.
Result: Not applicable (MCP endpoint does not challenge for auth)
A2A Agent Card published for agent-to-agent discovery MAY N/A
Goal: Publish an A2A Agent Card for agent-to-agent discovery.
Result: Not implemented, optional (https://vercel.com/.well-known/agent-card.json -> 404 (status 404 not in [200]))
Resources: A2A protocol · Fix skill
Agent-skills discovery index published MAY N/A
Goal: Publish an agent-skills discovery index so agents can enumerate your skills.
Result: Not implemented, optional (https://vercel.com/.well-known/agent-skills/index.json -> 404 (status 404 not in [200]))
Resources: Agent Skills Discovery · Fix skill
Agent auth/registration metadata doc published MAY BROKEN
Goal: Publish an auth.md telling agents how to obtain credentials.
Result: Present but broken (https://vercel.com/.well-known/auth.md -> 404)
Fix: Publish an `auth.md` at `/.well-known/auth.md` (or `/auth.md`): a short markdown guide that tells an agent how to obtain credentials, including where to register, which OAuth flows are supported, token endpoints, and scopes. It turns "figure out our auth" into a one-fetch orientation.
Resources: anc.dev example · Fix skill
This scorecard reflects the target's public agent-facing surface at audit time. Re-run the audit from anc.dev/web-audit to refresh it, or call the audit_website MCP tool.