ora.ai

https://ora.ai/

Legacy site · Static audit

The static audit found gaps. Start with the fixes below.

Pass starts at 80 / 100. This scan does not prove that an agent can complete a purchase. Method and limits

69/ 100

NEEDS WORK

Core coverage: Not measured of core weight verified
Score model: v26Versioned criteria

Scanned 2026-09-02 15:29:58 UTC

What to fix first

Start with these changes. Open a fix for the finding, example, and supporting evidence.

5 priority changes

1
Document the access method
+7.8 points estimated
State whether access is public or needs credentials. Link the applicable authentication metadata.

OAuth protected resource metadata OAuth 2.0 support Scoped permissions OAuth authorization-server metadata Agent auth discovery metadata auth.md walkthrough simulation
Starting example
```
# Authentication

Public report reads need no credentials.
Write requests require a bearer token.
Never put tokens in URLs.
```
View findings and full example

Suggested location: /auth.md
- OAuth protected resource metadata
  
  Finding: The scan did not find OAuth protected resource metadata.
  
  Change: Publish RFC 9728 metadata at /.well-known/oauth-protected-resource.
  Open this check and its evidence
- OAuth 2.0 support
  
  Finding: The fixed discovery paths did not provide a usable OAuth authorization-server signal.
  
  Change: Publish RFC 9728 protected-resource metadata and RFC 8414 authorization-server metadata.
  Open this check and its evidence
- Scoped permissions
  
  Finding: The discovered OAuth metadata does not declare supported scopes.
  
  Change: Publish scopes_supported in protected-resource or authorization-server metadata.
  Open this check and its evidence
- OAuth authorization-server metadata
  
  Finding: The scan did not find authorization-server metadata at the fixed well-known path.
  
  Change: Publish RFC 8414 metadata at /.well-known/oauth-authorization-server.
  Open this check and its evidence
- Agent auth discovery metadata
  
  Finding: The fixed discovery documents do not publish an agent_auth chain.
  
  Change: Publish protected-resource metadata and an agent_auth block that points to /auth.md.
  Open this check and its evidence
- auth.md walkthrough simulation
  
  Finding: The walkthrough is usable in part, but its discovery chain or route map is incomplete.
  
  Change: Document every credential lifecycle stage and link it to valid protected-resource and authorization-server metadata.
  Open this check and its evidence
Starting example
```
# Authentication

Public report reads need no credentials.
Write requests require a bearer token.
Never put tokens in URLs.
```
Adapt this example to the service. Apply every relevant change listed above, then confirm it with a new scan.
2
Publish a usable API contract
+4.2 points estimated
Link public API instructions and a valid OpenAPI document. Show request and response examples.

API catalog Idempotency-Key support MCP Streamable HTTP transport MCP parameter schemas MCP tool annotations MCP resources exposed MCP App view CSP Product and documentation MCP coverage Official MCP Registry listing
View findings and full example

Suggested location: /docs
- API catalog
  
  Finding: The API catalog is usable, but its media type or HEAD Link relation is incomplete.
  
  Change: Serve Linkset JSON and include rel=api-catalog in the HEAD response.
  Open this check and its evidence
- Idempotency-Key support
  
  Finding: No write operation declares an Idempotency-Key header.
  
  Change: Add an Idempotency-Key header parameter to retryable POST, PUT, PATCH, and DELETE operations.
  Open this check and its evidence
- MCP Streamable HTTP transport
  
  Finding: The MCP discovery documents do not declare a modern transport.
  
  Change: Publish a valid Streamable HTTP remote in the MCP server card.
  Open this check and its evidence
- MCP parameter schemas
  
  Finding: Only some listed tools meet this requirement.
  
  Change: Give each tool a typed object inputSchema and keep required names in properties.
  Open this check and its evidence
- MCP tool annotations
  
  Finding: Only some listed tools meet this requirement.
  
  Change: Add boolean readOnlyHint and destructiveHint annotations to each tool.
  Open this check and its evidence
- MCP resources exposed
  
  Finding: Only some resource descriptors have a valid name, URI, and media type.
  
  Change: Add a valid name, absolute URI, and media type to every resource descriptor.
  Open this check and its evidence
- MCP App view CSP
  
  Finding: The MCP App omits CSP metadata and therefore uses the restrictive default policy.
  
  Change: Declare the minimum external origins that the view must connect to, load, or frame.
  Open this check and its evidence
- Product and documentation MCP coverage
  
  Finding: The MCP server exposes product operations, but no documentation-oriented tool or resource was classified.
  
  Change: Add a clearly named documentation, reference, guide, help, schema, or overview tool or resource.
  Open this check and its evidence
- Official MCP Registry listing
  
  Finding: The official MCP Registry has an active name match, but the scan could not verify domain or repository ownership.
  
  Change: Add the product domain or canonical public repository to the registry server metadata.
  Open this check and its evidence
Starting example
```
{
  "info": {
    "title": "Example API",
    "version": "1.0.0"
  },
  "openapi": "3.1.0",
  "paths": {
    "/status": {
      "get": {
        "responses": {
          "200": {
            "description": "Service status"
          }
        }
      }
    }
  }
}
```
Adapt this example to the service. Apply every relevant change listed above, then confirm it with a new scan.
3
Link the resources agents can use
+2.9 points estimated
Add named links to the site's public documentation and machine-readable resources.

Universal Commerce Protocol Linked content is publicly readable Sandbox or test environment Verified Wikidata and English Wikipedia presence
Starting example
```
<a href="/docs">Documentation</a><a href="/llms.txt">Content map for agents</a>
```
View findings and full example

Suggested location: /
- Universal Commerce Protocol
  
  Finding: The scan did not find a UCP business profile.
  
  Change: Publish a UCP business profile at /.well-known/ucp.
  Open this check and its evidence
- Linked content is publicly readable
  
  Finding: 7 of 8 sampled content page(s) were publicly readable.
  
  Change: Fix broken content links and publish non-empty pages without a login wall.
  Open this check and its evidence
- Sandbox or test environment
  
  Finding: The OpenAPI document does not declare a sandbox or test environment.
  
  Change: Add a separate sandbox server declaration or an explicit environment server variable.
  Open this check and its evidence
- Verified Wikidata and English Wikipedia presence
  
  Finding: The bounded Wikidata search found no entity with verified ownership of this domain.
  
  Change: Add the official website to the correct Wikidata entity, or link the correct Wikidata or Wikipedia page from structured data.
  Open this check and its evidence
Starting example
```
<a href="/docs">Documentation</a><a href="/llms.txt">Content map for agents</a>
```
Adapt this example to the service. Apply every relevant change listed above, then confirm it with a new scan.

2 more priority changes

4
Return clear error responses
+2.6 points estimated
Use one documented error format. Match the HTTP status to the error.

JSON error responses REST typed error model
Starting example
```
HTTP/1.1 404 Not Found
Content-Type: application/problem+json

{"type":"about:blank","title":"Not found","status":404}
```
View findings and full example

Suggested location: /api
- JSON error responses
  
  Finding: The missing-path response is not a structured JSON error.
  
  Change: Return application/problem+json or a stable JSON error object for API errors.
  Open this check and its evidence
- REST typed error model
  
  Finding: Only 35 of 54 declared error responses have typed schemas.
  
  Change: Use one typed error schema or application/problem+json for every 4xx and 5xx response.
  Open this check and its evidence
Starting example
```
HTTP/1.1 404 Not Found
Content-Type: application/problem+json

{"type":"about:blank","title":"Not found","status":404}
```
Adapt this example to the service. Apply every relevant change listed above, then confirm it with a new scan.
5
Explain the price model
+2.0 points estimated
Link a public pricing page and state what is free, paid, or metered.

Pricing information is accessible
Starting example
```
<a href="/pricing">Pricing</a><p>Public reads are free. Paid limits are listed on the pricing page.</p>
```
View findings and full example

Suggested location: /pricing
- Pricing information is accessible
  
  Finding: No pricing link or pricing language was found.
  
  Change: Link to public pricing and describe the main price model in page text.
  Open this check and its evidence
Starting example
```
<a href="/pricing">Pricing</a><p>Public reads are free. Paid limits are listed on the pricing page.</p>
```
Adapt this example to the service. Apply every relevant change listed above, then confirm it with a new scan.

Estimated gains use this report's model. All checks listed in a fix must pass to earn its full estimated gain.

All checks 124Findings, recommended changes, and score weights

What this scan found

56 checks passed. 45 need attention. 13 could not be verified. Checks that do not apply stay out of the score.

Passed: 56
Needs attention: 45
Could not verify: 13
Not applicable: 10

Capture rules: 17 of 17 complete
HTTP requests: 67
Saved artifacts: 65
Observations: 56

All results

Results that need attention are listed first. Open a row for its reason and recommended change.

001 A2UI generative UI support Usability · Emerging · Legacy Failed 0 of 200

Finding

The public MCP server has no A2UI resource signal.

Recommended change

Publish an A2UI presentation resource and link it from the tool that produces its data.

Check ID: a2ui-support@1
Supporting evidence: View stored observation

002 Agent Plugins manifest Discovery · Emerging · Legacy Failed 0 of 100

Finding

The product page does not advertise a public GitHub source repository.

Recommended change

Link the canonical public GitHub repository from the product page.

Check ID: agent-plugins-repo@1
Supporting evidence: View stored observation

003 Agent auth discovery metadata Usability · Recommended · Legacy Failed 0 of 600

Finding

The fixed discovery documents do not publish an agent_auth chain.

Recommended change

Publish protected-resource metadata and an agent_auth block that points to /auth.md.

Check ID: agent-auth-discovery-metadata@1
Supporting evidence: View stored observation View stored observation

004 Agent mode view Accessibility · Emerging · Legacy Failed 0 of 300

Finding

The agent-mode query returned a normal HTML view or another unsuitable representation.

Recommended change

Return a dedicated JSON, Markdown, or plain-text agent view.

Check ID: agent-mode-view@1
Supporting evidence: View stored observation

005 Agent platform repository configurations Discovery · Emerging · Legacy Failed 0 of 100

Finding

The product page does not advertise a public GitHub source repository.

Recommended change

Link the canonical public GitHub repository from the product page.

Check ID: agent-rules-repo@1
Supporting evidence: View stored observation

006 Agent usage instructions Accessibility · Required · Legacy Failed 0 of 400

Finding

The checked llms.txt and dedicated instruction paths do not explain when an agent should use the product.

Recommended change

Add a specific when-to-use section to llms.txt or a dedicated agent instruction document.

Check ID: agent-instruction@1
Supporting evidence: View stored observation View stored observation

007 CLI tool available Usability · Recommended · Legacy Failed 0 of 300

Finding

The product page does not provide a usable public CLI path.

Recommended change

Publish a CLI, a copyable install command, and a stable public documentation or package link.

Check ID: cli-tool@1
Supporting evidence: View stored observation

008 Idempotency-Key support Usability · Recommended · Legacy Failed 0 of 600

Finding

No write operation declares an Idempotency-Key header.

Recommended change

Add an Idempotency-Key header parameter to retryable POST, PUT, PATCH, and DELETE operations.

Check ID: idempotency-key-support@1
Supporting evidence: View stored observation

009 Identified bot Markdown serving Access · Emerging · Legacy Failed 0 of 300

Finding

The identified bot request received text/html, not Markdown.

Recommended change

Optionally serve a Markdown representation to the truthful AgentReadinessBot identity.

Check ID: agent-ua-markdown@1
Supporting evidence: View stored observation

010 JSON error responses Usability · Required · Legacy Failed 0 of 1000

Finding

The missing-path response is not a structured JSON error.

Recommended change

Return application/problem+json or a stable JSON error object for API errors.

Check ID: json-error-responses@1
Supporting evidence: View stored observation

011 MCP Streamable HTTP transport Usability · Recommended · Legacy Failed 0 of 300

Finding

The MCP discovery documents do not declare a modern transport.

Recommended change

Publish a valid Streamable HTTP remote in the MCP server card.

Check ID: mcp-streamable-http@1
Supporting evidence: View stored observation View stored observation View stored observation

012 Markdown alternate link Access · Emerging · Legacy Failed 0 of 300

Finding

The page does not declare a Markdown alternate.

Recommended change

Add a link rel=alternate with type=text/markdown and a stable URL.

Check ID: markdown-link-alternate@1
Supporting evidence: View stored observation

013 Multi-language SDK packages Usability · Recommended · Legacy Failed 0 of 300

Finding

The product page has no reachable multi-language SDK evidence.

Recommended change

Link stable public SDK pages or package pages and identify their programming languages.

Check ID: rest-sdk-packages@1
Supporting evidence: View stored observation

014 NPM or PyPI SDK package Discovery · Recommended · Legacy Failed 0 of 100

Finding

The product page does not link an NPM or PyPI SDK package.

Recommended change

Publish an SDK package and link its exact NPM or PyPI package page.

Check ID: npm-sdk-package@1
Supporting evidence: View stored observation

015 OAuth 2.0 support Usability · Required · Legacy Failed 0 of 1000

Finding

The fixed discovery paths did not provide a usable OAuth authorization-server signal.

Recommended change

Publish RFC 9728 protected-resource metadata and RFC 8414 authorization-server metadata.

Check ID: oauth-support@1
Supporting evidence: View stored observation View stored observation

016 OAuth authorization-server metadata Usability · Recommended · Legacy Failed 0 of 600

Finding

The scan did not find authorization-server metadata at the fixed well-known path.

Recommended change

Publish RFC 8414 metadata at /.well-known/oauth-authorization-server.

Check ID: mcp-oauth-metadata@1
Supporting evidence: View stored observation View stored observation

017 OAuth protected resource metadata Usability · Required · Legacy Failed 0 of 1000

Finding

The scan did not find OAuth protected resource metadata.

Recommended change

Publish RFC 9728 metadata at /.well-known/oauth-protected-resource.

Check ID: oauth-protected-resource@1
Supporting evidence: View stored observation

018 Pricing information is accessible Access · Required · Legacy Failed 0 of 1000

Finding

No pricing link or pricing language was found.

Recommended change

Link to public pricing and describe the main price model in page text.

Check ID: pricing-info@1
Supporting evidence: View stored observation View stored observation

019 REST batch endpoint Usability · Recommended · Legacy Failed 0 of 600

Finding

The contract has no batch path or array request operation.

Recommended change

Add a bounded batch endpoint for repeated write operations.

Check ID: batch-endpoints@1
Supporting evidence: View stored observation

020 Sandbox or test environment Usability · Recommended · Legacy Failed 0 of 200

Finding

The OpenAPI document does not declare a sandbox or test environment.

Recommended change

Add a separate sandbox server declaration or an explicit environment server variable.

Check ID: sandbox-environment@1
Supporting evidence: View stored observation

021 Scoped permissions Usability · Recommended · Legacy Failed 0 of 600

Finding

The discovered OAuth metadata does not declare supported scopes.

Recommended change

Publish scopes_supported in protected-resource or authorization-server metadata.

Check ID: scoped-permissions@1
Supporting evidence: View stored observation View stored observation

022 Universal Commerce Protocol Payments · Required · Legacy Failed 0 of 1000

Finding

The scan did not find a UCP business profile.

Recommended change

Publish a UCP business profile at /.well-known/ucp.

Check ID: ucp-support@1
Supporting evidence: View stored observation

023 Verified Wikidata and English Wikipedia presence Discovery · Recommended · Legacy Failed 0 of 100

Finding

The bounded Wikidata search found no entity with verified ownership of this domain.

Recommended change

Add the official website to the correct Wikidata entity, or link the correct Wikidata or Wikipedia page from structured data.

Check ID: wikipedia-presence@1
Supporting evidence: View stored observation

024 API catalog Access · Required · Legacy Warning 500 of 1000

Finding

The API catalog is usable, but its media type or HEAD Link relation is incomplete.

Recommended change

Serve Linkset JSON and include rel=api-catalog in the HEAD response.

Check ID: api-catalog-rfc9727@1
Supporting evidence: View stored observation View stored observation

025 API schema complexity Usability · Recommended · Legacy Warning 300 of 600

Finding

The contract is partly self-describing, but some operation metadata or parameter types are incomplete.

Recommended change

Give every operation a unique operationId, a description, typed parameters, and shallow schemas.

Check ID: api-schema-analysis@1
Supporting evidence: View stored observation

026 Accessible document structure Usability · Recommended · Legacy Warning 300 of 600

Finding

The document has some semantic structure, but its landmarks or heading order are incomplete.

Recommended change

Use one main region, a navigation landmark, one clear H1, and sequential heading levels.

Check ID: ax-document-structure@1
Supporting evidence: View stored observation

027 Agent-friendly 404 responses Usability · Recommended · Legacy Warning 300 of 600

Finding

The probe returns the correct missing status, but its body lacks concise discovery guidance.

Recommended change

Point missing-page clients to llms.txt, sitemap.xml, or the documentation index.

Check ID: agent-friendly-404@1
Supporting evidence: View stored observation

028 Linked content is publicly readable Accessibility · Recommended · Legacy Warning 150 of 300

Finding

7 of 8 sampled content page(s) were publicly readable.

Recommended change

Fix broken content links and publish non-empty pages without a login wall.

Check ID: docs-public-content@1
Supporting evidence: View stored observation

029 MCP App view CSP Usability · Recommended · Legacy Warning 200 of 400

Finding

The MCP App omits CSP metadata and therefore uses the restrictive default policy.

Recommended change

Declare the minimum external origins that the view must connect to, load, or frame.

Check ID: mcp-view-csp@1
Supporting evidence: View stored observation

030 MCP parameter schemas Usability · Recommended · Legacy Warning 100 of 200

Finding

Only some listed tools meet this requirement.

Recommended change

Give each tool a typed object inputSchema and keep required names in properties.

Check ID: mcp-param-schemas@1
Supporting evidence: View stored observation

031 MCP registry branding Discovery · Emerging · Legacy Warning 100 of 200

Finding

The MCP server card has only 2 of 3 branding signals.

Recommended change

Add a display title, useful description, and absolute HTTP icon URL.

Check ID: registry-branding@1
Supporting evidence: View stored observation

032 MCP resources exposed Usability · Recommended · Legacy Warning 150 of 300

Finding

Only some resource descriptors have a valid name, URI, and media type.

Recommended change

Add a valid name, absolute URI, and media type to every resource descriptor.

Check ID: mcp-resource-listing@1
Supporting evidence: View stored observation

033 MCP tool annotations Usability · Recommended · Legacy Warning 100 of 200

Finding

Only some listed tools meet this requirement.

Recommended change

Add boolean readOnlyHint and destructiveHint annotations to each tool.

Check ID: mcp-tool-annotations@1
Supporting evidence: View stored observation

034 Markdown frontmatter metadata Accessibility · Emerging · Legacy Warning 100 of 200

Finding

Only 2 of 4 served Markdown documents have complete frontmatter metadata.

Recommended change

Start every served Markdown document with title and description, canonical, or last-updated metadata.

Check ID: markdown-frontmatter@1
Supporting evidence: View stored observation View stored observation View stored observation View stored observation View stored observation

035 NLWeb streaming support Usability · Emerging · Legacy Warning 50 of 100

Finding

The route returned JSON server-sent events, but the NLWeb event lifecycle is incomplete.

Recommended change

Send one valid start event, zero or more result or error events, and one complete event.

Check ID: nlweb-streaming@1
Supporting evidence: View stored observation

036 Official MCP Registry listing Discovery · Recommended · Legacy Warning 50 of 100

Finding

The official MCP Registry has an active name match, but the scan could not verify domain or repository ownership.

Recommended change

Add the product domain or canonical public repository to the registry server metadata.

Check ID: mcp-registry-listed@1
Supporting evidence: View stored observation

037 Product and documentation MCP coverage Usability · Recommended · Legacy Warning 100 of 200

Finding

The MCP server exposes product operations, but no documentation-oriented tool or resource was classified.

Recommended change

Add a clearly named documentation, reference, guide, help, schema, or overview tool or resource.

Check ID: mcp-multi-surface-coverage@1
Supporting evidence: View stored observation

038 REST pagination pattern Usability · Recommended · Legacy Warning 300 of 600

Finding

Only 2 of 17 GET operations declare pagination signals.

Recommended change

Use one consistent cursor or page shape on list operations.

Check ID: pagination-shape@1
Supporting evidence: View stored observation

039 REST response schema coverage Usability · Recommended · Legacy Warning 300 of 600

Finding

Typed success response schemas cover only 65.4% of operations.

Recommended change

Define a typed success response schema for every operation.

Check ID: response-schema-coverage@1
Supporting evidence: View stored observation

040 REST typed error model Usability · Recommended · Legacy Warning 300 of 600

Finding

Only 35 of 54 declared error responses have typed schemas.

Recommended change

Use one typed error schema or application/problem+json for every 4xx and 5xx response.

Check ID: api-error-model@1
Supporting evidence: View stored observation

041 Trust anchor pages Access · Required · Legacy Warning 750 of 1000

Finding

The page links to only 3 trust-page category or categories.

Recommended change

Link to public about, contact, privacy, terms, and security pages.

Check ID: trust-anchors@1
Supporting evidence: View stored observation

042 WebMCP source declarations Usability · Emerging · Legacy Warning 200 of 400

Finding

The source refers to WebMCP, but declarations are incomplete or use only the deprecated navigator form.

Recommended change

Use complete toolname and tooldescription attributes or document.modelContext.registerTool().

Check ID: webmcp@1
Supporting evidence: View stored observation

043 auth.md walkthrough simulation Usability · Recommended · Legacy Warning 100 of 200

Finding

The walkthrough is usable in part, but its discovery chain or route map is incomplete.

Recommended change

Document every credential lifecycle stage and link it to valid protected-resource and authorization-server metadata.

Check ID: auth-md-walkthrough-simulation@1
Supporting evidence: View stored observation View stored observation View stored observation View stored observation

044 llms.txt links resolve Accessibility · Recommended · Legacy Warning 150 of 300

Finding

7 sampled link(s) resolved, but 1 did not.

Recommended change

Fix or remove each broken link. A 200 homepage fallback is also a broken target.

Check ID: llms-links-resolve@1
Supporting evidence: View stored observation

045 robots.txt agent-user policy Access · Required · Legacy Warning 500 of 1000

Finding

robots.txt explicitly addresses only 1 agent-user token(s).

Recommended change

State an explicit policy for user-directed agent fetchers.

Check ID: robots-agent-user-policy@1
Supporting evidence: View stored observation

046 Brand name discoverability Discovery · Required · Legacy Could not verify 0 of 0

Finding

The scan did not collect valid ranked web-search evidence for this query.

Recommended change

Configure the ranked search provider and run capture profile version 26 to collect new evidence.

Check ID: ranked-brand-discoverability@1
Supporting evidence: No linked observation was stored.

047 Category search visibility Discovery · Recommended · Legacy Could not verify 0 of 0

Finding

The scan did not collect valid ranked web-search evidence for this query.

Recommended change

Configure the ranked search provider and run capture profile version 26 to collect new evidence.

Check ID: ranked-category-visibility@1
Supporting evidence: No linked observation was stored.

048 Developer resource discoverability Discovery · Recommended · Legacy Could not verify 0 of 0

Finding

The scan did not collect valid ranked web-search evidence for this query.

Recommended change

Configure the ranked search provider and run capture profile version 26 to collect new evidence.

Check ID: ranked-developer-discoverability@1
Supporting evidence: No linked observation was stored.

049 GraphQL asynchronous job pattern Usability · Recommended · Legacy Could not verify 0 of 0

Finding

The scan did not collect usable GraphQL introspection evidence.

Recommended change

Run capture profile version 17 and permit bounded public introspection.

Check ID: graphql-async-job-pattern@1
Supporting evidence: No linked observation was stored.

050 GraphQL batch mutations Usability · Recommended · Legacy Could not verify 0 of 0

Finding

The scan did not collect usable GraphQL introspection evidence.

Recommended change

Run capture profile version 17 and permit bounded public introspection.

Check ID: graphql-batch-mutations@1
Supporting evidence: No linked observation was stored.

051 GraphQL pagination pattern Usability · Recommended · Legacy Could not verify 0 of 0

Finding

The scan did not collect usable GraphQL introspection evidence.

Recommended change

Run capture profile version 17 and permit bounded public introspection.

Check ID: graphql-pagination-pattern@1
Supporting evidence: No linked observation was stored.

052 GraphQL schema description coverage Usability · Recommended · Legacy Could not verify 0 of 0

Finding

The scan did not collect usable GraphQL introspection evidence.

Recommended change

Run capture profile version 17 and permit bounded public introspection.

Check ID: graphql-schema-completeness@1
Supporting evidence: No linked observation was stored.

053 GraphQL typed error model Usability · Recommended · Legacy Could not verify 0 of 0

Finding

The scan did not collect usable GraphQL introspection evidence.

Recommended change

Run capture profile version 17 and permit bounded public introspection.

Check ID: graphql-error-type-definition@1
Supporting evidence: No linked observation was stored.

054 GraphQL versioning and deprecation policy Usability · Recommended · Legacy Could not verify 0 of 0

Finding

The scan did not collect usable GraphQL introspection evidence.

Recommended change

Run capture profile version 17 and permit bounded public introspection.

Check ID: graphql-versioning-policy@1
Supporting evidence: No linked observation was stored.

055 Sitemap exists Access · Required · Legacy Could not verify 0 of 0

Finding

The scan could not collect the required discovery evidence.

Recommended change

Run capture profile version 3 and confirm that robots and network access permit this request.

Check ID: sitemap@1
Supporting evidence: View stored observation

056 Sitemap freshness metadata Access · Recommended · Legacy Could not verify 0 of 0

Finding

The scan could not collect the required discovery evidence.

Recommended change

Run capture profile version 3 and confirm that robots and network access permit this request.

Check ID: sitemap-lastmod@1
Supporting evidence: View stored observation

057 Skills.sh catalog-page quality Access · Emerging · Legacy Could not verify 0 of 0

Finding

The scan did not collect valid public skills.sh catalog evidence.

Recommended change

Run capture profile version 25 to collect skills.sh evidence.

Check ID: skills-sh-quality@1
Supporting evidence: No linked observation was stored.

058 Verified skills.sh listing Discovery · Emerging · Legacy Could not verify 0 of 0

Finding

The scan did not collect valid public skills.sh catalog evidence.

Recommended change

Run capture profile version 25 to collect skills.sh evidence.

Check ID: skills-sh-listed@1
Supporting evidence: No linked observation was stored.

059 A2A Agent Card Access · Recommended · Legacy Passed 600 of 600

Finding

A valid A2A Agent Card is available.

Check ID: a2a-agent-card@1
Supporting evidence: View stored observation

060 AI Catalog discovery Discovery · Emerging · Legacy Passed 200 of 200

Finding

A structured catalog is published at /.well-known/ai-catalog.json.

Check ID: ai-catalog-published@1
Supporting evidence: View stored observation

061 Accessibility-tree instruction safety Usability · Recommended · Legacy Passed 600 of 600

Finding

No configured instruction-risk pattern was found in the evaluated hidden accessibility text.

Check ID: ax-tree-injection-safe@1
Supporting evidence: View stored observation

062 Accessible names on controls Usability · Recommended · Legacy Passed 600 of 600

Finding

All 91 detected controls have a computed source name.

Check ID: ax-accessible-names@1
Supporting evidence: View stored observation

063 Agent Skills index conformance Discovery · Emerging · Legacy Passed 300 of 300

Finding

All 2 skill entries have the v0.2.0 type, URL, and SHA-256 digest fields.

Check ID: agent-skills-index-v2@1
Supporting evidence: View stored observation

064 Agent crawler reachability Access · Recommended · Legacy Passed 600 of 600

Finding

robots policy permits all 3 evaluated retrieval crawlers at the root path.

Check ID: agent-crawler-reachability@1
Supporting evidence: View stored observation

065 Agent discovery file Discovery · Required · Legacy Passed 500 of 500

Finding

The Agent Skills index describes 2 skill(s).

Check ID: agent-discovery-file@1
Supporting evidence: View stored observation

066 Agent onboarding friction Usability · Recommended · Legacy Passed 200 of 200

Finding

The scan found public entry links and documentation plus 4 of five bounded onboarding signals.

Check ID: onboarding-friction@1
Supporting evidence: View stored observation View stored observation View stored observation View stored observation View stored observation

067 Agentic resource catalog Discovery · Emerging · Legacy Passed 300 of 300

Finding

A structured agentic resource catalog is available at /.well-known/ard.json.

Check ID: ard-catalog@1
Supporting evidence: View stored observation

068 Content without JavaScript Access · Required · Legacy Passed 1000 of 1000

Finding

The source HTML has 1944 visible text characters.

Check ID: content-no-js@1
Supporting evidence: View stored observation

069 Developer portal Access · Recommended · Legacy Passed 600 of 600

Finding

The page links to 1 developer target(s).

Check ID: developer-portal@1
Supporting evidence: View stored observation

070 Form control labeling Usability · Recommended · Legacy Passed 600 of 600

Finding

All 2 form fields have an explicit computed label.

Check ID: ax-form-labeling@1
Supporting evidence: View stored observation

071 Function calling compatibility Usability · Recommended · Legacy Passed 600 of 600

Finding

The operations have unique names, descriptions, typed inputs, and bounded schema depth.

Check ID: function-calling-compat@1
Supporting evidence: View stored observation

072 HTTP Link header discovery Access · Required · Legacy Passed 1000 of 1000

Finding

The final response has 9 parsed Link header value(s) with relations.

Check ID: link-headers-discovery@1
Supporting evidence: View stored observation

073 JSON-LD entity linking Access · Recommended · Legacy Passed 600 of 600

Finding

JSON-LD has 3 unique sameAs link(s).

Check ID: json-ld-entity-linking@1
Supporting evidence: View stored observation

074 JSON-LD structured data Access · Required · Legacy Passed 1000 of 1000

Finding

The page has 1 valid JSON-LD block(s).

Check ID: json-ld@1
Supporting evidence: View stored observation

075 MCP App view reachable Usability · Recommended · Legacy Passed 400 of 400

Finding

The linked MCP App view was reachable through resources/read and returned valid UI content.

Check ID: mcp-view-domain@1
Supporting evidence: View stored observation

076 MCP Apps UI quality Usability · Recommended · Legacy Passed 400 of 400

Finding

A sampled MCP App view has a complete document and at least five UI quality signals.

Check ID: mcp-apps-ui-quality@1
Supporting evidence: View stored observation

077 MCP Apps support Usability · Recommended · Legacy Passed 400 of 400

Finding

A tool uses the current MCP Apps resource link and its UI resource is valid.

Check ID: mcp-app-registry@1
Supporting evidence: View stored observation

078 MCP error handling Usability · Recommended · Legacy Passed 200 of 200

Finding

The server returns a structured error for a guaranteed unlisted tool name.

Check ID: mcp-error-handling@1
Supporting evidence: View stored observation

079 MCP resource quality Usability · Recommended · Legacy Passed 300 of 300

Finding

Every sampled resource returns non-empty content with a URI and media type.

Check ID: mcp-resource-quality@1
Supporting evidence: View stored observation

080 MCP server card Usability · Recommended · Legacy Passed 300 of 300

Finding

The server card has complete identity, endpoint, and 13 tool preview(s).

Check ID: mcp-server-card@1
Supporting evidence: View stored observation

081 MCP server identity Usability · Recommended · Legacy Passed 100 of 100

Finding

The server returns a supported protocol version, name, version, and instructions.

Check ID: mcp-server-identity@1
Supporting evidence: View stored observation

082 MCP server or manifest Usability · Recommended · Legacy Passed 500 of 500

Finding

The site exposes a static MCP endpoint or manifest signal.

Check ID: mcp-server@1
Supporting evidence: View stored observation View stored observation View stored observation

083 MCP tool descriptions Usability · Recommended · Legacy Passed 300 of 300

Finding

Each listed tool has a useful description.

Check ID: mcp-tool-descriptions@1
Supporting evidence: View stored observation

084 MCP tool listing Usability · Recommended · Legacy Passed 300 of 300

Finding

The server lists at least three tools in a valid response.

Check ID: mcp-tool-listing@1
Supporting evidence: View stored observation

085 MCP tool naming Usability · Recommended · Legacy Passed 200 of 200

Finding

All inspected tool names are descriptive and use one consistent convention.

Check ID: mcp-tool-naming@1
Supporting evidence: View stored observation

086 MCP well-known discovery Accessibility · Recommended · Legacy Passed 400 of 400

Finding

A bounded well-known MCP endpoint, server card, or manifest signal is available.

Check ID: mcp-well-known-discovery@1
Supporting evidence: View stored observation View stored observation View stored observation

087 Markdown URL fallback Access · Emerging · Legacy Passed 300 of 300

Finding

/index.md is a valid Markdown representation.

Check ID: markdown-url-fallback@1
Supporting evidence: View stored observation

088 Markdown agent docs Access · Emerging · Legacy Passed 300 of 300

Finding

The canonical root returns valid Markdown when Accept prefers text/markdown.

Check ID: markdown-negotiation@1
Supporting evidence: View stored observation

089 Markdown code fence validity Accessibility · Emerging · Legacy Passed 200 of 200

Finding

All 6 served Markdown document(s) have balanced CommonMark fences.

Check ID: code-fence-validity@1
Supporting evidence: View stored observation View stored observation View stored observation View stored observation View stored observation View stored observation View stored observation

090 Markdown negotiation cache variation Access · Recommended · Legacy Passed 600 of 600

Finding

The negotiated Markdown response varies its cache key on Accept.

Check ID: markdown-negotiation-vary@1
Supporting evidence: View stored observation

091 Metadata completeness Access · Required · Legacy Passed 1000 of 1000

Finding

All 9 metadata fields are present.

Check ID: metadata-completeness@1
Supporting evidence: View stored observation

092 Modular llms.txt Accessibility · Emerging · Legacy Passed 200 of 200

Finding

A structured scoped llms.txt file is available at /docs/llms.txt.

Check ID: modular-llms-txt@1
Supporting evidence: View stored observation

093 NLWeb /ask endpoint Usability · Emerging · Legacy Passed 100 of 100

Finding

POST /ask returned a valid NLWeb protocol response for the fixed public list query.

Check ID: nlweb-ask@1
Supporting evidence: View stored observation

094 NLWeb Schema Map directive Accessibility · Emerging · Legacy Passed 200 of 200

Finding

robots.txt publishes 1 structurally valid Schema Map URL(s).

Check ID: nlweb-schema-feeds@1
Supporting evidence: View stored observation

095 Native interactive controls Usability · Recommended · Legacy Passed 600 of 600

Finding

All 91 detected controls use native HTML semantics.

Check ID: ax-native-controls@1
Supporting evidence: View stored observation

096 Not blocked by bot detection Access · Required · Legacy Passed 1000 of 1000

Finding

The scanner received the target content without a bot block.

Check ID: bot-detection@1
Supporting evidence: View stored observation

097 OpenAPI document is published Access · Required · Legacy Passed 1000 of 1000

Finding

A valid OpenAPI document is available.

Check ID: openapi-spec@1
Supporting evidence: View stored observation

098 Organization schema completeness Access · Recommended · Legacy Passed 600 of 600

Finding

The Organization entity has all 6 fields.

Check ID: org-schema-completeness@1
Supporting evidence: View stored observation

099 Page token budget Access · Recommended · Legacy Passed 600 of 600

Finding

The estimated visible-text size is 486 tokens.

Check ID: page-token-budget@1
Supporting evidence: View stored observation

100 Pricing Markdown exists Access · Emerging · Legacy Passed 300 of 300

Finding

A readable Markdown pricing file is available at /pricing.md.

Check ID: pricing-md@1
Supporting evidence: View stored observation

101 Public API documentation is linked Access · Required · Legacy Passed 1000 of 1000

Finding

The page links to 4 API or documentation target(s).

Check ID: public-api-docs@1
Supporting evidence: View stored observation

102 Public API endpoint responds Usability · Required · Legacy Passed 700 of 700

Finding

A documented GET operation returned a successful machine-readable response.

Check ID: public-api-reachable@1
Supporting evidence: View stored observation

103 REST asynchronous job pattern Usability · Recommended · Legacy Passed 600 of 600

Finding

All 1 declared 202 responses provide a polling location or job status field.

Check ID: async-job-pattern@1
Supporting evidence: View stored observation

104 REST versioning and deprecation policy Usability · Recommended · Legacy Passed 600 of 600

Finding

The contract declares API versioning and a machine-readable deprecation signal.

Check ID: api-versioning-policy@1
Supporting evidence: View stored observation

105 Redirect hygiene Access · Recommended · Legacy Passed 600 of 600

Finding

The target uses 0 same-origin redirect(s) with no downgrade or redirect error.

Check ID: redirect-hygiene@1
Supporting evidence: View stored observation

106 Resource catalog entry quality Discovery · Emerging · Legacy Passed 300 of 300

Finding

All 5 catalog entries have a domain-bound urn:air identifier, display name, media type, and exactly one target.

Check ID: ard-entries-valid@1
Supporting evidence: View stored observation View stored observation

107 Resource catalog trust manifests Discovery · Emerging · Legacy Passed 200 of 200

Finding

All 5 trust manifests have a structurally valid identity binding.

Check ID: ard-trust-manifest@1
Supporting evidence: View stored observation View stored observation

108 Schema type breadth Access · Recommended · Legacy Passed 600 of 600

Finding

The page declares 7 JSON-LD types.

Check ID: schema-type-breadth@1
Supporting evidence: View stored observation

109 Web Bot Auth key directory Usability · Emerging · Legacy Passed 300 of 300

Finding

The directory has 1 structurally valid Ed25519 key(s) with unique key IDs.

Check ID: web-bot-auth-directory@1
Supporting evidence: View stored observation

110 auth.md exists Usability · Required · Legacy Passed 1000 of 1000

Finding

A non-placeholder Markdown walkthrough is available at /auth.md.

Check ID: auth-md-exists@1
Supporting evidence: View stored observation

111 auth.md structure Usability · Recommended · Legacy Passed 600 of 600

Finding

auth.md covers 7 walkthrough stages and 4 machine-readable anchor terms.

Check ID: auth-md-structure@1
Supporting evidence: View stored observation

112 llms.txt exists Access · Required · Legacy Passed 1000 of 1000

Finding

A non-empty /llms.txt file is available.

Check ID: llms-txt-exists@1
Supporting evidence: View stored observation

113 llms.txt formatting Access · Recommended · Legacy Passed 600 of 600

Finding

llms.txt has one leading H1, section headings, and Markdown links.

Check ID: llms-txt-formatting@1
Supporting evidence: View stored observation

114 robots.txt AI crawler policy Discovery · Required · Legacy Passed 1000 of 1000

Finding

robots.txt has explicit policies for 4 known AI crawler tokens.

Check ID: robots-ai-policy-quality@1
Supporting evidence: View stored observation

115 ACP checkout protocol Payments · Required · Legacy Not applicable 0 of 0

Finding

No commerce or payment protocol signal was found.

Check ID: acp-support@1
Supporting evidence: No linked observation was stored.

116 ACP delegated payment Payments · Recommended · Legacy Not applicable 0 of 0

Finding

No commerce or payment protocol signal was found.

Check ID: acp-delegate-payment@1
Supporting evidence: No linked observation was stored.

117 AP2 mandate capability Payments · Recommended · Legacy Not applicable 0 of 0

Finding

No commerce or payment protocol signal was found.

Check ID: ap2-support@1
Supporting evidence: No linked observation was stored.

118 Agent auth WWW-Authenticate hint Usability · Recommended · Legacy Not applicable 0 of 0

Finding

The primary public request did not return 401, so an authentication challenge hint was not required.

Check ID: agent-auth-www-authenticate@1
Supporting evidence: No linked observation was stored.

119 Agent auth endpoints respond Usability · Emerging · Legacy Not applicable 0 of 0

Finding

No identity, claim, or events endpoint was advertised.

Check ID: agent-auth-endpoints-reachable@1
Supporting evidence: No linked observation was stored.

120 MCP OAuth challenge alignment Usability · Recommended · Legacy Not applicable 0 of 0

Finding

The MCP endpoint appears public and no OAuth metadata was published. A static HEAD probe cannot classify it as a docs or product server.

Check ID: mcp-auth-mechanism@1
Supporting evidence: No linked observation was stored.

121 MCP PKCE S256 support Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No OAuth authorization server was published for the public MCP signal.

Check ID: mcp-pkce-s256@1
Supporting evidence: No linked observation was stored.

122 MPP payment protocol Payments · Required · Legacy Not applicable 0 of 0

Finding

No commerce or payment protocol signal was found.

Check ID: mpp-support@1
Supporting evidence: No linked observation was stored.

123 Rate limit response headers Usability · Recommended · Legacy Not applicable 0 of 0

Finding

The primary public response is not rate limited and exposes no API rate-limit contract.

Check ID: rate-limit-headers@1
Supporting evidence: No linked observation was stored.

124 x402 payment protocol Payments · Required · Legacy Not applicable 0 of 0

Finding

No commerce or payment protocol signal was found.

Check ID: x402-support@1
Supporting evidence: No linked observation was stored.

Scan evidence and limitsPages read, HTTP records, observations, and scan identity

Scan scope and limits

This report uses an earlier score model. Rescan for site scope and coverage.

How the score works

What the scanner tested

Open a rule to inspect its HTTP and extracted evidence.

1 Robots access Can a standards-aware agent access this site? web.robots@4 · Robots · attempt 1 Allowed

Duration: 29 ms
Fetches: 1
Artifacts: 1
Observations: 2

Observed facts

robots.analysis

100.0% confidence

Allowed agent user count: 3
Allowed retrieval count: 3
Availability: available
Explicit agent user count: 1
Explicit ai crawler count: 4
Group count: 10
Known policy count: 5
Same origin schema map url count: 1

robots.policy

100.0% confidence

Outcome: allow
Availability: available
Matched Directive: allow
Matched Pattern: /

HTTP transactions

GET 200 Success

agent_readiness_req · Protocol not exposed

https://ora.ai/robots.txt

Content type: text/plain
Transferred: 567 B
Decoded: 567 B
Duration: 436 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: text/html, application/xhtml+xml;q=0.9, application/json;q=0.5, text/plain;q=0.4, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (16)

accept-ranges: bytes
access-control-allow-origin: [value stored]
age: 17039
cache-control: public, max-age=3600, s-maxage=3600
content-disposition: [value stored]
content-length: 567
content-type: text/plain
date: Wed, 02 Sep 2026 15:29:59 GMT
etag: "d53f7394d6b6df7ffbf1d0d311d862e9"
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

2 Primary HTTP response What does a direct HTTP client receive? web.primary_http@2 · Static capture · attempt 1 Succeeded

Duration: 27 ms
Fetches: 1
Artifacts: 1
Observations: 1

Observed facts

transport.fetch

100.0% confidence

Available: Yes
Outcome: success
Https: Yes
Status: 200
Content type: text/html
Body bytes: 181397
Final url: https://ora.ai/

HTTP transactions

GET 200 Success

agent_readiness_req · Protocol not exposed

https://ora.ai/

Content type: text/html
Transferred: 21.9 KB
Decoded: 177.1 KB
Duration: 786 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: text/html, application/xhtml+xml;q=0.9, application/json;q=0.5, text/plain;q=0.4, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (18)

age: 0
cache-control: public, max-age=0, must-revalidate
content-encoding: gzip
content-type: text/html; charset=utf-8
date: Wed, 02 Sep 2026 15:30:00 GMT
etag: W/"olgdngz03x3vxp"
link: [value stored]
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-matched-path: [value stored]
x-nextjs-prerender: [value stored]
x-nextjs-stale-time: [value stored]
x-powered-by: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

3 Web.discovery files What evidence did this capture rule record? web.discovery_files@12 · Static capture · attempt 1 Succeeded

Duration: 22 ms
Fetches: 28
Artifacts: 26
Observations: 27

Observed facts

discovery.a2a_agent_card

100.0% confidence

Body bytes: 1460
Body sha256: 07ec401ea0e5b433ae24f8bcb1e9897a913fd0dc3e8650be573bf1c02a93cedc
Content type: application/json
Endpoint present: Yes
Final url: https://ora.ai/.well-known/agent-card.json
Format valid: Yes
Id: a2a_agent_card
Interfaces count: 0

discovery.acp_checkout_options

100.0% confidence

Allow header count: 0
Allow post: No
Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Final url: https://ora.ai/checkout_sessions
Format valid: No
Id: acp_checkout_options
Method: OPTIONS

discovery.acp_delegate_payment_options

100.0% confidence

Allow header count: 0
Allow post: No
Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Final url: https://ora.ai/agentic_commerce/delegate_payment
Format valid: No
Id: acp_delegate_payment_options
Method: OPTIONS

discovery.agent_friendly_404

100.0% confidence

Body bytes: 38651
Body chars: 38648
Body concise: No
Body sha256: 03e88c891945f47139233defaeb96d581651da0bcff3c97e976a68e390859e75
Content type: text/html
Final url: https://ora.ai/.well-known/agent-readiness-probe/not-found-7b91e8d4
Format valid: Yes
Guidance present: Yes

discovery.agent_instructions

100.0% confidence

Agent instruction action signal count: 0
Agent instruction heading present: No
Agent instruction section chars: 0
Agent instruction valid: No
Body bytes: 38651
Body sha256: 03e88c891945f47139233defaeb96d581651da0bcff3c97e976a68e390859e75
Canonical link present: No
Code fence delimiter count: 0

discovery.agent_mode_view

100.0% confidence

Auth signal: Yes
Body bytes: 56267
Body sha256: cebf2b0f39db779c20b1b585acd8055c881ac0a7788bad435812c7557712dfbb
Capability signal: Yes
Content type: text/html
Endpoint signal: Yes
Final url: https://ora.ai/
Format valid: No

discovery.agent_skills_index

100.0% confidence

Body bytes: 1283
Body sha256: 51f98159736407a69e161c7499d7816abb180b68b1d8db7b0c00a25227e8ddf8
Content type: application/json
Described skill count: 2
Digest skill count: 2
Duplicate name count: 0
Final url: https://ora.ai/.well-known/agent-skills/index.json
Format valid: Yes

discovery.ai_catalog

100.0% confidence

Attested trust manifest count: 0
Body bytes: 2738
Body sha256: a6add6be48136b751fe1ba1bd0a32b3c6ac3427fc6c93d0d0d6b729e3b2aae1b
Content type: application/json
Display name entry count: 5
Entry count: 5
Exclusive target entry count: 5
Final url: https://ora.ai/.well-known/ai-catalog.json

discovery.api_catalog

100.0% confidence

Body bytes: 481
Body sha256: cc38e5d6205207ec8c0983c2336dfad2e615544df409f36781c4fcc71319b292
Content type: application/linkset+json
Content type valid: Yes
Final url: https://ora.ai/.well-known/api-catalog
Format valid: Yes
Id: api_catalog
Json valid: Yes

discovery.api_catalog_head

100.0% confidence

Api catalog relation present: No
Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Content type: application/linkset+json
Final url: https://ora.ai/.well-known/api-catalog
Format valid: No
Id: api_catalog_head
Link header count: 1

discovery.ard_catalog

100.0% confidence

Attested trust manifest count: 0
Body bytes: 2738
Body sha256: a6add6be48136b751fe1ba1bd0a32b3c6ac3427fc6c93d0d0d6b729e3b2aae1b
Content type: application/json
Display name entry count: 5
Entry count: 5
Exclusive target entry count: 5
Final url: https://ora.ai/.well-known/ard.json

discovery.auth_md

100.0% confidence

Absolute url count: 2
Agent instruction action signal count: 0
Agent instruction heading present: No
Agent instruction section chars: 0
Agent instruction valid: No
Body bytes: 3440
Body sha256: 1ab99526d8cac2db772096850018b6865f9517770255db32a55514c8c4de0ee8
Canonical link present: No

discovery.llms_txt

100.0% confidence

Agent instruction action signal count: 0
Agent instruction heading present: No
Agent instruction section chars: 0
Agent instruction valid: No
Body bytes: 7881
Body sha256: e8454386b2fa5efd19f5a4a771b4b0d98c70a692bde3b979e848e967b27b0f8f
Canonical link present: No
Code fence delimiter count: 0

discovery.markdown_negotiation

100.0% confidence

Agent instruction action signal count: 0
Agent instruction heading present: Yes
Agent instruction section chars: 350
Agent instruction valid: No
Body bytes: 1695
Body sha256: 62c7b7f66580f95af90c29b65c66d5adae7aed492663f4c54f415fcd85a77b83
Canonical link present: No
Code fence delimiter count: 4

discovery.markdown_url_fallback

100.0% confidence

Agent instruction action signal count: 0
Agent instruction heading present: Yes
Agent instruction section chars: 350
Agent instruction valid: No
Body bytes: 1695
Body sha256: 62c7b7f66580f95af90c29b65c66d5adae7aed492663f4c54f415fcd85a77b83
Canonical link present: No
Code fence delimiter count: 4

discovery.mcp_endpoint

100.0% confidence

Allow header present: No
Bearer challenge present: No
Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Challenge count: 0
Content type: text/html
Endpoint signal: No
Final url: https://ora.ai/.well-known/mcp

discovery.mcp_manifest

100.0% confidence

Body bytes: 38651
Body sha256: 03e88c891945f47139233defaeb96d581651da0bcff3c97e976a68e390859e75
Content type: text/html
Direct endpoint present: No
Final url: https://ora.ai/.well-known/mcp/manifest.json
Format valid: No
Id: mcp_manifest
Json valid: No

discovery.mcp_server_card

100.0% confidence

Body bytes: 5056
Body sha256: abc2d1d962c8c210b2ec560a452f7dd776a42073e7af91de0d61881cffc0b5fa
Content type: application/json
Description present: Yes
Display name present: No
Endpoint count: 1
Final url: https://ora.ai/.well-known/mcp/server-card.json
Format valid: Yes

discovery.modular_llms_txt

100.0% confidence

Agent instruction action signal count: 0
Agent instruction heading present: No
Agent instruction section chars: 0
Agent instruction valid: No
Body bytes: 679
Body sha256: bcdce5c3684cba5deba60362f97651143f3dd5e40e172cdf3103357bff2aa5f7
Canonical link present: No
Code fence delimiter count: 0

discovery.oauth_authorization_server

100.0% confidence

Body bytes: 38651
Body sha256: 03e88c891945f47139233defaeb96d581651da0bcff3c97e976a68e390859e75
Content type: text/html
Final url: https://ora.ai/.well-known/oauth-authorization-server
Format valid: No
Id: oauth_authorization_server
Method: GET
Outcome: access_denied

discovery.oauth_protected_resource

100.0% confidence

Body bytes: 38651
Body sha256: 03e88c891945f47139233defaeb96d581651da0bcff3c97e976a68e390859e75
Content type: text/html
Final url: https://ora.ai/.well-known/oauth-protected-resource
Format valid: No
Id: oauth_protected_resource
Method: GET
Outcome: access_denied

discovery.openapi

100.0% confidence

Body bytes: 186232
Body sha256: 2942e55ad7de3aeb123446aebb59880bbc1f7122ef2f11ea122623d2c7c7799d
Content type: application/json
Document valid: Yes
Final url: https://ora.ai/openapi.json
Format: json
Format valid: Yes
Id: openapi

discovery.pricing_markdown

100.0% confidence

Agent instruction action signal count: 0
Agent instruction heading present: No
Agent instruction section chars: 0
Agent instruction valid: No
Body bytes: 743
Body sha256: f7ae81a69a2243a76437c8e645c35208fbf8a9a936356b4db8ff3f37c389941c
Canonical link present: No
Code fence delimiter count: 0

discovery.sitemap

100.0% confidence

Body bytes: 535115
Body sha256: 39a66f9ba2adb4dc51f01f1e9f7c29eaaf8e241e8d48b7d232894d63cd0a853c
Content type: application/xml
Final url: https://ora.ai/sitemap.xml
Format valid: Yes
Freshest lastmod: 2026-08-20
Id: sitemap
Invalid lastmod count: 0

discovery.ucp

100.0% confidence

Body bytes: 38651
Body sha256: 03e88c891945f47139233defaeb96d581651da0bcff3c97e976a68e390859e75
Content type: text/html
Final url: https://ora.ai/.well-known/ucp
Format valid: No
Id: ucp
Method: GET
Outcome: access_denied

discovery.web_bot_auth_directory

100.0% confidence

Body bytes: 372
Body sha256: 1fa648e24ef6330902f07816ee8838a81ae57380b447143f659bd57c55565522
Content type: application/http-message-signatures-directory+json
Final url: https://ora.ai/.well-known/http-message-signatures-directory
Format valid: Yes
Id: web_bot_auth_directory
Json valid: Yes
Key count: 1

discovery.x402

100.0% confidence

Body bytes: 38651
Body sha256: 03e88c891945f47139233defaeb96d581651da0bcff3c97e976a68e390859e75
Content type: text/html
Final url: https://ora.ai/discovery/resources
Format valid: No
Id: x402_discovery
Method: GET
Outcome: access_denied

HTTP transactions

GET 200 Transport failure

agent_readiness_req · Protocol not exposed

https://ora.ai/sitemap.xml

Content type: application/xml
Transferred: 67.0 KB
Decoded: 522.6 KB
Duration: 126 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: not exposed Digest: not exposed

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: application/xml, text/xml;q=0.9, text/plain;q=0.2, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (16)

access-control-allow-origin: [value stored]
age: 17040
cache-control: public, max-age=0, must-revalidate
content-disposition: [value stored]
content-encoding: gzip
content-type: application/xml
date: Wed, 02 Sep 2026 15:30:01 GMT
etag: W/"390a9504a7b5ce33b9cf5ec21c892d84"
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

GET 200 Success

agent_readiness_req · Protocol not exposed

https://ora.ai/llms.txt

Content type: text/plain
Transferred: 3.3 KB
Decoded: 7.7 KB
Duration: 61 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: text/plain, text/markdown;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (16)

access-control-allow-origin: [value stored]
age: 1340
cache-control: public, max-age=0, must-revalidate
content-disposition: [value stored]
content-encoding: gzip
content-type: text/plain; charset=utf-8
date: Wed, 02 Sep 2026 15:30:01 GMT
etag: W/"b8d48ca1d0d7f39d5e96725870259bda"
last-modified: Wed, 02 Sep 2026 15:07:41 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

GET 200 Unsupported media type

agent_readiness_req · Protocol not exposed

https://ora.ai/pricing.md

Content type: text/markdown
Transferred: 743 B
Decoded: 743 B
Duration: 54 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: text/markdown, text/plain;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (16)

accept-ranges: bytes
access-control-allow-origin: [value stored]
age: 1339
cache-control: public, max-age=0, must-revalidate
content-disposition: [value stored]
content-length: 743
content-type: text/markdown; charset=utf-8
date: Wed, 02 Sep 2026 15:30:01 GMT
etag: "f4d9f1fbaf32727c350f852804f60eb4"
last-modified: Wed, 02 Sep 2026 15:07:41 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

GET 200 Success

agent_readiness_req · Protocol not exposed

https://ora.ai/.well-known/agent-card.json

Content type: application/json
Transferred: 629 B
Decoded: 1.4 KB
Duration: 48 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (16)

access-control-allow-origin: [value stored]
age: 14194
cache-control: public, max-age=0, must-revalidate
content-disposition: [value stored]
content-encoding: gzip
content-type: application/json; charset=utf-8
date: Wed, 02 Sep 2026 15:30:01 GMT
etag: W/"b6ff1ae5cf804e661790b47b1a09ea5e"
last-modified: Wed, 02 Sep 2026 11:33:27 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

GET 200 Success

agent_readiness_req · Protocol not exposed

https://ora.ai/.well-known/api-catalog

Content type: application/linkset+json
Transferred: 481 B
Decoded: 481 B
Duration: 59 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: application/linkset+json, application/json;q=0.8, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (16)

accept-ranges: bytes
access-control-allow-origin: [value stored]
age: 1339
cache-control: public, max-age=0, must-revalidate
content-disposition: [value stored]
content-length: 481
content-type: application/linkset+json;profile="https://www.rfc-editor.org/info/rfc9727"
date: Wed, 02 Sep 2026 15:30:01 GMT
etag: "c92898ff6185272b74dc1359d2929908"
last-modified: Wed, 02 Sep 2026 15:07:41 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

HEAD 200 Success

agent_readiness_req · Protocol not exposed

https://ora.ai/.well-known/api-catalog

Content type: application/linkset+json
Transferred: 0 B
Decoded: 0 B
Duration: 54 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: */*
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (16)

accept-ranges: bytes
access-control-allow-origin: [value stored]
age: 1339
cache-control: public, max-age=0, must-revalidate
content-disposition: [value stored]
content-length: 481
content-type: application/linkset+json;profile="https://www.rfc-editor.org/info/rfc9727"
date: Wed, 02 Sep 2026 15:30:01 GMT
etag: "c92898ff6185272b74dc1359d2929908"
last-modified: Wed, 02 Sep 2026 15:07:41 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

GET 404 Access denied

agent_readiness_req · Protocol not exposed

https://ora.ai/.well-known/oauth-protected-resource

Content type: text/html
Transferred: 7.0 KB
Decoded: 37.7 KB
Duration: 56 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (17)

access-control-allow-origin: [value stored]
age: 15840
cache-control: public, max-age=0, must-revalidate
content-disposition: [value stored]
content-encoding: gzip
content-type: text/html; charset=utf-8
date: Wed, 02 Sep 2026 15:30:01 GMT
etag: W/"62843be802c28dc736a66b7f431f3c9d"
last-modified: Wed, 02 Sep 2026 11:06:01 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
x-matched-path: [value stored]
x-next-error-status: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

GET 404 Access denied

agent_readiness_req · Protocol not exposed

https://ora.ai/.well-known/ucp

Content type: text/html
Transferred: 7.0 KB
Decoded: 37.7 KB
Duration: 110 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (17)

access-control-allow-origin: [value stored]
age: 15840
cache-control: public, max-age=0, must-revalidate
content-disposition: [value stored]
content-encoding: gzip
content-type: text/html; charset=utf-8
date: Wed, 02 Sep 2026 15:30:01 GMT
etag: W/"62843be802c28dc736a66b7f431f3c9d"
last-modified: Wed, 02 Sep 2026 11:06:01 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
x-matched-path: [value stored]
x-next-error-status: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

GET 200 Success

agent_readiness_req · Protocol not exposed

https://ora.ai/openapi.json

Content type: application/json
Transferred: 34.1 KB
Decoded: 181.9 KB
Duration: 225 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: application/json, application/yaml;q=0.9, application/x-yaml;q=0.9, text/yaml;q=0.8, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (13)

age: 0
cache-control: public, max-age=0, must-revalidate
content-encoding: gzip
content-type: application/json
date: Wed, 02 Sep 2026 15:30:01 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

GET 200 Unsupported media type

agent_readiness_req · Protocol not exposed

https://ora.ai/auth.md

Content type: text/markdown
Transferred: 1.6 KB
Decoded: 3.4 KB
Duration: 58 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: text/markdown, text/plain;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (16)

access-control-allow-origin: [value stored]
age: 1339
cache-control: public, max-age=0, must-revalidate
content-disposition: [value stored]
content-encoding: gzip
content-type: text/markdown; charset=utf-8
date: Wed, 02 Sep 2026 15:30:01 GMT
etag: W/"37abfab29836f3bc7fb9ea3869d3e825"
last-modified: Wed, 02 Sep 2026 15:07:42 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

GET 404 Access denied

agent_readiness_req · Protocol not exposed

https://ora.ai/.well-known/oauth-authorization-server

Content type: text/html
Transferred: 7.0 KB
Decoded: 37.7 KB
Duration: 63 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (17)

access-control-allow-origin: [value stored]
age: 15840
cache-control: public, max-age=0, must-revalidate
content-disposition: [value stored]
content-encoding: gzip
content-type: text/html; charset=utf-8
date: Wed, 02 Sep 2026 15:30:01 GMT
etag: W/"62843be802c28dc736a66b7f431f3c9d"
last-modified: Wed, 02 Sep 2026 11:06:01 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
x-matched-path: [value stored]
x-next-error-status: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

GET 200 Unsupported media type

agent_readiness_req · Protocol not exposed

https://ora.ai/index.md

Content type: text/markdown
Transferred: 861 B
Decoded: 1.7 KB
Duration: 45 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: text/markdown, text/plain;q=0.8, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (16)

access-control-allow-origin: [value stored]
age: 1339
cache-control: public, max-age=0, must-revalidate
content-disposition: [value stored]
content-encoding: gzip
content-type: text/markdown; charset=utf-8
date: Wed, 02 Sep 2026 15:30:01 GMT
etag: W/"74f47a4926ebca759ca3652e4f9d0e31"
last-modified: Wed, 02 Sep 2026 15:07:42 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

GET 200 Unsupported media type

agent_readiness_req · Protocol not exposed

https://ora.ai/

Content type: text/markdown
Transferred: 861 B
Decoded: 1.7 KB
Duration: 46 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: text/markdown, text/plain;q=0.8, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (17)

access-control-allow-origin: [value stored]
age: 1339
cache-control: public, max-age=0, must-revalidate
content-disposition: [value stored]
content-encoding: gzip
content-type: text/markdown; charset=utf-8
date: Wed, 02 Sep 2026 15:30:02 GMT
etag: W/"74f47a4926ebca759ca3652e4f9d0e31"
last-modified: Wed, 02 Sep 2026 15:07:42 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
vary: Accept
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

GET 404 Access denied

agent_readiness_req · Protocol not exposed

https://ora.ai/.well-known/agent-readiness-probe/not-found-7b91e8d4

Content type: text/html
Transferred: 7.0 KB
Decoded: 37.7 KB
Duration: 62 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: application/problem+json, application/json;q=0.9, text/markdown;q=0.8, text/plain;q=0.5, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (17)

access-control-allow-origin: [value stored]
age: 15840
cache-control: public, max-age=0, must-revalidate
content-disposition: [value stored]
content-encoding: gzip
content-type: text/html; charset=utf-8
date: Wed, 02 Sep 2026 15:30:02 GMT
etag: W/"62843be802c28dc736a66b7f431f3c9d"
last-modified: Wed, 02 Sep 2026 11:06:01 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
x-matched-path: [value stored]
x-next-error-status: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

GET 200 Success

agent_readiness_req · Protocol not exposed

https://ora.ai/.well-known/agent-skills/index.json

Content type: application/json
Transferred: 695 B
Decoded: 1.3 KB
Duration: 45 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (16)

access-control-allow-origin: [value stored]
age: 1339
cache-control: public, max-age=0, must-revalidate
content-disposition: [value stored]
content-encoding: gzip
content-type: application/json; charset=utf-8
date: Wed, 02 Sep 2026 15:30:02 GMT
etag: W/"14724d7c1a7a634b9b99e020a9d1c197"
last-modified: Wed, 02 Sep 2026 15:07:43 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

GET 200 Success

agent_readiness_req · Protocol not exposed

https://ora.ai/docs/llms.txt

Content type: text/plain
Transferred: 679 B
Decoded: 679 B
Duration: 48 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: text/plain, text/markdown;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (16)

accept-ranges: bytes
access-control-allow-origin: [value stored]
age: 1338
cache-control: public, max-age=0, must-revalidate
content-disposition: [value stored]
content-length: 679
content-type: text/plain; charset=utf-8
date: Wed, 02 Sep 2026 15:30:02 GMT
etag: "7f911d175aeba0566debffc732803b85"
last-modified: Wed, 02 Sep 2026 15:07:43 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

GET 404 Access denied

agent_readiness_req · Protocol not exposed

https://ora.ai/.well-known/agent-instructions.md

Content type: text/html
Transferred: 7.0 KB
Decoded: 37.7 KB
Duration: 49 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: text/markdown, text/plain;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (17)

access-control-allow-origin: [value stored]
age: 15841
cache-control: public, max-age=0, must-revalidate
content-disposition: [value stored]
content-encoding: gzip
content-type: text/html; charset=utf-8
date: Wed, 02 Sep 2026 15:30:02 GMT
etag: W/"62843be802c28dc736a66b7f431f3c9d"
last-modified: Wed, 02 Sep 2026 11:06:01 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
x-matched-path: [value stored]
x-next-error-status: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

GET 404 Access denied

agent_readiness_req · Protocol not exposed

https://ora.ai/agent-instructions.md

Content type: text/html
Transferred: 7.0 KB
Decoded: 37.7 KB
Duration: 108 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: text/markdown, text/plain;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (17)

access-control-allow-origin: [value stored]
age: 15841
cache-control: public, max-age=0, must-revalidate
content-disposition: [value stored]
content-encoding: gzip
content-type: text/html; charset=utf-8
date: Wed, 02 Sep 2026 15:30:02 GMT
etag: W/"62843be802c28dc736a66b7f431f3c9d"
last-modified: Wed, 02 Sep 2026 11:06:01 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
x-matched-path: [value stored]
x-next-error-status: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

GET 200 Success

agent_readiness_req · Protocol not exposed

https://ora.ai/.well-known/ard.json

Content type: application/json
Transferred: 890 B
Decoded: 2.7 KB
Duration: 82 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: application/json, application/ld+json;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (15)

access-control-allow-origin: [value stored]
age: 1339
cache-control: public, max-age=3600
content-encoding: gzip
content-type: application/json
date: Wed, 02 Sep 2026 15:07:43 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-matched-path: [value stored]
x-nextjs-rewritten-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

GET 200 Success

agent_readiness_req · Protocol not exposed

https://ora.ai/.well-known/ai-catalog.json

Content type: application/json
Transferred: 890 B
Decoded: 2.7 KB
Duration: 48 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: application/json, application/ld+json;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (15)

access-control-allow-origin: [value stored]
age: 1339
cache-control: public, max-age=3600
content-encoding: gzip
content-type: application/json
date: Wed, 02 Sep 2026 15:07:43 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-matched-path: [value stored]
x-nextjs-rewritten-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

HEAD 404 Transport failure

agent_readiness_req · Protocol not exposed

https://ora.ai/.well-known/mcp

Content type: text/html
Transferred: 0 B
Decoded: 0 B
Duration: 44 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: not exposed Digest: not exposed

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: application/json, text/event-stream;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (16)

access-control-allow-origin: [value stored]
age: 15841
cache-control: public, max-age=0, must-revalidate
content-disposition: [value stored]
content-encoding: gzip
content-type: text/html; charset=utf-8
date: Wed, 02 Sep 2026 15:30:02 GMT
etag: W/"62843be802c28dc736a66b7f431f3c9d"
last-modified: Wed, 02 Sep 2026 11:06:01 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: [value stored]
x-next-error-status: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

GET 200 Success

agent_readiness_req · Protocol not exposed

https://ora.ai/.well-known/mcp/server-card.json

Content type: application/json
Transferred: 1.5 KB
Decoded: 4.9 KB
Duration: 66 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: application/mcp-server-card+json, application/json;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (16)

access-control-allow-origin: [value stored]
age: 1338
cache-control: public, max-age=0, must-revalidate
content-disposition: [value stored]
content-encoding: gzip
content-type: application/json; charset=utf-8
date: Wed, 02 Sep 2026 15:30:02 GMT
etag: W/"8f65278ff8c76ed4d32d2c24a5c53229"
last-modified: Wed, 02 Sep 2026 15:07:44 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

GET 404 Access denied

agent_readiness_req · Protocol not exposed

https://ora.ai/.well-known/mcp/manifest.json

Content type: text/html
Transferred: 7.0 KB
Decoded: 37.7 KB
Duration: 44 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (17)

access-control-allow-origin: [value stored]
age: 15841
cache-control: public, max-age=0, must-revalidate
content-disposition: [value stored]
content-encoding: gzip
content-type: text/html; charset=utf-8
date: Wed, 02 Sep 2026 15:30:02 GMT
etag: W/"62843be802c28dc736a66b7f431f3c9d"
last-modified: Wed, 02 Sep 2026 11:06:01 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
x-matched-path: [value stored]
x-next-error-status: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

GET 200 Success

agent_readiness_req · Protocol not exposed

https://ora.ai/.well-known/http-message-signatures-directory

Content type: application/http-message-signatures-directory+json
Transferred: 372 B
Decoded: 372 B
Duration: 90 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (14)

access-control-allow-origin: [value stored]
age: 0
cache-control: public, max-age=3600
content-type: application/http-message-signatures-directory+json
date: Wed, 02 Sep 2026 15:30:02 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-matched-path: [value stored]
x-nextjs-rewritten-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

GET 200 Success

agent_readiness_req · Protocol not exposed

https://ora.ai/

Content type: text/html
Transferred: 11.2 KB
Decoded: 54.9 KB
Duration: 57 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: application/json, text/markdown;q=0.9, text/plain;q=0.8, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (19)

access-control-allow-origin: [value stored]
age: 14124
cache-control: public, max-age=0, must-revalidate
content-disposition: [value stored]
content-encoding: gzip
content-type: text/html; charset=utf-8
date: Wed, 02 Sep 2026 15:30:02 GMT
etag: W/"ac26d58caf7d2b8a4c8469d6de7b6678"
link: [value stored]
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-matched-path: [value stored]
x-nextjs-prerender: [value stored]
x-nextjs-stale-time: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

OPTIONS 204 Success

agent_readiness_req · Protocol not exposed

https://ora.ai/checkout_sessions

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 43 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (10)

cache-control: public, max-age=0, must-revalidate
content-disposition: [value stored]
date: Wed, 02 Sep 2026 15:30:02 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: [value stored]
x-next-error-status: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

OPTIONS 204 Success

agent_readiness_req · Protocol not exposed

https://ora.ai/agentic_commerce/delegate_payment

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 42 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (10)

cache-control: public, max-age=0, must-revalidate
content-disposition: [value stored]
date: Wed, 02 Sep 2026 15:30:02 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: [value stored]
x-next-error-status: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

GET 404 Access denied

agent_readiness_req · Protocol not exposed

https://ora.ai/discovery/resources

Content type: text/html
Transferred: 7.0 KB
Decoded: 37.7 KB
Duration: 46 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (17)

access-control-allow-origin: [value stored]
age: 15841
cache-control: public, max-age=0, must-revalidate
content-disposition: [value stored]
content-encoding: gzip
content-type: text/html; charset=utf-8
date: Wed, 02 Sep 2026 15:30:02 GMT
etag: W/"62843be802c28dc736a66b7f431f3c9d"
last-modified: Wed, 02 Sep 2026 11:06:01 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
x-matched-path: [value stored]
x-next-error-status: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

4 Web.link validation What evidence did this capture rule record? web.link_validation@1 · Finalize · attempt 1 Succeeded

Duration: 20 ms
Fetches: 9
Artifacts: 9
Observations: 4

Observed facts

links.agent_auth

100.0% confidence

Advertised count: 0
Probed count: 0
Reachable count: 0
Robots denied count: 0
Stale count: 0

links.docs_access

100.0% confidence

Gated count: 0
Login form count: 0
Public count: 7
Sampled count: 8
Unavailable count: 1

links.llms

100.0% confidence

Advertised count: 19
Broken count: 1
Homepage fallback count: 0
Probed count: 8
Resolved count: 7
Robots denied count: 0

links.public_api

100.0% confidence

Advertised: Yes
Machine readable response: Yes
Probed: Yes
Reachable: Yes
Successful response: Yes

HTTP transactions

GET 200 Success

agent_readiness_req · Protocol not exposed

https://ora.ai/.well-known/agent-card.json

Content type: application/json
Transferred: 629 B
Decoded: 1.4 KB
Duration: 82 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: text/markdown, text/plain;q=0.9, text/html;q=0.8, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (16)

access-control-allow-origin: [value stored]
age: 14196
cache-control: public, max-age=0, must-revalidate
content-disposition: [value stored]
content-encoding: gzip
content-type: application/json; charset=utf-8
date: Wed, 02 Sep 2026 15:30:03 GMT
etag: W/"b6ff1ae5cf804e661790b47b1a09ea5e"
last-modified: Wed, 02 Sep 2026 11:33:27 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

GET 200 Success

agent_readiness_req · Protocol not exposed

https://ora.ai/.well-known/mcp.json

Content type: application/json
Transferred: 2.5 KB
Decoded: 10.1 KB
Duration: 48 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: text/markdown, text/plain;q=0.9, text/html;q=0.8, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (16)

access-control-allow-origin: [value stored]
age: 1337
cache-control: public, max-age=0, must-revalidate
content-disposition: [value stored]
content-encoding: gzip
content-type: application/json; charset=utf-8
date: Wed, 02 Sep 2026 15:30:03 GMT
etag: W/"89399fd97472e880af4ee575a278f72c"
last-modified: Wed, 02 Sep 2026 15:07:45 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

GET 200 Success

agent_readiness_req · Protocol not exposed

https://ora.ai/about

Content type: text/html
Transferred: 9.9 KB
Decoded: 52.6 KB
Duration: 46 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: text/markdown, text/plain;q=0.9, text/html;q=0.8, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (18)

access-control-allow-origin: [value stored]
age: 15091
cache-control: public, max-age=0, must-revalidate
content-disposition: [value stored]
content-encoding: gzip
content-type: text/html; charset=utf-8
date: Wed, 02 Sep 2026 15:30:03 GMT
etag: W/"f6483cca7189134afc54899daaffd66b"
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-matched-path: [value stored]
x-nextjs-prerender: [value stored]
x-nextjs-stale-time: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

GET 200 Unsupported media type

agent_readiness_req · Protocol not exposed

https://ora.ai/agents.md

Content type: text/markdown
Transferred: 4.8 KB
Decoded: 12.0 KB
Duration: 111 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: text/markdown, text/plain;q=0.9, text/html;q=0.8, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (16)

access-control-allow-origin: [value stored]
age: 1337
cache-control: public, max-age=0, must-revalidate
content-disposition: [value stored]
content-encoding: gzip
content-type: text/markdown; charset=utf-8
date: Wed, 02 Sep 2026 15:30:03 GMT
etag: W/"92f8be026f2d0379f3ab56551eec308e"
last-modified: Wed, 02 Sep 2026 15:07:46 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

GET 200 Success

agent_readiness_req · Protocol not exposed

https://ora.ai/api/llms.txt

Content type: text/plain
Transferred: 797 B
Decoded: 797 B
Duration: 83 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: text/markdown, text/plain;q=0.9, text/html;q=0.8, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (16)

accept-ranges: bytes
access-control-allow-origin: [value stored]
age: 1337
cache-control: public, max-age=0, must-revalidate
content-disposition: [value stored]
content-length: 797
content-type: text/plain; charset=utf-8
date: Wed, 02 Sep 2026 15:30:03 GMT
etag: "1fcbdc1e9d37ac05b3c3418eca2c17f5"
last-modified: Wed, 02 Sep 2026 15:07:46 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

GET 405 Access denied

agent_readiness_req · Protocol not exposed

https://ora.ai/api/mcp

Content type: Not recorded
Transferred: 83 B
Decoded: 83 B
Duration: 98 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: text/markdown, text/plain;q=0.9, text/html;q=0.8, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (11)

age: 0
cache-control: public, max-age=0, must-revalidate
date: Wed, 02 Sep 2026 15:30:03 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

GET 200 Success

agent_readiness_req · Protocol not exposed

https://ora.ai/api/openapi.json

Content type: application/json
Transferred: 34.0 KB
Decoded: 181.9 KB
Duration: 70 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: text/markdown, text/plain;q=0.9, text/html;q=0.8, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (13)

age: 2215
cache-control: public, max-age=3600
content-encoding: gzip
content-type: application/json
date: Wed, 02 Sep 2026 14:53:09 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

GET 200 Success

agent_readiness_req · Protocol not exposed

https://ora.ai/blog

Content type: text/html
Transferred: 13.7 KB
Decoded: 80.7 KB
Duration: 56 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: text/markdown, text/plain;q=0.9, text/html;q=0.8, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (18)

access-control-allow-origin: [value stored]
age: 16775
cache-control: public, max-age=0, must-revalidate
content-disposition: [value stored]
content-encoding: gzip
content-type: text/html; charset=utf-8
date: Wed, 02 Sep 2026 15:30:04 GMT
etag: W/"19ff505c98d69a1810a79379c523f9a9"
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-matched-path: [value stored]
x-nextjs-prerender: [value stored]
x-nextjs-stale-time: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

GET 200 Success

agent_readiness_req · Protocol not exposed

https://ora.ai/api/ard

Content type: application/ai-registry+json
Transferred: 2.9 KB
Decoded: 2.9 KB
Duration: 230 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: application/json, application/problem+json;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (13)

access-control-allow-origin: [value stored]
age: 1338
cache-control: public, max-age=3600
content-type: application/ai-registry+json; charset=utf-8
date: Wed, 02 Sep 2026 15:07:46 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

5 Web.mcp inspection What evidence did this capture rule record? web.mcp_inspection@2 · Finalize · attempt 1 Succeeded

Duration: 18 ms
Fetches: 8
Artifacts: 8
Observations: 1

Observed facts

mcp.inspection

100.0% confidence

Advertised: Yes
Attempted: Yes
Candidate count: 1
Endpoint transport: unspecified-http
Initialized notification accepted: Yes
Outcome: succeeded
Session established: No

HTTP transactions

POST 200 Unsupported media type

agent_readiness_req · Protocol not exposed

https://ora.ai/api/mcp

Content type: text/event-stream
Transferred: 1.1 KB
Decoded: 1.1 KB
Duration: 116 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (8)

content-type: [value stored]
accept: application/json, text/event-stream
user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (11)

cache-control: no-cache
content-type: text/event-stream
date: Wed, 02 Sep 2026 15:30:04 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

POST 202 Success

agent_readiness_req · Protocol not exposed

https://ora.ai/api/mcp

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 85 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (9)

mcp-protocol-version: [value stored]
content-type: [value stored]
accept: application/json, text/event-stream
user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (10)

cache-control: public, max-age=0, must-revalidate
content-length: 0
date: Wed, 02 Sep 2026 15:30:04 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

POST 200 Unsupported media type

agent_readiness_req · Protocol not exposed

https://ora.ai/api/mcp

Content type: text/event-stream
Transferred: 45.9 KB
Decoded: 45.9 KB
Duration: 100 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (9)

mcp-protocol-version: [value stored]
content-type: [value stored]
accept: application/json, text/event-stream
user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (11)

cache-control: no-cache
content-type: text/event-stream
date: Wed, 02 Sep 2026 15:30:04 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

POST 200 Unsupported media type

agent_readiness_req · Protocol not exposed

https://ora.ai/api/mcp

Content type: text/event-stream
Transferred: 1.8 KB
Decoded: 1.8 KB
Duration: 96 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (9)

mcp-protocol-version: [value stored]
content-type: [value stored]
accept: application/json, text/event-stream
user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (11)

cache-control: no-cache
content-type: text/event-stream
date: Wed, 02 Sep 2026 15:30:04 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

POST 200 Unsupported media type

agent_readiness_req · Protocol not exposed

https://ora.ai/api/mcp

Content type: text/event-stream
Transferred: 39.6 KB
Decoded: 39.6 KB
Duration: 105 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (9)

mcp-protocol-version: [value stored]
content-type: [value stored]
accept: application/json, text/event-stream
user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (11)

cache-control: no-cache
content-type: text/event-stream
date: Wed, 02 Sep 2026 15:30:05 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

POST 200 Unsupported media type

agent_readiness_req · Protocol not exposed

https://ora.ai/api/mcp

Content type: text/event-stream
Transferred: 4.3 KB
Decoded: 4.3 KB
Duration: 92 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (9)

mcp-protocol-version: [value stored]
content-type: [value stored]
accept: application/json, text/event-stream
user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (11)

cache-control: no-cache
content-type: text/event-stream
date: Wed, 02 Sep 2026 15:30:05 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

POST 200 Unsupported media type

agent_readiness_req · Protocol not exposed

https://ora.ai/api/mcp

Content type: text/event-stream
Transferred: 1.5 KB
Decoded: 1.5 KB
Duration: 81 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (9)

mcp-protocol-version: [value stored]
content-type: [value stored]
accept: application/json, text/event-stream
user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (11)

cache-control: no-cache
content-type: text/event-stream
date: Wed, 02 Sep 2026 15:30:05 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

POST 200 Unsupported media type

agent_readiness_req · Protocol not exposed

https://ora.ai/api/mcp

Content type: text/event-stream
Transferred: 100 B
Decoded: 100 B
Duration: 86 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (9)

mcp-protocol-version: [value stored]
content-type: [value stored]
accept: application/json, text/event-stream
user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (11)

cache-control: no-cache
content-type: text/event-stream
date: Wed, 02 Sep 2026 15:30:05 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

6 Web.nlweb inspection What evidence did this capture rule record? web.nlweb_inspection@1 · Finalize · attempt 1 Succeeded

Duration: 26 ms
Fetches: 3
Artifacts: 3
Observations: 1

Observed facts

nlweb.inspection

100.0% confidence

Outcome: succeeded

HTTP transactions

OPTIONS 204 Success

agent_readiness_req · Protocol not exposed

https://ora.ai/ask

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 78 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

accept: */*
user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (10)

allow: [value stored]
cache-control: public, max-age=0, must-revalidate
date: Wed, 02 Sep 2026 15:30:05 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

POST 200 Success

agent_readiness_req · Protocol not exposed

https://ora.ai/ask

Content type: application/json
Transferred: 204 B
Decoded: 282 B
Duration: 3.69 s

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (8)

content-type: [value stored]
accept: application/json
user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (12)

cache-control: public, max-age=0, must-revalidate
content-encoding: gzip
content-type: application/json
date: Wed, 02 Sep 2026 15:30:09 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

POST 200 Unsupported media type

agent_readiness_req · Protocol not exposed

https://ora.ai/ask

Content type: text/event-stream
Transferred: 327 B
Decoded: 327 B
Duration: 3.79 s

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (8)

content-type: [value stored]
accept: text/event-stream
user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (11)

cache-control: no-cache
content-type: text/event-stream
date: Wed, 02 Sep 2026 15:30:13 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

7 Web.graphql inspection What evidence did this capture rule record? web.graphql_inspection@1 · Finalize · attempt 1 Partial

Duration: 23 ms
Fetches: 3
Artifacts: 3
Observations: 1

Observed facts

graphql.inspection

100.0% confidence

Auth required count: 0
Candidate count: 3
Checked count: 2
Outcome: unavailable
Robots denied count: 0

HTTP transactions

OPTIONS 204 Success

agent_readiness_req · Protocol not exposed

https://ora.ai/graphql

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 77 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

accept: */*
user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (10)

cache-control: public, max-age=0, must-revalidate
content-disposition: [value stored]
date: Wed, 02 Sep 2026 15:30:13 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: [value stored]
x-next-error-status: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

OPTIONS 204 Success

agent_readiness_req · Protocol not exposed

https://ora.ai/api/graphql

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 77 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

accept: */*
user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (10)

allow: [value stored]
cache-control: public, max-age=0, must-revalidate
date: Wed, 02 Sep 2026 15:30:13 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

POST 404 Access denied

agent_readiness_req · Protocol not exposed

https://ora.ai/api/graphql

Content type: application/json
Transferred: 160 B
Decoded: 153 B
Duration: 107 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (8)

content-type: [value stored]
accept: application/graphql-response+json, application/json;q=0.9
user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (12)

cache-control: public, max-age=0, must-revalidate
content-encoding: gzip
content-type: application/json
date: Wed, 02 Sep 2026 15:30:13 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

8 Web.mcp apps inspection What evidence did this capture rule record? web.mcp_apps_inspection@1 · Finalize · attempt 1 Succeeded

Duration: 22 ms
Fetches: 7
Artifacts: 7
Observations: 1

Observed facts

mcp_apps.inspection

100.0% confidence

Candidate count: 1
Initialized notification accepted: Yes
Linked resource count: 3
Outcome: succeeded
Session established: No

HTTP transactions

POST 200 Unsupported media type

agent_readiness_req · Protocol not exposed

https://ora.ai/api/mcp

Content type: text/event-stream
Transferred: 1.1 KB
Decoded: 1.1 KB
Duration: 111 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (8)

content-type: [value stored]
accept: application/json, text/event-stream
user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (11)

cache-control: no-cache
content-type: text/event-stream
date: Wed, 02 Sep 2026 15:30:13 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

POST 202 Success

agent_readiness_req · Protocol not exposed

https://ora.ai/api/mcp

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 114 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (9)

mcp-protocol-version: [value stored]
content-type: [value stored]
accept: application/json, text/event-stream
user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (10)

cache-control: public, max-age=0, must-revalidate
content-length: 0
date: Wed, 02 Sep 2026 15:30:13 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

POST 200 Unsupported media type

agent_readiness_req · Protocol not exposed

https://ora.ai/api/mcp

Content type: text/event-stream
Transferred: 45.9 KB
Decoded: 45.9 KB
Duration: 100 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (9)

mcp-protocol-version: [value stored]
content-type: [value stored]
accept: application/json, text/event-stream
user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (11)

cache-control: no-cache
content-type: text/event-stream
date: Wed, 02 Sep 2026 15:30:13 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

POST 200 Unsupported media type

agent_readiness_req · Protocol not exposed

https://ora.ai/api/mcp

Content type: text/event-stream
Transferred: 1.8 KB
Decoded: 1.8 KB
Duration: 96 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (9)

mcp-protocol-version: [value stored]
content-type: [value stored]
accept: application/json, text/event-stream
user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (11)

cache-control: no-cache
content-type: text/event-stream
date: Wed, 02 Sep 2026 15:30:13 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

POST 200 Unsupported media type

agent_readiness_req · Protocol not exposed

https://ora.ai/api/mcp

Content type: text/event-stream
Transferred: 10.7 KB
Decoded: 10.7 KB
Duration: 86 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (9)

mcp-protocol-version: [value stored]
content-type: [value stored]
accept: application/json, text/event-stream
user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (11)

cache-control: no-cache
content-type: text/event-stream
date: Wed, 02 Sep 2026 15:30:14 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

POST 200 Unsupported media type

agent_readiness_req · Protocol not exposed

https://ora.ai/api/mcp

Content type: text/event-stream
Transferred: 12.9 KB
Decoded: 12.9 KB
Duration: 88 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (9)

mcp-protocol-version: [value stored]
content-type: [value stored]
accept: application/json, text/event-stream
user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (11)

cache-control: no-cache
content-type: text/event-stream
date: Wed, 02 Sep 2026 15:30:14 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

POST 200 Unsupported media type

agent_readiness_req · Protocol not exposed

https://ora.ai/api/mcp

Content type: text/event-stream
Transferred: 13.8 KB
Decoded: 13.8 KB
Duration: 81 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (9)

mcp-protocol-version: [value stored]
content-type: [value stored]
accept: application/json, text/event-stream
user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: ora.ai

Response headers (11)

cache-control: no-cache
content-type: text/event-stream
date: Wed, 02 Sep 2026 15:30:14 GMT
link: [value stored]
server: Vercel
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

9 Web.developer tooling inspection What evidence did this capture rule record? web.developer_tooling_inspection@1 · Finalize · attempt 1 Succeeded

Duration: 19 ms
Fetches: 0
Artifacts: 0
Observations: 1

Observed facts

developer_tooling.inspection

100.0% confidence

Candidate count: 0
Candidate limit: 6
Cli link candidate count: 0
Inspected link count: 82
Install command count: 0
Install command present: No
Not found count: 0
Npm candidate count: 0

10 Web.repository inspection What evidence did this capture rule record? web.repository_inspection@1 · Finalize · attempt 1 Not applicable

Duration: 19 ms
Fetches: 0
Artifacts: 0
Observations: 1

Observed facts

repository.inspection

100.0% confidence

Candidate count: 0
Inspection complete: No
Outcome: no_candidate
Repository advertised: No
Root response valid: No

11 Web.mcp registry inspection What evidence did this capture rule record? web.mcp_registry_inspection@1 · Finalize · attempt 1 Succeeded

Duration: 22 ms
Fetches: 2
Artifacts: 2
Observations: 1

Observed facts

mcp_registry.inspection

100.0% confidence

Outcome: succeeded
Query available: Yes
Repository available: No

HTTP transactions

GET 404 Success

agent_readiness_req · Protocol not exposed

https://registry.modelcontextprotocol.io/robots.txt

Content type: application/problem+json
Transferred: 155 B
Decoded: 155 B
Duration: 664 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: text/plain, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: registry.modelcontextprotocol.io

Response headers (7)

connection: [value stored]
content-length: 155
content-type: application/problem+json
date: Wed, 02 Sep 2026 15:30:15 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin
x-content-type-options: nosniff

GET 200 Success

agent_readiness_req · Protocol not exposed

https://registry.modelcontextprotocol.io/v0.1/servers

Content type: application/json
Transferred: 14.7 KB
Decoded: 14.7 KB
Duration: 582 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: application/json
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: registry.modelcontextprotocol.io

Response headers (7)

connection: [value stored]
content-type: application/json
date: Wed, 02 Sep 2026 15:30:15 GMT
strict-transport-security: max-age=31536000; includeSubDomains
transfer-encoding: [value stored]
vary: Origin
x-registry-cache: [value stored]

12 Web.wikimedia inspection What evidence did this capture rule record? web.wikimedia_inspection@1 · Finalize · attempt 1 Succeeded

Duration: 20 ms
Fetches: 3
Artifacts: 3
Observations: 1

Observed facts

wikimedia.inspection

100.0% confidence

Direct wikidata link count: 0
Direct wikipedia link count: 0
Outcome: succeeded
Query available: Yes

HTTP transactions

GET 301 Transport failure

agent_readiness_req · Protocol not exposed

https://api.wikimedia.org/robots.txt

Content type: text/html
Transferred: 293 B
Decoded: 293 B
Duration: 526 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: text/plain, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: api.wikimedia.org

Response headers (19)

age: 145459
cache-control: max-age=2592000
content-length: 293
content-type: text/html; charset=iso-8859-1
date: Mon, 31 Aug 2026 23:05:56 GMT
expires: Wed, 30 Sep 2026 23:05:56 GMT
location: [value stored]
nel: [value stored]
report-to: [value stored]
server: mw-web.eqiad.main-74d9976b45-qjqcn
server-timing: [value stored]
set-cookie: [REDACTED]
strict-transport-security: max-age=106384710; includeSubDomains; preload
vary: X-Forwarded-Proto
x-analytics: [value stored]
x-cache: [value stored]
x-cache-status: [value stored]
x-client-ip: [value stored]
x-request-id: [value stored]

GET 200 Success

agent_readiness_req · Protocol not exposed

https://api.wikimedia.org/core/v1/wikidata/search/page

Content type: application/json
Transferred: 885 B
Decoded: 3.2 KB
Duration: 295 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: application/json
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: api.wikimedia.org

Response headers (22)

accept-ranges: bytes
access-control-allow-origin: [value stored]
age: 0
cache-control: no-cache
content-encoding: gzip
content-length: 885
content-type: application/json
date: Wed, 02 Sep 2026 15:30:16 GMT
nel: [value stored]
report-to: [value stored]
server: mw-api-ext.eqiad.main-7d9f9d4d45-svffw
server-timing: [value stored]
set-cookie: [REDACTED]
strict-transport-security: max-age=106384710; includeSubDomains; preload
vary: x-restbase-compat, Accept-Encoding
x-analytics: [value stored]
x-cache: [value stored]
x-cache-status: [value stored]
x-client-ip: [value stored]
x-content-type-options: nosniff
x-request-id: [value stored]
x-search-id: [value stored]

GET 200 Success

agent_readiness_req · Protocol not exposed

https://api.wikimedia.org/core/v1/wikidata/page/Q656774/html

Content type: text/html
Transferred: 16.4 KB
Decoded: 193.7 KB
Duration: 123 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: text/html
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: api.wikimedia.org

Response headers (26)

accept-ranges: bytes
access-control-allow-origin: [value stored]
age: 0
cache-control: no-cache
content-encoding: gzip
content-language: en
content-revision-id: [value stored]
content-type: text/html; charset=utf-8; profile="https://www.mediawiki.org/wiki/Specs/HTML/0.0.0"
date: Wed, 02 Sep 2026 15:30:16 GMT
etag: W/"2533505903/d53fe8e0-9c39-11f1-bf08-31e8597b5166/view/html+lang:en-us"
last-modified: Thu, 20 Aug 2026 01:52:33 GMT
nel: [value stored]
report-to: [value stored]
server: mw-api-ext.eqiad.main-7d9f9d4d45-8q8zp
server-timing: [value stored]
set-cookie: [REDACTED]
strict-transport-security: max-age=106384710; includeSubDomains; preload
transfer-encoding: [value stored]
vary: Accept-Language,x-restbase-compat, Accept-Encoding
x-analytics: [value stored]
x-cache: [value stored]
x-cache-status: [value stored]
x-client-ip: [value stored]
x-content-type-options: nosniff
x-mediawiki-render-id: [value stored]
x-request-id: [value stored]

13 Web.skills sh inspection What evidence did this capture rule record? web.skills_sh_inspection@1 · Finalize · attempt 1 Partial

Duration: 25 ms
Fetches: 2
Artifacts: 2
Observations: 1

Observed facts

skills_sh.inspection

100.0% confidence

Direct skills link count: 0
Github association count: 1
Outcome: fetch_error

HTTP transactions

GET 200 Success

agent_readiness_req · Protocol not exposed

https://www.skills.sh/robots.txt

Content type: text/plain
Transferred: 149 B
Decoded: 149 B
Duration: 136 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: text/plain, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: www.skills.sh

Response headers (20)

accept-ranges: bytes
access-control-allow-origin: [value stored]
age: 31389
cache-control: public, max-age=0, must-revalidate
content-disposition: [value stored]
content-length: 149
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://va.vercel-scripts.com https://vercel.live; script-src-elem 'self' 'unsafe-inline' https://va.vercel-scripts.com https://vercel.live; style-src 'self' 'unsafe-inline' https://vercel.live; img-src 'self' data: blob: https://vercel.com https://vercel.live; connect-src 'self' https://vercel.live wss://ws-us3.pusher.com; font-src 'self' https://vercel.live https://assets.vercel.com; frame-src https://vercel.live; frame-ancestors 'none'; ba…
content-type: text/plain; charset=utf-8
date: Wed, 02 Sep 2026 15:30:17 GMT
etag: "62699308568d3029fd19b6bc00791b65"
last-modified: Wed, 02 Sep 2026 06:47:07 GMT
referrer-policy: strict-origin-when-cross-origin
server: Vercel
set-cookie: [REDACTED]
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
x-frame-options: DENY
x-matched-path: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

GET 307 Transport failure

agent_readiness_req · Protocol not exposed

https://www.skills.sh/eralabs-ai

Content type: text/html
Transferred: 21.2 KB
Decoded: 21.2 KB
Duration: 120 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://agent-ready-prod.fly.dev/scanner)
accept: text/html, application/xhtml+xml;q=0.9
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: www.skills.sh

Response headers (18)

age: 1327
cache-control: public, max-age=0, must-revalidate
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://va.vercel-scripts.com https://vercel.live; script-src-elem 'self' 'unsafe-inline' https://va.vercel-scripts.com https://vercel.live; style-src 'self' 'unsafe-inline' https://vercel.live; img-src 'self' data: blob: https://vercel.com https://vercel.live; connect-src 'self' https://vercel.live wss://ws-us3.pusher.com; font-src 'self' https://vercel.live https://assets.vercel.com; frame-src https://vercel.live; frame-ancestors 'none'; ba…
content-type: text/html; charset=utf-8
date: Wed, 02 Sep 2026 15:08:09 GMT
location: [value stored]
referrer-policy: strict-origin-when-cross-origin
server: Vercel
set-cookie: [REDACTED]
strict-transport-security: max-age=63072000
transfer-encoding: [value stored]
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-content-type-options: nosniff
x-frame-options: DENY
x-matched-path: [value stored]
x-nextjs-stale-time: [value stored]
x-vercel-cache: [value stored]
x-vercel-id: [value stored]

14 Web.ranked search inspection What evidence did this capture rule record? web.ranked_search_inspection@1 · Finalize · attempt 1 Partial

Duration: 19 ms
Fetches: 0
Artifacts: 0
Observations: 1

Observed facts

ranked_search.inspection

100.0% confidence

Brand: ora
Brand source: og:site_name
Category: DeveloperApplication
Category source: json_ld_category
Outcome: provider_unconfigured
Provider: brave_web_search
Provider api version: 2023-10-11
Query template revision: 1

15 Web.http semantics What evidence did this capture rule record? web.http_semantics@1 · Extract · attempt 1 Succeeded

Duration: 21 ms
Fetches: 0
Artifacts: 0
Observations: 1

Observed facts

http.semantics

100.0% confidence

Attempt count: 1
Cross origin redirect count: 0
Final status: 200
Https downgrade count: 0
Outcome: success
Redirect count: 0
Transport available: Yes

16 Web.response semantics What evidence did this capture rule record? web.response_semantics@1 · Extract · attempt 1 Succeeded

Duration: 17 ms
Fetches: 0
Artifacts: 0
Observations: 1

Observed facts

response.semantics

100.0% confidence

Available: Yes
Content type: text/html
Status: 200

17 HTML extraction What structure can an agent extract from the HTML? web.html_extract@4 · Extract · attempt 1 Succeeded

Duration: 23 ms
Fetches: 0
Artifacts: 0
Observations: 10

Observed facts

html.accessibility

90.0% confidence

Structured evidence was stored. This view has no safe summary for it yet.

html.content

100.0% confidence

Visible chars: 1944
Estimated tokens: 486
Has pricing language: No
Has api language: Yes

html.discovery

100.0% confidence

Structured evidence was stored. This view has no safe summary for it yet.

html.forms

100.0% confidence

Forms: 2
Controls: 10
Controls missing name: 0

html.images

100.0% confidence

Total: 47
Missing alt: 0

html.links

100.0% confidence

Total: 82
Missing name: 0

html.metadata

100.0% confidence

Title: Ora | Make your site work for agents
Description: Scan any site, watch real agents try to use it, and fix what turns them away. Ora is the standard for optimizing your site so agents can actually use and recommend you.
Language: en
Charset: utf-8
Canonical: https://ora.ai
Json ld blocks: 1
Json ld valid blocks: 1

html.structure

100.0% confidence

H1: 1
H2: 1
H3: 13
Landmarks: 3
Lists: 12
Tables: 0
Visible chars: 1944
Estimated tokens: 486

html.structured_data

100.0% confidence

Blocks: 1
Valid blocks: 1
Invalid blocks: 0
Entity count: 7
Type count: 7
Same as count: 3
Organization count: 1
Organization field count: 6

html.web_mcp

90.0% confidence

Complete declarative tool count: 0
Declarative element count: 0
Document registration count: 0
Model context reference count: 4
Navigator registration count: 0

Immutable scan identity

Capture profile: static@27
Rule set: web-capture@27
Time bucket: 2026-09-02 15:29:00 UTC
Scan ID: 023a37ea-f1d2-4bd3-9ae5-4289386eaeb4

Versioned evidence first

A later criteria version can evaluate this same stored scan without changing what the scanner observed.

Open this exact snapshot

Give your team a clear next step.

Share this report, apply the relevant changes, then scan again to check the result.

ora.ai

What to fix first

Document the access method

Starting example

OAuth protected resource metadata

OAuth 2.0 support

Scoped permissions

OAuth authorization-server metadata

Agent auth discovery metadata

auth.md walkthrough simulation

Starting example

Publish a usable API contract

API catalog

Idempotency-Key support

MCP Streamable HTTP transport

MCP parameter schemas

MCP tool annotations

MCP resources exposed

MCP App view CSP

Product and documentation MCP coverage

Official MCP Registry listing

Starting example

Link the resources agents can use

Starting example

Universal Commerce Protocol

Linked content is publicly readable

Sandbox or test environment

Verified Wikidata and English Wikipedia presence

Starting example

Return clear error responses

Starting example

JSON error responses

REST typed error model

Starting example

Explain the price model

Starting example

Pricing information is accessible

Starting example

What this scan found

All results

What the scanner tested

Observed facts

HTTP transactions

Observed facts

HTTP transactions

Observed facts

HTTP transactions

Observed facts

HTTP transactions

Observed facts

HTTP transactions

Observed facts

HTTP transactions

Observed facts

HTTP transactions

Observed facts

HTTP transactions

Observed facts

Observed facts

Observed facts

HTTP transactions

Observed facts

HTTP transactions

Observed facts

HTTP transactions

Observed facts

Observed facts

Observed facts

Observed facts

Give your team a clear next step.