finance.yahoo.com

https://finance.yahoo.com/

Legacy site · Static audit

The static audit found gaps. Start with the fixes below.

Pass starts at 80 / 100. This scan does not prove that an agent can complete a purchase. Method and limits

30/ 100

NEEDS WORK

Core coverage: Not measured of core weight verified
Score model: v26Versioned criteria

Scanned 2026-09-03 01:39:02 UTC

What to fix first

Start with these changes. Open a fix for the finding, example, and supporting evidence.

5 priority changes

1
Publish a usable API contract
+13.2 points estimated
Link public API instructions and a valid OpenAPI document. Show request and response examples.

Public API documentation is linked Developer portal OpenAPI document is published API catalog MCP well-known discovery MCP server or manifest MCP server card Official MCP Registry listing
View findings and full example

Suggested location: /docs
- Public API documentation is linked
  
  Finding: No public API documentation link was found.
  
  Change: Add a named link to the public API documentation.
  Open this check and its evidence
- Developer portal
  
  Finding: No developer portal link was found.
  
  Change: Add a named link to a public developer portal.
  Open this check and its evidence
- OpenAPI document is published
  
  Finding: The scan did not find an OpenAPI document.
  
  Change: Publish a valid OpenAPI JSON or YAML document at a standard root path.
  Open this check and its evidence
- API catalog
  
  Finding: The scan did not find an RFC 9727 API catalog.
  
  Change: Publish conforming GET and HEAD behavior at /.well-known/api-catalog.
  Open this check and its evidence
- MCP well-known discovery
  
  Finding: No MCP discovery signal was found at the bounded well-known paths.
  
  Change: Publish /.well-known/mcp, a server card, or an MCP manifest.
  Open this check and its evidence
- MCP server or manifest
  
  Finding: The bounded static scan found no usable MCP endpoint, card, or manifest.
  
  Change: Publish a server card or manifest and expose a Streamable HTTP MCP endpoint.
  Open this check and its evidence
- MCP server card
  
  Finding: No MCP server card was found at /.well-known/mcp/server-card.json.
  
  Change: Publish a server card with name, version, description, and a remote endpoint.
  Open this check and its evidence
- Official MCP Registry listing
  
  Finding: The official MCP Registry has an active name match, but the scan could not verify domain or repository ownership.
  
  Change: Add the product domain or canonical public repository to the registry server metadata.
  Open this check and its evidence
Starting example
```
{
  "info": {
    "title": "Example API",
    "version": "1.0.0"
  },
  "openapi": "3.1.0",
  "paths": {
    "/status": {
      "get": {
        "responses": {
          "200": {
            "description": "Service status"
          }
        }
      }
    }
  }
}
```
Adapt this example to the service. Apply every relevant change listed above, then confirm it with a new scan.
2
Document the access method
+13.0 points estimated
State whether access is public or needs credentials. Link the applicable authentication metadata.

OAuth protected resource metadata OAuth 2.0 support Scoped permissions OAuth authorization-server metadata auth.md exists Agent auth discovery metadata
Starting example
```
# Authentication

Public report reads need no credentials.
Write requests require a bearer token.
Never put tokens in URLs.
```
View findings and full example

Suggested location: /auth.md
- OAuth protected resource metadata
  
  Finding: The scan did not find OAuth protected resource metadata.
  
  Change: Publish RFC 9728 metadata at /.well-known/oauth-protected-resource.
  Open this check and its evidence
- OAuth 2.0 support
  
  Finding: The fixed discovery paths did not provide a usable OAuth authorization-server signal.
  
  Change: Publish RFC 9728 protected-resource metadata and RFC 8414 authorization-server metadata.
  Open this check and its evidence
- Scoped permissions
  
  Finding: The discovered OAuth metadata does not declare supported scopes.
  
  Change: Publish scopes_supported in protected-resource or authorization-server metadata.
  Open this check and its evidence
- OAuth authorization-server metadata
  
  Finding: The scan did not find authorization-server metadata at the fixed well-known path.
  
  Change: Publish RFC 8414 metadata at /.well-known/oauth-authorization-server.
  Open this check and its evidence
- auth.md exists
  
  Finding: The scan did not find /auth.md.
  
  Change: Publish a stable agent authentication walkthrough at /auth.md.
  Open this check and its evidence
- Agent auth discovery metadata
  
  Finding: The fixed discovery documents do not publish an agent_auth chain.
  
  Change: Publish protected-resource metadata and an agent_auth block that points to /auth.md.
  Open this check and its evidence
Starting example
```
# Authentication

Public report reads need no credentials.
Write requests require a bearer token.
Never put tokens in URLs.
```
Adapt this example to the service. Apply every relevant change listed above, then confirm it with a new scan.
3
Make page controls readable
+5.7 points estimated
Use headings, native controls, and visible labels. Review the recorded control findings.

Accessible document structure Native interactive controls Accessible names on controls Form control labeling
Starting example
```
<label for="site">Website URL</label><input id="site" name="url" type="url"><button type="submit">Check site</button>
```
View findings and full example

Suggested location: /
- Accessible document structure
  
  Finding: The document has some semantic structure, but its landmarks or heading order are incomplete.
  
  Change: Use one main region, a navigation landmark, one clear H1, and sequential heading levels.
  Open this check and its evidence
- Native interactive controls
  
  Finding: The source has non-native click targets or custom controls that are not keyboard reachable.
  
  Change: Use native button, link, and form elements. Add keyboard behavior only when a custom control is necessary.
  Open this check and its evidence
- Accessible names on controls
  
  Finding: 57 of 550 detected controls have no computed source name.
  
  Change: Give every control a stable name that an accessibility client can compute.
  Open this check and its evidence
- Form control labeling
  
  Finding: 1 of 4 form fields do not have an explicit computed label.
  
  Change: Associate each field with a visible label or a valid ARIA labeling relationship.
  Open this check and its evidence
Starting example
```
<label for="site">Website URL</label><input id="site" name="url" type="url"><button type="submit">Check site</button>
```
Adapt this example to the service. Apply every relevant change listed above, then confirm it with a new scan.

2 more priority changes

4
Link the resources agents can use
+4.9 points estimated
Add named links to the site's public documentation and machine-readable resources.

A2A Agent Card Universal Commerce Protocol Agent onboarding friction
Starting example
```
<a href="/docs">Documentation</a><a href="/llms.txt">Content map for agents</a>
```
View findings and full example

Suggested location: /
- A2A Agent Card
  
  Finding: The scan did not find an A2A Agent Card.
  
  Change: Publish a valid Agent Card at /.well-known/agent-card.json.
  Open this check and its evidence
- Universal Commerce Protocol
  
  Finding: The scan did not find a UCP business profile.
  
  Change: Publish a UCP business profile at /.well-known/ucp.
  Open this check and its evidence
- Agent onboarding friction
  
  Finding: The scan found fewer than two bounded onboarding signals.
  
  Change: Provide a visible developer entry point, public documentation, llms.txt, agent instructions, and an OpenAPI document.
  Open this check and its evidence
Starting example
```
<a href="/docs">Documentation</a><a href="/llms.txt">Content map for agents</a>
```
Adapt this example to the service. Apply every relevant change listed above, then confirm it with a new scan.
5
Publish valid structured data
+4.3 points estimated
Describe the organization with valid JSON-LD. Use the real name and URL.

JSON-LD entity linking Organization schema completeness Schema type breadth
Starting example
```
{
  "@context": "https://schema.org",
  "@type": "Organization",
  "name": "Your product",
  "url": "https://example.com/"
}
```
View findings and full example

Suggested location: /
- JSON-LD entity linking
  
  Finding: JSON-LD has no sameAs link.
  
  Change: Add stable sameAs links for the organization or product entity.
  Open this check and its evidence
- Organization schema completeness
  
  Finding: No Organization JSON-LD entity was found.
  
  Change: Add an Organization entity with stable identity and contact fields.
  Open this check and its evidence
- Schema type breadth
  
  Finding: The page declares only 1 JSON-LD type(s).
  
  Change: Describe the organization, site, and main product with linked schema types.
  Open this check and its evidence
Starting example
```
{
  "@context": "https://schema.org",
  "@type": "Organization",
  "name": "Your product",
  "url": "https://example.com/"
}
```
Adapt this example to the service. Apply every relevant change listed above, then confirm it with a new scan.

Estimated gains use this report's model. All checks listed in a fix must pass to earn its full estimated gain.

All checks 124Findings, recommended changes, and score weights

What this scan found

10 checks passed. 53 need attention. 11 could not be verified. Checks that do not apply stay out of the score.

Passed: 10
Needs attention: 53
Could not verify: 11
Not applicable: 50

Capture rules: 17 of 17 complete
HTTP requests: 44
Saved artifacts: 42
Observations: 56

All results

Results that need attention are listed first. Open a row for its reason and recommended change.

001 A2A Agent Card Access · Recommended · Legacy Failed 0 of 600

Finding

The scan did not find an A2A Agent Card.

Recommended change

Publish a valid Agent Card at /.well-known/agent-card.json.

Check ID: a2a-agent-card@1
Supporting evidence: View stored observation

002 API catalog Access · Required · Legacy Failed 0 of 1000

Finding

The scan did not find an RFC 9727 API catalog.

Recommended change

Publish conforming GET and HEAD behavior at /.well-known/api-catalog.

Check ID: api-catalog-rfc9727@1
Supporting evidence: View stored observation View stored observation

003 Accessible names on controls Usability · Recommended · Legacy Failed 0 of 600

Finding

57 of 550 detected controls have no computed source name.

Recommended change

Give every control a stable name that an accessibility client can compute.

Check ID: ax-accessible-names@1
Supporting evidence: View stored observation

004 Agent Plugins manifest Discovery · Emerging · Legacy Failed 0 of 100

Finding

The product page does not advertise a public GitHub source repository.

Recommended change

Link the canonical public GitHub repository from the product page.

Check ID: agent-plugins-repo@1
Supporting evidence: View stored observation

005 Agent Skills index conformance Discovery · Emerging · Legacy Failed 0 of 300

Finding

No Agent Skills index was found at the v0.2.0 discovery path.

Recommended change

Publish /.well-known/agent-skills/index.json with the v0.2.0 schema.

Check ID: agent-skills-index-v2@1
Supporting evidence: View stored observation

006 Agent auth discovery metadata Usability · Recommended · Legacy Failed 0 of 600

Finding

The fixed discovery documents do not publish an agent_auth chain.

Recommended change

Publish protected-resource metadata and an agent_auth block that points to /auth.md.

Check ID: agent-auth-discovery-metadata@1
Supporting evidence: View stored observation View stored observation

007 Agent discovery file Discovery · Required · Legacy Failed 0 of 500

Finding

No Agent Skills index was found at /.well-known/agent-skills/index.json.

Recommended change

Publish an index with a non-empty skills array and a name and description for every skill.

Check ID: agent-discovery-file@1
Supporting evidence: View stored observation

008 Agent mode view Accessibility · Emerging · Legacy Failed 0 of 300

Finding

The agent-mode query returned a normal HTML view or another unsuitable representation.

Recommended change

Return a dedicated JSON, Markdown, or plain-text agent view.

Check ID: agent-mode-view@1
Supporting evidence: View stored observation

009 Agent onboarding friction Usability · Recommended · Legacy Failed 0 of 200

Finding

The scan found fewer than two bounded onboarding signals.

Recommended change

Provide a visible developer entry point, public documentation, llms.txt, agent instructions, and an OpenAPI document.

Check ID: onboarding-friction@1
Supporting evidence: View stored observation View stored observation View stored observation View stored observation View stored observation

010 Agent platform repository configurations Discovery · Emerging · Legacy Failed 0 of 100

Finding

The product page does not advertise a public GitHub source repository.

Recommended change

Link the canonical public GitHub repository from the product page.

Check ID: agent-rules-repo@1
Supporting evidence: View stored observation

011 Agent usage instructions Accessibility · Required · Legacy Failed 0 of 400

Finding

The checked llms.txt and dedicated instruction paths do not explain when an agent should use the product.

Recommended change

Add a specific when-to-use section to llms.txt or a dedicated agent instruction document.

Check ID: agent-instruction@1
Supporting evidence: View stored observation View stored observation

012 Agentic resource catalog Discovery · Emerging · Legacy Failed 0 of 300

Finding

No usable resource catalog was found at either bounded well-known path.

Recommended change

Publish /.well-known/ard.json or /.well-known/ai-catalog.json.

Check ID: ard-catalog@1
Supporting evidence: View stored observation View stored observation

013 CLI tool available Usability · Recommended · Legacy Failed 0 of 300

Finding

The product page does not provide a usable public CLI path.

Recommended change

Publish a CLI, a copyable install command, and a stable public documentation or package link.

Check ID: cli-tool@1
Supporting evidence: View stored observation

014 Developer portal Access · Recommended · Legacy Failed 0 of 600

Finding

No developer portal link was found.

Recommended change

Add a named link to a public developer portal.

Check ID: developer-portal@1
Supporting evidence: View stored observation

015 Form control labeling Usability · Recommended · Legacy Failed 0 of 600

Finding

1 of 4 form fields do not have an explicit computed label.

Recommended change

Associate each field with a visible label or a valid ARIA labeling relationship.

Check ID: ax-form-labeling@1
Supporting evidence: View stored observation

016 HTTP Link header discovery Access · Required · Legacy Failed 0 of 1000

Finding

The final response has no HTTP Link header.

Recommended change

Add HTTP Link relations for important machine-readable discovery resources.

Check ID: link-headers-discovery@1
Supporting evidence: View stored observation

017 Identified bot Markdown serving Access · Emerging · Legacy Failed 0 of 300

Finding

The identified bot request received text/html, not Markdown.

Recommended change

Optionally serve a Markdown representation to the truthful AgentReadinessBot identity.

Check ID: agent-ua-markdown@1
Supporting evidence: View stored observation

018 JSON error responses Usability · Required · Legacy Failed 0 of 1000

Finding

The missing-path response is not a structured JSON error.

Recommended change

Return application/problem+json or a stable JSON error object for API errors.

Check ID: json-error-responses@1
Supporting evidence: View stored observation

019 JSON-LD entity linking Access · Recommended · Legacy Failed 0 of 600

Finding

JSON-LD has no sameAs link.

Recommended change

Add stable sameAs links for the organization or product entity.

Check ID: json-ld-entity-linking@1
Supporting evidence: View stored observation

020 MCP server card Usability · Recommended · Legacy Failed 0 of 300

Finding

No MCP server card was found at /.well-known/mcp/server-card.json.

Recommended change

Publish a server card with name, version, description, and a remote endpoint.

Check ID: mcp-server-card@1
Supporting evidence: View stored observation

021 MCP server or manifest Usability · Recommended · Legacy Failed 0 of 500

Finding

The bounded static scan found no usable MCP endpoint, card, or manifest.

Recommended change

Publish a server card or manifest and expose a Streamable HTTP MCP endpoint.

Check ID: mcp-server@1
Supporting evidence: View stored observation View stored observation View stored observation

022 MCP well-known discovery Accessibility · Recommended · Legacy Failed 0 of 400

Finding

No MCP discovery signal was found at the bounded well-known paths.

Recommended change

Publish /.well-known/mcp, a server card, or an MCP manifest.

Check ID: mcp-well-known-discovery@1
Supporting evidence: View stored observation View stored observation View stored observation

023 Markdown URL fallback Access · Emerging · Legacy Failed 0 of 300

Finding

The scan did not find a Markdown homepage at /index.md.

Recommended change

Publish a text/markdown homepage at /index.md.

Check ID: markdown-url-fallback@1
Supporting evidence: View stored observation

024 Markdown agent docs Access · Emerging · Legacy Failed 0 of 300

Finding

The canonical root did not return Markdown for a Markdown-preferred request.

Recommended change

Implement Accept: text/markdown negotiation or publish a stable Markdown route.

Check ID: markdown-negotiation@1
Supporting evidence: View stored observation

025 Markdown alternate link Access · Emerging · Legacy Failed 0 of 300

Finding

The page does not declare a Markdown alternate.

Recommended change

Add a link rel=alternate with type=text/markdown and a stable URL.

Check ID: markdown-link-alternate@1
Supporting evidence: View stored observation

026 Modular llms.txt Accessibility · Emerging · Legacy Failed 0 of 200

Finding

No scoped llms.txt file was found at the bounded docs, API, or developers paths.

Recommended change

Publish /docs/llms.txt, /api/llms.txt, or /developers/llms.txt with a focused resource index.

Check ID: modular-llms-txt@1
Supporting evidence: View stored observation

027 Multi-language SDK packages Usability · Recommended · Legacy Failed 0 of 300

Finding

The product page has no reachable multi-language SDK evidence.

Recommended change

Link stable public SDK pages or package pages and identify their programming languages.

Check ID: rest-sdk-packages@1
Supporting evidence: View stored observation

028 NLWeb Schema Map directive Accessibility · Emerging · Legacy Failed 0 of 200

Finding

robots.txt does not publish a Schema Map directive.

Recommended change

Add schemamap: followed by the absolute URL of the structured feed map.

Check ID: nlweb-schema-feeds@1
Supporting evidence: View stored observation

029 NPM or PyPI SDK package Discovery · Recommended · Legacy Failed 0 of 100

Finding

The product page does not link an NPM or PyPI SDK package.

Recommended change

Publish an SDK package and link its exact NPM or PyPI package page.

Check ID: npm-sdk-package@1
Supporting evidence: View stored observation

030 Native interactive controls Usability · Recommended · Legacy Failed 0 of 600

Finding

The source has non-native click targets or custom controls that are not keyboard reachable.

Recommended change

Use native button, link, and form elements. Add keyboard behavior only when a custom control is necessary.

Check ID: ax-native-controls@1
Supporting evidence: View stored observation

031 OAuth 2.0 support Usability · Required · Legacy Failed 0 of 1000

Finding

The fixed discovery paths did not provide a usable OAuth authorization-server signal.

Recommended change

Publish RFC 9728 protected-resource metadata and RFC 8414 authorization-server metadata.

Check ID: oauth-support@1
Supporting evidence: View stored observation View stored observation

032 OAuth authorization-server metadata Usability · Recommended · Legacy Failed 0 of 600

Finding

The scan did not find authorization-server metadata at the fixed well-known path.

Recommended change

Publish RFC 8414 metadata at /.well-known/oauth-authorization-server.

Check ID: mcp-oauth-metadata@1
Supporting evidence: View stored observation View stored observation

033 OAuth protected resource metadata Usability · Required · Legacy Failed 0 of 1000

Finding

The scan did not find OAuth protected resource metadata.

Recommended change

Publish RFC 9728 metadata at /.well-known/oauth-protected-resource.

Check ID: oauth-protected-resource@1
Supporting evidence: View stored observation

034 OpenAPI document is published Access · Required · Legacy Failed 0 of 1000

Finding

The scan did not find an OpenAPI document.

Recommended change

Publish a valid OpenAPI JSON or YAML document at a standard root path.

Check ID: openapi-spec@1
Supporting evidence: View stored observation

035 Organization schema completeness Access · Recommended · Legacy Failed 0 of 600

Finding

No Organization JSON-LD entity was found.

Recommended change

Add an Organization entity with stable identity and contact fields.

Check ID: org-schema-completeness@1
Supporting evidence: View stored observation

036 Pricing Markdown exists Access · Emerging · Legacy Failed 0 of 300

Finding

The scan did not find /pricing.md.

Recommended change

Publish stable machine-readable pricing details at /pricing.md.

Check ID: pricing-md@1
Supporting evidence: View stored observation

037 Public API documentation is linked Access · Required · Legacy Failed 0 of 1000

Finding

No public API documentation link was found.

Recommended change

Add a named link to the public API documentation.

Check ID: public-api-docs@1
Supporting evidence: View stored observation View stored observation

038 Scoped permissions Usability · Recommended · Legacy Failed 0 of 600

Finding

The discovered OAuth metadata does not declare supported scopes.

Recommended change

Publish scopes_supported in protected-resource or authorization-server metadata.

Check ID: scoped-permissions@1
Supporting evidence: View stored observation View stored observation

039 Sitemap freshness metadata Access · Recommended · Legacy Failed 0 of 600

Finding

The sitemap has no valid lastmod value.

Recommended change

Add accurate ISO 8601 lastmod values to sitemap entries.

Check ID: sitemap-lastmod@1
Supporting evidence: View stored observation

040 Universal Commerce Protocol Payments · Required · Legacy Failed 0 of 1000

Finding

The scan did not find a UCP business profile.

Recommended change

Publish a UCP business profile at /.well-known/ucp.

Check ID: ucp-support@1
Supporting evidence: View stored observation

041 Verified skills.sh listing Discovery · Emerging · Legacy Failed 0 of 100

Finding

The product page exposes no direct skills.sh link or verifiable GitHub-owner association for a catalog lookup.

Recommended change

Link the official GitHub organization or exact skills.sh page from the product page or structured sameAs data.

Check ID: skills-sh-listed@1
Supporting evidence: View stored observation

042 Web Bot Auth key directory Usability · Emerging · Legacy Failed 0 of 300

Finding

No Web Bot Auth key directory was found at the well-known path.

Recommended change

Publish an Ed25519 JWK keys array with kid, x, nbf, and exp fields.

Check ID: web-bot-auth-directory@1
Supporting evidence: View stored observation

043 WebMCP source declarations Usability · Emerging · Legacy Failed 0 of 400

Finding

No server-rendered or inline-script WebMCP declaration was found.

Recommended change

Add declarative form tools or register tools through document.modelContext.

Check ID: webmcp@1
Supporting evidence: View stored observation

044 auth.md exists Usability · Required · Legacy Failed 0 of 1000

Finding

The scan did not find /auth.md.

Recommended change

Publish a stable agent authentication walkthrough at /auth.md.

Check ID: auth-md-exists@1
Supporting evidence: View stored observation

045 llms.txt exists Access · Required · Legacy Failed 0 of 1000

Finding

The scan did not find /llms.txt.

Recommended change

Publish a concise llms.txt file at the site root.

Check ID: llms-txt-exists@1
Supporting evidence: View stored observation

046 Accessible document structure Usability · Recommended · Legacy Warning 300 of 600

Finding

The document has some semantic structure, but its landmarks or heading order are incomplete.

Recommended change

Use one main region, a navigation landmark, one clear H1, and sequential heading levels.

Check ID: ax-document-structure@1
Supporting evidence: View stored observation

047 Agent crawler reachability Access · Recommended · Legacy Warning 300 of 600

Finding

robots policy permits only 2 of 3 evaluated retrieval crawlers at the root path.

Recommended change

Permit the retrieval crawlers that should discover public content.

Check ID: agent-crawler-reachability@1
Supporting evidence: View stored observation

048 Agent-friendly 404 responses Usability · Recommended · Legacy Warning 300 of 600

Finding

The probe returns the correct missing status, but its body lacks concise discovery guidance.

Recommended change

Point missing-page clients to llms.txt, sitemap.xml, or the documentation index.

Check ID: agent-friendly-404@1
Supporting evidence: View stored observation

049 Metadata completeness Access · Required · Legacy Warning 889 of 1000

Finding

8 of 9 metadata fields are present.

Recommended change

Add the missing document and Open Graph metadata fields.

Check ID: metadata-completeness@1
Supporting evidence: View stored observation

050 Official MCP Registry listing Discovery · Recommended · Legacy Warning 50 of 100

Finding

The official MCP Registry has an active name match, but the scan could not verify domain or repository ownership.

Recommended change

Add the product domain or canonical public repository to the registry server metadata.

Check ID: mcp-registry-listed@1
Supporting evidence: View stored observation

051 Schema type breadth Access · Recommended · Legacy Warning 200 of 600

Finding

The page declares only 1 JSON-LD type(s).

Recommended change

Describe the organization, site, and main product with linked schema types.

Check ID: schema-type-breadth@1
Supporting evidence: View stored observation

052 Sitemap exists Access · Required · Legacy Warning 500 of 1000

Finding

The sitemap path returns content, but it is not a sitemap XML document.

Recommended change

Publish a valid XML urlset or sitemapindex document at /sitemap.xml.

Check ID: sitemap@1
Supporting evidence: View stored observation

053 robots.txt agent-user policy Access · Required · Legacy Warning 500 of 1000

Finding

robots.txt explicitly addresses only 1 agent-user token(s).

Recommended change

State an explicit policy for user-directed agent fetchers.

Check ID: robots-agent-user-policy@1
Supporting evidence: View stored observation

054 Brand name discoverability Discovery · Required · Legacy Could not verify 0 of 0

Finding

The scan did not collect valid ranked web-search evidence for this query.

Recommended change

Configure the ranked search provider and run capture profile version 26 to collect new evidence.

Check ID: ranked-brand-discoverability@1
Supporting evidence: No linked observation was stored.

055 Category search visibility Discovery · Recommended · Legacy Could not verify 0 of 0

Finding

The scan did not collect valid ranked web-search evidence for this query.

Recommended change

Configure the ranked search provider and run capture profile version 26 to collect new evidence.

Check ID: ranked-category-visibility@1
Supporting evidence: No linked observation was stored.

056 Developer resource discoverability Discovery · Recommended · Legacy Could not verify 0 of 0

Finding

The scan did not collect valid ranked web-search evidence for this query.

Recommended change

Configure the ranked search provider and run capture profile version 26 to collect new evidence.

Check ID: ranked-developer-discoverability@1
Supporting evidence: No linked observation was stored.

057 GraphQL asynchronous job pattern Usability · Recommended · Legacy Could not verify 0 of 0

Finding

The scan did not collect usable GraphQL introspection evidence.

Recommended change

Run capture profile version 17 and permit bounded public introspection.

Check ID: graphql-async-job-pattern@1
Supporting evidence: No linked observation was stored.

058 GraphQL batch mutations Usability · Recommended · Legacy Could not verify 0 of 0

Finding

The scan did not collect usable GraphQL introspection evidence.

Recommended change

Run capture profile version 17 and permit bounded public introspection.

Check ID: graphql-batch-mutations@1
Supporting evidence: No linked observation was stored.

059 GraphQL pagination pattern Usability · Recommended · Legacy Could not verify 0 of 0

Finding

The scan did not collect usable GraphQL introspection evidence.

Recommended change

Run capture profile version 17 and permit bounded public introspection.

Check ID: graphql-pagination-pattern@1
Supporting evidence: No linked observation was stored.

060 GraphQL schema description coverage Usability · Recommended · Legacy Could not verify 0 of 0

Finding

The scan did not collect usable GraphQL introspection evidence.

Recommended change

Run capture profile version 17 and permit bounded public introspection.

Check ID: graphql-schema-completeness@1
Supporting evidence: No linked observation was stored.

061 GraphQL typed error model Usability · Recommended · Legacy Could not verify 0 of 0

Finding

The scan did not collect usable GraphQL introspection evidence.

Recommended change

Run capture profile version 17 and permit bounded public introspection.

Check ID: graphql-error-type-definition@1
Supporting evidence: No linked observation was stored.

062 GraphQL versioning and deprecation policy Usability · Recommended · Legacy Could not verify 0 of 0

Finding

The scan did not collect usable GraphQL introspection evidence.

Recommended change

Run capture profile version 17 and permit bounded public introspection.

Check ID: graphql-versioning-policy@1
Supporting evidence: No linked observation was stored.

063 NLWeb /ask endpoint Usability · Emerging · Legacy Could not verify 0 of 0

Finding

The scan did not collect usable NLWeb inspection evidence.

Recommended change

Run capture profile version 16 to collect bounded NLWeb evidence.

Check ID: nlweb-ask@1
Supporting evidence: No linked observation was stored.

064 NLWeb streaming support Usability · Emerging · Legacy Could not verify 0 of 0

Finding

The scan did not collect usable NLWeb inspection evidence.

Recommended change

Run capture profile version 16 to collect bounded NLWeb evidence.

Check ID: nlweb-streaming@1
Supporting evidence: No linked observation was stored.

065 Accessibility-tree instruction safety Usability · Recommended · Legacy Passed 600 of 600

Finding

No configured instruction-risk pattern was found in the evaluated hidden accessibility text.

Check ID: ax-tree-injection-safe@1
Supporting evidence: View stored observation

066 Content without JavaScript Access · Required · Legacy Passed 1000 of 1000

Finding

The source HTML has 14901 visible text characters.

Check ID: content-no-js@1
Supporting evidence: View stored observation

067 JSON-LD structured data Access · Required · Legacy Passed 1000 of 1000

Finding

The page has 1 valid JSON-LD block(s).

Check ID: json-ld@1
Supporting evidence: View stored observation

068 Not blocked by bot detection Access · Required · Legacy Passed 1000 of 1000

Finding

The scanner received the target content without a bot block.

Check ID: bot-detection@1
Supporting evidence: View stored observation

069 Page token budget Access · Recommended · Legacy Passed 600 of 600

Finding

The estimated visible-text size is 3726 tokens.

Check ID: page-token-budget@1
Supporting evidence: View stored observation

070 Pricing information is accessible Access · Required · Legacy Passed 1000 of 1000

Finding

Pricing is present in page text and in 6 link(s).

Check ID: pricing-info@1
Supporting evidence: View stored observation View stored observation

071 Redirect hygiene Access · Recommended · Legacy Passed 600 of 600

Finding

The target uses 0 same-origin redirect(s) with no downgrade or redirect error.

Check ID: redirect-hygiene@1
Supporting evidence: View stored observation

072 Trust anchor pages Access · Required · Legacy Passed 1000 of 1000

Finding

The page links to 5 trust-page categories.

Check ID: trust-anchors@1
Supporting evidence: View stored observation

073 Verified Wikidata and English Wikipedia presence Discovery · Recommended · Legacy Passed 100 of 100

Finding

Wikidata has a verified entity for the domain and that entity has an English Wikipedia sitelink.

Check ID: wikipedia-presence@1
Supporting evidence: View stored observation

074 robots.txt AI crawler policy Discovery · Required · Legacy Passed 1000 of 1000

Finding

robots.txt has explicit policies for 4 known AI crawler tokens.

Check ID: robots-ai-policy-quality@1
Supporting evidence: View stored observation

075 A2UI generative UI support Usability · Emerging · Legacy Not applicable 0 of 0

Finding

No inspectable public MCP HTTP endpoint was found.

Check ID: a2ui-support@1
Supporting evidence: No linked observation was stored.

076 ACP checkout protocol Payments · Required · Legacy Not applicable 0 of 0

Finding

No commerce or payment protocol signal was found.

Check ID: acp-support@1
Supporting evidence: No linked observation was stored.

077 ACP delegated payment Payments · Recommended · Legacy Not applicable 0 of 0

Finding

No commerce or payment protocol signal was found.

Check ID: acp-delegate-payment@1
Supporting evidence: No linked observation was stored.

078 AI Catalog discovery Discovery · Emerging · Legacy Not applicable 0 of 0

Finding

The optional AI Catalog alias is not published. Its absence does not reduce the score.

Check ID: ai-catalog-published@1
Supporting evidence: No linked observation was stored.

079 AP2 mandate capability Payments · Recommended · Legacy Not applicable 0 of 0

Finding

No commerce or payment protocol signal was found.

Check ID: ap2-support@1
Supporting evidence: No linked observation was stored.

080 API schema complexity Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No OpenAPI document was found at the bounded fixed paths, so this REST contract check does not apply to the stored evidence.

Check ID: api-schema-analysis@1
Supporting evidence: No linked observation was stored.

081 Agent auth WWW-Authenticate hint Usability · Recommended · Legacy Not applicable 0 of 0

Finding

The primary public request did not return 401, so an authentication challenge hint was not required.

Check ID: agent-auth-www-authenticate@1
Supporting evidence: No linked observation was stored.

082 Agent auth endpoints respond Usability · Emerging · Legacy Not applicable 0 of 0

Finding

No identity, claim, or events endpoint was advertised.

Check ID: agent-auth-endpoints-reachable@1
Supporting evidence: No linked observation was stored.

083 Function calling compatibility Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No OpenAPI document was found at the bounded fixed paths, so this REST contract check does not apply to the stored evidence.

Check ID: function-calling-compat@1
Supporting evidence: No linked observation was stored.

084 Idempotency-Key support Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No OpenAPI document was found at the bounded fixed paths, so this REST contract check does not apply to the stored evidence.

Check ID: idempotency-key-support@1
Supporting evidence: No linked observation was stored.

085 Linked content is publicly readable Accessibility · Recommended · Legacy Not applicable 0 of 0

Finding

No llms.txt content links were available for a bounded public-access sample.

Check ID: docs-public-content@1
Supporting evidence: No linked observation was stored.

086 MCP App view CSP Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No inspectable public MCP HTTP endpoint was found.

Check ID: mcp-view-csp@1
Supporting evidence: No linked observation was stored.

087 MCP App view reachable Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No inspectable public MCP HTTP endpoint was found.

Check ID: mcp-view-domain@1
Supporting evidence: No linked observation was stored.

088 MCP Apps UI quality Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No inspectable public MCP HTTP endpoint was found.

Check ID: mcp-apps-ui-quality@1
Supporting evidence: No linked observation was stored.

089 MCP Apps support Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No inspectable public MCP HTTP endpoint was found.

Check ID: mcp-app-registry@1
Supporting evidence: No linked observation was stored.

090 MCP OAuth challenge alignment Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No MCP server signal was found.

Check ID: mcp-auth-mechanism@1
Supporting evidence: No linked observation was stored.

091 MCP PKCE S256 support Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No MCP server signal was found.

Check ID: mcp-pkce-s256@1
Supporting evidence: No linked observation was stored.

092 MCP Streamable HTTP transport Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No MCP server signal was found.

Check ID: mcp-streamable-http@1
Supporting evidence: No linked observation was stored.

093 MCP error handling Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No inspectable MCP HTTP endpoint was found.

Check ID: mcp-error-handling@1
Supporting evidence: No linked observation was stored.

094 MCP parameter schemas Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No inspectable MCP HTTP endpoint was found.

Check ID: mcp-param-schemas@1
Supporting evidence: No linked observation was stored.

095 MCP registry branding Discovery · Emerging · Legacy Not applicable 0 of 0

Finding

No MCP server card is published, so registry branding does not apply.

Check ID: registry-branding@1
Supporting evidence: No linked observation was stored.

096 MCP resource quality Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No inspectable MCP HTTP endpoint was found.

Check ID: mcp-resource-quality@1
Supporting evidence: No linked observation was stored.

097 MCP resources exposed Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No inspectable MCP HTTP endpoint was found.

Check ID: mcp-resource-listing@1
Supporting evidence: No linked observation was stored.

098 MCP server identity Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No inspectable MCP HTTP endpoint was found.

Check ID: mcp-server-identity@1
Supporting evidence: No linked observation was stored.

099 MCP tool annotations Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No inspectable MCP HTTP endpoint was found.

Check ID: mcp-tool-annotations@1
Supporting evidence: No linked observation was stored.

100 MCP tool descriptions Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No inspectable MCP HTTP endpoint was found.

Check ID: mcp-tool-descriptions@1
Supporting evidence: No linked observation was stored.

101 MCP tool listing Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No inspectable MCP HTTP endpoint was found.

Check ID: mcp-tool-listing@1
Supporting evidence: No linked observation was stored.

102 MCP tool naming Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No inspectable MCP HTTP endpoint was found.

Check ID: mcp-tool-naming@1
Supporting evidence: No linked observation was stored.

103 MPP payment protocol Payments · Required · Legacy Not applicable 0 of 0

Finding

No commerce or payment protocol signal was found.

Check ID: mpp-support@1
Supporting evidence: No linked observation was stored.

104 Markdown code fence validity Accessibility · Emerging · Legacy Not applicable 0 of 0

Finding

No served Markdown document was confirmed at the bounded paths.

Check ID: code-fence-validity@1
Supporting evidence: No linked observation was stored.

105 Markdown frontmatter metadata Accessibility · Emerging · Legacy Not applicable 0 of 0

Finding

No served Markdown document was confirmed at the bounded document paths.

Check ID: markdown-frontmatter@1
Supporting evidence: No linked observation was stored.

106 Markdown negotiation cache variation Access · Recommended · Legacy Not applicable 0 of 0

Finding

The canonical response did not negotiate Markdown, so Vary: Accept does not apply.

Check ID: markdown-negotiation-vary@1
Supporting evidence: No linked observation was stored.

107 Product and documentation MCP coverage Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No public streamable HTTP MCP endpoint was discovered.

Check ID: mcp-multi-surface-coverage@1
Supporting evidence: No linked observation was stored.

108 Public API endpoint responds Usability · Required · Legacy Not applicable 0 of 0

Finding

No parameter-free GET operation was available in the discovered OpenAPI document.

Check ID: public-api-reachable@1
Supporting evidence: No linked observation was stored.

109 REST asynchronous job pattern Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No OpenAPI document was found at the bounded fixed paths, so this REST contract check does not apply to the stored evidence.

Check ID: async-job-pattern@1
Supporting evidence: No linked observation was stored.

110 REST batch endpoint Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No OpenAPI document was found at the bounded fixed paths, so this REST contract check does not apply to the stored evidence.

Check ID: batch-endpoints@1
Supporting evidence: No linked observation was stored.

111 REST pagination pattern Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No OpenAPI document was found at the bounded fixed paths, so this REST contract check does not apply to the stored evidence.

Check ID: pagination-shape@1
Supporting evidence: No linked observation was stored.

112 REST response schema coverage Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No OpenAPI document was found at the bounded fixed paths, so this REST contract check does not apply to the stored evidence.

Check ID: response-schema-coverage@1
Supporting evidence: No linked observation was stored.

113 REST typed error model Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No OpenAPI document was found at the bounded fixed paths, so this REST contract check does not apply to the stored evidence.

Check ID: api-error-model@1
Supporting evidence: No linked observation was stored.

114 REST versioning and deprecation policy Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No OpenAPI document was found at the bounded fixed paths, so this REST contract check does not apply to the stored evidence.

Check ID: api-versioning-policy@1
Supporting evidence: No linked observation was stored.

115 Rate limit response headers Usability · Recommended · Legacy Not applicable 0 of 0

Finding

The primary public response is not rate limited and exposes no API rate-limit contract.

Check ID: rate-limit-headers@1
Supporting evidence: No linked observation was stored.

116 Resource catalog entry quality Discovery · Emerging · Legacy Not applicable 0 of 0

Finding

No catalog exists, so catalog-entry quality does not apply.

Check ID: ard-entries-valid@1
Supporting evidence: No linked observation was stored.

117 Resource catalog trust manifests Discovery · Emerging · Legacy Not applicable 0 of 0

Finding

No catalog exists, so optional trust metadata does not apply.

Check ID: ard-trust-manifest@1
Supporting evidence: No linked observation was stored.

118 Sandbox or test environment Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No public OpenAPI document was found for environment analysis.

Check ID: sandbox-environment@1
Supporting evidence: No linked observation was stored.

119 Skills.sh catalog-page quality Access · Emerging · Legacy Not applicable 0 of 0

Finding

Quality is not evaluated because the scan found no verified skills.sh listing.

Check ID: skills-sh-quality@1
Supporting evidence: No linked observation was stored.

120 auth.md structure Usability · Recommended · Legacy Not applicable 0 of 0

Finding

auth.md was not available, so its walkthrough structure cannot be evaluated.

Check ID: auth-md-structure@1
Supporting evidence: No linked observation was stored.

121 auth.md walkthrough simulation Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No auth.md or agent authentication discovery signal was found.

Check ID: auth-md-walkthrough-simulation@1
Supporting evidence: No linked observation was stored.

122 llms.txt formatting Access · Recommended · Legacy Not applicable 0 of 0

Finding

llms.txt was not available, so its format cannot be checked.

Check ID: llms-txt-formatting@1
Supporting evidence: No linked observation was stored.

123 llms.txt links resolve Accessibility · Recommended · Legacy Not applicable 0 of 0

Finding

No links were found in a published llms.txt document.

Check ID: llms-links-resolve@1
Supporting evidence: No linked observation was stored.

124 x402 payment protocol Payments · Required · Legacy Not applicable 0 of 0

Finding

No commerce or payment protocol signal was found.

Check ID: x402-support@1
Supporting evidence: No linked observation was stored.

Scan evidence and limitsPages read, HTTP records, observations, and scan identity

Scan scope and limits

This report uses an earlier score model. Rescan for site scope and coverage.

How the score works

What the scanner tested

Open a rule to inspect its HTTP and extracted evidence.

1 Robots access Can a standards-aware agent access this site? web.robots@4 · Robots · attempt 1 Allowed

Duration: 22 ms
Fetches: 1
Artifacts: 1
Observations: 2

Observed facts

robots.analysis

100.0% confidence

Allowed agent user count: 2
Allowed retrieval count: 2
Availability: available
Explicit agent user count: 1
Explicit ai crawler count: 4
Group count: 3
Known policy count: 5
Same origin schema map url count: 0

robots.policy

100.0% confidence

Outcome: allow
Availability: available

HTTP transactions

GET 200 Success

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/robots.txt

Content type: text/plain
Transferred: 715 B
Decoded: 2.5 KB
Duration: 39 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/html, application/xhtml+xml;q=0.9, application/json;q=0.5, text/plain;q=0.4, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (25)

accept-ranges: bytes
access-control-allow-origin: [value stored]
age: 71
ats-carp-promotion: [value stored]
cache-control: public, max-age=3600
connection: [value stored]
content-encoding: gzip
content-length: 715
content-security-policy: frame-ancestors 'self' https://*.builtbygirls.com https://*.rivals.com https://*.intheknow.com https://*.autoblog.com https://*.techcrunch.com https://*.yahoo.com https://*.aol.com https://*.huffingtonpost.com https://*.oath.com https://*.search.yahoo.com https://*.pnr.ouryahoo.com https://pnr.ouryahoo.com https://*.search.aol.com https://*.search.huffpost.com https://*.onesearch.com https://*.verizonmedia.com https://*.publishing.oath.com https://*.autoblog.com; sandbox allow-forms allow-same-o…
content-type: text/plain
date: Thu, 03 Sep 2026 01:37:52 GMT
etag: "297daabe4bdab4fd6ec584dbc12b1fc0-df"
last-modified: Wed, 05 Aug 2026 23:06:20 GMT
referrer-policy: no-referrer-when-downgrade
server: ATS
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
strict-transport-security: max-age=31536000
vary: Accept-Encoding,Origin
x-amz-id-2: [value stored]
x-amz-request-id: [value stored]
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: [value stored]

2 Primary HTTP response What does a direct HTTP client receive? web.primary_http@2 · Static capture · attempt 1 Succeeded

Duration: 19 ms
Fetches: 1
Artifacts: 1
Observations: 1

Observed facts

transport.fetch

100.0% confidence

Available: Yes
Outcome: success
Https: Yes
Status: 200
Content type: text/html
Body bytes: 1582995
Final url: https://finance.yahoo.com/

HTTP transactions

GET 200 Success

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/

Content type: text/html
Transferred: 206.7 KB
Decoded: 1.51 MB
Duration: 444 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/html, application/xhtml+xml;q=0.9, application/json;q=0.5, text/plain;q=0.4, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (26)

age: 0
cache-control: private, no-cache, max-age=0
connection: [value stored]
content-encoding: gzip
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:03 GMT
etag: "nydiae"
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
strict-transport-security: max-age=31536000
transfer-encoding: [value stored]
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

3 Web.discovery files What evidence did this capture rule record? web.discovery_files@12 · Static capture · attempt 1 Succeeded

Duration: 18 ms
Fetches: 33
Artifacts: 31
Observations: 27

Observed facts

discovery.a2a_agent_card

100.0% confidence

Body bytes: 490
Body sha256: 848bc5298bd031b8eb555ccc9670307a95551657d79bef2ed7e54cd4bc3c2591
Content type: text/html
Final url: https://finance.yahoo.com/.well-known/agent-card.json
Format valid: No
Id: a2a_agent_card
Method: GET
Outcome: access_denied

discovery.acp_checkout_options

100.0% confidence

Allow header count: 0
Allow post: No
Body bytes: 16524
Body sha256: b22e47a5f2bebc17cc2a0c58276757b36018e7999ab3c319f6df3a208fbbfbb3
Content type: text/html
Final url: https://finance.yahoo.com/checkout_sessions
Format valid: No
Id: acp_checkout_options

discovery.acp_delegate_payment_options

100.0% confidence

Allow header count: 0
Allow post: No
Body bytes: 16524
Body sha256: a1e882cb519c8e0ec0f6026a8d551c4a3f0a2c88ce2123a62c5e2802b191529d
Content type: text/html
Final url: https://finance.yahoo.com/agentic_commerce/delegate_payment
Format valid: No
Id: acp_delegate_payment_options

discovery.agent_friendly_404

100.0% confidence

Body bytes: 490
Body chars: 489
Body concise: Yes
Body sha256: 848bc5298bd031b8eb555ccc9670307a95551657d79bef2ed7e54cd4bc3c2591
Content type: text/html
Final url: https://finance.yahoo.com/.well-known/agent-readiness-probe/not-found-7b91e8d4
Format valid: Yes
Guidance present: No

discovery.agent_instructions

100.0% confidence

Agent instruction action signal count: 0
Agent instruction heading present: No
Agent instruction section chars: 0
Agent instruction valid: No
Body bytes: 490
Body sha256: 848bc5298bd031b8eb555ccc9670307a95551657d79bef2ed7e54cd4bc3c2591
Canonical link present: No
Code fence delimiter count: 0

discovery.agent_mode_view

100.0% confidence

Auth signal: No
Body bytes: 526887
Body sha256: 3fa550a12591c6eca0342564863bfda4514317341387a5f765f64a4147d11238
Capability signal: Yes
Content type: text/html
Endpoint signal: Yes
Final url: https://finance.yahoo.com/
Format valid: No

discovery.agent_skills_index

100.0% confidence

Body bytes: 490
Body sha256: 848bc5298bd031b8eb555ccc9670307a95551657d79bef2ed7e54cd4bc3c2591
Content type: text/html
Final url: https://finance.yahoo.com/.well-known/agent-skills/index.json
Format valid: No
Id: agent_skills_index
Method: GET
Outcome: access_denied

discovery.ai_catalog

100.0% confidence

Attested trust manifest count: 0
Body bytes: 490
Body sha256: 848bc5298bd031b8eb555ccc9670307a95551657d79bef2ed7e54cd4bc3c2591
Content type: text/html
Display name entry count: 0
Entry count: 0
Exclusive target entry count: 0
Final url: https://finance.yahoo.com/.well-known/ai-catalog.json

discovery.api_catalog

100.0% confidence

Body bytes: 490
Body sha256: 848bc5298bd031b8eb555ccc9670307a95551657d79bef2ed7e54cd4bc3c2591
Content type: text/html
Final url: https://finance.yahoo.com/.well-known/api-catalog
Format valid: No
Id: api_catalog
Method: GET
Outcome: access_denied

discovery.api_catalog_head

100.0% confidence

Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Content type: text/html
Final url: https://finance.yahoo.com/.well-known/api-catalog
Format valid: No
Id: api_catalog_head
Method: HEAD
Outcome: access_denied

discovery.ard_catalog

100.0% confidence

Attested trust manifest count: 0
Body bytes: 490
Body sha256: 848bc5298bd031b8eb555ccc9670307a95551657d79bef2ed7e54cd4bc3c2591
Content type: text/html
Display name entry count: 0
Entry count: 0
Exclusive target entry count: 0
Final url: https://finance.yahoo.com/.well-known/ard.json

discovery.auth_md

100.0% confidence

Agent instruction action signal count: 0
Agent instruction heading present: No
Agent instruction section chars: 0
Agent instruction valid: No
Body bytes: 490
Body sha256: 848bc5298bd031b8eb555ccc9670307a95551657d79bef2ed7e54cd4bc3c2591
Canonical link present: No
Code fence delimiter count: 0

discovery.llms_txt

100.0% confidence

Agent instruction action signal count: 0
Agent instruction heading present: No
Agent instruction section chars: 0
Agent instruction valid: No
Body bytes: 490
Body sha256: 848bc5298bd031b8eb555ccc9670307a95551657d79bef2ed7e54cd4bc3c2591
Canonical link present: No
Code fence delimiter count: 0

discovery.markdown_negotiation

100.0% confidence

Agent instruction action signal count: 0
Agent instruction heading present: No
Agent instruction section chars: 0
Agent instruction valid: No
Body bytes: 526958
Body sha256: b31308a1b7131415f118e52ccfd366b8c3259ee6caa0e2a2cc04c46ea20da7fe
Canonical link present: No
Code fence delimiter count: 0

discovery.markdown_url_fallback

100.0% confidence

Agent instruction action signal count: 0
Agent instruction heading present: No
Agent instruction section chars: 0
Agent instruction valid: No
Body bytes: 490
Body sha256: 848bc5298bd031b8eb555ccc9670307a95551657d79bef2ed7e54cd4bc3c2591
Canonical link present: No
Code fence delimiter count: 0

discovery.mcp_endpoint

100.0% confidence

Allow header present: No
Bearer challenge present: No
Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Challenge count: 0
Content type: text/html
Endpoint signal: No
Final url: https://finance.yahoo.com/.well-known/mcp

discovery.mcp_manifest

100.0% confidence

Body bytes: 490
Body sha256: 848bc5298bd031b8eb555ccc9670307a95551657d79bef2ed7e54cd4bc3c2591
Content type: text/html
Direct endpoint present: No
Final url: https://finance.yahoo.com/.well-known/mcp/manifest.json
Format valid: No
Id: mcp_manifest
Json valid: No

discovery.mcp_server_card

100.0% confidence

Body bytes: 490
Body sha256: 848bc5298bd031b8eb555ccc9670307a95551657d79bef2ed7e54cd4bc3c2591
Content type: text/html
Description present: No
Display name present: No
Endpoint count: 0
Final url: https://finance.yahoo.com/.well-known/mcp/server-card.json
Format valid: No

discovery.modular_llms_txt

100.0% confidence

Agent instruction action signal count: 0
Agent instruction heading present: No
Agent instruction section chars: 0
Agent instruction valid: No
Body bytes: 490
Body sha256: 848bc5298bd031b8eb555ccc9670307a95551657d79bef2ed7e54cd4bc3c2591
Canonical link present: No
Code fence delimiter count: 0

discovery.oauth_authorization_server

100.0% confidence

Body bytes: 490
Body sha256: 848bc5298bd031b8eb555ccc9670307a95551657d79bef2ed7e54cd4bc3c2591
Content type: text/html
Final url: https://finance.yahoo.com/.well-known/oauth-authorization-server
Format valid: No
Id: oauth_authorization_server
Method: GET
Outcome: access_denied

discovery.oauth_protected_resource

100.0% confidence

Body bytes: 490
Body sha256: 848bc5298bd031b8eb555ccc9670307a95551657d79bef2ed7e54cd4bc3c2591
Content type: text/html
Final url: https://finance.yahoo.com/.well-known/oauth-protected-resource
Format valid: No
Id: oauth_protected_resource
Method: GET
Outcome: access_denied

discovery.openapi

100.0% confidence

Body bytes: 490
Body sha256: 848bc5298bd031b8eb555ccc9670307a95551657d79bef2ed7e54cd4bc3c2591
Content type: text/html
Final url: https://finance.yahoo.com/openapi.yml
Format valid: No
Id: openapi
Method: GET
Outcome: access_denied

discovery.pricing_markdown

100.0% confidence

Agent instruction action signal count: 0
Agent instruction heading present: No
Agent instruction section chars: 0
Agent instruction valid: No
Body bytes: 490
Body sha256: 848bc5298bd031b8eb555ccc9670307a95551657d79bef2ed7e54cd4bc3c2591
Canonical link present: No
Code fence delimiter count: 0

discovery.sitemap

100.0% confidence

Body bytes: 65159
Body sha256: 903652c0c622283c43b9f0b6e9204ee61859995394f2f0f614fc7460b73e2be9
Content type: text/html
Final url: https://finance.yahoo.com/sitemap/.xml/
Format valid: No
Id: sitemap
Invalid lastmod count: 0
Lastmod count: 0

discovery.ucp

100.0% confidence

Body bytes: 490
Body sha256: 848bc5298bd031b8eb555ccc9670307a95551657d79bef2ed7e54cd4bc3c2591
Content type: text/html
Final url: https://finance.yahoo.com/.well-known/ucp
Format valid: No
Id: ucp
Method: GET
Outcome: access_denied

discovery.web_bot_auth_directory

100.0% confidence

Body bytes: 490
Body sha256: 848bc5298bd031b8eb555ccc9670307a95551657d79bef2ed7e54cd4bc3c2591
Content type: text/html
Final url: https://finance.yahoo.com/.well-known/http-message-signatures-directory
Format valid: No
Id: web_bot_auth_directory
Json valid: No
Key count: 0

discovery.x402

100.0% confidence

Body bytes: 490
Body sha256: 848bc5298bd031b8eb555ccc9670307a95551657d79bef2ed7e54cd4bc3c2591
Content type: text/html
Final url: https://finance.yahoo.com/discovery/resources
Format valid: No
Id: x402_discovery
Method: GET
Outcome: access_denied

HTTP transactions

GET 308 Redirect

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/sitemap.xml

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 78 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/xml, text/xml;q=0.9, text/plain;q=0.2, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (17)

age: 0
cache-control: max-age=0, private
connection: [value stored]
content-security-policy: frame-ancestors 'self' https://*.builtbygirls.com https://*.rivals.com https://*.intheknow.com https://*.autoblog.com https://*.techcrunch.com https://*.yahoo.com https://*.aol.com https://*.huffingtonpost.com https://*.oath.com https://*.search.yahoo.com https://*.pnr.ouryahoo.com https://pnr.ouryahoo.com https://*.search.aol.com https://*.search.huffpost.com https://*.onesearch.com https://*.verizonmedia.com https://*.publishing.oath.com https://*.autoblog.com; sandbox allow-forms allow-same-o…
date: Thu, 03 Sep 2026 01:39:04 GMT
expires: -1
location: [value stored]
referrer-policy: no-referrer-when-downgrade
server: ATS
strict-transport-security: max-age=31536000
transfer-encoding: [value stored]
x-content-type-options: nosniff
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-sveltekit-normalize: [value stored]
x-xss-protection: [value stored]

GET 200 Success

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/sitemap/.xml/

Content type: text/html
Transferred: 20.8 KB
Decoded: 63.6 KB
Duration: 169 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/xml, text/xml;q=0.9, text/plain;q=0.2, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (23)

age: 0
cache-control: private, no-cache, max-age=0
connection: [value stored]
content-encoding: gzip
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:04 GMT
etag: "1o6k1he"
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
strict-transport-security: max-age=31536000
transfer-encoding: [value stored]
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

GET 404 Access denied

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/llms.txt

Content type: text/html
Transferred: 490 B
Decoded: 490 B
Duration: 80 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/plain, text/markdown;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (23)

age: 0
cache-control: max-age=0, private
connection: [value stored]
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:04 GMT
etag: "i5vbi8"
expires: -1
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
strict-transport-security: max-age=31536000
transfer-encoding: [value stored]
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

GET 404 Access denied

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/pricing.md

Content type: text/html
Transferred: 490 B
Decoded: 490 B
Duration: 72 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/markdown, text/plain;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (23)

age: 0
cache-control: max-age=0, private
connection: [value stored]
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:04 GMT
etag: "dz44mk"
expires: -1
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
strict-transport-security: max-age=31536000
transfer-encoding: [value stored]
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

GET 404 Access denied

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/.well-known/agent-card.json

Content type: text/html
Transferred: 490 B
Decoded: 490 B
Duration: 72 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (23)

age: 0
cache-control: max-age=0, private
connection: [value stored]
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:04 GMT
etag: "1ykvoz2"
expires: -1
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
strict-transport-security: max-age=31536000
transfer-encoding: [value stored]
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

GET 404 Access denied

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/.well-known/api-catalog

Content type: text/html
Transferred: 490 B
Decoded: 490 B
Duration: 77 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/linkset+json, application/json;q=0.8, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (23)

age: 0
cache-control: max-age=0, private
connection: [value stored]
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:04 GMT
etag: "13e5y5n"
expires: -1
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
strict-transport-security: max-age=31536000
transfer-encoding: [value stored]
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

HEAD 404 Access denied

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/.well-known/api-catalog

Content type: text/html
Transferred: 0 B
Decoded: 0 B
Duration: 70 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: */*
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (23)

age: 0
cache-control: max-age=0, private
connection: [value stored]
content-length: 28945
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:04 GMT
etag: "cplf55"
expires: -1
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

GET 404 Access denied

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/.well-known/oauth-protected-resource

Content type: text/html
Transferred: 490 B
Decoded: 490 B
Duration: 77 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (23)

age: 0
cache-control: max-age=0, private
connection: [value stored]
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:04 GMT
etag: "14gqpzu"
expires: -1
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
strict-transport-security: max-age=31536000
transfer-encoding: [value stored]
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

GET 404 Access denied

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/.well-known/ucp

Content type: text/html
Transferred: 490 B
Decoded: 490 B
Duration: 117 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (23)

age: 1
cache-control: max-age=0, private
connection: [value stored]
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:05 GMT
etag: "fv2e0s"
expires: -1
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
strict-transport-security: max-age=31536000
transfer-encoding: [value stored]
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

GET 404 Access denied

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/openapi.json

Content type: text/html
Transferred: 490 B
Decoded: 490 B
Duration: 200 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, application/yaml;q=0.9, application/x-yaml;q=0.9, text/yaml;q=0.8, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (23)

age: 0
cache-control: max-age=0, private
connection: [value stored]
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:05 GMT
etag: "154a89t"
expires: -1
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
strict-transport-security: max-age=31536000
transfer-encoding: [value stored]
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

GET 404 Access denied

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/openapi.yaml

Content type: text/html
Transferred: 490 B
Decoded: 490 B
Duration: 76 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, application/yaml;q=0.9, application/x-yaml;q=0.9, text/yaml;q=0.8, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (23)

age: 0
cache-control: max-age=0, private
connection: [value stored]
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:05 GMT
etag: "ql5z5g"
expires: -1
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
strict-transport-security: max-age=31536000
transfer-encoding: [value stored]
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

GET 404 Access denied

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/openapi.yml

Content type: text/html
Transferred: 490 B
Decoded: 490 B
Duration: 73 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, application/yaml;q=0.9, application/x-yaml;q=0.9, text/yaml;q=0.8, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (23)

age: 0
cache-control: max-age=0, private
connection: [value stored]
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:05 GMT
etag: "p5ntgo"
expires: -1
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
strict-transport-security: max-age=31536000
transfer-encoding: [value stored]
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

GET 404 Access denied

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/auth.md

Content type: text/html
Transferred: 490 B
Decoded: 490 B
Duration: 72 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/markdown, text/plain;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (23)

age: 0
cache-control: max-age=0, private
connection: [value stored]
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:05 GMT
etag: "12zg3jw"
expires: -1
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
strict-transport-security: max-age=31536000
transfer-encoding: [value stored]
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

GET 404 Access denied

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/.well-known/oauth-authorization-server

Content type: text/html
Transferred: 490 B
Decoded: 490 B
Duration: 93 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (23)

age: 0
cache-control: max-age=0, private
connection: [value stored]
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:05 GMT
etag: "1n8c4xw"
expires: -1
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
strict-transport-security: max-age=31536000
transfer-encoding: [value stored]
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

GET 404 Access denied

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/index.md

Content type: text/html
Transferred: 490 B
Decoded: 490 B
Duration: 79 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/markdown, text/plain;q=0.8, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (23)

age: 0
cache-control: max-age=0, private
connection: [value stored]
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:05 GMT
etag: "10csig2"
expires: -1
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
strict-transport-security: max-age=31536000
transfer-encoding: [value stored]
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

GET 200 Transport failure

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/

Content type: text/html
Transferred: 205.6 KB
Decoded: 514.6 KB
Duration: 345 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: not exposed Digest: not exposed

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/markdown, text/plain;q=0.8, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (23)

age: 0
cache-control: private, no-cache, max-age=0
connection: [value stored]
content-encoding: gzip
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:05 GMT
etag: "18x9vmk"
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
strict-transport-security: max-age=31536000
transfer-encoding: [value stored]
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

GET 404 Access denied

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/.well-known/agent-readiness-probe/not-found-7b91e8d4

Content type: text/html
Transferred: 490 B
Decoded: 490 B
Duration: 70 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/problem+json, application/json;q=0.9, text/markdown;q=0.8, text/plain;q=0.5, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (23)

age: 0
cache-control: max-age=0, private
connection: [value stored]
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:06 GMT
etag: "10yiar6"
expires: -1
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
strict-transport-security: max-age=31536000
transfer-encoding: [value stored]
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

GET 404 Access denied

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/.well-known/agent-skills/index.json

Content type: text/html
Transferred: 490 B
Decoded: 490 B
Duration: 74 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (23)

age: 0
cache-control: max-age=0, private
connection: [value stored]
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:06 GMT
etag: "1sk5l10"
expires: -1
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
strict-transport-security: max-age=31536000
transfer-encoding: [value stored]
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

GET 404 Access denied

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/docs/llms.txt

Content type: text/html
Transferred: 490 B
Decoded: 490 B
Duration: 80 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/plain, text/markdown;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (23)

age: 0
cache-control: max-age=0, private
connection: [value stored]
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:06 GMT
etag: "9sbkkz"
expires: -1
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
strict-transport-security: max-age=31536000
transfer-encoding: [value stored]
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

GET 404 Access denied

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/api/llms.txt

Content type: text/html
Transferred: 490 B
Decoded: 490 B
Duration: 74 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/plain, text/markdown;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (23)

age: 0
cache-control: max-age=0, private
connection: [value stored]
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:06 GMT
etag: "1beh43g"
expires: -1
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
strict-transport-security: max-age=31536000
transfer-encoding: [value stored]
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

GET 404 Access denied

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/developers/llms.txt

Content type: text/html
Transferred: 490 B
Decoded: 490 B
Duration: 103 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/plain, text/markdown;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (23)

age: 0
cache-control: max-age=0, private
connection: [value stored]
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:06 GMT
etag: "xu50mr"
expires: -1
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
strict-transport-security: max-age=31536000
transfer-encoding: [value stored]
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

GET 404 Access denied

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/.well-known/agent-instructions.md

Content type: text/html
Transferred: 490 B
Decoded: 490 B
Duration: 111 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/markdown, text/plain;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (23)

age: 0
cache-control: max-age=0, private
connection: [value stored]
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:06 GMT
etag: "1n7kdmn"
expires: -1
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
strict-transport-security: max-age=31536000
transfer-encoding: [value stored]
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

GET 404 Access denied

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/agent-instructions.md

Content type: text/html
Transferred: 490 B
Decoded: 490 B
Duration: 75 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/markdown, text/plain;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (23)

age: 0
cache-control: max-age=0, private
connection: [value stored]
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:06 GMT
etag: "kqf0ta"
expires: -1
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
strict-transport-security: max-age=31536000
transfer-encoding: [value stored]
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

GET 404 Access denied

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/.well-known/ard.json

Content type: text/html
Transferred: 490 B
Decoded: 490 B
Duration: 74 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, application/ld+json;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (23)

age: 0
cache-control: max-age=0, private
connection: [value stored]
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:06 GMT
etag: "16dyjgt"
expires: -1
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
strict-transport-security: max-age=31536000
transfer-encoding: [value stored]
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

GET 404 Access denied

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/.well-known/ai-catalog.json

Content type: text/html
Transferred: 490 B
Decoded: 490 B
Duration: 84 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, application/ld+json;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (23)

age: 0
cache-control: max-age=0, private
connection: [value stored]
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:06 GMT
etag: "mrl08i"
expires: -1
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
strict-transport-security: max-age=31536000
transfer-encoding: [value stored]
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

HEAD 404 Access denied

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/.well-known/mcp

Content type: text/html
Transferred: 0 B
Decoded: 0 B
Duration: 78 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, text/event-stream;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (23)

age: 0
cache-control: max-age=0, private
connection: [value stored]
content-length: 28937
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:06 GMT
etag: "1t3xb7d"
expires: -1
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

GET 404 Access denied

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/.well-known/mcp/server-card.json

Content type: text/html
Transferred: 490 B
Decoded: 490 B
Duration: 74 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/mcp-server-card+json, application/json;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (23)

age: 0
cache-control: max-age=0, private
connection: [value stored]
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:06 GMT
etag: "1lzzmmf"
expires: -1
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
strict-transport-security: max-age=31536000
transfer-encoding: [value stored]
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

GET 404 Access denied

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/.well-known/mcp/manifest.json

Content type: text/html
Transferred: 490 B
Decoded: 490 B
Duration: 92 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (23)

age: 3
cache-control: max-age=0, private
connection: [value stored]
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:06 GMT
etag: "1pskjif"
expires: -1
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
strict-transport-security: max-age=31536000
transfer-encoding: [value stored]
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

GET 404 Access denied

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/.well-known/http-message-signatures-directory

Content type: text/html
Transferred: 490 B
Decoded: 490 B
Duration: 78 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (23)

age: 0
cache-control: max-age=0, private
connection: [value stored]
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:07 GMT
etag: "1votote"
expires: -1
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
strict-transport-security: max-age=31536000
transfer-encoding: [value stored]
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

GET 200 Transport failure

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/

Content type: text/html
Transferred: 205.5 KB
Decoded: 514.5 KB
Duration: 1.62 s

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: not exposed Digest: not exposed

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, text/markdown;q=0.9, text/plain;q=0.8, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (23)

age: 0
cache-control: private, no-cache, max-age=0
connection: [value stored]
content-encoding: gzip
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:08 GMT
etag: "19oggr6"
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
strict-transport-security: max-age=31536000
transfer-encoding: [value stored]
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

OPTIONS 404 Transport failure

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/checkout_sessions

Content type: text/html
Transferred: 10.4 KB
Decoded: 16.1 KB
Duration: 178 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: not exposed Digest: not exposed

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (24)

age: 0
cache-control: max-age=0, private
connection: [value stored]
content-encoding: gzip
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:08 GMT
etag: "sseej3"
expires: -1
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
strict-transport-security: max-age=31536000
transfer-encoding: [value stored]
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

OPTIONS 404 Transport failure

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/agentic_commerce/delegate_payment

Content type: text/html
Transferred: 10.4 KB
Decoded: 16.1 KB
Duration: 302 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: not exposed Digest: not exposed

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (24)

age: 1
cache-control: max-age=0, private
connection: [value stored]
content-encoding: gzip
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:09 GMT
etag: "1ye1qrv"
expires: -1
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
strict-transport-security: max-age=31536000
transfer-encoding: [value stored]
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

GET 404 Access denied

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/discovery/resources

Content type: text/html
Transferred: 490 B
Decoded: 490 B
Duration: 118 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (23)

age: 0
cache-control: max-age=0, private
connection: [value stored]
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:09 GMT
etag: "wjhfxl"
expires: -1
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
strict-transport-security: max-age=31536000
transfer-encoding: [value stored]
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

4 Web.link validation What evidence did this capture rule record? web.link_validation@1 · Finalize · attempt 1 Succeeded

Duration: 19 ms
Fetches: 0
Artifacts: 0
Observations: 4

Observed facts

links.agent_auth

100.0% confidence

Advertised count: 0
Probed count: 0
Reachable count: 0
Robots denied count: 0
Stale count: 0

links.docs_access

100.0% confidence

Gated count: 0
Login form count: 0
Public count: 0
Sampled count: 0
Unavailable count: 0

links.llms

100.0% confidence

Advertised count: 0
Broken count: 0
Homepage fallback count: 0
Probed count: 0
Resolved count: 0
Robots denied count: 0

links.public_api

100.0% confidence

Advertised: No
Machine readable response: No
Probed: No
Reachable: No
Successful response: No

5 Web.mcp inspection What evidence did this capture rule record? web.mcp_inspection@2 · Finalize · attempt 1 Succeeded

Duration: 25 ms
Fetches: 0
Artifacts: 0
Observations: 1

Observed facts

mcp.inspection

100.0% confidence

Advertised: No
Attempted: No
Candidate count: 0
Initialized notification accepted: No
Outcome: no_candidate
Session established: No

6 Web.nlweb inspection What evidence did this capture rule record? web.nlweb_inspection@1 · Finalize · attempt 1 Partial

Duration: 22 ms
Fetches: 1
Artifacts: 1
Observations: 1

Observed facts

nlweb.inspection

100.0% confidence

Outcome: fetch_error

HTTP transactions

OPTIONS 404 Transport failure

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/ask

Content type: text/html
Transferred: 10.4 KB
Decoded: 16.1 KB
Duration: 144 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: not exposed Digest: not exposed

Request headers (7)

accept: */*
user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (24)

age: 0
cache-control: max-age=0, private
connection: [value stored]
content-encoding: gzip
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:10 GMT
etag: "1tb6fi0"
expires: -1
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
strict-transport-security: max-age=31536000
transfer-encoding: [value stored]
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

7 Web.graphql inspection What evidence did this capture rule record? web.graphql_inspection@1 · Finalize · attempt 1 Partial

Duration: 22 ms
Fetches: 3
Artifacts: 3
Observations: 1

Observed facts

graphql.inspection

100.0% confidence

Auth required count: 0
Candidate count: 3
Checked count: 3
Outcome: fetch_error
Robots denied count: 0

HTTP transactions

OPTIONS 404 Transport failure

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/graphql

Content type: text/html
Transferred: 10.4 KB
Decoded: 16.1 KB
Duration: 78 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: not exposed Digest: not exposed

Request headers (7)

accept: */*
user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (24)

age: 0
cache-control: max-age=0, private
connection: [value stored]
content-encoding: gzip
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:10 GMT
etag: "mdfi1o"
expires: -1
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
strict-transport-security: max-age=31536000
transfer-encoding: [value stored]
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

OPTIONS 404 Transport failure

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/api/graphql

Content type: text/html
Transferred: 10.4 KB
Decoded: 16.1 KB
Duration: 92 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: not exposed Digest: not exposed

Request headers (7)

accept: */*
user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (24)

age: 0
cache-control: max-age=0, private
connection: [value stored]
content-encoding: gzip
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:10 GMT
etag: "1tv0kft"
expires: -1
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
strict-transport-security: max-age=31536000
transfer-encoding: [value stored]
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

OPTIONS 404 Transport failure

agent_readiness_req · Protocol not exposed

https://finance.yahoo.com/v1/graphql

Content type: text/html
Transferred: 10.4 KB
Decoded: 16.1 KB
Duration: 88 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: not exposed Digest: not exposed

Request headers (7)

accept: */*
user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: finance.yahoo.com

Response headers (24)

age: 0
cache-control: max-age=0, private
connection: [value stored]
content-encoding: gzip
content-security-policy: connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quar…
content-type: text/html; charset=utf-8
date: Thu, 03 Sep 2026 01:39:10 GMT
etag: "12sffpj"
expires: -1
permissions-policy: interest-cohort=()
referrer-policy: no-referrer-when-downgrade
report-to: [value stored]
server: ATS
strict-transport-security: max-age=31536000
transfer-encoding: [value stored]
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: [value stored]
x-envoy-decorator-operation: [value stored]
x-envoy-upstream-service-time: [value stored]
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sveltekit-page: [value stored]
x-xss-protection: [value stored]

8 Web.mcp apps inspection What evidence did this capture rule record? web.mcp_apps_inspection@1 · Finalize · attempt 1 Succeeded

Duration: 22 ms
Fetches: 0
Artifacts: 0
Observations: 1

Observed facts

mcp_apps.inspection

100.0% confidence

Candidate count: 0
Initialized notification accepted: No
Linked resource count: 0
Outcome: no_candidate
Session established: No

9 Web.developer tooling inspection What evidence did this capture rule record? web.developer_tooling_inspection@1 · Finalize · attempt 1 Succeeded

Duration: 19 ms
Fetches: 0
Artifacts: 0
Observations: 1

Observed facts

developer_tooling.inspection

100.0% confidence

Candidate count: 0
Candidate limit: 6
Cli link candidate count: 0
Inspected link count: 513
Install command count: 0
Install command present: No
Not found count: 0
Npm candidate count: 0

10 Web.repository inspection What evidence did this capture rule record? web.repository_inspection@1 · Finalize · attempt 1 Not applicable

Duration: 19 ms
Fetches: 0
Artifacts: 0
Observations: 1

Observed facts

repository.inspection

100.0% confidence

Candidate count: 0
Inspection complete: No
Outcome: no_candidate
Repository advertised: No
Root response valid: No

11 Web.mcp registry inspection What evidence did this capture rule record? web.mcp_registry_inspection@1 · Finalize · attempt 1 Succeeded

Duration: 22 ms
Fetches: 2
Artifacts: 2
Observations: 1

Observed facts

mcp_registry.inspection

100.0% confidence

Outcome: succeeded
Query available: Yes
Repository available: No

HTTP transactions

GET 404 Success

agent_readiness_req · Protocol not exposed

https://registry.modelcontextprotocol.io/robots.txt

Content type: application/problem+json
Transferred: 155 B
Decoded: 155 B
Duration: 94 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/plain, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: registry.modelcontextprotocol.io

Response headers (7)

connection: [value stored]
content-length: 155
content-type: application/problem+json
date: Thu, 03 Sep 2026 01:39:11 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin
x-content-type-options: nosniff

GET 200 Success

agent_readiness_req · Protocol not exposed

https://registry.modelcontextprotocol.io/v0.1/servers

Content type: application/json
Transferred: 4.9 KB
Decoded: 4.9 KB
Duration: 218 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: registry.modelcontextprotocol.io

Response headers (7)

connection: [value stored]
content-type: application/json
date: Thu, 03 Sep 2026 01:39:11 GMT
strict-transport-security: max-age=31536000; includeSubDomains
transfer-encoding: [value stored]
vary: Origin
x-registry-cache: [value stored]

12 Web.wikimedia inspection What evidence did this capture rule record? web.wikimedia_inspection@1 · Finalize · attempt 1 Succeeded

Duration: 25 ms
Fetches: 3
Artifacts: 3
Observations: 1

Observed facts

wikimedia.inspection

100.0% confidence

Direct wikidata link count: 0
Direct wikipedia link count: 0
Outcome: succeeded
Query available: Yes

HTTP transactions

GET 301 Transport failure

agent_readiness_req · Protocol not exposed

https://api.wikimedia.org/robots.txt

Content type: text/html
Transferred: 293 B
Decoded: 293 B
Duration: 66 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/plain, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: api.wikimedia.org

Response headers (19)

age: 13403
cache-control: max-age=2592000
content-length: 293
content-type: text/html; charset=iso-8859-1
date: Wed, 02 Sep 2026 21:55:48 GMT
expires: Fri, 02 Oct 2026 21:55:48 GMT
location: [value stored]
nel: [value stored]
report-to: [value stored]
server: mw-web.eqiad.main-d57bc6b79-rxwh4
server-timing: [value stored]
set-cookie: [REDACTED]
strict-transport-security: max-age=106384710; includeSubDomains; preload
vary: X-Forwarded-Proto
x-analytics: [value stored]
x-cache: [value stored]
x-cache-status: [value stored]
x-client-ip: [value stored]
x-request-id: [value stored]

GET 200 Success

agent_readiness_req · Protocol not exposed

https://api.wikimedia.org/core/v1/wikidata/search/page

Content type: application/json
Transferred: 792 B
Decoded: 2.6 KB
Duration: 171 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: api.wikimedia.org

Response headers (21)

access-control-allow-origin: [value stored]
age: 0
cache-control: no-cache
content-encoding: gzip
content-length: 792
content-type: application/json
date: Thu, 03 Sep 2026 01:39:12 GMT
nel: [value stored]
report-to: [value stored]
server: mw-api-ext.eqiad.main-7cb9f9446f-z75w6
server-timing: [value stored]
set-cookie: [REDACTED]
strict-transport-security: max-age=106384710; includeSubDomains; preload
vary: x-restbase-compat, Accept-Encoding
x-analytics: [value stored]
x-cache: [value stored]
x-cache-status: [value stored]
x-client-ip: [value stored]
x-content-type-options: nosniff
x-request-id: [value stored]
x-search-id: [value stored]

GET 200 Success

agent_readiness_req · Protocol not exposed

https://api.wikimedia.org/core/v1/wikidata/page/Q4053432/html

Content type: text/html
Transferred: 9.9 KB
Decoded: 122.3 KB
Duration: 158 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/html
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: api.wikimedia.org

Response headers (25)

access-control-allow-origin: [value stored]
age: 0
cache-control: no-cache
content-encoding: gzip
content-language: en
content-revision-id: [value stored]
content-type: text/html; charset=utf-8; profile="https://www.mediawiki.org/wiki/Specs/HTML/0.0.0"
date: Thu, 03 Sep 2026 01:39:12 GMT
etag: W/"2539271284/497b94a9-a663-11f1-b610-83721712e9ff/view/html+lang:en-us"
last-modified: Wed, 02 Sep 2026 00:14:36 GMT
nel: [value stored]
report-to: [value stored]
server: mw-api-ext.eqiad.main-7cb9f9446f-hv64k
server-timing: [value stored]
set-cookie: [REDACTED]
strict-transport-security: max-age=106384710; includeSubDomains; preload
transfer-encoding: [value stored]
vary: Accept-Language,x-restbase-compat, Accept-Encoding
x-analytics: [value stored]
x-cache: [value stored]
x-cache-status: [value stored]
x-client-ip: [value stored]
x-content-type-options: nosniff
x-mediawiki-render-id: [value stored]
x-request-id: [value stored]

13 Web.skills sh inspection What evidence did this capture rule record? web.skills_sh_inspection@1 · Finalize · attempt 1 Succeeded

Duration: 20 ms
Fetches: 0
Artifacts: 0
Observations: 1

Observed facts

skills_sh.inspection

100.0% confidence

Direct skills link count: 0
Github association count: 0
Outcome: succeeded

14 Web.ranked search inspection What evidence did this capture rule record? web.ranked_search_inspection@1 · Finalize · attempt 1 Partial

Duration: 20 ms
Fetches: 0
Artifacts: 0
Observations: 1

Observed facts

ranked_search.inspection

100.0% confidence

Brand: Yahoo Finance
Brand source: og:site_name
Category: 401k Business Financial Information
Category source: meta_keywords
Outcome: provider_unconfigured
Provider: brave_web_search
Provider api version: 2023-10-11
Query template revision: 1

15 Web.http semantics What evidence did this capture rule record? web.http_semantics@1 · Extract · attempt 1 Succeeded

Duration: 17 ms
Fetches: 0
Artifacts: 0
Observations: 1

Observed facts

http.semantics

100.0% confidence

Attempt count: 1
Cross origin redirect count: 0
Final status: 200
Https downgrade count: 0
Outcome: success
Redirect count: 0
Transport available: Yes

16 Web.response semantics What evidence did this capture rule record? web.response_semantics@1 · Extract · attempt 1 Succeeded

Duration: 25 ms
Fetches: 0
Artifacts: 0
Observations: 1

Observed facts

response.semantics

100.0% confidence

Available: Yes
Content type: text/html
Status: 200

17 HTML extraction What structure can an agent extract from the HTML? web.html_extract@4 · Extract · attempt 1 Succeeded

Duration: 20 ms
Fetches: 0
Artifacts: 0
Observations: 10

Observed facts

html.accessibility

90.0% confidence

Structured evidence was stored. This view has no safe summary for it yet.

html.content

100.0% confidence

Visible chars: 14901
Estimated tokens: 3726
Has pricing language: Yes
Has api language: No

html.discovery

100.0% confidence

Structured evidence was stored. This view has no safe summary for it yet.

html.forms

100.0% confidence

Forms: 2
Controls: 50
Controls missing name: 1

html.images

100.0% confidence

Total: 61
Missing alt: 0

html.links

100.0% confidence

Total: 513
Missing name: 56

html.metadata

100.0% confidence

Title: Yahoo Finance - Stock Market Live, Quotes, Business & Finance News
Description: At Yahoo Finance, you get free stock quotes, up-to-date news, portfolio management resources, international market data, social interaction and mortgage rates that help you manage your financial life.
Language: en-US
Charset: utf-8
Canonical: https://finance.yahoo.com/
Json ld blocks: 1
Json ld valid blocks: 1

html.structure

100.0% confidence

H1: 2
H2: 7
H3: 84
Landmarks: 19
Lists: 55
Tables: 0
Visible chars: 14901
Estimated tokens: 3726

html.structured_data

100.0% confidence

Blocks: 1
Valid blocks: 1
Invalid blocks: 0
Entity count: 1
Type count: 1
Same as count: 0
Organization count: 0
Organization field count: 0

html.web_mcp

90.0% confidence

Complete declarative tool count: 0
Declarative element count: 0
Document registration count: 0
Model context reference count: 0
Navigator registration count: 0

Immutable scan identity

Capture profile: static@27
Rule set: web-capture@27
Time bucket: 2026-09-03 01:39:00 UTC
Scan ID: 06cd0865-3ef0-4161-8743-b56669593073

Versioned evidence first

A later criteria version can evaluate this same stored scan without changing what the scanner observed.

Open this exact snapshot

Give your team a clear next step.

Share this report, apply the relevant changes, then scan again to check the result.

finance.yahoo.com

What to fix first

Publish a usable API contract

Public API documentation is linked

Developer portal

OpenAPI document is published

API catalog

MCP well-known discovery

MCP server or manifest

MCP server card

Official MCP Registry listing

Starting example

Document the access method

Starting example

OAuth protected resource metadata

OAuth 2.0 support

Scoped permissions

OAuth authorization-server metadata

auth.md exists

Agent auth discovery metadata

Starting example

Make page controls readable

Starting example

Accessible document structure

Native interactive controls

Accessible names on controls

Form control labeling

Starting example

Link the resources agents can use

Starting example

A2A Agent Card

Universal Commerce Protocol

Agent onboarding friction

Starting example

Publish valid structured data

Starting example

JSON-LD entity linking

Organization schema completeness

Schema type breadth

Starting example

What this scan found

All results

What the scanner tested

Observed facts

HTTP transactions

Observed facts

HTTP transactions

Observed facts

HTTP transactions

Observed facts

Observed facts

Observed facts

HTTP transactions

Observed facts

HTTP transactions

Observed facts

Observed facts

Observed facts

Observed facts

HTTP transactions

Observed facts

HTTP transactions

Observed facts

Observed facts

Observed facts

Observed facts

Observed facts

Give your team a clear next step.