Is workos.com agent ready?
workos.com is largely agent ready: it scores 71/100 (grade B) on the w2agent rubric.
Changed since last check
+1 points since the previous check (2026-09-15)
Fixed: Content negotiation (Markdown)
Regressed: Response time
Category scores
Category breakdown not recorded for this audit.
Agent protocol panel
- A2A agent cardNot found
- OAuth discoveryPresent
- MCP discoveryPresent
- llms.txt validityPresent
Check results
Bot Accessibility
- ✓No error status codespass
- ~Response timepartial
- ✓XML sitemap existspass
- ✓AI agent accesspass
- ✓Edge treatment of agent user-agentstracked, not scoredpass
- ✓robots.txt existspass
- ✓Content negotiation (Markdown)pass
- —Declared AI usage preferencestracked, not scoredskip
Structured Data
- ✓OpenGraph meta tagspass
- ~Semantic HTML elementspartial
- ~Appropriate Schema.org typepartial
- ✓JSON-LD validpass
- ~Heading hierarchypartial
- ~Schema.org JSON-LD presentpartial
- ~Schema.org completenesspartial
Content Quality
- ✓FAQ contentpass
- ~Answer-first contentpartial
- ✓Content lengthpass
- ✓Token efficiency (HTML-to-text ratio)pass
- ~Freshness signalspartial
- ~Author attributionpartial
- ✓Citation readinesspass
- ✓Lists and tables for structured infopass
Agent Discovery
- ✓llms.txt follows specpass
- ✓llms.txt existspass
- —MCP server cardtracked, not scoredskip
- ✓Markdown alternate linkspass
- ✗/.well-known/agent-card.jsonfail
- ✓llms.txt links resolvepass
Agent Protocols
- ✓Discoverable API endpointspass
- ✓MCP endpointpass
- ✗Action schemasfail
- —/.well-known/ucpskip
- ~Structured formspartial
- ✓WebMCP imperative APItracked, not scoredpass
- —WebMCP declarative APItracked, not scoredskip
- ✓Reachable as Google-Agentpass
- ✓Reachable as ChatGPT-Userpass
- ✓Reachable as Perplexity-Userpass
Agent Auth
- —MCP authorization (401 challenge → protected resource metadata)skip
- ✓PKCE S256 supportpass
- ✓Public API surfacepass
- ✓Client ID Metadata Documents (bonus)pass
- ✗OpenAPI specificationfail
- ✓Agent/bot auth documentationpass
- ✓OAuth discovery chain (RFC 9728 → RFC 8414)pass
- ✓Developer portalpass
- ~Scoped API permissionspartial
- ✗API catalog (RFC 9727)fail
- —Agent operator signing directorytracked, not scoredskip
Technical
- ✓HTTPSpass
- ✓UTF-8 charsetpass
- ✓Canonical URLspass
- ✓Mobile viewportpass
- ✓Content accessible without JSpass
- ~Security headerspartial
Other
- ✗nextjs-metadata-apifail
- ~nextjs-static-generationpartial
- ✗nextjs-well-known-servedfail
- —local-business-hours-jsonldskip
- —local-business-nap-structuredskip
- —local-business-booking-accessibleskip
Score history
- 71/100 · rubric v3.0
- 70/100 · rubric v3.0
- 63/100 · rubric v2.0
- 61/100 · rubric v2.0
- 61/100 · rubric v2.0
- 59/100 · rubric v2.0
- 56/100 · rubric v2.0
- 51/100 · rubric v2.0
- 50/100 · rubric v2.0
- 47/100 · rubric v2.0
- 55/100 · rubric v2.0
- 46/100 · rubric v2.0
- 46/100 · rubric v2.0
- 51/100 · rubric v2.0
- 60/100 · rubric v2.0
- 60/100 · rubric v2.0
- 54/100 · rubric v2.0