Permit
permit.io · Auth & Identity · Scanned 5w ago
15/ 100
F Not ready yet · #1289 of 2371
11 priority checks need attention
Permit has early payment signals, but needs clearer documentation.
Agent access21/100
Payment readiness0/100
Overall readiness15/100
Overall readiness is 70% agent access and 30% payment readiness. The evidence level above separately shows whether a payment was actually executed.
Payment checks
See what works, what needs fixing, and the evidence behind each result.
Paid endpoint discovery
Needs fixNo public x402 paid API endpoint was found.
0/1
Payment challenge
Needs fixNo unpaid test request returned a valid x402 payment challenge.
0/1
Static challenge hygiene
Needs fixRecommendedNo x402 payment challenge was available to check for safe caching.
0/1
Paid service discovery
Needs fixThe paid MPP service was found, but agents need a public OpenAPI file that lists the paid operations.
0/3
Payment challenge
Needs fixThe endpoint did not return an MPP Payment challenge.
0/1
Static challenge hygiene
Needs fixThe challenge does not include enough request-bound payment terms to verify it safely.
0/2
UCP commerce contract
Needs fixNo usable UCP setup file was found.
0/3
Keys and service endpoints
Needs fixNo UCP service URLs could be checked because the UCP setup file is missing or invalid.
0/1
ACP discovery
Needs fixNo valid ACP discovery file was found.
0/1
Checkout flow
Needs fixThe ACP checkout docs are missing required checkout actions.
0/2
Request security
Needs fixThe ACP API is missing required request safety headers.
0/2
AP2 discovery
Needs fixNo AP2 connection was found in a UCP file or A2A agent card.
0/1
Authorization proof
Needs fixThe AP2 permission forms and signature details are incomplete.
0/3
Payment and dispute records
Needs fixThe AP2 records do not show how the permission links to the payment, order, receipt, refund, or dispute.
0/2
AI content-use preferences
Needs fixNo Content Signals found in robots.txt
0/1
AI crawler access
PassedNo AI-specific bot rules; wildcard rules apply to all crawlers including AI bots
1/1
Authenticated bot identity
Not detectedWeb Bot Auth directory returned HTML instead of JSON (informational only)
Markdown availability
Needs fixSite does not support Markdown for Agents
0/1
Agent discovery DNS
Needs fixDNS records that help agents find agent files were not found.
0/1
Agent discovery links
Needs fixNo Link headers found on target page
0/1
robots.txt
Passedrobots.txt exists with valid format
1/1
Sitemap
Passedsitemap.xml exists with valid structure
1/1
A2A agent card
Not detectedThis check was excluded from scoring for this scan.
Agent Skills index
Needs fixAgent Skills index returned HTML instead of JSON
0/1
API catalog
Needs fixAPI Catalog returned HTML instead of JSON
0/1
Ard
Not detectedThis check was excluded from scoring for this scan.
Agent authentication guidance
Needs fixauth.md returned HTML instead of Markdown
0/1
MCP server discovery
Needs fixMCP Server Card not found
0/1
OAuth sign-in discovery
Needs fixOAuth sign-in setup metadata was not found.
0/1
Protected API metadata
Needs fixOAuth API access metadata was not found.
0/1
Browser tools (WebMCP)
Needs fixNo WebMCP tools detected on page load
0/1
Unlock analytics
See Permit's score trend, layer rankings, and competitive position.