Agent Readiness Score

alpaca.markets

40 — Developing. Agents can find parts of this site, but key capabilities are hard to reach.

45 of 45 checks conclusive · Confidence High · Evidence coverage 100%

HonestClaw measured how well alpaca.markets's site and APIs work for AI agents — across 9 dimensions and 45 automated checks.

Open interactive report →

Dimensions

Discoverability6.6/24

Content Accessibility12.6/24

Bot Access Control0/12

Protocol & Capability Discovery24.4/41

Authentication & Credentials9/19

Documentation Quality0.5/10

Structured Data I/O8/13

Observable State & Reliability0.7/15

Agent Safety & Trust6.2/11

Checks

Discoverability

Subdomain sweepsubdomain-sweepAn agent-relevant subdomain is live and serves its expected content kind (docs.alpaca.markets).Parseable

robots.txtrobots-txtNo robots.txt found (or the path returned an HTML page).Not detected

sitemap.xmlsitemap-xmlhttps://alpaca.markets/sitemap.xml is a valid sitemap (7 location(s)), but without lastmod or non-homepage URLs.Parseable

Canonical domaincanonical-domainRoot and www converge on a single canonical host (alpaca.markets).Parseable

API existenceapi-existenceA real API surface is declared at https://docs.alpaca.markets/us/openapi/broker-api.json: the spec lists servers and paths. (source: spec)Parseable

API catalogapi-catalogAPI Catalog discovered via a rel="api-catalog" Link header at https://docs.alpaca.markets/us/.well-known/api-catalog.Detected

API versioningapi-versioningThe API version is declared in the spec (info.version) at https://docs.alpaca.markets/us/openapi/broker-api.json. (source: spec)Parseable

Content Accessibility

llms.txtllms-txtA curated llms.txt index is published on a non-top subdomain at https://docs.alpaca.markets/llms.txt: 722 links across 9 sections. Its credit is capped at useful because it is not published on the main domain.Useful

llms-full.txtllms-full-txtNo llms-full.txt file found (HTML pages at .txt paths do not qualify).Not detected

Freshness signalsfreshness-signalsNo freshness signals found (no Last-Modified, ETag, or sitemap lastmod).Not detected

Crawl-cost estimatecrawl-cost-estimateInformational — not scoredSitemap index declares 7 child sitemap(s) — crawl cost is not directly observable from the index alone.Parseable

Raw content extractabilityraw-content-extractabilityReadable content is extractable without JavaScript on 2 probed surface(s) with a strong main-content ratio (60% on the homepage).Cross-verified

ai.txtai-txtNo ai.txt file found (HTML pages at .txt paths do not qualify).Not detected

Markdown twinmarkdown-twinA markdown twin is published at https://docs.alpaca.markets/us.md alongside the docs HTML surface (https://docs.alpaca.markets/us/).Parseable

Bot Access Control

AI bot rulesai-bot-rulesNo robots.txt was found (missing, or not servable as plain text), so no AI-bot rules are declared.Not detected

Content signalscontent-signalsNo robots.txt was found (missing, or not servable as plain text), so no Content Signals are declared.Not detected

RSL licensingrslrobots.txt is readable but declares no RSL License directive.Not detected

TDM reservationtdmrepNo TDMRep policy found at /.well-known/tdmrep.json.Not detected

Protocol & Capability Discovery

MCP descriptormcp-descriptorInformational — not scoredNo MCP descriptor found at the standard locations an agent would check.Not detected

.well-known indexwell-known-indexNo non-owned /.well-known/ descriptors found.Not detected

MCP Server Cardmcp-server-cardAn MCP Server Card at https://docs.alpaca.markets/.well-known/mcp/server-card.json declares 1 remote endpoint(s) agents can connect to.Useful

A2A Agent Carda2a-agent-cardNo A2A Agent Card found at the standard well-known locations.Not detected

MCP supportmcp-supportFirst-party documentation at https://docs.alpaca.markets/us/docs/broker-mcp-server identifies the MCP endpoint https://broker-api.alpaca.markets/mcp and explains both its capabilities and how clients connect or authenticate.Cross-verified

DNS-AIDdns-aidNo DNS-AID index found at _index._agents.alpaca.markets.Not detected

GraphQL surfacegraphql-surfaceNo GraphQL transport surface found at conventional paths (GET-only; no introspection issued).Not detected

Auth discoveryauth-discoveryA drivable auth-discovery descriptor is published.Useful

SDK availabilitysdk-availabilitySDK libraries page at https://docs.alpaca.markets/us/docs/sdks-and-tools: 9 GitHub repos, 4 registry links, 0 install commands (13 pointers).Cross-verified

OpenAPI specificationopenapi-specValid OpenAPI 3.1.2 spec at https://docs.alpaca.markets/us/openapi/broker-api.json: 154 operations, 324 schemas, 100% response coverage, servers declared.Cross-verified

Link headerslink-headersAn agent-relevant Link rel (api-catalog) resolves to a live resource at https://docs.alpaca.markets/us/.well-known/api-catalog.Cross-verified

Rate limit documentationrate-limit-docsA rate-limit documentation page exists at https://docs.alpaca.markets/us/docs/broker-api-rate-limits, but it doesn't state a concrete limit alongside a rate-limit response header.Parseable

WebMCPwebmcpInformational — not scoredWebMCP browser probing is not yet available in this scanner release.Couldn't verify

Authentication & Credentials

Programmatic auth flowprogrammatic-auth-flowA programmatic auth flow is documented at https://docs.alpaca.markets/us/docs/authentication, naming a non-interactive grant and a token endpoint. To reach the top level, it would need scopes and token expiry/refresh documented.Useful

Auth documentationauth-documentationAuthentication is fully documented at https://docs.alpaca.markets/us/docs/authentication, naming complete method(s) and how they are sent, corroborated across surfaces or covering multiple methods.Cross-verified

Credential managementcredential-managementNo credential management documentation found at the standard docs locations an agent would check.Not detected

Sandbox environmentsandbox-environmentA test environment is mentioned at https://docs.alpaca.markets/in-giftcity/reference/demodepositfunding.md, but not on a page dedicated to documenting it.Detected

Documentation Quality

API reference depthapi-reference-depthAPI reference content is mentioned at https://docs.alpaca.markets/us/reference/corporateactions-1, but not on a dedicated reference page.Detected

Changelog presencechangelog-presenceNo changelog or release notes found at the standard docs locations an agent would check.Not detected

Structured Data I/O

Structured data I/Ostructured-data-ioThe spec at https://docs.alpaca.markets/us/openapi/broker-api.json declares typed, consistent response schemas (87% of operations) with a pagination pattern and a structured error envelope. (source: spec)Cross-verified

Machine-readable pricingmachine-readable-pricingNo machine-readable pricing endpoint found (HTML pricing pages do not qualify).Not detected

Data export APIdata-export-apiNo data export or bulk API documentation found at the standard docs locations an agent would check.Not detected

Observable State & Reliability

Status & health endpointsstatus-and-healthStatus page found at https://status.alpaca.markets/ (HTTP 200).Detected

Retry & idempotencyretry-and-idempotencyNo retry or idempotency documentation found at the standard docs locations an agent would check.Not detected

Webhook documentationwebhook-documentationNo webhook or event documentation found at the standard docs locations an agent would check.Not detected

Error documentationerror-documentationError handling is mentioned at https://forum.alpaca.markets/t/rate-limit-http-429-errors/6885, but not on a page dedicated to documenting it.Detected

Machine payments (x402/MPP)x402-or-mpp-supportInformational — not scoredNo machine-payment signal observed (no HTTP 402, no payment-required response header, and no /.well-known/x402.json manifest). Payment support cannot be ruled out from an unauthenticated probe.Couldn't verify

Agent Safety & Trust

security.txtsecurity-txtNo security.txt found at /.well-known/security.txt or /security.txt.Not detected

Legal policy pageslegal-pagesAt least one legal policy page is discoverable.Detected

Org identity signalsorg-identityHomepage exposes legal name, address, support contact, and social profile links.Cross-verified

Metadata consistencymetadata-consistencyHomepage metadata (canonical, Open Graph, schema) is present and consistent.Cross-verified