HonestClaw
What is Agent Readiness?

Agent Readiness Score

authy.com

29 — Limited. Agents will struggle to discover or use this site without human help.

44 of 45 checks conclusive · Confidence High · Evidence coverage 98%

HonestClaw measured how well authy.com's site and APIs work for AI agents — across 9 dimensions and 45 automated checks.

Dimensions

Discoverability6.1/24
Content Accessibility8.8/24
Bot Access Control0/12
Protocol & Capability Discovery6.8/36
Authentication & Credentials6.3/19
Documentation Quality6.8/10
Structured Data I/O2.8/13
Observable State & Reliability5.5/15
Agent Safety & Trust4.2/11

Checks

Discoverability

Subdomain sweepsubdomain-sweepBoth an API-family and a docs-family subdomain are live (api.authy.com, docs.authy.com).Useful
Canonical domaincanonical-domainRoot and www converge on www.authy.com, with a canonical tag on the homepage.Useful
robots.txtrobots-txtNo robots.txt found (or the path returned an HTML page).Not detected
sitemap.xmlsitemap-xmlhttps://www.authy.com/sitemap.xml is a valid sitemap with lastmod and real (non-homepage) URLs.Useful
API existenceapi-existenceA conventional API path at https://api.authy.com/api returned an auth challenge (HTTP 403). (source: live)Detected
API catalogapi-catalogNo RFC 9727 API Catalog found at /.well-known/api-catalog.Not detected
API versioningapi-versioningNo versioning signal found (no spec info.version, version header, /vN API surface, or versioning docs).Not detected

Content Accessibility

Markdown twinmarkdown-twinA markdown twin is published at https://www.twilio.com/docs.md alongside the docs HTML surface (https://www.twilio.com/docs).Parseable
Freshness signalsfreshness-signalsFreshness signals present: Last-Modified header, ETag header, sitemap lastmod.Useful
Crawl-cost estimatecrawl-cost-estimateInformational — not scoredA manageable sitemap (19 page URLs) helps agents estimate crawl cost.Useful
llms.txtllms-txtNo llms.txt file found (HTML pages at .txt paths do not qualify).Not detected
llms-full.txtllms-full-txtNo llms-full.txt file found (HTML pages at .txt paths do not qualify).Not detected
ai.txtai-txtNo ai.txt file found (HTML pages at .txt paths do not qualify).Not detected
Raw content extractabilityraw-content-extractabilityModerate-to-strong main content (72% of visible text) is extractable from raw HTML on the homepage.Useful

Bot Access Control

AI bot rulesai-bot-rulesNo robots.txt was found (missing, or not servable as plain text), so no AI-bot rules are declared.Not detected
Content signalscontent-signalsNo robots.txt was found (missing, or not servable as plain text), so no Content Signals are declared.Not detected
RSL licensingrslrobots.txt is readable but declares no RSL License directive.Not detected
TDM reservationtdmrepNo TDMRep policy found at /.well-known/tdmrep.json.Not detected

Protocol & Capability Discovery

MCP descriptormcp-descriptorInformational — not scoredNo MCP descriptor found at the standard locations an agent would check.Not detected
Link headerslink-headersNo RFC 8288 Link headers found on any probed response.Not detected
OpenAPI specificationopenapi-specNo OpenAPI/Swagger specification found.Not detected
DNS-AIDdns-aidNo DNS-AID index found at _index._agents.authy.com.Not detected
A2A Agent Carda2a-agent-cardNo A2A Agent Card found at the standard well-known locations.Not detected
MCP Server Cardmcp-server-cardNo MCP Server Card found at the standard locations an agent would check.Not detected
MCP supportmcp-supportA first-party MCP support page exists at https://www.twilio.com/docs/ai/mcp, but it does not identify a concrete HTTPS MCP endpoint or fully establish a company-operated service.Parseable
.well-known indexwell-known-indexNo non-owned /.well-known/ descriptors found.Not detected
GraphQL surfacegraphql-surfaceNo GraphQL transport surface found at conventional paths (GET-only; no introspection issued).Not detected
SDK availabilitysdk-availabilitySDK libraries page at https://www.twilio.com/docs/authy: 4 GitHub repos, 0 registry links, 0 install commands (4 pointers).Cross-verified
Rate limit documentationrate-limit-docsNo rate limit documentation found at the standard docs locations an agent would check.Not detected
WebMCPwebmcpInformational — not scoredWebMCP browser probing is not yet available in this scanner release.Couldn't verify
Auth discoveryauth-discoveryCould not conclusively check for an auth-discovery surface (unreachable, rate-limited, or behind auth).Couldn't verify

Authentication & Credentials

Credential managementcredential-managementCredential management is documented at https://www.twilio.com/docs/usage/security, covering how to rotate or revoke credentials. To reach the top level, it would need rotation, revocation, and scoping/expiry all documented.Useful
Sandbox environmentsandbox-environmentNo sandbox or test environment documentation found at the standard docs locations an agent would check.Not detected
Programmatic auth flowprogrammatic-auth-flowNo programmatic authentication documentation found at the standard docs locations an agent would check.Not detected
Auth documentationauth-documentationAuthentication is documented at https://www.twilio.com/docs/authy/psd2-compliant-authentication-authy with the specific detail an agent needs — the credential and how it is sent. To reach the top level, it would need to corroborate against another surface or document more than one complete method.Useful

Documentation Quality

API reference depthapi-reference-depthAn API reference page exists at https://www.twilio.com/docs, but it doesn't show parameters with example requests and responses.Parseable
Changelog presencechangelog-presenceA changelog is published at https://www.twilio.com/en-us/changelog with multiple recent dated entries, indicating it is actively maintained.Cross-verified

Structured Data I/O

Structured data I/Ostructured-data-ioNo published structured-data contract found (no typed spec response schemas).Not detected
Machine-readable pricingmachine-readable-pricingNo machine-readable pricing endpoint found (HTML pricing pages do not qualify).Not detected
Data export APIdata-export-apiA data export API is documented at https://www.twilio.com/docs/authy/export-api-for-authy-user-phone-numbers with a bulk/export endpoint or export format. To reach the top level, it would need a bulk endpoint, async-job or pagination, and a stated export format.Useful

Observable State & Reliability

Status & health endpointsstatus-and-healthA health or status endpoint exists but is gated (returned 401/403).Detected
Webhook documentationwebhook-documentationA webhook documentation page exists at https://www.twilio.com/docs/authy/api/webhooks, but it doesn't list specific event types with their payload shape.Parseable
Retry & idempotencyretry-and-idempotencyNo retry or idempotency documentation found at the standard docs locations an agent would check.Not detected
Error documentationerror-documentationErrors are documented at https://www.twilio.com/docs/authy/return-and-error-codes with specific codes or a documented response shape. To reach the top level, it would need recovery guidance and a machine-readable error format, or corroboration against the API spec.Useful
Machine payments (x402/MPP)x402-or-mpp-supportInformational — not scoredNo machine-payment signal observed (no HTTP 402, no payment-required response header, and no /.well-known/x402.json manifest). Payment support cannot be ruled out from an unauthenticated probe.Couldn't verify

Agent Safety & Trust

security.txtsecurity-txtNo security.txt found at /.well-known/security.txt or /security.txt.Not detected
Org identity signalsorg-identityHomepage exposes three org-identity signal types (legal_name, support_email, social).Useful
Metadata consistencymetadata-consistencyOne metadata consistency warning: canonical_mismatch.Useful
Legal policy pageslegal-pagesNo terms, privacy, or data-use policy pages found at conventional paths.Not detected