Agent Readiness Score
brex.com
51 — Developing. Agents can find parts of this site, but key capabilities are hard to reach.
HonestClaw measured how well brex.com's site and APIs work for AI agents — across 9 dimensions and 45 automated checks.
Dimensions
Discoverability14.2/24
Content Accessibility14.7/24
Bot Access Control0/12
Protocol & Capability Discovery17/41
Authentication & Credentials12.8/19
Documentation Quality5/10
Structured Data I/O8/13
Observable State & Reliability7.6/15
Agent Safety & Trust7.4/11
Checks
Discoverability
Subdomain sweepsubdomain-sweepAn agent-relevant subdomain is live and serves its expected content kind (developer.brex.com).Parseable
Canonical domaincanonical-domainRoot and www converge on www.brex.com, with a matching canonical tag.Cross-verified
robots.txtrobots-txtrobots.txt at https://brex.com/robots.txt declares a sitemap. Declared sitemap https://www.brex.com/sitemap/sitemap.xml resolves as valid XML.Cross-verified
sitemap.xmlsitemap-xmlhttps://www.brex.com/sitemap/sitemap.xml is a valid sitemap (2335 location(s)), but without lastmod or non-homepage URLs.Parseable
API existenceapi-existenceA real API surface is declared at https://developer.brex.com/_bundle/openapi/accounting_api.yaml: the spec lists servers and paths. (source: spec)Parseable
API catalogapi-catalogAPI Catalog found at https://developer.brex.com/.well-known/api-catalog (JSON).Detected
API versioningapi-versioningThe API version lifecycle is documented at https://developer.brex.com/guides/versioning, including deprecation/sunset. (source: docs)Cross-verified
Content Accessibility
Raw content extractabilityraw-content-extractabilityModerate-to-strong main content (61% of visible text) is extractable from raw HTML on the homepage.Useful
Freshness signalsfreshness-signalsA single freshness signal is present (ETag header).Parseable
Crawl-cost estimatecrawl-cost-estimateInformational — not scoredSitemap declares 2335 page URLs — moderate crawl cost; agents should budget accordingly.Parseable
llms.txtllms-txtA curated llms.txt index is published at https://www.brex.com/llms.txt: 2050 links across 15 sections.Cross-verified
llms-full.txtllms-full-txtA comprehensive llms-full.txt is published at https://brex.com/llms-full.txt with 561,101 chars across 17 sections.Cross-verified
ai.txtai-txtNo ai.txt file found (HTML pages at .txt paths do not qualify).Not detected
Markdown twinmarkdown-twinNo markdown twin found alongside probed docs HTML surfaces.Not detected
Bot Access Control
AI bot rulesai-bot-rulesrobots.txt is readable but declares no AI-bot-specific rules.Not detected
Content signalscontent-signalsrobots.txt is readable but declares no Content-Signal line.Not detected
RSL licensingrslrobots.txt is readable but declares no RSL License directive.Not detected
TDM reservationtdmrepNo TDMRep policy found at /.well-known/tdmrep.json.Not detected
Protocol & Capability Discovery
MCP descriptormcp-descriptorInformational — not scoredNo MCP descriptor found at the standard locations an agent would check.Not detected
MCP supportmcp-supportFirst-party documentation at https://developer.brex.com/docs/mcp identifies the MCP endpoint https://api.brex.com/mcp and explains both its capabilities and how clients connect or authenticate.Cross-verified
MCP Server Cardmcp-server-cardNo MCP Server Card found at the standard locations an agent would check.Not detected
SDK availabilitysdk-availabilityNo SDK or client library documentation found.Not detected
A2A Agent Carda2a-agent-cardNo A2A Agent Card found at the standard well-known locations.Not detected
DNS-AIDdns-aidNo DNS-AID index found at _index._agents.brex.com.Not detected
GraphQL surfacegraphql-surfaceNo GraphQL transport surface found at conventional paths (GET-only; no introspection issued). Blocked by robots.txt for a generic compliant agent (Disallow: /api/).Not detected
.well-known indexwell-known-indexNo non-owned /.well-known/ descriptors found.Not detected
Auth discoveryauth-discoveryA drivable auth-discovery descriptor is published.Useful
Link headerslink-headersNo RFC 8288 Link headers found on any probed response. Blocked by robots.txt for a generic compliant agent (Disallow: /api/).Not detected
OpenAPI specificationopenapi-specValid OpenAPI 3.0.0 spec at https://developer.brex.com/_bundle/openapi/accounting_api.yaml: 6 operations, 19 schemas, 100% response coverage, servers declared.Cross-verified
Rate limit documentationrate-limit-docsRate limits are documented at https://developer.brex.com/guides/rate_limits with a concrete limit and rate-limit response headers. To reach the top level, it would need 429 handling, Retry-After guidance, and tier/plan differences.Useful
WebMCPwebmcpInformational — not scoredWebMCP browser probing is not yet available in this scanner release.Couldn't verify
Authentication & Credentials
Sandbox environmentsandbox-environmentNo sandbox or test environment documentation found at the standard docs locations an agent would check.Not detected
Credential managementcredential-managementCredential management is documented at https://developer.brex.com/guides/authentication, covering how to rotate or revoke credentials. To reach the top level, it would need rotation, revocation, and scoping/expiry all documented.Useful
Programmatic auth flowprogrammatic-auth-flowA programmatic auth flow is fully documented at https://developer.brex.com/guides/partner_authentication, with a non-interactive grant, token endpoint, scopes, and token expiry/refresh.Cross-verified
Auth documentationauth-documentationAuthentication is fully documented at https://developer.brex.com/guides/partner_authentication, naming complete method(s) and how they are sent, corroborated across surfaces or covering multiple methods.Cross-verified
Documentation Quality
API reference depthapi-reference-depthAPI reference documentation lacks depth or was not found.Not detected
Changelog presencechangelog-presenceA changelog is published at https://developer.brex.com/changelog with multiple recent dated entries, indicating it is actively maintained.Cross-verified
Structured Data I/O
Structured data I/Ostructured-data-ioThe spec at https://developer.brex.com/_bundle/openapi/accounting_api.yaml declares typed, consistent response schemas (100% of operations) with a pagination pattern and a structured error envelope. (source: spec)Cross-verified
Machine-readable pricingmachine-readable-pricingNo machine-readable pricing endpoint found (HTML pricing pages do not qualify). Blocked by robots.txt for a generic compliant agent (Disallow: /api/).Not detected
Data export APIdata-export-apiNo data export or bulk API documentation found at the standard docs locations an agent would check.Not detected
Observable State & Reliability
Status & health endpointsstatus-and-healthStatus page found at https://status.brex.com/ (HTTP 200).Detected
Machine payments (x402/MPP)x402-or-mpp-supportInformational — not scoredNo machine-payment signal observed (no HTTP 402, no payment-required response header, and no /.well-known/x402.json manifest). Payment support cannot be ruled out from an unauthenticated probe. Blocked by robots.txt for a generic compliant agent (Disallow: /api/).Not detected
Webhook documentationwebhook-documentationA webhook documentation page exists at https://developer.brex.com/examples/webhook_examples, but it doesn't list specific event types with their payload shape.Parseable
Retry & idempotencyretry-and-idempotencyRetry/idempotency is documented at https://developer.brex.com/guides/idempotency with an idempotency-key mechanism or a concrete retry strategy. To reach the top level, it would need an idempotency key and backoff/retry guidance together.Useful
Error documentationerror-documentationErrors are documented at https://developer.brex.com/guides/error_codes with specific codes or a documented response shape. To reach the top level, it would need recovery guidance and a machine-readable error format, or corroboration against the API spec.Useful
Agent Safety & Trust
security.txtsecurity-txtsecurity.txt at https://brex.com/security.txt publishes a Contact address.Useful
Org identity signalsorg-identityHomepage exposes three org-identity signal types (legal_name, address, social).Useful
Metadata consistencymetadata-consistencyHomepage metadata (canonical, Open Graph, schema) is present and consistent.Cross-verified
Legal policy pageslegal-pagesAt least one legal policy page is discoverable.Detected