Agent Readiness Score
cloudflare.com
48 — Developing. Agents can find parts of this site, but key capabilities are hard to reach.
HonestClaw measured how well cloudflare.com's site and APIs work for AI agents — across 9 dimensions and 45 automated checks.
Dimensions
Discoverability13.9/24
Content Accessibility18.1/24
Bot Access Control7/12
Protocol & Capability Discovery23.7/41
Authentication & Credentials5.8/19
Documentation Quality2.3/10
Structured Data I/O0.8/13
Observable State & Reliability2/15
Agent Safety & Trust7.6/11
Checks
Discoverability
Subdomain sweepsubdomain-sweepBoth an API-family and a docs-family subdomain are live (api.cloudflare.com, docs.cloudflare.com).Useful
Canonical domaincanonical-domainRoot and www converge on www.cloudflare.com, with a matching canonical tag.Cross-verified
robots.txtrobots-txtrobots.txt at https://cloudflare.com/robots.txt declares a sitemap. Declared sitemap https://www.cloudflare.com/sitemap.xml resolves as valid XML.Cross-verified
sitemap.xmlsitemap-xmlhttps://www.cloudflare.com/sitemap.xml is a dated sitemap whose URLs include docs/pricing/api surfaces.Cross-verified
API existenceapi-existenceA real API surface is declared at https://www.cloudflare.com/openapi.json: the spec lists servers and paths. (source: spec)Parseable
API catalogapi-catalogAPI Catalog discovered via a rel="api-catalog" Link header at https://www.cloudflare.com/.well-known/agents.json.Detected
API versioningapi-versioningThe API version is declared in the spec (info.version) at https://www.cloudflare.com/openapi.json. (source: spec)Parseable
Content Accessibility
Markdown twinmarkdown-twinA markdown twin is published at https://developers.cloudflare.com/index.md alongside the docs HTML surface (https://developers.cloudflare.com/).Parseable
Freshness signalsfreshness-signalsA single freshness signal is present (sitemap lastmod).Parseable
Crawl-cost estimatecrawl-cost-estimateInformational — not scoredA manageable sitemap (896 page URLs) helps agents estimate crawl cost.Useful
llms.txtllms-txtA curated llms.txt index is published at https://www.cloudflare.com/llms.txt: 88 links across 13 sections.Cross-verified
llms-full.txtllms-full-txtA comprehensive llms-full.txt is published at https://cloudflare.com/llms-full.txt with 139,589 chars across 305 sections.Cross-verified
ai.txtai-txtNo ai.txt file found (HTML pages at .txt paths do not qualify).Not detected
Raw content extractabilityraw-content-extractabilityReadable content is extractable without JavaScript on 2 probed surface(s) with a strong main-content ratio (88% on the homepage).Cross-verified
Bot Access Control
AI bot rulesai-bot-rulesrobots.txt declares explicit rules for 8 AI bot(s): gptbot, chatgpt-user, google-extended, anthropic-ai, claude-web, ccbot, perplexitybot, cohere-ai.Cross-verified
Content signalscontent-signalsrobots.txt declares 3 recognized Content Signal(s) with a valid value: ai-train, search, ai-input.Cross-verified
RSL licensingrslrobots.txt is readable but declares no RSL License directive.Not detected
TDM reservationtdmrepNo TDMRep policy found at /.well-known/tdmrep.json.Not detected
Protocol & Capability Discovery
MCP descriptormcp-descriptorInformational — not scoredAn MCP server is published at https://cloudflare.com/.well-known/mcp.json and points to where its server can be reached (https://www.cloudflare.com/.well-known/webmcp.json). To reach the top level, the description would also need to list the specific tools the server offers.Useful
SDK availabilitysdk-availabilitySDK libraries page at https://developers.cloudflare.com/fundamentals/api/reference/sdks/: 7 GitHub repos, 0 registry links, 0 install commands (7 pointers).Cross-verified
OpenAPI specificationopenapi-specValid OpenAPI 3.1.0 spec at https://www.cloudflare.com/openapi.json: 3 paths, 3 operations, 0 schemas — no schemas defined.Parseable
Link headerslink-headersAn agent-relevant Link rel (api-catalog) resolves to a live resource at https://www.cloudflare.com/.well-known/agents.json.Cross-verified
DNS-AIDdns-aidNo DNS-AID index found at _index._agents.cloudflare.com.Not detected
A2A Agent Carda2a-agent-cardAn A2A Agent Card is described at https://cloudflare.com/.well-known/agent.json, but it is missing required fields (name, description, version, supportedInterfaces, or skills).Parseable
.well-known indexwell-known-indexNo non-owned /.well-known/ descriptors found.Not detected
MCP supportmcp-supportThe endpoint https://mcp.cloudflare.com/mcp returned an MCP-specific protocol or authorization response (HTTP 401).Cross-verified
MCP Server Cardmcp-server-cardAn MCP Server Card at https://docs.cloudflare.com/.well-known/mcp/server-card.json declares 14 remote endpoint(s) agents can connect to.Useful
Auth discoveryauth-discoveryAgent-native auth discovery: a valid RFC 9728 PRM (via challenge) or a PRM plus a valid AS/OIDC descriptor.Cross-verified
GraphQL surfacegraphql-surfaceNo GraphQL transport surface found at conventional paths (GET-only; no introspection issued).Not detected
Rate limit documentationrate-limit-docsA rate-limit documentation page exists at https://developers.cloudflare.com/api/resources/custom_hostnames/subresources/quota, but it doesn't state a concrete limit alongside a rate-limit response header.Parseable
WebMCPwebmcpInformational — not scoredWebMCP browser probing is not yet available in this scanner release.Couldn't verify
Authentication & Credentials
Credential managementcredential-managementNo credential management documentation found at the standard docs locations an agent would check.Not detected
Programmatic auth flowprogrammatic-auth-flowProgrammatic authentication is mentioned at https://developers.cloudflare.com/api/resources/origin_tls_client_auth/methods/create, but not on a page dedicated to documenting it.Detected
Sandbox environmentsandbox-environmentA sandbox/testing page exists at https://developers.cloudflare.com/sandbox/, but it doesn't show how to obtain test credentials or a test base URL.Parseable
Auth documentationauth-documentationAuthentication is documented at https://developers.cloudflare.com/api/resources/iam/subresources/oauth_clients with the specific detail an agent needs — the credential and how it is sent. To reach the top level, it would need to corroborate against another surface or document more than one complete method.Useful
Documentation Quality
API reference depthapi-reference-depthAPI reference content is mentioned at https://developers.cloudflare.com/fundamentals/api/reference/sdks/, but not on a dedicated reference page.Detected
Changelog presencechangelog-presenceA changelog page exists at https://www.cloudflare.com/whats-new/, but it doesn't list dated entries describing actual changes.Parseable
Structured Data I/O
Structured data I/Ostructured-data-ioThe spec at https://www.cloudflare.com/openapi.json declares no response schemas. (source: spec)Detected
Machine-readable pricingmachine-readable-pricingNo machine-readable pricing endpoint found (HTML pricing pages do not qualify).Not detected
Data export APIdata-export-apiNo data export or bulk API documentation found at the standard docs locations an agent would check.Not detected
Observable State & Reliability
Status & health endpointsstatus-and-healthHealth/status endpoint found at https://www.cloudflarestatus.com/api/v2/status.json (HTTP 200).Detected
Retry & idempotencyretry-and-idempotencyNo retry or idempotency documentation found at the standard docs locations an agent would check.Not detected
Error documentationerror-documentationNo error documentation found at the standard docs locations an agent would check.Not detected
Webhook documentationwebhook-documentationA webhook documentation page exists at https://developers.cloudflare.com/api/resources/alerting/subresources/destinations/subresources/webhooks, but it doesn't list specific event types with their payload shape.Parseable
Machine payments (x402/MPP)x402-or-mpp-supportInformational — not scoredNo machine-payment signal observed (no HTTP 402, no payment-required response header, and no /.well-known/x402.json manifest). Payment support cannot be ruled out from an unauthenticated probe.Couldn't verify
Agent Safety & Trust
Org identity signalsorg-identityHomepage exposes two org-identity signal types (legal_name, social).Parseable
Metadata consistencymetadata-consistencyHomepage metadata (canonical, Open Graph, schema) is present and consistent.Cross-verified
security.txtsecurity-txtsecurity.txt at https://cloudflare.com/.well-known/security.txt publishes a Contact address.Useful
Legal policy pageslegal-pagesBoth privacy and terms policies are discoverable with substantive content.Useful