Agent Readiness Score

heroku.com

30 — Limited. Agents will struggle to discover or use this site without human help.

45 of 45 checks conclusive · Confidence High · Evidence coverage 100%

HonestClaw measured how well heroku.com's site and APIs work for AI agents — across 9 dimensions and 45 automated checks.

Open interactive report →

Dimensions

Discoverability10.4/24

Content Accessibility13/24

Bot Access Control2/12

Protocol & Capability Discovery11.2/41

Authentication & Credentials1.4/19

Documentation Quality5.5/10

Structured Data I/O0/13

Observable State & Reliability1.2/15

Agent Safety & Trust5.3/11

Checks

Discoverability

Subdomain sweepsubdomain-sweepAn agent-relevant subdomain is live and serves its expected content kind (docs.heroku.com).Parseable

Canonical domaincanonical-domainRoot and www converge on www.heroku.com, with a matching canonical tag.Cross-verified

robots.txtrobots-txtrobots.txt at https://heroku.com/robots.txt declares a sitemap. Declared sitemap https://www.heroku.com/sitemap_index.xml resolves as valid XML.Cross-verified

sitemap.xmlsitemap-xmlhttps://heroku.com/sitemap_index.xml is a valid sitemap with lastmod and real (non-homepage) URLs.Useful

API existenceapi-existenceA real API surface at https://api.heroku.com/apps answered HTTP 400 with non-HTML JSON. (source: live)Parseable

API catalogapi-catalogNo RFC 9727 API Catalog found at /.well-known/api-catalog.Not detected

API versioningapi-versioningVersioning is mentioned at https://devcenter.heroku.com/articles/bundler-version, but not on a page dedicated to documenting it. (source: docs)Detected

Content Accessibility

Raw content extractabilityraw-content-extractabilityReadable content is extractable without JavaScript on 2 probed surface(s) with a strong main-content ratio (56% on the homepage).Cross-verified

Freshness signalsfreshness-signalsNo freshness signals found (no Last-Modified, ETag, or sitemap lastmod).Not detected

Crawl-cost estimatecrawl-cost-estimateInformational — not scoredNo crawl-cost signals found (no sitemap URL inventory or Crawl-delay directive).Not detected

llms.txtllms-txtA curated llms.txt index is published at https://heroku.com/llms.txt: 68 links across 8 sections.Cross-verified

llms-full.txtllms-full-txtNo llms-full.txt file found (HTML pages at .txt paths do not qualify).Not detected

ai.txtai-txtNo ai.txt file found (HTML pages at .txt paths do not qualify).Not detected

Markdown twinmarkdown-twinNo markdown twin found alongside probed docs HTML surfaces.Not detected

Bot Access Control

AI bot rulesai-bot-rulesrobots.txt is readable but declares no AI-bot-specific rules.Not detected

Content signalscontent-signalsrobots.txt declares 3 recognized Content Signal(s) with a valid value: ai-train, ai-input, search.Cross-verified

RSL licensingrslrobots.txt is readable but declares no RSL License directive.Not detected

TDM reservationtdmrepNo TDMRep policy found at /.well-known/tdmrep.json.Not detected

Protocol & Capability Discovery

SDK availabilitysdk-availabilityNo SDK or client library documentation found.Not detected

MCP descriptormcp-descriptorInformational — not scoredNo MCP descriptor found at the standard locations an agent would check.Not detected

MCP supportmcp-supportFirst-party documentation at https://devcenter.heroku.com/articles/heroku-inference-api-v1-mcp-servers identifies the MCP endpoint https://devcenter.heroku.com/articles/heroku-inference and explains both its capabilities and how clients connect or authenticate.Cross-verified

Link headerslink-headersLink header(s) present with recognized rel values.Parseable

OpenAPI specificationopenapi-specNo OpenAPI/Swagger specification found.Not detected

DNS-AIDdns-aidNo DNS-AID index found at _index._agents.heroku.com.Not detected

A2A Agent Carda2a-agent-cardNo A2A Agent Card found at the standard well-known locations.Not detected

MCP Server Cardmcp-server-cardNo MCP Server Card found at the standard locations an agent would check.Not detected

.well-known indexwell-known-indexNo non-owned /.well-known/ descriptors found.Not detected

Auth discoveryauth-discoveryAgent-native auth discovery: a valid RFC 9728 PRM (via challenge) or a PRM plus a valid AS/OIDC descriptor.Cross-verified

GraphQL surfacegraphql-surfaceNo GraphQL transport surface found at conventional paths (GET-only; no introspection issued).Not detected

Rate limit documentationrate-limit-docsRate limiting is mentioned at https://devcenter.heroku.com/articles/heroku-applink-limits, but not on a page dedicated to documenting it.Detected

WebMCPwebmcpInformational — not scoredWebMCP browser probing is not yet available in this scanner release.Couldn't verify

Authentication & Credentials

Credential managementcredential-managementCredential management is mentioned at https://devcenter.heroku.com/articles/heroku-postgresql-credentials, but not on a page dedicated to documenting it.Detected

Programmatic auth flowprogrammatic-auth-flowProgrammatic authentication is mentioned at https://devcenter.heroku.com/articles/authentication, but not on a page dedicated to documenting it.Detected

Sandbox environmentsandbox-environmentNo sandbox or test environment documentation found at the standard docs locations an agent would check.Not detected

Auth documentationauth-documentationAuthentication is mentioned at https://devcenter.heroku.com/articles/authentication, but not on a page dedicated to documenting it.Detected

Documentation Quality

API reference depthapi-reference-depthAPI reference content is mentioned at https://devcenter.heroku.com/articles/add-on-partner-api-reference, but not on a dedicated reference page.Detected

Changelog presencechangelog-presenceA changelog is published at https://devcenter.heroku.com/changelog with multiple recent dated entries, indicating it is actively maintained.Cross-verified

Structured Data I/O

Structured data I/Ostructured-data-ioNo published structured-data contract found (no typed spec response schemas).Not detected

Data export APIdata-export-apiNo data export or bulk API documentation found at the standard docs locations an agent would check.Not detected

Machine-readable pricingmachine-readable-pricingNo machine-readable pricing endpoint found (HTML pricing pages do not qualify).Not detected

Observable State & Reliability

Status & health endpointsstatus-and-healthStatus page found at https://status.salesforce.com/products/Heroku (HTTP 200).Detected

Webhook documentationwebhook-documentationWebhooks are mentioned at https://devcenter.heroku.com/articles/addon-webhooks, but not on a page dedicated to documenting them.Detected

Retry & idempotencyretry-and-idempotencyNo retry or idempotency documentation found at the standard docs locations an agent would check.Not detected

Error documentationerror-documentationError handling is mentioned at https://devcenter.heroku.com/articles/error-codes, but not on a page dedicated to documenting it.Detected

Machine payments (x402/MPP)x402-or-mpp-supportInformational — not scoredNo machine-payment signal observed (no HTTP 402, no payment-required response header, and no /.well-known/x402.json manifest). Payment support cannot be ruled out from an unauthenticated probe.Couldn't verify

Agent Safety & Trust

Org identity signalsorg-identityHomepage exposes three org-identity signal types (legal_name, social, address).Useful

Metadata consistencymetadata-consistencyHomepage metadata (canonical, Open Graph, schema) is present and consistent.Cross-verified

security.txtsecurity-txtNo security.txt found at /.well-known/security.txt or /security.txt.Not detected

Legal policy pageslegal-pagesAt least one legal policy page is discoverable.Detected