HonestClaw
What is Agent Readiness?

Agent Readiness Score

shipbob.com

50 — Developing. Agents can find parts of this site, but key capabilities are hard to reach.

45 of 45 checks conclusive · Confidence High · Evidence coverage 100%

HonestClaw measured how well shipbob.com's site and APIs work for AI agents — across 9 dimensions and 45 automated checks.

Dimensions

Discoverability15.2/24
Content Accessibility11.2/24
Bot Access Control0/12
Protocol & Capability Discovery17.7/41
Authentication & Credentials13.5/19
Documentation Quality5.5/10
Structured Data I/O8/13
Observable State & Reliability8.5/15
Agent Safety & Trust5.5/11

Checks

Discoverability

Subdomain sweepsubdomain-sweepAn agent-relevant subdomain is live and serves its expected content kind (developer.shipbob.com).Parseable
Canonical domaincanonical-domainRoot and www converge on www.shipbob.com, with a matching canonical tag.Cross-verified
robots.txtrobots-txtrobots.txt at https://shipbob.com/robots.txt declares a sitemap. Declared sitemap https://www.shipbob.com/sitemap_index.xml resolves as valid XML.Cross-verified
sitemap.xmlsitemap-xmlhttps://www.shipbob.com/sitemap_index.xml is a valid sitemap with lastmod and real (non-homepage) URLs.Useful
API existenceapi-existenceA real API surface is declared at https://developer.shipbob.com/openapi/api-reference-2.json: the spec lists servers and paths. (source: spec)Parseable
API catalogapi-catalogAPI Catalog discovered via a rel="api-catalog" Link header at https://developer.shipbob.com/.well-known/api-catalog.Detected
API versioningapi-versioningThe API version lifecycle is documented at https://developer.shipbob.com/versioning, including deprecation/sunset. (source: docs)Cross-verified

Content Accessibility

Markdown twinmarkdown-twinA markdown twin is published at https://developer.shipbob.com/index.md alongside the docs HTML surface (https://developer.shipbob.com/).Parseable
llms.txtllms-txtAn llms.txt index is published at https://developer.shipbob.com/llms.txt with 6 links under 2 section(s). To reach the top level, it would need a fuller index (more links across multiple sections) or an llms-full.txt.Useful
Freshness signalsfreshness-signalsA single freshness signal is present (sitemap lastmod).Parseable
Crawl-cost estimatecrawl-cost-estimateInformational — not scoredSitemap index declares 8 child sitemap(s) — crawl cost is not directly observable from the index alone.Parseable
Raw content extractabilityraw-content-extractabilityModerate-to-strong main content (80% of visible text) is extractable from raw HTML on the homepage.Useful
llms-full.txtllms-full-txtNo llms-full.txt file found (HTML pages at .txt paths do not qualify).Not detected
ai.txtai-txtNo ai.txt file found (HTML pages at .txt paths do not qualify).Not detected

Bot Access Control

AI bot rulesai-bot-rulesrobots.txt is readable but declares no AI-bot-specific rules.Not detected
Content signalscontent-signalsrobots.txt is readable but declares no Content-Signal line.Not detected
RSL licensingrslrobots.txt is readable but declares no RSL License directive.Not detected
TDM reservationtdmrepNo TDMRep policy found at /.well-known/tdmrep.json.Not detected

Protocol & Capability Discovery

MCP descriptormcp-descriptorInformational — not scoredNo MCP descriptor found at the standard locations an agent would check.Not detected
SDK availabilitysdk-availabilityNo SDK or client library documentation found.Not detected
MCP Server Cardmcp-server-cardNo MCP Server Card found at the standard locations an agent would check.Not detected
A2A Agent Carda2a-agent-cardNo A2A Agent Card found at the standard well-known locations.Not detected
.well-known indexwell-known-indexNo non-owned /.well-known/ descriptors found.Not detected
DNS-AIDdns-aidNo DNS-AID index found at _index._agents.shipbob.com.Not detected
MCP supportmcp-supportFirst-party documentation at https://developer.shipbob.com/mcp-server/setup-with-token identifies the MCP endpoint https://api.shipbob.com/developer-api/mcp and explains both its capabilities and how clients connect or authenticate.Cross-verified
GraphQL surfacegraphql-surfaceNo GraphQL transport surface found at conventional paths (GET-only; no introspection issued).Not detected
Auth discoveryauth-discoveryA drivable auth-discovery descriptor is published.Useful
Link headerslink-headersLink header(s) present with recognized rel values.Parseable
OpenAPI specificationopenapi-specValid OpenAPI 3.1.0 spec at https://developer.shipbob.com/openapi/api-reference-2.json: 76 operations, 426 schemas, 100% response coverage, servers declared.Cross-verified
Rate limit documentationrate-limit-docsRate limits are documented at https://developer.shipbob.com/rate-limit with a concrete limit and rate-limit response headers. To reach the top level, it would need 429 handling, Retry-After guidance, and tier/plan differences.Useful
WebMCPwebmcpInformational — not scoredWebMCP browser probing is not yet available in this scanner release.Couldn't verify

Authentication & Credentials

Programmatic auth flowprogrammatic-auth-flowA programmatic auth flow is fully documented at https://developer.shipbob.com/auth, with a non-interactive grant, token endpoint, scopes, and token expiry/refresh.Cross-verified
Auth documentationauth-documentationAuthentication is fully documented at https://developer.shipbob.com/auth, naming complete method(s) and how they are sent, corroborated across surfaces or covering multiple methods.Cross-verified
Credential managementcredential-managementNo credential management documentation found at the standard docs locations an agent would check.Not detected
Sandbox environmentsandbox-environmentA test environment is documented at https://developer.shipbob.com/sandbox/setup with the detail an agent needs to start testing (test credentials or a test base URL). To reach the top level, it would need a full test workflow and separately documented test credentials.Useful

Documentation Quality

Changelog presencechangelog-presenceA changelog is published at https://developer.shipbob.com/release-notes with multiple recent dated entries, indicating it is actively maintained.Cross-verified
API reference depthapi-reference-depthAPI reference content is mentioned at https://developer.shipbob.com/api/channels/get-channels, but not on a dedicated reference page.Detected

Structured Data I/O

Structured data I/Ostructured-data-ioThe spec at https://developer.shipbob.com/openapi/api-reference-2.json declares typed, consistent response schemas (99% of operations) with a pagination pattern and a structured error envelope. (source: spec)Cross-verified
Machine-readable pricingmachine-readable-pricingNo machine-readable pricing endpoint found (HTML pricing pages do not qualify).Not detected
Data export APIdata-export-apiNo data export or bulk API documentation found at the standard docs locations an agent would check.Not detected

Observable State & Reliability

Status & health endpointsstatus-and-healthNo health or status endpoint found.Not detected
Retry & idempotencyretry-and-idempotencyNo retry or idempotency documentation found at the standard docs locations an agent would check.Not detected
Webhook documentationwebhook-documentationWebhooks are fully documented at https://developer.shipbob.com/webhooks, with event types, payload shapes, signature verification, and delivery/retry semantics.Cross-verified
Error documentationerror-documentationErrors are documented at https://developer.shipbob.com/errors with specific codes or a documented response shape. To reach the top level, it would need recovery guidance and a machine-readable error format, or corroboration against the API spec.Useful
Machine payments (x402/MPP)x402-or-mpp-supportInformational — not scoredNo machine-payment signal observed (no HTTP 402, no payment-required response header, and no /.well-known/x402.json manifest). Payment support cannot be ruled out from an unauthenticated probe.Couldn't verify

Agent Safety & Trust

security.txtsecurity-txtNo security.txt found at /.well-known/security.txt or /security.txt.Not detected
Legal policy pageslegal-pagesBoth privacy and terms policies are discoverable with substantive content.Useful
Org identity signalsorg-identityHomepage exposes two org-identity signal types (legal_name, social).Parseable
Metadata consistencymetadata-consistencyHomepage metadata (canonical, Open Graph, schema) is present and consistent.Cross-verified