Agent Readiness Score
sofi.com
5 — Limited. Agents will struggle to discover or use this site without human help.
HonestClaw measured how well sofi.com's site and APIs work for AI agents — across 9 dimensions and 45 automated checks.
Dimensions
Discoverability0/13
Content Accessibility0/5
Bot Access ControlNot yet scored
Protocol & Capability Discovery5/26
Authentication & Credentials0/19
Documentation Quality0/10
Structured Data I/O0/13
Observable State & Reliability0.2/15
Agent Safety & TrustNot yet scored
Checks
Discoverability
API existenceapi-existenceCould not conclusively check for an API endpoint (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).Not detected
API catalogapi-catalogCould not conclusively check for an API Catalog (endpoint unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).Not detected
API versioningapi-versioningCould not conclusively check for API versioning (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).Not detected
robots.txtrobots-txtNo live subdomains matched this check.Couldn't verify
sitemap.xmlsitemap-xmlNo live subdomains matched this check.Couldn't verify
Canonical domaincanonical-domainNo live subdomains matched this check.Couldn't verify
+ 1 more in the interactive report →Content Accessibility
llms.txtllms-txtCould not conclusively check for an llms.txt file (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).Not detected
llms-full.txtllms-full-txtNo live subdomains matched this check.Couldn't verify
Markdown twinmarkdown-twinNo live subdomains matched this check.Couldn't verify
ai.txtai-txtNo live subdomains matched this check.Couldn't verify
+ 3 more in the interactive report →Bot Access Control
AI bot rulesai-bot-rulesNo live subdomains matched this check.Couldn't verify
Content signalscontent-signalsNo live subdomains matched this check.Couldn't verify
TDM reservationtdmrepNo live subdomains matched this check.Couldn't verify
+ 1 more in the interactive report →Protocol & Capability Discovery
MCP descriptormcp-descriptorInformational — not scoredCould not conclusively check for an MCP descriptor (locations unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).Not detected
MCP Server Cardmcp-server-cardCould not conclusively check for an MCP Server Card (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).Not detected
A2A Agent Carda2a-agent-cardCould not conclusively check for an A2A Agent Card (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).Not detected
OpenAPI specificationopenapi-specCould not conclusively check for an OpenAPI/Swagger specification (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).Not detected
MCP supportmcp-supportThe endpoint https://mcp.sofi.com/ returned an MCP-specific protocol or authorization response (HTTP 401).Cross-verified
SDK availabilitysdk-availabilityNo SDK or client library documentation found.Not detected
Rate limit documentationrate-limit-docsNo rate limit documentation found at the standard docs locations an agent would check.Not detected
WebMCPwebmcpInformational — not scoredWebMCP browser probing is not yet available in this scanner release.Couldn't verify
Link headerslink-headersNo live subdomains matched this check.Couldn't verify
.well-known indexwell-known-indexNo live subdomains matched this check.Couldn't verify
+ 3 more in the interactive report →Authentication & Credentials
Credential managementcredential-managementNo credential management documentation found at the standard docs locations an agent would check.Not detected
Programmatic auth flowprogrammatic-auth-flowNo programmatic authentication documentation found at the standard docs locations an agent would check.Not detected
Sandbox environmentsandbox-environmentNo sandbox or test environment documentation found at the standard docs locations an agent would check.Not detected
Auth documentationauth-documentationNo authentication documentation found at the standard docs locations an agent would check.Not detected
Documentation Quality
API reference depthapi-reference-depthAPI reference documentation lacks depth or was not found.Not detected
Changelog presencechangelog-presenceNo changelog or release notes found at the standard docs locations an agent would check.Not detected
Structured Data I/O
Structured data I/Ostructured-data-ioCould not conclusively check for a structured-data contract (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).Not detected
Machine-readable pricingmachine-readable-pricingCould not conclusively check for a machine-readable pricing endpoint (endpoints unreachable, rate-limited, or behind auth). Blocked by robots.txt for a generic compliant agent (Disallow: /).Not detected
Data export APIdata-export-apiNo data export or bulk API documentation found at the standard docs locations an agent would check.Not detected
Observable State & Reliability
Status & health endpointsstatus-and-healthStatus page found at https://manage.statuspage.io/login (HTTP 200).Detected
Machine payments (x402/MPP)x402-or-mpp-supportInformational — not scoredNo machine-payment signal observed (no HTTP 402, no payment-required response header, and no /.well-known/x402.json manifest). Payment support cannot be ruled out from an unauthenticated probe. Blocked by robots.txt for a generic compliant agent (Disallow: /).Not detected
Retry & idempotencyretry-and-idempotencyNo retry or idempotency documentation found at the standard docs locations an agent would check.Not detected
Webhook documentationwebhook-documentationNo webhook or event documentation found at the standard docs locations an agent would check.Not detected
Error documentationerror-documentationNo error documentation found at the standard docs locations an agent would check.Not detected
Agent Safety & Trust
security.txtsecurity-txtNo live subdomains matched this check.Couldn't verify
Legal policy pageslegal-pagesNo live subdomains matched this check.Couldn't verify
Org identity signalsorg-identityNo live subdomains matched this check.Couldn't verify
+ 1 more in the interactive report →