Agent Readiness Score
stripe.com
60 — Developing. Agents can find parts of this site, but key capabilities are hard to reach.
HonestClaw measured how well stripe.com's site and APIs work for AI agents — across 9 dimensions and 45 automated checks.
Dimensions
Discoverability13.9/24
Content Accessibility14.1/24
Bot Access Control0/12
Protocol & Capability Discovery24.9/41
Authentication & Credentials13/19
Documentation Quality8.5/10
Structured Data I/O8.4/13
Observable State & Reliability10.8/15
Agent Safety & Trust8.3/11
Checks
Discoverability
Subdomain sweepsubdomain-sweepAn agent-relevant subdomain is live and serves its expected content kind (docs.stripe.com).Parseable
robots.txtrobots-txtrobots.txt at https://stripe.com/robots.txt declares a sitemap. Declared sitemap https://stripe.com/sitemap/sitemap.xml resolves as valid XML.Cross-verified
sitemap.xmlsitemap-xmlhttps://stripe.com/sitemap/sitemap.xml is a valid sitemap (9 location(s)), but without lastmod or non-homepage URLs.Parseable
Canonical domaincanonical-domainRoot and www converge on stripe.com, with a matching canonical tag.Cross-verified
API existenceapi-existenceA real API surface is declared at https://raw.githubusercontent.com/stripe/openapi/master/openapi/spec3.json: the spec lists servers and paths. (source: spec)Parseable
API catalogapi-catalogNo RFC 9727 API Catalog found at /.well-known/api-catalog.Not detected
API versioningapi-versioningThe API version lifecycle is documented at https://docs.stripe.com/sdks/versioning, including deprecation/sunset. (source: docs)Cross-verified
Content Accessibility
llms.txtllms-txtA curated llms.txt index is published at https://stripe.com/llms.txt: 288 links across 30 sections.Cross-verified
Markdown twinmarkdown-twinA markdown twin is published at https://docs.stripe.com/api.md alongside the docs HTML surface (https://docs.stripe.com/api).Parseable
Freshness signalsfreshness-signalsNo freshness signals found (no Last-Modified, ETag, or sitemap lastmod).Not detected
Crawl-cost estimatecrawl-cost-estimateInformational — not scoredRobots.txt publishes Crawl-delay (2s) but no sitemap was found for URL inventory.Parseable
llms-full.txtllms-full-txtNo llms-full.txt file found (HTML pages at .txt paths do not qualify).Not detected
Raw content extractabilityraw-content-extractabilityReadable content is extractable without JavaScript on 2 probed surface(s) with a strong main-content ratio (87% on the homepage).Cross-verified
ai.txtai-txtNo ai.txt file found (HTML pages at .txt paths do not qualify).Not detected
Bot Access Control
AI bot rulesai-bot-rulesrobots.txt is readable but declares no AI-bot-specific rules.Not detected
Content signalscontent-signalsrobots.txt is readable but declares no Content-Signal line.Not detected
RSL licensingrslrobots.txt is readable but declares no RSL License directive.Not detected
TDM reservationtdmrepNo TDMRep policy found at /.well-known/tdmrep.json.Not detected
Protocol & Capability Discovery
MCP descriptormcp-descriptorInformational — not scoredNo MCP descriptor found at the standard locations an agent would check.Not detected
MCP supportmcp-supportFirst-party documentation at https://docs.stripe.com/mcp identifies the MCP endpoint https://mcp.stripe.com/ and explains both its capabilities and how clients connect or authenticate.Cross-verified
MCP Server Cardmcp-server-cardNo MCP Server Card found at the standard locations an agent would check.Not detected
A2A Agent Carda2a-agent-cardNo A2A Agent Card found at the standard well-known locations.Not detected
.well-known indexwell-known-indexA non-owned /.well-known/ descriptor is present and parses.Parseable
DNS-AIDdns-aidNo DNS-AID index found at _index._agents.stripe.com.Not detected
GraphQL surfacegraphql-surfaceNo GraphQL transport surface found at conventional paths (GET-only; no introspection issued).Not detected
Auth discoveryauth-discoveryAgent-native auth discovery: a valid RFC 9728 PRM (via challenge) or a PRM plus a valid AS/OIDC descriptor.Cross-verified
SDK availabilitysdk-availabilitySDK libraries page at https://docs.stripe.com/sdks: 8 GitHub repos, 0 registry links, 0 install commands (8 pointers).Cross-verified
Link headerslink-headersLink header(s) present with recognized rel values.Parseable
OpenAPI specificationopenapi-specValid OpenAPI 3.0.0 spec at https://raw.githubusercontent.com/stripe/openapi/master/openapi/spec3.json: 589 operations, 1440 schemas, 100% response coverage, servers declared.Cross-verified
Rate limit documentationrate-limit-docsRate limits are documented at https://docs.stripe.com/rate-limits with a concrete limit and rate-limit response headers. To reach the top level, it would need 429 handling, Retry-After guidance, and tier/plan differences.Useful
WebMCPwebmcpInformational — not scoredWebMCP browser probing is not yet available in this scanner release.Couldn't verify
Authentication & Credentials
Credential managementcredential-managementCredential management is fully documented at https://docs.stripe.com/keys, covering rotation, revocation, and credential scoping/expiry.Cross-verified
Programmatic auth flowprogrammatic-auth-flowProgrammatic authentication is mentioned at https://docs.stripe.com/connect/authentication, but not on a page dedicated to documenting it.Detected
Auth documentationauth-documentationAuthentication is documented at https://docs.stripe.com/keys with the specific detail an agent needs — the credential and how it is sent. To reach the top level, it would need to corroborate against another surface or document more than one complete method.Useful
Sandbox environmentsandbox-environmentA test environment is fully documented at https://docs.stripe.com/testing, with separate test credentials and a complete test workflow.Cross-verified
Documentation Quality
API reference depthapi-reference-depthThe API reference at https://docs.stripe.com/connect/oauth-reference documents parameters with example requests and responses. To reach the top level, it would need request and response bodies, authentication, pagination, and error codes.Useful
Changelog presencechangelog-presenceA changelog is published at https://docs.stripe.com/checkout/elements-with-checkout-sessions-api/changelog with multiple recent dated entries, indicating it is actively maintained.Cross-verified
Structured Data I/O
Structured data I/Ostructured-data-ioThe spec at https://raw.githubusercontent.com/stripe/openapi/master/openapi/spec3.json declares typed response schemas as a rule (100% of operations) — no structured error envelope. (source: spec)Useful
Machine-readable pricingmachine-readable-pricingNo machine-readable pricing endpoint found (HTML pricing pages do not qualify).Not detected
Data export APIdata-export-apiA data export API is documented at https://docs.stripe.com/data/export-customizations with a bulk/export endpoint or export format. To reach the top level, it would need a bulk endpoint, async-job or pagination, and a stated export format.Useful
Observable State & Reliability
Status & health endpointsstatus-and-healthStatus page found at https://status.stripe.com/ (HTTP 200).Detected
Webhook documentationwebhook-documentationWebhooks are fully documented at https://docs.stripe.com/webhooks, with event types, payload shapes, signature verification, and delivery/retry semantics.Cross-verified
Retry & idempotencyretry-and-idempotencyRetry/idempotency is documented at https://docs.stripe.com/api/idempotent_requests with an idempotency-key mechanism or a concrete retry strategy. To reach the top level, it would need an idempotency key and backoff/retry guidance together.Useful
Error documentationerror-documentationErrors are documented at https://docs.stripe.com/error-handling with specific codes or a documented response shape. To reach the top level, it would need recovery guidance and a machine-readable error format, or corroboration against the API spec.Useful
Machine payments (x402/MPP)x402-or-mpp-supportInformational — not scoredNo machine-payment signal observed (no HTTP 402, no payment-required response header, and no /.well-known/x402.json manifest). Payment support cannot be ruled out from an unauthenticated probe.Couldn't verify
Agent Safety & Trust
Org identity signalsorg-identityHomepage exposes three org-identity signal types (legal_name, social, address).Useful
Metadata consistencymetadata-consistencyHomepage metadata (canonical, Open Graph, schema) is present and consistent.Cross-verified
security.txtsecurity-txtsecurity.txt at https://stripe.com/.well-known/security.txt includes Contact, a future Expires date, and Encryption or Policy.Cross-verified
Legal policy pageslegal-pagesAt least one legal policy page is discoverable.Detected