Agent Readiness Score

sunsama.com

21 — Limited. Agents will struggle to discover or use this site without human help.

45 of 45 checks conclusive · Confidence High · Evidence coverage 100%

HonestClaw measured how well sunsama.com's site and APIs work for AI agents — across 9 dimensions and 45 automated checks.

Open interactive report →

Dimensions

Discoverability8.9/24

Content Accessibility7.4/24

Bot Access Control0/12

Protocol & Capability Discovery11.1/41

Authentication & Credentials1.8/19

Documentation Quality0/10

Structured Data I/O0/13

Observable State & Reliability0.2/15

Agent Safety & Trust6.5/11

Checks

Discoverability

Subdomain sweepsubdomain-sweepAn agent-relevant subdomain is live and serves its expected content kind (api.sunsama.com).Parseable

Canonical domaincanonical-domainRoot and www converge on www.sunsama.com, with a matching canonical tag.Cross-verified

robots.txtrobots-txtrobots.txt at https://sunsama.com/robots.txt declares a sitemap. Declared sitemap https://www.sunsama.com/sitemap.xml resolves as valid XML.Cross-verified

sitemap.xmlsitemap-xmlhttps://www.sunsama.com/sitemap.xml is a valid sitemap (1 location(s)), but without lastmod or non-homepage URLs.Parseable

API existenceapi-existenceA real API surface at https://api.sunsama.com/graphql answered HTTP 400 with non-HTML JSON. (source: live)Parseable

API catalogapi-catalogNo RFC 9727 API Catalog found at /.well-known/api-catalog.Not detected

API versioningapi-versioningNo versioning signal found (no spec info.version, version header, /vN API surface, or versioning docs).Not detected

Content Accessibility

Raw content extractabilityraw-content-extractabilitySubstantial visible text (5,661 chars) is readable without JavaScript on at least one probed page.Useful

Freshness signalsfreshness-signalsNo freshness signals found (no Last-Modified, ETag, or sitemap lastmod).Not detected

Crawl-cost estimatecrawl-cost-estimateInformational — not scoredSitemap index declares 1 child sitemap(s) — crawl cost is not directly observable from the index alone.Parseable

llms.txtllms-txtA valid llms.txt header exists at https://www.sunsama.com/llms.txt, but it lists few or no link sections (0 links, 7 sections).Parseable

llms-full.txtllms-full-txtNo llms-full.txt file found (HTML pages at .txt paths do not qualify).Not detected

ai.txtai-txtNo ai.txt file found (HTML pages at .txt paths do not qualify).Not detected

Markdown twinmarkdown-twinNo markdown twin found alongside probed docs HTML surfaces.Not detected

Bot Access Control

AI bot rulesai-bot-rulesrobots.txt is readable but declares no AI-bot-specific rules.Not detected

Content signalscontent-signalsrobots.txt is readable but declares no Content-Signal line.Not detected

RSL licensingrslrobots.txt is readable but declares no RSL License directive.Not detected

TDM reservationtdmrepNo TDMRep policy found at /.well-known/tdmrep.json.Not detected

Protocol & Capability Discovery

MCP descriptormcp-descriptorInformational — not scoredNo MCP descriptor found at the standard locations an agent would check.Not detected

MCP supportmcp-supportFirst-party documentation at https://help.sunsama.com/docs/integrations/mcp/ identifies the MCP endpoint https://api.sunsama.com/mcp and explains both its capabilities and how clients connect or authenticate.Cross-verified

Link headerslink-headersNo RFC 8288 Link headers found on any probed response.Not detected

OpenAPI specificationopenapi-specNo OpenAPI/Swagger specification found.Not detected

MCP Server Cardmcp-server-cardNo MCP Server Card found at the standard locations an agent would check.Not detected

SDK availabilitysdk-availabilityNo SDK or client library documentation found.Not detected

DNS-AIDdns-aidNo DNS-AID index found at _index._agents.sunsama.com.Not detected

A2A Agent Carda2a-agent-cardNo A2A Agent Card found at the standard well-known locations.Not detected

.well-known indexwell-known-indexNo non-owned /.well-known/ descriptors found.Not detected

GraphQL surfacegraphql-surfaceA GraphQL endpoint at https://api.sunsama.com/graphql responded with HTTP 400 and a GraphQL-shaped error body (GET probe).Parseable

Auth discoveryauth-discoveryAgent-native auth discovery: a valid RFC 9728 PRM (via challenge) or a PRM plus a valid AS/OIDC descriptor.Cross-verified

Rate limit documentationrate-limit-docsNo rate limit documentation found at the standard docs locations an agent would check.Not detected

WebMCPwebmcpInformational — not scoredWebMCP browser probing is not yet available in this scanner release.Couldn't verify

Authentication & Credentials

Programmatic auth flowprogrammatic-auth-flowNo programmatic authentication documentation found at the standard docs locations an agent would check.Not detected

Credential managementcredential-managementNo credential management documentation found at the standard docs locations an agent would check.Not detected

Sandbox environmentsandbox-environmentNo sandbox or test environment documentation found at the standard docs locations an agent would check.Not detected

Auth documentationauth-documentationAn authentication documentation page exists at https://help.sunsama.com/docs/security/it-approval/, but it doesn't name a specific method or show how a request is authenticated.Parseable

Documentation Quality

API reference depthapi-reference-depthAPI reference documentation lacks depth or was not found.Not detected

Changelog presencechangelog-presenceNo changelog or release notes found at the standard docs locations an agent would check.Not detected

Structured Data I/O

Structured data I/Ostructured-data-ioNo published structured-data contract found (no typed spec response schemas).Not detected

Machine-readable pricingmachine-readable-pricingNo machine-readable pricing endpoint found (HTML pricing pages do not qualify).Not detected

Data export APIdata-export-apiNo data export or bulk API documentation found at the standard docs locations an agent would check.Not detected

Observable State & Reliability

Status & health endpointsstatus-and-healthStatus page found at https://sunsamastatus.com/ (HTTP 200).Detected

Webhook documentationwebhook-documentationNo webhook or event documentation found at the standard docs locations an agent would check.Not detected

Retry & idempotencyretry-and-idempotencyNo retry or idempotency documentation found at the standard docs locations an agent would check.Not detected

Error documentationerror-documentationNo error documentation found at the standard docs locations an agent would check.Not detected

Machine payments (x402/MPP)x402-or-mpp-supportInformational — not scoredNo machine-payment signal observed (no HTTP 402, no payment-required response header, and no /.well-known/x402.json manifest). Payment support cannot be ruled out from an unauthenticated probe.Couldn't verify

Agent Safety & Trust

Org identity signalsorg-identityHomepage exposes three org-identity signal types (legal_name, social, support_email).Useful

Metadata consistencymetadata-consistencyHomepage metadata (canonical, Open Graph, schema) is present and consistent.Cross-verified

security.txtsecurity-txtNo security.txt found at /.well-known/security.txt or /security.txt.Not detected

Legal policy pageslegal-pagesBoth privacy and terms policies are discoverable with substantive content.Useful