Agent Readiness Score
supabase.com
34 — Limited. Agents will struggle to discover or use this site without human help.
HonestClaw measured how well supabase.com's site and APIs work for AI agents — across 9 dimensions and 45 automated checks.
Dimensions
Discoverability6.1/24
Content Accessibility14.1/24
Bot Access Control7/12
Protocol & Capability Discovery13.5/41
Authentication & Credentials3.9/19
Documentation Quality5.3/10
Structured Data I/O0/13
Observable State & Reliability0.2/15
Agent Safety & Trust6.8/11
Checks
Discoverability
Subdomain sweepsubdomain-sweepAn agent-relevant subdomain is live and serves its expected content kind (docs.supabase.com).Parseable
robots.txtrobots-txtrobots.txt at https://supabase.com/robots.txt declares a sitemap. Declared sitemap https://supabase.com/sitemap.xml resolves as valid XML.Cross-verified
API catalogapi-catalogAPI Catalog found at https://supabase.com/.well-known/api-catalog (application/linkset+json).Detected
sitemap.xmlsitemap-xmlhttps://supabase.com/sitemap.xml is a valid sitemap (2 location(s)), but without lastmod or non-homepage URLs.Parseable
Canonical domaincanonical-domainRoot and www converge on a single canonical host (supabase.com).Parseable
API existenceapi-existenceNo API endpoint found at common paths (only HTML pages or 404s).Not detected
API versioningapi-versioningNo versioning signal found (no spec info.version, version header, /vN API surface, or versioning docs).Not detected
Content Accessibility
llms.txtllms-txtA curated llms.txt index is published at https://supabase.com/llms.txt: 31 links across 2 sections.Cross-verified
Freshness signalsfreshness-signalsA single freshness signal is present (ETag header).Parseable
Crawl-cost estimatecrawl-cost-estimateInformational — not scoredSitemap index declares 2 child sitemap(s) — crawl cost is not directly observable from the index alone.Parseable
Raw content extractabilityraw-content-extractabilityReadable content is extractable without JavaScript on 2 probed surface(s) with a strong main-content ratio (87% on the homepage).Cross-verified
llms-full.txtllms-full-txtNo llms-full.txt file found (HTML pages at .txt paths do not qualify).Not detected
ai.txtai-txtNo ai.txt file found (HTML pages at .txt paths do not qualify).Not detected
Markdown twinmarkdown-twinNo markdown twin found alongside probed docs HTML surfaces.Not detected
Bot Access Control
AI bot rulesai-bot-rulesrobots.txt declares explicit rules for 4 AI bot(s): gptbot, claudebot, google-extended, perplexitybot.Cross-verified
Content signalscontent-signalsrobots.txt declares 3 recognized Content Signal(s) with a valid value: ai-train, search, ai-input.Cross-verified
RSL licensingrslrobots.txt is readable but declares no RSL License directive.Not detected
TDM reservationtdmrepNo TDMRep policy found at /.well-known/tdmrep.json.Not detected
Protocol & Capability Discovery
MCP descriptormcp-descriptorInformational — not scoredNo MCP descriptor found at the standard locations an agent would check.Not detected
MCP supportmcp-supportFirst-party documentation at https://supabase.com/docs/guides/ai-tools/mcp identifies the MCP endpoint https://mcp.supabase.com/mcp?features=docs%2Caccount%2Cdatabase%2Cdebugging%2Cdevelopment%2Cfunctions%2Cbranching and explains both its capabilities and how clients connect or authenticate.Cross-verified
A2A Agent Carda2a-agent-cardNo A2A Agent Card found at the standard well-known locations.Not detected
MCP Server Cardmcp-server-cardNo MCP Server Card found at the standard locations an agent would check.Not detected
DNS-AIDdns-aidNo DNS-AID index found at _index._agents.supabase.com.Not detected
SDK availabilitysdk-availabilityGetting-started page at https://supabase.com/llms/server.txt: 0 GitHub repos, 0 registry links, 3 install commands (3 pointers).Cross-verified
.well-known indexwell-known-indexNo non-owned /.well-known/ descriptors found.Not detected
Auth discoveryauth-discoveryA drivable auth-discovery descriptor is published.Useful
GraphQL surfacegraphql-surfaceNo GraphQL transport surface found at conventional paths (GET-only; no introspection issued).Not detected
Link headerslink-headersNo RFC 8288 Link headers found on any probed response.Not detected
OpenAPI specificationopenapi-specNo OpenAPI/Swagger specification found.Not detected
Rate limit documentationrate-limit-docsNo rate limit documentation found at the standard docs locations an agent would check.Not detected
WebMCPwebmcpInformational — not scoredWebMCP browser probing is not yet available in this scanner release.Couldn't verify
Authentication & Credentials
Credential managementcredential-managementCredential management is mentioned at https://dev.to/supabase/building-secure-api-key-management-with-supabase-ksuid-postgresql-inj, but not on a page dedicated to documenting it.Detected
Programmatic auth flowprogrammatic-auth-flowAn authentication page exists at https://supabase.com/docs/guides/platform/migrating-to-supabase/firebase-auth, but it doesn't document a programmatic grant with a token endpoint.Parseable
Auth documentationauth-documentationAn authentication documentation page exists at https://supabase.com/docs/guides/auth, but it doesn't name a specific method or show how a request is authenticated.Parseable
Sandbox environmentsandbox-environmentNo sandbox or test environment documentation found at the standard docs locations an agent would check.Not detected
Documentation Quality
API reference depthapi-reference-depthAn API reference page exists at https://supabase.com/docs/guides/graphql, but it doesn't show parameters with example requests and responses.Parseable
Changelog presencechangelog-presenceA changelog is published at https://supabase.com/changelog with dated entries describing changes. To reach the top level, it would need multiple recent dated entries showing an ongoing cadence.Useful
Structured Data I/O
Structured data I/Ostructured-data-ioNo published structured-data contract found (no typed spec response schemas).Not detected
Machine-readable pricingmachine-readable-pricingNo machine-readable pricing endpoint found (HTML pricing pages do not qualify).Not detected
Data export APIdata-export-apiNo data export or bulk API documentation found at the standard docs locations an agent would check.Not detected
Observable State & Reliability
Status & health endpointsstatus-and-healthStatus page found at https://status.supabase.com/ (HTTP 200).Detected
Webhook documentationwebhook-documentationNo webhook or event documentation found at the standard docs locations an agent would check.Not detected
Retry & idempotencyretry-and-idempotencyNo retry or idempotency documentation found at the standard docs locations an agent would check.Not detected
Error documentationerror-documentationNo error documentation found at the standard docs locations an agent would check.Not detected
Machine payments (x402/MPP)x402-or-mpp-supportInformational — not scoredNo machine-payment signal observed (no HTTP 402, no payment-required response header, and no /.well-known/x402.json manifest). Payment support cannot be ruled out from an unauthenticated probe.Couldn't verify
Agent Safety & Trust
security.txtsecurity-txtsecurity.txt at https://supabase.com/.well-known/security.txt publishes a Contact address.Useful
Org identity signalsorg-identityHomepage exposes one org-identity signal (social).Detected
Metadata consistencymetadata-consistencyHomepage metadata (canonical, Open Graph, schema) is present and consistent.Cross-verified
Legal policy pageslegal-pagesBoth privacy and terms policies are discoverable with substantive content.Useful