# Agent Ready (npm · agent-ready-mcp)

Scan any URL for AI agent readability — Vercel Spec, llmstxt.org, and agent-protocol manifests.

- Trust score: 80/100 (high trust)
- Change this week: +4
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-04

## Components

- remote · `agent-ready.dev`: 83/100, [markdown](https://verifymcp.io/servers/mlava-agent-ready-mcp/api-v1-mcp.md), [page](https://verifymcp.io/servers/mlava-agent-ready-mcp/api-v1-mcp)
- npm · `agent-ready-mcp`: 80/100 (this document), [markdown](https://verifymcp.io/servers/mlava-agent-ready-mcp/agent-ready-mcp.md), [page](https://verifymcp.io/servers/mlava-agent-ready-mcp/agent-ready-mcp)

## Channel facts

- Registry: `npm`
- Package: `agent-ready-mcp`
- Version: `0.7.2`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-04.

- **Supply Chain Security**: 83/100
  - No malware found by supply-chain analysis.
  - CVE check failed: a known medium-severity CVE affects hono 4.12.33, reached via @modelcontextprotocol/sdk > hono. A fixed version is available.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (94 of 98), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 97/100
  - Source repository is publicly reachable at the declared URL.
  - Cryptographically verified build provenance (signed, bound to mlava/agent-ready-mcp).
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 4 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 83/100
  - 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 931 tokens (~116/item across 8 items; 4 tools + 4 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 27/100
  - Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
  - Structured output schemas are declared (100% of tools); any adoption earns full credit.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add mlava-agent-ready-mcp -- npx -y agent-ready-mcp
```

### Codex

```bash
codex mcp add mlava-agent-ready-mcp -- npx -y agent-ready-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "mlava-agent-ready-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "agent-ready-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add mlava-agent-ready-mcp --command npx --arg -y --arg agent-ready-mcp
```

### Hermes

```yaml
mcp_servers:
  mlava-agent-ready-mcp:
    command: "npx"
    args: ["-y", "agent-ready-mcp"]
```

### Other

```json
{
  "mcpServers": {
    "mlava-agent-ready-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "agent-ready-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-04 (score 80, 0)

- [security regression] CVE-2026-69207 affects this package: medium
- [security regression] Known CVEs: partial → fail

### 2026-08-02 (score 80, +41)

- [security improvement] Install scripts: unverified → pass
- [security improvement] Known CVEs: unverified → partial
- [security improvement] Provenance: unverified → pass
- [security improvement] Malware scan: unverified → pass
- [security] The attested source repository moved: mlava/agent-ready-mcp
- [functional improvement] License: unverified → pass
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] Dependency health: unverified → partial
- [functional] Licence: MIT

### 2026-08-01 (score 39, −3)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-31 (score 42, 0)

- [functional] Package version: 0.7.0 → 0.7.2

### 2026-07-30 (score 42, −34)

- [security regression] Install scripts: pass → unverified
- [security regression] Known CVEs: partial → unverified
- [security regression] Provenance: pass → unverified
- [security] The attested source repository moved: mlava/agent-ready-mcp
- [functional regression] License: pass → unverified
- [functional regression] Dependency health: partial → unverified
- [functional regression] Maintenance: pass → unverified
- [functional] Licence: MIT

### 2026-07-28 (score 76, +70)

- [security improvement] Install scripts: unverified → pass
- [security improvement] Provenance: unverified → pass
- [security improvement] Known CVEs: unverified → partial
- [security] The attested source repository moved: mlava/agent-ready-mcp
- [functional improvement] Tool coverage: unverified → 100
- [functional improvement] License: unverified → pass
- [functional improvement] Schema quality: unverified → 100
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] Maintenance: unverified → pass
- [functional] First check of Schema quality: good
- [functional] First check of Tool coverage: 100
- [functional] First check of Schema quality: fail
- [functional] First check of Schema quality: fail
- [functional] First check of Tool coverage: 100
- [functional] Licence: MIT

### 2026-07-27 (score 6)

First indexed and scored.

## MCP tools (4)

### `scan_site` (~174 tokens)

Scan a site for AI agent readability

Runs the agent-ready.dev scanner against a URL and returns structured results: Vercel score, llmstxt.org score, and per-check findings with remediation hints. Works without an API key on the anonymous free tier (3 scans/30 days per IP, 25-page depth, synchronous). With a Pro AGENT_READY_API_KEY it scans deeper (up to 250 pages) and may take up to ~60s; if the local poll deadline elapses, the tool returns the scan id and asks you to poll with get_scan.

Input parameters:

- `pageLimit` (integer): Optional maximum number of pages to crawl from the root URL. Capped by your plan (Free 25, Pro 250, Team 2000).
- `url` (string, required): Fully-qualified URL to scan, including scheme (https://...).

Output parameters:

- `completedAt`
- `createdAt` (string)
- `id` (string)
- `llmstxtChecks` (array)
- `llmstxtScore` (number)
- `message` (string)
- `pageResults` (array)
- `pagesDiscovered` (number)
- `pagesScanned` (number)
- `pollUrl` (string)
- `rootUrl` (string)
- `saveUrl` (string)
- `shareToken` (string)
- `siteChecks` (array)
- `status` (string)
- `url` (string)
- `vercelRating` (string)
- `vercelScore` (number)

### `get_scan` (~73 tokens)

Get a previous scan by id

Fetches a completed or in-progress scan by its id. Requires a Pro API key — scan history is account-scoped. (Anonymous scan_site calls return their result inline, so keyless use never needs this tool.)

Input parameters:

- `id` (string, required): Scan id returned by a previous scan_site call (10-character nanoid).

Output parameters:

- `completedAt`
- `createdAt` (string)
- `id` (string)
- `llmstxtChecks` (array)
- `llmstxtScore` (number)
- `message` (string)
- `pageResults` (array)
- `pagesDiscovered` (number)
- `pagesScanned` (number)
- `pollUrl` (string)
- `rootUrl` (string)
- `saveUrl` (string)
- `shareToken` (string)
- `siteChecks` (array)
- `status` (string)
- `url` (string)
- `vercelRating` (string)
- `vercelScore` (number)

### `ask` (~181 tokens)

Ask Agent Ready in natural language

Natural-language search (NLWeb /ask) over Agent Ready's own content — scoring methodology, the check registry, the specs it validates, and the content library (explainers, comparisons, how-to guides, glossary). Public, no API key required. Returns Schema.org-typed result objects; optional itemType narrows to a corpus type and mode 'summarize' adds an extractive summary.

Input parameters:

- `itemType` (string): Optional filter narrowing the search to one corpus type ('page' = explainers/guides/glossary).
- `mode` (string): 'summarize' adds an extractive summary over the top results.
- `q` (string, required): Natural-language question about Agent Ready's scoring methodology, its check registry, the specs it validates, or its content library (explainers, comparisons, how-to guides, glossary).

Output parameters:

- `_meta` (object)
- `error` (object)
- `mode` (string)
- `query` (string)
- `query_id` (string)
- `results` (array)
- `site` (string)
- `summary` (string)

### `validate_structured_data` (~191 tokens)

Validate JSON-LD structured data

Validates a page's (or a pasted) JSON-LD against Agent Ready's structured-data checks (schema lint + agent-coherence: freshness honesty, canonical/.md coherence, entity-name consistency, extraction signal) and returns a verdict with per-check fix guidance. Provide exactly one of `url` (fetch + validate) or `jsonld` (validate a string the agent just authored — no network needed). Public, no API key required. The one structured-data check the first-party validators (validator.schema.org, Rich Results Test) don't do.

Input parameters:

- `jsonld` (string): A raw JSON-LD string to validate directly (paste mode) — e.g. structured data an agent just authored. Provide either jsonld OR url, not both.
- `url` (string): URL of a page to fetch and validate its JSON-LD. Provide either url OR jsonld, not both.

Output parameters:

- `checks` (array)
- `mode` (string)
- `summary` (object)
- `url`

## Diagnostics

Captured diagnostic sections: Provenance, Vulnerabilities, Dependencies. The full working is on the page: https://verifymcp.io/servers/mlava-agent-ready-mcp/agent-ready-mcp#diagnostics

## Score history

- 2026-08-04: 80
- 2026-08-03: 80
- 2026-08-02: 80
- 2026-08-01: 39
- 2026-07-31: 42
- 2026-07-30: 42
- 2026-07-28: 76
- 2026-07-27: 6

## Links

- npm package: https://www.npmjs.com/package/agent-ready-mcp
- Socket report: https://socket.dev/npm/package/agent-ready-mcp
- Repository: https://github.com/mlava/agent-ready-mcp
- Website: https://agent-ready.dev/
- Changelog RSS feed: https://verifymcp.io/servers/mlava-agent-ready-mcp/agent-ready-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/mlava-agent-ready-mcp/agent-ready-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/mlava-agent-ready-mcp/agent-ready-mcp