AgentsReady
Readiness index · #375 of 1846

coinbase.com

Run the agent liveReport a change
59Readiness score / 100
L2 Agent-documentedBeats 79% of 1,846 companies
Access6/20
Context13/20
Interfaces20/32
Onboarding11/19
Trust9/9
llms.txt · root
MCP · https://agents.coinbase.com/mcp

Biggest gains

  1. +10 Agents get the real page, not a bot wall. Serve the homepage to AI user-agents (Claude-User, ChatGPT-User) without a challenge or 403.
  2. +8 Machine-readable API spec. Publish an OpenAPI spec at a stable URL like /openapi.json and link it from llms.txt.
  3. +6 Docs available as markdown. Serve every docs page as .md, or honour Accept: text/markdown.
All 20 checks
  • FAILAgents get the real page, not a bot wall10
  • PASSrobots.txt lets user-triggered agents in6
  • FAILContent is server-rendered4
  • PASSllms.txt exists8
  • PASSllms-full.txt exists3
  • FAILDocs available as markdown6
  • PASSSitemap2
  • FAILStructured metadata1
  • FAILPublic developer docs4
  • FAILMachine-readable API spec8
  • PASSRemote MCP server for the product12
  • PASSDocs MCP or searchable docs4
  • PASSSDKs and a CLI4
  • PASSOAuth discovery metadata5
  • PASSAgents can self-register OAuth clients6
  • FAILSelf-serve API keys5
  • FAILFree tier or test mode3
  • PASSAgent manifests4
  • PASSsecurity.txt2
  • PASSPublic status page3

Your fix pack: 9 changes, up to +41 points

Each change is ready to paste, filled in for coinbase.com, with a command to check it worked. Or hand the whole list to your coding agent.

Your homepage returned a challenge or 403 to a Claude-User agent. Agents acting for a person give up and pick a competitor.

Where: Your WAF or bot-management rules (Cloudflare, Akamai, Vercel Firewall, AWS WAF)
Cloudflare: Security > WAF > Custom rules > Create rule
  Name: Allow user-triggered AI agents
  Expression:
    (http.user_agent contains "Claude-User") or (http.user_agent contains "ChatGPT-User")
    or (http.user_agent contains "Perplexity-User") or (http.user_agent contains "OAI-SearchBot")
    or (http.user_agent contains "Claude-SearchBot")
  Action: Skip > All remaining custom rules, Super Bot Fight Mode, Browser Integrity Check

Also in Security > Bots: turn on "Allow verified bots".
Keep rate limits on; only the challenge page is the problem.
Check it worked:curl -s -o /dev/null -w "%{http_code}\n" -A "Claude-User/1.0" https://coinbase.com/ # expect 200

Add the badge to your README

AgentsReady badge for coinbase.com
[![AgentsReady](https://agentsready.dev/badge/coinbase.com)](https://agentsready.dev/c/coinbase.com)