AgentsReady
Readiness index · #62 of 1846

elmah.io

Run the agent liveReport a change
85Readiness score / 100
L4 Agent-nativeBeats 97% of 1,846 companies
Access20/20
Context18/20
Interfaces32/32
Onboarding13/19
Trust2/9
llms.txt · root
MCP · https://mcp.elmah.io/mcp

Biggest gains

  1. +6 Agents can self-register OAuth clients. Support dynamic client registration (RFC 7591) or client ID metadata documents so MCP clients connect in one click.
  2. +4 Agent manifests. Publish an MCP server card (/.well-known/mcp.json) or A2A agent card.
  3. +3 Public status page. Link a status page so agents can tell outages from bugs.
All 20 checks
  • PASSAgents get the real page, not a bot wall10
  • PASSrobots.txt lets user-triggered agents in6
  • PASSContent is server-rendered4
  • PASSllms.txt exists8
  • PASSllms-full.txt exists3
  • PASSDocs available as markdown6
  • FAILSitemap2
  • PASSStructured metadata1
  • PASSPublic developer docs4
  • PASSMachine-readable API spec8
  • PASSRemote MCP server for the product12
  • PASSDocs MCP or searchable docs4
  • PASSSDKs and a CLI4
  • PASSOAuth discovery metadata5
  • FAILAgents can self-register OAuth clients6
  • PASSSelf-serve API keys5
  • PASSFree tier or test mode3
  • FAILAgent manifests4
  • PASSsecurity.txt2
  • FAILPublic status page3

Your fix pack: 5 changes, up to +15 points

Each change is ready to paste, filled in for elmah.io, with a command to check it worked. Or hand the whole list to your coding agent.

Without client self-registration, every new agent needs a human to create an OAuth app before it can connect. This is the biggest one-click blocker we see.

Where: Your authorization server
Support one of:
1. Client ID metadata documents (CIMD, preferred by the current MCP auth spec): accept a client_id that is an
   https URL, fetch its JSON metadata, and validate redirect_uris against it.
2. Dynamic client registration (RFC 7591): POST /oauth/register returns a client_id for any MCP client.

Don't want to build it? WorkOS AuthKit, Stytch Connected Apps, Clerk and Auth0 all ship MCP-ready OAuth with DCR/CIMD.
Require PKCE (S256), short-lived tokens, and show the user a consent screen with the scopes.

Add the badge to your README

AgentsReady badge for elmah.io
[![AgentsReady](https://agentsready.dev/badge/elmah.io)](https://agentsready.dev/c/elmah.io)