Validate ACP discovery shape [fail]! ACP discovery is missing protocol.INFOValidate ACP discovery shape status="fail"INFOValidate ACP protocol object, name, date version, and supported_versions orderingFAILCheck protocol object and name actual={"hasProtocol":false} expected={"hasProtocol":true,"protocolName":"acp"}FAILCheck protocol version history actual={"supportedVersionCount":0,"supportedVersionsOrdered":true,"supportedVersionsEndWithCurrent":false} expected="date version with chronological supported_versions ending in current version"FAILACP discovery is missing protocol.Validate ACP endpoint and transports [fail]! api_base_url is missing or unsafe.INFOValidate ACP endpoint and transports status="fail"INFOValidate ACP API base URL and supported transportsFAILCheck safe HTTPS api_base_url actual=false expected=trueFAILCheck REST transport support actual=false expected=true transports=[] transportWarnings=[]FAILapi_base_url is missing or unsafe.Validate ACP capabilities [fail]! ACP discovery is missing capabilities.INFOValidate ACP capabilities status="fail"INFOValidate ACP services, extensions, intervention types, currencies, and localesFAILCheck capabilities object actual=false expected=trueFAILCheck stable ACP service declarations actual=[] expected="one or more known services such as checkout, orders, or delegate_payment"FAILCheck ACP capability values use stable service, extension, intervention, currency, and locale names actual="no compatibility warnings" expected="no unknown or unstable capability values" warnings=[]FAILACP discovery is missing capabilities.

Review public-card safety [warning]! The A2A Agent Card security declarations need review.INFOReview public-card safetyWARNCompare public secret findings actual=0 expected=0WARNSecurity declaration needs review warning="security scheme \"cookieSession\" is declared but not referenced by security requirements"WARNSecurity declaration needs review warning="security scheme \"bearerAuth\" is declared but not referenced by security requirements"WARNThe A2A Agent Card security declarations need review.Probe same-origin A2A endpoint [fail]! The same-origin A2A endpoint did not return a valid A2A Message, Task, or authentication challenge.INFOProbe same-origin A2A endpointINFOProbe same-origin A2A endpoint when scanner policy allows itFAILA2A endpoint probe did not validate url="https://canagentuse.com/api/a2a" statusCode=404 rpcError={"code":-32601,"message":"Method not found. Use SendMessage.","data":{"availableActions":[{"action":"list_actions","description":"Return available CanAgentUse A2A actions and expected metadata."},{"action":"create_scan","description":"Create an agent-readiness scan for a URL. Optional auth enables private scans and plan-based rate limits.","metadata":{"skillId":"create_scan","url":"https://example.com","private":false,"checks":{"include":["robots.txt","sitemap","oauth-discovery","performance","accessibility"]}}},{"action":"get_scan_status","description":"Track scan progress and retrieve status/report readiness.","metadata":{"skillId":"get_scan_status","id":"task-id"}},{"action":"get_rate_limits","description":"Return current scan usage, remaining quota, reset time, plan key, and export capabilities.","metadata":{"skillId":"get_rate_limits"}},{"action":"get_report","description":"View report links and a report preview/snapshot when ready.","metadata":{"skillId":"get_report","id":"task-id"}},{"action":"list_agent_skills","description":"Return the published CanAgentUse Skill Markdown remediation catalog.","metadata":{"skillId":"list_agent_skills","count":53,"indexUrl":"/.well-known/agent-skills/index.json"}},{"action":"get_agent_skill","description":"Return one published CanAgentUse Skill Markdown remediation guide.","metadata":{"skillId":"get_agent_skill","slug":"robots-txt"}}]}}FAILThe same-origin A2A endpoint did not return a valid A2A Message, Task, or authentication challenge.

Validate API catalog media type [warning]! The API catalog uses application/linkset+json but does not include the recommended RFC 9727 profile parameter.INFOValidate API catalog media typeWARNCompare API catalog media type actual="application/linkset+json" expected="application/linkset+json"WARNCompare RFC 9727 profile parameter actual=false expected=trueWARNThe API catalog uses application/linkset+json but does not include the recommended RFC 9727 profile parameter. status="warning"Validate API catalog targets [fail]! API catalog target https://canagentuse.com/.well-known/agent.json (agent-json) advertised application/agent+json but returned application/json.INFOValidate API catalog targetsINFOFetch same-origin API catalog targets and record same-site/external skipsPASSAPI catalog target is reachable rel="profile" href="https://canagentuse.com/llms.txt#agent-and-api-discovery" statusCode=200 contentType="text/markdown; charset=utf-8" advertisedType="text/markdown"PASSAPI catalog target is reachable rel="service-desc" href="https://canagentuse.com/openapi.json" statusCode=200 contentType="application/json" advertisedType="application/vnd.oai.openapi+json"PASSAPI catalog target is reachable rel="service-doc" href="https://canagentuse.com/llms.txt" statusCode=200 contentType="text/markdown; charset=utf-8" advertisedType="text/markdown"FAILAPI catalog target failed validation rel="agent-json" href="https://canagentuse.com/.well-known/agent.json" statusCode=200 contentType="application/json" advertisedType="application/agent+json" typeMatches=falseFAILAPI catalog target failed validation rel="agent-json" href="https://canagentuse.com/agent.json" statusCode=200 contentType="application/json" advertisedType="application/agent+json" typeMatches=falsePASSAPI catalog target is reachable rel="agent-card" href="https://canagentuse.com/.well-known/agent-card.json" statusCode=200 contentType="application/json" advertisedType="application/json"FAILAPI catalog target fetch failed rel="mcp" href="https://canagentuse.com/.well-known/mcp/server-card.json" error="The operation was aborted due to timeout"PASSAPI catalog target is reachable rel="mcp" href="https://canagentuse.com/mcp.json" statusCode=200 contentType="application/json" advertisedType="application/json"PASSAPI catalog target is reachable rel="mcp" href="https://canagentuse.com/.well-known/mcp.json" statusCode=200 contentType="application/json" advertisedType="application/json"PASSAPI catalog target is reachable rel="agent-skills" href="https://canagentuse.com/.well-known/agent-skills/index.json" statusCode=200 contentType="application/json" advertisedType="application/json"PASSAPI catalog target is reachable rel="agents-json" href="https://canagentuse.com/agents.json" statusCode=200 contentType="application/json" advertisedType="application/json"PASSAPI catalog target is reachable rel="agents-json" href="https://canagentuse.com/.well-known/agents.json" statusCode=200 contentType="application/json" advertisedType="application/json"PASSAPI catalog target is reachable rel="openid-configuration" href="https://canagentuse.com/.well-known/openid-configuration" statusCode=200 contentType="application/json" advertisedType="application/json"FAILAPI catalog target failed validation rel="oauth-authorization-server" href="https://canagentuse.com/.well-known/oauth-authorization-server" statusCode=200 contentType="application/json; charset=utf-8" advertisedType="application/oauth-authz-server+json" typeMatches=falseFAILAPI catalog target failed validation rel="oauth-protected-resource" href="https://canagentuse.com/.well-known/oauth-protected-resource" statusCode=200 contentType="application/json; charset=utf-8" advertisedType="application/oauth-protected-resource+json" typeMatches=falsePASSAPI catalog target is reachable rel="agent-auth" href="https://canagentuse.com/auth.md" statusCode=200 contentType="text/markdown; charset=utf-8" advertisedType="text/markdown"PASSAPI catalog target is reachable rel="web-bot-auth" href="https://canagentuse.com/.well-known/http-message-signatures-directory" statusCode=200 contentType="application/http-message-signatures-directory+json" advertisedType="application/http-message-signatures-directory+json"PASSAPI catalog target is reachable rel="webmcp" href="https://canagentuse.com/.well-known/webmcp.json" statusCode=200 contentType="application/webmcp+json; charset=utf-8" advertisedType="application/webmcp+json"PASSAPI catalog target is reachable rel="indexnow-key" href="https://canagentuse.com/52e163cb29f13843a5b58d2854fe46c9.txt" statusCode=200 contentType="text/plain; charset=utf-8" advertisedType="text/plain"PASSAPI catalog target is reachable rel="ai-policy" href="https://canagentuse.com/ai.txt" statusCode=200 contentType="text/plain; charset=utf-8" advertisedType="text/plain"PASSAPI catalog target is reachable rel="tdmrep" href="https://canagentuse.com/.well-known/tdmrep.json" statusCode=200 contentType="application/json; charset=utf-8" advertisedType="application/json"PASSAPI catalog target is reachable rel="commerce-non-support" href="https://canagentuse.com/.well-known/acp" statusCode=200 contentType="application/json" advertisedType="application/json"PASSAPI catalog target is reachable rel="commerce-non-support" href="https://canagentuse.com/.well-known/acp.json" statusCode=200 contentType="application/json" advertisedType="application/json"PASSAPI catalog target is reachable rel="commerce-non-support" href="https://canagentuse.com/.well-known/ucp" statusCode=200 contentType="application/json" advertisedType="application/json"PASSAPI catalog target is reachable rel="rate-limit-status" href="https://canagentuse.com/api/scans" statusCode=200 contentType="application/json" advertisedType="application/json"FAILAPI catalog target failed validation rel="docs" href="https://canagentuse.com/docs" statusCode=404 contentType="text/html; charset=utf-8" advertisedType="text/html" typeMatches=truePASSAPI catalog target is reachable rel="api" href="https://canagentuse.com/api" statusCode=200 contentType="text/html; charset=utf-8" advertisedType="text/html"PASSAPI catalog target is reachable rel="sitemap" href="https://canagentuse.com/sitemap.xml" statusCode=200 contentType="application/xml; charset=utf-8" advertisedType="application/xml"PASSAPI catalog target is reachable rel="robots" href="https://canagentuse.com/robots.txt" statusCode=200 contentType="text/plain; charset=utf-8" advertisedType="text/plain"FAILCompare API catalog target failure count actual=6 expected=0FAILAPI catalog target https://canagentuse.com/.well-known/agent.json (agent-json) advertised application/agent+json but returned application/json.