{
  "header": "strict-transport-security",
  "value": null
}

{
  "lastModified": null,
  "schemaDates": [
    "2026-04-24T10:42:48.572Z",
    "2025-07-08T01:37:43.522Z"
  ],
  "metaDateCount": 0,
  "timeDateCount": 0
}

{
  "failedStep": "fetch",
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch to find resource",
      "status": "fail",
      "evidence": {
        "checked": [
          {
            "path": "/.well-known/webmcp.json",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "length": 58797
          },
          {
            "path": "/webmcp.json",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "length": 58771
          },
          {
            "path": "/mcp.json",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "length": 58765
          }
        ]
      },
      "issue": "WebMCP manifest was not found at the expected path.",
      "howToFix": "Keep declarative WebMCP manifest discovery informational until the manifest shape stabilizes; validate tools if you publish one."
    }
  ]
}

{
  "failedStep": "validate",
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch discovery resource",
      "status": "pass",
      "evidence": {
        "path": "/.well-known/mcp/server-card.json",
        "statusCode": 200,
        "contentType": "application/json"
      }
    },
    {
      "id": "validate",
      "title": "Validate resource body",
      "status": "fail",
      "evidence": {
        "valid": false,
        "validJson": true,
        "compatibleContentType": true,
        "document": {
          "serverInfo": {
            "name": "maker-content-cms",
            "version": "1.0.0",
            "description": "MCP endpoint for Maker.co site content operations. Public discovery is available; protected write operations require valid Payload credentials."
          },
          "transport": {
            "type": "streamable-http",
            "url": "https://www.maker.co/api/mcp"
          },
          "transports": [
            {
              "type": "streamable-http",
              "url": "https://www.maker.co/api/mcp"
            }
          ],
          "capabilities": {
            "tools": true,
            "resources": true,
            "prompts": false,
            "collections": [
              "posts",
              "pages",
              "prompts",
              "cms-platforms"
            ]
          },
          "auth": {
            "type": "oauth2-bearer",
            "authorizationServer": "https://www.maker.co/.well-known/oauth-authorization-server",
            "protectedResource": "https://www.maker.co/.well-known/oauth-protected-resource",
            "description": "Existing Payload users can exchange credentials for bearer tokens at /api/oauth/token. Payload access rules still control protected operations."
          }
        },
        "rawExcerpt": "{\"serverInfo\":{\"name\":\"maker-content-cms\",\"version\":\"1.0.0\",\"description\":\"MCP endpoint for Maker.co site content operations. Public discovery is available; protected write operations require valid Payload credentials.\"},\"transport\":{\"type\":\"streamable-http\",\"url\":\"https://www.maker.co/api/mcp\"},\"transports\":[{\"type\":\"streamable-http\",\"url\":\"https://www.maker.co/api/mcp\"}],\"capabilities\":{\"tools\":true,\"resources\":true,\"prompts\":false,\"collections\":[\"posts\",\"pages\",\"prompts\",\"cms-platforms\"]},\"auth\":{\"type\":\"oauth2-bearer\",\"authorizationServer\":\"https://www.maker.co/.well-known/oauth-authorization-server\",\"protectedResource\":\"https://www.maker.co/.well-known/oauth-protected-resource\",\"description\":\"Existing Payload users can exchange credentials for bearer tokens at /api/oauth/token. Payloa",
        "issue": "MCP Server Card response is missing required fields or has invalid transports.",
        "issueDetails": [
          {
            "title": "Missing required fields",
            "items": [
              "protocolVersion"
            ]
          }
        ],
        "missing": [
          "protocolVersion"
        ],
        "protocolVersion": "",
        "transportCount": 1,
        "transports": [
          {
            "type": "streamable-http",
            "url": "https://www.maker.co/api/mcp"
          }
        ],
        "invalidTransports": [],
        "capabilityKeys": [
          "tools",
          "resources",
          "prompts",
          "collections"
        ]
      },
      "issue": "MCP Server Card response is missing required fields or has invalid transports.",
      "howToFix": "Publish an MCP server card with valid transports and make each advertised local endpoint answer an MCP initialize request.",
      "issueDetails": [
        {
          "title": "Missing required fields",
          "items": [
            "protocolVersion"
          ]
        }
      ]
    },
    {
      "id": "endpoint-verification",
      "title": "Verify advertised MCP transport endpoints",
      "status": "fail",
      "evidence": {
        "probes": [
          {
            "url": "https://www.maker.co/api/mcp",
            "statusCode": 401,
            "contentType": "application/json",
            "initializeValid": false,
            "endpointVerified": false,
            "capabilityProbes": [
              {
                "capability": "tools",
                "method": "tools/list",
                "statusCode": 401,
                "ok": false,
                "excerpt": "{\"errors\":[{\"message\":\"Unauthorized, you must be logged in to make this request.\"}]}"
              },
              {
                "capability": "resources",
                "method": "resources/list",
                "statusCode": 401,
                "ok": false,
                "excerpt": "{\"errors\":[{\"message\":\"Unauthorized, you must be logged in to make this request.\"}]}"
              },
              {
                "capability": "prompts",
                "method": "prompts/list",
                "statusCode": 401,
                "ok": false,
                "excerpt": "{\"errors\":[{\"message\":\"Unauthorized, you must be logged in to make this request.\"}]}"
              }
            ],
            "toolExecutionProbe": {
              "method": "tools/call",
              "tool": "create_scan",
              "arguments": {
                "url": "https://example.com",
                "dryRun": true
              },
              "statusCode": 401,
              "ok": false,
              "excerpt": "{\"errors\":[{\"message\":\"Unauthorized, you must be logged in to make this request.\"}]}"
            },
            "toolExecutionVerified": false,
            "excerpt": "{\"errors\":[{\"message\":\"Unauthorized, you must be logged in to make this request.\"}]}"
          }
        ]
      },
      "issue": "At least one same-origin transport failed MCP initialize or advertised capability list probes. See probes[].capabilityProbes for the exact method, status, JSON-RPC error, and response excerpt.",
      "howToFix": "Expose a real MCP endpoint for advertised transports, or remove transports that point to ordinary HTTP APIs."
    },
    {
      "id": "tool-execution",
      "title": "Verify advertised MCP tool execution",
      "status": "warning",
      "evidence": {
        "probes": [
          {
            "url": "https://www.maker.co/api/mcp",
            "statusCode": 401,
            "contentType": "application/json",
            "initializeValid": false,
            "endpointVerified": false,
            "capabilityProbes": [
              {
                "capability": "tools",
                "method": "tools/list",
                "statusCode": 401,
                "ok": false,
                "excerpt": "{\"errors\":[{\"message\":\"Unauthorized, you must be logged in to make this request.\"}]}"
              },
              {
                "capability": "resources",
                "method": "resources/list",
                "statusCode": 401,
                "ok": false,
                "excerpt": "{\"errors\":[{\"message\":\"Unauthorized, you must be logged in to make this request.\"}]}"
              },
              {
                "capability": "prompts",
                "method": "prompts/list",
                "statusCode": 401,
                "ok": false,
                "excerpt": "{\"errors\":[{\"message\":\"Unauthorized, you must be logged in to make this request.\"}]}"
              }
            ],
            "toolExecutionProbe": {
              "method": "tools/call",
              "tool": "create_scan",
              "arguments": {
                "url": "https://example.com",
                "dryRun": true
              },
              "statusCode": 401,
              "ok": false,
              "excerpt": "{\"errors\":[{\"message\":\"Unauthorized, you must be logged in to make this request.\"}]}"
            },
            "toolExecutionVerified": false,
            "excerpt": "{\"errors\":[{\"message\":\"Unauthorized, you must be logged in to make this request.\"}]}"
          }
        ]
      },
      "issue": "MCP discovery passed, but at least one advertised tools endpoint did not accept a safe tools/call probe. See probes[].toolExecutionProbe for the exact tool, arguments, status, JSON-RPC error, and response excerpt.",
      "howToFix": "Implement tools/call for advertised tools, or report the MCP card as discovery-only until tools are executable."
    }
  ]
}

{
  "failedStep": "fetch",
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch to find resource",
      "status": "fail",
      "evidence": {
        "checked": [
          {
            "path": "/.well-known/agent.json",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "length": 58795
          },
          {
            "path": "/agent.json",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "length": 58769
          }
        ]
      },
      "issue": "agent.json was not found at the expected path.",
      "howToFix": "Publish agent.json with awp_version, domain, intent, and typed actions that point to real same-origin API or protocol endpoints."
    }
  ]
}

{
  "failedStep": "fetch",
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch to find resource",
      "status": "fail",
      "evidence": {
        "checked": [
          {
            "path": "/.well-known/agents.json",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "length": 58840
          },
          {
            "path": "/agents.json",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "length": 58814
          }
        ]
      },
      "issue": "agents.json was not found at the expected path.",
      "howToFix": "If this site uses agents.json, publish JSON with an agents array containing name and url for each agent."
    }
  ]
}

{
  "failedStep": "machine-usable-detail",
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch OpenAPI document",
      "status": "pass",
      "evidence": {
        "found": "/openapi.json",
        "statusCode": 200,
        "contentType": "application/json"
      }
    },
    {
      "id": "validate",
      "title": "Validate baseline OpenAPI structure",
      "status": "pass",
      "evidence": {
        "valid": true,
        "compatibleContentType": true,
        "format": "json",
        "version": "3.1.0",
        "pathCount": 13,
        "operationCount": 13,
        "operationWarnings": [
          {
            "path": "/api/agent/status",
            "method": "get",
            "field": "responses",
            "issue": "No response schema declared."
          },
          {
            "path": "/api/agent/search",
            "method": "get",
            "field": "responses",
            "issue": "No response schema declared."
          },
          {
            "path": "/api/oauth/token",
            "method": "post",
            "field": "responses",
            "issue": "No response schema declared."
          },
          {
            "path": "/api/pages",
            "method": "get",
            "field": "responses",
            "issue": "No response schema declared."
          },
          {
            "path": "/api/posts",
            "method": "get",
            "field": "responses",
            "issue": "No response schema declared."
          },
          {
            "path": "/api/prompts",
            "method": "get",
            "field": "responses",
            "issue": "No response schema declared."
          },
          {
            "path": "/api/graphql",
            "method": "post",
            "field": "responses",
            "issue": "No response schema declared."
          },
          {
            "path": "/markdown",
            "method": "get",
            "field": "responses",
            "issue": "No response schema declared."
          },
          {
            "path": "/llms.txt",
            "method": "get",
            "field": "responses",
            "issue": "No response schema declared."
          },
          {
            "path": "/llms-full.txt",
            "method": "get",
            "field": "responses",
            "issue": "No response schema declared."
          },
          {
            "path": "/.well-known/oauth-authorization-server",
            "method": "get",
            "field": "responses",
            "issue": "No response schema declared."
          },
          {
            "path": "/.well-known/oauth-protected-resource",
            "method": "get",
            "field": "responses",
            "issue": "No response schema declared."
          }
        ],
        "hasServers": true,
        "hasSecuritySchemes": true,
        "hasExplicitNoAuth": false,
        "rawExcerpt": "{\"openapi\":\"3.1.0\",\"info\":{\"title\":\"Maker.co Website Improvement Agent API\",\"version\":\"1.0.0\",\"description\":\"Public discovery for Maker.co, an AI website-improvement platform. The API exposes public pages, articles, prompts, markdown resources, and Payload-authenticated CMS access for existing users. Payment protocols are not advertised because Maker.co does not expose agent-native checkout or payable API routes.\"},\"servers\":[{\"url\":\"https://www.maker.co\"}],\"paths\":{\"/api/agent/status\":{\"get\":{\"operationId\":\"getAgentStatus\",\"summary\":\"Check public agent API status\",\"responses\":{\"200\":{\"description\":\"Agent API status\"}}}},\"/api/agent/search\":{\"get\":{\"operationId\":\"searchPublicContent\",\"summary\":\"Search public Maker.co website-improvement pages, articles, and prompts\",\"parameters\":[{\"name\":\""
      }
    },
    {
      "id": "machine-usable-detail",
      "title": "Check machine-usable API details",
      "status": "warning",
      "evidence": {
        "warningCount": 12,
        "warnings": [
          {
            "path": "/api/agent/status",
            "method": "get",
            "field": "responses",
            "issue": "No response schema declared."
          },
          {
            "path": "/api/agent/search",
            "method": "get",
            "field": "responses",
            "issue": "No response schema declared."
          },
          {
            "path": "/api/oauth/token",
            "method": "post",
            "field": "responses",
            "issue": "No response schema declared."
          },
          {
            "path": "/api/pages",
            "method": "get",
            "field": "responses",
            "issue": "No response schema declared."
          },
          {
            "path": "/api/posts",
            "method": "get",
            "field": "responses",
            "issue": "No response schema declared."
          },
          {
            "path": "/api/prompts",
            "method": "get",
            "field": "responses",
            "issue": "No response schema declared."
          },
          {
            "path": "/api/graphql",
            "method": "post",
            "field": "responses",
            "issue": "No response schema declared."
          },
          {
            "path": "/markdown",
            "method": "get",
            "field": "responses",
            "issue": "No response schema declared."
          },
          {
            "path": "/llms.txt",
            "method": "get",
            "field": "responses",
            "issue": "No response schema declared."
          },
          {
            "path": "/llms-full.txt",
            "method": "get",
            "field": "responses",
            "issue": "No response schema declared."
          },
          {
            "path": "/.well-known/oauth-authorization-server",
            "method": "get",
            "field": "responses",
            "issue": "No response schema declared."
          },
          {
            "path": "/.well-known/oauth-protected-resource",
            "method": "get",
            "field": "responses",
            "issue": "No response schema declared."
          }
        ],
        "hasServers": true,
        "hasSecuritySchemes": true,
        "hasExplicitNoAuth": false
      },
      "issue": "OpenAPI is valid, but missing schemas, parameters, servers, or security details reduce machine usability.",
      "howToFix": "Add servers, parameters, request bodies, response schemas, and security or explicit no-auth declarations where they apply."
    }
  ]
}

{
  "failedStep": "validate",
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch discovery resource",
      "status": "pass",
      "evidence": {
        "path": "/.well-known/mcp/server-card.json",
        "statusCode": 200,
        "contentType": "application/json"
      }
    },
    {
      "id": "validate",
      "title": "Validate resource body",
      "status": "fail",
      "evidence": {
        "valid": false,
        "validJson": true,
        "compatibleContentType": true,
        "document": {
          "serverInfo": {
            "name": "maker-content-cms",
            "version": "1.0.0",
            "description": "MCP endpoint for Maker.co site content operations. Public discovery is available; protected write operations require valid Payload credentials."
          },
          "transport": {
            "type": "streamable-http",
            "url": "https://www.maker.co/api/mcp"
          },
          "transports": [
            {
              "type": "streamable-http",
              "url": "https://www.maker.co/api/mcp"
            }
          ],
          "capabilities": {
            "tools": true,
            "resources": true,
            "prompts": false,
            "collections": [
              "posts",
              "pages",
              "prompts",
              "cms-platforms"
            ]
          },
          "auth": {
            "type": "oauth2-bearer",
            "authorizationServer": "https://www.maker.co/.well-known/oauth-authorization-server",
            "protectedResource": "https://www.maker.co/.well-known/oauth-protected-resource",
            "description": "Existing Payload users can exchange credentials for bearer tokens at /api/oauth/token. Payload access rules still control protected operations."
          }
        },
        "rawExcerpt": "{\"serverInfo\":{\"name\":\"maker-content-cms\",\"version\":\"1.0.0\",\"description\":\"MCP endpoint for Maker.co site content operations. Public discovery is available; protected write operations require valid Payload credentials.\"},\"transport\":{\"type\":\"streamable-http\",\"url\":\"https://www.maker.co/api/mcp\"},\"transports\":[{\"type\":\"streamable-http\",\"url\":\"https://www.maker.co/api/mcp\"}],\"capabilities\":{\"tools\":true,\"resources\":true,\"prompts\":false,\"collections\":[\"posts\",\"pages\",\"prompts\",\"cms-platforms\"]},\"auth\":{\"type\":\"oauth2-bearer\",\"authorizationServer\":\"https://www.maker.co/.well-known/oauth-authorization-server\",\"protectedResource\":\"https://www.maker.co/.well-known/oauth-protected-resource\",\"description\":\"Existing Payload users can exchange credentials for bearer tokens at /api/oauth/token. Payloa",
        "issue": "mcp.json response did not match the expected MCP server metadata shape. missing: protocolVersion.",
        "issueDetails": [
          {
            "title": "Missing required fields",
            "items": [
              "protocolVersion"
            ]
          }
        ],
        "missing": [
          "protocolVersion"
        ],
        "protocolVersion": "",
        "transportCount": 1,
        "transports": [
          {
            "type": "streamable-http",
            "url": "https://www.maker.co/api/mcp"
          }
        ],
        "invalidTransports": [],
        "toolCount": 0,
        "capabilityKeys": [
          "tools",
          "resources",
          "prompts",
          "collections"
        ]
      },
      "issue": "mcp.json response did not match the expected MCP server metadata shape. missing: protocolVersion.",
      "howToFix": "Publish mcp.json or an MCP server card with serverInfo, protocolVersion, transport endpoint, and capabilities.",
      "issueDetails": [
        {
          "title": "Missing required fields",
          "items": [
            "protocolVersion"
          ]
        }
      ]
    }
  ]
}

{
  "failedStep": "svcb-https-records",
  "steps": [
    {
      "id": "svcb-https-records",
      "title": "Resolve DNS-AID SVCB/HTTPS records",
      "status": "fail",
      "evidence": {
        "hostname": "www.maker.co",
        "probes": [
          {
            "name": "_index._agents.www.maker.co",
            "found": false,
            "recordCount": 1,
            "records": [],
            "hasAlpn": false,
            "hasEndpoint": false
          },
          {
            "name": "_a2a._agents.www.maker.co",
            "found": false,
            "recordCount": 1,
            "records": [],
            "hasAlpn": false,
            "hasEndpoint": false
          }
        ]
      },
      "issue": "No DNS-AID entrypoint records were found under _agents.",
      "howToFix": "Publish ServiceMode SVCB/HTTPS records such as _index._agents.example.com or _a2a._agents.example.com."
    },
    {
      "id": "service-params",
      "title": "Validate alpn and endpoint parameters",
      "status": "informational",
      "evidence": {
        "discovered": []
      },
      "howToFix": "Include alpn and endpoint service parameters in each DNS-AID record so agents know the protocol and target entrypoint."
    },
    {
      "id": "dnssec",
      "title": "Check DNSSEC material",
      "status": "warning",
      "evidence": {
        "hasDnssecMaterial": false,
        "checked": [
          {
            "name": "www.maker.co",
            "dnssecTypes": [],
            "dnssecRecordCount": 0
          },
          {
            "name": "maker.co",
            "dnssecTypes": [],
            "dnssecRecordCount": 0
          }
        ]
      },
      "issue": "DNSSEC material was not visible for the hostname or parent zone from this resolver.",
      "howToFix": "Sign the public discovery zone with DNSSEC so validating resolvers can return authenticated data."
    }
  ]
}

{
  "schemaCount": 4,
  "checkedFields": [
    {
      "path": "$[0].name",
      "value": "Maker"
    },
    {
      "path": "$[1].name",
      "value": "Maker.co"
    },
    {
      "path": "$[1].description",
      "value": "Redesign your website with AI. Describe what you want - Maker designs it, codes it, and serves it live on your existing site. No developers. No agencies. No rebuild."
    },
    {
      "path": "$[2].name",
      "value": "Maker - Homepage"
    },
    {
      "path": "$[2].description",
      "value": "Redesign your website with AI. Describe what you want - Maker designs it, codes it, and serves it live on your existing site. No developers. No agencies. No rebuild."
    },
    {
      "path": "$[2].publisher.name",
      "value": "Maker"
    },
    {
      "path": "$[3].mainEntity[0].name",
      "value": "What is Maker?"
    },
    {
      "path": "$[3].mainEntity[1].name",
      "value": "How does Maker work?"
    },
    {
      "path": "$[3].mainEntity[2].name",
      "value": "Do I need coding skills to use Maker?"
    },
    {
      "path": "$[3].mainEntity[3].name",
      "value": "What types of websites can Maker work with?"
    },
    {
      "path": "$[3].mainEntity[4].name",
      "value": "How much does Maker cost?"
    },
    {
      "path": "$[3].mainEntity[5].name",
      "value": "Is Maker secure?"
    },
    {
      "path": "$[3].mainEntity[6].name",
      "value": "How fast can Maker update my website?"
    },
    {
      "path": "$[3].mainEntity[7].name",
      "value": "Can I preview changes before they go live?"
    }
  ],
  "mismatches": [
    {
      "path": "$[1].description",
      "value": "Redesign your website with AI. Describe what you want - Maker designs it, codes it, and serves it live on your existing site. No developers. No agencies. No rebuild."
    },
    {
      "path": "$[2].description",
      "value": "Redesign your website with AI. Describe what you want - Maker designs it, codes it, and serves it live on your existing site. No developers. No agencies. No rebuild."
    },
    {
      "path": "$[3].mainEntity[1].name",
      "value": "How does Maker work?"
    },
    {
      "path": "$[3].mainEntity[2].name",
      "value": "Do I need coding skills to use Maker?"
    },
    {
      "path": "$[3].mainEntity[3].name",
      "value": "What types of websites can Maker work with?"
    },
    {
      "path": "$[3].mainEntity[4].name",
      "value": "How much does Maker cost?"
    },
    {
      "path": "$[3].mainEntity[5].name",
      "value": "Is Maker secure?"
    },
    {
      "path": "$[3].mainEntity[6].name",
      "value": "How fast can Maker update my website?"
    },
    {
      "path": "$[3].mainEntity[7].name",
      "value": "Can I preview changes before they go live?"
    }
  ],
  "score": 36,
  "weight": 18
}

{
  "failedStep": "validate",
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch discovery resource",
      "status": "pass",
      "evidence": {
        "path": "/.well-known/agent-card.json",
        "statusCode": 200,
        "contentType": "application/json"
      }
    },
    {
      "id": "validate",
      "title": "Validate resource body",
      "status": "fail",
      "evidence": {
        "valid": false,
        "validJson": true,
        "compatibleContentType": true,
        "document": {
          "name": "Maker.co Website Improvement Discovery Agent",
          "version": "1.0.0",
          "description": "Discovery metadata for Maker.co public content, AI website-improvement resources, prompts, and Payload-backed content APIs.",
          "url": "https://www.maker.co/.well-known/agent-card.json",
          "provider": {
            "name": "Maker.co",
            "url": "https://www.maker.co"
          },
          "documentationUrl": "https://www.maker.co/openapi.json",
          "defaultInputModes": [
            "application/json",
            "text/plain"
          ],
          "defaultOutputModes": [
            "application/json",
            "text/markdown",
            "text/plain"
          ],
          "supportedInterfaces": [
            {
              "name": "HTTP JSON",
              "url": "https://www.maker.co/api/agent/search",
              "transport": "https",
              "protocol": "http-json",
              "description": "Read-only public search API for Maker.co pages, articles, prompts, and AI website-improvement resources."
            },
            {
              "name": "WebMCP",
              "url": "https://www.maker.co",
              "transport": "browser",
              "description": "Browser-exposed read-only tools when navigator.modelContext is available."
            },
            {
              "name": "MCP",
              "url": "https://www.maker.co/api/mcp",
              "transport": "streamable-http",
              "description": "Payload-backed MCP endpoint for authenticated Maker.co content operations."
            }
          ],
          "securitySchemes": {
            "PayloadBearer": {
              "type": "http",
              "scheme": "bearer",
              "bearerFormat": "Payload JWT",
              "description": "Optional bearer token from /api/oauth/token for existing Payload users and protected API access."
            }
          },
          "capabilities": {
            "readOnlyDiscovery": true,
            "contentSearch": true,
            "markdownNegotiation": true,
            "webBotAuthDirectory": "https://www.maker.co/.well-known/http-message-signatures-directory",
            "streaming": false,
            "pushNotifications": false,
            "stateTransitionHistory": false
          },
          "skills": [
            {
              "id": "site-navigation",
              "name": "maker-site-navigation",
              "description": "Find Maker.co public pages, AI-readable content, sitemap, RSS, markdown, and discovery resources.",
              "url": "https://www.maker.co/.well-known/agent-skills/site-navigation.md"
            },
            {
              "id": "content-search",
              "name": "maker-content-search",
              "description": "Search public Maker.co website-improvement pages, articles, and prompts through the read-only agent search API.",
              "url": "https://www.maker.co/.well-known/agent-skills/content-search.md"
            },
            {
              "id": "prompt-discovery",
              "name": "maker-prompt-discovery",
              "description": "Discover public Maker.co prompt resources for AI-generated website pages, sections, components, and redesign ideas.",
              "url": "https://www.maker.co/.well-known/agent-skills/prompt-discovery.md"
            }
          ]
        },
        "rawExcerpt": "{\"name\":\"Maker.co Website Improvement Discovery Agent\",\"version\":\"1.0.0\",\"description\":\"Discovery metadata for Maker.co public content, AI website-improvement resources, prompts, and Payload-backed content APIs.\",\"url\":\"https://www.maker.co/.well-known/agent-card.json\",\"provider\":{\"name\":\"Maker.co\",\"url\":\"https://www.maker.co\"},\"documentationUrl\":\"https://www.maker.co/openapi.json\",\"defaultInputModes\":[\"application/json\",\"text/plain\"],\"defaultOutputModes\":[\"application/json\",\"text/markdown\",\"text/plain\"],\"supportedInterfaces\":[{\"name\":\"HTTP JSON\",\"url\":\"https://www.maker.co/api/agent/search\",\"transport\":\"https\",\"protocol\":\"http-json\",\"description\":\"Read-only public search API for Maker.co pages, articles, prompts, and AI website-improvement resources.\"},{\"name\":\"WebMCP\",\"url\":\"https://www.",
        "issue": "A2A Agent Card response is missing required fields or has invalid skill entries.",
        "issueDetails": [
          {
            "title": "Missing required fields",
            "items": [
              "protocolVersion"
            ]
          },
          {
            "title": "Invalid skills",
            "items": [
              "#0 (site-navigation) - missing: tags array",
              "#1 (content-search) - missing: tags array",
              "#2 (prompt-discovery) - missing: tags array"
            ]
          }
        ],
        "missing": [
          "protocolVersion"
        ],
        "endpointIssues": [],
        "protocolVersion": "",
        "latestVersion": false,
        "versionCompatibility": "unknown",
        "defaultInputModes": [
          "application/json",
          "text/plain"
        ],
        "defaultOutputModes": [
          "application/json",
          "text/markdown",
          "text/plain"
        ],
        "supportedInterfaces": [
          {
            "name": "HTTP JSON",
            "url": "https://www.maker.co/api/agent/search",
            "transport": "https",
            "protocol": "http-json",
            "description": "Read-only public search API for Maker.co pages, articles, prompts, and AI website-improvement resources."
          },
          {
            "name": "WebMCP",
            "url": "https://www.maker.co",
            "transport": "browser",
            "description": "Browser-exposed read-only tools when navigator.modelContext is available."
          },
          {
            "name": "MCP",
            "url": "https://www.maker.co/api/mcp",
            "transport": "streamable-http",
            "description": "Payload-backed MCP endpoint for authenticated Maker.co content operations."
          }
        ],
        "cardShapeWarnings": [],
        "invalidSkills": [
          {
            "index": 0,
            "id": "site-navigation",
            "missing": [
              "tags array"
            ]
          },
          {
            "index": 1,
            "id": "content-search",
            "missing": [
              "tags array"
            ]
          },
          {
            "index": 2,
            "id": "prompt-discovery",
            "missing": [
              "tags array"
            ]
          }
        ],
        "skills": [
          {
            "id": "site-navigation",
            "name": "maker-site-navigation",
            "description": "Find Maker.co public pages, AI-readable content, sitemap, RSS, markdown, and discovery resources.",
            "url": "https://www.maker.co/.well-known/agent-skills/site-navigation.md"
          },
          {
            "id": "content-search",
            "name": "maker-content-search",
            "description": "Search public Maker.co website-improvement pages, articles, and prompts through the read-only agent search API.",
            "url": "https://www.maker.co/.well-known/agent-skills/content-search.md"
          },
          {
            "id": "prompt-discovery",
            "name": "maker-prompt-discovery",
            "description": "Discover public Maker.co prompt resources for AI-generated website pages, sections, components, and redesign ideas.",
            "url": "https://www.maker.co/.well-known/agent-skills/prompt-discovery.md"
          }
        ],
        "endpointUrl": "https://www.maker.co/.well-known/agent-card.json",
        "skillCount": 3,
        "capabilityKeys": [
          "readOnlyDiscovery",
          "contentSearch",
          "markdownNegotiation",
          "webBotAuthDirectory",
          "streaming",
          "pushNotifications",
          "stateTransitionHistory"
        ]
      },
      "issue": "A2A Agent Card response is missing required fields or has invalid skill entries.",
      "howToFix": "Publish an A2A Agent Card with required skill details and make the advertised url answer A2A JSON-RPC requests.",
      "issueDetails": [
        {
          "title": "Missing required fields",
          "items": [
            "protocolVersion"
          ]
        },
        {
          "title": "Invalid skills",
          "items": [
            "#0 (site-navigation) - missing: tags array",
            "#1 (content-search) - missing: tags array",
            "#2 (prompt-discovery) - missing: tags array"
          ]
        }
      ]
    },
    {
      "id": "protocol-version",
      "title": "Report A2A protocol version compatibility",
      "status": "pass",
      "evidence": {
        "protocolVersion": "",
        "versionCompatibility": "unknown",
        "latestVersion": false,
        "cardShapeWarnings": []
      },
      "howToFix": "Publish a latest A2A card with supportedInterfaces when targeting v1.x, or keep reporting legacy cards as legacy-compatible."
    },
    {
      "id": "endpoint-verification",
      "title": "Verify advertised A2A endpoint",
      "status": "fail",
      "evidence": {
        "url": "https://www.maker.co/.well-known/agent-card.json",
        "statusCode": 405,
        "contentType": "text/html; charset=utf-8",
        "validA2aResponse": false,
        "excerpt": ""
      },
      "issue": "message/send did not return a successful A2A Message or Task result. Evidence includes status, JSON-RPC error, and response excerpt.",
      "howToFix": "Point the card url to a real A2A endpoint that can execute or decline advertised skills with a valid A2A response."
    },
    {
      "id": "skill-execution",
      "title": "Verify advertised A2A skill execution",
      "status": "warning",
      "evidence": {
        "ok": false,
        "skipped": "No create_scan skill was advertised.",
        "advertisedSkillIds": [
          "site-navigation",
          "content-search",
          "prompt-discovery"
        ]
      },
      "issue": "A2A endpoint responded, but advertised skill execution was not verified. Evidence includes the requested skill, status, JSON-RPC error, and response excerpt.",
      "howToFix": "Make advertised A2A skills executable through message/send, or mark them as discovery-only until execution is implemented."
    }
  ]
}

{
  "failedStep": "validate",
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch discovery resource",
      "status": "pass",
      "evidence": {
        "path": "/.well-known/agent-skills/index.json",
        "statusCode": 200,
        "contentType": "application/json"
      }
    },
    {
      "id": "validate",
      "title": "Validate resource body",
      "status": "fail",
      "evidence": {
        "valid": false,
        "validJson": true,
        "compatibleContentType": true,
        "document": {
          "$schema": "https://schemas.agentskills.io/discovery/0.2.0/schema.json",
          "skills": [
            {
              "name": "maker-site-navigation",
              "type": "documentation",
              "description": "Find Maker.co public pages, AI-readable content, sitemap, RSS, markdown, and discovery resources.",
              "url": "https://www.maker.co/.well-known/agent-skills/site-navigation.md",
              "sha256": "fcc9f691560d7f16764d0f4092c65e5fc2372bb5cd6ccd4e9f4d16e3970bb6c7",
              "digest": "sha256:fcc9f691560d7f16764d0f4092c65e5fc2372bb5cd6ccd4e9f4d16e3970bb6c7"
            },
            {
              "name": "maker-content-search",
              "type": "tool",
              "description": "Search public Maker.co website-improvement pages, articles, and prompts through the read-only agent search API.",
              "url": "https://www.maker.co/.well-known/agent-skills/content-search.md",
              "sha256": "d1f04ba0cb261e1ffeef8c4cf58b27f1f127bdf5d61a4bde306dd412c54677ba",
              "digest": "sha256:d1f04ba0cb261e1ffeef8c4cf58b27f1f127bdf5d61a4bde306dd412c54677ba"
            },
            {
              "name": "maker-prompt-discovery",
              "type": "documentation",
              "description": "Discover public Maker.co prompt resources for AI-generated website pages, sections, components, and redesign ideas.",
              "url": "https://www.maker.co/.well-known/agent-skills/prompt-discovery.md",
              "sha256": "52e1ef0297bfe9e648c7ec07c749ec6ee032ec3d4febb54e55157489972d7c99",
              "digest": "sha256:52e1ef0297bfe9e648c7ec07c749ec6ee032ec3d4febb54e55157489972d7c99"
            }
          ]
        },
        "rawExcerpt": "{\"$schema\":\"https://schemas.agentskills.io/discovery/0.2.0/schema.json\",\"skills\":[{\"name\":\"maker-site-navigation\",\"type\":\"documentation\",\"description\":\"Find Maker.co public pages, AI-readable content, sitemap, RSS, markdown, and discovery resources.\",\"url\":\"https://www.maker.co/.well-known/agent-skills/site-navigation.md\",\"sha256\":\"fcc9f691560d7f16764d0f4092c65e5fc2372bb5cd6ccd4e9f4d16e3970bb6c7\",\"digest\":\"sha256:fcc9f691560d7f16764d0f4092c65e5fc2372bb5cd6ccd4e9f4d16e3970bb6c7\"},{\"name\":\"maker-content-search\",\"type\":\"tool\",\"description\":\"Search public Maker.co website-improvement pages, articles, and prompts through the read-only agent search API.\",\"url\":\"https://www.maker.co/.well-known/agent-skills/content-search.md\",\"sha256\":\"d1f04ba0cb261e1ffeef8c4cf58b27f1f127bdf5d61a4bde306dd412c5467",
        "issue": "Agent Skills Index response did not match the expected shape. missing or invalid top-level fields: version=0.2.0; invalid skills: [{\"index\":0,\"name\":\"maker-site-navigation\",\"missing\":[],\"invalid\":[\"type must be skill-md or archive\"]},{\"index\":1,\"name\":\"maker-content-search\",\"missing\":[],\"invalid\":[\"type must be skill-md or archive\"]},{\"index\":2,\"name\":\"maker-prompt-discovery\",\"missing\":[],\"invalid\":[\"type must be skill-md or archive\"]}].",
        "schema": "https://schemas.agentskills.io/discovery/0.2.0/schema.json",
        "skillCount": 3,
        "validSkillCount": 0,
        "invalidSkills": [
          {
            "index": 0,
            "name": "maker-site-navigation",
            "missing": [],
            "invalid": [
              "type must be skill-md or archive"
            ]
          },
          {
            "index": 1,
            "name": "maker-content-search",
            "missing": [],
            "invalid": [
              "type must be skill-md or archive"
            ]
          },
          {
            "index": 2,
            "name": "maker-prompt-discovery",
            "missing": [],
            "invalid": [
              "type must be skill-md or archive"
            ]
          }
        ],
        "skills": [
          {
            "name": "maker-site-navigation",
            "type": "documentation",
            "description": "Find Maker.co public pages, AI-readable content, sitemap, RSS, markdown, and discovery resources.",
            "url": "https://www.maker.co/.well-known/agent-skills/site-navigation.md",
            "sha256": "fcc9f691560d7f16764d0f4092c65e5fc2372bb5cd6ccd4e9f4d16e3970bb6c7",
            "digest": "sha256:fcc9f691560d7f16764d0f4092c65e5fc2372bb5cd6ccd4e9f4d16e3970bb6c7"
          },
          {
            "name": "maker-content-search",
            "type": "tool",
            "description": "Search public Maker.co website-improvement pages, articles, and prompts through the read-only agent search API.",
            "url": "https://www.maker.co/.well-known/agent-skills/content-search.md",
            "sha256": "d1f04ba0cb261e1ffeef8c4cf58b27f1f127bdf5d61a4bde306dd412c54677ba",
            "digest": "sha256:d1f04ba0cb261e1ffeef8c4cf58b27f1f127bdf5d61a4bde306dd412c54677ba"
          },
          {
            "name": "maker-prompt-discovery",
            "type": "documentation",
            "description": "Discover public Maker.co prompt resources for AI-generated website pages, sections, components, and redesign ideas.",
            "url": "https://www.maker.co/.well-known/agent-skills/prompt-discovery.md",
            "sha256": "52e1ef0297bfe9e648c7ec07c749ec6ee032ec3d4febb54e55157489972d7c99",
            "digest": "sha256:52e1ef0297bfe9e648c7ec07c749ec6ee032ec3d4febb54e55157489972d7c99"
          }
        ]
      },
      "issue": "Agent Skills Index response did not match the expected shape. missing or invalid top-level fields: version=0.2.0; invalid skills: [{\"index\":0,\"name\":\"maker-site-navigation\",\"missing\":[],\"invalid\":[\"type must be skill-md or archive\"]},{\"index\":1,\"name\":\"maker-content-search\",\"missing\":[],\"invalid\":[\"type must be skill-md or archive\"]},{\"index\":2,\"name\":\"maker-prompt-discovery\",\"missing\":[],\"invalid\":[\"type must be skill-md or archive\"]}].",
      "howToFix": "Publish an index with a non-empty skills array and reachable SKILL.md URLs."
    },
    {
      "id": "skill-documents",
      "title": "Fetch advertised SKILL.md files",
      "status": "pass",
      "evidence": {
        "checkedCount": 3,
        "totalCount": 3,
        "checked": [
          {
            "url": "https://www.maker.co/.well-known/agent-skills/site-navigation.md",
            "statusCode": 200,
            "contentType": "text/markdown; charset=utf-8",
            "hasSkillHeading": true,
            "length": 1447,
            "advertisedDigest": "sha256:fcc9f691560d7f16764d0f4092c65e5fc2372bb5cd6ccd4e9f4d16e3970bb6c7",
            "actualDigest": "sha256:fcc9f691560d7f16764d0f4092c65e5fc2372bb5cd6ccd4e9f4d16e3970bb6c7",
            "digestMatches": true
          },
          {
            "url": "https://www.maker.co/.well-known/agent-skills/content-search.md",
            "statusCode": 200,
            "contentType": "text/markdown; charset=utf-8",
            "hasSkillHeading": true,
            "length": 700,
            "advertisedDigest": "sha256:d1f04ba0cb261e1ffeef8c4cf58b27f1f127bdf5d61a4bde306dd412c54677ba",
            "actualDigest": "sha256:d1f04ba0cb261e1ffeef8c4cf58b27f1f127bdf5d61a4bde306dd412c54677ba",
            "digestMatches": true
          },
          {
            "url": "https://www.maker.co/.well-known/agent-skills/prompt-discovery.md",
            "statusCode": 200,
            "contentType": "text/markdown; charset=utf-8",
            "hasSkillHeading": true,
            "length": 825,
            "advertisedDigest": "sha256:52e1ef0297bfe9e648c7ec07c749ec6ee032ec3d4febb54e55157489972d7c99",
            "actualDigest": "sha256:52e1ef0297bfe9e648c7ec07c749ec6ee032ec3d4febb54e55157489972d7c99",
            "digestMatches": true
          }
        ]
      },
      "howToFix": "Make every advertised skill URL return Markdown with a top-level heading and a matching sha256 digest, or remove broken entries from the index."
    }
  ]
}

{
  "candidatePassages": 1,
  "citablePassages": 0,
  "failingCandidateParagraphs": [],
  "citableParagraphs": [],
  "score": 45,
  "weight": 18
}

{
  "h2Count": 0,
  "questionH2s": [],
  "hasFaq": true,
  "score": 50,
  "weight": 18
}

{
  "hasSummary": false,
  "tableCount": 0,
  "tablesWithHead": 0,
  "tablesMissingThead": [],
  "orderedLists": 0,
  "hasFaq": true,
  "definitionPatterns": 0,
  "schemaBlocks": 4,
  "missingSignals": [
    "optional top summary / TL;DR / key takeaways block",
    "table with <thead> only if the page already has tabular/comparative data",
    "ordered list only if the page explains a workflow/process",
    "clear definition sentence using \"is\", \"means\", or \"refers to\" where natural"
  ],
  "score": 75,
  "weight": 24
}

{
  "title": "Maker | AI Code, Content and Design Agents for Your Website",
  "h1": "Maker - Homepage",
  "description": "Redesign your website with AI. Describe what you want - Maker designs it, codes it, and serves it live on your existing site. No developers. No agencies. No rebuild.",
  "topicOverlap": 0.2857142857142857,
  "topicTerms": [
    "maker",
    "code",
    "content",
    "design",
    "agents",
    "website",
    "homepage"
  ],
  "descriptionTerms": [
    "redesign",
    "website",
    "describe",
    "want",
    "maker",
    "designs",
    "codes",
    "serves",
    "live",
    "existing",
    "site",
    "developers",
    "agencies",
    "rebuild"
  ],
  "missingFromDescription": [
    "code",
    "content",
    "design",
    "agents",
    "homepage"
  ],
  "score": 79,
  "weight": 28
}

{
  "title": "Maker | AI Code, Content and Design Agents for Your Website",
  "h1": "Maker - Homepage",
  "description": "Redesign your website with AI. Describe what you want - Maker designs it, codes it, and serves it live on your existing site. No developers. No agencies. No rebuild.",
  "topicOverlap": 0.2857142857142857,
  "definitionCount": 0,
  "topicTerms": [
    "maker",
    "code",
    "content",
    "design",
    "agents",
    "website",
    "homepage"
  ],
  "descriptionTerms": [
    "redesign",
    "website",
    "describe",
    "want",
    "maker",
    "designs",
    "codes",
    "serves",
    "live",
    "existing",
    "site",
    "developers",
    "agencies",
    "rebuild"
  ],
  "missingFromDescription": [
    "code",
    "content",
    "design",
    "agents",
    "homepage"
  ],
  "score": 67,
  "weight": 18
}

{
  "sectionCount": 0,
  "passing": 0,
  "failing": [],
  "score": 80,
  "weight": 28
}

{
  "sectionCount": 0,
  "passing": 0,
  "failing": [],
  "score": 80,
  "weight": 8
}

{
  "headings": [],
  "expected": [
    {
      "id": "what",
      "label": "What is Maker?",
      "pattern": {}
    },
    {
      "id": "how",
      "label": "How does Maker work?",
      "pattern": {}
    },
    {
      "id": "benefits",
      "label": "Why use Maker?",
      "pattern": {}
    },
    {
      "id": "cost",
      "label": "Is Maker free or paid?",
      "pattern": {}
    },
    {
      "id": "compare",
      "label": "How does Maker compare with alternatives?",
      "pattern": {}
    }
  ],
  "missing": [
    {
      "id": "what",
      "label": "What is Maker?",
      "pattern": {}
    },
    {
      "id": "how",
      "label": "How does Maker work?",
      "pattern": {}
    },
    {
      "id": "benefits",
      "label": "Why use Maker?",
      "pattern": {}
    },
    {
      "id": "cost",
      "label": "Is Maker free or paid?",
      "pattern": {}
    },
    {
      "id": "compare",
      "label": "How does Maker compare with alternatives?",
      "pattern": {}
    }
  ],
  "score": 70,
  "weight": 8
}

{
  "visibleWords": 111,
  "schemaCount": 4,
  "score": 70,
  "weight": 6
}

{
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch to find resource",
      "status": "informational",
      "evidence": {
        "checked": [
          {
            "path": "/api/ai/context",
            "statusCode": 404,
            "contentType": "application/json",
            "length": 49
          },
          {
            "path": "/api/context",
            "statusCode": 404,
            "contentType": "application/json",
            "length": 46
          },
          {
            "path": "/context",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "length": 58806
          }
        ]
      },
      "issue": "AI context endpoint was not found at the expected path.",
      "howToFix": "Publish a concise JSON or Markdown AI context endpoint describing the product, public actions, and machine-readable resources."
    }
  ]
}

{
  "headings": [],
  "expected": [
    {
      "id": "what",
      "label": "What is Maker?",
      "pattern": {}
    },
    {
      "id": "how",
      "label": "How does Maker work?",
      "pattern": {}
    },
    {
      "id": "benefits",
      "label": "Why use Maker?",
      "pattern": {}
    },
    {
      "id": "cost",
      "label": "Is Maker free or paid?",
      "pattern": {}
    },
    {
      "id": "compare",
      "label": "How does Maker compare with alternatives?",
      "pattern": {}
    }
  ],
  "missing": [
    {
      "id": "what",
      "label": "What is Maker?",
      "pattern": {}
    },
    {
      "id": "how",
      "label": "How does Maker work?",
      "pattern": {}
    },
    {
      "id": "benefits",
      "label": "Why use Maker?",
      "pattern": {}
    },
    {
      "id": "cost",
      "label": "Is Maker free or paid?",
      "pattern": {}
    },
    {
      "id": "compare",
      "label": "How does Maker compare with alternatives?",
      "pattern": {}
    }
  ],
  "score": 70,
  "weight": 4
}

{
  "failedStep": "auth-md",
  "steps": [
    {
      "id": "auth-md",
      "title": "Fetch and validate /auth.md",
      "status": "fail",
      "evidence": {
        "path": "/auth.md",
        "ok": false,
        "statusCode": 404,
        "contentType": "text/html; charset=utf-8",
        "length": 58806,
        "validation": {
          "valid": false,
          "issue": "auth.md response did not match the expected agent registration shape. Content-Type \"text/html; charset=utf-8\" is not Markdown or text/plain; missing /.well-known/oauth-protected-resource link; missing /.well-known/oauth-authorization-server link; missing supported identity type language; missing credential type language.",
          "compatibleContentType": false,
          "contentLength": 57585,
          "hasRegisterInstructions": true,
          "hasProtectedResourceLink": false,
          "hasAuthorizationServerLink": false,
          "mentionsIdentity": false,
          "mentionsCredential": false,
          "links": [
            "/_next/static/chunks/0fo5la6mgju1c.js",
            "/_next/static/chunks/0sijcyo8uucjg.js",
            "/script",
            "/_next/static/chunks/01yjiljef~.l_.js",
            "/script",
            "/_next/static/chunks/0xy0gyrdnansa.js",
            "/script",
            "/_next/static/chunks/0icj_04~.gk.j.js",
            "/script",
            "/_next/static/chunks/turbopack-0geui4vz58bqg.js"
          ],
          "rawExcerpt": "<!DOCTYPE html><html data-dpl-id=\"dpl_21AHtwSNdWP4hGWnaBwzH7PdkgZn\" id=\"__next_error__\"><head><meta charSet=\"utf-8\"/><meta name=\"viewport\" content=\"width=device-width, initial-scale=1, maximum-scale=5\"/><link rel=\"preload\" as=\"script\" fetchPriority=\"low\" href=\"/_next/static/chunks/0fo5la6mgju1c.js?dpl=dpl_21AHtwSNdWP4hGWnaBwzH7PdkgZn\"/><script src=\"/_next/static/chunks/0sijcyo8uucjg.js?dpl=dpl_21AHtwSNdWP4hGWnaBwzH7PdkgZn\" async=\"\"></script><script src=\"/_next/static/chunks/01yjiljef~.l_.js?dpl=dpl_21AHtwSNdWP4hGWnaBwzH7PdkgZn\" async=\"\"></script><script src=\"/_next/static/chunks/0xy0gyrdnansa.js?dpl=dpl_21AHtwSNdWP4hGWnaBwzH7PdkgZn\" async=\"\"></script><script src=\"/_next/static/chunks/0icj_04~.gk.j.js?dpl=dpl_21AHtwSNdWP4hGWnaBwzH7PdkgZn\" async=\"\"></script><script src=\"/_next/static/chunks/"
        }
      },
      "issue": "auth.md response did not match the expected agent registration shape. Content-Type \"text/html; charset=utf-8\" is not Markdown or text/plain; missing /.well-known/oauth-protected-resource link; missing /.well-known/oauth-authorization-server link; missing supported identity type language; missing credential type language.",
      "howToFix": "Serve /auth.md at the site root as Markdown with agent registration instructions and links to OAuth metadata."
    },
    {
      "id": "oauth-protected-resource",
      "title": "Publish protected resource metadata",
      "status": "pass",
      "evidence": {
        "path": "/.well-known/oauth-protected-resource",
        "ok": true,
        "statusCode": 200,
        "contentType": "application/json",
        "length": 267,
        "text": "{\"resource\":\"https://www.maker.co/api\",\"authorization_servers\":[\"https://www.maker.co\"],\"scopes_supported\":[\"agent:read\",\"agent:search\",\"payload:read\",\"payload:write\"],\"bearer_methods_supported\":[\"header\"],\"resource_documentation\":\"https://www.maker.co/openapi.json\"}"
      },
      "howToFix": "Publish /.well-known/oauth-protected-resource with resource and authorization_servers fields."
    },
    {
      "id": "agent-auth-block",
      "title": "Validate agent_auth authorization metadata",
      "status": "fail",
      "evidence": {
        "valid": false,
        "validJson": true,
        "compatibleContentType": true,
        "document": {
          "issuer": "https://www.maker.co",
          "authorization_endpoint": "https://www.maker.co/api/oauth/authorize",
          "token_endpoint": "https://www.maker.co/api/oauth/token",
          "jwks_uri": "https://www.maker.co/.well-known/jwks.json",
          "service_documentation": "https://www.maker.co/openapi.json",
          "scopes_supported": [
            "agent:read",
            "agent:search",
            "payload:read",
            "payload:write"
          ],
          "response_types_supported": [],
          "grant_types_supported": [
            "password"
          ],
          "token_endpoint_auth_methods_supported": [
            "none"
          ],
          "bearer_methods_supported": [
            "header"
          ],
          "code_challenge_methods_supported": []
        },
        "rawExcerpt": "{\"issuer\":\"https://www.maker.co\",\"authorization_endpoint\":\"https://www.maker.co/api/oauth/authorize\",\"token_endpoint\":\"https://www.maker.co/api/oauth/token\",\"jwks_uri\":\"https://www.maker.co/.well-known/jwks.json\",\"service_documentation\":\"https://www.maker.co/openapi.json\",\"scopes_supported\":[\"agent:read\",\"agent:search\",\"payload:read\",\"payload:write\"],\"response_types_supported\":[],\"grant_types_supported\":[\"password\"],\"token_endpoint_auth_methods_supported\":[\"none\"],\"bearer_methods_supported\":[\"header\"],\"code_challenge_methods_supported\":[]}",
        "issue": "OAuth authorization metadata did not include a usable agent_auth block. missing agent_auth object; register_uri issues: [{\"field\":\"agent_auth.register_uri\",\"issue\":\"Missing URL.\"}]; missing supported_identity_types; missing credential_types_supported; missing claim or revocation URL.",
        "hasAgentAuth": false,
        "supportedIdentityTypes": [],
        "credentialTypesSupported": [],
        "registerUriIssues": [
          {
            "field": "agent_auth.register_uri",
            "issue": "Missing URL."
          }
        ],
        "claimUrlIssues": [],
        "revocationUrlIssues": []
      },
      "issue": "OAuth authorization metadata did not include a usable agent_auth block. missing agent_auth object; register_uri issues: [{\"field\":\"agent_auth.register_uri\",\"issue\":\"Missing URL.\"}]; missing supported_identity_types; missing credential_types_supported; missing claim or revocation URL.",
      "howToFix": "Add agent_auth to /.well-known/oauth-authorization-server with register_uri, supported identity types, credential types, and claim or revocation URLs where applicable."
    }
  ],
  "authApplicability": {
    "supportsAuth": true,
    "score": 6,
    "signals": [
      {
        "source": "link:href",
        "weight": 3,
        "match": "auth link"
      },
      {
        "source": "visible-text",
        "weight": 3,
        "match": "log in"
      }
    ]
  },
  "resourceFetchSucceeded": false
}

{
  "steps": [
    {
      "id": "advertised-location",
      "title": "Find advertised IndexNow key location",
      "status": "informational",
      "evidence": {
        "advertised": []
      },
      "issue": "No IndexNow key location was advertised in HTML, Link headers, or robots.txt.",
      "howToFix": "Advertise the key location with robots.txt IndexNow-Key, rel=\"indexnow-key\", or meta name=\"indexnow-key-location\" if you want scanners to verify it."
    },
    {
      "id": "fetch-key",
      "title": "Fetch and validate IndexNow key file",
      "status": "informational",
      "evidence": {
        "advertised": [],
        "checked": []
      },
      "issue": "No discoverable IndexNow key file was found.",
      "howToFix": "Host a UTF-8 text file named {key}.txt using a 32-character hexadecimal key whose body exactly matches the key."
    }
  ]
}

{
  "failedStep": "validate",
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch discovery resource",
      "status": "pass",
      "evidence": {
        "path": "/.well-known/oauth-authorization-server",
        "statusCode": 200,
        "contentType": "application/json"
      }
    },
    {
      "id": "validate",
      "title": "Validate resource body",
      "status": "fail",
      "evidence": {
        "valid": false,
        "issue": "OAuth Discovery response did not match the expected shape. missing response_types_supported.",
        "compatibleContentType": true,
        "missing": [],
        "endpointIssues": [],
        "issuer": "https://www.maker.co",
        "authorizationEndpoint": "https://www.maker.co/api/oauth/authorize",
        "tokenEndpoint": "https://www.maker.co/api/oauth/token",
        "jwksUri": "https://www.maker.co/.well-known/jwks.json",
        "responseTypesSupported": [],
        "grantTypesSupported": [
          "password"
        ],
        "idTokenSigningAlgValuesSupported": [],
        "rawExcerpt": "{\"issuer\":\"https://www.maker.co\",\"authorization_endpoint\":\"https://www.maker.co/api/oauth/authorize\",\"token_endpoint\":\"https://www.maker.co/api/oauth/token\",\"jwks_uri\":\"https://www.maker.co/.well-known/jwks.json\",\"service_documentation\":\"https://www.maker.co/openapi.json\",\"scopes_supported\":[\"agent:read\",\"agent:search\",\"payload:read\",\"payload:write\"],\"response_types_supported\":[],\"grant_types_supported\":[\"password\"],\"token_endpoint_auth_methods_supported\":[\"none\"],\"bearer_methods_supported\":[\"header\"],\"code_challenge_methods_supported\":[]}"
      },
      "issue": "OAuth Discovery response did not match the expected shape. missing response_types_supported.",
      "howToFix": "Publish valid OAuth/OIDC metadata only when the site actually supports OAuth/OIDC. Otherwise omit provider discovery and document any unauthenticated public APIs separately."
    },
    {
      "id": "authorization-endpoint",
      "title": "Probe authorization endpoint with an authorization-code request",
      "status": "pass",
      "evidence": {
        "url": "https://www.maker.co/api/oauth/authorize?response_type=code&client_id=can-agent-use-scanner&redirect_uri=https%3A%2F%2Fcan-agent-use.invalid%2Foauth%2Fcallback&scope=openid&state=can-agent-use-probe",
        "method": "GET",
        "statusCode": 400,
        "location": null,
        "oauthError": "unsupported_response_type",
        "contentType": "application/json",
        "excerpt": "{\"error\":\"unsupported_response_type\",\"error_description\":\"Maker.co does not provide OAuth authorization-code or OpenID Connect browser flows. Existing Payload users can request bearer tokens from /api/oauth/token with grant_type=password.\",\"token_endpoint\":\"https://www.maker.co/api/oauth/token\",\"adm"
      },
      "howToFix": "Implement an authorization endpoint that can process syntactically valid authorization requests, or remove it from discovery metadata until it exists."
    },
    {
      "id": "authorization-redirect-safety",
      "title": "Reject unregistered authorization redirects",
      "status": "pass",
      "evidence": {
        "url": "https://www.maker.co/api/oauth/authorize?response_type=code&client_id=can-agent-use-unknown-client&redirect_uri=https%3A%2F%2Fcan-agent-use.invalid%2Fattacker-callback&scope=openid&state=can-agent-use-redirect-safety",
        "method": "GET",
        "statusCode": 400,
        "location": null,
        "redirectedToUntrusted": false,
        "contentType": "application/json",
        "excerpt": "{\"error\":\"unsupported_response_type\",\"error_description\":\"Maker.co does not provide OAuth authorization-code or OpenID Connect browser flows. Existing Payload users can request bearer tokens from /api/oauth/token with grant_type=password.\",\"token_endpoint\":\"https://www.maker.co/api/oauth/token\",\"adm"
      },
      "howToFix": "Validate client_id and registered redirect_uri values before redirecting. Return a direct OAuth error for invalid clients or redirect URIs."
    },
    {
      "id": "token-endpoint",
      "title": "Probe token endpoint with advertised grant type",
      "status": "pass",
      "evidence": {
        "url": "https://www.maker.co/api/oauth/token",
        "method": "POST",
        "grantType": "password",
        "statusCode": 400,
        "oauthError": "invalid_request",
        "contentType": "application/json",
        "excerpt": "{\"error\":\"invalid_request\",\"error_description\":\"username/email and password are required.\"}"
      },
      "howToFix": "Support every advertised grant type enough to return a protocol-appropriate response, or stop advertising unsupported grants."
    },
    {
      "id": "jwks",
      "title": "Fetch and validate jwks_uri",
      "status": "fail",
      "evidence": {
        "jwksUri": "https://www.maker.co/.well-known/jwks.json",
        "statusCode": 200,
        "contentType": "application/jwk-set+json; charset=utf-8"
      },
      "issue": "jwks_uri did not return usable JWK entries for the advertised signing algorithms.",
      "howToFix": "Implement the advertised jwks_uri route with usable JWK metadata or remove it from discovery metadata until it exists."
    }
  ],
  "authApplicability": {
    "supportsAuth": true,
    "score": 6,
    "signals": [
      {
        "source": "link:href",
        "weight": 3,
        "match": "auth link"
      },
      {
        "source": "visible-text",
        "weight": 3,
        "match": "log in"
      }
    ]
  },
  "resourceFetchSucceeded": true
}

{
  "failedStep": "resource-identity",
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch protected resource metadata",
      "status": "pass",
      "evidence": {
        "path": "/.well-known/oauth-protected-resource",
        "statusCode": 200,
        "contentType": "application/json"
      },
      "howToFix": "Publish /.well-known/oauth-protected-resource JSON."
    },
    {
      "id": "metadata",
      "title": "Validate protected resource metadata",
      "status": "pass",
      "evidence": {
        "valid": true,
        "compatibleContentType": true,
        "hasResource": true,
        "authorizationServerCount": 1,
        "resource": "https://www.maker.co/api",
        "resourceIssues": [],
        "authServerIssues": [],
        "scopesSupported": [
          "agent:read",
          "agent:search",
          "payload:read",
          "payload:write"
        ],
        "bearerMethodsSupported": [
          "header"
        ],
        "rawExcerpt": "{\"resource\":\"https://www.maker.co/api\",\"authorization_servers\":[\"https://www.maker.co\"],\"scopes_supported\":[\"agent:read\",\"agent:search\",\"payload:read\",\"payload:write\"],\"bearer_methods_supported\":[\"header\"],\"resource_documentation\":\"https://www.maker.co/openapi.json\"}"
      },
      "howToFix": "Publish resource and authorization_servers as absolute URLs."
    },
    {
      "id": "resource-identity",
      "title": "Validate protected resource identity",
      "status": "fail",
      "evidence": {
        "resource": "https://www.maker.co/api",
        "expectedResource": "https://www.maker.co"
      },
      "issue": "Protected resource metadata `resource` did not match the resource identifier used to retrieve it.",
      "howToFix": "Set `resource` to the origin/resource identifier represented by /.well-known/oauth-protected-resource."
    },
    {
      "id": "protected-route-challenge",
      "title": "Probe protected API Bearer challenge",
      "status": "informational",
      "evidence": {
        "checked": [
          {
            "path": "/api/admin/scans",
            "statusCode": 404,
            "wwwAuthenticate": {
              "valid": false,
              "present": false
            },
            "expectedMetadataUrl": "https://www.maker.co/.well-known/oauth-protected-resource",
            "metadataUrlMatches": true,
            "metadataResource": "https://www.maker.co/api",
            "resourceMatchesRequestContext": false
          },
          {
            "path": "/api/admin/summary",
            "statusCode": 404,
            "wwwAuthenticate": {
              "valid": false,
              "present": false
            },
            "expectedMetadataUrl": "https://www.maker.co/.well-known/oauth-protected-resource",
            "metadataUrlMatches": true,
            "metadataResource": "https://www.maker.co/api",
            "resourceMatchesRequestContext": false
          },
          {
            "path": "/api/scans",
            "statusCode": 404,
            "wwwAuthenticate": {
              "valid": false,
              "present": false
            },
            "expectedMetadataUrl": "https://www.maker.co/.well-known/oauth-protected-resource",
            "metadataUrlMatches": true,
            "metadataResource": "https://www.maker.co/api",
            "resourceMatchesRequestContext": false
          }
        ]
      },
      "issue": "No protected route with a 401 Bearer challenge was detected; metadata alone does not prove a protected resource.",
      "howToFix": "When this site exposes bearer-protected APIs, return 401 with WWW-Authenticate: Bearer and link resource_metadata."
    }
  ],
  "authApplicability": {
    "supportsAuth": true,
    "score": 6,
    "signals": [
      {
        "source": "link:href",
        "weight": 3,
        "match": "auth link"
      },
      {
        "source": "visible-text",
        "weight": 3,
        "match": "log in"
      }
    ]
  },
  "resourceFetchSucceeded": true
}

{
  "displayValue": "Est savings of 72 KiB",
  "description": "Polyfills and transforms enable older browsers to use new JavaScript features. However, many aren't necessary for modern browsers. Consider modifying your JavaScript build process to not transpile [Baseline](https://web.dev/articles/baseline-and-polyfills) features, unless you know you must support older browsers. [Learn why most sites can deploy ES6+ code without transpiling](https://developer.chrome.com/docs/performance/insights/legacy-javascript)"
}

{
  "description": "[Avoid chaining critical requests](https://developer.chrome.com/docs/performance/insights/network-dependency-tree) by reducing the length of chains, reducing the download size of resources, or deferring the download of unnecessary resources to improve page load."
}

{
  "displayValue": "1.5 s",
  "description": "Consider reducing the time spent parsing, compiling, and executing JS. You may find delivering smaller JS payloads helps with this. [Learn how to reduce Javascript execution time](https://developer.chrome.com/docs/lighthouse/performance/bootup-time/).",
  "numericValue": 1530.610999999991
}

{
  "displayValue": "Est savings of 230 ms",
  "description": "Requests are blocking the page's initial render, which may delay LCP. [Deferring or inlining](https://developer.chrome.com/docs/performance/insights/render-blocking) can move these network requests out of the critical path."
}

{
  "checks": [
    {
      "id": "first-contentful-paint",
      "title": "First Contentful Paint",
      "score": 100,
      "displayValue": "0.3 s",
      "numericValue": 281.01283141237775
    },
    {
      "id": "speed-index",
      "title": "Speed Index",
      "score": 49,
      "displayValue": "2.3 s",
      "numericValue": 2317.081899390655
    },
    {
      "id": "interactive",
      "title": "Time to Interactive",
      "score": 67,
      "displayValue": "3.6 s",
      "numericValue": 3620.0932525716225
    },
    {
      "id": "server-response-time",
      "title": "Initial server response time was short",
      "score": 100,
      "displayValue": "Root document took 0 ms",
      "numericValue": 4
    },
    {
      "id": "max-potential-fid",
      "title": "Max Potential First Input Delay",
      "score": 88,
      "displayValue": "140 ms",
      "numericValue": 135
    },
    {
      "id": "largest-contentful-paint",
      "title": "Largest Contentful Paint",
      "score": 95,
      "displayValue": "1.0 s",
      "numericValue": 961.0564582144624
    },
    {
      "id": "total-blocking-time",
      "title": "Total Blocking Time",
      "score": 90,
      "displayValue": "150 ms",
      "numericValue": 145.5
    },
    {
      "id": "network-rtt",
      "title": "Network Round Trip Times",
      "score": 100,
      "displayValue": "30 ms",
      "numericValue": 26.13933
    }
  ]
}