target.com

Journey

· Snapshot & citation

49.4/ 100

C · Needs work

Waymark scored target.com 49.4/100 (C) on 26 Aug 2026.

target.com is blockers remain. Discovery is the strongest layer, and Usability is the open one. Next: openAPI document.

FindMixed
12.8/20
8 of 17 checks passed
DoorMixed
17.4/30
18 of 32 checks passed
ToolsWeak
14.3/40
4 of 12 checks passed
Pay
N/A
No cart or pay rail — out of the denominator.

What should the prompt cover?

31 findings · 22 selected

Failures (19)

Warnings (12)

Group by
1. Can an agent discover and trust you?ROBOTSSITEMAPDISCOVERYSKILLS 53/100

Whether an agent can find this origin from public files and treat it as the real one.

pass
HTTPS reachable 2/2
Evidence. Homepage responded 200 over HTTPS.
Probed homepage.
pass
robots.txt present 2/2
Evidence. Valid robots.txt with User-agent rules.
Probed robots.txt.
partial
XML sitemap 1/2
Evidence. Sitemap referenced in robots.txt only.
Probed robots.txt + sitemap.
Recommended fix. Add /sitemap.xml and reference it from robots.txt.
failed
Well-known AI catalog 0/1
Evidence. No ai-plugin.json or ai-catalog.json.
Recommended fix. Add /.well-known/ai-plugin.json or /.well-known/ai-catalog.json.
failed
AGENTS.md 0/1
Evidence. agents.md status 404.
Probed public URLs named in the evidence.
Recommended fix. Publish /agents.md with agent-oriented usage notes.
partial
robots.txt AI policy Required 1/2
Evidence. robots.txt present but no named AI crawlers.
Probed robots.txt.
Recommended fix. Name GPTBot, ClaudeBot, Google-Extended, PerplexityBot and state allow or deny.
partial
Sitemap for agents Recommended 1/2
Evidence. Sitemap only referenced.
Recommended fix. Publish /sitemap.xml.
failed
HTTP Link header bonus 0/1
Evidence. No rel=sitemap|describedby|api-catalog|alternate on homepage.
Probed homepage + sitemap.
Recommended fix. Send RFC 8288 Link headers for related machine resources.
failed
ai-plugin.json bonus 0/1
Evidence. No /.well-known/ai-plugin.json.
Probed well-known paths.
Recommended fix. Optionally publish a plugin-style capability manifest.
n/a
API catalog linkset bonus 0/2
Evidence. No public API catalog (N/A).
scanner error
Wikipedia sitelink bonus 0/4
Evidence. Wikidata SPARQL The operation was aborted
Scanner error — not counted as a site fail and not in the score denominator.
scanner error
Wikidata official website bonus 0/3
Evidence. Wikidata SPARQL The operation was aborted
Scanner error — not counted as a site fail and not in the score denominator.
scanner error
Brand official-website match Recommended 0/3
Evidence. Wikidata SPARQL The operation was aborted
Scanner error — not counted as a site fail and not in the score denominator.
pass
Public MCP registry listing bonus 1/1
Evidence. Registry hit at https://registry.modelcontextprotocol.io/v0/servers?search=target.
Probed public URLs named in the evidence.
failed
Package homepage match bonus 0/1
Evidence. No npm package homepage matching target.com.
Probed homepage.
Recommended fix. Publish an official package whose homepage is this domain.
n/a
Sitemap lastmod bonus 0/1
Evidence. No sitemap.
n/a
related-website-set bonus 0/1
Evidence. No related-website-set (N/A unless multi-origin).
pass
ads.txt bonus 1/1
Evidence. ads.txt has DIRECT/RESELLER rows.
2. Do you welcome agents?ROBOTSCRAWLBOT AUTH 92/100

Whether crawlers and signed bots are allowed through rather than blocked at the door.

pass
AI crawlers not blanket-blocked 2/2
Evidence. No blanket Disallow: / for common AI bots.
n/a
robots Crawl-delay bonus 0/1
Evidence. No Crawl-delay (optional).
n/a
Web Bot Auth keys Recommended 0/2
Evidence. No http-message-signatures-directory.
partial
CORS / API hint 0.5/1
Evidence. No CORS header or obvious API path.
Recommended fix. If you expose an API, send Access-Control-Allow-Origin for intended clients.
pass
CSP or X-Frame-Options 1/1
Evidence. CSP or X-Frame-Options present.
pass
robots.txt agent-user policy Required 2/2
Evidence. No Disallow: / for ChatGPT-User, Claude-User, or Perplexity-User (silence passes).
3. Does an agent understand who you are and what you do?HTMLJSON-LDLLMS.TXTSKILLSDOCSNLWEB 62/100

Whether the site explains the product in language a model can ingest.

pass
Title and description 2/2
Evidence. Title and meta description present.
pass
JSON-LD structured data 4/4
Evidence. application/ld+json script found.
pass
html lang attribute 1/1
Evidence. html[lang] is set.
partial
JSON-LD entities Recommended 1/4
Evidence. JSON-LD present without common product types.
Recommended fix. Embed Organization, Product, Offer, SoftwareApplication, or FAQPage.
failed
JSON-LD sameAs bonus 0/2
Evidence. JSON-LD without sameAs.
Recommended fix. Add sameAs profile URLs.
pass
Open Graph basics bonus 2/2
Evidence. Open Graph plus canonical.
pass
llms.txt 2/2
Evidence. Found /llms.txt with content.
pass
llms.txt index Recommended 2/2
Evidence. llms.txt has content.
pass
llms.txt size and links Recommended 2/2
Evidence. llms.txt 6172 chars, 54 URL(s).
failed
llms-full.txt bonus 0/1
Evidence. llms-full.txt status 404.
Probed public URLs named in the evidence.
Recommended fix. Optionally publish /llms-full.txt for one-shot ingest.
n/a
Section llms.txt bonus 0/1
Evidence. No /docs/llms.txt.
n/a
NLWeb schemamap bonus 0/1
Evidence. No schemamap (N/A unless you offer NL search).
failed
Trust pages Recommended 0/2
Evidence. No about/privacy/contact link.
Recommended fix. Link about or privacy from the homepage.
n/a
Speakable markup bonus 0/1
Evidence. No SpeakableSpecification (N/A unless voice content).
n/a
humans.txt bonus 0/1
Evidence. No /humans.txt (optional).
failed
security.txt Recommended 0/1
Evidence. No /.well-known/security.txt Contact.
Probed well-known paths.
Recommended fix. Publish /.well-known/security.txt with a Contact field.
failed
RSS or Atom feed 0/1
Evidence. No RSS/Atom link.
Recommended fix. Expose an RSS or Atom feed for machine subscribers.
n/a
RSS or Atom document bonus 0/1
Evidence. No /feed or /rss.xml document.
failed
Agent instruction / when-to-use Required 0/3
Evidence. Agent file exists without when-to-use guidance.
Recommended fix. Tell agents when to reach for you: add a 'when to use this' section to your llms.txt (or a dedicated agent-instructions file) that names your best-fit use cases.
n/a
Organization schema completeness Recommended 0/2
Evidence. No Organization JSON-LD to score completeness.
pass
Schema type breadth Recommended 2/2
Evidence. JSON-LD types beyond Organization/WebSite: BreadcrumbList, ListItem.
pass
Content without JavaScript Required 3/3
Evidence. Raw HTML has H1 and 2613 visible characters without JavaScript.
4. Can an agent integrate with you?LINKSSKILLSDOCSAPIOPSMCPSDK 44/100

Whether there is a documented machine door into the product.

pass
OpenAPI / Swagger link 2/2
Evidence. Homepage links mention OpenAPI or Swagger.
Probed homepage + OpenAPI.
pass
Login or docs link 3/3
Evidence. Login or developer docs link found.
failed
MCP well-known card 0/2
Evidence. MCP mentioned without a well-known card.
Probed well-known paths.
Recommended fix. Publish /.well-known/mcp.json describing your MCP server.
pass
MCP SSE / HTTP hint 1/1
Evidence. Page mentions MCP or SSE transport.
n/a
openapi.json fetchable 0/0
Evidence. OpenAPI linked but not fetchable at common or discovered paths.
Probed OpenAPI.
failed
Webhook or API docs 0/2
Evidence. No webhook/API docs mention.
Recommended fix. Document webhooks and REST/RPC APIs for agents.
n/a
Agent skills index 0/2
Evidence. No agent-skills index (N/A unless you publish skills).
partial
OpenAPI document Required 1/7
Evidence. OpenAPI probe.
Probed OpenAPI.
Recommended fix. Publish an OpenAPI document at a stable URL. Verify: curl -sI https://target.com/openapi.json
pass
Public API surface Recommended 7/7
Evidence. Docs or API paths look callable.
partial
Developer portal Recommended 1/6
Evidence. No developer portal.
Recommended fix. Offer a self-serve docs hub.
partial
MCP server Recommended 2/6
Evidence. MCP mentioned without a documented initialize.
Recommended fix. Publish an MCP card or document the MCP URL in llms.txt, then answer initialize.
partial
MCP server card Recommended 1/2
Evidence. MCP mentioned without a card.
Recommended fix. Publish /.well-known/mcp.json or mcp/server-card.json.
n/a
Agent Skills files bonus 0/2
Evidence. No SKILL.md surface (N/A).
failed
CLI tool Recommended 0/3
Evidence. No CLI mention.
Recommended fix. Publish an official CLI.
n/a
GraphQL GET hint bonus 0/2
Evidence. No GraphQL surface (N/A).
n/a
OpenAPI UI page bonus 0/1
Evidence. No swagger-ui/redoc page.
n/a
OpenAPI (legacy slot) 0/0
Evidence. Linked but not fetched.
Probed public URLs named in the evidence.
5. Is your integration well-built?APIMCP 50/100

Whether the integration surface is complete enough to call with confidence.

n/a
MCP initialize Required 0/3
Evidence. No MCP card to initialize
partial
MCP server card Recommended 1/2
Evidence. MCP mentioned without a card.
Recommended fix. Publish /.well-known/mcp.json or mcp/server-card.json.
n/a
REST typed error model Recommended 0/1
Evidence. No OpenAPI document to analyze.
Probed OpenAPI.
n/a
REST versioning / deprecation policy Recommended 0/1
Evidence. No OpenAPI document to analyze.
Probed OpenAPI.
n/a
REST pagination pattern Recommended 0/1
Evidence. No OpenAPI document to analyze.
Probed OpenAPI.
n/a
REST async-job pattern Recommended 0/1
Evidence. No OpenAPI document to analyze.
Probed OpenAPI.
n/a
REST response schema coverage Recommended 0/1
Evidence. No OpenAPI document to analyze.
Probed OpenAPI.
n/a
Function calling compatibility Recommended 0/1
Evidence. No OpenAPI document to analyze.
Probed OpenAPI.
n/a
REST batch / bulk endpoint bonus 0/1
Evidence. No OpenAPI document to analyze.
Probed OpenAPI.
n/a
MCP tool listing bonus 0/3
Evidence. No public tools/list.
n/a
MCP tool descriptions bonus 0/3
Evidence. No public tools/list.
n/a
MCP parameter schemas bonus 0/2
Evidence. No public tools/list.
n/a
MCP tool naming bonus 0/2
Evidence. No public tools/list.
n/a
MCP tool annotations bonus 0/2
Evidence. No public tools/list.
n/a
MCP resources exposed Recommended 0/3
Evidence. No public MCP initialize.
6. Can an agent use you reliably in production?MCPAPIOPS 45/100

Whether errors, idempotency, and limits are visible before a call fails.

partial
Rate limit signal Recommended 1/2
Evidence. API surface without a rate-limit signal.
Recommended fix. Document or send rate-limit headers on APIs.
partial
Idempotency signal Recommended 1/3
Evidence. API surface without idempotency notes.
Recommended fix. Document idempotency keys for mutating calls.
partial
Machine-readable errors Recommended 1/4
Evidence. API surface without a JSON error shape.
Recommended fix. Return a JSON or problem+json error body.
pass
Honest 404 Recommended 2/2
Evidence. Unknown path returned HTTP 404.
n/a
Sandbox / test environment bonus 0/2
Evidence. Docs do not mention sandbox/test keys (N/A).
n/a
Agent onboarding friction Recommended 0/2
Evidence. No OpenAPI spec; onboarding stays N/A (no live signup probe).
Probed OpenAPI.
n/a
MCP error handling bonus 0/2
Evidence. No public tools/call surface.
7. Can an agent authenticate to you?SDKOAUTHAUTH.MDMCP 0/100

Whether an agent can obtain access without a human in the loop.

failed
OAuth / OIDC well-known 0/2
Evidence. No oauth-authorization-server or openid-configuration.
Recommended fix. Publish /.well-known/openid-configuration or oauth-authorization-server if you authenticate agents.
n/a
OAuth 2.0 surface Required 0/5
Evidence. No delegated-access surface (N/A).
n/a
OAuth AS metadata Required 0/3
Evidence. No AS metadata (N/A unless you run an AS).
n/a
PKCE S256 Required 0/2
Evidence. No OAuth metadata to evaluate PKCE.
n/a
OAuth protected resource Recommended 0/2
Evidence. No OAuth resource metadata (N/A).
n/a
Scoped permissions Recommended 0/5
Evidence. No named OAuth scopes.
n/a
Scoped permissions Recommended 0/2
Evidence. No OpenAPI document to analyze.
Probed OpenAPI.
n/a
auth.md bonus 0/2
Evidence. No /auth.md (optional).
n/a
auth.md structure bonus 0/2
Evidence. No /auth.md to grade.
failed
change-password well-known bonus 0/1
Evidence. Login surface without /.well-known/change-password.
Probed well-known paths.
Recommended fix. If users have passwords, serve /.well-known/change-password.
n/a
MCP auth mechanism bonus 0/2
Evidence. No discovered MCP endpoint to grade auth.
n/a
Agent auth WWW-Authenticate hint bonus 0/1
Evidence. No documented API path to probe for WWW-Authenticate.
8. Can an agent transact with you?PRICINGX402MPPUCPACPAP2 0/100

Whether an agent can price, pay, or check out on a documented rail.

n/a
x402 payment bonus 0/2
Evidence. No x402 (N/A unless you charge per call).
n/a
Agentic checkout (ACP) bonus 0/3
Evidence. No ACP (N/A unless agent checkout).
n/a
ACP delegated payment bonus 0/3
Evidence. No delegated payment (N/A).
n/a
Universal Commerce Protocol bonus 0/3
Evidence. No /.well-known/ucp (N/A).
Probed well-known paths.
n/a
Machine Payments Protocol bonus 0/2
Evidence. No MPP (N/A).
n/a
AP2 - Agent Payments Protocol bonus 0/3
Evidence. No AP2 profile (N/A unless commerce rail).
failed
Pricing page Recommended 0/3
Evidence. No pricing page.
Recommended fix. Publish /pricing.
n/a
pricing.md bonus 0/2
Evidence. No /pricing.md (optional).
9. Can a user act through an agent?APPS N/A

Whether a person can finish a job through an agent-facing UI.

n/a
MCP Apps UI hint bonus 0/1
Evidence. No MCP Apps hint (N/A unless you return UI).
n/a
A2A agent card Required 0/2
Evidence. No agent-card.json (N/A unless A2A).
n/a
Web app manifest bonus 0/1
Evidence. No web app manifest (N/A).
n/a
Listed on skills.sh bonus 0/1
Evidence. No official skills.sh org for this brand; community listings are N/A.
10. Can an agent operate your website directly?MARKDOWNA11YHTMLWEBMCPNLWEBLLMS.TXT 80/100

Whether an agent can read and operate the site itself when there is no API or MCP.

n/a
Markdown negotiation bonus 0/1
Evidence. No markdown twin advertised (N/A).
n/a
/index.md fallback bonus 0/1
Evidence. No /index.md twin (N/A).
pass
WebMCP page tools bonus 1/1
Evidence. WebMCP / modelContext mention.
n/a
NLWeb /ask bonus 0/1
Evidence. No NLWeb /ask (N/A).
pass
Agent mode view bonus 1/1
Evidence. mode=agent responded.
Probed public URLs named in the evidence.
n/a
NodeInfo bonus 0/1
Evidence. No nodeinfo (N/A).
n/a
oEmbed discovery bonus 0/1
Evidence. No oEmbed (N/A unless embeddable).
n/a
Markdown alternate link bonus 0/1
Evidence. No rel=alternate type=text/markdown.
failed
Markdown frontmatter metadata bonus 0/1
Evidence. Served markdown has no YAML frontmatter block.
Recommended fix. Open served markdown with a --- frontmatter block carrying title plus description, canonical, or last-updated.
n/a
Markdown content negotiation (acceptmarkdown.com) bonus 0/1
Evidence. Homepage does not negotiate markdown.
Probed homepage.
failed
Agent-UA markdown docs bonus 0/1
Evidence. Docs host did not serve markdown to GPTBot (HTTP 530, text/plain; charset=utf-8).
Recommended fix. Serve text/markdown to GPTBot (and similar agent UAs) on your docs host.
pass
Accessible document structure bonus 3/3
Evidence. Homepage HTML has main, nav, H1, and a sane heading order.
Probed homepage.
pass
Code fence validity bonus 1/1
Evidence. No fenced blocks to unbalance.
pass
llms.txt links resolve Recommended 2/2
Evidence. 8/8 sampled llms.txt links resolve to real documents.

About this snapshot & how to cite it

Public technical signals observed by Waymark. A score describes this snapshot; it does not guarantee that an agent will complete a task. Private and authenticated workflows are outside this scan.

Snapshot: . Cite the domain, score, scan time, and report URL. This URL serves the latest completed snapshot and can change after a rescan.

Methodology and limits · Markdown · JSON evidence

Scanner issues (not site fails): , , .

Share this snapshot

Embed the latest score. A badge is a public snapshot, not a certification.

Waymark score badge for target.com
Open badge SVG ↗

Also on the Board

Same-category snapshots, ordered by score. Scan times may differ.

Email me if this score changes

Join the monitoring waitlist. Monitoring is not active yet. This saves your interest; it does not schedule scans or send change alerts.

By joining, you agree to save your email and this domain for monitoring launch contact, for up to 180 days. Request removal via Contact. No billing.

Email this report

Send the current snapshot and a link. One email. Not a list.

We'll send target.com as it stands on this page.