workos.com

Journey

scanned Aug 26, 2026 · ai · Snapshot & citation

76.5/ 100

B · Ready with gaps

Waymark scored workos.com 76.5/100 (B) on 26 Aug 2026.

workos.com is usable with gaps. Usability is the strongest layer, and Discovery is the open one. Next: openAPI document.

FindMixed

14.6/20

11 of 18 checks passed

DoorMixed

23.1/30

25 of 34 checks passed

ToolsMixed

31.1/40

10 of 14 checks passed

Pay

N/A

No cart or pay rail — out of the denominator.

Group by

1. Can an agent discover and trust you?ROBOTSSITEMAPDISCOVERYSKILLS 59/100

Whether an agent can find this origin from public files and treat it as the real one.

pass

HTTPS reachable 2/2

Evidence. Homepage responded 200 over HTTPS.

Probed homepage.

pass

robots.txt present 2/2

Evidence. Valid robots.txt with User-agent rules.

Probed robots.txt.

pass

XML sitemap 2/2

Evidence. Found sitemap.xml or sitemap index.

failed

Well-known AI catalog 0/1

Evidence. No ai-plugin.json or ai-catalog.json.

Recommended fix. Add /.well-known/ai-plugin.json or /.well-known/ai-catalog.json.

failed

AGENTS.md 0/1

Evidence. agents.md status 404.

Probed public URLs named in the evidence.

Recommended fix. Publish /agents.md with agent-oriented usage notes.

partial

robots.txt AI policy Required 1/2

Evidence. robots.txt present but no named AI crawlers.

Probed robots.txt.

Recommended fix. Name GPTBot, ClaudeBot, Google-Extended, PerplexityBot and state allow or deny.

pass

Sitemap for agents Recommended 2/2

Evidence. Sitemap document fetched.

Probed sitemap.

failed

HTTP Link header bonus 0/1

Evidence. No rel=sitemap|describedby|api-catalog|alternate on homepage.

Probed homepage + sitemap.

Recommended fix. Send RFC 8288 Link headers for related machine resources.

failed

ai-plugin.json bonus 0/1

Evidence. No /.well-known/ai-plugin.json.

Probed well-known paths.

Recommended fix. Optionally publish a plugin-style capability manifest.

n/a

API catalog linkset bonus 0/2

Evidence. No public API catalog (N/A).

scanner error

Wikipedia sitelink bonus 0/4

Evidence. Wikidata SPARQL The operation was aborted

Scanner error — not counted as a site fail and not in the score denominator.

scanner error

Wikidata official website bonus 0/3

Evidence. Wikidata SPARQL The operation was aborted

Scanner error — not counted as a site fail and not in the score denominator.

scanner error

Brand official-website match Recommended 0/3

Evidence. Wikidata SPARQL The operation was aborted

Scanner error — not counted as a site fail and not in the score denominator.

pass

Public MCP registry listing bonus 1/1

Evidence. Registry hit at https://registry.modelcontextprotocol.io/v0/servers?search=workos.

Probed public URLs named in the evidence.

failed

Package homepage match bonus 0/1

Evidence. No npm package homepage matching workos.com.

Probed homepage.

Recommended fix. Publish an official package whose homepage is this domain.

failed

Sitemap lastmod bonus 0/1

Evidence. Sitemap without lastmod.

Recommended fix. Add lastmod dates to sitemap entries.

n/a

related-website-set bonus 0/1

Evidence. No related-website-set (N/A unless multi-origin).

n/a

ads.txt bonus 0/1

Evidence. No ads inventory (N/A).

2. Do you welcome agents?ROBOTSCRAWLBOT AUTH 92/100

Whether crawlers and signed bots are allowed through rather than blocked at the door.

pass

AI crawlers not blanket-blocked 2/2

Evidence. No blanket Disallow: / for common AI bots.

n/a

robots Crawl-delay bonus 0/1

Evidence. No Crawl-delay (optional).

n/a

Web Bot Auth keys Recommended 0/2

Evidence. No http-message-signatures-directory.

partial

CORS / API hint 0.5/1

Evidence. No CORS header or obvious API path.

Recommended fix. If you expose an API, send Access-Control-Allow-Origin for intended clients.

pass

CSP or X-Frame-Options 1/1

Evidence. CSP or X-Frame-Options present.

pass

robots.txt agent-user policy Required 2/2

Evidence. No Disallow: / for ChatGPT-User, Claude-User, or Perplexity-User (silence passes).

3. Does an agent understand who you are and what you do?HTMLJSON-LDLLMS.TXTSKILLSDOCSNLWEB 86/100

Whether the site explains the product in language a model can ingest.

pass

Title and description 2/2

Evidence. Title and meta description present.

pass

JSON-LD structured data 4/4

Evidence. application/ld+json script found.

pass

html lang attribute 1/1

Evidence. html[lang] is set.

partial

JSON-LD entities Recommended 1/4

Evidence. JSON-LD present without common product types.

Recommended fix. Embed Organization, Product, Offer, SoftwareApplication, or FAQPage.

pass

JSON-LD sameAs bonus 2/2

Evidence. sameAs present.

pass

Open Graph basics bonus 2/2

Evidence. Open Graph plus canonical.

pass

llms.txt 2/2

Evidence. Found /llms.txt with content.

pass

llms.txt index Recommended 2/2

Evidence. llms.txt has content.

pass

llms.txt size and links Recommended 2/2

Evidence. llms.txt 87781 chars, 752 URL(s).

pass

llms-full.txt bonus 1/1

Evidence. llms-full.txt present.

pass

Section llms.txt bonus 1/1

Evidence. Fetched /docs/llms.txt.

Probed public URLs named in the evidence.

n/a

NLWeb schemamap bonus 0/1

Evidence. No schemamap (N/A unless you offer NL search).

pass

Trust pages Recommended 2/2

Evidence. Trust links found.

n/a

Speakable markup bonus 0/1

Evidence. No SpeakableSpecification (N/A unless voice content).

n/a

humans.txt bonus 0/1

Evidence. No /humans.txt (optional).

failed

security.txt Recommended 0/1

Evidence. No /.well-known/security.txt Contact.

Probed well-known paths.

Recommended fix. Publish /.well-known/security.txt with a Contact field.

failed

RSS or Atom feed 0/1

Evidence. No RSS/Atom link.

Recommended fix. Expose an RSS or Atom feed for machine subscribers.

n/a

RSS or Atom document bonus 0/1

Evidence. No /feed or /rss.xml document.

pass

Agent instruction / when-to-use Required 3/3

Evidence. llms.txt or agent.txt has a when-to-use / jobs-you-are-for section.

n/a

Organization schema completeness Recommended 0/2

Evidence. No Organization JSON-LD to score completeness.

pass

Schema type breadth Recommended 2/2

Evidence. JSON-LD types beyond Organization/WebSite: Corporation.

pass

Content without JavaScript Required 3/3

Evidence. Raw HTML has H1 and 11552 visible characters without JavaScript.

4. Can an agent integrate with you?LINKSSKILLSDOCSAPIOPSMCPSDK 68/100

Whether there is a documented machine door into the product.

failed

OpenAPI / Swagger link 0/2

Evidence. No OpenAPI/Swagger link in HTML.

Probed OpenAPI.

Recommended fix. Link to an OpenAPI or Swagger document from the homepage.

pass

Login or docs link 3/3

Evidence. Login or developer docs link found.

failed

MCP well-known card 0/2

Evidence. MCP mentioned without a well-known card.

Probed well-known paths.

Recommended fix. Publish /.well-known/mcp.json describing your MCP server.

pass

MCP SSE / HTTP hint 1/1

Evidence. Page mentions MCP or SSE transport.

n/a

openapi.json fetchable 0/0

Evidence. API surface without a fetchable OpenAPI document.

Probed OpenAPI.

pass

Webhook or API docs 2/2

Evidence. Webhook or API docs mention found.

n/a

Agent skills index 0/2

Evidence. No agent-skills index (N/A unless you publish skills).

failed

OpenAPI document Required 0/7

Evidence. OpenAPI probe.

Probed OpenAPI.

Recommended fix. Publish an OpenAPI document at a stable URL. Verify: curl -sI https://workos.com/openapi.json

pass

Public API surface Recommended 7/7

Evidence. Docs or API paths look callable.

pass

Developer portal Recommended 6/6

Evidence. Developer hub found.

pass

MCP server Recommended 5/6

Evidence. https://mcp.workos.com/mcp initialize 401 on documented MCP (5/6 until public initialize)

Probed public URLs named in the evidence.

partial

MCP server card Recommended 1/2

Evidence. MCP mentioned without a card.

Recommended fix. Publish /.well-known/mcp.json or mcp/server-card.json.

n/a

Agent Skills files bonus 0/2

Evidence. No SKILL.md surface (N/A).

pass

CLI tool Recommended 3/3

Evidence. CLI mention found.

n/a

GraphQL GET hint bonus 0/2

Evidence. No GraphQL surface (N/A).

n/a

OpenAPI UI page bonus 0/1

Evidence. No swagger-ui/redoc page.

n/a

OpenAPI (legacy slot) 0/0

Evidence. API surface without OpenAPI.

Probed OpenAPI.

5. Is your integration well-built?APIMCP 50/100

Whether the integration surface is complete enough to call with confidence.

n/a

MCP initialize Required 0/3

Evidence. OAuth-gated MCP at https://mcp.workos.com/mcp (HTTP 401) — not scored.

Probed public URLs named in the evidence.

partial

MCP server card Recommended 1/2

Evidence. MCP mentioned without a card.

Recommended fix. Publish /.well-known/mcp.json or mcp/server-card.json.

n/a

REST typed error model Recommended 0/1

Evidence. No OpenAPI document to analyze.

Probed OpenAPI.

n/a

REST versioning / deprecation policy Recommended 0/1

Evidence. No OpenAPI document to analyze.

Probed OpenAPI.

n/a

REST pagination pattern Recommended 0/1

Evidence. No OpenAPI document to analyze.

Probed OpenAPI.

n/a

REST async-job pattern Recommended 0/1

Evidence. No OpenAPI document to analyze.

Probed OpenAPI.

n/a

REST response schema coverage Recommended 0/1

Evidence. No OpenAPI document to analyze.

Probed OpenAPI.

n/a

Function calling compatibility Recommended 0/1

Evidence. No OpenAPI document to analyze.

Probed OpenAPI.

n/a

REST batch / bulk endpoint bonus 0/1

Evidence. No OpenAPI document to analyze.

Probed OpenAPI.

n/a

MCP tool listing bonus 0/3

Evidence. OAuth-gated MCP — tools/list not failed.

n/a

MCP tool descriptions bonus 0/3

Evidence. OAuth-gated MCP — tools/list not failed.

n/a

MCP parameter schemas bonus 0/2

Evidence. OAuth-gated MCP — tools/list not failed.

n/a

MCP tool naming bonus 0/2

Evidence. OAuth-gated MCP — tools/list not failed.

n/a

MCP tool annotations bonus 0/2

Evidence. OAuth-gated MCP — tools/list not failed.

n/a

MCP resources exposed Recommended 0/3

Evidence. OAuth-gated MCP — resources/list not failed.

6. Can an agent use you reliably in production?MCPAPIOPS 82/100

Whether errors, idempotency, and limits are visible before a call fails.

pass

Rate limit signal Recommended 2/2

Evidence. Rate-limit or retry signal found.

partial

Idempotency signal Recommended 1/3

Evidence. API surface without idempotency notes.

Recommended fix. Document idempotency keys for mutating calls.

pass

Machine-readable errors Recommended 4/4

Evidence. JSON/problem error shape found.

pass

Honest 404 Recommended 2/2

Evidence. Unknown path returned HTTP 404.

n/a

Sandbox / test environment bonus 0/2

Evidence. Docs do not mention sandbox/test keys (N/A).

n/a

Agent onboarding friction Recommended 0/2

Evidence. No OpenAPI spec; onboarding stays N/A (no live signup probe).

Probed OpenAPI.

n/a

MCP error handling bonus 0/2

Evidence. OAuth-gated MCP — bad-call probe skipped.

7. Can an agent authenticate to you?SDKOAUTHAUTH.MDMCP 58/100

Whether an agent can obtain access without a human in the loop.

failed

OAuth / OIDC well-known 0/2

Evidence. No oauth-authorization-server or openid-configuration.

Recommended fix. Publish /.well-known/openid-configuration or oauth-authorization-server if you authenticate agents.

n/a

OAuth 2.0 surface Required 0/5

Evidence. No delegated-access surface (N/A).

n/a

OAuth AS metadata Required 0/3

Evidence. No AS metadata (N/A unless you run an AS).

n/a

PKCE S256 Required 0/2

Evidence. No OAuth metadata to evaluate PKCE.

pass

OAuth protected resource Recommended 2/2

Evidence. oauth-protected-resource found.

n/a

Scoped permissions Recommended 0/5

Evidence. No named OAuth scopes.

n/a

Scoped permissions Recommended 0/2

Evidence. No OpenAPI document to analyze.

Probed OpenAPI.

pass

auth.md bonus 2/2

Evidence. Fetched /auth.md.

Probed public URLs named in the evidence.

failed

auth.md structure bonus 0/2

Evidence. auth.md exists but is missing the WorkOS-style sections (3 hits).

Recommended fix. Structure /auth.md with Discover, Register, Claim, Use, Errors, and Revocation (WorkOS auth.md).

failed

change-password well-known bonus 0/1

Evidence. Login surface without /.well-known/change-password.

Probed well-known paths.

Recommended fix. If users have passwords, serve /.well-known/change-password.

pass

MCP auth mechanism bonus 2/2

Evidence. Documented MCP challenges with OAuth.

pass

Agent auth WWW-Authenticate hint bonus 1/1

Evidence. MCP 401 WWW-Authenticate resource_metadata at https://mcp.workos.com/mcp.

Probed public URLs named in the evidence.

8. Can an agent transact with you?PRICINGX402MPPUCPACPAP2 100/100

Whether an agent can price, pay, or check out on a documented rail.

n/a

x402 payment bonus 0/0

Evidence. No cart/SKU/checkout and no live payment rail (Pay N/A).

n/a

Agentic checkout (ACP) bonus 0/0

Evidence. No cart/SKU/checkout and no live payment rail (Pay N/A).

n/a

ACP delegated payment bonus 0/0

Evidence. No cart/SKU/checkout and no live payment rail (Pay N/A).

n/a

Universal Commerce Protocol bonus 0/0

Evidence. No cart/SKU/checkout and no live payment rail (Pay N/A).

n/a

Machine Payments Protocol bonus 0/0

Evidence. No cart/SKU/checkout and no live payment rail (Pay N/A).

n/a

AP2 - Agent Payments Protocol bonus 0/0

Evidence. No cart/SKU/checkout and no live payment rail (Pay N/A).

pass

Pricing page Recommended 3/3

Evidence. Fetched /pricing.

Probed public URLs named in the evidence.

pass

pricing.md bonus 2/2

Evidence. Fetched /pricing.md.

Probed public URLs named in the evidence.

9. Can a user act through an agent?APPS N/A

Whether a person can finish a job through an agent-facing UI.

n/a

MCP Apps UI hint bonus 0/1

Evidence. No MCP Apps hint (N/A unless you return UI).

n/a

A2A agent card Required 0/2

Evidence. No agent-card.json (N/A unless A2A).

n/a

Web app manifest bonus 0/1

Evidence. No web app manifest (N/A).

n/a

Listed on skills.sh bonus 0/1

Evidence. No official skills.sh org for this brand; community listings are N/A.

10. Can an agent operate your website directly?MARKDOWNA11YHTMLWEBMCPNLWEBLLMS.TXT 89/100

Whether an agent can read and operate the site itself when there is no API or MCP.

n/a

Markdown negotiation bonus 0/1

Evidence. No markdown twin advertised (N/A).

n/a

/index.md fallback bonus 0/1

Evidence. No /index.md twin (N/A).

n/a

WebMCP page tools bonus 0/1

Evidence. No in-page WebMCP (N/A).

n/a

NLWeb /ask bonus 0/1

Evidence. No NLWeb /ask (N/A).

pass

Agent mode view bonus 1/1

Evidence. mode=agent responded.

Probed public URLs named in the evidence.

n/a

NodeInfo bonus 0/1

Evidence. No nodeinfo (N/A).

n/a

oEmbed discovery bonus 0/1

Evidence. No oEmbed (N/A unless embeddable).

n/a

Markdown alternate link bonus 0/1

Evidence. No rel=alternate type=text/markdown.

failed

Markdown frontmatter metadata bonus 0/1

Evidence. Served markdown has no YAML frontmatter block.

Recommended fix. Open served markdown with a --- frontmatter block carrying title plus description, canonical, or last-updated.

n/a

Markdown content negotiation (acceptmarkdown.com) bonus 0/1

Evidence. Homepage does not negotiate markdown.

Probed homepage.

pass

Agent-UA markdown docs bonus 1/1

Evidence. GPTBot Accept: text/markdown returned text/markdown.

pass

Accessible document structure bonus 3/3

Evidence. Homepage HTML has main, nav, H1, and a sane heading order.

Probed homepage.

pass

Code fence validity bonus 1/1

Evidence. No fenced blocks to unbalance.

pass

llms.txt links resolve Recommended 2/2

Evidence. 8/8 sampled llms.txt links resolve to real documents.

About this snapshot & how to cite it

Public technical signals observed by Waymark. A score describes this snapshot; it does not guarantee that an agent will complete a task. Private and authenticated workflows are outside this scan.

Snapshot: 2026-08-26T16:31:01.267Z. Cite the domain, score, scan time, and report URL. This URL serves the latest completed snapshot and can change after a rescan.

Methodology and limits · Markdown · JSON evidence

Scanner issues (not site fails): , , .

Also on the Board

Same-category snapshots, ordered by score. Scan times may differ.

ora.ai90.9/100 · AScan them →
superset.sh90.7/100 · AScan them →
waymark.genedai.me87.2/100 · AScan them →

Email me if this score changes

Join the monitoring waitlist. Monitoring is not active yet. This saves your interest; it does not schedule scans or send change alerts.

Email this report

Send the current snapshot and a link. One email. Not a list.

workos.com

What should the prompt cover?

Failures (15)

Warnings (5)

Also on the Board

Email me if this score changes

Email this report

workos.com

Share this snapshot

Also on the Board

Email me if this score changes

Email this report