// resource · evergreen
The practical checklist for agent-ready websites.
Built for engineers and growth teams who want to evaluate gaps without sales calls. Each item is labeled by standards maturity so you can tell what's safe to ship vs experimental.
establishedemergingexperimental
Discovery
D-01
robots.txt declares all major bots explicitly
Don't rely on implicit allow. List Googlebot, GPTBot, ClaudeBot, PerplexityBot, etc.
established
D-02
sitemap.xml is complete, fresh, and reachable
Includes lastmod. No stale URLs. Referenced from robots.txt.
established
D-03
llms.txt published at /llms.txt
Lists primary pages, docs, and policies for LLM crawlers.
emerging
D-04
/.well-known/ paths exposed where appropriate
security.txt, openid-configuration, ai-plugin.json (deprecated but observed).
established
Content
C-01
Single semantic H1 per page
Outline matches visual hierarchy.
established
C-02
Schema.org coverage for primary entities
Organization, WebSite, Product, Article, FAQ, BreadcrumbList where applicable.
established
C-03
OpenGraph & Twitter cards on every shareable page
Per-route titles, descriptions, and absolute image URLs.
established
C-04
Canonical URLs on every leaf route
One canonical. No conflicts with sitemap entries.
established
API
A-01
OpenAPI specification published & linked
Discoverable from your developer docs and homepage.
established
A-02
MCP server or tool catalog where applicable
Adopt when your product surface justifies it; not all sites need MCP.
experimental
A-03
Rate-limit and quota information in headers
Standard X-RateLimit-* headers. Documented at the docs level.
established
A-04
Developer docs rendered server-side, not JS-only
Crawlers and agents should see content without JS execution.
established
Auth
AU-01
OAuth discovery metadata published
openid-configuration accessible; scopes documented.
established
AU-02
Scopes are granular and named clearly
Avoid 'read_everything' style scopes.
established
AU-03
Agent-friendly session handling considered
Long-lived API tokens vs interactive sessions distinguished in docs.
experimental
Commerce
E-01
Product, price, availability structured data
schema.org/Product with current Offer node.
established
E-02
Product feed published for shopping surfaces
Google Merchant feed, etc., kept current.
established
E-03
Checkout determinism for agentic commerce
Reproducible checkout flows; no surprise interstitials.
emerging
Governance
G-01
Crawler traffic measured and segmented
Distinguish search, AI, monitoring, and unknown UA traffic.
established
G-02
WAF/CDN policy aligned with robots.txt
Avoid silently 403ing bots you allowed in robots.txt.
established
G-03
Security headers configured
HSTS, CSP, X-Content-Type-Options, Referrer-Policy, Permissions-Policy.
established
Want this scored against your actual site?
Send your URL and an existing scanner result. We'll decode what matters.
Use the Score Decoder →