API, Auth, MCP & Skill Discovery

A2A Agent Card

An Agent2Agent card publishes your agent's identity, skills and interfaces so other agents can discover and call it.

Why it matters

Useful when you want to be a participant in multi-agent workflows rather than just a data source.

Pass criteria

/.well-known/agent-card.json declares name, version and supported interfaces.

What the scanner records
Every request the check makes is recorded (URL, method, response status, relevant headers and a body preview) and shown under the check in your results.

How to implement it

Publish an A2A Agent Card so other agents can discover this site's agent

/.well-known/agent-card.json declares name, version and supported interfaces.

The step-by-step implementation prompt is part of the Pro plan.

See plans

a2a-protocol.org google.github.io SKILL.md

Scan your site

See whether this check passes on your domain, along with the other 21.

Run a scan

Related checks

API Catalog

/.well-known/api-catalog returns application/linkset+json with at least one entry.

OAuth discovery

/.well-known/oauth-authorization-server or /.well-known/openid-configuration exposes usable metadata.

OAuth Protected Resource

/.well-known/oauth-protected-resource declares resource and authorization_servers.

Auth.md

/auth.md exists with a markdown H1 mentioning auth.md.

MCP Server Card

/.well-known/mcp/server-card.json describes the server with a serverInfo.name.

Agent Skills

/.well-known/agent-skills/index.json lists at least one skill.

WebMCP

Page code registers browser-side tools through navigator.modelContext.

ARD manifest

/.well-known/ai-catalog.json declares specVersion, host and at least one entry.