API, Auth, MCP & Skill Discovery

ARD manifest

An Agentic Resource Discovery manifest is a single index of everything machine-usable you publish: MCP servers, A2A agents, OpenAPI schemas, skills.

Why it matters

One fetch tells an agent what you have, instead of nine probes of nine well-known paths.

Pass criteria

/.well-known/ai-catalog.json declares specVersion, host and at least one entry.

What the scanner records
Every request the check makes is recorded (URL, method, response status, relevant headers and a body preview) and shown under the check in your results.

How to implement it

Publish an ARD (Agentic Resource Discovery) manifest so agents can discover your site's capabilities

/.well-known/ai-catalog.json declares specVersion, host and at least one entry.

The step-by-step implementation prompt is part of the Pro plan.

See plans

agenticresourcediscovery.org SKILL.md

Scan your site

See whether this check passes on your domain, along with the other 21.

Run a scan

Related checks

API Catalog

/.well-known/api-catalog returns application/linkset+json with at least one entry.

OAuth discovery

/.well-known/oauth-authorization-server or /.well-known/openid-configuration exposes usable metadata.

OAuth Protected Resource

/.well-known/oauth-protected-resource declares resource and authorization_servers.

Auth.md

/auth.md exists with a markdown H1 mentioning auth.md.

MCP Server Card

/.well-known/mcp/server-card.json describes the server with a serverInfo.name.

A2A Agent Card

/.well-known/agent-card.json declares name, version and supported interfaces.

Agent Skills

/.well-known/agent-skills/index.json lists at least one skill.

WebMCP

Page code registers browser-side tools through navigator.modelContext.