Publish an API catalog
An RFC 9727 catalog at /.well-known/api-catalog lists your APIs and links each to its OpenAPI description. One request, and an agent knows what you offer.
SagBot reads /.well-known/api-catalog on your site and the links in it.
Describe your MCP server
If you run an MCP server, a server card at /.well-known/mcp/server-card.json lets MCP clients find it and set it up from your domain alone, instead of a user copying a URL from your docs.
SagBot reads the MCP server card paths under /.well-known/ on your site.
Publish an agent card
If your product is itself an agent, an A2A card at /.well-known/agent-card.json tells other agents what it does and how to talk to it.
SagBot reads /.well-known/agent-card.json on your site.
Make sign-in discoverable
Authorization server metadata lets an agent find your sign-in and token endpoints without hard-coding them. Serve /.well-known/oauth-authorization-server or /.well-known/openid-configuration.
SagBot reads the OAuth and OpenID Connect metadata documents on your site.
Say which server issues tokens for your API
RFC 9728 metadata at /.well-known/oauth-protected-resource tells an agent which authorization server to ask for a token before calling your API. MCP servers that require sign-in rely on it.
SagBot reads /.well-known/oauth-protected-resource on your site.
Explain how agents get credentials
An /auth.md file says in plain Markdown how an agent registers, which scopes exist and where keys come from. Shown as advice: it’s new, and cheap to add.
SagBot reads /auth.md on your site.
Expose your app’s actions as WebMCP tools
WebMCP lets an agent running in the browser call your app’s actions as tools instead of clicking through the UI. Register tools with document.modelContext.registerTool(), or add toolname and tooldescription to key forms.
SagBot reads your site’s HTML and scripts for registered WebMCP tools or annotated forms. It’s advice, not part of the score.
See which of these your product passes
Scan as an API or app to include these checks. Each failing one comes with a fix to paste into a coding agent.