api.qa/llms-full.txt

#	Check	Verdict
01	llms.txt is served and agent-actionable	FAIL
02	/.well-known/agents.json capability card parses	FAIL
03	/icp.json self-classification surface	FAIL
04	root content-negotiates (curl → markdown, browser → HTML, agent JSON → JSON/non-HTML)	FAIL
05	machine-readable API contract (OpenAPI) is published	FAIL
06	MCP interface declared with transport + tools	FAIL
07	at least one declared endpoint answers 2xx with no key	FAIL
08	payment boundaries answer as structured 402 offers	FAIL
09	surfaces cross-reference each other (linkset)	FAIL
10	attestation/identity ladder is declared	FAIL

FAILllms.txt is served and agent-actionablellms-txt

expected 200 markdown (H1 + substantive content) at /llms.txt — got: status 530

FAIL/.well-known/agents.json capability card parsesagents-json

expected valid JSON with a name and interfaces at /.well-known/agents.json — got: status 530

FAIL/icp.json self-classification surfaceicp-json

expected valid JSON with agent_classes at /icp.json — got: status 530

FAILroot content-negotiates (curl → markdown, browser → HTML, agent JSON → JSON/non-HTML)content-negotiation

agent Accept received HTML (or nothing) — curl gets a wall of markup — got: status 530

FAILmachine-readable API contract (OpenAPI) is publishedopenapi

no parseable OpenAPI document found (declared URL or /openapi.json) — got: status 530

FAILMCP interface declared with transport + toolsmcp-declared

agents.json interfaces.mcp with a transport/url and a non-empty tools list — got: status 530

skipMCP endpoint publishes RFC 9728 protected-resource metadatamcp-oauth-protected-resource

no MCP interface declared — nothing to verify

skipauthorization server publishes RFC 8414 metadata (openid-configuration fallback)mcp-oauth-as-metadata

no MCP interface declared — nothing to verify

skipauthorization server advertises PKCE S256 (RFC 7636)mcp-pkce

no MCP interface declared — nothing to verify

skipauthorization server supports Dynamic Client Registration (RFC 7591)mcp-oauth-dcr

no MCP interface declared — nothing to verify

skipprotected-resource declares an RFC 8707 audience bound to the MCP originmcp-oauth-resource-indicators

no MCP interface declared — nothing to verify

skipunauthenticated MCP request returns 401 with WWW-Authenticate → protected-resource metadatamcp-www-authenticate

no MCP interface declared — nothing to verify

skipAAP discovery advertises Ed25519 + approval methods + register/status/revoke + jwks_uriaap-discovery

no /.well-known/agent-configuration document (2xx) — target does not claim the Agent Auth Protocol

skipauth.md agent-identity advertised (agent_auth identity/claim/events + ID-JAG + SET revocation)authmd-agent-identity

no authorization-server metadata resolved (no MCP/OAuth AS declared) — nothing advertises an agent_auth block

FAILat least one declared endpoint answers 2xx with no keykeyless-flow

no keyless GET candidates discoverable from agents.json/OpenAPI — nothing an agent can try without an account

FAILpayment boundaries answer as structured 402 offersoffers-402

no monetization.offers declared — payment boundaries are dead ends, not offers (observed pricing model: undetermined — only an observed "free" declaration earns the vacuous pass) — got: status 530

FAILsurfaces cross-reference each other (linkset)linkset

llms.txt references fewer than 2 sibling surfaces and root sends no Link header — surfaces are islands — got: status 530

FAILattestation/identity ladder is declaredattestation

no attestation or identity ladder declared on agents.json or icp.json — got: status 530

skipsampled responses conform to their published schemasschema-conformance

no sampled endpoint had both a 2xx response and a published response schema

skipclaimed endpoints actually exist (no ghost surface)claims-honesty

no claimed endpoints to probe

skiplive responses match the published OpenAPI contract (full diff)contract-diff

no valid OpenAPI contract to diff against the live surface

skipMCP registry manifest (server.json) is valid and registry-publishablemcp-server-json

no server.json manifest served at the well-known/declared path — target is not claiming MCP-registry publishability

skipdeclared MCP remote resolves live (initialize → tools/list advertises tools)mcp-remote-live

no server.json manifest — no registry remote to resolve

skipdomain/account can prove ownership to publish under its reverse-DNS namespacemcp-registry-ownership

no server.json manifest — no namespace ownership to prove

skipserver is present in the official MCP registry (informational)mcp-registry-presence

no server.json manifest — registry presence not applicable

skipMCP-UI tool result links a ui:// resource served with an MCP-Apps MIMEmcp-ui-resource-linkage

no MCP-UI declared (no tool advertises a ui:// template) — informational not-ready, not a failure

skipui:// srcDoc is self-contained (no remote code) and CSP-safemcp-ui-self-contained

no MCP-UI declared (no tool advertises a ui:// template) — informational not-ready, not a failure

skipno secret leaks into a model-visible channel (content/structuredContent)mcp-ui-envelope-hygiene

no MCP-UI declared (no tool advertises a ui:// template) — informational not-ready, not a failure

skipwidget structuredContent is consistent with the agent/API register (no divergence)mcp-ui-register-parity

no MCP-UI declared (no tool advertises a ui:// template) — informational not-ready, not a failure

skipfirst-render-without-input tolerance + tool annotations / widgetDescription presentmcp-ui-host-render

no MCP-UI declared (no tool advertises a ui:// template) — informational not-ready, not a failure

skipUI-message-stream is served with the v1 stream header and an SSE content-typeui-stream-transport

no UI-message-stream face declared (no interfaces.uiMessageStream) — informational not-ready, not a failure

skipSSE framing is valid — data:{json} chunks, a bare [DONE] terminal, each payload a typed JSON partui-stream-framing

no UI-message-stream face declared (no interfaces.uiMessageStream) — informational not-ready, not a failure

skipevery UI-message-stream part is spec-correct (known type, required fields present)ui-stream-part-shapes

no UI-message-stream face declared (no interfaces.uiMessageStream) — informational not-ready, not a failure

skipno secret leaks into any UI-message-stream part (token/key in a part → FAIL)ui-stream-envelope-hygiene

no UI-message-stream face declared (no interfaces.uiMessageStream) — informational not-ready, not a failure

skiptool-output-available `output` is byte/JSON-consistent with the JSON twin (no divergence)ui-stream-parity

no UI-message-stream face declared (no interfaces.uiMessageStream) — informational not-ready, not a failure

skipa DECLARED Digital Link interface serves a schema-valid GS1 resolver description file at its well-knowndigital-link-resolver

no Digital Link interface declared (agents.json `interfaces.digitalLink` absent) — the interface is OPTIONAL and this card does not claim it, so nothing was fetched and nothing is judged; under a pinned must:pass this fails closed

skipa DECLARED test-suite interface publishes a digest-pinned suite the surface actually passespublished-test-suite

no published test suite interface declared (agents.json `interfaces.testSuite` absent) — the interface is OPTIONAL and this card does not claim it, so nothing was fetched and nothing is judged; under a pinned must:pass this fails closed

skipevery capability the card declares is exercised by a passing test of its published suitecapability-coverage

no published test suite interface declared (agents.json `interfaces.testSuite` absent) — capability coverage is judged only over a declared suite's run (A.8.7): nothing is claimed, so nothing is judged; under a pinned must:pass this fails closed

skiphome + typed bodies are machine-legible for every machine-class client (AXP Clause 3)machine-legible-home