webmcp-tool

Agent Readiness Check

www.primitive.dev

Checked 2026-09-08 06:04 UTC

92 / 100
grade A

This site is agent-ready

An agent can reach, read and operate this site. What is left is depth: tools it can call, protocols other systems can discover.

Fitness61 / 65Does the site work for agents today?
Adoption31 / 35Which agent protocols are in place?
Agent Access17.5 / 20Can an agent reach the page at all?
Machine Readability20 / 20Can it understand what is on the page?
Actionability23.5 / 25Can it finish the job?
Integration15 / 15Can another system find and call your capabilities?
Identity & Commerce10 / 10Can an agent prove who it is, and pay you?
WebMCP Implementation6 / 10Are there tools an agent can call in the page?

Three fixes worth doing first

Ordered by the points still on the table. Each one comes from a documented check and, where it exists, with the code that fixes it.

01Honest annotations on tools

+5 pts

Tools are registered without annotations, so an agent cannot tell reads from writes.

How to fix it Set readOnlyHint on every tool that only reads. Set untrustedContentHint where a tool returns text written by other users. Put a confirmation step in front of anything that spends money or changes state.

Specification — tool annotations

02Declarative tools on forms

+4 pts

1 form(s) could be exposed as tools but none is annotated.

How to fix it Annotate the forms you already ship. Because the attribute names are still marked TODO in the explainer, verify them against the current specification before rolling this out widely.

Explainer — declarative API

03robots.txt lets AI crawlers in

+2.5 pts

CCBot cannot read this page.

How to fix it Publish a robots.txt that names the AI agents you want and allows the paths you want cited. Blocking is a legitimate choice — but make it a decision, not an accident.

User-agent: GPTBot
Allow: /

User-agent: ChatGPT-User
Allow: /

User-agent: ClaudeBot
Allow: /

User-agent: PerplexityBot
Allow: /

User-agent: Google-Extended
Allow: /

Sitemap: https://example.com/sitemap.xml

OpenAI — GPTBotGoogle — Google-ExtendedRFC 9309 — Robots Exclusion Protocol

Your first WebMCP tool, matched to this page

The crawl found a a shop on this site, so the example below registers that as a tool an agent can call. Paste it, point it at your own endpoint, and the page stops being guessed at and starts being called.

registerTool

// Register the first tool an agent can call on this page.
// Works today with the polyfill: npm install @mcp-b/global
await document.modelContext.registerTool({
  name: "search_products",
  description: "Search the product catalogue by free text. Returns name, price and a link per match.",
  inputSchema: {
    type: "object",
    properties: { query: { type: "string", description: "Free-text search term" } },
    required: ["query"],
  },
  annotations: { readOnlyHint: true },
  execute: async ({ query }, { signal }) => {
    const res = await fetch(`/api/products?q=${encodeURIComponent(query)}`, { signal });
    return { content: [{ type: "text", text: JSON.stringify(await res.json()) }] };
  },
});

.well-known/webmcp

{
  "name": "www.primitive.dev",
  "description": "Return a short summary of this site and links to its main sections.",
  "tools": [
    {
      "name": "search_products",
      "description": "Search the product catalogue by free text. Returns name, price and a link per match."
    }
  ],
  "pages": [
    "https://www.primitive.dev/"
  ]
}

The manifest at /.well-known/webmcp is the convention ChatGPT Desktop reads to list site tools. It is not part of the score yet; the registered tool above is.

llms.txt

# primitive.dev: email for AI agents

> Primitive is email infrastructure for AI agents: universal email addresses, hosted functions, and transactional email over the protocol every business already uses. It also ships a ChatGPT app — an in-agent MCP App UI built on the OpenAI Apps SDK that renders your inbox inside the agent host.

## Main pages
- [Start](https://www.primitive.dev/)
- [About](https://www.primitive.dev/about)
- [Contact](https://www.primitive.dev/contact)

Built from this page's own title and description. Replace the three links with your canonical pages.

Share this result

This address is public and stays current. The preview card carries the score.

Share on XShare on LinkedIn

Put the live badge on the site

The image is served from here and re-scores on its own. Every embed links back to this page.

Agent Readiness Score for www.primitive.dev: grade A, 92 out of 100 — measured by webmcp-tool.com
<a href="https://webmcp-tool.com/check/www.primitive.dev" target="_blank" rel="noopener">
  <img src="https://webmcp-tool.com/badge/www.primitive.dev.svg"
       alt="Agent Readiness Score for www.primitive.dev: grade A, 92 out of 100 — measured by webmcp-tool.com"
       width="208" height="40" loading="lazy" decoding="async">
</a>

Agent Readiness Check

The full report, plus a re-check in 30 days

Every check with the evidence it was judged on and the code that fixes it, sent as a link that always re-scans. In 30 days we scan again and tell you what moved.

  • All checks, pass by pass, with the exact header, count or path behind each verdict
  • Copy-paste fixes generated from your own markup
  • A re-check in 30 days with the difference, confirmed by you with one click

One email with the report, one re-check after you confirm it, and nothing else unless you ask. No account. Five reports per company per day. What we do with the address.

Agent Tracking

You know whether agents can read this site. Want to know what they do with it?

One line of script records which assistants send visitors, which pages they fetch, which WebMCP tools they call and whether they finish. No cookies, no personal data, hosted in Germany. The check score shows up in the dashboard and is re-scanned monthly.

<script defer data-domain="www.primitive.dev" src="https://webmcp-tool.com/agent.js"></script>

Open the dashboardHow it works

Compare with another site

A competitor, a client, the site you are about to ship. Two checks side by side, on one shareable address.

Open the full reportSee the best-scoring sites

Reports re-scan at most once an hour. Change something and open this address again.


Check another site

One request, about 20 seconds. No sign-up, no email. The result gets a shareable address.