corelayer.com
agent readiness score · scanned Aug 18, 2026 · 8s · Infrastructure & DevOps
#180 of 979 · #18 in category
Corelayer is an AI-native platform that provides proactive incident response and prevention, on-call support, and AI SRE capabilities for complex production environments, particularly in data-heavy and regulated industries.
Discovery 17.5/20
Access 30/30
Usability 13.9/40
Payments 2.5/10
Top fixes
- +5
Machine-readable pricing
Add Offer JSON-LD per plan (name, price, priceCurrency, billing period) to https://www.corelayer.com/signin?redirect_url=%2Fpricing so pricing parses without inference.
- +4.4
MCP handshake & tools list
MCP endpoint https://docs.corelayer.com/cli/mcp-server failed handshake: Method not allowed. Support streamable HTTP with protocol version negotiation; if auth-gated, return RFC 9728 metadata in WWW-Authenticate.
- +3.3
agents.md
Add /agents.md: what agents may do on your site, key URLs, auth, rate limits, and who to contact.
- +3.3
OAuth authorization server metadata
Metadata at https://corelayer.com/.well-known/openid-configuration lacks authorization_endpoint, token_endpoint, code_challenge_methods_supported including S256. Serve complete RFC 8414 metadata with PKCE (S256) so agents can self-onboard.
- +2.8
MCP server discovery
Publish /.well-known/mcp/server-card.json describing your MCP endpoint so agents can autodiscover it. Evidence found: llms.txt.
- +2.8
OpenAPI spec discoverable
Expose your OpenAPI spec unauthenticated at /openapi.json; agents cannot integrate against a spec they cannot read.
1.Can an agent discover and trust you?
6/8
1.Can an agent discover and trust you?
Whether agents can crawl you, find you in the registries and searches they check, and trust what they find.
✓Sitemap present & fresh4/4
Sitemap at https://www.corelayer.com/sitemap.xml: 27 entries, freshest <lastmod> 2026-08-10 (7 days ago)
Resolved the sitemap from robots.txt or /sitemap.xml, validated XML, and checked lastmod freshness
spec ↗◐Brand search discoverability2/4
Search "Corelayer" cited corelayer.com (https://www.corelayer.com/, https://docs.corelayer.com/llms.txt, https://docs.corelayer.com/, https://www.corelayer.com/blog/production-data-eng-is-hard, https://docs.corelayer.com/cli/overview), but search "Corelayer infrastructure devops" did not cite your domain
fix → Your domain doesn't surface when agents search "Corelayer infrastructure devops". Strengthen brand pages, structured data, and third-party citations (docs portals, GitHub, directories).
Ran clean brand-name web searches and checked whether your domain is cited in the results
—MCP registry listingsna
No MCP server detected for this product
Queried the official MCP registry, Smithery, Glama, and PulseMCP for servers matching your domain
spec ↗
2.Do you welcome agents?
11/16
2.Do you welcome agents?
Whether your robots policy, bot protection, and agent guidance actively admit AI agents instead of blocking them.
✓robots.txt present & parseable2/2
/robots.txt parses: 2 User-agent group(s), 1 Sitemap line(s)
Fetched /robots.txt and validated it parses as a robots policy
spec ↗✓AI crawler policy5/5
All 12 AI crawler user-agents (GPTBot, ClaudeBot, PerplexityBot, …) are allowed at / by robots.txt
Evaluated robots.txt groups for the major AI agent user-agents (GPTBot, ClaudeBot, PerplexityBot, …)
✗Content Signals directives0/2
No Content-Signal lines in robots.txt
fix → Declare Content Signals in robots.txt (e.g. `Content-Signal: search=yes, ai-train=no`) to express AI usage preferences machine-readably.
Looked for Content-Signal lines in robots.txt
spec ↗✓Agent user-agent parity4/4
All three UAs get HTTP 200; bot bodies are ClaudeBot 100%, GPTBot 100% of the browser response (115396 bytes)
Compared responses served to browser and AI-agent user-agents (informational while in beta)
✗agents.md0/3
No agents.md: https://corelayer.com/agents.md → HTTP 200, https://corelayer.com/AGENTS.md → HTTP 200
fix → Add /agents.md: what agents may do on your site, key URLs, auth, rate limits, and who to contact.
Fetched /agents.md and checked for substantive agent guidance
spec ↗
3.Does an agent understand who you are and what you do?
16/18
3.Does an agent understand who you are and what you do?
Whether your pages carry machine-readable identity: structured data, llms.txt, clear copy an agent can quote.
✓Homepage states what you are3/3
Homepage clarity rated 5/5 — an agent can confidently say what this company does (model's one-sentence read: "Corelayer is an AI-native platform that provides proactive incident response and prevention, on-call support, and AI SRE capabilities for complex production environments, particularly in data-heavy and regulated industries.")
An LLM read your homepage as an agent would and rated how confidently it could say what you do
✓OpenGraph / social metadata2/2
Homepage has og:title, og:description, and og:image (twitter:card="summary_large_image" present)
Parsed homepage og:title / og:description / og:image and twitter:card meta tags
spec ↗✓llms.txt4/4
/llms.txt is valid llmstxt.org shape: H1 "llms.txt for https://www.corelayer.com/", 14 markdown link(s)
Fetched /llms.txt and validated it against the llmstxt.org shape (H1, summary, curated links)
spec ↗✗llms-full.txt0/2
/llms-full.txt returned HTML (content-type text/html), not markdown
fix → Serve /llms-full.txt as plain markdown, not an HTML page.
Fetched /llms-full.txt and checked for substantial inline markdown content
spec ↗✓JSON-LD structured data4/4
4 JSON-LD block(s) on homepage and pricing page (types: Organization, WebSite, SoftwareApplication, FAQPage); Organization block is well-formed
Extracted and validated application/ld+json blocks on the homepage and pricing page
spec ↗✓Markdown content negotiation3/3
https://docs.corelayer.com/ returns markdown for `Accept: text/markdown` (content-type text/markdown)
Requested key pages with Accept: text/markdown and probed .md twin URLs
4.Can an agent integrate with you?
watch →12/17
4.Can an agent integrate with you?
Whether the artifacts an agent needs to build on you — docs, API specs, SDKs, MCP servers — exist and are findable.
✓Developer resource discoverability3/3
Search "Corelayer API documentation" cited your own domain: https://docs.corelayer.com/
Searched for your brand with developer-keyword suffixes and checked which official resources are cited
◐OpenAPI spec discoverable2.5/5
An OpenAPI spec URL was referenced but returned HTTP 401/403 — not fetchable without authentication
fix → Expose your OpenAPI spec unauthenticated at /openapi.json; agents cannot integrate against a spec they cannot read.
Probed standard OpenAPI locations and docs links for a fetchable, parseable spec
spec ↗✓Docs discoverable4/4
Docs found at https://docs.corelayer.com/ (via homepage link, 2388 chars of readable text)
Followed homepage nav/footer links and probed /docs, /developers, docs.{domain}
◐MCP server discovery2.5/5
MCP evidence found only as a mention in llms.txt: "https://docs.corelayer.com/cli/mcp-server" — no well-known server card
fix → Publish /.well-known/mcp/server-card.json describing your MCP endpoint so agents can autodiscover it. Evidence found: llms.txt.
Probed /.well-known/mcp/server-card.json, mcp.json, and docs mentions for an MCP endpoint
spec ↗!npm SDKerror
All 6 npm registry requests failed: @corelayer/sdk (Request budget exhausted), @corelayer/corelayer (Request budget exhausted), corelayer (Request budget exhausted), corelayer-sdk (Request budget exhausted), corelayer-api (Request budget exhausted), corelayer-js (Request budget exhausted)
Searched the npm registry for an official, domain-verified SDK package
!PyPI SDKerror
All 4 PyPI registry requests failed: corelayer (Request budget exhausted), corelayer-sdk (Request budget exhausted), corelayerapi (Request budget exhausted), corelayer-python (Request budget exhausted)
Searched PyPI for an official, domain-verified SDK package
5.Is your integration well-built?
watch →1.5/5
5.Is your integration well-built?
Whether your specs, docs, and tools are complete and descriptive enough for an agent to use them without guessing.
—OpenAPI validity & qualityna
No OpenAPI spec found — nothing to lint
Linted the spec: descriptions, operationIds, securitySchemes, servers
◐Docs quality1.5/3
Docs at https://docs.corelayer.com/ scored clarity 4/5, completeness 2/5, runnable examples 1/5, agent-friendliness 3/5 (mean 2.5/5)
fix → Docs scored 1/5 on runnable examples. The documentation is truncated and only provides an overview of Corelayer, lacking specific API endpoints, authentication details, or detailed integration steps for an AI agent.
An LLM rated your docs for clarity, completeness, runnable examples, and agent-friendliness
✗Quickstart / getting started0/2
No quickstart/getting-started link or heading found on docs page https://docs.corelayer.com/ (searched 28 links)
fix → Add a copy-pasteable quickstart (auth → first API call) — agents follow it literally.
Looked for a quickstart/getting-started guide containing code blocks
—MCP tool qualityna
No tools listed by the MCP endpoint — nothing to lint
Linted listed tools for descriptions, typed input schemas, and naming
6.Can an agent use you reliably in production?
watch →3/4
6.Can an agent use you reliably in production?
Response hygiene, TLS and redirect discipline, and security contact channels agents depend on at runtime.
✓TLS & redirect hygiene2/2
http://corelayer.com/ upgrades to https in 1 hop(s), 2 redirect(s) total, final HTTP 200; HSTS present
Checked http→https redirect behavior, chain length, and TLS health
✓Response speed & weight1/1
Homepage TTFB 72ms, payload 113KB, Content-Encoding: br
Measured homepage TTFB, payload size, and compression
✗security.txt0/1
https://corelayer.com/.well-known/security.txt returned HTTP 404
fix → Publish RFC 9116 /.well-known/security.txt with a Contact and a future Expires.
Fetched /.well-known/security.txt and validated Contact + Expires
spec ↗
7.Can an agent authenticate to you?
watch →0/7
7.Can an agent authenticate to you?
Whether agents can discover your auth model machine-readably (OAuth metadata) and follow documented steps to credentials.
✗OAuth authorization server metadata0/3
OAuth metadata at https://corelayer.com/.well-known/openid-configuration is missing/invalid: authorization_endpoint, token_endpoint, code_challenge_methods_supported including S256
fix → Metadata at https://corelayer.com/.well-known/openid-configuration lacks authorization_endpoint, token_endpoint, code_challenge_methods_supported including S256. Serve complete RFC 8414 metadata with PKCE (S256) so agents can self-onboard.
Fetched /.well-known/oauth-authorization-server (and openid-configuration fallback)
spec ↗✗OAuth protected resource metadata0/2
No RFC 9728 metadata: https://corelayer.com/.well-known/oauth-protected-resource → HTTP 404
fix → Serve RFC 9728 metadata at /.well-known/oauth-protected-resource naming your authorization servers so agents can discover how to authenticate.
Fetched /.well-known/oauth-protected-resource
spec ↗✗Auth documentation0/2
No auth/API-key link found among 28 links on docs page https://docs.corelayer.com/, and /auth.md is absent
fix → Document auth end-to-end (key creation → header format → example call), or ship /auth.md.
Looked for /auth.md or an authentication docs page with code examples
8.Can an agent transact with you?
watch →2.5/15
8.Can an agent transact with you?
Whether pricing is discoverable and machine-readable, and whether you support agent payment protocols.
◐Pricing discoverable2.5/5
Pricing page found at https://www.corelayer.com/signin?redirect_url=%2Fpricing (via path probe) but no legible price signals in 51 chars of page text — no currency amounts, "per month"/"/mo", or "free plan" terms (reads as contact-sales only).
fix → Add literal plan prices to https://www.corelayer.com/signin?redirect_url=%2Fpricing; 'Contact sales'-only pricing means agents can't complete a purchase evaluation.
Followed nav/footer links and probed /pricing for a page with legible price signals
✗Machine-readable pricing0/5
No pricing plans could be extracted from https://www.corelayer.com/signin?redirect_url=%2Fpricing (extraction confidence 0.00); no Offer JSON-LD on the page.
fix → Add Offer JSON-LD per plan (name, price, priceCurrency, billing period) to https://www.corelayer.com/signin?redirect_url=%2Fpricing so pricing parses without inference.
Looked for Offer JSON-LD, then had an LLM attempt structured extraction of your plans
spec ↗✗x402 payment support0/2
/.well-known/x402 returned HTTP 404. No x402 support detected (bonus check — absence costs nothing).
fix → Support x402: serve payment requirements at /.well-known/x402, or answer unauthenticated API calls with HTTP 402 plus an x402 payment-requirements payload (x402Version, accepts[]).
Probed /.well-known/x402 and API endpoints for HTTP 402 payment-required envelopes
spec ↗✗AP2 readiness0/1
No AP2 hints found — scanned llms.txt, agents.md, docs page (https://docs.corelayer.com/); /.well-known/ap2 returned HTTP 404.
fix → Adopt AP2 to accept delegated agent payments — see https://ap2-protocol.org.
Scanned fetched artifacts and well-known paths for AP2 hints
spec ↗✗Agentic Commerce Protocol0/1
No Agentic Commerce Protocol hints found — scanned llms.txt, agents.md, docs page (https://docs.corelayer.com/); /.well-known/acp returned HTTP 404.
fix → Adopt the Agentic Commerce Protocol so agent checkouts can complete against your store — see https://developers.openai.com/commerce.
Scanned docs and specs for agentic checkout endpoints
spec ↗✗Other agent payment protocols0/1
No UCP/MPP hints found — scanned llms.txt, agents.md, docs page (https://docs.corelayer.com/).
fix → Track emerging agent payment protocols (UCP, MPP) and adopt the ones your buyers' agents use.
Scanned fetched artifacts for UCP/MPP protocol hints
9.Can a user act through an agent?
0/4
9.Can a user act through an agent?
Whether an end user's agent can operate on their behalf: working MCP tools, published skills, agent configs.
—Agent skill publishedna
Requires the analysis phase — not yet evaluated
Checked /skill.md, /.well-known/skills/, and skills.sh for published agent skills
✗MCP handshake & tools list0/4
MCP endpoint https://docs.corelayer.com/cli/mcp-server failed handshake: Method not allowed
fix → MCP endpoint https://docs.corelayer.com/cli/mcp-server failed handshake: Method not allowed. Support streamable HTTP with protocol version negotiation; if auth-gated, return RFC 9728 metadata in WWW-Authenticate.
Performed a streamable-HTTP initialize + tools/list against the MCP endpoint
spec ↗—Agent configs in public repona
Requires the analysis phase — not yet evaluated
Checked your public GitHub org's main repos for AGENTS.md / .claude / .cursor configs
10.Can an agent operate your website directly?
7/9
10.Can an agent operate your website directly?
Whether the site itself is legible to non-rendering and browser agents: semantic HTML, no JS walls, accessibility.
✗NLWeb endpoint0/1
No NLWeb endpoint detected: /.well-known/nlweb.json returned HTTP 404 (text/html); GET /ask?query=hello returned HTTP 200 (text/html)
fix → Consider exposing an NLWeb /ask endpoint (and /.well-known/nlweb.json) for conversational access to your content.
Probed /.well-known/nlweb.json and the /ask endpoint
spec ↗✓Semantic HTML structure3/3
5/6 semantic signals present on the homepage (missing: text-to-markup ratio ≥ 0.10)
Scored landmark elements, heading hierarchy, and text-to-markup ratio on the homepage
✓Content readable without JavaScript2/2
Homepage raw HTML contains 5529 chars of visible text without JavaScript
Measured visible text in the raw, unrendered homepage HTML
✓Accessibility basics2/2
Homepage accessibility: 5/5 checks passed
Static checks: lang attribute, title, alt coverage, labeled inputs, landmarks
✗WebMCP0/1
No WebMCP evidence on homepage: no application/webmcp script and no navigator.modelContext reference
fix → Consider WebMCP to expose page actions as tools to browser agents.
Looked for WebMCP script declarations on the homepage
spec ↗