rhizomeai.com

agent readiness score · scanned Aug 18, 2026 · 6s · AI & ML

#48 of 979 · #10 in category

77/ 100B

Rhizome is an AI regulatory coworker that instantly answers questions about health authority databases, citing up to 1,000 documents without hallucinations, for regulatory affairs professionals in pharmaceutical and medical device companies.

badge

Discovery 17.5/20

Access 25.4/30

Usability 23.8/40

Payments 10/10

Top fixes

  1. OpenAPI spec discoverable

    Publish your OpenAPI spec at /openapi.json and link it from docs — it's the single highest-leverage artifact for agent integration.

    +5
  2. JSON-LD structured data

    Embed Organization + WebSite JSON-LD on your homepage (name, url, logo, sameAs) and Product/Offer JSON-LD on pricing.

    +4.6
  3. agents.md

    Add /agents.md: what agents may do on your site, key URLs, auth, rate limits, and who to contact.

    +3
  4. Brand search discoverability

    Your domain doesn't surface when agents search "Rhizome ai ml". Strengthen brand pages, structured data, and third-party citations (docs portals, GitHub, directories).

    +2.5
  5. MCP server discovery

    Publish /.well-known/mcp/server-card.json describing your MCP endpoint so agents can autodiscover it. Evidence found: llms.txt.

    +2.5
  6. npm SDK

    Publish an official npm SDK (suggest @rhizome/sdk) with your domain in package.json homepage so agents can verify it's official.

    +2

1.Can an agent discover and trust you?

6/8

Whether agents can crawl you, find you in the registries and searches they check, and trust what they find.

  • Sitemap present & freshrequired4/4

    Sitemap at https://rhizomeai.com/sitemap.xml: 180 entries, freshest <lastmod> 2026-08-10 (8 days ago)

    Resolved the sitemap from robots.txt or /sitemap.xml, validated XML, and checked lastmod freshness

    spec ↗
  • Brand search discoverabilityrequired2/4

    Search "Rhizome" cited rhizomeai.com (https://rhizomeai.com/), but search "Rhizome ai ml" did not cite your domain

    fix → Your domain doesn't surface when agents search "Rhizome ai ml". Strengthen brand pages, structured data, and third-party citations (docs portals, GitHub, directories).

    Ran clean brand-name web searches and checked whether your domain is cited in the results

  • MCP registry listingsrecommendedna

    No MCP server detected for this product

    Queried the official MCP registry, Smithery, Glama, and PulseMCP for servers matching your domain

    spec ↗

2.Do you welcome agents?

11/16

Whether your robots policy, bot protection, and agent guidance actively admit AI agents instead of blocking them.

  • robots.txt present & parseablerequired2/2

    /robots.txt parses: 1 User-agent group(s), 1 Sitemap line(s)

    Fetched /robots.txt and validated it parses as a robots policy

    spec ↗
  • AI crawler policyrequired5/5

    All 12 AI crawler user-agents (GPTBot, ClaudeBot, PerplexityBot, …) are allowed at / by robots.txt

    Evaluated robots.txt groups for the major AI agent user-agents (GPTBot, ClaudeBot, PerplexityBot, …)

  • Content Signals directivesemerging0/2

    No Content-Signal lines in robots.txt

    fix → Declare Content Signals in robots.txt (e.g. `Content-Signal: search=yes, ai-train=no`) to express AI usage preferences machine-readably.

    Looked for Content-Signal lines in robots.txt

    spec ↗
  • Agent user-agent paritybetarequired4/4

    All three UAs get HTTP 200; bot bodies are ClaudeBot 100%, GPTBot 100% of the browser response (240147 bytes)

    Compared responses served to browser and AI-agent user-agents (informational while in beta)

  • agents.mdrecommended0/3

    No agents.md: https://rhizomeai.com/agents.md → HTTP 404, https://rhizomeai.com/AGENTS.md → HTTP 404

    fix → Add /agents.md: what agents may do on your site, key URLs, auth, rate limits, and who to contact.

    Fetched /agents.md and checked for substantive agent guidance

    spec ↗

3.Does an agent understand who you are and what you do?

12/18

Whether your pages carry machine-readable identity: structured data, llms.txt, clear copy an agent can quote.

  • Homepage states what you arerequired3/3

    Homepage clarity rated 5/5 — an agent can confidently say what this company does (model's one-sentence read: "Rhizome is an AI regulatory coworker that instantly answers questions about health authority databases, citing up to 1,000 documents without hallucinations, for regulatory affairs professionals in pharmaceutical and medical device companies.")

    An LLM read your homepage as an agent would and rated how confidently it could say what you do

  • OpenGraph / social metadatarecommended2/2

    Homepage has og:title, og:description, and og:image (twitter:card="summary_large_image" present)

    Parsed homepage og:title / og:description / og:image and twitter:card meta tags

    spec ↗
  • llms.txtrecommended4/4

    /llms.txt is valid llmstxt.org shape: H1 "Rhizome AI", 27 markdown link(s)

    Fetched /llms.txt and validated it against the llmstxt.org shape (H1, summary, curated links)

    spec ↗
  • llms-full.txtbonusrecommended0/2

    GET /llms-full.txt returned HTTP 404

    fix → Add /llms-full.txt with expanded inline docs content so agents can load everything in one fetch.

    Fetched /llms-full.txt and checked for substantial inline markdown content

    spec ↗
  • JSON-LD structured datarequired0/4

    No application/ld+json blocks found on homepage and pricing page

    fix → Embed Organization + WebSite JSON-LD on your homepage (name, url, logo, sameAs) and Product/Offer JSON-LD on pricing.

    Extracted and validated application/ld+json blocks on the homepage and pricing page

    spec ↗
  • Markdown content negotiationrecommended3/3

    https://docs.rhizomeai.com/introduction returns markdown for `Accept: text/markdown` (content-type text/markdown)

    Requested key pages with Accept: text/markdown and probed .md twin URLs

4.Can an agent integrate with you?

watch →9.5/21

Whether the artifacts an agent needs to build on you — docs, API specs, SDKs, MCP servers — exist and are findable.

  • Developer resource discoverabilityrecommended3/3

    Search "Rhizome API documentation" cited your own domain: https://docs.rhizomeai.com/llms.txt, https://docs.rhizomeai.com/introduction

    Searched for your brand with developer-keyword suffixes and checked which official resources are cited

  • OpenAPI spec discoverablerequired0/5

    No OpenAPI spec found: checked docs-page links and /openapi.json, /openapi.yaml, /swagger.json, /api/openapi.json, /docs/openapi.json, and api-subdomain locations

    fix → Publish your OpenAPI spec at /openapi.json and link it from docs — it's the single highest-leverage artifact for agent integration.

    Probed standard OpenAPI locations and docs links for a fetchable, parseable spec

    spec ↗
  • Docs discoverablerequired4/4

    Docs found at https://docs.rhizomeai.com/introduction (via path probe, 3531 chars of readable text)

    Followed homepage nav/footer links and probed /docs, /developers, docs.{domain}

  • MCP server discoveryrequired2.5/5

    MCP evidence found only as a mention in llms.txt: "https://rhizomeai.com/api/mcp" — no well-known server card

    fix → Publish /.well-known/mcp/server-card.json describing your MCP endpoint so agents can autodiscover it. Evidence found: llms.txt.

    Probed /.well-known/mcp/server-card.json, mcp.json, and docs mentions for an MCP endpoint

    spec ↗
  • npm SDKrecommended0/2

    No official npm SDK found: probed 6 candidate(s) (@rhizome/sdk, @rhizome/rhizome, rhizome, rhizome-sdk, rhizome-api, rhizome-js) — found but not domain-verified: rhizome

    fix → Publish an official npm SDK (suggest @rhizome/sdk) with your domain in package.json homepage so agents can verify it's official.

    Searched the npm registry for an official, domain-verified SDK package

  • PyPI SDKrecommended0/2

    No official PyPI SDK found: probed 4 candidate(s) (rhizome, rhizome-sdk, rhizomeapi, rhizome-python) — found but not domain-verified: rhizome

    fix → Publish an official Python SDK (suggest "rhizome") with your domain in the project URLs so agents can verify it's official.

    Searched PyPI for an official, domain-verified SDK package

5.Is your integration well-built?

watch →4.3/5

Whether your specs, docs, and tools are complete and descriptive enough for an agent to use them without guessing.

  • OpenAPI validity & qualityrecommendedna

    No OpenAPI spec found — nothing to lint

    Linted the spec: descriptions, operationIds, securitySchemes, servers

  • Docs qualityrecommended2.3/3

    Docs at https://docs.rhizomeai.com/introduction scored clarity 4/5, completeness 3/5, runnable examples 5/5, agent-friendliness 3/5 (mean 3.8/5)

    fix → Docs scored 3/5 on completeness. The documentation mentions an API Keys console and an enterprise plan requirement, but does not provide details on how an agent would programmatically obtain or manage an API key.

    An LLM rated your docs for clarity, completeness, runnable examples, and agent-friendliness

  • Quickstart / getting startedrecommended2/2

    Quickstart found: https://docs.rhizomeai.com/#quick-start (linked from https://docs.rhizomeai.com/introduction) returns 200 with a code block

    Looked for a quickstart/getting-started guide containing code blocks

  • MCP tool qualityrecommendedna

    MCP endpoint is auth-gated — tools could not be listed unauthenticated

    Linted listed tools for descriptions, typed input schemas, and naming

6.Can an agent use you reliably in production?

watch →3/4

Response hygiene, TLS and redirect discipline, and security contact channels agents depend on at runtime.

  • TLS & redirect hygienerequired2/2

    http://rhizomeai.com/ upgrades to https in 1 hop(s), 1 redirect(s) total, final HTTP 200; HSTS present

    Checked http→https redirect behavior, chain length, and TLS health

  • Response speed & weightrequired1/1

    Homepage TTFB 71ms, payload 235KB, Content-Encoding: br

    Measured homepage TTFB, payload size, and compression

  • security.txtrecommended0/1

    https://rhizomeai.com/.well-known/security.txt returned HTTP 404

    fix → Publish RFC 9116 /.well-known/security.txt with a Contact and a future Expires.

    Fetched /.well-known/security.txt and validated Contact + Expires

    spec ↗

7.Can an agent authenticate to you?

watch →7/7

Whether agents can discover your auth model machine-readably (OAuth metadata) and follow documented steps to credentials.

  • OAuth authorization server metadatarecommended3/3

    Valid RFC 8414 metadata at https://rhizomeai.com/.well-known/oauth-authorization-server: issuer https://clerk.rhizomeai.com, PKCE S256, dynamic client registration at https://clerk.rhizomeai.com/oauth/register

    Fetched /.well-known/oauth-authorization-server (and openid-configuration fallback)

    spec ↗
  • OAuth protected resource metadatarecommended2/2

    Valid RFC 9728 metadata at https://rhizomeai.com/.well-known/oauth-protected-resource: resource https://rhizomeai.com/api/mcp, 1 authorization server(s) (https://clerk.rhizomeai.com)

    Fetched /.well-known/oauth-protected-resource

    spec ↗
  • Auth documentationrecommended2/2

    Auth documentation found at https://docs.rhizomeai.com/authentication (linked from https://docs.rhizomeai.com/introduction) with code examples

    Looked for /auth.md or an authentication docs page with code examples

8.Can an agent transact with you?

watch →10/15

Whether pricing is discoverable and machine-readable, and whether you support agent payment protocols.

  • Pricing discoverablerequired5/5

    Pricing page found at https://rhizomeai.com/pricing (via homepage link) with legible price signals ("$010 messages/month across FDA").

    Followed nav/footer links and probed /pricing for a page with legible price signals

  • Machine-readable pricingrecommended5/5

    LLM extracted 4 numerically-priced plan(s) from https://rhizomeai.com/pricing at confidence 1.00: Free $ 0/month; Project $ 400/month; Professional $ 4000/year; Business $ 30000/year; Enterprise (contact sales).

    Looked for Offer JSON-LD, then had an LLM attempt structured extraction of your plans

    spec ↗
  • x402 payment supportbonusrecommended0/2

    /.well-known/x402 returned HTTP 404. No x402 support detected (bonus check — absence costs nothing).

    fix → Support x402: serve payment requirements at /.well-known/x402, or answer unauthenticated API calls with HTTP 402 plus an x402 payment-requirements payload (x402Version, accepts[]).

    Probed /.well-known/x402 and API endpoints for HTTP 402 payment-required envelopes

    spec ↗
  • AP2 readinessemerging0/1

    No AP2 hints found — scanned llms.txt, docs page (https://docs.rhizomeai.com/introduction); /.well-known/ap2 returned HTTP 404.

    fix → Adopt AP2 to accept delegated agent payments — see https://ap2-protocol.org.

    Scanned fetched artifacts and well-known paths for AP2 hints

    spec ↗
  • Agentic Commerce Protocolemerging0/1

    No Agentic Commerce Protocol hints found — scanned llms.txt, docs page (https://docs.rhizomeai.com/introduction); /.well-known/acp returned HTTP 404.

    fix → Adopt the Agentic Commerce Protocol so agent checkouts can complete against your store — see https://developers.openai.com/commerce.

    Scanned docs and specs for agentic checkout endpoints

    spec ↗
  • Other agent payment protocolsbonusemerging0/1

    No UCP/MPP hints found — scanned llms.txt, docs page (https://docs.rhizomeai.com/introduction).

    fix → Track emerging agent payment protocols (UCP, MPP) and adopt the ones your buyers' agents use.

    Scanned fetched artifacts for UCP/MPP protocol hints

9.Can a user act through an agent?

4/4

Whether an end user's agent can operate on their behalf: working MCP tools, published skills, agent configs.

  • Agent skill publishedbonusemergingna

    Requires the analysis phase — not yet evaluated

    Checked /skill.md, /.well-known/skills/, and skills.sh for published agent skills

  • MCP handshake & tools listrequired4/4

    MCP endpoint https://rhizomeai.com/api/mcp is auth-gated (HTTP 401) and advertises resolvable RFC 9728 resource metadata in WWW-Authenticate — properly advertised auth gate

    Performed a streamable-HTTP initialize + tools/list against the MCP endpoint

    spec ↗
  • Agent configs in public repobonusemergingna

    Requires the analysis phase — not yet evaluated

    Checked your public GitHub org's main repos for AGENTS.md / .claude / .cursor configs

10.Can an agent operate your website directly?

7/9

Whether the site itself is legible to non-rendering and browser agents: semantic HTML, no JS walls, accessibility.

  • NLWeb endpointemerging0/1

    No NLWeb endpoint detected: /.well-known/nlweb.json returned HTTP 404 (text/html); GET /ask?query=hello returned HTTP 200 (text/html)

    fix → Consider exposing an NLWeb /ask endpoint (and /.well-known/nlweb.json) for conversational access to your content.

    Probed /.well-known/nlweb.json and the /ask endpoint

    spec ↗
  • Semantic HTML structurerequired3/3

    5/6 semantic signals present on the homepage (missing: text-to-markup ratio ≥ 0.10)

    Scored landmark elements, heading hierarchy, and text-to-markup ratio on the homepage

  • Content readable without JavaScriptrequired2/2

    Homepage raw HTML contains 22630 chars of visible text without JavaScript

    Measured visible text in the raw, unrendered homepage HTML

  • Accessibility basicsrequired2/2

    Homepage accessibility: 4/5 checks passed — failing: labeled inputs (1/1 unlabeled)

    Static checks: lang attribute, title, alt coverage, labeled inputs, landmarks

  • WebMCPemerging0/1

    No WebMCP evidence on homepage: no application/webmcp script and no navigator.modelContext reference

    fix → Consider WebMCP to expose page actions as tools to browser agents.

    Looked for WebMCP script declarations on the homepage

    spec ↗