useallowance.com
agent readiness score · scanned Aug 18, 2026 · 6s · Payments & Fintech
#220 of 979 · #13 in category
Allowance provides a wallet with rules for AI agents, enabling safe and controlled payments for purchases, bookings, and orders without sharing real credit card numbers.
Discovery 15/20
Access 22.5/30
Usability 24.3/40
Payments 0/10
Top fixes
- +10
Pricing discoverable
Expose a crawlable /pricing page with literal plan prices and link it from your homepage nav.
- +5
Brand search discoverability
Your domain doesn't surface when agents search "Allowance". Strengthen brand pages, structured data, and third-party citations (docs portals, GitHub, directories).
- +3.7
MCP handshake & tools list
MCP endpoint https://registry.modelcontextprotocol.io/v0.1/servers/com.useallowance%2Fallowance-mcp/versions/latest failed handshake: HTTP 404. Support streamable HTTP with protocol version negotiation; if auth-gated, return RFC 9728 metadata in WWW-Authenticate.
- +3.5
Markdown content negotiation
Serve text/markdown when clients send `Accept: text/markdown` (or expose .md twins of key pages) — agents get far more signal per token.
- +2.8
OAuth authorization server metadata
Serve RFC 8414 metadata at /.well-known/oauth-authorization-server with PKCE (S256) and a registration_endpoint so agents can self-onboard.
- +2.3
llms.txt
Your /llms.txt is missing at least one markdown link [name](url). Follow llmstxt.org: start with `# YourName`, add a `>` summary line, then sections of curated links.
1.Can an agent discover and trust you?
4/8
1.Can an agent discover and trust you?
Whether agents can crawl you, find you in the registries and searches they check, and trust what they find.
✓Sitemap present & fresh4/4
Sitemap at https://useallowance.com/sitemap.xml: 30 entries, freshest <lastmod> 2026-08-07 (11 days ago)
Resolved the sitemap from robots.txt or /sitemap.xml, validated XML, and checked lastmod freshness
spec ↗✗Brand search discoverability0/4
Neither search ("Allowance", "Allowance payments fintech") cited useallowance.com. Cited instead: https://help.brokerageengine.com/support/solutions/articles/43000709285-allowance-report, https://docs.onenetwork.com/NeoHelp/NEO_3.8/Allowance_Summary_Report.html, https://en-au.support.procore.com/products/online/user-guide/project-level/reports/tutorials/create-an-allowance-and-or-contingency-report, https://www.turtlesoft.com/Business-Software-Versions/Software-Update-33/Allowance_Report.htm, https://docs.oracle.com/cd/E53547_01/opera_5_04_03_core_help/finpkgallow_help.htm
fix → Your domain doesn't surface when agents search "Allowance". Strengthen brand pages, structured data, and third-party citations (docs portals, GitHub, directories).
Ran clean brand-name web searches and checked whether your domain is cited in the results
—MCP registry listingsna
No MCP server detected for this product
Queried the official MCP registry, Smithery, Glama, and PulseMCP for servers matching your domain
spec ↗
2.Do you welcome agents?
14/16
2.Do you welcome agents?
Whether your robots policy, bot protection, and agent guidance actively admit AI agents instead of blocking them.
✓robots.txt present & parseable2/2
/robots.txt parses: 1 User-agent group(s), 1 Sitemap line(s)
Fetched /robots.txt and validated it parses as a robots policy
spec ↗✓AI crawler policy5/5
All 12 AI crawler user-agents (GPTBot, ClaudeBot, PerplexityBot, …) are allowed at / by robots.txt
Evaluated robots.txt groups for the major AI agent user-agents (GPTBot, ClaudeBot, PerplexityBot, …)
✗Content Signals directives0/2
No Content-Signal lines in robots.txt
fix → Declare Content Signals in robots.txt (e.g. `Content-Signal: search=yes, ai-train=no`) to express AI usage preferences machine-readably.
Looked for Content-Signal lines in robots.txt
spec ↗✓Agent user-agent parity4/4
All three UAs get HTTP 200; bot bodies are ClaudeBot 100%, GPTBot 100% of the browser response (46542 bytes)
Compared responses served to browser and AI-agent user-agents (informational while in beta)
✓agents.md3/3
Found https://useallowance.com/agents.md: 5685 chars of markdown with 12 heading(s)
Fetched /agents.md and checked for substantive agent guidance
spec ↗
3.Does an agent understand who you are and what you do?
11/18
3.Does an agent understand who you are and what you do?
Whether your pages carry machine-readable identity: structured data, llms.txt, clear copy an agent can quote.
✓Homepage states what you are3/3
Homepage clarity rated 5/5 — an agent can confidently say what this company does (model's one-sentence read: "Allowance provides a wallet with rules for AI agents, enabling safe and controlled payments for purchases, bookings, and orders without sharing real credit card numbers.")
An LLM read your homepage as an agent would and rated how confidently it could say what you do
✓OpenGraph / social metadata2/2
Homepage has og:title, og:description, and og:image (twitter:card="summary_large_image" present)
Parsed homepage og:title / og:description / og:image and twitter:card meta tags
spec ↗◐llms.txt2/4
/llms.txt exists (3883 chars) but is missing at least one markdown link [name](url)
fix → Your /llms.txt is missing at least one markdown link [name](url). Follow llmstxt.org: start with `# YourName`, add a `>` summary line, then sections of curated links.
Fetched /llms.txt and validated it against the llmstxt.org shape (H1, summary, curated links)
spec ↗✗llms-full.txt0/2
GET /llms-full.txt returned HTTP 404
fix → Add /llms-full.txt with expanded inline docs content so agents can load everything in one fetch.
Fetched /llms-full.txt and checked for substantial inline markdown content
spec ↗✓JSON-LD structured data4/4
4 JSON-LD block(s) on homepage (types: WebSite, Organization, SoftwareApplication, FAQPage); WebSite block is well-formed
Extracted and validated application/ld+json blocks on the homepage and pricing page
spec ↗✗Markdown content negotiation0/3
GET / with `Accept: text/markdown` returned HTTP 200 text/html; no .md twins found (2 probed)
fix → Serve text/markdown when clients send `Accept: text/markdown` (or expose .md twins of key pages) — agents get far more signal per token.
Requested key pages with Accept: text/markdown and probed .md twin URLs
4.Can an agent integrate with you?
watch →17/21
4.Can an agent integrate with you?
Whether the artifacts an agent needs to build on you — docs, API specs, SDKs, MCP servers — exist and are findable.
✓Developer resource discoverability3/3
Search "Allowance API documentation" cited your own domain: https://useallowance.com/
Searched for your brand with developer-keyword suffixes and checked which official resources are cited
✓OpenAPI spec discoverable5/5
OpenAPI spec found at https://useallowance.com/openapi.json (version 3.1.0)
Probed standard OpenAPI locations and docs links for a fetchable, parseable spec
spec ↗✓Docs discoverable4/4
Docs found at https://useallowance.com/api/ (via path probe, 3079 chars of readable text)
Followed homepage nav/footer links and probed /docs, /developers, docs.{domain}
✓MCP server discovery5/5
MCP configuration found at well-known path https://useallowance.com/.well-known/mcp.json (endpoint https://registry.modelcontextprotocol.io/v0.1/servers/com.useallowance%2Fallowance-mcp/versions/latest)
Probed /.well-known/mcp/server-card.json, mcp.json, and docs mentions for an MCP endpoint
spec ↗✗npm SDK0/2
No official npm SDK found: probed 6 candidate(s) (@allowance/sdk, @allowance/allowance, allowance, allowance-sdk, allowance-api, allowance-js) — found but not domain-verified: allowance
fix → Publish an official npm SDK (suggest @allowance/sdk) with your domain in package.json homepage so agents can verify it's official.
Searched the npm registry for an official, domain-verified SDK package
✗PyPI SDK0/2
No official PyPI SDK found: probed 4 candidate(s) (allowance, allowance-sdk, allowanceapi, allowance-python) — found but not domain-verified: allowance
fix → Publish an official Python SDK (suggest "allowance") with your domain in the project URLs so agents can verify it's official.
Searched PyPI for an official, domain-verified SDK package
5.Is your integration well-built?
watch →5.1/8
5.Is your integration well-built?
Whether your specs, docs, and tools are complete and descriptive enough for an agent to use them without guessing.
✓OpenAPI validity & quality3/3
Spec at https://useallowance.com/openapi.json: 7/7 quality criteria passed (7 paths, 7 operations)
Linted the spec: descriptions, operationIds, securitySchemes, servers
◐Docs quality2.1/3
Docs at https://useallowance.com/api/ scored clarity 4/5, completeness 3/5, runnable examples 4/5, agent-friendliness 3/5 (mean 3.5/5)
fix → Docs scored 3/5 on completeness. The documentation is incomplete as it does not provide details on how to handle different purchase statuses beyond 'requires_approval' and 'approved', or how to use the idempotency key effectively.
An LLM rated your docs for clarity, completeness, runnable examples, and agent-friendliness
✗Quickstart / getting started0/2
No quickstart/getting-started link or heading found on docs page https://useallowance.com/api/ (searched 11 links)
fix → Add a copy-pasteable quickstart (auth → first API call) — agents follow it literally.
Looked for a quickstart/getting-started guide containing code blocks
—MCP tool qualityna
No tools listed by the MCP endpoint — nothing to lint
Linted listed tools for descriptions, typed input schemas, and naming
6.Can an agent use you reliably in production?
watch →3/4
6.Can an agent use you reliably in production?
Response hygiene, TLS and redirect discipline, and security contact channels agents depend on at runtime.
✓TLS & redirect hygiene2/2
http://useallowance.com/ upgrades to https in 1 hop(s), 1 redirect(s) total, final HTTP 200; HSTS present
Checked http→https redirect behavior, chain length, and TLS health
✓Response speed & weight1/1
Homepage TTFB 69ms, payload 45KB, Content-Encoding: gzip
Measured homepage TTFB, payload size, and compression
✗security.txt0/1
https://useallowance.com/.well-known/security.txt returned HTTP 404
fix → Publish RFC 9116 /.well-known/security.txt with a Contact and a future Expires.
Fetched /.well-known/security.txt and validated Contact + Expires
spec ↗
7.Can an agent authenticate to you?
watch →2/7
7.Can an agent authenticate to you?
Whether agents can discover your auth model machine-readably (OAuth metadata) and follow documented steps to credentials.
✗OAuth authorization server metadata0/3
Neither /.well-known/oauth-authorization-server nor /.well-known/openid-configuration resolved (HTTP 404 / HTTP 404)
fix → Serve RFC 8414 metadata at /.well-known/oauth-authorization-server with PKCE (S256) and a registration_endpoint so agents can self-onboard.
Fetched /.well-known/oauth-authorization-server (and openid-configuration fallback)
spec ↗✗OAuth protected resource metadata0/2
No RFC 9728 metadata: https://useallowance.com/.well-known/oauth-protected-resource → HTTP 404
fix → Serve RFC 9728 metadata at /.well-known/oauth-protected-resource naming your authorization servers so agents can discover how to authenticate.
Fetched /.well-known/oauth-protected-resource
spec ↗✓Auth documentation2/2
Auth documentation found at https://useallowance.com/api#authentication (linked from https://useallowance.com/api/) with code examples
Looked for /auth.md or an authentication docs page with code examples
8.Can an agent transact with you?
watch →1/10
8.Can an agent transact with you?
Whether pricing is discoverable and machine-readable, and whether you support agent payment protocols.
✗Pricing discoverable0/5
No pricing page found: no homepage link matching pricing/plans/billing, and probes of /pricing and /plans returned no HTML page.
fix → Expose a crawlable /pricing page with literal plan prices and link it from your homepage nav.
Followed nav/footer links and probed /pricing for a page with legible price signals
—Machine-readable pricingna
No pricing page found to evaluate
Looked for Offer JSON-LD, then had an LLM attempt structured extraction of your plans
spec ↗✗x402 payment support0/2
/.well-known/x402 returned HTTP 404. API probe GET https://api.useallowance.com/v1/pricing returned HTTP 404 without x402 payment requirements. No x402 support detected (bonus check — absence costs nothing).
fix → Support x402: serve payment requirements at /.well-known/x402, or answer unauthenticated API calls with HTTP 402 plus an x402 payment-requirements payload (x402Version, accepts[]).
Probed /.well-known/x402 and API endpoints for HTTP 402 payment-required envelopes
spec ↗✓AP2 readiness1/1
AP2 evidence found: OpenAPI spec (https://useallowance.com/openapi.json) mentions "AP2".
Scanned fetched artifacts and well-known paths for AP2 hints
spec ↗✗Agentic Commerce Protocol0/1
No Agentic Commerce Protocol hints found — scanned llms.txt, agents.md, docs page (https://useallowance.com/api/), OpenAPI spec (https://useallowance.com/openapi.json); /.well-known/acp returned HTTP 404.
fix → Adopt the Agentic Commerce Protocol so agent checkouts can complete against your store — see https://developers.openai.com/commerce.
Scanned docs and specs for agentic checkout endpoints
spec ↗✗Other agent payment protocols0/1
No UCP/MPP hints found — scanned llms.txt, agents.md, docs page (https://useallowance.com/api/), OpenAPI spec (https://useallowance.com/openapi.json).
fix → Track emerging agent payment protocols (UCP, MPP) and adopt the ones your buyers' agents use.
Scanned fetched artifacts for UCP/MPP protocol hints
9.Can a user act through an agent?
0/4
9.Can a user act through an agent?
Whether an end user's agent can operate on their behalf: working MCP tools, published skills, agent configs.
—Agent skill publishedna
Requires the analysis phase — not yet evaluated
Checked /skill.md, /.well-known/skills/, and skills.sh for published agent skills
✗MCP handshake & tools list0/4
MCP endpoint https://registry.modelcontextprotocol.io/v0.1/servers/com.useallowance%2Fallowance-mcp/versions/latest failed handshake: HTTP 404
fix → MCP endpoint https://registry.modelcontextprotocol.io/v0.1/servers/com.useallowance%2Fallowance-mcp/versions/latest failed handshake: HTTP 404. Support streamable HTTP with protocol version negotiation; if auth-gated, return RFC 9728 metadata in WWW-Authenticate.
Performed a streamable-HTTP initialize + tools/list against the MCP endpoint
spec ↗—Agent configs in public repona
Requires the analysis phase — not yet evaluated
Checked your public GitHub org's main repos for AGENTS.md / .claude / .cursor configs
10.Can an agent operate your website directly?
5.5/9
10.Can an agent operate your website directly?
Whether the site itself is legible to non-rendering and browser agents: semantic HTML, no JS walls, accessibility.
✗NLWeb endpoint0/1
No NLWeb endpoint detected: /.well-known/nlweb.json returned HTTP 404 (text/html); GET /ask?query=hello returned HTTP 404 (text/html)
fix → Consider exposing an NLWeb /ask endpoint (and /.well-known/nlweb.json) for conversational access to your content.
Probed /.well-known/nlweb.json and the /ask endpoint
spec ↗◐Semantic HTML structure1.5/3
4/6 semantic signals present on the homepage (missing: <main> landmark, <header>/<footer>)
fix → Add the missing structure: <main> landmark, <header>/<footer>. Agents parse structure, not pixels.
Scored landmark elements, heading hierarchy, and text-to-markup ratio on the homepage
✓Content readable without JavaScript2/2
Homepage raw HTML contains 6225 chars of visible text without JavaScript
Measured visible text in the raw, unrendered homepage HTML
✓Accessibility basics2/2
Homepage accessibility: 5/5 checks passed
Static checks: lang attribute, title, alt coverage, labeled inputs, landmarks
✗WebMCP0/1
No WebMCP evidence on homepage: no application/webmcp script and no navigator.modelContext reference
fix → Consider WebMCP to expose page actions as tools to browser agents.
Looked for WebMCP script declarations on the homepage
spec ↗