io.github.agentwares/readiness-scorer

Readiness scorer — can an agent sign up to your SaaS?

Probe a signup URL you own and score whether an AI agent can sign up unaided.

0.1.2
Version
remote
Transport
3
Tools

Security review

Review passed

Reviewed 1d ago.

  • tools: 3 tools scanned
  • metadata: scanned

No findings.

Tools (3)

  • readiness_get_verification_token

    Step 1 of a readiness scan. Returns the domain-ownership token for the URL's host plus the three ways to publish it (DNS TXT record, <meta> tag, /.well-known file). The token is deterministic for the host, so calling this again returns the same value. Nothing is stored.

  • readiness_request_scan

    Step 2. Verifies domain ownership (DNS TXT / meta tag / .well-known must carry the token from readiness_get_verification_token), then queues a Playwright probe that tries to sign up, accept the terms and mint an API key with no human. Returns the scan id and the public results URL. Fails with DOMAIN_NOT_VERIFIED (with instructions) or RATE_LIMITED (3 scans per host per day). Never solves CAPTCHAs.

  • readiness_get_scan

    Step 3. Poll a scan by id. While status is queued/running only metadata is returned; when done you get the 0-100 score, grade, per-item rubric points with evidence, the fix list, and what could not be observed.