ARO · Operational

auth.md

auth.md is an Agent Readiness Optimization check in the Auth and trust group.

Version agent-readiness-2026-10

What is this benchmark?

auth.md is an Agent Readiness Optimization check in the Auth and trust group.

Why it matters

auth.md is an optional human-readable auth note. Missing it does not change the score.

How SiteGlue evaluates it

HTTP request to a well-known or published URL. Spec: https://blog.cloudflare.com/agent-readiness. Catalog agent-readiness-2026-10.

Passing criteria: The published signal for auth.md is present and readable.
Failing criteria: The scan requested the signal and it was missing, blocked, or malformed.
Not verified: The check was not selected, the probe did not run, or evidence was inconclusive. Not verified is never scored as 0.
Not applicable: Optional checks can be recorded without changing the ARO score.

Scoring weight: 0. Evidence: Public HTTP, HTML, or DNS evidence for auth.md. No private credentials.

Example results

Pass

Agents can read a valid auth.md signal on the public site.

Fail

auth.md is missing, blocked, or not machine-readable.

Recommended fixes

Publish this file at /auth.md. It repeats the authentication declaration on the MCP server card.

Related benchmarks

Frequently asked questions

Does a missing optional check lower my ARO score?

No. Weight 0 checks are recorded and shown. They do not change the score.

No. ARO is a website audit. Optional live walks are Test With AI Agents.