Readiness scorer — can an agent sign up to your SaaS?
Server Details
Probe a signup URL you own and score whether an AI agent can sign up unaided.
- Status
- Healthy
- Uptime
- 100.0% over the last 24 hours
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
- Repository
- agentwares/servers
- GitHub Stars
- 0
- ChatGPT
- –
- Claude
- –
TDQS
Scored across 3 tools
Each tool maps to a distinct, explicitly numbered step of a single workflow: token retrieval, scan request, and scan polling. There is no overlap or plausible way to confuse them, and descriptions reinforce the boundaries.
All three names use a consistent readiness_ prefix with snake_case verb_noun structure (get_scan, get_verification_token, request_scan). Only nit is that get_verification_token breaks the strict two-token verb_noun shape, but the convention is still clearly readable.
Three tools is lean, but for a narrowly scoped domain-ownership-and-scan workflow each tool is a necessary, non-redundant step. It is close to the 'thin' threshold but not underspecified for its purpose.
The full happy path is covered: obtain ownership token, submit/queue the scan, and retrieve results with score, rubric, and fix list. Minor gaps exist (no cancel/list-scans or bulk operations), but polling by id lets agents work around them.
Available Tools
3 toolsreadiness_get_scanARead-onlyIdempotentInspect
Step 3. Poll a scan by id. While status is queued/running only metadata is returned; when done you get the 0-100 score, grade, per-item rubric points with evidence, the fix list, and what could not be observed.
Inputs: id (required).
readiness_get_verification_tokenARead-onlyIdempotentInspect
Step 1 of a readiness scan. Returns the domain-ownership token for the URL's host plus the three ways to publish it (DNS TXT record, tag, /.well-known file). The token is deterministic for the host, so calling this again returns the same value. Nothing is stored.
Inputs: url (required).
readiness_request_scanAInspect
Step 2. Verifies domain ownership (DNS TXT / meta tag / .well-known must carry the token from readiness_get_verification_token), then queues a Playwright probe that tries to sign up, accept the terms and mint an API key with no human. Returns the scan id and the public results URL. Fails with DOMAIN_NOT_VERIFIED (with instructions) or RATE_LIMITED (3 scans per host per day). Never solves CAPTCHAs.
Inputs: url (required).
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
Related MCP Connectors
Check a website in a real browser, or check if AI agents can use it: score, problems, report link.
Scan a public website for AI agent readiness: 60 checks, a score, and the evidence for each.
Scores any public website on how usable it is by AI agents, with per-check evidence.
Test whether AI agents complete SaaS pricing, signup or sales journeys; get evidence-backed reports.
Related MCP Servers
- AlicenseAqualityCmaintenancePoint your coding agent at a URL and get a real-browser QA audit: broken signup/login/checkout flows, JS console errors, missing analytics, consent + security headers, mobile tap targets, and accessibility — returned as machine-verified findings graded A-F.4422 PyPI2Apache 2.0

Menso MCP Serverofficial
AlicenseNot gradedqualityCmaintenanceEnables AI clients to launch real purchase or signup test runs against a live public URL and then fetch run status, scored findings with friction points and suggested fixes, and a public replay of every step taken. It works over Streamable HTTP with an API key, so no installation is needed in Claude Code, Cursor, Windsurf or any compatible client.3 npmMIT- AlicenseAqualityBmaintenanceEnables deterministic delivery QA for AI-generated web pages by opening URLs in Chromium, checking mobile viewport, text-scaling, and safe-area behavior, probing primary CTAs, and returning screenshots plus machine-readable evidence.1105 PyPI1MIT
- AlicenseBqualityCmaintenanceEnables read-only security assessment of a public MCP endpoint by sending initialize and tools/list requests and returning a 0–100 score covering transport, auth, overly broad tools, injection phrasing, and rug-pull definition changes, plus a 12-probe prompt-injection suite against a bot you own that flags leaked system prompts, tool dumps, secrets, exfiltration channels, and canary obedience.2MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.