D
Why this grade
A D grade. What you have on robots.txt AI-agent rules is being outweighed by missing signals on Anti-bot interstitial and OpenAPI specification discovery. Fix those first for the biggest score lift.
Get notified when this grade changes
Subscribe to grade-change alerts for openai.com — we'll email you when a new scan moves the grade or score.
Quick wins
Low-cost fixes that would nudge this grade up.
- User-agent sniffing Serve AI crawlers the same page as browsers — don't degrade or 403 requests based on a non-browser User-Agent.
- JSON error bodies for API callers Return a JSON error body (application/json or application/problem+json), not an HTML page, when the caller sends `Accept: application/json`.
- /.well-known/agent.json (A2A AgentCard) Publish an A2A AgentCard at `/.well-known/agent.json` with name, description, skills, and endpoints.
- /.well-known/ai-plugin.json manifest Publish a `/.well-known/ai-plugin.json` manifest with name_for_model, description_for_model, and an api block.
- /.well-known/mcp.json (Model Context Protocol) Publish an MCP manifest at `/.well-known/mcp.json` declaring your server, capabilities, or tools.
Blocking issues
High-weight checks that aren't passing.
- Anti-bot interstitial Anti-bot interstitial detected via body marker `cdn-cgi/challenge-platform`. LLM crawlers hitting this see nothing.
- OpenAPI specification discovery No OpenAPI spec found at any of 9 conventional paths.
Per-category breakdown
| Category | Score | Percent |
|---|---|---|
| Anti Bot | 0 / 15 | |
| Api | 0 / 15 | |
| Crawl | 23 / 23 | |
| Docs | 0 / 14 | |
| Html Meta | 0 / 8 | |
| Identity | 10 / 10 | |
| Onboarding | 0 / 6 | |
| Protocols | 10 / 10 | |
| Registries | 5 / 5 |
Findings (33)
Anti Bot · 2
| Check | Status | Points | Notes |
|---|---|---|---|
| Anti-bot interstitial | fail | 0 / 10 | Anti-bot interstitial detected via body marker `cdn-cgi/challenge-platform`. LLM crawlers hitting this see nothing. |
| User-agent sniffing | fail | 0 / 5 | User-agent sniffing detected (one UA was 403-blocked). Default UA got HTTP 200; curl UA got HTTP 403; body-length divergence 97.7%. |
Api · 3
| Check | Status | Points | Notes |
|---|---|---|---|
| GraphQL introspection | skip | — | No GraphQL endpoint found at any of 3 conventional paths. |
| JSON error bodies for API callers | fail | 0 / 5 | HTTP 403 served an HTML body for an API-like caller (Accept: application/json). |
| OpenAPI specification discovery | fail | 0 / 10 | No OpenAPI spec found at any of 9 conventional paths. |
Crawl · 3
| Check | Status | Points | Notes |
|---|---|---|---|
| RSS/Atom feed | skip | — | No RSS/Atom feed found at probed paths or via `<link rel="alternate">`. |
| robots.txt AI-agent rules | pass | 13 / 13 | All 13 documented AI user-agents can crawl /. |
| XML sitemap discovery | pass | 10 / 10 | Sitemap at /sitemap.xml (sitemapindex, 35 entries). |
Docs · 2
| Check | Status | Points | Notes |
|---|---|---|---|
| Docs platform discoverability | fail | 0 / 6 | No docs found at any of the conventional paths. |
| SDK availability across languages | fail | 0 / 8 | No SDKs discoverable via npm, PyPI, or the docs page. |
Html Meta · 3
| Check | Status | Points | Notes |
|---|---|---|---|
| JSON-LD structured data | fail | 0 / 8 | No JSON-LD blocks on the homepage. |
| meta description | info | — | Meta description present (126 characters) (informational — not graded). |
| Open Graph tags | info | — | All three core Open Graph tags present on the homepage (informational — not graded). |
Identity · 3
| Check | Status | Points | Notes |
|---|---|---|---|
| Email auth (SPF, DMARC, DKIM) | info | — | Email auth present: SPF + DMARC + DKIM (informational — mail trust/deliverability, not graded). |
| security.txt responsible-disclosure declaration | info | — | security.txt at https://openai.com/.well-known/security.txt declares a Contact (informational — a human security-researcher signal, not graded). |
| TLS + HSTS + HTTPS redirect | pass | 10 / 10 | Valid TLS cert (issuer: C=US, O=Let's Encrypt, CN=YE2, expires 2026-11-09), http → https redirect confirmed. (HSTS max-age=31536000 — informational.) |
Llm Training · 3
| Check | Status | Points | Notes |
|---|---|---|---|
| Common Crawl index presence | info | — | 50 pages from openai.com in CC-MAIN-2026-30 (informational — corpus presence, not graded). |
| Hacker News mentions | info | — | 50 verified HN mention(s) of openai.com (informational — popularity signal, not graded). |
| Wikipedia article | info | — | Wikipedia article "OpenAI" links to openai.com (https://openai.com/product/gpt-4) (informational — corpus knowledge, not graded). |
Onboarding · 1
| Check | Status | Points | Notes |
|---|---|---|---|
| API-key / signup path discoverability | fail | 0 / 6 | No signup, API-key, or developer page discoverable by anchor text or conventional path. |
Protocols · 2
| Check | Status | Points | Notes |
|---|---|---|---|
| Public MCP registry listing | pass | 10 / 10 | Listed in 2 registry/registries: official, glama. |
| A2A AgentCard conformance | skip | — | No AgentCard at /.well-known/agent.json — nothing to grade. |
Registries · 3
| Check | Status | Points | Notes |
|---|---|---|---|
| GitHub public repository | pass | 5 / 5 | 24 attributable repo(s): openai/codex (first party link); openai/plugins (first party link); openai/codex-security (first party link, homepage field); openai/openai-agents-python (first party link); openai/tunnel-client (first party link). Agent topics: mcp-server. |
| npm SDK package | skip | — | No npm packages attributable to openai.com — name matches without a verifiable attribution signal are not counted. |
| PyPI SDK package | skip | — | PyPI package(s) exist at probed name(s) (openai, openai-sdk) but none carry a verifiable attribution signal — name-existence alone is not counted. |
Root Level · 3
| Check | Status | Points | Notes |
|---|---|---|---|
| /ai.txt AI-crawler directives | error | — | ai.txt returned HTTP 403 — cannot assess |
| /llms-full.txt long-form index | error | — | llms-full.txt returned HTTP 403 — cannot assess |
| /llms.txt index for LLMs | error | — | llms.txt returned HTTP 403 — cannot assess |
Well Known · 5
| Check | Status | Points | Notes |
|---|---|---|---|
| /.well-known/agent.json (A2A AgentCard) | skip | — | No /.well-known/agent.json present (404). |
| /.well-known/ai-plugin.json manifest | skip | — | No /.well-known/ai-plugin.json present (404). |
| /.well-known/mcp.json (Model Context Protocol) | skip | — | No /.well-known/mcp.json present (404). |
| OpenID Connect configuration + dynamic registration | skip | — | No /.well-known/openid-configuration — site does not advertise an OIDC provider. |
| /.well-known/openapi.{json,yaml} | skip | — | No OpenAPI spec at either well-known path. |
Score over time
- Latest
- 49 ▼ 17
- Best
- 66
- Worst
- 49
- Scans
- 3
Scan history
Embed this grade
Paste the badge anywhere — your README, a status page, a docs site. The image always reflects the latest scan.
