--- title: "BP: the 360 check | Agent Ready Checklist" description: "BP on Ora's agent-readiness scan, read 2026-11-09: 29 of 100, grade D. 5 of 22 checklist rows met, 14 not met. One company a day." canonical: https://agentreadychecklist.com/blog/bp-agent-readiness site: "Agent Ready Checklist" last_updated: 2026-11-09 date: 2026-11-09 section: "360 checks" --- # BP: the 360 check | Agent Ready Checklist > BP on Ora's agent-readiness scan, read 2026-11-09: 29 of 100, grade D. 5 of 22 checklist rows met, 14 not met. One company a day. Source: https://agentreadychecklist.com/blog/bp-agent-readiness Site: Agent Ready Checklist Last reviewed: 2026-11-09 Agent endpoints: https://agentreadychecklist.com/llms.txt (index), https://agentreadychecklist.com/openapi.json (API), https://agentreadychecklist.com/mcp (MCP server), https://agentreadychecklist.com/ask (search) Access: https://agentreadychecklist.com/auth.md (no key). Pricing: https://agentreadychecklist.com/pricing.md (free). # BP against the checklist: the 360 agent-readiness check 360 check, 9 November 2026. BP is the British oil and gas group. BP scores 29 of 100 on Ora's agent-readiness scan, a D, read 9 November 2026. At the door, some agents blocked: GPTBot, ClaudeBot, ChatGPT-User, PerplexityBot, Applebot-Extended. 5 of the 22 checklist rows with an Ora check are met. A robots.txt that promises nothing and an edge that refuses most agents anyway. On 9 November 2026 the public site at bp.com scored **29 of 100** on [Ora's](https://ora.ai/?utm_source=agentreadychecklist.com&utm_medium=referral&utm_campaign=check) agent-readiness scan, a D. Ora probes a site the way an agent would: it requests pages with the agents' own user agents, reads robots.txt, looks for the files agents read, and tries the API, MCP and payment surfaces. Below, each of the 31 checklist rows is read against the Ora checks the [crosswalk](https://agentreadychecklist.com/checklist/ora-checks/) names for it, so the result says which requirements this company meets, not only how many points it scored. Ora's one-line summary: BP has strong brand discoverability, but lacks a public API with reachable endpoints. ## The score | Layer | Points | Share | What the layer asks | | --- | --- | --- | --- | | Discovery | 7 of 20 | 35% | Can agents find and recommend it | | Access | 17 of 52 | 33% | Can agents read it | | Usability | 11 of 47 | 23% | Can agents use it | | Payments | 0 of 0 | none apply | Can agents pay | | Total | 29 of 100 | 29% | Grade D | ## Row by row A row is met when every Ora check the crosswalk names for it passes, not met when every one fails, and partly when the checks disagree or one is partial. A row with no Ora check in the catalogue, or whose checks did not apply to this site, is marked as such; the [Verify Kit](https://agentreadychecklist.com/kit/) tests those by hand. | Row | Level | Result | Ora checks, and what Ora saw | | --- | --- | --- | --- | | AR-FIND-01; Do not block agents | MUST | Partly | robots.txt AI crawler policy (fail), robots.txt agent-user policy (pass), Agent crawler reachability (partial), Not blocked by bot detection (partial).; No AI crawler directives in robots.txt | | AR-FIND-02; Answers on one first-party page | SHOULD | No Ora check | No check in Ora's catalogue names this row. | | AR-FIND-03; Sitemap listed in robots.txt | SHOULD | Met | Sitemap exists (pass).; Valid sitemap found at https://www.bp.com/sitemap.xml with multiple sitemaps entries | | AR-FIND-04; AI Catalog at .well-known | MAY | Not met | AI Catalog discovery, ARD discovery (fail).; No /.well-known/ai-catalog.json | | AR-READ-01; Answer in the initial HTML | MUST | Met | Content without JavaScript (pass).; 1964 chars with H1 but flat heading structure | | AR-READ-02; Real HTTP status codes | MUST | Met | Redirect hygiene (pass).; Redirect hygiene: pass, 1 of 1. | | AR-READ-03; Home page with real links | SHOULD | Met | Public API/docs linked from homepage (pass).; API/docs link found on homepage and resolves: /api/files/6cqieuqhq4no/master/33M2iHp8A6d07McKzKqLNP/12b5d4eccb4e02093d1ad9efc0d6a746/bp-annual-report-and-form-20f-2025.pdf | | AR-READ-04; Docs that answer agent tasks | SHOULD | No Ora check | No check in Ora's catalogue names this row. | | AR-READ-05; Fenced, language-tagged code | SHOULD | No Ora check | Code fence validity (not applicable). | | AR-READ-06; Link the discovery files | SHOULD | No Ora check | No check in Ora's catalogue names this row. | | AR-READ-07; Ship llms.txt | SHOULD | Not met | llms.txt exists (fail), llms.txt formatting (fail), llms.txt links resolve (not applicable).; No llms.txt found at /llms.txt or /.well-known/llms.txt. | | AR-READ-08; JSON-LD on key pages | SHOULD | Not met | JSON-LD structured data (fail).; No JSON-LD structured data found on homepage | | AR-READ-09; Advertise a markdown mirror | MAY | Not met | Markdown alternate link (fail).; No sampled page advertises a markdown alternate. Add (or the equivalent Link response header) pointing at a markdown twin of the page. | | AR-READ-11; Pricing as first-party HTML | SHOULD | Not met | Pricing info accessible (fail).; No pricing page or pricing data found | | AR-ACT-01; Auth an agent can finish | SHOULD | Not met | OAuth 2.0 support (fail), Scoped permissions (fail).; No OAuth 2.0 or OpenID Connect support detected | | AR-ACT-02; OpenAPI contract | SHOULD | Not met | OpenAPI spec published (fail).; No OpenAPI/Swagger specification found | | AR-ACT-03; MCP over Streamable HTTP | SHOULD | Not met | MCP server / manifest (fail), Listed in MCP registries (not applicable), MCP PKCE S256 support (not applicable), MCP OAuth metadata (not applicable).; No MCP server or manifest found | | AR-ACT-04; MCP server card | MAY | Not met | MCP server-card.json (fail).; No MCP server card found at /.well-known/mcp/server-card.json | | AR-ACT-05; MCP Apps view | MAY | No Ora check | MCP Apps support (not applicable). | | AR-ACT-06; SDKs and a CLI | SHOULD | Met | CLI tool available (pass), Multi-language SDK packages (not applicable), NPM/PyPI SDK package (not applicable).; CLI package found on npm: bp-cli | | AR-ACT-07; WebMCP tools | SHOULD | Not met | WebMCP support (fail).; No WebMCP support detected - no tool-attribute forms and no document.modelContext / navigator.modelContext usage found (scanned 8 of 8 same-origin script bundle(s) for modelContext registrations) | | AR-ACT-08; Agent payments | MAY | No Ora check | x402 payment protocol (not applicable), MPP payment protocol (not applicable), UCP - Universal Commerce Protocol (not applicable), ACP - Agentic Commerce Protocol (not applicable), ACP delegate payment (not applicable). | | AR-ACT-09; NLWeb /ask endpoint | MAY | Not met | NLWeb /ask endpoint (fail).; No NLWeb-conformant /ask endpoint found via GET or POST | | AR-ACT-10; An MCP server or a CLI | MUST | Partly | MCP server / manifest (fail), CLI tool available (pass).; No MCP server or manifest found | | CF-CONTENT-SIGNALS; Content-Signal line | cloudflare | No Ora check | No check in Ora's catalogue names this row. | | CF-MARKDOWN-NEGOTIATION; Markdown by Accept | cloudflare | Not met | Markdown content negotiation (acceptmarkdown.com) (fail), Markdown agent docs (fail).; Not acceptmarkdown.com compliant: Accept: text/markdown returned text/html; charset=utf-8; Vary header missing Accept (got "rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, accept-encoding") | | CF-PAY-PER-CRAWL; Pay per crawl, HTTP 402 | cloudflare | No Ora check | No check in Ora's catalogue names this row. | | CF-OAUTH-DISCOVERY; OAuth discovery files | cloudflare | Not met | OAuth Protected Resource metadata (RFC 9728) (fail).; No /.well-known/oauth-protected-resource found (RFC 9728) | | CF-AGENT-SKILLS; Agent Skills index | cloudflare | No Ora check | Agent Skills index conformance (v0.2.0) (not applicable). | | VERCEL-NEGOTIATION-HEADERS; Markdown headers | vercel | Not met | Markdown content negotiation (acceptmarkdown.com) (fail).; Not acceptmarkdown.com compliant: Accept: text/markdown returned text/html; charset=utf-8; Vary header missing Accept (got "rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, accept-encoding") | | VERCEL-ROBOTS-EXCLUSIONS; Robots exclusions | vercel | Partly | robots.txt AI crawler policy (fail), robots.txt agent-user policy (pass).; No AI crawler directives in robots.txt | ## The fixes worth most points Ora attaches an estimate to each failing or partial check: how many points the site would gain by passing it. These are the 5 with the largest estimates for BP, each tied to the checklist row whose recipes cover it. Developer resource discoverability Fail, 0 of 6, about 6.7 points to gain. Ora saw: Agent searched for "bp" developer resources but found nothing relevant. No checklist row names this check. Public API with reachable endpoints Fail, 0 of 7, about 6.6 points to gain. Ora saw: No publicly reachable API surface detected (REST and GraphQL both absent or auth-gated). No checklist row names this check. MCP server / manifest Fail, 0 of 6, about 5.7 points to gain. Ora saw: No MCP server or manifest found. Row [AR-ACT-03](https://agentreadychecklist.com/checklist/ar-act-03/), MCP over Streamable HTTP. OAuth 2.0 support Fail, 0 of 5, about 4.7 points to gain. Ora saw: No OAuth 2.0 or OpenID Connect support detected. Row [AR-ACT-01](https://agentreadychecklist.com/checklist/ar-act-01/), Auth an agent can finish. Scoped permissions Fail, 0 of 5, about 4.7 points to gain. Ora saw: No scoped permissions or security schemes found. Row [AR-ACT-01](https://agentreadychecklist.com/checklist/ar-act-01/), Auth an agent can finish. ## Our read BP's D is a door problem with a quiet robots.txt. The policy file says nothing about AI crawlers either way, so the checklist's robots rows pass by default, while the edge blocks GPTBot, ClaudeBot, ChatGPT-User, PerplexityBot and Applebot-Extended and lets Google-Extended through; an agent reading the file would expect a welcome it does not get. Behind the block, what Ora could read is ordinary: a home page of 1,964 characters with an H1 and a flat heading structure, a valid sitemap at bp.com/sitemap.xml, no llms.txt and no JSON-LD. The act layer is close to empty; the one link to API documentation on the home page resolves, but Ora found no reachable API surface behind it, and the bp-cli package on npm is not BP's. The fix order is the same as for every blocked site in this series: decide the door policy, write it into robots.txt, and make the edge agree with it. ## Verify your own site The scan above is free and needs no account: enter a domain at [ora.ai](https://ora.ai/?utm_source=agentreadychecklist.com&utm_medium=referral&utm_campaign=check) and read the same four layers for your own site, then take each failing row to its recipe on this site. The command below runs the same audit from a terminal and exits with 1 under the score you set, so it can gate a deploy. Payments did not apply to this company; a site that sells is read on that layer too. [Why Ora, and its limits](https://agentreadychecklist.com/verify-with-ora/). ```bash npx ax@0.10 audit https://example.com --min-score 70 ``` [All 360 checks](https://agentreadychecklist.com/blog/), one company a day. Corrections to [the corrections page](https://agentreadychecklist.com/corrections/). ## Sources - [ora.ai/api/score/bp.com, Ora's scan (vendor)](https://ora.ai/api/score/bp.com?utm_source=agentreadychecklist.com&utm_medium=referral&utm_campaign=check)read 2026-11-09 - [ora.ai/api/checks, contract 1.38.0 (vendor)](https://ora.ai/api/checks?utm_source=agentreadychecklist.com&utm_medium=referral&utm_campaign=check)read 2026-11-05 - [bp.com, the company's site](https://www.bp.com/)read 2026-11-09 Edition Data 2026-11-04 Reviewed 2026-11-05 Spec AgentReady v2.0, 273d2d7 Crawl 13,071 rows, 2026-11-04 Ora 132 checks, contract 1.38.0, 2026-11-05 Verify with Ora The scanner this site recommends for the whole checklist. 132 checks, a score out of 100, no account. `npx ax@0.10 audit --min-score ` [Why Ora, and its limits](https://agentreadychecklist.com/verify-with-ora/) Method - [How rows, commands and rates are made](https://agentreadychecklist.com/method/) - [How an Ora check is matched to a row](https://agentreadychecklist.com/checklist/ora-checks/) - [Pass rates by rank band](https://agentreadychecklist.com/data/by-rank/) Sources and read dates sit at the foot of the page. Last reviewed 2026-11-09. AgentReady v2.0, read 2026-11-04.