--- title: "Novartis: the 360 check | Agent Ready Checklist" description: "Novartis on Ora's agent-readiness scan, read 2026-11-09: 68 of 100, grade C. 9 of 16 checklist rows met, 6 not met. One company a day." canonical: https://agentreadychecklist.com/blog/novartis-agent-readiness site: "Agent Ready Checklist" last_updated: 2026-11-09 date: 2026-11-09 section: "360 checks" --- # Novartis: the 360 check | Agent Ready Checklist > Novartis on Ora's agent-readiness scan, read 2026-11-09: 68 of 100, grade C. 9 of 16 checklist rows met, 6 not met. One company a day. Source: https://agentreadychecklist.com/blog/novartis-agent-readiness Site: Agent Ready Checklist Last reviewed: 2026-11-09 Agent endpoints: https://agentreadychecklist.com/llms.txt (index), https://agentreadychecklist.com/openapi.json (API), https://agentreadychecklist.com/mcp (MCP server), https://agentreadychecklist.com/ask (search) Access: https://agentreadychecklist.com/auth.md (no key). Pricing: https://agentreadychecklist.com/pricing.md (free). # Novartis against the checklist: the 360 agent-readiness check 360 check, 9 November 2026. Novartis is the Swiss drugmaker. Novartis scores 68 of 100 on Ora's agent-readiness scan, a C, read 9 November 2026. At the door, site accessible to 6 AI agent user-agents. 9 of the 16 checklist rows with an Ora check are met. The first site in the series to answer a request for markdown with markdown. On 9 November 2026 the public site at novartis.com scored **68 of 100** on [Ora's](https://ora.ai/?utm_source=agentreadychecklist.com&utm_medium=referral&utm_campaign=check) agent-readiness scan, a C. Ora probes a site the way an agent would: it requests pages with the agents' own user agents, reads robots.txt, looks for the files agents read, and tries the API, MCP and payment surfaces. Below, each of the 31 checklist rows is read against the Ora checks the [crosswalk](https://agentreadychecklist.com/checklist/ora-checks/) names for it, so the result says which requirements this company meets, not only how many points it scored. Ora's one-line summary: Novartis.com offers solid agent discovery, but lacks WebMCP support. ## The score | Layer | Points | Share | What the layer asks | | --- | --- | --- | --- | | Discovery | 8 of 10 | 80% | Can agents find and recommend it | | Access | 28 of 41 | 68% | Can agents read it | | Usability | 10 of 16 | 63% | Can agents use it | | Payments | 0 of 0 | none apply | Can agents pay | | Total | 68 of 100 | 68% | Grade C | ## Row by row A row is met when every Ora check the crosswalk names for it passes, not met when every one fails, and partly when the checks disagree or one is partial. A row with no Ora check in the catalogue, or whose checks did not apply to this site, is marked as such; the [Verify Kit](https://agentreadychecklist.com/kit/) tests those by hand. | Row | Level | Result | Ora checks, and what Ora saw | | --- | --- | --- | --- | | AR-FIND-01; Do not block agents | MUST | Met | robots.txt AI crawler policy (pass), robots.txt agent-user policy (pass), Agent crawler reachability (pass), Not blocked by bot detection (pass).; Training: 2/2. Search: 3/3 page/crawler pairs permitted. No applicable crawl or usage restriction found for 5 training and search crawlers (gptbot, claudebot, oai-searchbot, claude-searchbot, | | AR-FIND-02; Answers on one first-party page | SHOULD | No Ora check | No check in Ora's catalogue names this row. | | AR-FIND-03; Sitemap listed in robots.txt | SHOULD | Met | Sitemap exists (pass).; Valid sitemap found at /sitemap.xml with 4055 entries | | AR-FIND-04; AI Catalog at .well-known | MAY | Not met | AI Catalog discovery (not applicable), ARD discovery (fail).; No /.well-known/ard.json (and no legacy /.well-known/ai-catalog.json) | | AR-READ-01; Answer in the initial HTML | MUST | Met | Content without JavaScript (pass).; 1663 chars, semantic headings (1 H1 + 10 H2s + 3 H3s), 5.6% content ratio | | AR-READ-02; Real HTTP status codes | MUST | Met | Redirect hygiene (pass).; Redirect hygiene: pass, 1 of 1. | | AR-READ-03; Home page with real links | SHOULD | No Ora check | Public API/docs linked from homepage (not applicable). | | AR-READ-04; Docs that answer agent tasks | SHOULD | No Ora check | No check in Ora's catalogue names this row. | | AR-READ-05; Fenced, language-tagged code | SHOULD | No Ora check | Code fence validity (not applicable). | | AR-READ-06; Link the discovery files | SHOULD | No Ora check | No check in Ora's catalogue names this row. | | AR-READ-07; Ship llms.txt | SHOULD | Not met | llms.txt exists (fail), llms.txt formatting (fail), llms.txt links resolve (not applicable).; No llms.txt found at /llms.txt or /.well-known/llms.txt. | | AR-READ-08; JSON-LD on key pages | SHOULD | Met | JSON-LD structured data (pass).; Rich JSON-LD identity: Organization with name, description, url, and sameAs/logo/address (1 block(s)) | | AR-READ-09; Advertise a markdown mirror | MAY | Met | Markdown alternate link (pass).; Markdown alternate link: pass, 1 of 1. | | AR-READ-11; Pricing as first-party HTML | SHOULD | Partly | Pricing info accessible (partial).; Pricing link found but no dedicated pricing page at standard path | | AR-ACT-01; Auth an agent can finish | SHOULD | No Ora check | OAuth 2.0 support (not applicable), Scoped permissions (not applicable). | | AR-ACT-02; OpenAPI contract | SHOULD | No Ora check | OpenAPI spec published (not applicable). | | AR-ACT-03; MCP over Streamable HTTP | SHOULD | No Ora check | MCP server / manifest (not applicable), Listed in MCP registries (not applicable), MCP PKCE S256 support (not applicable), MCP OAuth metadata (not applicable). | | AR-ACT-04; MCP server card | MAY | Not met | MCP server-card.json (fail).; No MCP server card found at /.well-known/mcp/server-card.json | | AR-ACT-05; MCP Apps view | MAY | No Ora check | MCP Apps support (not applicable). | | AR-ACT-06; SDKs and a CLI | SHOULD | No Ora check | CLI tool available (not applicable), Multi-language SDK packages (not applicable), NPM/PyPI SDK package (not applicable). | | AR-ACT-07; WebMCP tools | SHOULD | Not met | WebMCP support (fail).; No WebMCP support detected - no tool-attribute forms and no document.modelContext / navigator.modelContext usage found (scanned 5 of 5 same-origin script bundle(s) for modelContext registrations) | | AR-ACT-08; Agent payments | MAY | No Ora check | x402 payment protocol (not applicable), MPP payment protocol (not applicable), UCP - Universal Commerce Protocol (not applicable), ACP - Agentic Commerce Protocol (not applicable), ACP delegate payment (not applicable). | | AR-ACT-09; NLWeb /ask endpoint | MAY | Not met | NLWeb /ask endpoint (fail).; No NLWeb-conformant /ask endpoint found via GET or POST | | AR-ACT-10; An MCP server or a CLI | MUST | No Ora check | MCP server / manifest (not applicable), CLI tool available (not applicable). | | CF-CONTENT-SIGNALS; Content-Signal line | cloudflare | No Ora check | No check in Ora's catalogue names this row. | | CF-MARKDOWN-NEGOTIATION; Markdown by Accept | cloudflare | Met | Markdown content negotiation (acceptmarkdown.com) (pass), Markdown agent docs (pass).; Markdown content negotiation (acceptmarkdown.com): pass, 1 of 1. | | CF-PAY-PER-CRAWL; Pay per crawl, HTTP 402 | cloudflare | No Ora check | No check in Ora's catalogue names this row. | | CF-OAUTH-DISCOVERY; OAuth discovery files | cloudflare | Not met | OAuth Protected Resource metadata (RFC 9728) (fail).; No /.well-known/oauth-protected-resource found (RFC 9728) | | CF-AGENT-SKILLS; Agent Skills index | cloudflare | No Ora check | Agent Skills index conformance (v0.2.0) (not applicable). | | VERCEL-NEGOTIATION-HEADERS; Markdown headers | vercel | Met | Markdown content negotiation (acceptmarkdown.com) (pass).; Markdown content negotiation (acceptmarkdown.com): pass, 1 of 1. | | VERCEL-ROBOTS-EXCLUSIONS; Robots exclusions | vercel | Met | robots.txt AI crawler policy (pass), robots.txt agent-user policy (pass).; Training: 2/2. Search: 3/3 page/crawler pairs permitted. No applicable crawl or usage restriction found for 5 training and search crawlers (gptbot, claudebot, oai-searchbot, claude-searchbot, | ## The fixes worth most points Ora attaches an estimate to each failing or partial check: how many points the site would gain by passing it. These are the 5 with the largest estimates for Novartis, each tied to the checklist row whose recipes cover it. WebMCP support Fail, 0 of 5, about 13.9 points to gain. Ora saw: No WebMCP support detected - no tool-attribute forms and no document.modelContext / navigator.modelContext usage found (scanned 5 of 5 same-origin script bundle(s) for modelContext registrations). Row [AR-ACT-07](https://agentreadychecklist.com/checklist/ar-act-07/), WebMCP tools. Agent-friendly 404s Partial, 1 of 2, about 2.8 points to gain. Ora saw: The nonexistent path https://novartis.com/\_\_ora-404-probe-vpplzg5r correctly returns HTTP 404. Partial credit: no Markdown error body was detected. No checklist row names this check. Agent auth discovery metadata Fail, 0 of 3, about 2.6 points to gain. Ora saw: Neither /.well-known/oauth-protected-resource nor /.well-known/oauth-authorization-server found. Probed: novartis.com, api.novartis.com. No checklist row names this check. Agent instruction / when-to-use Fail, 0 of 3, about 2.4 points to gain. Ora saw: No agent instruction file with when-to-use guidance found. No checklist row names this check. ARD discovery Fail, 0 of 1, about 2.2 points to gain. Ora saw: No /.well-known/ard.json (and no legacy /.well-known/ai-catalog.json). Row [AR-FIND-04](https://agentreadychecklist.com/checklist/ar-find-04/), AI Catalog at .well-known. ## Our read Novartis is the first company in this series to answer a request for markdown with markdown. Ask novartis.com for text/markdown and it returns it, which is a row almost every corporate site misses, and the rest of the reading layer is in the same order: six of six agent user agents got in, robots.txt allows all five training and three search crawlers Ora checked, the home page gives 1,663 characters at a 5.6 percent content ratio with one H1, ten H2s and three H3s, the sitemap lists 4,055 pages, and the JSON-LD is a complete Organization with name, description, sameAs, logo and address. The gap is the one text file, an llms.txt at either location. The act layer is empty, as every pharmaceuticals group in this set has been, and Ora's largest estimate is 13.9 points for WebMCP. On the rows the checklist marks MUST, Novartis is the cleanest corporate site read so far. ## Verify your own site The scan above is free and needs no account: enter a domain at [ora.ai](https://ora.ai/?utm_source=agentreadychecklist.com&utm_medium=referral&utm_campaign=check) and read the same four layers for your own site, then take each failing row to its recipe on this site. The command below runs the same audit from a terminal and exits with 1 under the score you set, so it can gate a deploy. Payments did not apply to this company; a site that sells is read on that layer too. [Why Ora, and its limits](https://agentreadychecklist.com/verify-with-ora/). ```bash npx ax@0.10 audit https://example.com --min-score 70 ``` [All 360 checks](https://agentreadychecklist.com/blog/), one company a day. Corrections to [the corrections page](https://agentreadychecklist.com/corrections/). ## Sources - [ora.ai/api/score/novartis.com, Ora's scan (vendor)](https://ora.ai/api/score/novartis.com?utm_source=agentreadychecklist.com&utm_medium=referral&utm_campaign=check)read 2026-11-09 - [ora.ai/api/checks, contract 1.38.0 (vendor)](https://ora.ai/api/checks?utm_source=agentreadychecklist.com&utm_medium=referral&utm_campaign=check)read 2026-11-05 - [novartis.com, the company's site](https://www.novartis.com/)read 2026-11-09 Edition Data 2026-11-04 Reviewed 2026-11-05 Spec AgentReady v2.0, 273d2d7 Crawl 13,071 rows, 2026-11-04 Ora 132 checks, contract 1.38.0, 2026-11-05 Verify with Ora The scanner this site recommends for the whole checklist. 132 checks, a score out of 100, no account. `npx ax@0.10 audit --min-score ` [Why Ora, and its limits](https://agentreadychecklist.com/verify-with-ora/) Method - [How rows, commands and rates are made](https://agentreadychecklist.com/method/) - [How an Ora check is matched to a row](https://agentreadychecklist.com/checklist/ora-checks/) - [Pass rates by rank band](https://agentreadychecklist.com/data/by-rank/) Sources and read dates sit at the foot of the page. Last reviewed 2026-11-09. AgentReady v2.0, read 2026-11-04.