---
title: "AR-ACT-03: MCP over Streamable HTTP | Agent Ready Checklist"
description: "AR-ACT-03 (SHOULD, Act layer): MCP over Streamable HTTP. What it asks, the evidence, the command that verifies it and the fix on 19 platforms."
canonical: https://agentreadychecklist.com/checklist/ar-act-03
site: "Agent Ready Checklist"
last_updated: 2026-11-05
section: "Checklist"
---

# AR-ACT-03: MCP over Streamable HTTP | Agent Ready Checklist

> AR-ACT-03 (SHOULD, Act layer): MCP over Streamable HTTP. What it asks, the evidence, the command that verifies it and the fix on 19 platforms.

Source: https://agentreadychecklist.com/checklist/ar-act-03
Site: Agent Ready Checklist
Last reviewed: 2026-11-05
Agent endpoints: https://agentreadychecklist.com/llms.txt (index), https://agentreadychecklist.com/openapi.json (API), https://agentreadychecklist.com/mcp (MCP server), https://agentreadychecklist.com/ask (search)
Access: https://agentreadychecklist.com/auth.md (no key). Pricing: https://agentreadychecklist.com/pricing.md (free).

# AR-ACT-03: MCP over Streamable HTTP

AR-ACT-03 is a SHOULD on the act layer: Expose an MCP server over Streamable HTTP at /mcp; keep the docs MCP public and gate the product MCP with OAuth and PKCE; list it in the MCP Registry with a server.json. It applies to products agents act on. 19 of 19 platforms have a recipe below, 11 of them workarounds.

## The requirement

Identifier

AR-ACT-03

Level

SHOULD

Layer

Act

Applies to

products agents act on

Checked by

Ora, matched on this site, Cloudflare mcpServerCard, Verify Kit mcp-or-cli

Ora check

[mcp-server, mcp-registry-listed, mcp-pkce-s256, mcp-oauth-metadata](#ora)

The statement

Expose an MCP server over Streamable HTTP at /mcp; keep the docs MCP public and gate the product MCP with OAuth and PKCE; list it in the MCP Registry with a server.json.

## Why

-   The spec says to publish protected-resource metadata at /.well-known/oauth-protected-resource for the product MCP.primary source: [github.com/agentready-org/standard/blob/main/spec/spec.md](https://github.com/agentready-org/standard/blob/main/spec/spec.md), read 2026-11-04
-   The Vercel guide calls /mcp a stable endpoint choice but not a protocol requirement.primary source, 2026-08-28: [vercel.com/kb/guide/make-your-site-readable-by-ai-agents](https://vercel.com/kb/guide/make-your-site-readable-by-ai-agents), read 2026-11-04
-   MCP authorization requires PKCE for authorization code flows.primary source, 2025-06-18: [modelcontextprotocol.io/specification/2025-06-18/basic/authorization](https://modelcontextprotocol.io/specification/2025-06-18/basic/authorization), read 2026-11-04

## How to verify

### [MCP server or CLI discoverable](https://agentreadychecklist.com/kit/mcp-or-cli/)

```bash
curl -fsSL https://agentreadychecklist.com/kit/verify.sh | bash -s -- https://example.com --only=mcp-or-cli
```

Fetches /.well-known/mcp/server-card.json and /.well-known/mcp.json, POSTs an MCP initialize to /mcp, and, if the reader names a CLI package, checks the npm registry for it. PASS on any one.

**It cannot prove:** Cannot judge whether the tools are useful or whether OAuth completes; a POST to /mcp is the one non-GET call and is skipped with --get-only.

### The one-line version

curl -s -X POST <origin>/mcp -H "Content-Type: application/json" -H "Accept: application/json, text/event-stream" -d "{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-06-18","capabilities":{},"clientInfo":{"name":"kit","version":"1"}}}" returns a result or a 401 with WWW-Authenticate.

## Verify with Ora

4 checks in Ora's catalogue (contract 1.38.0, read 2026-11-05) read this row. Each entry says what the check looks at and why this page lists it.

-   `mcp-server` MCP server / manifest Looks for a Model Context Protocol server or manifest. Usability, 6 points, required; catalogue applicability all. Listed because: same name, `mcp server`.
-   `mcp-registry-listed` Listed in MCP registries Looks in the official MCP Registry and Smithery for an entry verified against the domain, and for an npm or PyPI package that runs as an MCP server. Discovery, 1 point, recommended; catalogue applicability all. Listed because: same name, `mcp registry`.
-   `mcp-pkce-s256` MCP PKCE S256 support Tests that the MCP server supports PKCE with S256. Usability, 2 points, bonus, recommended; catalogue applicability mcp. Listed because: same name, `pkce`.
-   `mcp-oauth-metadata` MCP OAuth metadata Tests for RFC 8414 OAuth metadata on the MCP server. Usability, 2 points, bonus, recommended; catalogue applicability mcp. Listed because: same name, `oauth`.

### Run just these checks

```bash
curl -s -X POST https://ora.ai/api/scan/checks -H 'content-type: application/json' -d '{"url":"https://example.com","checkIds":["mcp-server","mcp-registry-listed","mcp-pkce-s256","mcp-oauth-metadata"]}'
```

This calls the endpoint Ora documents for re-verifying a fix. It sends no cache, returns a result for each id and no total score, and spends one scan from the daily budget. Replace the URL with yours. [How to re-verify one fix](https://agentreadychecklist.com/guides/re-verify-one-fix-with-ora/).

### Or audit the whole site

```bash
npx ax@0.10 audit https://example.com --min-score 70
```

Exit code 1 means the score is below the number you passed, so the same line gates a deploy: [the CI recipe](https://agentreadychecklist.com/guides/gate-deploys-on-agent-readiness-in-ci/). [Why this site recommends Ora, and where it falls short](https://agentreadychecklist.com/verify-with-ora/).

## In the crawl

This row has one crawl rate. Each panel splits the 2026-11-04 crawl into ten bands of 1,000 ranks, on a 0 to 100 percent scale.

/.well-known/mcp.json serves JSON

0.4% overall

Reachable sites in the Tranco top 10,000 on which the check ran, 2026-11-04. Left is ranks 1 to 1,000.

Numbers behind the chart

| Rate | 1 to 1,000 | 1,001 to 2,000 | 2,001 to 3,000 | 3,001 to 4,000 | 4,001 to 5,000 | 5,001 to 6,000 | 6,001 to 7,000 | 7,001 to 8,000 | 8,001 to 9,000 | 9,001 to 10,000 |
| --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
| /.well-known/mcp.json serves JSON | 1% | 1% | 1% | 0% | 0% | 1% | 0% | 0% | 0% | 0% |

## Fix it on your platform

### Next.js (App Router)recipe

Add a Route Handler at app/mcp/route.ts that exports POST and returns the MCP server over Streamable HTTP (a POST answered with JSON or an event stream). Keep a docs MCP public and gate a product MCP with OAuth and PKCE.

Next.js 16.x (npm latest 16.4.5, read 2026-11-04); docs at nextjs.org/docs/app. Derived from Next.js's documentation read on 2026-11-04. [nextjs.org/docs/app/api-reference/file-conventions/route](https://nextjs.org/docs/app/api-reference/file-conventions/route) and [github.com/agentready-org/standard/blob/main/spec/spec.md](https://github.com/agentready-org/standard/blob/main/spec/spec.md). [All Next.js (App Router) recipes](https://agentreadychecklist.com/platforms/nextjs-app-router/#ar-act-03)

### Astroworkaround

A static Astro build cannot answer a POST or build a response per request, and on-demand endpoints need a server adapter. Add a server adapter and an on-demand endpoint at src/pages/mcp.ts with export const POST and prerender = false, returning the MCP server over Streamable HTTP (a POST answered with JSON or an event stream). Keep a docs MCP public and gate a product MCP with OAuth and PKCE.

Astro 7.x (npm latest astro 7.4.5, @astrojs/sitemap 3.7.4, read 2026-11-04). Derived from Astro's documentation read on 2026-11-04. [docs.astro.build/en/guides/endpoints/](https://docs.astro.build/en/guides/endpoints/) and [github.com/agentready-org/standard/blob/main/spec/spec.md](https://github.com/agentready-org/standard/blob/main/spec/spec.md). [All Astro recipes](https://agentreadychecklist.com/platforms/astro/#ar-act-03)

### Nuxtrecipe

Add a server route at server/routes/mcp.ts with defineEventHandler that returns the MCP server over Streamable HTTP (a POST answered with JSON or an event stream). Keep a docs MCP public and gate a product MCP with OAuth and PKCE.

Nuxt 4.x (npm latest nuxt 4.6.4, @nuxtjs/robots 7.0.2, @nuxtjs/sitemap 9.1.0, read 2026-11-04). Derived from Nuxt's documentation read on 2026-11-04. [nuxt.com/docs/4.x/directory-structure/server](https://nuxt.com/docs/4.x/directory-structure/server) and [github.com/agentready-org/standard/blob/main/spec/spec.md](https://github.com/agentready-org/standard/blob/main/spec/spec.md). [All Nuxt recipes](https://agentreadychecklist.com/platforms/nuxt/#ar-act-03)

### SvelteKitrecipe

Add src/routes/mcp/+server.ts that exports POST and returns the MCP server over Streamable HTTP (a POST answered with JSON or an event stream). Keep a docs MCP public and gate a product MCP with OAuth and PKCE.

SvelteKit (npm latest @sveltejs/kit 3.1.1, read 2026-11-04); docs at svelte.dev/docs/kit. Derived from SvelteKit's documentation read on 2026-11-04. [svelte.dev/docs/kit/routing](https://svelte.dev/docs/kit/routing) and [github.com/agentready-org/standard/blob/main/spec/spec.md](https://github.com/agentready-org/standard/blob/main/spec/spec.md). [All SvelteKit recipes](https://agentreadychecklist.com/platforms/sveltekit/#ar-act-03)

### Remix and React Router (framework mode)recipe

Add a resource route at /mcp with an action that returns the MCP server over Streamable HTTP (a POST answered with JSON or an event stream). Keep a docs MCP public and gate a product MCP with OAuth and PKCE.

React Router framework mode (npm latest react-router 8.5.1; Remix v2 @remix-run/node 2.17.5, read 2026-11-04); docs at reactrouter.com. Derived from Remix and React Router's documentation read on 2026-11-04. [reactrouter.com/how-to/resource-routes](https://reactrouter.com/how-to/resource-routes) and [github.com/agentready-org/standard/blob/main/spec/spec.md](https://github.com/agentready-org/standard/blob/main/spec/spec.md). [All Remix and React Router (framework mode) recipes](https://agentreadychecklist.com/platforms/remix-react-router/#ar-act-03)

### Plain static hosting (Netlify, Vercel static, Cloudflare Pages, GitHub Pages, S3 and CloudFront)workaround

On Cloudflare Pages, code runs through Pages Functions; a host without functions serves files only. Put a function at /mcp that returns the MCP server over Streamable HTTP (a POST answered with JSON or an event stream), or run the handler on a subdomain or API domain you control. Keep a docs MCP public and gate a product MCP with OAuth and PKCE.

Host documentation as published on 2026-11-04 (no version numbers; config files \_headers, \_redirects, vercel.json, 404.html). Derived from Plain static hosting's documentation read on 2026-11-04. [developers.cloudflare.com/pages/functions/](https://developers.cloudflare.com/pages/functions/) and [github.com/agentready-org/standard/blob/main/spec/spec.md](https://github.com/agentready-org/standard/blob/main/spec/spec.md). [All Plain static hosting (Netlify, Vercel static, Cloudflare Pages, GitHub Pages, S3 and CloudFront) recipes](https://agentreadychecklist.com/platforms/static-hosting/#ar-act-03)

### WordPress and Elementorworkaround

WordPress REST routes are registered with register\_rest\_route() and live under /wp-json/. Register the handler with register\_rest\_route() and expose it at /mcp with a web server rewrite, or run it on a subdomain or API domain you control. It returns the MCP server over Streamable HTTP (a POST answered with JSON or an event stream). Keep a docs MCP public and gate a product MCP with OAuth and PKCE.

WordPress 7.1.4 (core release from the version-check API), Elementor 4.3.6 (plugin directory, updated 2026-11-02), Yoast SEO 28.8 noted for llms.txt; docs read 2026-11-04. Derived from WordPress and Elementor's documentation read on 2026-11-04. [developer.wordpress.org/rest-api/extending-the-rest-api/adding-custom-endpoints/](https://developer.wordpress.org/rest-api/extending-the-rest-api/adding-custom-endpoints/) and [github.com/agentready-org/standard/blob/main/spec/spec.md](https://github.com/agentready-org/standard/blob/main/spec/spec.md). [All WordPress and Elementor recipes](https://agentreadychecklist.com/platforms/wordpress-elementor/#ar-act-03)

### Shopify (Online Store 2.0 themes)recipe

Every Shopify store already answers MCP at https://{store-domain}/api/ucp/mcp (the Storefront Catalog MCP server, JSON-RPC over POST), so there is no /mcp route to add on the storefront. Cart and checkout have their own MCP servers, and every request to the store endpoint must carry the URL of your agent's UCP profile. The kit looks at /mcp, so test the store endpoint by hand with a tools/list call.

Hosted SaaS, Online Store 2.0 Liquid themes, docs read 2026-11-04; storefront behaviour probed live on one Shopify store the same day. Derived from Shopify's documentation read on 2026-11-04. [shopify.dev/docs/agents/catalog/storefront-catalog](https://shopify.dev/docs/agents/catalog/storefront-catalog) and [github.com/agentready-org/standard/blob/main/spec/spec.md](https://github.com/agentready-org/standard/blob/main/spec/spec.md). [All Shopify (Online Store 2.0 themes) recipes](https://agentreadychecklist.com/platforms/shopify/#ar-act-03)

### Webflowworkaround

Webflow runs server code through Webflow Cloud, serverless hosting for Next.js or Astro apps connected to a site. Deploy a small Webflow Cloud app (Next.js or Astro) connected to the site and add the handler there, returning the MCP server over Streamable HTTP (a POST answered with JSON or an event stream). Keep a docs MCP public and gate a product MCP with OAuth and PKCE.

Hosted SaaS, help center articles read 2026-11-04 (updated dates 2024-10-14 to 2026-10-29). Derived from Webflow's documentation read on 2026-11-04. [help.webflow.com/hc/en-us/articles/40846212086035-Webflow-Cloud-overview](https://help.webflow.com/hc/en-us/articles/40846212086035-Webflow-Cloud-overview) and [github.com/agentready-org/standard/blob/main/spec/spec.md](https://github.com/agentready-org/standard/blob/main/spec/spec.md). [All Webflow recipes](https://agentreadychecklist.com/platforms/webflow/#ar-act-03)

### Framerworkaround

Framer Static Files hosts uploaded files at a path you choose, and the page describes no request handlers. Not possible on this platform without outside help. Workaround: run the MCP server on a subdomain or API domain you control, returning the MCP server over Streamable HTTP (a POST answered with JSON or an event stream), and link it from the site. Keep a docs MCP public and gate a product MCP with OAuth and PKCE.

Hosted SaaS, help articles read 2026-11-04 (marked updated 2026-09-15). Derived from Framer's documentation read on 2026-11-04. [framer.com/help/articles/static-files/](https://www.framer.com/help/articles/static-files/) and [github.com/agentready-org/standard/blob/main/spec/spec.md](https://github.com/agentready-org/standard/blob/main/spec/spec.md). [All Framer recipes](https://agentreadychecklist.com/platforms/framer/#ar-act-03)

### Wix (Wix Editor and Wix Studio)workaround

Wix sites run request handlers through Velo HTTP functions, which the cited page describes as an API a site exposes, and not as serving /mcp, /ask or /.well-known paths. Workaround: expose the MCP server as a Velo HTTP function (backend/http-functions.js exports get\_ and post\_ functions), or run it on a subdomain or API domain you control, and advertise its address from llms.txt, because the function is not served at /mcp. It returns the MCP server over Streamable HTTP (a POST answered with JSON or an event stream). Keep a docs MCP public and gate a product MCP with OAuth and PKCE.

Hosted SaaS, help center read 2026-11-04. Derived from Wix's documentation read on 2026-11-04. [dev.wix.com/docs/velo/articles/getting-started/expose-an-api](https://dev.wix.com/docs/velo/articles/getting-started/expose-an-api) and [github.com/agentready-org/standard/blob/main/spec/spec.md](https://github.com/agentready-org/standard/blob/main/spec/spec.md). [All Wix (Wix Editor and Wix Studio) recipes](https://agentreadychecklist.com/platforms/wix/#ar-act-03)

### Squarespace (version 7.1)workaround

Squarespace's developer documentation covers the Commerce APIs and the Custom Code Specification, and describes no way to run a request handler on a site. Squarespace documents its own MCP server at developers.squarespace.com/mcp, served at mcp.squarespace.com/mcp, which connects a Squarespace customer's AI assistant to the domains they manage and their site. It is not an MCP server of the storefront, so a visitor's agent cannot use it, and it does not meet AR-ACT-03. Not possible on this platform without outside help. Workaround: run the MCP server on a subdomain or API domain you control, returning the MCP server over Streamable HTTP (a POST answered with JSON or an event stream), and link it from the site. Keep a docs MCP public and gate a product MCP with OAuth and PKCE.

Hosted SaaS, version 7.1 sites, help center read 2026-11-04 (articles updated 2026-07-17 to 2026-11-03). Derived from Squarespace's documentation read on 2026-11-04. [developers.squarespace.com/mcp](https://developers.squarespace.com/mcp) and [github.com/agentready-org/standard/blob/main/spec/spec.md](https://github.com/agentready-org/standard/blob/main/spec/spec.md). [All Squarespace (version 7.1) recipes](https://agentreadychecklist.com/platforms/squarespace/#ar-act-03)

### HubSpot CMS (Content Hub)workaround

HubSpot builds new serverless functions with developer projects, where each function's configuration file sets its own endpoint path and methods, and the cited page describes functions for CMS websites without serving /mcp, /ask or /.well-known; design manager functions are served from /\_hcms/api/ and are being sunset. Workaround: build the MCP server as a HubSpot project function, which gets its own endpoint path and methods, or run it on a subdomain or API domain you control, and advertise its address from llms.txt, because the function is not served at /mcp. It returns the MCP server over Streamable HTTP (a POST answered with JSON or an event stream). Keep a docs MCP public and gate a product MCP with OAuth and PKCE.

Hosted SaaS, Content Hub, knowledge base and developer docs read 2026-11-04. Derived from HubSpot CMS's documentation read on 2026-11-04. [developers.hubspot.com/docs/cms/start-building/features/serverless-functions/overview](https://developers.hubspot.com/docs/cms/start-building/features/serverless-functions/overview) and [github.com/agentready-org/standard/blob/main/spec/spec.md](https://github.com/agentready-org/standard/blob/main/spec/spec.md). [All HubSpot CMS (Content Hub) recipes](https://agentreadychecklist.com/platforms/hubspot-cms/#ar-act-03)

### Docusaurusworkaround

Docusaurus is a static site generator and ships no MCP server. Workaround: run an MCP server elsewhere (for example a Cloudflare Worker at /mcp behind the same domain) and link it from the docs.

3.10.2 (npm @docusaurus/core latest, read 2026-11-04). Read 2026-11-04. [docusaurus.io/docs/deployment](https://docusaurus.io/docs/deployment). [All Docusaurus recipes](https://agentreadychecklist.com/platforms/docusaurus/#ar-act-03)

### Mintlifyrecipe

Automatic search MCP server at <docs-url>/mcp (authed sites: /authed/mcp), with discovery at /.well-known/mcp and /.well-known/mcp.json and a server card at /.well-known/mcp/server-card.json.

Hosted SaaS, docs read 2026-11-04. Read 2026-11-04. [mintlify.com/docs/ai/model-context-protocol](https://mintlify.com/docs/ai/model-context-protocol). [All Mintlify recipes](https://agentreadychecklist.com/platforms/mintlify/#ar-act-03)

### GitBookrecipe

Automatic MCP server at <site>/~gitbook/mcp (partially authenticated sites: /~gitbook/mcp/auth). Keep Page actions enabled, or the endpoint returns 404.

Hosted SaaS, docs read 2026-11-04. Read 2026-11-04. [gitbook.com/docs/ai-for-your-readers/mcp-servers-for-published-docs](https://gitbook.com/docs/ai-for-your-readers/mcp-servers-for-published-docs). [All GitBook recipes](https://agentreadychecklist.com/platforms/gitbook/#ar-act-03)

### ReadMerecipe

AI > MCP: toggle MCP Server on; share https://your-project.readme.io/mcp. Tools: list-endpoints, get-endpoint, search-endpoints, execute-request, search, fetch.

Hosted SaaS, docs read 2026-11-04. Read 2026-11-04. [docs.readme.com/main/docs/mcp](https://docs.readme.com/main/docs/mcp). [All ReadMe recipes](https://agentreadychecklist.com/platforms/readme/#ar-act-03)

### Salesforce B2C Commerce (SFRA and PWA Kit / Composable Storefront)workaround

PWA Kit adds routes in ssr.js with app.get. Add a route for /mcp in ssr.js that returns the MCP server over Streamable HTTP (a POST answered with JSON or an event stream), or run it as a separate service on a subdomain or API domain you control. Keep a docs MCP public and gate a product MCP with OAuth and PKCE.

Hosted SaaS (B2C Commerce help release 264.0.0); PWA Kit retail-react-app 10.3.0 and pwa-kit-runtime 3.21.0 on npm, read 2026-11-04. Derived from Salesforce B2C Commerce's documentation read on 2026-11-04. [developer.salesforce.com/docs/commerce/pwa-kit-managed-runtime/guide/create-a-sitemap.html](https://developer.salesforce.com/docs/commerce/pwa-kit-managed-runtime/guide/create-a-sitemap.html) and [github.com/agentready-org/standard/blob/main/spec/spec.md](https://github.com/agentready-org/standard/blob/main/spec/spec.md). [All Salesforce B2C Commerce (SFRA and PWA Kit / Composable Storefront) recipes](https://agentreadychecklist.com/platforms/salesforce-commerce-cloud/#ar-act-03)

### Adobe Commerce and Magento Open Sourceworkaround

No MCP server in core 2.4.9. Workaround: build one on the REST or GraphQL API and host it at /mcp on a separate service.

2.4.9 (GitHub tag published 2026-05-12; 2.4.10-alpha1 tagged 2026-10-13); release notes read 2026-11-04. Read 2026-11-04. [experienceleague.adobe.com/en/docs/commerce-operations/release/notes/magento-open-source/2-4-9](https://experienceleague.adobe.com/en/docs/commerce-operations/release/notes/magento-open-source/2-4-9). [All Adobe Commerce and Magento Open Source recipes](https://agentreadychecklist.com/platforms/adobe-commerce/#ar-act-03)

## What it does not do

-   An MCP endpoint that lists no useful tools does not meet the intent.
-   Does not replace docs: agents still read docs before calling tools.

## Common mistakes

-   Server only reachable over stdio from a local install.
-   Tools that mirror every API endpoint with no task framing.

## Related

-   Guide: [How to add OAuth metadata](https://agentreadychecklist.com/guides/add-oauth-metadata/)
-   Term: [PKCE](https://agentreadychecklist.com/glossary/pkce/)
-   Term: [MCP server](https://agentreadychecklist.com/glossary/mcp-server/)
-   Term: [Streamable HTTP](https://agentreadychecklist.com/glossary/streamable-http/)

## Sources

-   [github.com/agentready-org/standard/blob/main/spec/spec.md](https://github.com/agentready-org/standard/blob/main/spec/spec.md)read 2026-11-04
-   [vercel.com/kb/guide/make-your-site-readable-by-ai-agents](https://vercel.com/kb/guide/make-your-site-readable-by-ai-agents)read 2026-11-04
-   [modelcontextprotocol.io/specification/2025-06-18/basic/authorization](https://modelcontextprotocol.io/specification/2025-06-18/basic/authorization)read 2026-11-04
-   [nextjs.org/docs/app/api-reference/file-conventions/route](https://nextjs.org/docs/app/api-reference/file-conventions/route)read 2026-11-04
-   [docs.astro.build/en/guides/endpoints/](https://docs.astro.build/en/guides/endpoints/)read 2026-11-04
-   [nuxt.com/docs/4.x/directory-structure/server](https://nuxt.com/docs/4.x/directory-structure/server)read 2026-11-04
-   [svelte.dev/docs/kit/routing](https://svelte.dev/docs/kit/routing)read 2026-11-04
-   [reactrouter.com/how-to/resource-routes](https://reactrouter.com/how-to/resource-routes)read 2026-11-04
-   [developers.cloudflare.com/pages/functions/](https://developers.cloudflare.com/pages/functions/)read 2026-11-04
-   [developer.wordpress.org/rest-api/extending-the-rest-api/adding-custom-endpoints/](https://developer.wordpress.org/rest-api/extending-the-rest-api/adding-custom-endpoints/)read 2026-11-04
-   [shopify.dev/docs/agents/catalog/storefront-catalog](https://shopify.dev/docs/agents/catalog/storefront-catalog)read 2026-11-04
-   [help.webflow.com/hc/en-us/articles/40846212086035-Webflow-Cloud-overview](https://help.webflow.com/hc/en-us/articles/40846212086035-Webflow-Cloud-overview)read 2026-11-04
-   [framer.com/help/articles/static-files/](https://www.framer.com/help/articles/static-files/)read 2026-11-04
-   [dev.wix.com/docs/velo/articles/getting-started/expose-an-api](https://dev.wix.com/docs/velo/articles/getting-started/expose-an-api)read 2026-11-04
-   [developers.squarespace.com/mcp](https://developers.squarespace.com/mcp)read 2026-11-04
-   [developers.hubspot.com/docs/cms/start-building/features/serverless-functions/overview](https://developers.hubspot.com/docs/cms/start-building/features/serverless-functions/overview)read 2026-11-04
-   [docusaurus.io/docs/deployment](https://docusaurus.io/docs/deployment)read 2026-11-04
-   [mintlify.com/docs/ai/model-context-protocol](https://mintlify.com/docs/ai/model-context-protocol)read 2026-11-04
-   [gitbook.com/docs/ai-for-your-readers/mcp-servers-for-published-docs](https://gitbook.com/docs/ai-for-your-readers/mcp-servers-for-published-docs)read 2026-11-04
-   [docs.readme.com/main/docs/mcp](https://docs.readme.com/main/docs/mcp)read 2026-11-04
-   [developer.salesforce.com/docs/commerce/pwa-kit-managed-runtime/guide/create-a-sitemap.html](https://developer.salesforce.com/docs/commerce/pwa-kit-managed-runtime/guide/create-a-sitemap.html)read 2026-11-04
-   [experienceleague.adobe.com/en/docs/commerce-operations/release/notes/magento-open-source/2-4-9](https://experienceleague.adobe.com/en/docs/commerce-operations/release/notes/magento-open-source/2-4-9)read 2026-11-04
-   [modelcontextprotocol.io](https://modelcontextprotocol.io/)read 2026-11-04
-   [ora.ai/api/checks, contract 1.38.0](https://ora.ai/api/checks?utm_source=agentreadychecklist.com&utm_medium=referral&utm_campaign=requirement)read 2026-11-05
-   [ora.ai/llms-full.txt](https://ora.ai/llms-full.txt?utm_source=agentreadychecklist.com&utm_medium=referral&utm_campaign=requirement)read 2026-11-05
-   [registry.npmjs.org/ax, the ax README](https://registry.npmjs.org/ax)read 2026-11-05

Verify with Ora

The scanner this site recommends for the whole checklist. 132 checks, a score out of 100, no account.

`npx ax@0.10 audit <url> --min-score <n>`

[Why Ora, and its limits](https://agentreadychecklist.com/verify-with-ora/)

Fix it on

-   [Next.js (App Router)recipe](#p-nextjs-app-router)
-   [Astroworkaround](#p-astro)
-   [Nuxtrecipe](#p-nuxt)
-   [SvelteKitrecipe](#p-sveltekit)
-   [Remix and React Router (framework mode)recipe](#p-remix-react-router)
-   [Plain static hosting (Netlify, Vercel static, Cloudflare Pages, GitHub Pages, S3 and CloudFront)workaround](#p-static-hosting)
-   [WordPress and Elementorworkaround](#p-wordpress-elementor)
-   [Shopify (Online Store 2.0 themes)recipe](#p-shopify)
-   [Webflowworkaround](#p-webflow)
-   [Framerworkaround](#p-framer)
-   [Wix (Wix Editor and Wix Studio)workaround](#p-wix)
-   [Squarespace (version 7.1)workaround](#p-squarespace)
-   [HubSpot CMS (Content Hub)workaround](#p-hubspot-cms)
-   [Docusaurusworkaround](#p-docusaurus)
-   [Mintlifyrecipe](#p-mintlify)
-   [GitBookrecipe](#p-gitbook)
-   [ReadMerecipe](#p-readme)
-   [Salesforce B2C Commerce (SFRA and PWA Kit / Composable Storefront)workaround](#p-salesforce-commerce-cloud)
-   [Adobe Commerce and Magento Open Sourceworkaround](#p-adobe-commerce)

Last reviewed 2026-11-05. AgentReady v2.0, read 2026-11-04.
