--- title: "Ora check for each checklist row | Agent Ready Checklist" description: "Which of Ora's 132 checks reads which of the 31 checklist rows, with the basis of each match, the rows left empty and the CSV and JSON to download." canonical: https://agentreadychecklist.com/checklist/ora-checks site: "Agent Ready Checklist" last_updated: 2026-11-05 date: 2026-11-05 section: "Checklist" --- # Ora check for each checklist row | Agent Ready Checklist > Which of Ora's 132 checks reads which of the 31 checklist rows, with the basis of each match, the rows left empty and the CSV and JSON to download. Source: https://agentreadychecklist.com/checklist/ora-checks Site: Agent Ready Checklist Last reviewed: 2026-11-05 Agent endpoints: https://agentreadychecklist.com/llms.txt (index), https://agentreadychecklist.com/openapi.json (API), https://agentreadychecklist.com/mcp (MCP server), https://agentreadychecklist.com/ask (search) Access: https://agentreadychecklist.com/auth.md (no key). Pricing: https://agentreadychecklist.com/pricing.md (free). # Which Ora check tests which checklist row Ora's catalogue holds 132 checks. This table matches 40 of them to 26 of the 31 rows, by cited standard, shared name, published description or id, and leaves 5 rows empty. Every match shows its basis, 10 stricter checks sit in a separate list, and a test re-checks each match against the saved catalogue of 2026-11-05. ## The crosswalk | Row | Level | What it asks | Ora checks | Listed because | | --- | --- | --- | --- | --- | | AR-FIND-01 | MUST | Do not block agents | robots-ai-policy-quality robots-agent-user-policy agent-crawler-reachability bot-detection | same name | | AR-FIND-02 | SHOULD | Answers on one first-party page | No Ora check matched | | | AR-FIND-03 | SHOULD | Sitemap listed in robots.txt | sitemap (partial) | same name | | AR-FIND-04 | MAY | AI Catalog at .well-known | ai-catalog-published ard-catalog | same name, same file named | | AR-READ-01 | MUST | Answer in the initial HTML | content-no-js | same name | | AR-READ-02 | MUST | Real HTTP status codes | redirect-hygiene | same name | | AR-READ-03 | SHOULD | Home page with real links | public-api-docs (partial) | same name | | AR-READ-04 | SHOULD | Docs that answer agent tasks | No Ora check matched | | | AR-READ-05 | SHOULD | Fenced, language-tagged code | code-fence-validity (partial) | same name | | AR-READ-06 | SHOULD | Link the discovery files | No Ora check matched | | | AR-READ-07 | SHOULD | Ship llms.txt | llms-txt-exists llms-txt-formatting llms-txt-links-resolve | same name, cited standard | | AR-READ-08 | SHOULD | JSON-LD on key pages | json-ld | same name | | AR-READ-09 | MAY | Advertise a markdown mirror | markdown-link-alternate | same name | | AR-READ-11 | SHOULD | Pricing as first-party HTML | pricing-info | same name | | AR-ACT-01 | SHOULD | Auth an agent can finish | oauth-support scoped-permissions | same name | | AR-ACT-02 | SHOULD | OpenAPI contract | openapi-spec | same name | | AR-ACT-03 | SHOULD | MCP over Streamable HTTP | mcp-server mcp-registry-listed mcp-pkce-s256 mcp-oauth-metadata | same name | | AR-ACT-04 | MAY | MCP server card | mcp-server-card | same name | | AR-ACT-05 | MAY | MCP Apps view | mcp-app-registry | same name | | AR-ACT-06 | SHOULD | SDKs and a CLI | cli-tool rest-sdk-packages npm-sdk-package | same name | | AR-ACT-07 | SHOULD | WebMCP tools | webmcp | same name | | AR-ACT-08 | MAY | Agent payments | x402-support mpp-support ucp-support acp-support acp-delegate-payment | same name | | AR-ACT-09 | MAY | NLWeb /ask endpoint | nlweb-ask | same name | | AR-ACT-10 | MUST | An MCP server or a CLI | mcp-server cli-tool | same name | | CF-CONTENT-SIGNALS | CLOUDFLARE | Content-Signal line | No Ora check matched | | | CF-MARKDOWN-NEGOTIATION | CLOUDFLARE | Markdown by Accept | markdown-negotiation-vary markdown-negotiation | same name, same id | | CF-PAY-PER-CRAWL | CLOUDFLARE | Pay per crawl, HTTP 402 | No Ora check matched | | | CF-OAUTH-DISCOVERY | CLOUDFLARE | OAuth discovery files | oauth-protected-resource | same name | | CF-AGENT-SKILLS | CLOUDFLARE | Agent Skills index | agent-skills-index-v2 | same name | | VERCEL-NEGOTIATION-HEADERS | VERCEL | Markdown headers | markdown-negotiation-vary | same file named | | VERCEL-ROBOTS-EXCLUSIONS | VERCEL | Robots exclusions | robots-ai-policy-quality robots-agent-user-policy | same name | ## How a match is made A check is listed against a row only when one of four things is true. Nothing is matched on topic alone, and a row with no entry has no check in the catalogue that meets one of them. A test re-reads every entry against the saved catalogue and the row's statement, how-to-verify line, evidence and id, and fails the build if one stops holding. The row's does-not-do list, its common mistakes and its scanner labels are never read for a match, because they say what the row is not. cited standard The check's specUrl in the catalogue is a URL the row cites. 1 entry uses it. same name The check's name and the row's statement, how-to-verify line or evidence use the same term for the same artefact. 41 entries use it. same file named The check's published description names the same file or header the row's statement or evidence names. 2 entries use it. same id The check's id is the row's own name. 1 entry uses it. Some listed checks read only part of a row. They are marked partial in the table and say which part on the row's page. A check that tests more than the row asks, so that a site meeting the row scores nothing or less than full points on it, is not listed as a test of the row. It goes in the related list below and is left out of the counts, the table column and the run-just-these command. The catalogue is the response of GET https://ora.ai/api/checks on 2026-11-05, saved unchanged with its date. The AgentReady spec says its requirements carry no weights and that scoring, per-check breakdowns and the leaderboard ["belong to the ora scanner and its public methodology"](https://github.com/agentready-org/standard/blob/main/spec/spec.md#non-goals) (spec.md, Non-goals), and it has no per-row scanner field. The match is this site's own reading: it counts 21 of the 24 AgentReady rows as backed by a named check, and 5 of the 7 Cloudflare and Vercel rows. [Why this site recommends Ora](https://agentreadychecklist.com/verify-with-ora/). ## Rows with no Ora check - [AR-FIND-02](https://agentreadychecklist.com/checklist/ar-find-02/)Answers on one first-party page. The catalogue names no check that meets the rule above. - [AR-READ-04](https://agentreadychecklist.com/checklist/ar-read-04/)Docs that answer agent tasks. The catalogue names no check that meets the rule above. - [AR-READ-06](https://agentreadychecklist.com/checklist/ar-read-06/)Link the discovery files. The catalogue names no check that meets the rule above. - [CF-CONTENT-SIGNALS](https://agentreadychecklist.com/checklist/cf-content-signals/)Content-Signal line. The catalogue names no check that meets the rule above. - [CF-PAY-PER-CRAWL](https://agentreadychecklist.com/checklist/cf-pay-per-crawl/)Pay per crawl, HTTP 402. The catalogue names no check that meets the rule above. ## Related, stricter checks 10 checks read something near a row but ask for more than the row does. A site that meets the row can score nothing or lose points on them, so they are not counted as tests of it. Each row page lists its own under "Related checks". - [AR-FIND-03](https://agentreadychecklist.com/checklist/ar-find-03/) `sitemap-lastmod` Sitemap freshness (lastmod)Reads whether the lastmod dates in the sitemap parse and whether the newest is recent. The row asks for a sitemap and a Sitemap line in robots.txt, not for fresh dates, so a site that meets the row scores nothing here.Access, 1 point, bonus, recommended. - [AR-READ-02](https://agentreadychecklist.com/checklist/ar-read-02/) `agent-friendly-404` Agent-friendly 404sA real 404 or 410 status earns partial credit; full credit also needs a Markdown error body that says what happened and where to go next. The row asks for the real status, not the body, so a site that meets the row stops short of full points here.Usability, 2 points, recommended. - [AR-READ-07](https://agentreadychecklist.com/checklist/ar-read-07/) `modular-llms-txt` Modular llms.txt per product areaLooks for per-section llms.txt files such as /docs/llms.txt. The row asks for one llms.txt, so a site with a single root file meets the row and scores nothing here.Access, 1 point, bonus, emerging. - [AR-READ-08](https://agentreadychecklist.com/checklist/ar-read-08/) `json-ld-entity-linking` JSON-LD entity linking (sameAs)Looks for sameAs links from the structured data to official profiles such as GitHub, LinkedIn and app stores. The row asks for JSON-LD on key pages and the facts repeated in text, not for those links, so a site that meets the row can lose points here.Access, 2 points, recommended. - [AR-READ-09](https://agentreadychecklist.com/checklist/ar-read-09/) `link-headers-discovery` HTTP Link headers (RFC 8288)Reads HTTP Link headers that advertise the sitemap, markdown alternates, API service descriptions and the API catalog. The row accepts a Link header as one way to advertise the markdown mirror and asks for no more, so a site that meets the row scores nothing here.Access, 1 point, bonus, required. - [AR-ACT-02](https://agentreadychecklist.com/checklist/ar-act-02/) `api-catalog-rfc9727` API catalog (RFC 9727)Looks for an API catalog at /.well-known/api-catalog (RFC 9727). That is a separate file from the OpenAPI contract the row asks for, so a site that meets the row can score nothing here.Access, 2 points, bonus, required. - [AR-ACT-05](https://agentreadychecklist.com/checklist/ar-act-05/) `mcp-view-domain` MCP App view reachableTests that the view an MCP App points at loads publicly and serves HTML without an auth wall. The row asks that a view exists, not that it is public, so a site that meets the row can lose points here.Usability, 4 points, recommended. - [AR-ACT-05](https://agentreadychecklist.com/checklist/ar-act-05/) `mcp-view-csp` MCP App view CSPTests that the Content Security Policy declared for the view names specific origins or is left out. The row asks for a view, not for a policy, so a site that meets the row can lose points here.Usability, 4 points, recommended. - [AR-ACT-05](https://agentreadychecklist.com/checklist/ar-act-05/) `mcp-apps-ui-quality` MCP Apps UI qualityTests the MIME type, HTML validity, dark mode support and the absence of hardcoded secrets in the view. A bonus check that reads the quality of a view, which the row does not ask for.Usability, 4 points, bonus, recommended. - [AR-ACT-09](https://agentreadychecklist.com/checklist/ar-act-09/) `nlweb-streaming` NLWeb streaming supportTests that the /ask endpoint streams results as they are found. The row asks for an /ask endpoint, not for streaming, so a site that meets the row can score nothing here. Ora marks it emerging.Usability, 1 point, emerging. ## What the catalogue holds All 132 checks of contract 1.38.0. Tier is a display label Ora says never changes the score; maturity decides whether a check counts. Numbers behind the chart | Ora layer | Required | Recommended | Emerging | Checks | | --- | --- | --- | --- | --- | | Discovery | 3 | 10 | 3 | 16 | | Access | 15 | 14 | 13 | 42 | | Usability | 7 | 51 | 10 | 68 | | Payments | 4 | 2 | 0 | 6 | ### Checks no row names 92 checks are not matched to a row. That means this site claims nothing about them. Many cover areas the checklist does not, such as accessibility-tree structure, GraphQL and REST API behaviour, and the newer authentication drafts. Discovery: 11 of 16 not matched | Check id | Name | Points | Tier | | --- | --- | --- | --- | | ard-entries-valid | ARD entry validity | 2, bonus | recommended | | ard-trust-manifest | ARD trust manifest | 2, bonus | recommended | | agentic-search-usecase | Category share of voice | 6 | recommended | | agentic-search-specific | Developer resource discoverability | 3 | recommended | | brand-search-accuracy | Brand name discoverability | 3 | required | | wikipedia-presence | Wikipedia / Wikidata entity presence | 4, bonus | recommended | | agent-rules-repo | Agent platform configs | 1 | emerging | | agent-plugins-repo | Agent Plugins manifest | 1, bonus | emerging | | registry-branding | Registry branding | 2 | emerging | | chatgpt-app-listed | ChatGPT app listed | 2, bonus | recommended | | noindex-directives | Homepage not hidden from search | 1 | recommended | Access: 19 of 42 not matched | Check id | Name | Points | Tier | | --- | --- | --- | --- | | agent-discovery-file | Agent discovery file | 2 | required | | a2a-agent-card | A2A / agent-card | 2, bonus | recommended | | skills-sh-listed | Listed on skills.sh | 1 | emerging | | pricing-md | pricing.md exists | 2 | emerging | | nlweb-schema-feeds | NLWeb Schema Feeds | 1 | emerging | | mcp-well-known-discovery | MCP well-known discovery | 2, bonus | recommended | | agent-mode-view | Agent mode view | 2, bonus | emerging | | markdown-url-fallback | Markdown URL fallback | 2, bonus | emerging | | agent-instruction | Agent instruction / when-to-use | 3 | required | | skills-sh-quality | Skills.sh skill quality | 2 | emerging | | metadata-completeness | Metadata completeness | 2 | required | | org-schema-completeness | Organization schema completeness | 2 | recommended | | schema-type-breadth | Schema type breadth | 2 | recommended | | trust-anchors | Trust anchor pages | 2 | required | | markdown-frontmatter | Markdown frontmatter metadata | 1 | emerging | | page-token-budget | Page token budget | 1 | recommended | | docs-auth-gate | Content behind auth | 2 | recommended | | developer-portal | Developer portal | 6 | recommended | | agent-ua-markdown | Bot-UA markdown serving | 1, bonus | emerging | Usability: 51 of 68 not matched | Check id | Name | Points | Tier | | --- | --- | --- | --- | | mcp-tool-descriptions | MCP tool descriptions | 3, bonus | recommended | | mcp-param-schemas | MCP parameter schemas | 2, bonus | recommended | | mcp-server-identity | MCP server identity | 1, bonus | recommended | | mcp-tool-listing | MCP tool listing | 3, bonus | recommended | | mcp-tool-naming | MCP tool naming | 2, bonus | recommended | | public-api | Public API with reachable endpoints | 7 | required | | mcp-auth-mechanism | MCP auth mechanism | 2, bonus | recommended | | onboarding-friction | Agent onboarding friction | 2 | recommended | | web-bot-auth-directory | Web Bot Auth directory | 2, bonus | emerging | | auth-md-exists | auth.md exists | 2, bonus | required | | auth-md-structure | auth.md structure | 2, bonus | recommended | | auth-md-walkthrough-simulation | auth.md walkthrough simulation | 2, bonus | recommended | | agent-auth-discovery-metadata | Agent auth discovery metadata | 3, bonus | recommended | | agent-auth-www-authenticate | Agent auth WWW-Authenticate hint | 1, bonus | recommended | | agent-auth-endpoints-reachable | agent_auth endpoints reachable | 2, bonus | recommended | | pap-discovery | Personal Agent Protocol discovery file | 2, bonus | emerging | | pap-issuer-binding | PAP issuer binding | 2, bonus | emerging | | pap-auth-config | PAP sign-in and extension config | 2, bonus | emerging | | pap-interfaces | PAP API and agent entries | 2, bonus | emerging | | pap-endpoint-enforcement | PAP endpoints reject unauthenticated agents | 2, bonus | emerging | | pap-cross-protocol | PAP agrees with ARD and auth.md | 2, bonus | emerging | | mcp-error-handling | MCP error handling | 2, bonus | recommended | | mcp-transport-modern | MCP modern transport | 1, bonus | recommended | | rate-limit-headers | Rate limit response headers | 2 | recommended | | idempotency-key-support | Idempotency-Key support | 3 | recommended | | json-error-responses | JSON error responses | 4 | required | | api-error-model | REST typed error model | 3 | recommended | | api-versioning-policy | REST versioning / deprecation policy | 3 | recommended | | pagination-shape | REST pagination pattern | 2 | recommended | | async-job-pattern | REST async-job pattern | 2 | recommended | | response-schema-coverage | REST response schema coverage | 2 | recommended | | mcp-tool-annotations | MCP tool annotations | 2, bonus | recommended | | mcp-multi-surface-coverage | Product + docs MCP coverage | 2, bonus | recommended | | sandbox-environment | Sandbox / test environment | 2, bonus | recommended | | batch-endpoints | REST batch / bulk endpoint | 2, bonus | recommended | | mcp-resource-listing | MCP resources exposed | 3 | recommended | | graphql-error-type-definition | GraphQL typed error model | 3 | recommended | | graphql-versioning-policy | GraphQL versioning / deprecation policy | 2 | recommended | | graphql-pagination-pattern | GraphQL pagination pattern | 2 | recommended | | graphql-async-job-pattern | GraphQL async-job pattern | 2 | recommended | | graphql-schema-completeness | GraphQL schema description coverage | 3, bonus | recommended | | graphql-batch-mutations | GraphQL batch mutations | 2, bonus | recommended | | ax-document-structure | Accessible document structure | 3, bonus | recommended | | ax-native-controls | Native interactive controls | 3, bonus | recommended | | ax-accessible-names | Accessible names on controls | 2, bonus | recommended | | ax-form-labeling | Form control labeling | 2, bonus | recommended | | ax-tree-injection-safe | Accessibility-tree injection safety (bonus) | 2, bonus | recommended | | a2ui-support | A2UI / generative UI support | 2 | emerging | | api-schema-analysis | API schema complexity analysis | 2 | recommended | | function-calling-compat | Function calling compatibility | 2 | recommended | | mcp-resource-quality | MCP resource quality | 3 | recommended | Payments: 1 of 6 not matched | Check id | Name | Points | Tier | | --- | --- | --- | --- | | ap2-support | AP2 - Agent Payments Protocol | 3, bonus | recommended | ## Download - [ora-crosswalk-2026-11-05.csv](https://agentreadychecklist.com/data/ora-crosswalk-2026-11-05.csv)One line per row and check, with the relation (tests, related or none), the basis, the matched term and any partial note. Comma-separated, UTF-8. - [ora-crosswalk-2026-11-05.json](https://agentreadychecklist.com/data/ora-crosswalk-2026-11-05.json)The same table with the related checks and the catalogue's contract version and fetch time. The matching is licensed [CC BY 4.0](https://creativecommons.org/licenses/by/4.0/). The check ids, names and layers are Ora's, taken from its public catalogue. Cite it as: ```text Agent Ready Checklist, "Ora check for each checklist row", edition 2026-11-05, https://agentreadychecklist.com/checklist/ora-checks/ ``` ## Sources - [ora.ai/api/checks, contract 1.38.0](https://ora.ai/api/checks?utm_source=agentreadychecklist.com&utm_medium=referral&utm_campaign=crosswalk)read 2026-11-05 - [github.com/agentready-org/standard, spec/spec.md](https://github.com/agentready-org/standard/blob/main/spec/spec.md)read 2026-11-04 - [llmstxt.org](https://llmstxt.org/)read 2026-11-04 - [sitemaps.org/protocol.html](https://www.sitemaps.org/protocol.html)read 2026-11-04 Edition Data 2026-11-04 Reviewed 2026-11-05 Spec AgentReady v2.0, 273d2d7 Crawl 13,071 rows, 2026-11-04 Ora 132 checks, contract 1.38.0, 2026-11-05 Verify with Ora The scanner this site recommends for the whole checklist. 132 checks, a score out of 100, no account. `npx ax@0.10 audit --min-score ` [Why Ora, and its limits](https://agentreadychecklist.com/verify-with-ora/) Method - [How rows, commands and rates are made](https://agentreadychecklist.com/method/) - [How an Ora check is matched to a row](https://agentreadychecklist.com/checklist/ora-checks/) - [Pass rates by rank band](https://agentreadychecklist.com/data/by-rank/) Sources and read dates sit at the foot of the page. Last reviewed 2026-11-05. AgentReady v2.0, read 2026-11-04.