sbox.ac

Expose OAuth/OIDC discovery metadata so agents can authenticate against your APIs programmatically.

OAuth or OIDC discovery metadata is missing or incomplete

If your site has protected APIs, publish /.well-known/openid-configuration (for OpenID Connect) or /.well-known/oauth-authorization-server (for OAuth 2.0) with `issuer`, `authorization_endpoint`, `token_endpoint`, `jwks_uri`, and `grant_types_supported`. This lets agents discover how to authenticate without parsing your docs.

Set robots.txt rules for AI search, user-triggered browsing, and training crawlers that match your content policy.

AI search/user crawlers are allowed, while one or more training/data-use crawlers are blocked as a policy choice

Add explicit User-agent entries for AI crawlers — GPTBot, OAI-SearchBot, ClaudeBot, Claude-Web, Google-Extended, PerplexityBot, CCBot — with Allow/Disallow rules that reflect your policy. Decide per-bot whether you want training access, search indexing, or both, and document the choice in source so it doesn't silently drift in future edits.

Internal links use descriptive anchor text and form a reachable graph so crawlers, readers, and AI agents can navigate context.

1 link crawlability or anchor-text warning(s) were detected.

Use real `<a href="...">` elements for navigation — never `<div onclick>` or button-styled spans, which crawlers can't follow. Write descriptive anchor text that summarizes the destination (avoid "click here", "read more", or naked URLs). Keep important pages within ~3 clicks of the homepage so crawl depth doesn't starve them.

• sbox.ac

Each indexable page carries enough unique, substantive content to merit indexing on its own without overlapping siblings.

0 page(s) are under 100 words; 1 page(s) are between 100 and 300 words; 0 duplicate-content fingerprint group(s) were detected.

Audit indexable pages for substantive, unique content — at minimum a few hundred words of original copy that delivers on the title and description. Consolidate near-duplicate pages with canonical tags or merge them into a single richer page. Don't ship placeholder "Coming soon" pages to production indexable URLs.

• sbox.ac

No article-like content pages requiring external citations were detected in the sample.

Add outbound citations only where the page makes claims that benefit from primary sources, standards, or official documentation.

No visible FAQ-style questions or FAQPage JSON-LD were detected.

Add visible question-and-answer sections only where they genuinely help users make a decision or complete a task.

Pages declare language and region alternates with hreflang annotations when content varies by locale, so search engines route the right version to the right reader.

No hreflang annotations were detected in the sampled pages.

On each localized page, add `<link rel="alternate" hreflang="...">` tags pointing to every language/region variant (including a self-reference). Use valid IANA language-region codes (e.g. `en-US`, `fr-FR`), absolute `href` URLs, and one `hreflang="x-default"` entry pointing to the version for unspecified locales. Each variant must reciprocally link back.

Lightweight server and document metrics from the sampled homepage are captured every scan so drift in HTML size, server stack, or DOM complexity is observable across reports.

Captured lightweight server and document metrics from the sampled homepage.

No Cloudflare Challenge Page marker was detected on the homepage response.

No DNSSEC DS or DNSKEY records were detected for the DNS zone.

Domain registration data is temporarily unavailable.

Cloudflare reported cache status DYNAMIC.

Support x402-style HTTP 402 payment flows so agents can pay for API access machine-to-machine.

No x402 discovery markers were detected

Add x402 payment middleware to your API routes so AI agents can pay for access via HTTP. Use `@x402/express`, `@x402/hono`, or `@x402/next` middleware with a facilitator URL and wallet address. Protected routes will return HTTP 402 with payment requirements that agents can fulfill automatically.

Scanned every discovered page (1).

No Cloudflare-generated error diagnostics were detected on the homepage response.

No Cloudflare product beacons were detected in the homepage response.

Detected 1 public DNS/service signal(s).

HTML validation is temporarily unavailable.