admintoolkit.io

Return a markdown version of HTML pages when agents request it via Accept: text/markdown so LLMs ingest your content cleanly.

No markdown response for Accept: text/markdown

Enable Markdown for Agents so requests with `Accept: text/markdown` return a markdown version of your HTML response while HTML stays the default for browsers. Set `Content-Type: text/markdown` on the markdown variant and add `Vary: Accept` so caches differentiate the two representations. Verify with `curl -H "Accept: text/markdown" https://yoursite.com/`.

Publish a discoverable agent-skills index so AI agents can find and load your structured skill bundles.

Agent Skills index exists but does not list any SKILL.md paths

Publish a skills discovery index at /.well-known/agent-skills/index.json (per the Agent Skills Discovery RFC v0.2.0) with a `$schema` field and a `skills` array. Each entry should have `name`, `type`, `description`, `url`, and a `sha256` digest of the SKILL.md so agents can verify integrity. Make sure each `url` resolves to a reachable SKILL.md.

Serve an MCP Server Card so agents can discover your Model Context Protocol surface and connect with the right capabilities.

MCP server card exists but is missing serverInfo, transport, or capability metadata

Serve an MCP Server Card at /.well-known/mcp/server-card.json with `serverInfo` (name, version), the transport endpoint URL, and the `capabilities` you support. Accept /.well-known/mcp.json as a fallback for clients on the legacy path. The schema is being standardized — track the active proposal at github.com/modelcontextprotocol/modelcontextprotocol/pull/2127.

Expose OAuth/OIDC discovery metadata so agents can authenticate against your APIs programmatically.

No public login, signup, or protected API surface was detected, so OAuth/OIDC discovery may not apply

If your site has protected APIs, publish /.well-known/openid-configuration (for OpenID Connect) or /.well-known/oauth-authorization-server (for OAuth 2.0) with `issuer`, `authorization_endpoint`, `token_endpoint`, `jwks_uri`, and `grant_types_supported`. This lets agents discover how to authenticate without parsing your docs.

Publish OAuth Protected Resource metadata so agents know which auth servers issue valid tokens for your APIs.

No protected API surface was detected, so OAuth protected-resource metadata may not apply

Publish /.well-known/oauth-protected-resource (per RFC 9728) with your `resource` identifier, `authorization_servers` (the list of OAuth/OIDC issuer URLs that can issue tokens for this resource), and `scopes_supported`. This tells agents which auth server to obtain access tokens from and which scopes to request.

Pages publish JSON-LD structured data so search engines and AI agents can extract entities, products, FAQs, and offers reliably.

7 sampled page(s) publish FAQPage JSON-LD without matching visible FAQ questions.

Embed JSON-LD `<script type="application/ld+json">` blocks in the head describing the page's primary entity — Article, Product, FAQPage, Organization, etc. — using schema.org types and required fields per Google's structured data guidelines. Validate with the Rich Results Test before shipping, and keep the JSON strictly parseable (no trailing commas, no comments).

• /a2a-agent-card-validator/
• /ai-crawler-robots-checker/
• /arc-chain-validator/
• /bimi-checker-generator/
• /caa-record-checker-generator/

Each indexable page carries enough unique, substantive content to merit indexing on its own without overlapping siblings.

1 page(s) are under 100 words; 1 page(s) are between 100 and 300 words; 0 duplicate-content fingerprint group(s) were detected.

Audit indexable pages for substantive, unique content — at minimum a few hundred words of original copy that delivers on the title and description. Consolidate near-duplicate pages with canonical tags or merge them into a single richer page. Don't ship placeholder "Coming soon" pages to production indexable URLs.

• /contact/
• /accessibility/

Robots meta tags and X-Robots-Tag headers align with which pages should actually be crawled and ranked.

2 sampled public page(s) are marked noindex.

Audit `<meta name="robots">` tags and `X-Robots-Tag` response headers across the site. Remove `noindex` and `nofollow` from any page meant to appear in search, especially on staging templates that leaked into production. For pages that genuinely should be excluded (admin, internal tools), keep the directive but verify the URL isn't also linked from a sitemap.

• /contact/
• /cookies/

FAQPage schema is treated as a bonus only when it matches visible question-and-answer content.

7 page(s) publish FAQPage schema without matching visible FAQ questions.

Keep FAQ sections visible and useful. Only add FAQPage JSON-LD when the same questions and answers are present in the page body; remove FAQ schema for hidden, fabricated, or irrelevant questions.

• /a2a-agent-card-validator/
• /ai-crawler-robots-checker/
• /arc-chain-validator/
• /bimi-checker-generator/
• /caa-record-checker-generator/

Internal links use descriptive anchor text and form a reachable graph so crawlers, readers, and AI agents can navigate context.

1 link crawlability or anchor-text warning(s) were detected.

Use real `<a href="...">` elements for navigation — never `<div onclick>` or button-styled spans, which crawlers can't follow. Write descriptive anchor text that summarizes the destination (avoid "click here", "read more", or naked URLs). Keep important pages within ~3 clicks of the homepage so crawl depth doesn't starve them.

• /accessibility/

Article-like and substantial pages expose reliable freshness signals so answer engines know whether the content is current.

1 content page(s) have no reliable date signal and 0 have a newest signal older than six months.

Add truthful freshness metadata only where it reflects a real content update: JSON-LD dateModified/datePublished, article modified-time meta tags, a visible updated or reviewed date, or sitemap lastmod. Do not stamp every page with build time unless the visible content actually changed.

• /cookies/

Content pages with factual claims link out to credible external primary sources so readers and answer engines can verify context.

10 content page(s) have fewer than two contextual external citation links.

For articles, guides, and research-like pages, cite official docs, standards, primary research, or authoritative sources where claims need support. Do not add arbitrary outbound links to transactional pages, and avoid vague anchors like "click here".

• admintoolkit.io
• /a2a-agent-card-validator/
• /ai-crawler-robots-checker/
• /arc-chain-validator/
• /bimi-checker-generator/

Lightweight server and document metrics from the sampled homepage are captured every scan so drift in HTML size, server stack, or DOM complexity is observable across reports.

Captured lightweight server and document metrics from the sampled homepage.

No Cloudflare Challenge Page marker was detected on the homepage response.

Domain registration data is temporarily unavailable.

Scanned 12 representative pages out of 111.

Publish Agentic Commerce Protocol discovery so agents can transact with your commerce surfaces without scraping.

No payable API surface was detected, so ACP discovery may not apply

Serve /.well-known/acp.json at the origin root with `protocol.name` set to `"acp"`, the `protocol.version`, `api_base_url`, supported transports, and `capabilities.services`. Agents can then discover your ACP implementation without first creating a checkout session.

No Cloudflare-generated error diagnostics were detected on the homepage response.

No Cloudflare product beacons were detected in the homepage response.

Detected 2 public DNS/service signal(s).

Publish Machine Payment Protocol metadata so agents can discover paid endpoints in your API.

No payable API surface was detected, so MPP discovery may not apply

Publish an OpenAPI document at /openapi.json with `x-payment-info` extensions on payable operations. Each operation should declare `intent` (charge or session), `method` (tempo, stripe, lightning, card), `amount`, and `currency`. Use the MPP SDK (`mppx` for TypeScript, `pympp` for Python) with framework middleware for Hono, Express, Next.js, or Elysia to handle the payment flow.

Expose Universal Commerce Protocol metadata so agents can transact for content or services through a standard interface.

No payable API surface was detected, so UCP discovery may not apply

Serve /.well-known/ucp with your protocol version, declared `services`, supported `capabilities`, and reachable `endpoints`. Make sure any spec URLs and referenced JSON Schemas resolve so agents can validate against them at discovery time.

Support x402-style HTTP 402 payment flows so agents can pay for API access machine-to-machine.

No payable API surface was detected, so x402 discovery may not apply

Add x402 payment middleware to your API routes so AI agents can pay for access via HTTP. Use `@x402/express`, `@x402/hono`, or `@x402/next` middleware with a facilitator URL and wallet address. Protected routes will return HTTP 402 with payment requirements that agents can fulfill automatically.

HTML validation is temporarily unavailable.