escaneado 5/8/2026, 10:36:25 · en caché · se actualiza en 21 h · rubric 2026.10.4
Construido con Next.js
Necesita trabajo
Así experimentan nabiloo.tech los agentes de IA (no los navegadores). La puntuación pondera cinco categorías de legibilidad para máquinas; las marcas del arco son las 36 comprobaciones individuales que hay detrás.
Envíalo a quien edita el sitio. El enlace muestra la puntuación y la nota como tarjeta de vista previa, y se mantiene al día: relee el último análisis en vez de congelar el valor de hoy.
Correcciones principales
Las comprobaciones marcadas como «emerging» son estándares de protocolo de agentes de 2026 que la mayoría de la web aún no ha adoptado. Adoptarlos pronto es una ventaja, no un defecto.
warnrobots.txt allows AI agents+1 ptDescubribilidad
1 access agent(s) blocked: Amazonbot. These keep your site out of AI answers. 7 training-data crawler(s) blocked (GPTBot, ClaudeBot, Google-Extended, Applebot-Extended, Bytespider, CCBot, Meta-ExternalAgent), a licensing choice, not scored.
Ver los pasos exactos
Qué significa
robots.txt is a small text file at yoursite.com/robots.txt where you tell visiting robots what they may read. Many sites carry an old rule that blocks ALL robots, which now also blocks the AI assistants your customers ask for recommendations.
Por qué importa
ChatGPT, Claude, and Perplexity each send a named crawler (GPTBot, ClaudeBot, PerplexityBot). If your robots.txt turns them away, they cannot read your pages. So when a customer asks an assistant about your product, the assistant answers from what everyone ELSE says about you, or recommends a competitor it could read.
Haz esto
Next.js: Allow GPTBot, ClaudeBot, and PerplexityBot in robots.txt (or remove the blanket Disallow).
No pierdas este informe
Recíbelo ahora en tu correo, más un aviso cada vez que cambie la puntuación de nabiloo.tech. Gratis, date de baja cuando quieras.
¿Prefieres que lo vigilemos por ti? Monitor reescanea cada semana y avisa de cualquier cambio, $29/mo. Empezar a monitorizar →
Arréglalo
Archivos generados y listos para desplegar que cubren los huecos de arriba. Cópialos o descárgalos a tu repositorio.
Allow AI agents in robots.txt
Merge these groups into your robots.txt at the site root.
Este escaneo calificó una página. Tu sitio es más que una página.
Esto calificó solo tu página de inicio. Tus precios, documentación y checkout viven en otras páginas: justo las que los asistentes citan cuando te recomiendan. Un 73/100 aquí significa que los agentes ya se pierden cosas en tu mejor página. El Deep Scan ($29) audita todo el sitio con las 36 comprobaciones y envía un PDF con cada fallo y su corrección exacta, ordenados por lo que más visibilidad te cuesta. Pago único, entregado en minutos, sin suscripción.
NM.AboutServicesWorkExperienceContactResumeLead Technical Writer · SallaThe writerdevelopersactually thank.Seven years turning APIs, SDKs, and developer platforms into documentation that ships adoption — and that AI agents now read to build on top.See my work →Get in touch7+Years300+API docs10k+Developers100%OpenAPI
Muestra tu puntuación
Inserta esta insignia en tu sitio. Enlaza a este escaneo en vivo y se actualiza con cada reescaneo.
Recibe este informe por correo, y un aviso cuando la preparación de nabiloo.tech cambie de verdad: una comprobación que empeora o la puntuación global que baja.
Dos cosas nunca disparan un correo: un cambio de puntuación causado por publicar nosotros una nueva rúbrica (es otro instrumento de medida, no un cambio en tu sitio), y movimientos que solo se explican por comprobaciones dependientes del tiempo, que varían de una ejecución a otra.
¿Lo prefieres con tu propio calendario, con Slack o webhook en lugar de correo? La monitorización de deriva está en todos los planes de pago.
Esta puntuación dice si un agente de IA podría leer nabiloo.tech. La analítica de tráfico IA dice si uno vino de verdad, y qué páginas lo rechazaron.
Desglose completo
18 pass2 warn11 fail5 skip
Descubribilidad
pass
robots.txt present
A robots.txt is reachable at the site root.
100/100
warn
robots.txt allows AI agents
1 access agent(s) blocked: Amazonbot. These keep your site out of AI answers. 7 training-data crawler(s) blocked (GPTBot, ClaudeBot, Google-Extended, Applebot-Extended, Bytespider, CCBot, Meta-ExternalAgent), a licensing choice, not scored.
89/100
pass
Content-Signal directivesemerging
Content-Signal directives are advertised, declaring fine-grained AI usage preferences.
100/100
pass
llms.txt present
Found /llms.txt but missing H1 header and markdown links. Not scored.
100/100
pass
Sitemap present
sitemap.xml reachable and referenced from robots.txt.
100/100
fail
Link response headers
No HTTP Link: response headers. Emit canonical/alternate/describedby relations so HEAD-only or stream-rendering agents get them without parsing HTML.
0/100
pass
Canonical URL
Canonical points to self: https://nabiloo.tech/.
100/100
fail
MCP server cardemerging
No valid MCP Server Card at /.well-known/mcp/server-card.json. Publish one so agents can discover your tools without HTML scraping.
0/100
fail
OAuth authorization metadataemerging
No RFC 8414 metadata at /.well-known/oauth-authorization-server. Agents that act on behalf of users need this to discover your authorization endpoints.
0/100
fail
OAuth resource metadataemerging
No RFC 9728 metadata at /.well-known/oauth-protected-resource. Publish it so agents can discover required scopes without hand-coded credentials.
0/100
fail
API catalog / OpenAPIemerging
No /.well-known/api-catalog (RFC 9727) and no /openapi.json|yaml. Publish one so agents that integrate with APIs can discover your endpoints.
0/100
fail
Web Bot Authemerging
No Web Bot Auth JWKS at /.well-known/http-message-signatures-directory.json. Publish one to allow trusted agents while keeping a default-deny posture for the rest.
0/100
Legibilidad
fail
Markdown negotiationemerging
Accept: text/markdown returns HTML, not markdown. Serve a markdown variant of primary content when requested; agents summarize and cite it more reliably.
0/100
fail
Text-to-markup ratio
Visible text is 1.6% of HTML weight (322/20746 bytes). 57% of the document is inline script, 41% is markup.
12/100
pass
Content without JavaScript
Primary content is present in the initial HTML — agents without JS can read it. (Measured statically; a rendered comparison was not run because the static reading sufficed.)
90/100
pass
Heading hierarchy
Hierarchy is well-formed (1 H1, no skipped levels, 1 headings total).
100/100
pass
Cookie wall blocks content
No common consent-modal markers detected.
100/100
pass
Declared language
Declared lang="en".
100/100
pass
Page title
A concise <title> is present (38 chars).
100/100
pass
Meta description
A well-sized meta description is present (165 chars).
Page intent unclear; no specific schema.org type expected.
100/100
Coherencia: ¿coinciden sus canales?
skip
JSON-LD price matches the visible priceemerging
No price declared in JSON-LD, so there is nothing to cross-check. (Whether a price SHOULD be declared is the structured-data checks’ question.)
—
pass
JSON-LD name appears on the pageemerging
Declared entity name "Salla" appears on the visible page.
100/100
skip
Declared language matches the contentemerging
Too little visible text (36 words) to classify a language honestly.
—
Accionabilidad
pass
Paywall / login wall
No paywall or login-wall detected on the landing URL.
100/100
fail
Agent Skills manifestemerging
No Agent Skills manifest at /.well-known/agent-skills.json. Enumerate the tasks agents can perform (search, add-to-cart, contact-support) so they pick the right one without scraping.
0/100
fail
WebMCP actionsemerging
No WebMCP detected. On pages with first-class actions (cart, support, account), embed a WebMCP server so on-page agents invoke tools directly.
0/100
pass
Primary action reachable
A primary offering and a price or call to action were both identifiable from the served HTML, so an agent can tell what this page sells and what it costs without running scripts.
100/100
pass
Reachability
HTTP 200.
100/100
skip
Primary action is clickableemerging
This page does not ask the reader to do anything, so there is no primary action to check. Informational pages are not penalised here.
—
skip
Filters reachable by URLemerging
This page does not offer to filter or sort a list, so there is nothing to address by URL. Pages without facets are not penalised here.
—
Rendimiento
fail
Time to first byte
TTFB 2166ms. Slow. Agents time out aggressively.
20/100
skip
Full render time
Full-render time unavailable (browser pass skipped or failed).
—
pass
Page weight
Initial document is a lean 20 KB.
100/100
Más allá del escaneo
¿Ejecutas tus propios agentes de IA? AgentSpeed también los monitoriza en producción: cada ejecución, su latencia, coste y fallos, con alertas cuando algo se rompe. Gratis hasta 10.000 eventos al mes, sin tarjeta.
Open yoursite.com/robots.txt in a browser to see what you have today.
Look for "User-agent: *" followed by "Disallow: /". That single pair blocks everything, AI agents included.
Add an explicit allow block for each AI agent you want (GPTBot, ClaudeBot, PerplexityBot, OAI-SearchBot), placed after the wildcard rule so it wins.
The generated robots.txt in the Fix it section below has the exact lines for this site. Copy it, or merge the blocks into your existing file.
→ https://nabiloo.tech/robots.txt
Pégalo en Claude Code, Cursor o cualquier asistente con tu repositorio abierto. Incluye este hallazgo, los pasos y los atajos que debes evitar.
Qué comprobar
After deploying, open yoursite.com/robots.txt and confirm the new blocks are live, not cached.
Hit Re-scan above: "robots.txt allows AI agents" should flip to PASS.
The free robots.txt checker at /tools/robots-txt-checker shows per-agent allow/block for your live file.
Qué evitar
Don’t delete rules you added deliberately. If you block a specific scraper for a reason, keep that block; just don’t let a blanket rule catch the assistants too.
Allowing crawlers you actually want blocked just to raise a score is backwards. The score measures readiness for agents you WANT; decide the policy first, then express it precisely.
Don’t serve a different robots.txt to different visitors. Inconsistent answers get you treated as unreliable by every crawler.
No HTTP Link: response headers. Emit canonical/alternate/describedby relations so HEAD-only or stream-rendering agents get them without parsing HTML.
Ver los pasos exactos
Qué significa
HTTP responses can carry a Link header: the same canonical and alternate-language information your HTML declares, but delivered in the response envelope itself. Agents that only send a HEAD request, or that decide what to do while the page is still streaming, read the header without parsing any HTML. Yours is missing (or carries none of the relations agents use: canonical, alternate, describedby).
Por qué importa
An agent triaging fifty URLs doesn’t want to download and parse fifty pages to learn which are duplicates of which. The Link header answers at the cheapest possible layer. Sites that provide it get correctly de-duplicated and correctly language-routed even by the most minimal fetchers.
Haz esto
Emit a Link header alongside each page, mirroring what your HTML head already declares. Example: Link: <https://yoursite.com/page>; rel="canonical".
Most stacks set this in one place: Next.js headers() config, an nginx add_header line, or a CDN response-header rule.
If you serve translations, add rel="alternate" entries with hreflang, matching your HTML.
Pégalo en Claude Code, Cursor o cualquier asistente con tu repositorio abierto. Incluye este hallazgo, los pasos y los atajos que debes evitar.
Qué comprobar
Run: curl -sI https://yoursite.com | grep -i "^link:" and confirm the relations appear.
Hit Re-scan above: "Link response headers" flips to PASS.
Qué evitar
The header must AGREE with the HTML. A Link header pointing one place while the in-page canonical points another gives machines two contradictory answers, which is worse than one missing answer.
Don’t inject the same site-wide canonical on every page via a blanket CDN rule; each page names its own clean URL, exactly as in the HTML tag.
Visible text is 1.6% of HTML weight (322/20746 bytes). 57% of the document is inline script, 41% is markup.
Ver los pasos exactos
Qué significa
Of everything your server sends for this page, very little is actual readable text. The rest is code, styling, and markup wrapper. Agents fetched a lot of bytes and found few words.
Por qué importa
Agents work with retrieval budgets. A page that is 2% text either gets skimmed (and mis-summarised) or skipped. More signal per byte means more of your actual message survives into the agent’s summary.
Haz esto
Confirm your real copy is server-rendered. See the JavaScript check; these two usually fail together.
Cut boilerplate wrappers: deeply nested divs, inline SVG logos repeated per section, base64 images inlined into HTML.
Move large inline styles and scripts into external files.
Check how much of the document is inline script: your report now says. If most of it is, that is your framework serializing state for hydration, often a second copy of text already in the HTML. Send only the props a component cannot recompute, and render statically where a page does not need to hydrate.
Pégalo en Claude Code, Cursor o cualquier asistente con tu repositorio abierto. Incluye este hallazgo, los pasos y los atajos que debes evitar.
Qué comprobar
Re-scan: "Text-to-markup ratio" improves, and "Page weight" often improves alongside.
Qué evitar
Don’t pad the page with keyword text to inflate the ratio. The ratio is a proxy for substance, and stuffing is the opposite of substance.
Your page HAS structured data, but it is malformed: broken JSON syntax, or types and fields that don’t exist in the schema.org vocabulary. Machines can see the block but can’t parse it.
Por qué importa
Invalid JSON-LD is worse than it looks. The agent spends its attention budget on the block, fails to parse it, and falls back to guessing from prose anyway. You pay the cost of structured data without getting the benefit.
Haz esto
Paste the failing page into validator.schema.org. It names the exact line and field that breaks.
The most common breaks: a trailing comma (invalid JSON), a typo’d type name, or a price written as "$79" instead of "79" with a separate priceCurrency.
Fix in place, redeploy, revalidate.
Pégalo en Claude Code, Cursor o cualquier asistente con tu repositorio abierto. Incluye este hallazgo, los pasos y los atajos que debes evitar.
Qué comprobar
validator.schema.org reports zero errors for the page.
Re-scan: "Structured data validates" flips to PASS.
Qué evitar
Don’t delete the block to make the error disappear. That trades "invalid" for "absent" and fails the presence check instead; fix it.
Don’t hand-edit generated JSON-LD in the page. Fix the template or plugin that generates it, or the error returns on the next publish.
Time to first byte is how long your server thinks before it starts answering: the gap between an agent asking for the page and the first byte of HTML arriving. Yours crossed our threshold (under 200ms scores full marks, over 2 seconds fails).
Por qué importa
Agents fetch with tight timeouts and many pages in parallel. A server that takes seconds to start answering gets cut off mid-queue, and a page that times out is a page that was never read. Speed here is not polish; it decides whether the content gets fetched at all.
Haz esto
Cache the HTML itself. Marketing and docs pages rarely change per visitor; serve them from a CDN or static cache so no application code runs per request.
If you are on serverless hosting, cold starts are a common cause: keep the function warm or pre-render the page.
Move slow work (database queries, third-party API calls) out of the first response; render the shell fast and fill personalised details after.
Pégalo en Claude Code, Cursor o cualquier asistente con tu repositorio abierto. Incluye este hallazgo, los pasos y los atajos que debes evitar.
Qué comprobar
Run: curl -o /dev/null -s -w "%{time_starttransfer}\n" https://yoursite.com and watch the number drop.
Hit Re-scan above: "Time to first byte" improves a bucket at a time (under 500ms passes).
Qué evitar
Don’t answer fast with an empty shell that loads content by JavaScript. That trades this warning for the much worse "content requires JavaScript" failure, since most agents never run your scripts.
Don’t special-case known crawler user agents onto a faster path. Serving different performance to different audiences is the pattern crawlers penalise when they detect it.
No valid MCP Server Card at /.well-known/mcp/server-card.json. Publish one so agents can discover your tools without HTML scraping.
Ver los pasos exactos
Qué significa
MCP (Model Context Protocol) is how AI assistants call tools. A server card is a small JSON file at /.well-known/mcp/server-card.json that announces "this site offers these tools" so an assistant can find them without scraping your pages. We requested that file from your site and found none.
Por qué importa
Assistants that support MCP look for the card at that exact address. With one, "book an appointment on yoursite.com" can become a tool call instead of screen-driving your UI. This is an emerging standard, so it weighs little today; publishing early costs one static file and makes you visible to the assistants adopting it.
Haz esto
If you already run an MCP server, describe it: name, description, and endpoint URL in the card.
If you don’t, a minimal truthful card naming your site and linking your API docs is still valid. The generated starter in the Fix it section below is filled in for this site.
Serve it at exactly /.well-known/mcp/server-card.json with content type application/json.
Right now, only you know this score. Your buyers ask AI before they buy, and certification is how you show them, and anyone comparing you to a competitor, that assistants can actually read, quote, and use your site.
A public verification URL you can drop into a sales deck, a procurement questionnaire, or a partner review. Anyone can check it, dated and signed.
An embeddable badge for your site, the visible version of a property competitors can’t claim without earning the score.
Weekly re-checks for a full year. A deploy that breaks agent access gets caught before it costs you recommendations, and before the certificate would lapse.
Sites under 70 can’t buy this at any price. That’s what makes displaying it mean something.