agentspeed.

cloudflare.com

scanned 7/26/2026, 1:40:37 AM · cached · refresh in 22h · rubric 2026.07.4
Built with Webflow
robots.txt present: passrobots.txt allows AI agents: passContent-Signal directives: passllms.txt present: passSitemap present: passLink response headers: warnCanonical URL: skipMCP server card: failOAuth authorization metadata: failOAuth resource metadata: failAPI catalog / OpenAPI: passWeb Bot Auth: failMarkdown negotiation: passText-to-markup ratio: failContent without JavaScript: skipHeading hierarchy: skipCookie wall blocks content: skipPage title: skipMeta description: skipJSON-LD present: passStructured data validates: passSchema type coverage: passPaywall / login wall: skipAgent Skills manifest: failWebMCP actions: failPrimary action reachable: passReachability: passTime to first byte: passFull render time: skipPage weight: pass71/ 100 · C
Needs work

This is how AI agents (not browsers) experience cloudflare.com. The score weights five categories of machine-readability; the ticks on the arc are the 30 individual checks behind it.

✉ Email me this report + alert me when it changes ↓

Top fixes

Checks tagged “emerging” are 2026 agent-protocol standards most of the web hasn’t adopted yet — adopting early is an edge, not a defect.

failText-to-markup ratioReadability

Visible text is 0.6% of HTML weight (7795/1299843 bytes). Low. Markup may be crowding out agent-usable text.

Fix: Heavy ad or navigation markup crowds out agent-usable text. Aim for a text-to-DOM ratio above 15%.

warnLink response headersDiscoverability

A Link: header is present but carries none of canonical/alternate/describedby — the relations agents consume.

Fix: Emit `Link:` headers for canonical, alternate-language, and describedby relations. Agents that fetch HEAD-only or stream-render rely on these.

failMCP server cardemergingDiscoverability

No valid MCP Server Card at /.well-known/mcp/server-card.json. Publish one so agents can discover your tools without HTML scraping.

Fix: Publish an MCP Server Card describing the tools your site exposes. Agents discover capabilities via `/.well-known/mcp/server-card.json`. See modelcontextprotocol.io for the schema.

failOAuth authorization metadataemergingDiscoverability

No RFC 8414 metadata at /.well-known/oauth-authorization-server. Agents that act on behalf of users need this to discover your authorization endpoints.

Fix: Expose OAuth metadata at `/.well-known/oauth-authorization-server` per RFC 8414. Required for agents that need to perform user-authorized actions on your site.

Don’t lose this report

Get it in your inbox now — and a heads-up whenever cloudflare.com’s agent-readiness score changes. Free, unsubscribe anytime.

Qualifies for certificationBronze

This score clears the Bronze threshold (70+). Certification turns it into a dated, publicly verifiable attestation — a verification URL, an embeddable badge, and weekly monitoring for a full year. Scores under 70 can’t buy this, which is what makes displaying it mean something.

Get certified — $199/year →

What the agent receives

The agent’s-eye view
Cloudflare: Build for the agent era Products Solutions Resources Pricing Under attack? Under attack? Login Contact sales Start building Login Hero video off in Low preview — use High mode and refresh for full motion. Connect 2026 · The Agentic Conference of the Year · Oct 19-21 · Register Everything we learned from powering 20% of the Internet—yours by default One platform for your apps, agents, and workforce. Build, secure, and scale without managing infrastructure. Start building for free Region: Earth One smart network for workloads + security — close to users, close to data. Compute close to users reduces network latency. Smart Placement moves your Worker closer to your data for optimized end-to-end latency. 4.5x faster Faster for 95% of round trips by running Workers near your backend, not you. 95% of the world’s Internet-connected population is reached by Cloudflare within 50ms. 234B Daily cyber threats blocked. Run everywhere Security, connectivity, and code run in 335+ cities around the world, within 50ms of 95% of the world's population. Run anywhere Our network is close to your users, applications, and sites. It optimizes all your traffic from source to destination for low latency. Run at massive scale No more capacity planning. Ever. Cloudflare powers 42% of the Fortune 500 Trusted by the teams you trust. Shopify Character.AI Intercom DoorDash Discord Zendesk Lovable npm SiteGPT Liveblocks Leagued Seated Shopify Character.AI Intercom DoorDash Pause “ For Shopify, the real challenge is not about how many different pieces of complex technology we can use but the opposite. Cloudflare helps us find a simple way to achieve something very complex that we can scale and maintain. ” Duncan Davidson , VP of Developer Productivity , Shopify And thousands more... Why choose Cloudflare Everything needed to build secure, performant applications Fighting infra with “cloud” Shipping with Cloudflare Pay only when your code runs (Not to keep servers warm.) Network & CDN Network & CDN SASE / Zero Trust Compute & Storage Network & CDN SASE / Zero Trust Compute & Storage Pay for clean traffic One stack of security and performance for every site — same DDoS mitigation, same global CDN, same network at every tier. You only pay for the depth your site needs. Visitor traffic Your site CDN DDoS SSL WAF Bot Same protection at every tier — paid plans add depth Free for hobby projects $0 /month Unmetered DDoS Universal SSL Global CDN See Free plan Pro for pro websites $20 /mo billed annually or $25/mo billed monthly Image optimization Bot protection Ticket support See Pro plan Business for small business $200 /mo billed annually or $250/mo billed monthly PCI DSS 4.0 100% uptime SLA Chat support See Business plan Contract for mission-critical Custom Billed annually Network priority 24/7 support Custom contracts See Contract plan Pay for active employees Connect and secure users, devices, and data on one Zero Trust platform. The first 50 employees are on us — scale to thousands at a flat per-user rate. 50 users on us Then $7 per active user Billed monthly · scales to thousands Free for teams under 50 $0 forever ZTNA, SWG & DEX 24h log retention Community support See Free plan Pay-as-you-go scales with headcount $7 /user/month 100% uptime SLA 30-day logs Chat & ticket support See Pay-as-you-go plan Contract for full-featured SASE Custom Annual price per user Unlimited CASB & DLP Logpush 24/7 phone support See Contract plan Wall Clock vs. CPU Time Never pay for idle time waiting for slow APIs, LLMs, or humans. Cloudflare charges only for compute, not wall time, even during long agent workflows or hibernating WebSockets. 1ms free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free LLM Call 2500ms 0.5ms free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free free API Call 300ms 0.75ms Paid Free Free No credit card needed See more Workers Durable Objects Workers KV 100,000 / daily requests 1 million / KV daily reads 25 / AI daily requests 10GB / R2 Storage 5 GB / SQL Stored Data 1 GB / Stored Data (KV) 1 GB / Stored Data 100,000 / Read requests 1,000 / Write/Delete/List requests Paid Starts at $5/month See more Workers Durable Objects Workers KV $0.30 / million requests $0.02 / million CPU ms $0.15 / million $12.50 / million GB-s $0.001 / million Read rows $1.00 / million Written rows $0.50 / GB-month $0.50 / million Read requests $5.00 / million Write/Delete/List requests Tailored to your team Easy to use for both startups and the world’s largest enterprises. Fits into your existing workflows Git, GitHub Actions, VS Code, and any framework. No proprietary tools or vendor lock-in. One network for users, apps, and data Whether you're shipping code, securing employees, or connecting branches, it all runs on the same global network — managed from one dashboard, billed as one platform. Secure by default DDoS protection, WAF, bot management, and Zero Trust controls are built into the network and run on every request from day one. Fast path to AI adoption Build, deploy, and govern AI agents on the same network. Secure MCP portals, identity-aware access, and built-in inference make production AI a one-step deploy. Launching agents to analyze repository… 3 background agents launched review-agent scanning PRs 179.6k tokens test-agent running checks 8k tokens docs-agent fixed documentation 56 tokens Agents frontend analysis loading . . . > Enter Build without boundaries Join thousands of developers who've eliminated infrastructure complexity and deployed globally with Cloudflare. Start building for free — no credit card required. Start building for free View docs No cold starts or region complexity SASE and Zero Trust without the complexity Deploy to 330+ cities instantly Defend against the Internet's biggest DDoS attacks Predictable pricing without surprises Identity-aware Zero Trust access that retires your VPN Battle-tested infrastructure powering millions CDN, WAF, and DNS faster than the public Internet No cold starts or region complexity SASE and Zero Trust without the complexity Deploy to 330+ cities instantly Defend against the Internet's biggest DDoS attacks Predictable pricing without surprises Identity-aware Zero Trust access that retires your VPN Battle-tested infrastructure powering millions CDN, WAF, and DNS faster than the public Internet Getting started Plans Contact sales Partners Find a partner Startups Under attack? Domain name search Company About Careers Investors Press Press kit Global network Public interest Project Galileo Athenian Project Cloudflare for Campaigns Project Fairshot Impact/ESG Compliance Compliance resources Trust Hub Data Protection Responsible AI Transparency report Report abuse Resources App innovation report Cloudflare Radar Case studies Status Support Events Blog Developers Documentation Learning center Community Solutions SSE and SASE platform Cloudflare AI Cloud AI Security Frontend Development Platform Multi-Tenant Platform Development Web Security Platform Start Building Log In © 2026 Cloudflare, Inc. Privacy policy | Report security issues | Terms of use | Trademark | Your privacy choices

Show your score

Embed this badge on your site. It links back to this live scan and updates on every rescan.

AgentSpeed score for cloudflare.com
<a href="https://agentspeed.com/scan/cloudflare.com"><img src="https://agentspeed.com/badge/cloudflare.com" alt="AgentSpeed agent-readiness score" height="56"></a>

Track this score

Get this report by email, then a heads-up when cloudflare.com’s agent-readiness actually changes — a check regressing, or the composite dropping.

Two things never trigger an email: a score change caused by us publishing a new rubric, because that is a different instrument rather than a change to your site, and movement explained only by timing-derived checks, which shift run to run on a site nobody touched.

Want it on your own schedule, with Slack or a webhook instead of email? Score-drift monitoring is on every paid plan.

This score says whether an AI agent could read cloudflare.com. AI traffic analytics says whether one actually came — and which pages turned it away.

Full breakdown

14 pass1 warn7 fail8 skip
Discoverability
pass
robots.txt present
A robots.txt is reachable at the site root.
100/100
pass
robots.txt allows AI agents
All 8 answer-time access agents allowed.
100/100
pass
Content-Signal directivesemerging
Content-Signal directives are advertised, declaring fine-grained AI usage preferences.
100/100
pass
llms.txt present
Found /llms.txt (16879 bytes), H1 + at least one link present.
100/100
pass
Sitemap present
sitemap.xml reachable and referenced from robots.txt.
100/100
warn
Link response headers
A Link: header is present but carries none of canonical/alternate/describedby — the relations agents consume.
60/100
skip
Canonical URL
Check could not run.
fail
MCP server cardemerging
No valid MCP Server Card at /.well-known/mcp/server-card.json. Publish one so agents can discover your tools without HTML scraping.
0/100
fail
OAuth authorization metadataemerging
No RFC 8414 metadata at /.well-known/oauth-authorization-server. Agents that act on behalf of users need this to discover your authorization endpoints.
0/100
fail
OAuth resource metadataemerging
No RFC 9728 metadata at /.well-known/oauth-protected-resource. Publish it so agents can discover required scopes without hand-coded credentials.
0/100
pass
API catalog / OpenAPIemerging
An API catalog (RFC 9727) or an OpenAPI document is reachable, so agents can plan API calls against your site.
100/100
fail
Web Bot Authemerging
No Web Bot Auth JWKS at /.well-known/http-message-signatures-directory.json. Publish one to allow trusted agents while keeping a default-deny posture for the rest.
0/100
Readability
pass
Markdown negotiationemerging
Requests with Accept: text/markdown return a markdown representation — agents prefer markdown over HTML for summarization and citation.
100/100
fail
Text-to-markup ratio
Visible text is 0.6% of HTML weight (7795/1299843 bytes). Low. Markup may be crowding out agent-usable text.
4/100
skip
Content without JavaScript
Browser pass unavailable; cannot measure JS dependency.
skip
Heading hierarchy
Check could not run.
skip
Cookie wall blocks content
Check could not run.
skip
Page title
Check could not run.
skip
Meta description
Check could not run.
Structured data
pass
JSON-LD present
Found 3 JSON-LD blocks.
100/100
pass
Structured data validates
3/3 checkable block(s) validated cleanly against schema.org.
100/100
pass
Schema type coverage
Page intent unclear; no specific schema.org type expected.
100/100
Actionability
skip
Paywall / login wall
Check could not run.
fail
Agent Skills manifestemerging
No Agent Skills manifest at /.well-known/agent-skills.json. Enumerate the tasks agents can perform (search, add-to-cart, contact-support) so they pick the right one without scraping.
0/100
fail
WebMCP actionsemerging
No WebMCP detected. On pages with first-class actions (cart, support, account), embed a WebMCP server so on-page agents invoke tools directly.
0/100
pass
Primary action reachable
Primary offering identified ("Cloud platform for apps, agents, and security") with price/CTA ("Start building for free").
100/100
pass
Reachability
HTTP 200 after 1 redirect.
100/100
Performance
pass
Time to first byte
TTFB 300ms. Healthy.
80/100
skip
Full render time
Full-render time unavailable (browser pass skipped or failed).
pass
Page weight
Initial document is a lean 1269 KB.
100/100
Beyond the scan

Running AI agents of your own? AgentSpeed also monitors them in production — every run, its latency, cost, and failures, with alerts when something breaks. Free for 10,000 events a month, no credit card.

Start watching free →See plans