56/ 100
securedme-main-dev.github.io C
This site registers real WebMCP tools at runtime. Overall readiness is moderate.
Scanned 1 week ago with Chrome 153, real execution with a modelContext interceptor and synthetic interaction.
Scan another site PASS Page loads over HTTPS 8/8 pts
The page answered with HTTP 200 over HTTPS.
PASS AI agents allowed in robots.txt 6/6 pts
No robots.txt found, so nothing blocks AI agents.
PASS AI crawlers named explicitly in robots.txt recommendation, no points
No robots.txt found, so there is nothing to complete.
FAIL llms.txt present 0/4 pts
No usable llms.txt found.
How to fix: Publish /llms.txt: a plain-text overview of the site (purpose, key pages, tools, contact) that AI models can read cheaply.
PASS Not blocked by noindex 4/4 pts
No noindex directive found.
PASS WebMCP tools detected at runtime 14/14 pts
8 tool(s) registered through modelContext.registerTool() while the page ran in our Chrome.
PART Tool schema quality 13/14 pts
Average schema quality 5.4/6 across 8 tool(s). Weakest: list_matches (5/6), compare_teams (5/6), explain_prediction (5/6), set_fan_preferences (5/6).
How to fix: Give every tool a clear description, a JSON Schema with typed and described parameters, constraints (enum, minLength, pattern, format), additionalProperties: false, and readOnlyHint annotations where they apply.
PASS Declarative form field quality 3/3 pts
No declarative forms; imperative tool parameters are evaluated under schema quality.
PART Tool names made of a verb and an object 2/3 pts
5 of 8 names follow the verb and object form. To rename: explain_prediction, assess_upset_risk, build_match_shortlist.
How to fix: Name each tool after the action it performs: a verb followed by its object, for example search_products, get_order_status or submit_contact_form. A vague name (data, form1, search) forces the agent to read the description to guess what the tool does.
FAIL Origin Trial token 0/12 pts
No origin-trial token found. While WebMCP is in origin trial, stable Chrome only exposes modelContext to origins that serve a valid token.
How to fix: Register your origin at developer.chrome.com/origintrials for the WebMCP trial and serve the token in a meta http-equiv="origin-trial" tag. Without it, stable Chrome does not expose modelContext to your visitors while the API is in trial.
FAIL Discovery manifest at /.well-known/webmcp 0/6 pts
No valid JSON at /.well-known/webmcp (status 404).
How to fix: Publish a JSON file at /.well-known/webmcp describing your tools. It is not part of the official spec, but it lets crawlers and static tools discover what your site offers.
FAIL Manifest describes tools 0/3 pts
The manifest does not describe any tools.
How to fix: Add a "tools" array with name, description and inputSchema for each tool.
FAIL Manifest served as application/json 0/3 pts
No manifest to evaluate.
How to fix: Serve the manifest with the Content-Type: application/json header.
PASS Tools on more than the entry page 6/6 pts
All 1 checked pages expose tools.
FAIL The surface adapts to the page 0/14 pts
Every page exposes exactly the same tools, so nothing is tied to the current page.
How to fix: Add tools tied to the page the agent is on: the details of that product or service, that page form, search within the current section. The same tools everywhere is a header, not a capability.
Tools registered by this page
| Name | Description | Parameters | Read-only |
|---|---|---|---|
get_matchday_overview | Returns the prototype scope, match count, model identity, and safety disclaimer. Use befor... | 0 | yes |
list_matches | Lists all curated match scenarios, ranked for a balanced, favorites-first, or upset-focuse... | 1 | yes |
get_match_details | Returns teams, signals, narrative context, and prediction probabilities for one match scen... | 1 | yes |
compare_teams | Compares power, form, attack, and defense signals for both teams in one scenario. | 1 | yes |
explain_prediction | Explains the predicted favorite, confidence, strongest signals, and a counterfactor for on... | 1 | yes |
assess_upset_risk | Returns a low, medium, or high upset-risk assessment with volatility and outcome-gap conte... | 1 | yes |
set_fan_preferences | Applies a ranking lens and optional favorite team to this browser session. This reversible... | 2 | no |
build_match_shortlist | Replaces the session watchlist with one to three valid match identifiers. This local actio... | 1 | no |
Captured live from modelContext.registerTool() calls while the page ran. A static HTML scan cannot see these.
Not measurable remotely, so not scored: end-to-end tool execution by an agent, human-in-the-loop consent handling, and result quality. Test those with the Model Context Tool Inspector extension in a WebMCP-capable Chrome.
Push this score higher?
GOAI implements WebMCP end to end: imperative tools, valid schemas, the origin trial token and the discovery manifest.