# AI readiness of mastercard.com > Measured on the home page. Overall grade: Poor. Score 21/100, grade Poor. Measured 2026-09-04T15:10:55.343+00:00, engine ax-audit@3.6.0. ## Checks ### LLMs.txt — 0/100 - **FAIL** /llms.txt not found HTTP 403 Create a /llms.txt file at your site root following the llmstxt.org specification. It should be a Markdown file starting with "# Your Site Name" and include a description, sections, and links. https://lucioduran.com/projects/ax-audit/guides/llms-txt#not-found ### Robots.txt — 0/100 - **FAIL** /robots.txt not found Create a /robots.txt file at your site root. Add User-agent entries for AI crawlers (GPTBot, ClaudeBot, etc.) with Allow: / to grant access. https://lucioduran.com/projects/ax-audit/guides/robots-txt#not-found ### Agent Card (A2A) — 0/100 - **FAIL** /.well-known/agent.json not found HTTP 403 Create a /.well-known/agent.json file following the A2A (Agent-to-Agent) protocol. It should include name, description, url, and skills fields describing your site's capabilities. https://lucioduran.com/projects/ax-audit/guides/agent-json#not-found ### Security.txt — 0/100 - **FAIL** /.well-known/security.txt not found HTTP 403 Create a /.well-known/security.txt file per RFC 9116. At minimum, include Contact: and Expires: fields. See https://securitytxt.org/ for a generator. https://lucioduran.com/projects/ax-audit/guides/security-txt#not-found ### Meta Tags — 36/100 - **WARN** No AI meta tags (ai:*) found Add AI meta tags to your HTML : , , . https://lucioduran.com/projects/ax-audit/guides/meta-tags#no-ai-meta - **WARN** No rel="alternate" link to llms.txt in HTML Add to your : https://lucioduran.com/projects/ax-audit/guides/meta-tags#no-llms-alternate - **WARN** No rel="alternate" link to agent.json in HTML Add to your : https://lucioduran.com/projects/ax-audit/guides/meta-tags#no-agent-alternate - **WARN** No rel="me" identity links found Add rel="me" links to verify your identity across platforms: , . https://lucioduran.com/projects/ax-audit/guides/meta-tags#no-rel-me - **WARN** No OpenGraph meta tags found Add at minimum og:title, og:description, og:url, og:type, and og:image. Agents and link previews depend on these. https://lucioduran.com/projects/ax-audit/guides/meta-tags#no-opengraph - **WARN** No Twitter Card meta tags found Add twitter:card, twitter:title, twitter:description, and twitter:image so X / Threads / Bluesky / Discord agents render link previews correctly. https://lucioduran.com/projects/ax-audit/guides/meta-tags#no-twitter ### OpenAPI Spec — 0/100 - **FAIL** /.well-known/openapi.json not found HTTP 403 Create a /.well-known/openapi.json file with your API specification following the OpenAPI 3.x standard. See https://swagger.io/specification/ for the spec. https://lucioduran.com/projects/ax-audit/guides/openapi#not-found ### MCP (Model Context Protocol) — 0/100 - **FAIL** /.well-known/mcp.json not found HTTP 403 Create a /.well-known/mcp.json file describing your MCP server configuration. Include name, description, tools, and version fields. See https://modelcontextprotocol.io for the spec. https://lucioduran.com/projects/ax-audit/guides/mcp#not-found ### Sitemap — 0/100 - **FAIL** No sitemap found Tried robots.txt Sitemap: directive and /sitemap.xml Publish an XML sitemap at /sitemap.xml and reference it from robots.txt with: Sitemap: https://your-site.com/sitemap.xml https://lucioduran.com/projects/ax-audit/guides/sitemap#not-found ### TLS / HTTPS — 95/100 - **PASS** Site is served over HTTPS - **WARN** Could not verify HTTP→HTTPS redirect HTTP 403 on http://mastercard.com/ Test manually: a request to http://your-site.com should respond with 301 → https://your-site.com. https://lucioduran.com/projects/ax-audit/guides/tls-https#redirect-unknown - **PASS** HSTS max-age=31536000 - **PASS** HSTS includes subdomains - **PASS** HSTS preload-eligible ### AI Well-Known — 0/100 - **WARN** 0/5 emerging AI discovery files published - **WARN** ai.txt not found Tried: /.well-known/ai.txt Publish /.well-known/ai.txt declaring opt-in/opt-out signals for AI training. See https://site.spawning.ai/spawning-ai-txt for the format. https://lucioduran.com/projects/ax-audit/guides/well-known-ai#ai-txt - **WARN** genai.txt not found Tried: /.well-known/genai.txt Publish /.well-known/genai.txt declaring your generative-AI usage policy. https://lucioduran.com/projects/ax-audit/guides/well-known-ai#genai-txt - **WARN** ai-plugin.json not found Tried: /.well-known/ai-plugin.json, /ai-plugin.json Publish /ai-plugin.json (legacy ChatGPT plugin manifest). Schema: name_for_model, description_for_model, api.url. Still consumed by some agents. https://lucioduran.com/projects/ax-audit/guides/well-known-ai#ai-plugin - **WARN** agents.json not found Tried: /agents.json, /.well-known/agents.json Publish /agents.json describing your site as a callable agent (OpenAgents / Wildcard emerging spec). Includes name, description, and operations[]. https://lucioduran.com/projects/ax-audit/guides/well-known-ai#agents-json - **WARN** nlweb.json not found Tried: /.well-known/nlweb.json, /nlweb.json Publish /.well-known/nlweb.json (Microsoft NLWeb) so agents can interact with the site through a natural-language interface. https://lucioduran.com/projects/ax-audit/guides/well-known-ai#nlweb ### Content Negotiation — 0/100 (reports, does not score) - **FAIL** Homepage does not serve Markdown via content negotiation Got text/html (HTTP 403) for "Accept: text/markdown" Serve a Markdown representation of your pages when agents request "Accept: text/markdown". Agents like Claude Code and Cursor ask for it, and Markdown cuts token usage by ~80% vs HTML. Cloudflare ("Markdown for Agents") and Vercel can enable this without code changes. https://lucioduran.com/projects/ax-audit/guides/content-negotiation#not-supported - **WARN** No fallback found on the homepage If you cannot enable content negotiation, advertise a Markdown version with so agents can discover it. https://lucioduran.com/projects/ax-audit/guides/content-negotiation#no-alternate ### RSL License — 0/100 (reports, does not score) - **FAIL** No RSL license discovery found Checked robots.txt License directive, Link header, and Declare machine-readable licensing terms for your content with Really Simple Licensing. Add to robots.txt: License: https://your-site.com/license.xml — then publish the RSL document. See https://rslstandard.org. https://lucioduran.com/projects/ax-audit/guides/rsl#not-found ### Agent Access — 0/100 (reports, does not score) - **FAIL** Baseline homepage request failed — cannot compare crawler access HTTP 403 https://lucioduran.com/projects/ax-audit/guides/agent-access#baseline-unavailable ### Structured Data — 0/100 - **FAIL** No JSON-LD structured data found Add a