# AI readiness of visa.com > Measured on the home page. Overall grade: Poor. Score 36/100, grade Poor. Measured 2026-09-04T15:10:40.297+00:00, engine ax-audit@3.6.0. ## Checks ### LLMs.txt — 0/100 - **FAIL** /llms.txt not found HTTP 404 Create a /llms.txt file at your site root following the llmstxt.org specification. It should be a Markdown file starting with "# Your Site Name" and include a description, sections, and links. https://lucioduran.com/projects/ax-audit/guides/llms-txt#not-found ### Robots.txt — 55/100 - **PASS** /robots.txt exists - **FAIL** No core AI crawlers explicitly configured Expected: GPTBot, ClaudeBot, ChatGPT-User, Claude-SearchBot, Google-Extended, PerplexityBot, OAI-SearchBot, CCBot Add User-agent entries for core AI crawlers in your robots.txt. For each crawler, add: User-agent: followed by Allow: / on the next line. https://lucioduran.com/projects/ax-audit/guides/robots-txt#no-core-crawlers - **WARN** No Sitemap directive found Add a Sitemap directive to your robots.txt: Sitemap: https://your-site.com/sitemap.xml https://lucioduran.com/projects/ax-audit/guides/robots-txt#missing-sitemap - **WARN** No Content-Signal directive found (optional) Declare how crawlers may use your content after access with the Content Signals Policy, e.g.: Content-Signal: search=yes, ai-train=no. Known signals: search, ai-input, ai-train. Generate yours at contentsignals.org. https://lucioduran.com/projects/ax-audit/guides/robots-txt#missing-content-signals - **WARN** 0/48 known AI crawlers have explicit rules Add explicit User-agent entries for more AI crawlers to maximize discoverability. https://lucioduran.com/projects/ax-audit/guides/robots-txt#low-coverage ### Agent Card (A2A) — 0/100 - **FAIL** /.well-known/agent.json not found HTTP 404 Create a /.well-known/agent.json file following the A2A (Agent-to-Agent) protocol. It should include name, description, url, and skills fields describing your site's capabilities. https://lucioduran.com/projects/ax-audit/guides/agent-json#not-found ### Security.txt — 0/100 - **FAIL** /.well-known/security.txt not found HTTP 404 Create a /.well-known/security.txt file per RFC 9116. At minimum, include Contact: and Expires: fields. See https://securitytxt.org/ for a generator. https://lucioduran.com/projects/ax-audit/guides/security-txt#not-found ### Meta Tags — 51/100 - **WARN** No AI meta tags (ai:*) found Add AI meta tags to your HTML : , , . https://lucioduran.com/projects/ax-audit/guides/meta-tags#no-ai-meta - **WARN** No rel="alternate" link to llms.txt in HTML Add to your : https://lucioduran.com/projects/ax-audit/guides/meta-tags#no-llms-alternate - **WARN** No rel="alternate" link to agent.json in HTML Add to your : https://lucioduran.com/projects/ax-audit/guides/meta-tags#no-agent-alternate - **WARN** No rel="me" identity links found Add rel="me" links to verify your identity across platforms: , . https://lucioduran.com/projects/ax-audit/guides/meta-tags#no-rel-me - **PASS** OpenGraph required tags present (og:title, og:description, og:url, og:type) - **WARN** OpenGraph recommended tags missing: og:site_name Add these for richer previews: og:site_name. https://lucioduran.com/projects/ax-audit/guides/meta-tags#og-recommended-missing - **PASS** Twitter Card required tags present (twitter:card, twitter:title, twitter:description) ### OpenAPI Spec — 0/100 - **FAIL** /.well-known/openapi.json not found HTTP 404 Create a /.well-known/openapi.json file with your API specification following the OpenAPI 3.x standard. See https://swagger.io/specification/ for the spec. https://lucioduran.com/projects/ax-audit/guides/openapi#not-found ### MCP (Model Context Protocol) — 0/100 - **FAIL** /.well-known/mcp.json not found HTTP 404 Create a /.well-known/mcp.json file describing your MCP server configuration. Include name, description, tools, and version fields. See https://modelcontextprotocol.io for the spec. https://lucioduran.com/projects/ax-audit/guides/mcp#not-found ### Sitemap — 0/100 - **FAIL** No sitemap found Tried robots.txt Sitemap: directive and /sitemap.xml Publish an XML sitemap at /sitemap.xml and reference it from robots.txt with: Sitemap: https://your-site.com/sitemap.xml https://lucioduran.com/projects/ax-audit/guides/sitemap#not-found ### TLS / HTTPS — 97/100 - **PASS** Site is served over HTTPS - **PASS** HTTP requests redirect to HTTPS - **PASS** HSTS max-age=31536000 - **PASS** HSTS includes subdomains - **WARN** HSTS lacks the preload directive Add preload (and ensure max-age >= 31536000 + includeSubDomains) and submit the domain at https://hstspreload.org for browser-built-in HTTPS enforcement. https://lucioduran.com/projects/ax-audit/guides/tls-https#hsts-no-preload ### AI Well-Known — 0/100 - **WARN** 0/5 emerging AI discovery files published - **WARN** ai.txt not found Tried: /.well-known/ai.txt Publish /.well-known/ai.txt declaring opt-in/opt-out signals for AI training. See https://site.spawning.ai/spawning-ai-txt for the format. https://lucioduran.com/projects/ax-audit/guides/well-known-ai#ai-txt - **WARN** genai.txt not found Tried: /.well-known/genai.txt Publish /.well-known/genai.txt declaring your generative-AI usage policy. https://lucioduran.com/projects/ax-audit/guides/well-known-ai#genai-txt - **WARN** ai-plugin.json not found Tried: /.well-known/ai-plugin.json, /ai-plugin.json Publish /ai-plugin.json (legacy ChatGPT plugin manifest). Schema: name_for_model, description_for_model, api.url. Still consumed by some agents. https://lucioduran.com/projects/ax-audit/guides/well-known-ai#ai-plugin - **WARN** agents.json not found Tried: /agents.json, /.well-known/agents.json Publish /agents.json describing your site as a callable agent (OpenAgents / Wildcard emerging spec). Includes name, description, and operations[]. https://lucioduran.com/projects/ax-audit/guides/well-known-ai#agents-json - **WARN** nlweb.json not found Tried: /.well-known/nlweb.json, /nlweb.json Publish /.well-known/nlweb.json (Microsoft NLWeb) so agents can interact with the site through a natural-language interface. https://lucioduran.com/projects/ax-audit/guides/well-known-ai#nlweb ### Content Negotiation — 0/100 (reports, does not score) - **FAIL** Homepage does not serve Markdown via content negotiation Got text/html (HTTP 200) for "Accept: text/markdown" Serve a Markdown representation of your pages when agents request "Accept: text/markdown". Agents like Claude Code and Cursor ask for it, and Markdown cuts token usage by ~80% vs HTML. Cloudflare ("Markdown for Agents") and Vercel can enable this without code changes. https://lucioduran.com/projects/ax-audit/guides/content-negotiation#not-supported - **WARN** No fallback found on the homepage If you cannot enable content negotiation, advertise a Markdown version with so agents can discover it. https://lucioduran.com/projects/ax-audit/guides/content-negotiation#no-alternate ### RSL License — 0/100 (reports, does not score) - **FAIL** No RSL license discovery found Checked robots.txt License directive, Link header, and Declare machine-readable licensing terms for your content with Really Simple Licensing. Add to robots.txt: License: https://your-site.com/license.xml — then publish the RSL document. See https://rslstandard.org. https://lucioduran.com/projects/ax-audit/guides/rsl#not-found ### Agent Access — 100/100 (reports, does not score) - **PASS** All 8 core AI crawler user-agents receive equivalent responses ### Structured Data — 0/100 - **FAIL** No JSON-LD structured data found Add a