# verified.md

verified.md is an agent-readiness scanner and certification registry. It
checks whether a website is easy for AI agents to read, trust, and transact
with, then issues a score and a certification status other agents can query.

## What this service does

- Scans a domain against 14 agent-readiness checks (agents.md, llms.txt,
  robots.txt AI directives, markdown content negotiation, structured data,
  sitemap, MCP server card, .well-known/verified.md, x402 payment support,
  SSL, meta hygiene, content readability, bot access).
- Stores scan history and computes a weighted 0-100 score with an A+ to F
  grade.
- Exposes a certification lookup endpoint so agents can decide whether to
  proceed, proceed with caution, or treat a domain as unknown before
  transacting with it.
- Exposes the same scan/report/verify functionality as a Streamable HTTP
  MCP server at POST /mcp, so an MCP client can call it as tools instead of
  raw REST.

## Endpoints

| Method | Path                      | Description                                    |
|--------|---------------------------|--------------------------------------------------|
| POST   | /api/scan                 | Run a scan for {"domain": "example.com"}       |
| GET    | /api/report/:domain       | Latest stored scan report for a domain         |
| GET    | /verify/:domain           | Certification envelope + agent recommendation  |
| POST   | /mcp                      | Streamable HTTP MCP server (scan/report/verify tools) |
| GET    | /status                   | Service health                                 |
| GET    | /agents.md                | This file                                      |
| GET    | /llms.txt                 | Short LLM-facing summary                       |
| GET    | /.well-known/mcp.json     | MCP server card describing this API            |
| GET    | /.well-known/verified.md  | Self-attestation for the verified.md entity    |
| GET    | /badge/:domain.svg        | Embeddable SVG score badge for a domain        |
| GET    | /api/premium              | Experimental x402-metered stub (returns 402)   |

## Payments (x402, experimental)

verified.md intends to support x402 for agent-native micropayments over
HTTP 402. GET /api/premium is an early stub: it returns 402 Payment
Required with an X-Payment header signaling x402 support. No real payment
verification happens yet, but the intent is real: future metered endpoints
will settle through x402.

## Status

This is a rebuild in progress. Certification issuance and self-verification
flows are not yet live; scanning and reporting are the current focus.