{"id":"encr_ai","version":"1.0","url":"https://www.encr.ai","host":"encr.ai","name":"Encr","category":"other","generatedAt":"2026-10-15T05:26:03.213Z","durationMs":43155,"checks":[{"id":"robots_assistants","door":"discover","title":"Robots policy for user triggered agents","status":"pass","points":4,"maxPoints":4,"finding":"robots.txt does not restrict user triggered agents on the public site.","evidence":[{"label":"ChatGPT User","value":"allowed","url":"https://www.encr.ai/robots.txt"},{"label":"Claude User","value":"allowed","url":"https://www.encr.ai/robots.txt"},{"label":"Perplexity User","value":"allowed","url":"https://www.encr.ai/robots.txt"},{"label":"Gemini Deep Research","value":"allowed","url":"https://www.encr.ai/robots.txt"}],"why":"When a customer asks an agent to look something up, it fetches the page as a user triggered agent. A site that blocks those agents cannot be consulted.","fix":"Allow the ChatGPT User, Claude User and Perplexity User agents in robots.txt for public product, pricing and help pages.","test":"web"},{"id":"llms_txt","door":"discover","title":"llms.txt guide for agents","status":"pass","points":3,"maxPoints":3,"finding":"llms.txt is published with 17 links.","evidence":[{"label":"File","value":"https://www.encr.ai/llms.txt","url":"https://www.encr.ai/llms.txt"}],"why":"An llms.txt file gives an agent a short map of what you offer and where the authoritative pages are.","fix":"Publish /llms.txt with links to product, pricing, support and location pages.","test":"web"},{"id":"structured_data","door":"discover","title":"Structured data on the home page","status":"pass","points":3,"maxPoints":3,"finding":"Structured data for products, services or questions found: Service.","evidence":[{"label":"Type","value":"Organization"},{"label":"Type","value":"WebSite"},{"label":"Type","value":"SoftwareApplication"},{"label":"Type","value":"Service"}],"why":"Schema.org markup lets an agent read products, prices and questions as data instead of guessing from the layout.","fix":"Add JSON LD for your organization type, Product or Service, Offer and FAQPage on the pages customers ask about most.","test":"web"},{"id":"server_rendered","door":"discover","title":"Content available without running scripts","status":"pass","points":3,"maxPoints":3,"finding":"Most of the visible text is in the first HTML response.","evidence":[{"label":"Text in first response","value":"6435 characters"},{"label":"Text after scripts","value":"4231 characters"}],"why":"Many agents read raw HTML and do not run scripts. Text that appears only after scripts run is invisible to them.","fix":"Render product, pricing and help content on the server so the first response contains the text.","test":"web"},{"id":"sitemap_content","door":"discover","title":"Sitemap that includes help and pricing pages","status":"pass","points":2,"maxPoints":2,"finding":"Sitemap lists 55 entries including help, pricing, product pages.","evidence":[{"label":"Sitemap","value":"https://www.gainencore.ai/sitemap.xml","url":"https://www.gainencore.ai/sitemap.xml"}],"why":"A sitemap tells an agent where answers live. That cuts wrong guesses and stale pages.","fix":"Publish a sitemap that includes help center, pricing and product pages.","test":"web"},{"id":"mcp_server","door":"connect","title":"MCP server","status":"pass","points":8,"maxPoints":8,"finding":"A live MCP server answers at https://mcp.encr.ai/mcp and requires OAuth with published resource metadata.","evidence":[{"label":"Endpoint","value":"https://mcp.encr.ai/mcp","url":"https://mcp.encr.ai/mcp"}],"why":"An MCP server is the native way for an agent to use your services with the customer's approval. It replaces screen scraping and password sharing.","fix":"Publish a remote MCP server with OAuth. Start with read only tools such as account status, orders or location search, and publish a server card at /.well-known/mcp/server-card.","test":"web"},{"id":"a2a_agent_card","door":"connect","title":"Agent card for agent to agent calls","status":"fail","points":0,"maxPoints":2,"finding":"No agent card was found.","evidence":[],"why":"An agent card lets other agents discover what your own agent can do and how to authenticate.","fix":"Publish /.well-known/agent-card.json describing skills and authentication.","test":"web"},{"id":"openapi_docs","door":"connect","title":"Public API documentation","status":"pass","points":3,"maxPoints":3,"finding":"A public OpenAPI document is published for Encore Agent Platform API.","evidence":[{"label":"Document","value":"https://developer.encr.ai/openapi.json","url":"https://developer.encr.ai/openapi.json"}],"why":"A published OpenAPI document lets developers and agents build against stable, described endpoints.","fix":"Publish an OpenAPI document for customer facing APIs on a developer portal.","test":"web"},{"id":"open_banking","door":"connect","title":"Developer and data sharing program","status":"partial","points":2,"maxPoints":4,"finding":"A developer portal or aggregator connection is mentioned, without a described data sharing program.","evidence":[{"label":"Developer portal","value":"https://developer.encr.ai","url":"https://developer.encr.ai"}],"why":"A data sharing program with a developer portal and standard APIs gives agents a consented path to customer data. Open banking is the best known example.","fix":"Document the program, the standard in use (for example FDX in US banking), the supported partners and a sandbox.","test":"web"},{"id":"webmcp_tools","door":"connect","title":"Browser tools exposed to agents","status":"pass","points":3,"maxPoints":3,"finding":"The page registers 3 browser tools for agents.","evidence":[{"label":"Tool","value":"get_encore_overview"},{"label":"Tool","value":"get_developer_resources"},{"label":"Tool","value":"open_contact_page"}],"why":"WebMCP lets a page register tools that a browser agent can call directly instead of clicking through the interface.","fix":"Register tools for safe tasks such as location search and price lookup with navigator.modelContext.","test":"web"},{"id":"poppy_discovery","door":"connect","title":"Poppy file for personal agents","status":"fail","points":0,"maxPoints":0,"bonus":0,"bonusMax":3,"finding":"No Poppy file was found on this site.","evidence":[{"label":"Address checked","value":"https://www.encr.ai/.well-known/poppy.json","url":"https://www.encr.ai/.well-known/poppy.json"}],"why":"Poppy is an open draft standard from Sierra and Meta. A company publishes one small file that tells a customer's personal agent how to find it, how the customer signs in and which route to use: the company's own agent, an API or the website. Eight launch partners and dozens of design partners back it.","fix":"Publish a poppy.json file in the well known folder of your website. It names your organization, your sign in server and at least one route. Then make your sign in server list your domain in poppy_domains. The standard is a draft, so treat this as early work.","test":"web"},{"id":"oauth_metadata","door":"identity","title":"OAuth and OpenID metadata","status":"pass","points":5,"maxPoints":5,"finding":"Authorization server metadata is published at auth.insait.io.","evidence":[{"label":"Issuer","value":"https://auth.insait.io/realms/insait","url":"https://auth.insait.io/realms/insait/.well-known/openid-configuration"},{"label":"Grant types","value":"authorization_code, client_credentials, implicit, password, refresh_token"},{"label":"Scopes listed","value":"7"}],"why":"Published authorization server metadata tells a client where to send a customer to approve access.","fix":"Publish /.well-known/oauth-authorization-server and /.well-known/oauth-protected-resource for the customer facing APIs.","test":"web"},{"id":"pkce_registration","door":"identity","title":"PKCE and client registration","status":"pass","points":4,"maxPoints":4,"finding":"PKCE with S256 and a registration path for new clients are both published.","evidence":[{"label":"PKCE S256","value":"supported"},{"label":"Dynamic registration","value":"supported"},{"label":"Client ID metadata documents","value":"not listed"}],"why":"PKCE protects the approval step. Dynamic registration or client metadata documents let a new agent onboard without a manual review each time.","fix":"Require PKCE with S256 and support client ID metadata documents or dynamic client registration for approved agent clients.","test":"web"},{"id":"passkeys","door":"identity","title":"Passkeys at sign in","status":"fail","points":0,"maxPoints":4,"finding":"No passkey signal was found on the sign in page or in the published pages read. A prompt that starts only after a person types is not visible to the scan.","evidence":[],"why":"A passkey lets a customer approve an agent action with a device gesture. It removes the passwords and one time codes that agents cannot handle.","fix":"Offer passkeys with conditional UI on the sign in page and for step up approvals.","test":"login"},{"id":"high_assurance","door":"identity","title":"High assurance authorization profile","status":"pass","points":3,"maxPoints":3,"finding":"The authorization server advertises a high assurance profile with pushed requests and sender constrained tokens.","evidence":[{"label":"PAR","value":"yes"},{"label":"DPoP","value":"yes"},{"label":"Mutual TLS","value":"yes"},{"label":"Rich authorization requests","value":"no"}],"why":"Pushed authorization requests, sender constrained tokens and rich authorization requests let a provider approve one specific action instead of a blanket login.","fix":"Support PAR with DPoP or mutual TLS, and rich authorization requests for payments and account changes.","test":"web"},{"id":"delegate_access","door":"identity","title":"Documented delegate and data sharing controls","status":"pass","points":4,"maxPoints":4,"finding":"Public pages describe both delegate access and data sharing controls.","evidence":[{"label":"Delegate access","value":"…app to work with their Encore account through the approved interfaces below. The assistant then acts on your behalf, with the access you approve and nothing more.Approved interfacesThe Encore Model Context Protocol (MCP) server at…","url":"https://www.encr.ai/legal/ai-agents-and-connected-apps"},{"label":"Data sharing","value":"…by creating an API key for it. Removing the member or deleting the key ends that access.Review and revoke access to connected appsOAuth connections, including MCP connectors in AI assistants: disconnect the connector in the…","url":"https://www.encr.ai/legal/ai-agents-and-connected-apps"}],"why":"Customers need a place to see and revoke what an agent can do. Organizations need a documented route for authorized agents.","fix":"Publish a help page on delegate access and add a connected apps screen where customers revoke access.","test":"web"},{"id":"declared_agent_homepage","door":"web","title":"Home page for a declared agent","status":"pass","points":3,"maxPoints":3,"finding":"The home page loaded normally for a declared agent.","evidence":[{"label":"Status","value":"200"},{"label":"Response time","value":"277 ms"}],"why":"A declared agent that is challenged or blocked at the first step cannot help the customer at all.","fix":"Allow declared agents through bot management on public pages, and verify them with signed requests.","test":"login"},{"id":"signin_reachable","door":"web","title":"Sign in page loads for a declared agent in a browser","status":"pass","points":4,"maxPoints":4,"finding":"The sign in page loaded in a browser for a declared agent.","evidence":[{"label":"Declared agent","value":"loaded in 4402 ms"},{"label":"Standard browser","value":"loaded in 4017 ms"},{"label":"Page","value":"https://auth.insait.io/realms/insait/protocol/openid-connect/auth?client_id=insait-frontend&redirect_uri=https%3A%2F%2Fplatform.encr.ai%2Fdashboard&state=5f87282f-75a0-4df5-933d-4035fd8dc700&response_mode=fragment&response_type=code&scope=openid&nonce=70792a40-6c74-43cd-9f85-e9af26cedc53&code_challenge=BKwiGMV9Hz_7Ck6DOalRpCNPVhspoxWOgPc19N42_8o&code_challenge_method=S256","url":"https://auth.insait.io/realms/insait/protocol/openid-connect/auth?client_id=insait-frontend&redirect_uri=https%3A%2F%2Fplatform.encr.ai%2Fdashboard&state=5f87282f-75a0-4df5-933d-4035fd8dc700&response_mode=fragment&response_type=code&scope=openid&nonce=70792a40-6c74-43cd-9f85-e9af26cedc53&code_challenge=BKwiGMV9Hz_7Ck6DOalRpCNPVhspoxWOgPc19N42_8o&code_challenge_method=S256"}],"why":"Where a customer must use the website, a browser agent has to reach the sign in page so it can hand control back to the customer.","fix":"Serve the sign in page to verified agent browsers, and use signed agent identity to separate them from attackers.","test":"login"},{"id":"agent_browser_parity","door":"web","title":"Same behavior for a declared agent and a standard browser","status":"pass","points":2,"maxPoints":2,"finding":"A declared agent and a standard browser got the same result.","evidence":[{"label":"Declared","value":"loaded"},{"label":"Browser","value":"loaded"}],"why":"If a declared agent is treated worse than an anonymous browser, honesty is penalized and agents will hide what they are.","fix":"Do not rank declared agents below anonymous browsers in bot management policy.","test":"login"},{"id":"form_semantics","door":"web","title":"Sign in form structure and autofill hints","status":"pass","points":4,"maxPoints":4,"finding":"100 percent of 1 fields have labels and 100 percent set autocomplete hints.","evidence":[{"label":"email field","value":"Email; autocomplete: email"}],"why":"Labels and autocomplete hints let an agent and a password manager find the right field and hand over to the customer at the right moment.","fix":"Label every field and set autocomplete values for the username, the current password and the one time code.","test":"login"},{"id":"semantic_markup","door":"web","title":"Semantic page structure","status":"partial","points":1,"maxPoints":2,"finding":"The page structure is only partly readable by agents.","evidence":[{"label":"Landmarks","value":"0"},{"label":"Headings","value":"1"},{"label":"Named controls","value":"100 percent"},{"label":"Images with alt text","value":"100 percent"}],"why":"Landmarks, headings and named controls let an agent read the page the way a screen reader does.","fix":"Use landmark elements, headings in order, accessible names on buttons and alt text on images.","test":"login"},{"id":"terms_stance","door":"policy","title":"Terms on automated access","status":"pass","points":4,"maxPoints":4,"finding":"The terms address delegates and do not restrict automated access.","evidence":[{"label":"Terms excerpt","value":"…work with their Encore account through the approved interfaces below. The assistant then acts on your behalf, with the access you approve and nothing more.Approved interfacesThe Encore Model Context Protocol (MCP)…","url":"https://www.encr.ai/legal/ai-agents-and-connected-apps"}],"why":"Terms that prohibit all automated access with no exception make every agent a violation, even when the customer authorized it.","fix":"Add an exception for authorized agents acting for the customer through approved interfaces.","test":"web"},{"id":"third_party_rules","door":"policy","title":"Third party access and data sharing rules","status":"pass","points":3,"maxPoints":3,"finding":"Third party access and data sharing rules are published.","evidence":[{"label":"Excerpt","value":"…access on Encore's own sign-in page and your password is never shared with the app.Third-party access and data sharing rulesThird-party apps and AI agents get access to your account data only after you, or an administrator of your organization, grant access through OAuth or by issuing an API…","url":"https://www.encr.ai/legal/ai-agents-and-connected-apps"},{"label":"Excerpt","value":"AI Agents and Connected AppsLast updated: October 14, 2026Our position on AI agentsEncore welcomes AI agents and AI assistants that act…","url":"https://www.encr.ai/legal/ai-agents-and-connected-apps"}],"why":"Published rules tell customers and developers what is allowed. That keeps agents on approved paths.","fix":"Publish a third party access policy that names the approved interfaces and the consent model.","test":"web"},{"id":"ai_position","door":"policy","title":"Published position on AI agents","status":"pass","points":3,"maxPoints":3,"finding":"Published documents describe AI agents.","evidence":[{"label":"Excerpt","value":"AI Agents and Connected AppsLast updated: October 14, 2026Our position on AI agentsEncore welcomes AI agents and AI…","url":"https://www.encr.ai/legal/ai-agents-and-connected-apps"}],"why":"A public position tells customers whether an agent acting for them is welcome, and under what conditions.","fix":"Publish a page that states how customer agents are handled and where to connect them.","test":"web"}],"homeAgentFetch":{"status":200,"ms":277,"bytes":128840,"blocked":false,"thin":false},"login":{"url":"https://auth.insait.io/realms/insait/protocol/openid-connect/auth?client_id=insait-frontend&redirect_uri=https%3A%2F%2Fplatform.encr.ai%2Fdashboard&state=5f87282f-75a0-4df5-933d-4035fd8dc700&response_mode=fragment&response_type=code&scope=openid&nonce=70792a40-6c74-43cd-9f85-e9af26cedc53&code_challenge=BKwiGMV9Hz_7Ck6DOalRpCNPVhspoxWOgPc19N42_8o&code_challenge_method=S256","source":"common path","validated":true,"candidates":[{"url":"https://www.encr.ai/login","source":"common path"},{"url":"https://www.encr.ai/signin","source":"common path"},{"url":"https://www.encr.ai/sign-in","source":"common path"},{"url":"https://www.encr.ai/online-banking/login","source":"common path"},{"url":"https://www.encr.ai/auth/login","source":"common path"},{"url":"https://www.encr.ai/logon","source":"common path"}],"menu":{"clicked":false,"label":null,"navigatedTo":null,"linkCount":0,"hasPasswordField":false},"shots":{"agent":"/data/shots/encr_ai_login_agent.jpg","browser":"/data/shots/encr_ai_login_browser.jpg","home":"/data/shots/encr_ai_home.jpg","menu":null},"agent":{"finalUrl":"https://auth.insait.io/realms/insait/protocol/openid-connect/auth?client_id=insait-frontend&redirect_uri=https%3A%2F%2Fplatform.encr.ai%2Fdashboard&state=5f87282f-75a0-4df5-933d-4035fd8dc700&response_mode=fragment&response_type=code&scope=openid&nonce=70792a40-6c74-43cd-9f85-e9af26cedc53&code_challenge=BKwiGMV9Hz_7Ck6DOalRpCNPVhspoxWOgPc19N42_8o&code_challenge_method=S256","status":200,"title":"Sign in to Encore AI","ms":4402,"blocked":false,"blockReason":null,"thin":false,"uaLabel":"declared agent","error":null,"vendors":[{"name":"Cloudflare","evidence":["cookie __cf_bm"]}],"textPreview":"Welcome back Enter your email to continue Email Continue Or continue with Sign in with Google Sign in with Microsoft Dont have an account? Create account Inside every obstacle lies a revenue moment Smoothly leading every conversation to a closed deal Orchestra"},"browser":{"finalUrl":"https://auth.insait.io/realms/insait/protocol/openid-connect/auth?client_id=insait-frontend&redirect_uri=https%3A%2F%2Fplatform.encr.ai%2Fdashboard&state=e1ea6598-5792-46b5-a961-686b6dfc5a90&response_mode=fragment&response_type=code&scope=openid&nonce=dfed9714-563e-43c3-8f6e-ec5b63d32538&code_challenge=eySm0tmDVlCd5NWeJyYJS85tPrik95IXTrnU3hUV3MY&code_challenge_method=S256","status":200,"title":"Sign in to Encore AI","ms":4017,"blocked":false,"blockReason":null,"thin":false,"uaLabel":"browser","error":null,"vendors":[{"name":"Cloudflare","evidence":["cookie __cf_bm"]}],"textPreview":"Welcome back Enter your email to continue Email Continue Or continue with Sign in with Google Sign in with Microsoft Dont have an account? Create account Inside every obstacle lies a revenue moment Smoothly leading every conversation to a closed deal Orchestra"},"botDefense":[{"name":"Cloudflare","evidence":["cookie __cf_bm"]}],"passkeys":{"found":false,"runtimeObserved":false,"evidence":[]},"fields":[{"type":"email","label":"Email","autocomplete":"email","name":"username"}]},"protocols":{"mcp":{"cards":[{"url":"https://mcp.encr.ai/.well-known/mcp/server-card","name":"encore-agent-platform","endpoint":"https://platform.gainencore.ai/api/v1/mcp","servers":null}],"endpoints":[{"url":"https://mcp.encr.ai/mcp","getStatus":405,"contentType":"application/json","confirmed":true,"authRequired":true,"challenge":{"raw":"Bearer realm=\"mcp\", resource_metadata=\"https://platform.gainencore.ai/api/v1/mcp/.well-known/oauth-protected-resource\"","resourceMetadata":"https://platform.gainencore.ai/api/v1/mcp/.well-known/oauth-protected-resource","scheme":"bearer"},"resourceMetadata":"https://platform.gainencore.ai/api/v1/mcp/.well-known/oauth-protected-resource","resource":{"url":"https://platform.gainencore.ai/api/v1/mcp/.well-known/oauth-protected-resource","resource":"https://platform.gainencore.ai/api/v1/mcp","authorizationServers":["https://auth.insait.io/realms/insait"],"scopes":["openid","email","profile","organization","offline_access"],"bearerMethods":["header"]},"tools":null}],"resources":[{"url":"https://platform.gainencore.ai/api/v1/mcp/.well-known/oauth-protected-resource","resource":"https://platform.gainencore.ai/api/v1/mcp","authorizationServers":["https://auth.insait.io/realms/insait"],"scopes":["openid","email","profile","organization","offline_access"],"bearerMethods":["header"]}],"registry":{"checked":false,"matches":[],"error":"timeout"},"mentions":[{"url":"https://www.encr.ai/legal/ai-agents-and-connected-apps","snippet":"alf, with the access you approve and nothing more.Approved interfacesThe Encore Model Context Protocol (MCP) server at https://platform.gainencore.ai/api/v1/mcp, protected by OAuth 2.0 with PKCE.The Encore REST API, doc…"},{"url":"https://www.encr.ai/legal/ai-agents-and-connected-apps","snippet":"alf, with the access you approve and nothing more.Approved interfacesThe Encore Model Context Protocol (MCP) server at https://platform.gainencore.ai/api/v1/mcp, protected by OAuth 2.0 with PKCE.The Encore REST API, doc…"},{"url":"https://www.encr.ai/legal/ai-agents-and-connected-apps","snippet":"alf, with the access you approve and nothing more.Approved interfacesThe Encore Model Context Protocol (MCP) server at https://platform.gainencore.ai/api/v1/mcp, protected by OAuth 2.0 with PKCE.The Encore REST API, doc…"},{"url":"https://developer.encr.ai","snippet":"\"X-API-Key: $ENCORE_API_KEY\" MCP server for AI assistants Encore runs a remote Model Context Protocol (MCP) server so AI assistants such as Claude and ChatGPT can work with your agents, conversations and knowledge bases…"}],"found":true,"live":true,"protectedByOAuth":true,"registryListed":false,"checkedBases":5},"a2a":{"found":false},"aiPlugin":{"found":false},"agentsJson":{"found":false},"openapi":{"found":true,"url":"https://developer.encr.ai/openapi.json","version":"3.1.0","title":"Encore Agent Platform API","paths":155},"poppy":{"found":false,"blocked":false,"unreachable":false,"tried":[{"host":"www.encr.ai","status":404},{"host":"encr.ai","status":404}],"url":"https://www.encr.ai/.well-known/poppy.json"},"llms":{"llmsTxt":{"found":true,"status":200,"url":"https://www.encr.ai/llms.txt","bytes":2007,"links":17,"preview":"# Encore > Encore (gainencore.ai) builds revenue-generating AI for enterprises, mainly in banking, lending and other regulated industries. Its patented Interaction Mining analyses every customer interaction (calls, chat…"},"llmsFull":{"found":false,"status":404,"url":"https://www.encr.ai/llms-full.txt","bytes":37530,"links":0,"preview":null}},"robots":{"found":true,"status":200,"url":"https://www.encr.ai/robots.txt","bytes":1060,"sitemaps":["https://www.gainencore.ai/sitemap.xml"],"managedAI":false,"agents":[{"agent":"ChatGPT-User","vendor":"OpenAI","kind":"assistant","allowed":true,"rule":"explicitly allowed","via":"ChatGPT-User"},{"agent":"Claude-User","vendor":"Anthropic","kind":"assistant","allowed":true,"rule":"explicitly allowed","via":"Claude-User"},{"agent":"Perplexity-User","vendor":"Perplexity","kind":"assistant","allowed":true,"rule":"explicitly allowed","via":"Perplexity-User"},{"agent":"Gemini-Deep-Research","vendor":"Google","kind":"assistant","allowed":true,"rule":"default group","via":"*"},{"agent":"GPTBot","vendor":"OpenAI","kind":"crawler","allowed":true,"rule":"explicitly allowed","via":"GPTBot"},{"agent":"ClaudeBot","vendor":"Anthropic","kind":"crawler","allowed":true,"rule":"explicitly allowed","via":"ClaudeBot"},{"agent":"OAI-SearchBot","vendor":"OpenAI","kind":"search","allowed":true,"rule":"explicitly allowed","via":"OAI-SearchBot"},{"agent":"PerplexityBot","vendor":"Perplexity","kind":"search","allowed":true,"rule":"explicitly allowed","via":"PerplexityBot"},{"agent":"Google-Extended","vendor":"Google","kind":"crawler","allowed":true,"rule":"explicitly allowed","via":"Google-Extended"},{"agent":"Applebot-Extended","vendor":"Apple","kind":"crawler","allowed":true,"rule":"explicitly allowed","via":"Applebot-Extended"},{"agent":"CCBot","vendor":"Common Crawl","kind":"crawler","allowed":true,"rule":"explicitly allowed","via":"CCBot"},{"agent":"Bytespider","vendor":"ByteDance","kind":"crawler","allowed":true,"rule":"default group","via":"*"}],"assistantsBlocked":[],"assistantsAllowed":["ChatGPT-User","Claude-User","Perplexity-User","Gemini-Deep-Research"],"crawlersBlocked":[],"error":null},"sitemap":{"found":true,"url":"https://www.gainencore.ai/sitemap.xml","entries":55,"isIndex":false,"hasHelp":true,"hasRates":true,"hasProducts":true},"webmcp":{"found":true,"tools":[{"name":"get_encore_overview","description":"Short overview of what Encore does, its products and where to read more."},{"name":"get_developer_resources","description":"Links to the Encore API reference, OpenAPI document and MCP server for AI assistants."},{"name":"open_contact_page","description":"Open the Encore contact page to request a demo or talk to sales. The person completes and sends the form themselves."}],"declarativeForms":0,"markupHint":false},"structuredData":["Organization","WebSite","SoftwareApplication","Service"]},"identity":{"found":true,"servers":[{"issuer":"https://auth.insait.io/realms/insait","url":"https://auth.insait.io/realms/insait/.well-known/openid-configuration","host":"auth.insait.io","s256":true,"pkceMethods":["plain","S256"],"dcr":true,"cimd":false,"par":true,"parRequired":false,"dpop":true,"mtls":true,"rar":false,"privateKeyJwt":true,"grantTypes":["authorization_code","client_credentials","implicit","password","refresh_token","urn:ietf:params:oauth:grant-type:device_code","urn:ietf:params:oauth:grant-type:token-exchange","urn:ietf:params:oauth:grant-type:uma-ticket","urn:openid:params:grant-type:ciba"],"scopes":["offline_access","organization","service_account","openid","email","profile","basic"],"acrValues":["0","1"],"deviceFlow":true,"tokenExchange":true,"clientCredentials":true,"fapiLike":true}],"checkedHosts":17,"answeredHosts":7,"silentHosts":["secure.encr.ai","login.encr.ai","auth.encr.ai","sso.encr.ai","id.encr.ai","signin.encr.ai","online.encr.ai","accounts.encr.ai","digital.encr.ai","connect.encr.ai"]},"openBanking":{"pages":[{"url":"https://www.encr.ai/legal/ai-agents-and-connected-apps","source":"site link","title":"AI Agents and Connected Apps | Encore","terms":["oauth"],"aggregators":[],"excerpt":"AI Agents and Connected AppsLast updated: October 14, 2026Our position on AI agentsEncore welcomes AI agents and AI agents that act on behalf of our customers. A customer can authorize an AI assi…"},{"url":"https://developer.encr.ai","source":"common subdomain","title":"Encore Developer Portal: API reference and MCP server","terms":["apiReference","oauth"],"aggregators":[],"excerpt":"API reference The REST API documentation is published as an OpenAPI 3.1 document: https://api.encr.ai/openapi.json. It covers agents, conversations and transcripts, knowledge bases, custom tools and …"},{"url":"https://api.encr.ai","source":"common subdomain","title":"Encore Developer Portal: API reference and MCP server","terms":["apiReference","oauth"],"aggregators":[],"excerpt":"API reference The REST API documentation is published as an OpenAPI 3.1 document: https://api.encr.ai/openapi.json. It covers agents, conversations and transcripts, knowledge bases, custom tools and …"}],"portal":{"url":"https://developer.encr.ai","title":"Encore Developer Portal: API reference and MCP server"},"fdx":false,"rule1033":false,"openBanking":false,"sandbox":false,"oauth":true,"dataAccessAgreement":false,"aggregators":[],"found":true},"policy":{"stance":"conditional","documentsRead":2,"termsRead":1,"prohibits":[],"delegation":[{"type":"delegation","label":"Addresses delegates or agents","excerpt":"…work with their Encore account through the approved interfaces below. The assistant then acts on your behalf, with the access you approve and nothing more.Approved interfacesThe Encore Model Context Protocol (MCP)…","url":"https://www.encr.ai/legal/ai-agents-and-connected-apps","title":"AI Agents & Connected Apps"}],"thirdParty":[{"type":"thirdPartyAccess","label":"Addresses third party access","excerpt":"…access on Encore's own sign-in page and your password is never shared with the app.Third-party access and data sharing rulesThird-party apps and AI agents get access to your account data only after you, or an administrator of your organization, grant access through OAuth or by issuing an API…","url":"https://www.encr.ai/legal/ai-agents-and-connected-apps","title":"AI Agents & Connected Apps"}],"dataSharing":[{"type":"dataSharing","label":"Describes data sharing controls","excerpt":"AI Agents and Connected AppsLast updated: October 14, 2026Our position on AI agentsEncore welcomes AI agents and AI assistants that act…","url":"https://www.encr.ai/legal/ai-agents-and-connected-apps","title":"AI Agents & Connected Apps"}],"ai":[{"type":"ai","label":"Mentions AI or agents","excerpt":"AI Agents and Connected AppsLast updated: October 14, 2026Our position on AI agentsEncore welcomes AI agents and AI…","url":"https://www.encr.ai/legal/ai-agents-and-connected-apps","title":"AI Agents & Connected Apps"},{"type":"ai","label":"Mentions AI or agents","excerpt":"…may record that call in accordance with applicable laws;If you communicate with us via a chatbot or similar means, we may record and store the information exchanged during such communication, in accordance…","url":"https://www.encr.ai/legal/privacy-policy","title":"Privacy"}],"credentialSharing":[],"documents":[{"url":"https://www.encr.ai/legal/ai-agents-and-connected-apps","title":"AI Agents & Connected Apps","status":200,"textLength":2385,"blockedForAgent":false,"flags":["Addresses third party access","Addresses delegates or agents","Mentions AI or agents","Describes data sharing controls"]},{"url":"https://www.encr.ai/legal/privacy-policy","title":"Privacy","status":200,"textLength":25090,"blockedForAgent":false,"flags":["Mentions AI or agents"]}]},"delegates":[{"type":"delegate","url":"https://www.encr.ai/legal/ai-agents-and-connected-apps","snippet":"…app to work with their Encore account through the approved interfaces below. The agent then acts on your behalf, with the access you approve and nothing more.Approved interfacesThe Encore Model Context Protocol (MCP) server at…"},{"type":"dataSharing","url":"https://www.encr.ai/legal/ai-agents-and-connected-apps","snippet":"…by creating an API key for it. Removing the member or deleting the key ends that access.Review and revoke access to connected appsOAuth connections, including MCP connectors in AI agents: disconnect the connector in the…"}],"voice":{"phone":null,"candidates":[],"status":"not_run","calls":[],"aggregate":null,"startedAt":null,"finishedAt":null,"progress":null,"note":null},"timeline":[{"step":"identify","label":"Identify the organization and load the home page","ms":5563,"ok":true},{"step":"robots","label":"Read robots rules for agents, llms.txt and sitemaps","ms":987,"ok":true},{"step":"cards","label":"Look for agent cards, Poppy files, OpenAPI documents and browser tools","ms":3439,"ok":true},{"step":"links","label":"Map sign in, terms, help and developer pages","ms":0,"ok":true},{"step":"login_agent","label":"Load the sign in page as a declared agent","ms":4736,"ok":true},{"step":"login_browser","label":"Load the sign in page as a standard browser","ms":4407,"ok":true},{"step":"openbanking","label":"Check developer portals and data sharing programs","ms":432,"ok":true},{"step":"policy","label":"Read terms for automated access and delegation","ms":334,"ok":true},{"step":"mcp","label":"Probe for MCP servers and check the official registry","ms":20734,"ok":true},{"step":"identity","label":"Discover OAuth and OpenID metadata","ms":2167,"ok":true},{"step":"phones","label":"Find published customer service phone numbers","ms":138,"ok":true}],"previous":{"generatedAt":"2026-10-14T15:25:17.858Z","score":70,"level":2},"history":[{"at":"2026-10-14T15:25:17.858Z","score":70,"level":2,"levelName":"Legible","cal":1,"doors":{"discover":100,"connect":44,"identity":36,"web":100,"policy":100},"pts":{"robots_assistants":4,"llms_txt":3,"structured_data":3,"server_rendered":3,"sitemap_content":2,"mcp_server":2,"a2a_agent_card":0,"openapi_docs":0,"open_banking":0,"webmcp_tools":3,"poppy_discovery":0,"oauth_metadata":0,"pkce_registration":0,"passkeys":0,"high_assurance":0,"delegate_access":4,"declared_agent_homepage":3,"signin_reachable":4,"agent_browser_parity":2,"form_semantics":4,"semantic_markup":1,"terms_stance":4,"third_party_rules":3,"ai_position":3}},{"at":"2026-10-15T05:26:03.213Z","score":98,"level":4,"levelName":"Trusted","cal":1,"doors":{"discover":100,"connect":96,"identity":96,"web":100,"policy":100},"pts":{"robots_assistants":4,"llms_txt":3,"structured_data":3,"server_rendered":3,"sitemap_content":2,"mcp_server":8,"a2a_agent_card":0,"openapi_docs":3,"open_banking":2,"webmcp_tools":3,"poppy_discovery":0,"oauth_metadata":5,"pkce_registration":4,"passkeys":0,"high_assurance":3,"delegate_access":4,"declared_agent_homepage":3,"signin_reachable":4,"agent_browser_parity":2,"form_semantics":4,"semantic_markup":1,"terms_stance":4,"third_party_rules":3,"ai_position":3}}],"brand":{"src":"/data/logos/encr_ai.png?v=abd7dc49","kind":"icon","invert":false,"tile":false,"w":160,"h":95,"source":"touch icon","from":"https://cdn.prod.website-files.com/6a5b72290d130488f412d2b2/6a5e734a393f9644b0128ac1_favicon.png","crisp":true,"v":2},"summary":{"score":98,"measuredWeight":80,"provisional":true,"calibration":1,"level":{"id":4,"name":"Trusted","summary":"A customer can authorize an agent with limited, revocable access.","nextLevel":{"id":5,"name":"Native","need":"Support agents on every channel: passkeys, a high assurance profile and a voice line scoring 70 or more."}},"doors":[{"id":"discover","name":"Discoverability","weight":15,"measured":true,"score":100,"raw":100,"points":15},{"id":"connect","name":"Protocol access","weight":20,"measured":true,"score":96,"raw":80,"points":19.2},{"id":"identity","name":"Identity and delegation","weight":20,"measured":true,"score":96,"raw":80,"points":19.2},{"id":"web","name":"Web experience","weight":15,"measured":true,"score":100,"raw":93,"points":14.9},{"id":"voice","name":"Voice and IVR","weight":20,"measured":false,"score":null,"points":0,"completed":0,"total":6},{"id":"policy","name":"Policy and governance","weight":10,"measured":true,"score":100,"raw":100,"points":10}],"strengths":["MCP server","OAuth and OpenID metadata","Robots policy for user triggered agents"],"gaps":[{"id":"passkeys","title":"Passkeys at sign in","lost":4},{"id":"a2a_agent_card","title":"Agent card for agent to agent calls","lost":2},{"id":"open_banking","title":"Developer and data sharing program","lost":2},{"id":"semantic_markup","title":"Semantic page structure","lost":1}],"headline":"Encr reaches level 4, Trusted. Discoverability is the strongest area at 100 out of 100. Protocol access is the weakest at 96."},"assistantDay":[{"id":"balance","job":"Check my account","outcome":"works","steps":[{"status":"ok","text":"MCP server: the agent connects and the customer approves access with OAuth."},{"status":"partial","text":"Website: the agent reaches the sign in page, and the customer completes sign in.","detail":"The agent cannot hold credentials safely, so it waits for the customer."},{"status":"untested","text":"Phone line: not tested yet."}]},{"id":"rates","job":"Find an answer","outcome":"works","steps":[{"status":"ok","text":"Website: public pages are readable by agents without signing in."},{"status":"untested","text":"Phone line: not tested yet."}]},{"id":"human","job":"Get me to a person","outcome":"untested","steps":[{"status":"untested","text":"Phone line: not tested yet."}]}]}