{"id":"kaiserpermanente_org","version":"1.0","url":"https://healthy.kaiserpermanente.org","host":"kaiserpermanente.org","name":"Kaiser Permanente","category":"other","generatedAt":"2026-10-15T19:38:08.099Z","durationMs":103077,"checks":[{"id":"robots_assistants","door":"discover","title":"Robots policy for user triggered agents","status":"partial","points":2,"maxPoints":4,"finding":"Some user triggered agents are restricted in robots.txt.","evidence":[{"label":"ChatGPT User","value":"partly restricted","url":"https://healthy.kaiserpermanente.org/robots.txt"},{"label":"Claude User","value":"partly restricted","url":"https://healthy.kaiserpermanente.org/robots.txt"},{"label":"Perplexity User","value":"partly restricted","url":"https://healthy.kaiserpermanente.org/robots.txt"},{"label":"Gemini Deep Research","value":"partly restricted","url":"https://healthy.kaiserpermanente.org/robots.txt"}],"why":"When a customer asks an agent to look something up, it fetches the page as a user triggered agent. A site that blocks those agents cannot be consulted.","fix":"Allow the ChatGPT User, Claude User and Perplexity User agents in robots.txt for public product, pricing and help pages.","test":"web"},{"id":"llms_txt","door":"discover","title":"llms.txt guide for agents","status":"fail","points":0,"maxPoints":3,"finding":"No llms.txt file was found at the site root.","evidence":[{"label":"Checked","value":"/llms.txt and /llms-full.txt"}],"why":"An llms.txt file gives an agent a short map of what you offer and where the authoritative pages are.","fix":"Publish /llms.txt with links to product, pricing, support and location pages.","test":"web"},{"id":"structured_data","door":"discover","title":"Structured data on the home page","status":"fail","points":0,"maxPoints":3,"finding":"No JSON LD structured data was found on the home page.","evidence":[],"why":"Schema.org markup lets an agent read products, prices and questions as data instead of guessing from the layout.","fix":"Add JSON LD for your organization type, Product or Service, Offer and FAQPage on the pages customers ask about most.","test":"web"},{"id":"server_rendered","door":"discover","title":"Content available without running scripts","status":"pass","points":3,"maxPoints":3,"finding":"Most of the visible text is in the first HTML response.","evidence":[{"label":"Text in first response","value":"9999 characters"},{"label":"Text after scripts","value":"5681 characters"}],"why":"Many agents read raw HTML and do not run scripts. Text that appears only after scripts run is invisible to them.","fix":"Render product, pricing and help content on the server so the first response contains the text.","test":"web"},{"id":"sitemap_content","door":"discover","title":"Sitemap that includes help and pricing pages","status":"pass","points":2,"maxPoints":2,"finding":"Sitemap lists 1383 entries including help, pricing, product pages.","evidence":[{"label":"Sitemap","value":"https://healthy.kaiserpermanente.org/sitemap","url":"https://healthy.kaiserpermanente.org/sitemap"}],"why":"A sitemap tells an agent where answers live. That cuts wrong guesses and stale pages.","fix":"Publish a sitemap that includes help center, pricing and product pages.","test":"web"},{"id":"mcp_server","door":"connect","title":"MCP server","status":"fail","points":0,"maxPoints":8,"finding":"No MCP server, server card or registry entry was found for this organization.","evidence":[{"label":"Checked","value":"5 hosts, well known paths, live endpoints and the official registry"}],"why":"An MCP server is the native way for an agent to use your services with the customer's approval. It replaces screen scraping and password sharing.","fix":"Publish a remote MCP server with OAuth. Start with read only tools such as account status, orders or location search, and publish a server card at /.well-known/mcp/server-card.","test":"web"},{"id":"a2a_agent_card","door":"connect","title":"Agent card for agent to agent calls","status":"fail","points":0,"maxPoints":2,"finding":"No agent card was found.","evidence":[],"why":"An agent card lets other agents discover what your own agent can do and how to authenticate.","fix":"Publish /.well-known/agent-card.json describing skills and authentication.","test":"web"},{"id":"openapi_docs","door":"connect","title":"Public API documentation","status":"fail","points":0,"maxPoints":3,"finding":"No public API documentation was found.","evidence":[],"why":"A published OpenAPI document lets developers and agents build against stable, described endpoints.","fix":"Publish an OpenAPI document for customer facing APIs on a developer portal.","test":"web"},{"id":"open_banking","door":"connect","title":"Developer and data sharing program","status":"fail","points":0,"maxPoints":4,"finding":"No developer portal or data sharing program was found on public pages.","evidence":[],"why":"A data sharing program with a developer portal and standard APIs gives agents a consented path to customer data. Open banking is the best known example.","fix":"Document the program, the standard in use (for example FDX in US banking), the supported partners and a sandbox.","test":"web"},{"id":"webmcp_tools","door":"connect","title":"Browser tools exposed to agents","status":"fail","points":0,"maxPoints":3,"finding":"The sign in and home pages register no browser tools for agents.","evidence":[],"why":"WebMCP lets a page register tools that a browser agent can call directly instead of clicking through the interface.","fix":"Register tools for safe tasks such as location search and price lookup with navigator.modelContext.","test":"web"},{"id":"poppy_discovery","door":"connect","title":"Poppy file for personal agents","status":"fail","points":0,"maxPoints":0,"bonus":0,"bonusMax":3,"finding":"No Poppy file was found on this site.","evidence":[{"label":"Address checked","value":"https://healthy.kaiserpermanente.org/.well-known/poppy.json","url":"https://healthy.kaiserpermanente.org/.well-known/poppy.json"}],"why":"Poppy is an open draft standard from Sierra and Meta. A company publishes one small file that tells a customer's personal agent how to find it, how the customer signs in and which route to use: the company's own agent, an API or the website. Eight launch partners and dozens of design partners back it.","fix":"Publish a poppy.json file in the well known folder of your website. It names your organization, your sign in server and at least one route. Then make your sign in server list your domain in poppy_domains. The standard is a draft, so treat this as early work.","test":"web"},{"id":"oauth_metadata","door":"identity","title":"OAuth and OpenID metadata","status":"pass","points":5,"maxPoints":5,"finding":"Authorization server metadata is published at healthy.kaiserpermanente.org.","evidence":[{"label":"Issuer","value":"https://identityauth.kaiserpermanente.org","url":"https://healthy.kaiserpermanente.org/.well-known/openid-configuration"},{"label":"Grant types","value":"implicit, authorization_code, refresh_token, password, client_credentials"},{"label":"Scopes listed","value":"24"}],"why":"Published authorization server metadata tells a client where to send a customer to approve access.","fix":"Publish /.well-known/oauth-authorization-server and /.well-known/oauth-protected-resource for the customer facing APIs.","test":"web"},{"id":"pkce_registration","door":"identity","title":"PKCE and client registration","status":"pass","points":4,"maxPoints":4,"finding":"PKCE with S256 and a registration path for new clients are both published.","evidence":[{"label":"PKCE S256","value":"supported"},{"label":"Dynamic registration","value":"supported"},{"label":"Client ID metadata documents","value":"not listed"}],"why":"PKCE protects the approval step. Dynamic registration or client metadata documents let a new agent onboard without a manual review each time.","fix":"Require PKCE with S256 and support client ID metadata documents or dynamic client registration for approved agent clients.","test":"web"},{"id":"passkeys","door":"identity","title":"Passkeys at sign in","status":"partial","points":2,"maxPoints":4,"finding":"Passkeys are mentioned in published pages or sign in code, with no WebAuthn call observed when the page loaded.","evidence":[{"label":"Signal","value":"WebAuthn code present on identityauth.kaiserpermanente.org"}],"why":"A passkey lets a customer approve an agent action with a device gesture. It removes the passwords and one time codes that agents cannot handle.","fix":"Offer passkeys with conditional UI on the sign in page and for step up approvals.","test":"login"},{"id":"high_assurance","door":"identity","title":"High assurance authorization profile","status":"pass","points":3,"maxPoints":3,"finding":"The authorization server advertises a high assurance profile with pushed requests and sender constrained tokens.","evidence":[{"label":"PAR","value":"yes"},{"label":"DPoP","value":"yes"},{"label":"Mutual TLS","value":"no"},{"label":"Rich authorization requests","value":"no"}],"why":"Pushed authorization requests, sender constrained tokens and rich authorization requests let a provider approve one specific action instead of a blanket login.","fix":"Support PAR with DPoP or mutual TLS, and rich authorization requests for payments and account changes.","test":"web"},{"id":"delegate_access","door":"identity","title":"Documented delegate and data sharing controls","status":"fail","points":0,"maxPoints":4,"finding":"No public page on delegate access or connected app controls was found.","evidence":[],"why":"Customers need a place to see and revoke what an agent can do. Organizations need a documented route for authorized agents.","fix":"Publish a help page on delegate access and add a connected apps screen where customers revoke access.","test":"web"},{"id":"declared_agent_homepage","door":"web","title":"Home page for a declared agent","status":"pass","points":3,"maxPoints":3,"finding":"The home page loaded normally for a declared agent.","evidence":[{"label":"Status","value":"200"},{"label":"Response time","value":"1248 ms"}],"why":"A declared agent that is challenged or blocked at the first step cannot help the customer at all.","fix":"Allow declared agents through bot management on public pages, and verify them with signed requests.","test":"login"},{"id":"signin_reachable","door":"web","title":"Sign in page loads for a declared agent in a browser","status":"pass","points":4,"maxPoints":4,"finding":"The sign in page loaded in a browser for a declared agent.","evidence":[{"label":"Declared agent","value":"loaded in 12916 ms"},{"label":"Standard browser","value":"loaded in 13399 ms"},{"label":"Page","value":"https://identityauth.kaiserpermanente.org/as/authorization.oauth2?response_type=code&client_id=KPORGOauthClientPAWebSessionV1&redirect_uri=https%3A%2F%2Fhealthy.kaiserpermanente.org%2Fpa%2Foidc%2Fcb&state=eyJ6aXAiOiJERUYiLCJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2Iiwia2lkIjoiUTBIY0EyV3J2ZmQwc2FyeXBJa0VRMXcxRUwwIiwic3VmZml4IjoiZDNLVExYLjE3OTIwOTMzMzYifQ..Lg5NWuaMeAInK24ob7O_jQ.JQJBXKJFlLdjGlB7r_booEL0SEcjqDZ_rMhy6H8RkcyJkzmCRkFCkw1IsZ05nc57zBBp7rBUQCoHbBoWy-xbbuaUFEGFsoj1j5JbUZAgBkFSuvI6KFZf5y48rzBYdAMNDfAbZXC6y7oMEi8m7GLHyA.wdhNjK_Mc7maAl8oI5utZw&nonce=qWvr1YI0xQObsn-2OinyH7aUmDrh2qySuyWbacC9wRU&scope=openid&vnd_pi_requested_resource=https%3A%2F%2Fhealthy.kaiserpermanente.org%2Fsecure%2Finner-door&vnd_pi_application_name=KPORG_HEALTHY_AEMandPortal","url":"https://identityauth.kaiserpermanente.org/as/authorization.oauth2?response_type=code&client_id=KPORGOauthClientPAWebSessionV1&redirect_uri=https%3A%2F%2Fhealthy.kaiserpermanente.org%2Fpa%2Foidc%2Fcb&state=eyJ6aXAiOiJERUYiLCJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2Iiwia2lkIjoiUTBIY0EyV3J2ZmQwc2FyeXBJa0VRMXcxRUwwIiwic3VmZml4IjoiZDNLVExYLjE3OTIwOTMzMzYifQ..Lg5NWuaMeAInK24ob7O_jQ.JQJBXKJFlLdjGlB7r_booEL0SEcjqDZ_rMhy6H8RkcyJkzmCRkFCkw1IsZ05nc57zBBp7rBUQCoHbBoWy-xbbuaUFEGFsoj1j5JbUZAgBkFSuvI6KFZf5y48rzBYdAMNDfAbZXC6y7oMEi8m7GLHyA.wdhNjK_Mc7maAl8oI5utZw&nonce=qWvr1YI0xQObsn-2OinyH7aUmDrh2qySuyWbacC9wRU&scope=openid&vnd_pi_requested_resource=https%3A%2F%2Fhealthy.kaiserpermanente.org%2Fsecure%2Finner-door&vnd_pi_application_name=KPORG_HEALTHY_AEMandPortal"}],"why":"Where a customer must use the website, a browser agent has to reach the sign in page so it can hand control back to the customer.","fix":"Serve the sign in page to verified agent browsers, and use signed agent identity to separate them from attackers.","test":"login"},{"id":"agent_browser_parity","door":"web","title":"Same behavior for a declared agent and a standard browser","status":"pass","points":2,"maxPoints":2,"finding":"A declared agent and a standard browser got the same result.","evidence":[{"label":"Declared","value":"loaded"},{"label":"Browser","value":"loaded"}],"why":"If a declared agent is treated worse than an anonymous browser, honesty is penalized and agents will hide what they are.","fix":"Do not rank declared agents below anonymous browsers in bot management policy.","test":"login"},{"id":"form_semantics","door":"web","title":"Sign in form structure and autofill hints","status":"partial","points":2,"maxPoints":4,"finding":"100 percent of 5 fields have labels and 0 percent set autocomplete hints.","evidence":[{"label":"text field","value":"User ID; autocomplete: none"},{"label":"password field","value":"Password; autocomplete: none"},{"label":"text field","value":"Cookie list search; autocomplete: none"},{"label":"text field","value":"Search; autocomplete: none"},{"label":"text field","value":"Search; autocomplete: none"}],"why":"Labels and autocomplete hints let an agent and a password manager find the right field and hand over to the customer at the right moment.","fix":"Label every field and set autocomplete values for the username, the current password and the one time code.","test":"login"},{"id":"semantic_markup","door":"web","title":"Semantic page structure","status":"partial","points":1,"maxPoints":2,"finding":"The page structure is only partly readable by agents.","evidence":[{"label":"Landmarks","value":"3"},{"label":"Headings","value":"12"},{"label":"Named controls","value":"97 percent"},{"label":"Images with alt text","value":"32 percent"}],"why":"Landmarks, headings and named controls let an agent read the page the way a screen reader does.","fix":"Use landmark elements, headings in order, accessible names on buttons and alt text on images.","test":"login"},{"id":"terms_stance","door":"policy","title":"Terms on automated access","status":"partial","points":2,"maxPoints":4,"finding":"The terms read are silent on AI agents and automated access.","evidence":[],"why":"Terms that prohibit all automated access with no exception make every agent a violation, even when the customer authorized it.","fix":"Add an exception for authorized agents acting for the customer through approved interfaces.","test":"web"},{"id":"third_party_rules","door":"policy","title":"Third party access and data sharing rules","status":"fail","points":0,"maxPoints":3,"finding":"No third party access rules were found in the documents read.","evidence":[],"why":"Published rules tell customers and developers what is allowed. That keeps agents on approved paths.","fix":"Publish a third party access policy that names the approved interfaces and the consent model.","test":"web"},{"id":"ai_position","door":"policy","title":"Published position on AI agents","status":"fail","points":0,"maxPoints":3,"finding":"No published position on AI agents was found in the documents read.","evidence":[],"why":"A public position tells customers whether an agent acting for them is welcome, and under what conditions.","fix":"Publish a page that states how customer agents are handled and where to connect them.","test":"web"}],"homeAgentFetch":{"status":200,"ms":1248,"bytes":333590,"blocked":false,"thin":false},"login":{"url":"https://identityauth.kaiserpermanente.org/as/authorization.oauth2?response_type=code&client_id=KPORGOauthClientPAWebSessionV1&redirect_uri=https%3A%2F%2Fhealthy.kaiserpermanente.org%2Fpa%2Foidc%2Fcb&state=eyJ6aXAiOiJERUYiLCJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2Iiwia2lkIjoiUTBIY0EyV3J2ZmQwc2FyeXBJa0VRMXcxRUwwIiwic3VmZml4IjoiZDNLVExYLjE3OTIwOTMzMzYifQ..Lg5NWuaMeAInK24ob7O_jQ.JQJBXKJFlLdjGlB7r_booEL0SEcjqDZ_rMhy6H8RkcyJkzmCRkFCkw1IsZ05nc57zBBp7rBUQCoHbBoWy-xbbuaUFEGFsoj1j5JbUZAgBkFSuvI6KFZf5y48rzBYdAMNDfAbZXC6y7oMEi8m7GLHyA.wdhNjK_Mc7maAl8oI5utZw&nonce=qWvr1YI0xQObsn-2OinyH7aUmDrh2qySuyWbacC9wRU&scope=openid&vnd_pi_requested_resource=https%3A%2F%2Fhealthy.kaiserpermanente.org%2Fsecure%2Finner-door&vnd_pi_application_name=KPORG_HEALTHY_AEMandPortal","source":"link on home page","validated":true,"candidates":[{"url":"https://healthy.kaiserpermanente.org/slso-signon","source":"link on home page"},{"url":"https://healthy.kaiserpermanente.org/login","source":"common path"},{"url":"https://healthy.kaiserpermanente.org/signin","source":"common path"},{"url":"https://healthy.kaiserpermanente.org/sign-in","source":"common path"},{"url":"https://healthy.kaiserpermanente.org/online-banking/login","source":"common path"},{"url":"https://healthy.kaiserpermanente.org/auth/login","source":"common path"}],"menu":{"clicked":false,"label":"Sign in","navigatedTo":null,"linkCount":0,"hasPasswordField":false},"shots":{"agent":"/data/shots/kaiserpermanente_org_login_agent.jpg","browser":"/data/shots/kaiserpermanente_org_login_browser.jpg","home":"/data/shots/kaiserpermanente_org_home.jpg","menu":null},"agent":{"finalUrl":"https://identityauth.kaiserpermanente.org/as/authorization.oauth2?response_type=code&client_id=KPORGOauthClientPAWebSessionV1&redirect_uri=https%3A%2F%2Fhealthy.kaiserpermanente.org%2Fpa%2Foidc%2Fcb&state=eyJ6aXAiOiJERUYiLCJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2Iiwia2lkIjoiUTBIY0EyV3J2ZmQwc2FyeXBJa0VRMXcxRUwwIiwic3VmZml4IjoiZDNLVExYLjE3OTIwOTMzMzYifQ..Lg5NWuaMeAInK24ob7O_jQ.JQJBXKJFlLdjGlB7r_booEL0SEcjqDZ_rMhy6H8RkcyJkzmCRkFCkw1IsZ05nc57zBBp7rBUQCoHbBoWy-xbbuaUFEGFsoj1j5JbUZAgBkFSuvI6KFZf5y48rzBYdAMNDfAbZXC6y7oMEi8m7GLHyA.wdhNjK_Mc7maAl8oI5utZw&nonce=qWvr1YI0xQObsn-2OinyH7aUmDrh2qySuyWbacC9wRU&scope=openid&vnd_pi_requested_resource=https%3A%2F%2Fhealthy.kaiserpermanente.org%2Fsecure%2Finner-door&vnd_pi_application_name=KPORG_HEALTHY_AEMandPortal","status":200,"title":"Sign in | Kaiser Permanente","ms":12916,"blocked":false,"blockReason":null,"thin":false,"uaLabel":"declared agent","error":null,"vendors":[{"name":"F5 Shape","evidence":["cookie TS01cc593e","cookie TS01de35ba"]}],"textPreview":"Language English Kaiser Permanente Home < Back Care made simple. Sign in to your account. No account? Register now. All fields are required unless marked as optional. User ID Enter the unique User ID you created during registration. Save User ID (optional) Pas"},"browser":{"finalUrl":"https://identityauth.kaiserpermanente.org/as/authorization.oauth2?response_type=code&client_id=KPORGOauthClientPAWebSessionV1&redirect_uri=https%3A%2F%2Fhealthy.kaiserpermanente.org%2Fpa%2Foidc%2Fcb&state=eyJ6aXAiOiJERUYiLCJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2Iiwia2lkIjoiUTBIY0EyV3J2ZmQwc2FyeXBJa0VRMXcxRUwwIiwic3VmZml4IjoidlY5Y3dnLjE3OTIwOTMzNTEifQ..07vHWAVZqTr9cfbBQKq8Tg.DKnRjwNdMLABawh_WL3ZMsweGKRzGmh5yylAp-LI3q1ALvBKulcNmvU9zy8K-IWvpjSE_d7gkRVP9WLmfIOu7DTrDn9ppREwAZupC_5R7LjkI_6JNirMOA6P9rACV-n6bGlxLzvLBuKFy2f4RHHOOw.QuS3fCuEyXc8Z6Kqd3nyLQ&nonce=eCn4yhcUj4IaJvNNhrKjeFcwO8Ton3SMTEmqDhQfCZA&scope=openid&vnd_pi_requested_resource=https%3A%2F%2Fhealthy.kaiserpermanente.org%2Fsecure%2Finner-door&vnd_pi_application_name=KPORG_HEALTHY_AEMandPortal","status":200,"title":"Sign in | Kaiser Permanente","ms":13399,"blocked":false,"blockReason":null,"thin":false,"uaLabel":"browser","error":null,"vendors":[{"name":"F5 Shape","evidence":["cookie TS01cc593e","cookie TS01de35ba"]}],"textPreview":"Language English Kaiser Permanente Home < Back Care made simple. Sign in to your account. No account? Register now. All fields are required unless marked as optional. User ID Enter the unique User ID you created during registration. Save User ID (optional) Pas"},"botDefense":[{"name":"F5 Shape","evidence":["cookie TS01cc593e","cookie TS01de35ba"]}],"passkeys":{"found":true,"runtimeObserved":false,"evidence":["WebAuthn code present on identityauth.kaiserpermanente.org"]},"fields":[{"type":"text","label":"User ID","autocomplete":"","name":"pf.username"},{"type":"checkbox","label":"Save User ID (optional)","autocomplete":"","name":"pf.rememberUsername"},{"type":"password","label":"Password","autocomplete":"","name":"pf.pass"},{"type":"checkbox","label":"Do not show this again","autocomplete":"","name":""},{"type":"checkbox","label":"Targeting Technologies (Optional)","autocomplete":"","name":"ot-group-id-C0004"},{"type":"text","label":"Cookie list search","autocomplete":"","name":"vendor-search-handler"},{"type":"checkbox","label":"checkbox label","autocomplete":"","name":""},{"type":"checkbox","label":"checkbox label","autocomplete":"","name":""},{"type":"checkbox","label":"checkbox label","autocomplete":"","name":""},{"type":"checkbox","label":"checkbox label","autocomplete":"","name":""},{"type":"text","label":"Search","autocomplete":"","name":""},{"type":"text","label":"Search","autocomplete":"","name":""}]},"protocols":{"mcp":{"cards":[],"endpoints":[],"resources":[],"registry":{"checked":true,"matches":[]},"mentions":[],"found":false,"live":false,"protectedByOAuth":false,"registryListed":false,"checkedBases":5},"a2a":{"found":false},"aiPlugin":{"found":false},"agentsJson":{"found":false},"openapi":{"found":false},"poppy":{"found":false,"blocked":false,"unreachable":false,"tried":[{"host":"healthy.kaiserpermanente.org","status":404},{"host":"kaiserpermanente.org","status":200}],"url":"https://healthy.kaiserpermanente.org/.well-known/poppy.json"},"llms":{"llmsTxt":{"found":false,"status":410,"url":"https://healthy.kaiserpermanente.org/llms.txt","bytes":402698,"links":0,"preview":null},"llmsFull":{"found":false,"status":410,"url":"https://healthy.kaiserpermanente.org/llms-full.txt","bytes":402698,"links":0,"preview":null}},"robots":{"found":true,"status":200,"url":"https://healthy.kaiserpermanente.org/robots.txt","bytes":6653,"sitemaps":["https://healthy.kaiserpermanente.org/sitemap","https://healthy.kaiserpermanente.org/sitemapdam","https://healthy.kaiserpermanente.org/northern-california/sitemap","https://healthy.kaiserpermanente.org/southern-california/sitemap","https://healthy.kaiserpermanente.org/colorado/sitemap","https://healthy.kaiserpermanente.org/georgia/sitemap","https://healthy.kaiserpermanente.org/hawaii/sitemap","https://healthy.kaiserpermanente.org/maryland-virginia-washington-dc/sitemap","https://healthy.kaiserpermanente.org/oregon-washington/sitemap","https://healthy.kaiserpermanente.org/washington/sitemap","https://healthy.kaiserpermanente.org/northern-california/facilities/sitemap","https://healthy.kaiserpermanente.org/southern-california/facilities/sitemap","https://healthy.kaiserpermanente.org/colorado/facilities/sitemap","https://healthy.kaiserpermanente.org/georgia/facilities/sitemap","https://healthy.kaiserpermanente.org/hawaii/facilities/sitemap","https://healthy.kaiserpermanente.org/maryland-virginia-washington-dc/facilities/sitemap","https://healthy.kaiserpermanente.org/oregon-washington/facilities/sitemap","https://healthy.kaiserpermanente.org/washington/facilities/sitemap","https://healthy.kaiserpermanente.org/southern-california/physicians/sitemap","https://healthy.kaiserpermanente.org/colorado/clinicians/sitemap","https://healthy.kaiserpermanente.org/georgia/clinicians/sitemap","https://healthy.kaiserpermanente.org/hawaii/provider/sitemap","https://healthy.kaiserpermanente.org/oregon-washington/clinicians/sitemap","https://healthy.kaiserpermanente.org/washington/clinicians/sitemap","https://healthy.kaiserpermanente.org/sitemap-healthenc.xml","https://healthy.kaiserpermanente.org/sitemap-drugenc.xml","https://healthy.kaiserpermanente.org/northern-california/facilities/departments/sitemap","https://healthy.kaiserpermanente.org/southern-california/facilities/departments/sitemap","https://healthy.kaiserpermanente.org/colorado/facilities/departments/sitemap","https://healthy.kaiserpermanente.org/georgia/facilities/departments/sitemap","https://healthy.kaiserpermanente.org/hawaii/facilities/departments/sitemap","https://healthy.kaiserpermanente.org/maryland-virginia-washington-dc/facilities/departments/sitemap","https://healthy.kaiserpermanente.org/oregon-washington/facilities/departments/sitemap","https://healthy.kaiserpermanente.org/washington/facilities/departments/sitemap","https://espanol.kaiserpermanente.org/es/sitemap","https://espanol.kaiserpermanente.org/es/sitemapdam","https://espanol.kaiserpermanente.org/es/northern-california/sitemap","https://espanol.kaiserpermanente.org/es/southern-california/sitemap","https://espanol.kaiserpermanente.org/es/colorado/sitemap","https://espanol.kaiserpermanente.org/es/georgia/sitemap","https://espanol.kaiserpermanente.org/es/hawaii/sitemap","https://espanol.kaiserpermanente.org/es/maryland-virginia-washington-dc/sitemap","https://espanol.kaiserpermanente.org/es/oregon-washington/sitemap","https://espanol.kaiserpermanente.org/es/washington/sitemap","https://espanol.kaiserpermanente.org/es/northern-california/facilities/sitemap","https://espanol.kaiserpermanente.org/es/southern-california/facilities/sitemap","https://espanol.kaiserpermanente.org/es/colorado/facilities/sitemap","https://espanol.kaiserpermanente.org/es/georgia/facilities/sitemap","https://espanol.kaiserpermanente.org/es/hawaii/facilities/sitemap","https://espanol.kaiserpermanente.org/es/maryland-virginia-washington-dc/facilities/sitemap","https://espanol.kaiserpermanente.org/es/oregon-washington/facilities/sitemap","https://espanol.kaiserpermanente.org/es/washington/facilities/sitemap","https://espanol.kaiserpermanente.org/es/southern-california/physicians/sitemap","https://espanol.kaiserpermanente.org/es/colorado/clinicians/sitemap","https://espanol.kaiserpermanente.org/es/georgia/clinicians/sitemap","https://espanol.kaiserpermanente.org/es/hawaii/provider/sitemap","https://espanol.kaiserpermanente.org/es/oregon-washington/clinicians/sitemap","https://espanol.kaiserpermanente.org/es/washington/clinicians/sitemap","https://espanol.kaiserpermanente.org/es/sitemap-healthenc.xml","https://espanol.kaiserpermanente.org/es/sitemap-drugenc.xml","https://espanol.kaiserpermanente.org/es/northern-california/facilities/departments/sitemap","https://espanol.kaiserpermanente.org/es/southern-california/facilities/departments/sitemap","https://espanol.kaiserpermanente.org/es/colorado/facilities/departments/sitemap","https://espanol.kaiserpermanente.org/es/georgia/facilities/departments/sitemap","https://espanol.kaiserpermanente.org/es/hawaii/facilities/departments/sitemap","https://espanol.kaiserpermanente.org/es/maryland-virginia-washington-dc/facilities/departments/sitemap","https://espanol.kaiserpermanente.org/es/oregon-washington/facilities/departments/sitemap","https://espanol.kaiserpermanente.org/es/washington/facilities/departments/sitemap","https://healthy.kaiserpermanente.org/zh/northern-california/sitemap","https://healthy.kaiserpermanente.org/zh/southern-california/sitemap","https://healthy.kaiserpermanente.org/vi/northern-california/sitemap","https://healthy.kaiserpermanente.org/vi/southern-california/sitemap"],"managedAI":false,"agents":[{"agent":"ChatGPT-User","vendor":"OpenAI","kind":"assistant","allowed":"partial","rule":"7 disallowed paths","via":"*"},{"agent":"Claude-User","vendor":"Anthropic","kind":"assistant","allowed":"partial","rule":"7 disallowed paths","via":"*"},{"agent":"Perplexity-User","vendor":"Perplexity","kind":"assistant","allowed":"partial","rule":"7 disallowed paths","via":"*"},{"agent":"Gemini-Deep-Research","vendor":"Google","kind":"assistant","allowed":"partial","rule":"7 disallowed paths","via":"*"},{"agent":"GPTBot","vendor":"OpenAI","kind":"crawler","allowed":"partial","rule":"7 disallowed paths","via":"*"},{"agent":"ClaudeBot","vendor":"Anthropic","kind":"crawler","allowed":"partial","rule":"7 disallowed paths","via":"*"},{"agent":"OAI-SearchBot","vendor":"OpenAI","kind":"search","allowed":"partial","rule":"7 disallowed paths","via":"*"},{"agent":"PerplexityBot","vendor":"Perplexity","kind":"search","allowed":"partial","rule":"7 disallowed paths","via":"*"},{"agent":"Google-Extended","vendor":"Google","kind":"crawler","allowed":"partial","rule":"7 disallowed paths","via":"*"},{"agent":"Applebot-Extended","vendor":"Apple","kind":"crawler","allowed":"partial","rule":"7 disallowed paths","via":"*"},{"agent":"CCBot","vendor":"Common Crawl","kind":"crawler","allowed":"partial","rule":"7 disallowed paths","via":"*"},{"agent":"Bytespider","vendor":"ByteDance","kind":"crawler","allowed":"partial","rule":"7 disallowed paths","via":"*"}],"assistantsBlocked":[],"assistantsAllowed":[],"crawlersBlocked":[],"error":null},"sitemap":{"found":true,"url":"https://healthy.kaiserpermanente.org/sitemap","entries":1383,"isIndex":false,"hasHelp":true,"hasRates":true,"hasProducts":true},"webmcp":{"found":false,"tools":[],"declarativeForms":0,"markupHint":false},"structuredData":["Article"]},"identity":{"found":true,"servers":[{"issuer":"https://identityauth.kaiserpermanente.org","url":"https://healthy.kaiserpermanente.org/.well-known/openid-configuration","host":"healthy.kaiserpermanente.org","s256":true,"pkceMethods":["plain","S256"],"dcr":true,"cimd":false,"par":true,"parRequired":false,"dpop":true,"mtls":false,"rar":false,"privateKeyJwt":true,"grantTypes":["implicit","authorization_code","refresh_token","password","client_credentials","urn:pingidentity.com:oauth2:grant_type:validate_bearer","urn:ietf:params:oauth:grant-type:jwt-bearer","urn:ietf:params:oauth:grant-type:saml2-bearer","urn:ietf:params:oauth:grant-type:device_code","urn:ietf:params:oauth:grant-type:token-exchange","urn:openid:params:grant-type:ciba"],"scopes":["mobileMDO","deltadentalsco","mail","mobileMDK","SignOn","kphealthally","KPORGWeb","kphealthpartner","uid","KPEmployee","kpAppRolesJSON","KP2020","magicLink","kpwa","email","mykpmeds","eCOMM","kpmobile","openid","kprewards","profile","kpUniqueIdentifiersJSON","consumer.modify","NCALVideoVisit"],"acrValues":[],"deviceFlow":true,"tokenExchange":true,"clientCredentials":true,"fapiLike":true}],"checkedHosts":17,"answeredHosts":5,"silentHosts":["secure.kaiserpermanente.org","login.kaiserpermanente.org","auth.kaiserpermanente.org","sso.kaiserpermanente.org","id.kaiserpermanente.org","signin.kaiserpermanente.org","online.kaiserpermanente.org","accounts.kaiserpermanente.org","api.kaiserpermanente.org","developer.kaiserpermanente.org","digital.kaiserpermanente.org","connect.kaiserpermanente.org"]},"openBanking":{"pages":[],"portal":null,"fdx":false,"rule1033":false,"openBanking":false,"sandbox":false,"oauth":false,"dataAccessAgreement":false,"aggregators":[],"found":false},"policy":{"stance":"silent","documentsRead":3,"termsRead":1,"prohibits":[],"delegation":[],"thirdParty":[],"dataSharing":[],"ai":[],"credentialSharing":[],"documents":[{"url":"https://healthy.kaiserpermanente.org/termsconditions","title":"Terms & Conditions","status":200,"textLength":36656,"blockedForAgent":false,"flags":[]},{"url":"https://healthy.kaiserpermanente.org/pages/online-security/spotting-online-scams","title":"Look out for scams","status":200,"textLength":5969,"blockedForAgent":false,"flags":[]},{"url":"https://healthy.kaiserpermanente.org/alerts/p3/privacy-matter","title":"Learn more","status":200,"textLength":3410,"blockedForAgent":false,"flags":[]}]},"delegates":[],"voice":{"phone":{"e164":"+18002181059","pretty":"+1 800 218 1059","score":4,"context":"","source":"https://healthy.kaiserpermanente.org/support","tollFree":true,"seen":2,"kind":"unclassified"},"candidates":[{"e164":"+18002181059","pretty":"+1 800 218 1059","score":4,"context":"","source":"https://healthy.kaiserpermanente.org/support","tollFree":true,"seen":2,"kind":"unclassified"}],"status":"partial","calls":[{"testId":"V01","name":"Greeting and menu","group":"Reach and understand","timing":"business","objective":"Listen to the whole greeting and the complete main menu without pressing anything. Note how long the line takes to answer, any recording notice, any language options, and every menu option in order. If the menu repeats, note it and end the call.","status":"ended","startedAt":"2026-10-15T19:38:08.114Z","placedLocal":"Thursday 3:38 PM Eastern time","retellCallId":"call_682248d0a502604eec6520dbba4","disconnectionReason":"agent_hangup","durationSec":51.9,"transcript":[{"speaker":"line","text":"Thank you for calling Kaiser Permanente Colorado.","start":1.9,"end":4.4},{"speaker":"assistant","text":"I am listening to the greeting. Please continue","start":9.2,"end":12.5},{"speaker":"line","text":"If you","start":12.7,"end":13.2},{"speaker":"assistant","text":"with the","start":12.5,"end":13.2},{"speaker":"line","text":"think you are having a mental health or substance use crisis, call nine eight eight or nine one one. Or visit the nearest emergency room. For medical emergencies, call nine one one, or visit the nearest emergency room. This call may be monitored or recorded. Flu shots are here. Now available by appointment or via walk in at most locations. Ask us for details or visit k p dot org. Slash flu. Tell me the medical record number for the member you are calling about.","start":13.2,"end":42.5},{"speaker":"assistant","text":"The system asked for a medical record number, which I cannot provide. Ending the call now.","start":45.3,"end":51.6}],"summary":"The call reached Kaiser Permanente Colorado's automated system which provided emergency instructions, a recording notice, and flu shot information before requesting the medical record number. The user was unable to provide the requested medical record number, so the call was ended. No live person was reached during the call.","costCents":7.18,"extracted":{"alternate_auth_path":false,"answered":true,"assistant_acknowledged":"not_tested","auth_methods_requested":"medical record number","authorized_agent_path":"not_tested","callback_offered":false,"closed_message":false,"destination":"","emergency_line_offered":true,"first_human_words":"","greeting_summary":"Kaiser Permanente Colorado greeting with emergency instructions, recording notice, and flu shot information.","hold_seconds":0,"language_options":false,"menu_option_count":0,"menu_options":"","observations":"The system provided clear emergency instructions and a recording notice but did not offer language options or menu choices. It requested a medical record number but did not provide an alternative authentication method. The call ended when the user could not provide the requested information, and no live agent was reached.","otp_channels":"","otp_without_phone":false,"path_reached_words":"","queue_reached":false,"reached_human":false,"recording_notice":true,"reprompt_count":0,"seconds_to_answer":1.9,"seconds_to_human":0,"seconds_to_path":0,"speech_recognized":false,"system_hung_up":false,"voice_biometrics_prompt":false,"voice_biometrics_required":false,"voicemail_offered":false,"wait_estimate_announced":false,"zero_escape_worked":false},"score":{"points":3,"max":5,"verdict":"partial","rationale":"The line answered. It answered in about 2 seconds. No menu was captured. A recording notice was played."},"recording":{"url":"/data/recordings/kaiserpermanente_org_V01.wav","bytes":2491182,"durationSec":51.9}},{"testId":"V02","name":"Plain request","group":"Reach and understand","timing":"business","objective":"When asked how to help, say clearly: \"I need help with my account.\" Do not provide any account details. Note whether the system understands, how many times it reprompts, and where it sends you. End the call at the first authentication prompt.","status":"ended","startedAt":"2026-10-15T19:39:23.608Z","placedLocal":"Thursday 3:39 PM Eastern time","retellCallId":"call_25fefb14b7583f865f6eb32bd4e","disconnectionReason":"agent_hangup","durationSec":50.8,"transcript":[{"speaker":"line","text":"Thank you for Kaiser Permanente Colorado.","start":2.2,"end":4.8},{"speaker":"assistant","text":"Hello, I need help","start":9.5,"end":10.9},{"speaker":"line","text":"If you think you are having a mental health or substance use crisis, call nine eight eight or nine one one. Or visit the nearest emergency room. For medical emergencies, call nine one one, or visit the nearest emergency room. This call may be monitored or recorded. Flu shots are here. Now available by appointment or via walk in at most locations. Ask us for details or visit k p dot org. Slash flu. Tell me the medical record number for the member you are calling about.","start":10.8,"end":40.9},{"speaker":"assistant","text":"The system asked for a medical record number, which is an authentication step. Ending the call now.","start":43.7,"end":50.5}],"summary":"The call was made to Kaiser Permanente Colorado and included a greeting with emergency instructions and information about flu shots. The system requested the medical record number for authentication, but the caller ended the call before providing it.","costCents":7.04,"extracted":{"alternate_auth_path":false,"answered":true,"assistant_acknowledged":"not_tested","auth_methods_requested":"medical record number","authorized_agent_path":"not_tested","callback_offered":false,"closed_message":false,"destination":"","emergency_line_offered":true,"first_human_words":"","greeting_summary":"Kaiser Permanente Colorado greeting with emergency instructions, flu shot information, and a recording notice.","hold_seconds":0,"language_options":false,"menu_option_count":0,"menu_options":"","observations":"The system provided a clear greeting with emergency instructions and a recording notice. It requested authentication via medical record number but did not engage further when the caller ended the call. The system did not acknowledge or respond to the AI assistant statement as it was not tested.","otp_channels":"","otp_without_phone":false,"path_reached_words":"","queue_reached":false,"reached_human":false,"recording_notice":true,"reprompt_count":0,"seconds_to_answer":2.2,"seconds_to_human":0,"seconds_to_path":0,"speech_recognized":false,"system_hung_up":false,"voice_biometrics_prompt":false,"voice_biometrics_required":false,"voicemail_offered":false,"wait_estimate_announced":false,"zero_escape_worked":false},"score":{"points":2,"max":5,"verdict":"partial","rationale":"The spoken request was not understood."},"recording":{"url":"/data/recordings/kaiserpermanente_org_V02.wav","bytes":2440996,"durationSec":50.8}}],"aggregate":{"timings":{"business":{"completed":2,"total":5,"points":5,"max":10,"score":50,"verdict":null},"after_hours":{"completed":0,"total":1,"points":0,"max":0,"score":null,"verdict":null}},"completed":2,"total":6,"points":5,"max":10,"score":50,"groups":[{"group":"Reach and understand","score":50,"completed":2,"total":2},{"group":"Treat an assistant","score":null,"completed":0,"total":2},{"group":"People and identity","score":null,"completed":0,"total":2}],"verdicts":{"pass":0,"partial":2,"fail":0},"medianSecondsToHuman":null,"totalMinutes":1.7,"biometricsRequired":false,"authorizedAgentPath":"not_tested"},"startedAt":"2026-10-15T19:38:08.106Z","finishedAt":"2026-10-15T19:40:23.787Z","progress":{"done":2,"total":6},"note":null},"timeline":[{"step":"identify","label":"Identify the organization and load the home page","ms":18375,"ok":true},{"step":"robots","label":"Read robots rules for agents, llms.txt and sitemaps","ms":2576,"ok":true},{"step":"cards","label":"Look for agent cards, Poppy files, OpenAPI documents and browser tools","ms":30082,"ok":true},{"step":"links","label":"Map sign in, terms, help and developer pages","ms":0,"ok":true},{"step":"login_agent","label":"Load the sign in page as a declared agent","ms":13497,"ok":true},{"step":"login_browser","label":"Load the sign in page as a standard browser","ms":13961,"ok":true},{"step":"openbanking","label":"Check developer portals and data sharing programs","ms":432,"ok":true},{"step":"policy","label":"Read terms for automated access and delegation","ms":4149,"ok":true},{"step":"mcp","label":"Probe for MCP servers and check the official registry","ms":14858,"ok":true},{"step":"identity","label":"Discover OAuth and OpenID metadata","ms":3196,"ok":true},{"step":"phones","label":"Find published customer service phone numbers","ms":1759,"ok":true}],"previous":null,"history":[{"at":"2026-10-15T19:38:08.099Z","score":59,"level":2,"levelName":"Legible","cal":1,"doors":{"discover":72,"connect":0,"identity":91,"web":96,"policy":36},"pts":{"robots_assistants":2,"llms_txt":0,"structured_data":0,"server_rendered":3,"sitemap_content":2,"mcp_server":0,"a2a_agent_card":0,"openapi_docs":0,"open_banking":0,"webmcp_tools":0,"poppy_discovery":0,"oauth_metadata":5,"pkce_registration":4,"passkeys":2,"high_assurance":3,"delegate_access":0,"declared_agent_homepage":3,"signin_reachable":4,"agent_browser_parity":2,"form_semantics":2,"semantic_markup":1,"terms_stance":2,"third_party_rules":0,"ai_position":0}}],"brand":{"src":"/data/logos/kaiserpermanente_org.png?v=97125340","kind":"wordmark","invert":false,"tile":false,"w":360,"h":41,"source":"wikidata","from":"https://commons.wikimedia.org/wiki/Special:FilePath/KP%20logo.svg?width=900","crisp":true,"v":2},"summary":{"score":59,"measuredWeight":80,"provisional":true,"calibration":1,"level":{"id":2,"name":"Legible","summary":"An agent can read and cite your content.","nextLevel":{"id":3,"name":"Connectable","need":"Offer a programmatic path: a live MCP server, a data sharing program with OAuth metadata, or a verified Poppy file."}},"doors":[{"id":"discover","name":"Discoverability","weight":15,"measured":true,"score":72,"raw":47,"points":10.7},{"id":"connect","name":"Protocol access","weight":20,"measured":true,"score":0,"raw":0,"points":0},{"id":"identity","name":"Identity and delegation","weight":20,"measured":true,"score":91,"raw":70,"points":18.2},{"id":"web","name":"Web experience","weight":15,"measured":true,"score":96,"raw":80,"points":14.4},{"id":"voice","name":"Voice and IVR","weight":20,"measured":false,"score":null,"points":0,"completed":2,"total":6},{"id":"policy","name":"Policy and governance","weight":10,"measured":true,"score":36,"raw":20,"points":3.6}],"strengths":["OAuth and OpenID metadata","PKCE and client registration","Sign in page loads for a declared agent in a browser"],"gaps":[{"id":"mcp_server","title":"MCP server","lost":8},{"id":"open_banking","title":"Developer and data sharing program","lost":4},{"id":"delegate_access","title":"Documented delegate and data sharing controls","lost":4},{"id":"llms_txt","title":"llms.txt guide for agents","lost":3}],"headline":"Kaiser Permanente reaches level 2, Legible. Web experience is the strongest area at 96 out of 100. Protocol access is the weakest at 0."},"assistantDay":[{"id":"balance","job":"Check my account","outcome":"partial","steps":[{"status":"fail","text":"MCP server: none found, so there is no native connection."},{"status":"partial","text":"Website: the agent reaches the sign in page, and the customer completes sign in.","detail":"The agent cannot hold credentials safely, so it waits for the customer."},{"status":"partial","text":"Phone line: reaches the right place, with friction.","detail":"The spoken request was not understood."}]},{"id":"rates","job":"Find an answer","outcome":"works","steps":[{"status":"ok","text":"Website: public pages are readable by agents without signing in."},{"status":"partial","text":"Phone line: reaches the right place, with friction.","detail":"The spoken request was not understood."}]},{"id":"human","job":"Get me to a person","outcome":"untested","steps":[{"status":"untested","text":"Phone line: not tested yet."}]}]}