Loading

Frontal scores 87 out of 100 on the Agent Readiness Index

Frontal reaches level 3, Connectable. Discoverability is the strongest area at 100 out of 100. Identity and delegation is the weakest at 19.

Frontal was scanned on November 12, 2026. Its score is 87 out of 100, level 3, Connectable. An agent can connect through an MCP server or a public API program. To reach level 4, Trusted: Let customers authorize agents: OAuth with PKCE, a registration path and documented delegate controls.

Website: frontal.so

Score by area

AreaScoreWhat it asks
Discoverability100 out of 100, worth 22 pointsCan an agent find and read your pages?
Protocol access96 out of 100, worth 14 pointsCan an agent connect to you through MCP or an API?
Identity and delegation19 out of 100, worth 12 pointsCan a customer give an agent limited access without sharing a password?
Web experience78 out of 100, worth 20 pointsDoes your site work when an agent uses it?
Voice and IVRNot measured yetWhat happens when an agent calls your phone line?
Policy and governance100 out of 100, worth 6 pointsDo your terms allow agents that act for customers?
Marketing readiness69 out of 100, worth 18 pointsCan an agent see what you sell, and buy or book it?

What is holding Frontal back

  1. OAuth and OpenID metadata, 4 points lost. No OAuth or OpenID metadata was found on the 1 hosts that answered. 12 other hosts did not answer the scanner and could not be checked. Agents cannot discover where to send a customer to approve access. Fix: Publish /.well known/oauth authorization server and /.well known/oauth protected resource for the customer facing APIs.
  2. An agent can start becoming a customer, 3.7 points lost. Become a customer: No link to become a customer on the home page. Fix: Make the call to action a plain link on the home page, keep the form behind it on a page an agent can load, label every field, and keep bot checks off the first step.
  3. PKCE and client registration, 3.4 points lost. No authorization server metadata, so PKCE and client registration could not be confirmed. Fix: Require PKCE with S256 and support client ID metadata documents or dynamic client registration for approved agent clients.
  4. Passkeys at sign in, 3.4 points lost. No passkey signal was found on the sign in page or in the published pages read. A prompt that starts only after a person types is not visible to the scan. Fix: Offer passkeys with conditional UI on the sign in page and for step up approvals.

What already works

  • MCP server
  • Robots policy for user triggered agents
  • Terms on automated access

How Frontal compares

The average score for other is 42.6 out of 100 across 989 organizations. The average across all 2,353 scored organizations is 44.2 out of 100.

Similar organizations

More on this report