Loading

HealthCare.gov scores 31 out of 100 on the Agent Readiness Index

HealthCare.gov reaches level 2, Legible. Web experience is the strongest area at 100 out of 100. Protocol access is the weakest at 0.

HealthCare.gov was scanned on October 15, 2026. Its score is 31 out of 100, level 2, Legible. An agent can read and cite your content. To reach level 3, Connectable: Offer a programmatic path: a live MCP server, a data sharing program with OAuth metadata, or a verified Poppy file.

Website: healthcare.gov

Score by area

AreaScoreWhat it asks
Discoverability64 out of 100, worth 15 pointsCan an agent find and read your pages?
Protocol access0 out of 100, worth 20 pointsCan an agent connect to you through MCP or an API?
Identity and delegation0 out of 100, worth 20 pointsCan a customer give an agent limited access without sharing a password?
Web experience100 out of 100, worth 15 pointsDoes your site work when an agent uses it?
Voice and IVRNot measured yetWhat happens when an agent calls your phone line?
Policy and governance0 out of 100, worth 10 pointsDo your terms allow agents that act for customers?

What is holding HealthCare.gov back

  1. MCP server, 8 points lost. No MCP server, server card or registry entry was found for this organization. Fix: Publish a remote MCP server with OAuth. Start with read only tools such as account status, orders or location search, and publish a server card at /.well known/mcp/server card.
  2. OAuth and OpenID metadata, 5 points lost. No OAuth or OpenID metadata was found on the 3 hosts that answered. 12 other hosts did not answer the scanner and could not be checked. Agents cannot discover where to send a customer to approve access. Fix: Publish /.well known/oauth authorization server and /.well known/oauth protected resource for the customer facing APIs.
  3. Developer and data sharing program, 4 points lost. No developer portal or data sharing program was found on public pages. Fix: Document the program, the standard in use for example FDX in US banking, the supported partners and a sandbox.
  4. PKCE and client registration, 4 points lost. No authorization server metadata, so PKCE and client registration could not be confirmed. Fix: Require PKCE with S256 and support client ID metadata documents or dynamic client registration for approved agent clients.

What already works

  • Sign in page loads for a declared agent in a browser
  • Sign in form structure and autofill hints
  • Content available without running scripts

How HealthCare.gov compares

The average score for insurance is 43.8 out of 100 across 56 organizations. The average across all 1,420 scored organizations is 42.2 out of 100.

Similar organizations

More on this report