Loading
Hims & Hers scores 40 out of 100 on the Agent Readiness Index
Hims & Hers reaches level 0, Closed. Web experience is the strongest area at 93 out of 100. Protocol access is the weakest at 0.
Hims & Hers was scanned on October 14, 2026. Its score is 40 out of 100, level 0, Closed. Declared agents are blocked from the public website. To reach level 1, Tolerated: The home page must load for a declared agent and robots.txt must not block every agent.
Website: hims.com
Score by area
| Area | Score | What it asks |
|---|---|---|
| Discoverability | 89 out of 100, worth 15 points | Can an agent find and read your pages? |
| Protocol access | 0 out of 100, worth 20 points | Can an agent connect to you through MCP or an API? |
| Identity and delegation | 0 out of 100, worth 20 points | Can a customer give an agent limited access without sharing a password? |
| Web experience | 93 out of 100, worth 15 points | Does your site work when an agent uses it? |
| Voice and IVR | Not measured yet | What happens when an agent calls your phone line? |
| Policy and governance | 51 out of 100, worth 10 points | Do your terms allow agents that act for customers? |
What is holding Hims & Hers back
- MCP server, 8 points lost. No MCP server, server card or registry entry was found for this organization. Fix: Publish a remote MCP server with OAuth. Start with read only tools such as account status, orders or location search, and publish a server card at /.well known/mcp/server card.
- OAuth and OpenID metadata, 5 points lost. No OAuth or OpenID metadata was found on the 3 hosts that answered. 12 other hosts did not answer the scanner and could not be checked. Agents cannot discover where to send a customer to approve access. Fix: Publish /.well known/oauth authorization server and /.well known/oauth protected resource for the customer facing APIs.
- Developer and data sharing program, 4 points lost. No developer portal or data sharing program was found on public pages. Fix: Document the program, the standard in use for example FDX in US banking, the supported partners and a sandbox.
- PKCE and client registration, 4 points lost. No authorization server metadata, so PKCE and client registration could not be confirmed. Fix: Require PKCE with S256 and support client ID metadata documents or dynamic client registration for approved agent clients.
What already works
- Sign in page loads for a declared agent in a browser
- Sign in form structure and autofill hints
- Content available without running scripts
How Hims & Hers compares
The average score for healthcare is 44.3 out of 100 across 92 organizations. The average across all 1,421 scored organizations is 42.2 out of 100.
Similar organizations
- Cencora, 40 out of 100
- Dexcom, 40 out of 100
- GoodRx, 40 out of 100
- Beth Israel Lahey Health, 39 out of 100
- Community Health Systems, 39 out of 100
- Humana, 38 out of 100