# Hims & Hers scores 40 out of 100 on the Agent Readiness Index

Hims & Hers reaches level 0, Closed. Web experience is the strongest area at 93 out of 100. Protocol access is the weakest at 0.

Hims & Hers was scanned on October 14, 2026. Its score is 40 out of 100, level 0, Closed. Declared agents are blocked from the public website. To reach level 1, Tolerated: The home page must load for a declared agent and robots.txt must not block every agent.

Website: [hims.com](https://www.hims.com)

## Score by area

| Area | Score | What it asks |
| --- | --- | --- |
| Discoverability | 89 out of 100, worth 15 points | Can an agent find and read your pages? |
| Protocol access | 0 out of 100, worth 20 points | Can an agent connect to you through MCP or an API? |
| Identity and delegation | 0 out of 100, worth 20 points | Can a customer give an agent limited access without sharing a password? |
| Web experience | 93 out of 100, worth 15 points | Does your site work when an agent uses it? |
| Voice and IVR | Not measured yet | What happens when an agent calls your phone line? |
| Policy and governance | 51 out of 100, worth 10 points | Do your terms allow agents that act for customers? |

## What is holding Hims & Hers back

1. **MCP server**, 8 points lost. No MCP server, server card or registry entry was found for this organization. Fix: Publish a remote MCP server with OAuth. Start with read only tools such as account status, orders or location search, and publish a server card at /.well known/mcp/server card.
2. **OAuth and OpenID metadata**, 5 points lost. No OAuth or OpenID metadata was found on the 3 hosts that answered. 12 other hosts did not answer the scanner and could not be checked. Agents cannot discover where to send a customer to approve access. Fix: Publish /.well known/oauth authorization server and /.well known/oauth protected resource for the customer facing APIs.
3. **Developer and data sharing program**, 4 points lost. No developer portal or data sharing program was found on public pages. Fix: Document the program, the standard in use for example FDX in US banking, the supported partners and a sandbox.
4. **PKCE and client registration**, 4 points lost. No authorization server metadata, so PKCE and client registration could not be confirmed. Fix: Require PKCE with S256 and support client ID metadata documents or dynamic client registration for approved agent clients.

## What already works

- Sign in page loads for a declared agent in a browser
- Sign in form structure and autofill hints
- Content available without running scripts

## How Hims & Hers compares

The average score for healthcare is 44.3 out of 100 across 92 organizations. The average across all 1,421 scored organizations is 42.2 out of 100.

## Similar organizations

- [Cencora](https://readyindex.ai/cencora_com), 40 out of 100
- [Dexcom](https://readyindex.ai/dexcom_com), 40 out of 100
- [GoodRx](https://readyindex.ai/goodrx_com), 40 out of 100
- [Beth Israel Lahey Health](https://readyindex.ai/bilh_org), 39 out of 100
- [Community Health Systems](https://readyindex.ai/chs_net), 39 out of 100
- [Humana](https://readyindex.ai/humana_com), 38 out of 100

## More on this report

- [This report as markdown](https://readyindex.ai/hims_com.md)
- [This report as JSON data](https://readyindex.ai/api/reports/hims_com)
- [How the score is worked out](https://readyindex.ai/method)
- [All leaderboards](https://readyindex.ai/leaderboards)
- [Every scored organization](https://readyindex.ai/organizations)
- [Scan your own website](https://readyindex.ai/)

---
Source: https://readyindex.ai/hims_com
Updated: 2026-10-14
From the Agent Readiness Index by Encore AI. When you quote a score, please link to the report it came from.