Loading
Johnson & Johnson scores 54 out of 100 on the Agent Readiness Index
Johnson & Johnson reaches level 2, Legible. Identity and delegation is the strongest area at 84 out of 100. Protocol access is the weakest at 0.
Johnson & Johnson was scanned on October 2, 2026. Its score is 54 out of 100, level 2, Legible. An agent can read and cite your content. To reach level 3, Connectable: Offer a programmatic path: a live MCP server, a data sharing program with OAuth metadata, or a verified Poppy file.
Website: jnj.com
Score by area
| Area | Score | What it asks |
|---|---|---|
| Discoverability | 72 out of 100, worth 15 points | Can an agent find and read your pages? |
| Protocol access | 0 out of 100, worth 20 points | Can an agent connect to you through MCP or an API? |
| Identity and delegation | 84 out of 100, worth 20 points | Can a customer give an agent limited access without sharing a password? |
| Web experience | 78 out of 100, worth 15 points | Does your site work when an agent uses it? |
| Voice and IVR | Not measured yet | What happens when an agent calls your phone line? |
| Policy and governance | 36 out of 100, worth 10 points | Do your terms allow agents that act for customers? |
What is holding Johnson & Johnson back
- MCP server, 8 points lost. No MCP server, server card or registry entry was found for this organization. Fix: Publish a remote MCP server with OAuth. Start with read only tools such as account status, orders or location search, and publish a server card at /.well known/mcp/server card.
- Developer and data sharing program, 4 points lost. No developer portal or data sharing program was found on public pages. Fix: Document the program, the standard in use for example FDX in US banking, the supported partners and a sandbox.
- Passkeys at sign in, 4 points lost. No passkey signal was found on the sign in page or in the published pages read. A prompt that starts only after a person types is not visible to the scan. Fix: Offer passkeys with conditional UI on the sign in page and for step up approvals.
- Documented delegate and data sharing controls, 4 points lost. No public page on delegate access or connected app controls was found. Fix: Publish a help page on delegate access and add a connected apps screen where customers revoke access.
What already works
- OAuth and OpenID metadata
- PKCE and client registration
- Content available without running scripts
How Johnson & Johnson compares
The average score for healthcare is 44.3 out of 100 across 92 organizations. The average across all 1,421 scored organizations is 42.2 out of 100.
Similar organizations
- ResMed, 55 out of 100
- Scripps Health, 55 out of 100
- Calm, 54 out of 100
- One Medical, 54 out of 100
- Stanford Health Care, 54 out of 100
- UnitedHealth Group, 54 out of 100