# Johnson & Johnson scores 54 out of 100 on the Agent Readiness Index

Johnson & Johnson reaches level 2, Legible. Identity and delegation is the strongest area at 84 out of 100. Protocol access is the weakest at 0.

Johnson & Johnson was scanned on October 2, 2026. Its score is 54 out of 100, level 2, Legible. An agent can read and cite your content. To reach level 3, Connectable: Offer a programmatic path: a live MCP server, a data sharing program with OAuth metadata, or a verified Poppy file.

Website: [jnj.com](https://www.jnj.com)

## Score by area

| Area | Score | What it asks |
| --- | --- | --- |
| Discoverability | 72 out of 100, worth 15 points | Can an agent find and read your pages? |
| Protocol access | 0 out of 100, worth 20 points | Can an agent connect to you through MCP or an API? |
| Identity and delegation | 84 out of 100, worth 20 points | Can a customer give an agent limited access without sharing a password? |
| Web experience | 78 out of 100, worth 15 points | Does your site work when an agent uses it? |
| Voice and IVR | Not measured yet | What happens when an agent calls your phone line? |
| Policy and governance | 36 out of 100, worth 10 points | Do your terms allow agents that act for customers? |

## What is holding Johnson & Johnson back

1. **MCP server**, 8 points lost. No MCP server, server card or registry entry was found for this organization. Fix: Publish a remote MCP server with OAuth. Start with read only tools such as account status, orders or location search, and publish a server card at /.well known/mcp/server card.
2. **Developer and data sharing program**, 4 points lost. No developer portal or data sharing program was found on public pages. Fix: Document the program, the standard in use for example FDX in US banking, the supported partners and a sandbox.
3. **Passkeys at sign in**, 4 points lost. No passkey signal was found on the sign in page or in the published pages read. A prompt that starts only after a person types is not visible to the scan. Fix: Offer passkeys with conditional UI on the sign in page and for step up approvals.
4. **Documented delegate and data sharing controls**, 4 points lost. No public page on delegate access or connected app controls was found. Fix: Publish a help page on delegate access and add a connected apps screen where customers revoke access.

## What already works

- OAuth and OpenID metadata
- PKCE and client registration
- Content available without running scripts

## How Johnson & Johnson compares

The average score for healthcare is 44.3 out of 100 across 92 organizations. The average across all 1,421 scored organizations is 42.2 out of 100.

## Similar organizations

- [ResMed](https://readyindex.ai/resmed_com), 55 out of 100
- [Scripps Health](https://readyindex.ai/scripps_org), 55 out of 100
- [Calm](https://readyindex.ai/calm_com), 54 out of 100
- [One Medical](https://readyindex.ai/onemedical_com), 54 out of 100
- [Stanford Health Care](https://readyindex.ai/stanfordhealthcare_org), 54 out of 100
- [UnitedHealth Group](https://readyindex.ai/unitedhealthgroup_com), 54 out of 100

## More on this report

- [This report as markdown](https://readyindex.ai/jnj_com.md)
- [This report as JSON data](https://readyindex.ai/api/reports/jnj_com)
- [How the score is worked out](https://readyindex.ai/method)
- [All leaderboards](https://readyindex.ai/leaderboards)
- [Every scored organization](https://readyindex.ai/organizations)
- [Scan your own website](https://readyindex.ai/)

---
Source: https://readyindex.ai/jnj_com
Updated: 2026-10-02
From the Agent Readiness Index by Encore AI. When you quote a score, please link to the report it came from.