# Medibank scores 59 out of 100 on the Agent Readiness Index

Medibank reaches level 2, Legible. Web experience is the strongest area at 100 out of 100. Protocol access is the weakest at 0.

Medibank was scanned on October 14, 2026. Its score is 59 out of 100, level 2, Legible. An agent can read and cite your content. To reach level 3, Connectable: Offer a programmatic path: a live MCP server, a data sharing program with OAuth metadata, or a verified Poppy file.

Website: [medibank.com.au](https://www.medibank.com.au)

## Score by area

| Area | Score | What it asks |
| --- | --- | --- |
| Discoverability | 78 out of 100, worth 15 points | Can an agent find and read your pages? |
| Protocol access | 0 out of 100, worth 20 points | Can an agent connect to you through MCP or an API? |
| Identity and delegation | 84 out of 100, worth 20 points | Can a customer give an agent limited access without sharing a password? |
| Web experience | 100 out of 100, worth 15 points | Does your site work when an agent uses it? |
| Voice and IVR | Not measured yet | What happens when an agent calls your phone line? |
| Policy and governance | 36 out of 100, worth 10 points | Do your terms allow agents that act for customers? |

## What is holding Medibank back

1. **MCP server**, 8 points lost. No MCP server, server card or registry entry was found for this organization. Fix: Publish a remote MCP server with OAuth. Start with read only tools such as account status, orders or location search, and publish a server card at /.well known/mcp/server card.
2. **Developer and data sharing program**, 4 points lost. No developer portal or data sharing program was found on public pages. Fix: Document the program, the standard in use for example FDX in US banking, the supported partners and a sandbox.
3. **Passkeys at sign in**, 4 points lost. No passkey signal was found on the sign in page or in the published pages read. A prompt that starts only after a person types is not visible to the scan. Fix: Offer passkeys with conditional UI on the sign in page and for step up approvals.
4. **Documented delegate and data sharing controls**, 4 points lost. No public page on delegate access or connected app controls was found. Fix: Publish a help page on delegate access and add a connected apps screen where customers revoke access.

## What already works

- OAuth and OpenID metadata
- PKCE and client registration
- Sign in page loads for a declared agent in a browser

## How Medibank compares

The average score for insurance is 43.8 out of 100 across 57 organizations. The average across all 1,421 scored organizations is 42.2 out of 100.

## Similar organizations

- [Lemonade](https://readyindex.ai/lemonade_com), 63 out of 100
- [Principal Financial](https://readyindex.ai/principal_com), 62 out of 100
- [Mutual of Omaha](https://readyindex.ai/mutualofomaha_com), 61 out of 100
- [Genworth](https://readyindex.ai/genworth_com), 58 out of 100
- [Next Insurance](https://readyindex.ai/nextinsurance_com), 58 out of 100
- [Pacific Life](https://readyindex.ai/pacificlife_com), 58 out of 100

## More on this report

- [This report as markdown](https://readyindex.ai/medibank_com_au.md)
- [This report as JSON data](https://readyindex.ai/api/reports/medibank_com_au)
- [How the score is worked out](https://readyindex.ai/method)
- [All leaderboards](https://readyindex.ai/leaderboards)
- [Every scored organization](https://readyindex.ai/organizations)
- [Scan your own website](https://readyindex.ai/)

---
Source: https://readyindex.ai/medibank_com_au
Updated: 2026-10-14
From the Agent Readiness Index by Encore AI. When you quote a score, please link to the report it came from.