Loading

Paylocity scores 52 out of 100 on the Agent Readiness Index

Paylocity reaches level 1, Tolerated. Web experience is the strongest area at 96 out of 100. Identity and delegation is the weakest at 0.

Paylocity was scanned on October 14, 2026. Its score is 52 out of 100, level 1, Tolerated. Pages load for an agent. Nothing is built for one. To reach level 2, Legible: Publish at least one machine readable layer: llms.txt, structured data or server rendered content.

Website: paylocity.com

Score by area

AreaScoreWhat it asks
Discoverability46 out of 100, worth 15 pointsCan an agent find and read your pages?
Protocol access84 out of 100, worth 20 pointsCan an agent connect to you through MCP or an API?
Identity and delegation0 out of 100, worth 20 pointsCan a customer give an agent limited access without sharing a password?
Web experience96 out of 100, worth 15 pointsDoes your site work when an agent uses it?
Voice and IVRNot measured yetWhat happens when an agent calls your phone line?
Policy and governance36 out of 100, worth 10 pointsDo your terms allow agents that act for customers?

What is holding Paylocity back

  1. OAuth and OpenID metadata, 5 points lost. No OAuth or OpenID metadata was found on the 8 hosts that answered. 9 other hosts did not answer the scanner and could not be checked. Agents cannot discover where to send a customer to approve access. Fix: Publish /.well known/oauth authorization server and /.well known/oauth protected resource for the customer facing APIs.
  2. PKCE and client registration, 4 points lost. No authorization server metadata, so PKCE and client registration could not be confirmed. Fix: Require PKCE with S256 and support client ID metadata documents or dynamic client registration for approved agent clients.
  3. Passkeys at sign in, 4 points lost. No passkey signal was found on the sign in page or in the published pages read. A prompt that starts only after a person types is not visible to the scan. Fix: Offer passkeys with conditional UI on the sign in page and for step up approvals.
  4. Documented delegate and data sharing controls, 4 points lost. No public page on delegate access or connected app controls was found. Fix: Publish a help page on delegate access and add a connected apps screen where customers revoke access.

What already works

  • MCP server
  • Sign in page loads for a declared agent in a browser
  • Home page for a declared agent

How Paylocity compares

The average score for software is 61.4 out of 100 across 124 organizations. The average across all 1,421 scored organizations is 42.2 out of 100.

Similar organizations

More on this report