Loading
Thetaray scores 88 out of 100 on the Agent Readiness Index
Thetaray reaches level 3, Connectable. Discoverability is the strongest area at 93 out of 100. Policy and governance is the weakest at 36.
Thetaray was scanned on November 12, 2026. Its score is 88 out of 100, level 3, Connectable. An agent can connect through an MCP server or a public API program. To reach level 4, Trusted: Let customers authorize agents: OAuth with PKCE, a registration path and documented delegate controls.
Website: thetaray.com
Score by area
| Area | Score | What it asks |
|---|---|---|
| Discoverability | 93 out of 100, worth 22 points | Can an agent find and read your pages? |
| Protocol access | 64 out of 100, worth 14 points | Can an agent connect to you through MCP or an API? |
| Identity and delegation | 81 out of 100, worth 12 points | Can a customer give an agent limited access without sharing a password? |
| Web experience | 79 out of 100, worth 20 points | Does your site work when an agent uses it? |
| Voice and IVR | Not measured yet | What happens when an agent calls your phone line? |
| Policy and governance | 36 out of 100, worth 6 points | Do your terms allow agents that act for customers? |
| Marketing readiness | 85 out of 100, worth 18 points | Can an agent see what you sell, and buy or book it? |
What is holding Thetaray back
- Sign in page loads for a declared agent in a browser, 3 points lost. The sign in page is blocked for a declared agent but loads for a standard browser. Fix: Serve the sign in page to verified agent browsers, and use signed agent identity to separate them from attackers.
- Developer and data sharing program, 2.4 points lost. No developer portal or data sharing program was found on public pages. Fix: Document the program, the standard in use for example FDX in US banking, the supported partners and a sandbox.
- Semantic page structure, 2.2 points lost. The page structure is only partly readable by agents. Fix: Use landmark elements, headings in order, accessible names on buttons and alt text on images.
- Third party access and data sharing rules, 2 points lost. No third party access rules were found in the documents read. Fix: Publish a third party access policy that names the approved interfaces and the consent model.
What already works
- MCP server
- OAuth and OpenID metadata
- PKCE and client registration
How Thetaray compares
The average score for software is 62 out of 100 across 142 organizations. The average across all 2,353 scored organizations is 44.2 out of 100.
Similar organizations
- Launchdarkly, 88 out of 100
- Olo, 88 out of 100
- Square, 88 out of 100
- Apollo, 87 out of 100
- DocuSign, 87 out of 100
- Harvey, 87 out of 100