Loading
Upgrade scores 82 out of 100 on the Agent Readiness Index
Upgrade reaches level 2, Legible. Discoverability is the strongest area at 98 out of 100. Identity and delegation is the weakest at 19.
Upgrade was scanned on November 14, 2026. Its score is 82 out of 100, level 2, Legible. An agent can read and cite your content. To reach level 3, Connectable: Offer a programmatic path: a live MCP server, a data sharing program with OAuth metadata, or a verified Poppy file.
Website: upgrade.com
Score by area
| Area | Score | What it asks |
|---|---|---|
| Discoverability | 98 out of 100, worth 22 points | Can an agent find and read your pages? |
| Protocol access | 36 out of 100, worth 14 points | Can an agent connect to you through MCP or an API? |
| Identity and delegation | 19 out of 100, worth 12 points | Can a customer give an agent limited access without sharing a password? |
| Web experience | 96 out of 100, worth 20 points | Does your site work when an agent uses it? |
| Voice and IVR | Not measured yet | What happens when an agent calls your phone line? |
| Policy and governance | 75 out of 100, worth 6 points | Do your terms allow agents that act for customers? |
| Marketing readiness | 82 out of 100, worth 18 points | Can an agent see what you sell, and buy or book it? |
What is holding Upgrade back
- MCP server, 7.2 points lost. No MCP server, server card or registry entry was found for this organization. Fix: Publish a remote MCP server with OAuth. Start with read only tools such as account status, orders or location search, and publish a server card at /.well known/mcp/server card.
- OAuth and OpenID metadata, 5.3 points lost. No OAuth or OpenID metadata was found on the 5 hosts that answered. 10 other hosts did not answer the scanner and could not be checked. Agents cannot discover where to send a customer to approve access. Fix: Publish /.well known/oauth authorization server and /.well known/oauth protected resource for the customer facing APIs.
- PKCE and client registration, 4.4 points lost. No authorization server metadata, so PKCE and client registration could not be confirmed. Fix: Require PKCE with S256 and support client ID metadata documents or dynamic client registration for approved agent clients.
- Documented delegate and data sharing controls, 4.4 points lost. No public page on delegate access or connected app controls was found. Fix: Publish a help page on delegate access and add a connected apps screen where customers revoke access.
What already works
- Prices and rates an agent can read
- Sign in page loads for a declared agent in a browser
- llms.txt guide for agents
How Upgrade compares
The average score for lenders is 54.7 out of 100 across 45 organizations. The average across all 2,353 scored organizations is 44.2 out of 100.
Similar organizations
- Achieve, 92 out of 100
- Plenti, 83 out of 100
- Better, 81 out of 100
- Happymoney, 79 out of 100
- Towerloan, 76 out of 100