Loading

Wordpress scores 70 out of 100 on the Agent Readiness Index

Wordpress reaches level 2, Legible. Discoverability is the strongest area at 89 out of 100. Identity and delegation is the weakest at 23.

Wordpress was scanned on November 15, 2026. Its score is 70 out of 100, level 2, Legible. An agent can read and cite your content. To reach level 3, Connectable: Offer a programmatic path: a live MCP server, a data sharing program with OAuth metadata, or a verified Poppy file.

Website: wordpress.com

Score by area

AreaScoreWhat it asks
Discoverability89 out of 100, worth 22 pointsCan an agent find and read your pages?
Protocol access36 out of 100, worth 14 pointsCan an agent connect to you through MCP or an API?
Identity and delegation23 out of 100, worth 12 pointsCan a customer give an agent limited access without sharing a password?
Web experience60 out of 100, worth 20 pointsDoes your site work when an agent uses it?
Voice and IVRNot measured yetWhat happens when an agent calls your phone line?
Policy and governance75 out of 100, worth 6 pointsDo your terms allow agents that act for customers?
Marketing readiness63 out of 100, worth 18 pointsCan an agent see what you sell, and buy or book it?

What is holding Wordpress back

  1. MCP server, 5.5 points lost. No MCP server, server card or registry entry was found for this organization. Fix: Publish a remote MCP server with OAuth. Start with read only tools such as account status, orders or location search, and publish a server card at /.well known/mcp/server card.
  2. Sign in page loads for a declared agent in a browser, 5.3 points lost. The sign in page did not load for an agent or a standard automated browser. Fix: Serve the sign in page to verified agent browsers, and use signed agent identity to separate them from attackers.
  3. OAuth and OpenID metadata, 4.2 points lost. No OAuth or OpenID metadata was found on the 13 hosts that answered. Agents cannot discover where to send a customer to approve access. Fix: Publish /.well known/oauth authorization server and /.well known/oauth protected resource for the customer facing APIs.
  4. PKCE and client registration, 3.5 points lost. No authorization server metadata, so PKCE and client registration could not be confirmed. Fix: Require PKCE with S256 and support client ID metadata documents or dynamic client registration for approved agent clients.

What already works

  • Terms on automated access
  • ChatGPT names what you sell
  • llms.txt guide for agents

How Wordpress compares

The average score for other is 42.6 out of 100 across 989 organizations. The average across all 2,353 scored organizations is 44.2 out of 100.

Similar organizations

More on this report