Free tool · no signup · runs now
auth.md checker
Agents register through the manual you publish, not through your login page. The checker reads the same file the audit requires.
Part of the AI agent trust checker group — also included in the free full scan.
Checks site-wide files at the domain root — any page URL on the domain gives the same result.
One free scan · anonymous preview · sign in to save the full report
auth.md valid: 1 registration path, 4 scopesStatic example for auth.md checker; run the check above for your own result.What it checks
See whether agents can find your registration path and scopes in auth.md.
Registration path presence, scope list, link toward the registration endpoint.
Reads the no-JS response only, never runs JS. Follows up to 5 redirects.
What good looks like
Good looks like one registration path with its scope list, linked toward the registration endpoint — the manual agents read instead of your login page. A missing or scope-less file fails; an unreachable host reports na.
How to fix it
Serve /auth.md describing one registration path and its scopes, linked toward the registration endpoint.
What the full scan adds
- All 34 checks in one pass — one URL, every category, a single report.
- Evidence on every row: the values found, why it fails, the fix, and a deep link per check.
- Your score against the global distribution — see where you stand.
- Sign in and the report is kept for 1 year; anonymous reports expire after 7 days.
Official source: auth.md protocol · Rule: agent-readiness v1 · checker library
Tracking a Google update? Run the update impact check or read the search update radar.
Frequently asked questions
Is the auth.md checker free?
Yes — one free run without an account, with an anonymous preview. Sign in to save the full report and keep the evidence.
How often should I run it?
After every deploy that touches routing, templates or the checked file — and after each Google core update, to confirm nothing regressed.
Does the check run JavaScript?
No — it reads the no-JS response only, exactly what a crawler or AI agent sees when it fetches the URL.
How is this different from a full audit?
This page runs one check with its full criteria and fix notes. The free full scan runs every category at once and keeps the evidence per URL — use it once you know which checks matter.