# CanaryGuard URL Agent Readiness Auditor

> CanaryGuard URL Agent Readiness Auditor is a paid API for AI agents from canaryguard-402.onrender.com, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-16).

Audits a domain or URL for AI agent readiness signals (llms.txt, .well-known/x402, openapi.json, MCP server card) and detects hidden CSS/DOM prompt-injection traps.

## Facts

- Endpoint: GET https://canaryguard-402.onrender.com/v1/url-agent-readiness?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-16
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/canaryguard-url-agent-readiness-auditor-ff4e3a38
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_oDW3Yh0nd9vj3Ir0l3t_P

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability canaryguard-url-agent-readiness-auditor-ff4e3a38
```

Example prompt: Can you audit https://example.com to check if it's ready for AI agents — does it have an llms.txt, openapi.json, MCP server card, or x402 support, and are there any hidden CSS or DOM prompt-injection traps on the page?

## When to prefer this

Choose this endpoint when you need to assess whether a website is safe and properly configured for AI agent interaction — specifically when you want to check for standard agentic discoverability signals (llms.txt, openapi.json, MCP, x402) AND simultaneously scan for hidden prompt-injection traps. It is more comprehensive than a simple file-existence check because it combines readiness auditing with adversarial trap detection in one call.

## Known failure modes

- URL is unreachable or times out — endpoint may return an error or partial results
- Domain blocks headless/automated requests — some checks may fail silently
- False negatives on prompt injection if obfuscation techniques are novel
- Malformed URL input causes validation error
- Target site uses bot-detection that prevents deep DOM inspection

## How this service works

Audits any domain or URL for AI agent readiness (llms.txt, .well-known/x402, openapi.json, MCP server card) and detects hidden CSS/DOM prompt-injection traps.

## Output

Returns a structured report indicating whether the target URL/domain exposes key AI agent discoverability files (llms.txt, .well-known/x402, openapi.json, MCP server card), along with detection results for hidden CSS or DOM prompt-injection traps that could compromise an AI agent visiting the page.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "url": {
   "type": "string"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/canaryguard-url-agent-readiness-auditor-ff4e3a38/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from canaryguard-402.onrender.com](https://www.zero.xyz/host/canaryguard-402.onrender.com/llms.txt)