{"ok":true,"kind":"crawlcheck-capability-registry-entry","v":1,"domain":"cloudflare.com","page":"https://crawlcheck.io/registry/capabilities/cloudflare.com","row":{"domain":"cloudflare.com","host":"www.cloudflare.com","report_id":"m9lacvgakb","scanned_at":"2026-10-04T04:17:29.994Z","manifest":"c61d9e86cef72798188a7a1e69b31d2d466786ecda9164c431a9d44a743365b4","declared":23,"protocols":["agent_skill","mcp","openapi"],"by_policy":{"public_read_only":4,"unknown":2,"metadata":17},"verified":0,"mismatches":2,"self_scan":false},"policy_classes":[{"id":"public_read_only","safety":"read_only_public","label":"Public read-only","automatic":true,"invoke":"May be called without credentials. CrawlCheck calls it only to check the declaration: GET with no input, on the scanned origin."},{"id":"authenticated_read_only","safety":"read_only_authenticated","label":"Authenticated read-only","automatic":false,"invoke":"Never called by CrawlCheck. An agent needs the user's own credentials and consent."},{"id":"reversible_write","safety":"reversible_write","label":"Reversible write","automatic":false,"invoke":"Never invoked automatically. Needs the owner's written authorisation and a test account."},{"id":"irreversible_write","safety":"irreversible_write","label":"Irreversible write","automatic":false,"invoke":"Never invoked automatically. Deletes or changes something that cannot be undone."},{"id":"financial","safety":"financial","label":"Financial","automatic":false,"invoke":"Never invoked automatically. Moves money or creates a charge."},{"id":"external_communication","safety":"external_communication","label":"External communication","automatic":false,"invoke":"Never invoked automatically. Sends a message, email or notification to someone."},{"id":"identity","safety":"identity_or_account","label":"Identity and accounts","automatic":false,"invoke":"Never invoked automatically. Creates, signs in to or changes an account or credential."},{"id":"unknown","safety":"unknown","label":"Unknown","automatic":false,"invoke":"Never invoked. Its effect cannot be read from the declaration, so it is treated as the riskiest case."},{"id":"metadata","safety":"metadata_only","label":"Metadata","automatic":false,"invoke":"Nothing to invoke: a listing, a server card or a skill file, not an operation."}],"items":[{"capability_id":"cap1:7d105e4c1902c5b22dd5","protocol":"openapi","operation":"GET /llms.txt","method":"GET","endpoint":"https://www.cloudflare.com/llms.txt","declared":{"by":"https://www.cloudflare.com/openapi.json","declaration_sha256":"abdbb276f99fd64e33aa4255618cf0488c15e515a5c6b9107efb0833314ad249","authentication":"none","params_required":0,"media":["text/markdown"],"safety_class":"read_only_public","safety_basis":"HTTP GET with no declared security"},"policy":{"id":"public_read_only","label":"Public read-only","automatic":true,"invoke":"May be called without credentials. CrawlCheck calls it only to check the declaration: GET with no input, on the scanned origin."},"observed":{"state":"schema_mismatch","verified":false,"at":"2026-10-04T04:17:46.462Z","status":200,"content_type":"text/plain","sha256":"009fbbf1e6525b66978a9fe7a301c483541cf9f6b3d32511f5c1305df358d5e4","mismatches":["declared_media_mismatch"],"not_attempted_because":null}},{"capability_id":"cap1:15ca69b7e4f8ebc5755a","protocol":"openapi","operation":"GET /llms-full.txt","method":"GET","endpoint":"https://www.cloudflare.com/llms-full.txt","declared":{"by":"https://www.cloudflare.com/openapi.json","declaration_sha256":"abdbb276f99fd64e33aa4255618cf0488c15e515a5c6b9107efb0833314ad249","authentication":"none","params_required":0,"media":["text/markdown"],"safety_class":"read_only_public","safety_basis":"HTTP GET with no declared security"},"policy":{"id":"public_read_only","label":"Public read-only","automatic":true,"invoke":"May be called without credentials. CrawlCheck calls it only to check the declaration: GET with no input, on the scanned origin."},"observed":{"state":"schema_mismatch","verified":false,"at":"2026-10-04T04:17:46.462Z","status":200,"content_type":"text/plain","sha256":"51af0fb444103cf7998501131870973a20f858bca17a1cba058e9195df6eb242","mismatches":["declared_media_mismatch"],"not_attempted_because":null}},{"capability_id":"cap1:cab07b1e49da5e23e75a","protocol":"openapi","operation":"GET /.well-known/api-catalog","method":"GET","endpoint":"https://www.cloudflare.com/.well-known/api-catalog","declared":{"by":"https://www.cloudflare.com/openapi.json","declaration_sha256":"abdbb276f99fd64e33aa4255618cf0488c15e515a5c6b9107efb0833314ad249","authentication":"none","params_required":0,"media":["application/linkset+json"],"safety_class":"read_only_public","safety_basis":"HTTP GET with no declared security"},"policy":{"id":"public_read_only","label":"Public read-only","automatic":true,"invoke":"May be called without credentials. CrawlCheck calls it only to check the declaration: GET with no input, on the scanned origin."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"outside the per-scan call budget (2 GETs, 1 MCP tool)"}},{"capability_id":"cap1:ee562cb3b684140e9f7e","protocol":"openapi","operation":"GET /.well-known/agents.json","method":"GET","endpoint":"https://www.cloudflare.com/.well-known/agents.json","declared":{"by":"https://www.cloudflare.com/openapi.json","declaration_sha256":"abdbb276f99fd64e33aa4255618cf0488c15e515a5c6b9107efb0833314ad249","authentication":"none","params_required":0,"media":["application/json"],"safety_class":"read_only_public","safety_basis":"HTTP GET with no declared security"},"policy":{"id":"public_read_only","label":"Public read-only","automatic":true,"invoke":"May be called without credentials. CrawlCheck calls it only to check the declaration: GET with no input, on the scanned origin."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"outside the per-scan call budget (2 GETs, 1 MCP tool)"}},{"capability_id":"cap1:5dda7978a0db8a5323d1","protocol":"mcp","operation":"read_llms_txt","method":null,"endpoint":null,"declared":{"by":"https://www.cloudflare.com/.well-known/webmcp.json","declaration_sha256":"115ef806681d5ea0196950eb07208fa3f7dcfb35224c6cf610f6403196345b5c","authentication":"unknown","params_required":null,"media":null,"safety_class":"unknown","safety_basis":"its effect is not stated in the declaration"},"policy":{"id":"unknown","label":"Unknown","automatic":false,"invoke":"Never invoked. Its effect cannot be read from the declaration, so it is treated as the riskiest case."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"classed unknown: only read-only public actions are ever called"}},{"capability_id":"cap1:7bb32c19b448ff80bc21","protocol":"mcp","operation":"read_markdown_page","method":null,"endpoint":null,"declared":{"by":"https://www.cloudflare.com/.well-known/webmcp.json","declaration_sha256":"115ef806681d5ea0196950eb07208fa3f7dcfb35224c6cf610f6403196345b5c","authentication":"unknown","params_required":null,"media":null,"safety_class":"unknown","safety_basis":"its effect is not stated in the declaration"},"policy":{"id":"unknown","label":"Unknown","automatic":false,"invoke":"Never invoked. Its effect cannot be read from the declaration, so it is treated as the riskiest case."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"classed unknown: only read-only public actions are ever called"}},{"capability_id":"cap1:68b0122bbe3f775e132a","protocol":"mcp","operation":"server","method":null,"endpoint":"https://docs.mcp.cloudflare.com/mcp","declared":{"by":"https://www.cloudflare.com/.well-known/mcp/server-card.json","declaration_sha256":"296657d7bd0330bee2700f5de88edc054acc8637f6deb2b5cce8b9030f13706f","authentication":"unknown","params_required":null,"media":null,"safety_class":"metadata_only","safety_basis":"a server declaration; its tools are listed only by the server itself (tools/list), which is not called"},"policy":{"id":"metadata","label":"Metadata","automatic":false,"invoke":"Nothing to invoke: a listing, a server card or a skill file, not an operation."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"on another origin (docs.mcp.cloudflare.com): only the scanned origin is called"}},{"capability_id":"cap1:6ecdf73b01ac35b99bcd","protocol":"agent_skill","operation":"agents-sdk","method":null,"endpoint":"https://developers.cloudflare.com/.well-known/agent-skills/agents-sdk.tar.gz","declared":{"by":"https://www.cloudflare.com/.well-known/agent-skills/index.json","declaration_sha256":"fec5b71eb6bc30154cd96c5eb522effcdff29fd52f1ce5295f17b3c0ec76d04b","authentication":"none","params_required":null,"media":null,"safety_class":"metadata_only","safety_basis":"an instruction file an agent reads; not an operation"},"policy":{"id":"metadata","label":"Metadata","automatic":false,"invoke":"Nothing to invoke: a listing, a server card or a skill file, not an operation."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"on another origin (developers.cloudflare.com): only the scanned origin is called"}},{"capability_id":"cap1:4e706a8dbdaa6a2bcaf3","protocol":"agent_skill","operation":"basin","method":null,"endpoint":"https://developers.cloudflare.com/.well-known/agent-skills/basin.tar.gz","declared":{"by":"https://www.cloudflare.com/.well-known/agent-skills/index.json","declaration_sha256":"fec5b71eb6bc30154cd96c5eb522effcdff29fd52f1ce5295f17b3c0ec76d04b","authentication":"none","params_required":null,"media":null,"safety_class":"metadata_only","safety_basis":"an instruction file an agent reads; not an operation"},"policy":{"id":"metadata","label":"Metadata","automatic":false,"invoke":"Nothing to invoke: a listing, a server card or a skill file, not an operation."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"on another origin (developers.cloudflare.com): only the scanned origin is called"}},{"capability_id":"cap1:51d39c98a971868dfc49","protocol":"agent_skill","operation":"cloudflare","method":null,"endpoint":"https://developers.cloudflare.com/.well-known/agent-skills/cloudflare.tar.gz","declared":{"by":"https://www.cloudflare.com/.well-known/agent-skills/index.json","declaration_sha256":"fec5b71eb6bc30154cd96c5eb522effcdff29fd52f1ce5295f17b3c0ec76d04b","authentication":"none","params_required":null,"media":null,"safety_class":"metadata_only","safety_basis":"an instruction file an agent reads; not an operation"},"policy":{"id":"metadata","label":"Metadata","automatic":false,"invoke":"Nothing to invoke: a listing, a server card or a skill file, not an operation."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"on another origin (developers.cloudflare.com): only the scanned origin is called"}},{"capability_id":"cap1:5e4b11e1ccfa255bbf9b","protocol":"agent_skill","operation":"cloudflare-email-service","method":null,"endpoint":"https://developers.cloudflare.com/.well-known/agent-skills/cloudflare-email-service.tar.gz","declared":{"by":"https://www.cloudflare.com/.well-known/agent-skills/index.json","declaration_sha256":"fec5b71eb6bc30154cd96c5eb522effcdff29fd52f1ce5295f17b3c0ec76d04b","authentication":"none","params_required":null,"media":null,"safety_class":"metadata_only","safety_basis":"an instruction file an agent reads; not an operation"},"policy":{"id":"metadata","label":"Metadata","automatic":false,"invoke":"Nothing to invoke: a listing, a server card or a skill file, not an operation."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"on another origin (developers.cloudflare.com): only the scanned origin is called"}},{"capability_id":"cap1:12e5d48d52ad5fb113ca","protocol":"agent_skill","operation":"cloudflare-one","method":null,"endpoint":"https://developers.cloudflare.com/.well-known/agent-skills/cloudflare-one/SKILL.md","declared":{"by":"https://www.cloudflare.com/.well-known/agent-skills/index.json","declaration_sha256":"fec5b71eb6bc30154cd96c5eb522effcdff29fd52f1ce5295f17b3c0ec76d04b","authentication":"none","params_required":null,"media":null,"safety_class":"metadata_only","safety_basis":"an instruction file an agent reads; not an operation"},"policy":{"id":"metadata","label":"Metadata","automatic":false,"invoke":"Nothing to invoke: a listing, a server card or a skill file, not an operation."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"on another origin (developers.cloudflare.com): only the scanned origin is called"}},{"capability_id":"cap1:73c345d42c9991090241","protocol":"agent_skill","operation":"cloudflare-one-migrations","method":null,"endpoint":"https://developers.cloudflare.com/.well-known/agent-skills/cloudflare-one-migrations/SKILL.md","declared":{"by":"https://www.cloudflare.com/.well-known/agent-skills/index.json","declaration_sha256":"fec5b71eb6bc30154cd96c5eb522effcdff29fd52f1ce5295f17b3c0ec76d04b","authentication":"none","params_required":null,"media":null,"safety_class":"metadata_only","safety_basis":"an instruction file an agent reads; not an operation"},"policy":{"id":"metadata","label":"Metadata","automatic":false,"invoke":"Nothing to invoke: a listing, a server card or a skill file, not an operation."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"on another origin (developers.cloudflare.com): only the scanned origin is called"}},{"capability_id":"cap1:02c45d936eb8cf2038ba","protocol":"agent_skill","operation":"durable-objects","method":null,"endpoint":"https://developers.cloudflare.com/.well-known/agent-skills/durable-objects.tar.gz","declared":{"by":"https://www.cloudflare.com/.well-known/agent-skills/index.json","declaration_sha256":"fec5b71eb6bc30154cd96c5eb522effcdff29fd52f1ce5295f17b3c0ec76d04b","authentication":"none","params_required":null,"media":null,"safety_class":"metadata_only","safety_basis":"an instruction file an agent reads; not an operation"},"policy":{"id":"metadata","label":"Metadata","automatic":false,"invoke":"Nothing to invoke: a listing, a server card or a skill file, not an operation."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"on another origin (developers.cloudflare.com): only the scanned origin is called"}},{"capability_id":"cap1:e9411c97d074916fa5af","protocol":"agent_skill","operation":"k2","method":null,"endpoint":"https://developers.cloudflare.com/.well-known/agent-skills/k2/SKILL.md","declared":{"by":"https://www.cloudflare.com/.well-known/agent-skills/index.json","declaration_sha256":"fec5b71eb6bc30154cd96c5eb522effcdff29fd52f1ce5295f17b3c0ec76d04b","authentication":"none","params_required":null,"media":null,"safety_class":"metadata_only","safety_basis":"an instruction file an agent reads; not an operation"},"policy":{"id":"metadata","label":"Metadata","automatic":false,"invoke":"Nothing to invoke: a listing, a server card or a skill file, not an operation."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"on another origin (developers.cloudflare.com): only the scanned origin is called"}},{"capability_id":"cap1:4582ef107d7f6514adcd","protocol":"agent_skill","operation":"nextjs-on-cloudflare","method":null,"endpoint":"https://developers.cloudflare.com/.well-known/agent-skills/nextjs-on-cloudflare/SKILL.md","declared":{"by":"https://www.cloudflare.com/.well-known/agent-skills/index.json","declaration_sha256":"fec5b71eb6bc30154cd96c5eb522effcdff29fd52f1ce5295f17b3c0ec76d04b","authentication":"none","params_required":null,"media":null,"safety_class":"metadata_only","safety_basis":"an instruction file an agent reads; not an operation"},"policy":{"id":"metadata","label":"Metadata","automatic":false,"invoke":"Nothing to invoke: a listing, a server card or a skill file, not an operation."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"on another origin (developers.cloudflare.com): only the scanned origin is called"}},{"capability_id":"cap1:6cb0ebcf05c32255a85c","protocol":"agent_skill","operation":"sandbox-migrate-to-next","method":null,"endpoint":"https://developers.cloudflare.com/.well-known/agent-skills/sandbox-migrate-to-next/SKILL.md","declared":{"by":"https://www.cloudflare.com/.well-known/agent-skills/index.json","declaration_sha256":"fec5b71eb6bc30154cd96c5eb522effcdff29fd52f1ce5295f17b3c0ec76d04b","authentication":"none","params_required":null,"media":null,"safety_class":"metadata_only","safety_basis":"an instruction file an agent reads; not an operation"},"policy":{"id":"metadata","label":"Metadata","automatic":false,"invoke":"Nothing to invoke: a listing, a server card or a skill file, not an operation."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"on another origin (developers.cloudflare.com): only the scanned origin is called"}},{"capability_id":"cap1:7e2a2471ef18693cf7e1","protocol":"agent_skill","operation":"sandbox-next","method":null,"endpoint":"https://developers.cloudflare.com/.well-known/agent-skills/sandbox-next.tar.gz","declared":{"by":"https://www.cloudflare.com/.well-known/agent-skills/index.json","declaration_sha256":"fec5b71eb6bc30154cd96c5eb522effcdff29fd52f1ce5295f17b3c0ec76d04b","authentication":"none","params_required":null,"media":null,"safety_class":"metadata_only","safety_basis":"an instruction file an agent reads; not an operation"},"policy":{"id":"metadata","label":"Metadata","automatic":false,"invoke":"Nothing to invoke: a listing, a server card or a skill file, not an operation."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"on another origin (developers.cloudflare.com): only the scanned origin is called"}},{"capability_id":"cap1:def8e6a88de97a76b4d2","protocol":"agent_skill","operation":"sandbox-stable","method":null,"endpoint":"https://developers.cloudflare.com/.well-known/agent-skills/sandbox-stable/SKILL.md","declared":{"by":"https://www.cloudflare.com/.well-known/agent-skills/index.json","declaration_sha256":"fec5b71eb6bc30154cd96c5eb522effcdff29fd52f1ce5295f17b3c0ec76d04b","authentication":"none","params_required":null,"media":null,"safety_class":"metadata_only","safety_basis":"an instruction file an agent reads; not an operation"},"policy":{"id":"metadata","label":"Metadata","automatic":false,"invoke":"Nothing to invoke: a listing, a server card or a skill file, not an operation."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"on another origin (developers.cloudflare.com): only the scanned origin is called"}},{"capability_id":"cap1:897e220ca8276d375221","protocol":"agent_skill","operation":"turnstile-spin","method":null,"endpoint":"https://developers.cloudflare.com/.well-known/agent-skills/turnstile-spin.tar.gz","declared":{"by":"https://www.cloudflare.com/.well-known/agent-skills/index.json","declaration_sha256":"fec5b71eb6bc30154cd96c5eb522effcdff29fd52f1ce5295f17b3c0ec76d04b","authentication":"none","params_required":null,"media":null,"safety_class":"metadata_only","safety_basis":"an instruction file an agent reads; not an operation"},"policy":{"id":"metadata","label":"Metadata","automatic":false,"invoke":"Nothing to invoke: a listing, a server card or a skill file, not an operation."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"on another origin (developers.cloudflare.com): only the scanned origin is called"}},{"capability_id":"cap1:f6cade70ca0f6661a759","protocol":"agent_skill","operation":"web-perf","method":null,"endpoint":"https://developers.cloudflare.com/.well-known/agent-skills/web-perf/SKILL.md","declared":{"by":"https://www.cloudflare.com/.well-known/agent-skills/index.json","declaration_sha256":"fec5b71eb6bc30154cd96c5eb522effcdff29fd52f1ce5295f17b3c0ec76d04b","authentication":"none","params_required":null,"media":null,"safety_class":"metadata_only","safety_basis":"an instruction file an agent reads; not an operation"},"policy":{"id":"metadata","label":"Metadata","automatic":false,"invoke":"Nothing to invoke: a listing, a server card or a skill file, not an operation."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"on another origin (developers.cloudflare.com): only the scanned origin is called"}},{"capability_id":"cap1:a5b49cf1767774bea15c","protocol":"agent_skill","operation":"workers-best-practices","method":null,"endpoint":"https://developers.cloudflare.com/.well-known/agent-skills/workers-best-practices.tar.gz","declared":{"by":"https://www.cloudflare.com/.well-known/agent-skills/index.json","declaration_sha256":"fec5b71eb6bc30154cd96c5eb522effcdff29fd52f1ce5295f17b3c0ec76d04b","authentication":"none","params_required":null,"media":null,"safety_class":"metadata_only","safety_basis":"an instruction file an agent reads; not an operation"},"policy":{"id":"metadata","label":"Metadata","automatic":false,"invoke":"Nothing to invoke: a listing, a server card or a skill file, not an operation."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"on another origin (developers.cloudflare.com): only the scanned origin is called"}},{"capability_id":"cap1:9fffffb66f1f69432f0f","protocol":"agent_skill","operation":"wrangler","method":null,"endpoint":"https://developers.cloudflare.com/.well-known/agent-skills/wrangler/SKILL.md","declared":{"by":"https://www.cloudflare.com/.well-known/agent-skills/index.json","declaration_sha256":"fec5b71eb6bc30154cd96c5eb522effcdff29fd52f1ce5295f17b3c0ec76d04b","authentication":"none","params_required":null,"media":null,"safety_class":"metadata_only","safety_basis":"an instruction file an agent reads; not an operation"},"policy":{"id":"metadata","label":"Metadata","automatic":false,"invoke":"Nothing to invoke: a listing, a server card or a skill file, not an operation."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"on another origin (developers.cloudflare.com): only the scanned origin is called"}}],"mismatches":[{"capability_id":"cap1:7d105e4c1902c5b22dd5","operation":"GET /llms.txt","kind":"declared_media_mismatch","declared":"text/markdown","observed":"text/plain"},{"capability_id":"cap1:15ca69b7e4f8ebc5755a","operation":"GET /llms-full.txt","kind":"declared_media_mismatch","declared":"text/markdown","observed":"text/plain"}],"certificate":{"certificate_id":"ccap1:aaaa91221f68bba34a3769f80fe931ad1d8a3c5053c7f71edd40024d0ea3c3eb","certificate":{"kind":"crawlcheck-capability-certificate","v":1,"subject":"www.cloudflare.com","domain":"cloudflare.com","record":"m9lacvgakb","report":"https://crawlcheck.io/r/m9lacvgakb","manifest_sha256":"c61d9e86cef72798188a7a1e69b31d2d466786ecda9164c431a9d44a743365b4","measured_at":"2026-10-04T04:17:29.994Z","verification_checked_at":"2026-10-04T04:17:46.462Z","verification_policy":"public GETs with no required input and one read-only MCP tool with no required input, on the scanned origin only; redirects recorded, not followed","invocation_rule":"capabilities are read from declarations only; nothing is invoked. Later verification may call read_only_public operations alone; every other class needs the site owner's authorisation and a test account, and unknown is never called","counts":{"declared":23,"verified":0,"mismatches":2},"items":[{"id":"cap1:7d105e4c1902c5b22dd5","protocol":"openapi","operation":"GET /llms.txt","method":"GET","endpoint":"https://www.cloudflare.com/llms.txt","declared_by_sha256":"abdbb276f99fd64e33aa4255618cf0488c15e515a5c6b9107efb0833314ad249","safety_class":"read_only_public","policy":"public_read_only","observed":"schema_mismatch","status":200,"observed_sha256":"009fbbf1e6525b66978a9fe7a301c483541cf9f6b3d32511f5c1305df358d5e4"},{"id":"cap1:15ca69b7e4f8ebc5755a","protocol":"openapi","operation":"GET /llms-full.txt","method":"GET","endpoint":"https://www.cloudflare.com/llms-full.txt","declared_by_sha256":"abdbb276f99fd64e33aa4255618cf0488c15e515a5c6b9107efb0833314ad249","safety_class":"read_only_public","policy":"public_read_only","observed":"schema_mismatch","status":200,"observed_sha256":"51af0fb444103cf7998501131870973a20f858bca17a1cba058e9195df6eb242"},{"id":"cap1:cab07b1e49da5e23e75a","protocol":"openapi","operation":"GET /.well-known/api-catalog","method":"GET","endpoint":"https://www.cloudflare.com/.well-known/api-catalog","declared_by_sha256":"abdbb276f99fd64e33aa4255618cf0488c15e515a5c6b9107efb0833314ad249","safety_class":"read_only_public","policy":"public_read_only","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:ee562cb3b684140e9f7e","protocol":"openapi","operation":"GET /.well-known/agents.json","method":"GET","endpoint":"https://www.cloudflare.com/.well-known/agents.json","declared_by_sha256":"abdbb276f99fd64e33aa4255618cf0488c15e515a5c6b9107efb0833314ad249","safety_class":"read_only_public","policy":"public_read_only","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:5dda7978a0db8a5323d1","protocol":"mcp","operation":"read_llms_txt","method":null,"endpoint":null,"declared_by_sha256":"115ef806681d5ea0196950eb07208fa3f7dcfb35224c6cf610f6403196345b5c","safety_class":"unknown","policy":"unknown","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:7bb32c19b448ff80bc21","protocol":"mcp","operation":"read_markdown_page","method":null,"endpoint":null,"declared_by_sha256":"115ef806681d5ea0196950eb07208fa3f7dcfb35224c6cf610f6403196345b5c","safety_class":"unknown","policy":"unknown","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:68b0122bbe3f775e132a","protocol":"mcp","operation":"server","method":null,"endpoint":"https://docs.mcp.cloudflare.com/mcp","declared_by_sha256":"296657d7bd0330bee2700f5de88edc054acc8637f6deb2b5cce8b9030f13706f","safety_class":"metadata_only","policy":"metadata","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:6ecdf73b01ac35b99bcd","protocol":"agent_skill","operation":"agents-sdk","method":null,"endpoint":"https://developers.cloudflare.com/.well-known/agent-skills/agents-sdk.tar.gz","declared_by_sha256":"fec5b71eb6bc30154cd96c5eb522effcdff29fd52f1ce5295f17b3c0ec76d04b","safety_class":"metadata_only","policy":"metadata","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:4e706a8dbdaa6a2bcaf3","protocol":"agent_skill","operation":"basin","method":null,"endpoint":"https://developers.cloudflare.com/.well-known/agent-skills/basin.tar.gz","declared_by_sha256":"fec5b71eb6bc30154cd96c5eb522effcdff29fd52f1ce5295f17b3c0ec76d04b","safety_class":"metadata_only","policy":"metadata","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:51d39c98a971868dfc49","protocol":"agent_skill","operation":"cloudflare","method":null,"endpoint":"https://developers.cloudflare.com/.well-known/agent-skills/cloudflare.tar.gz","declared_by_sha256":"fec5b71eb6bc30154cd96c5eb522effcdff29fd52f1ce5295f17b3c0ec76d04b","safety_class":"metadata_only","policy":"metadata","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:5e4b11e1ccfa255bbf9b","protocol":"agent_skill","operation":"cloudflare-email-service","method":null,"endpoint":"https://developers.cloudflare.com/.well-known/agent-skills/cloudflare-email-service.tar.gz","declared_by_sha256":"fec5b71eb6bc30154cd96c5eb522effcdff29fd52f1ce5295f17b3c0ec76d04b","safety_class":"metadata_only","policy":"metadata","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:12e5d48d52ad5fb113ca","protocol":"agent_skill","operation":"cloudflare-one","method":null,"endpoint":"https://developers.cloudflare.com/.well-known/agent-skills/cloudflare-one/SKILL.md","declared_by_sha256":"fec5b71eb6bc30154cd96c5eb522effcdff29fd52f1ce5295f17b3c0ec76d04b","safety_class":"metadata_only","policy":"metadata","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:73c345d42c9991090241","protocol":"agent_skill","operation":"cloudflare-one-migrations","method":null,"endpoint":"https://developers.cloudflare.com/.well-known/agent-skills/cloudflare-one-migrations/SKILL.md","declared_by_sha256":"fec5b71eb6bc30154cd96c5eb522effcdff29fd52f1ce5295f17b3c0ec76d04b","safety_class":"metadata_only","policy":"metadata","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:02c45d936eb8cf2038ba","protocol":"agent_skill","operation":"durable-objects","method":null,"endpoint":"https://developers.cloudflare.com/.well-known/agent-skills/durable-objects.tar.gz","declared_by_sha256":"fec5b71eb6bc30154cd96c5eb522effcdff29fd52f1ce5295f17b3c0ec76d04b","safety_class":"metadata_only","policy":"metadata","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:e9411c97d074916fa5af","protocol":"agent_skill","operation":"k2","method":null,"endpoint":"https://developers.cloudflare.com/.well-known/agent-skills/k2/SKILL.md","declared_by_sha256":"fec5b71eb6bc30154cd96c5eb522effcdff29fd52f1ce5295f17b3c0ec76d04b","safety_class":"metadata_only","policy":"metadata","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:4582ef107d7f6514adcd","protocol":"agent_skill","operation":"nextjs-on-cloudflare","method":null,"endpoint":"https://developers.cloudflare.com/.well-known/agent-skills/nextjs-on-cloudflare/SKILL.md","declared_by_sha256":"fec5b71eb6bc30154cd96c5eb522effcdff29fd52f1ce5295f17b3c0ec76d04b","safety_class":"metadata_only","policy":"metadata","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:6cb0ebcf05c32255a85c","protocol":"agent_skill","operation":"sandbox-migrate-to-next","method":null,"endpoint":"https://developers.cloudflare.com/.well-known/agent-skills/sandbox-migrate-to-next/SKILL.md","declared_by_sha256":"fec5b71eb6bc30154cd96c5eb522effcdff29fd52f1ce5295f17b3c0ec76d04b","safety_class":"metadata_only","policy":"metadata","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:7e2a2471ef18693cf7e1","protocol":"agent_skill","operation":"sandbox-next","method":null,"endpoint":"https://developers.cloudflare.com/.well-known/agent-skills/sandbox-next.tar.gz","declared_by_sha256":"fec5b71eb6bc30154cd96c5eb522effcdff29fd52f1ce5295f17b3c0ec76d04b","safety_class":"metadata_only","policy":"metadata","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:def8e6a88de97a76b4d2","protocol":"agent_skill","operation":"sandbox-stable","method":null,"endpoint":"https://developers.cloudflare.com/.well-known/agent-skills/sandbox-stable/SKILL.md","declared_by_sha256":"fec5b71eb6bc30154cd96c5eb522effcdff29fd52f1ce5295f17b3c0ec76d04b","safety_class":"metadata_only","policy":"metadata","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:897e220ca8276d375221","protocol":"agent_skill","operation":"turnstile-spin","method":null,"endpoint":"https://developers.cloudflare.com/.well-known/agent-skills/turnstile-spin.tar.gz","declared_by_sha256":"fec5b71eb6bc30154cd96c5eb522effcdff29fd52f1ce5295f17b3c0ec76d04b","safety_class":"metadata_only","policy":"metadata","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:f6cade70ca0f6661a759","protocol":"agent_skill","operation":"web-perf","method":null,"endpoint":"https://developers.cloudflare.com/.well-known/agent-skills/web-perf/SKILL.md","declared_by_sha256":"fec5b71eb6bc30154cd96c5eb522effcdff29fd52f1ce5295f17b3c0ec76d04b","safety_class":"metadata_only","policy":"metadata","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:a5b49cf1767774bea15c","protocol":"agent_skill","operation":"workers-best-practices","method":null,"endpoint":"https://developers.cloudflare.com/.well-known/agent-skills/workers-best-practices.tar.gz","declared_by_sha256":"fec5b71eb6bc30154cd96c5eb522effcdff29fd52f1ce5295f17b3c0ec76d04b","safety_class":"metadata_only","policy":"metadata","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:9fffffb66f1f69432f0f","protocol":"agent_skill","operation":"wrangler","method":null,"endpoint":"https://developers.cloudflare.com/.well-known/agent-skills/wrangler/SKILL.md","declared_by_sha256":"fec5b71eb6bc30154cd96c5eb522effcdff29fd52f1ce5295f17b3c0ec76d04b","safety_class":"metadata_only","policy":"metadata","observed":"not_attempted","status":null,"observed_sha256":null}],"mismatches":[{"id":"cap1:7d105e4c1902c5b22dd5","kind":"declared_media_mismatch","declared":"text/markdown","observed":"text/plain"},{"id":"cap1:15ca69b7e4f8ebc5755a","kind":"declared_media_mismatch","declared":"text/markdown","observed":"text/plain"}]},"signature":{"alg":"Ed25519","kid":"hcIAczGf-8EFBnkunmZlvFWnD2nHHeHeC9cM4BTiBVo","certificate_sha256":"aaaa91221f68bba34a3769f80fe931ad1d8a3c5053c7f71edd40024d0ea3c3eb","message":"the UTF-8 bytes of \"crawlcheck-capability-certificate-v1\\n\" followed by certificate_sha256 (hex), where certificate_sha256 = SHA-256 of the certificate as canonical JSON (keys sorted, no whitespace)","sig":"XFgdHbZUuwQ4SqezZ0P50EZhlDageKlT9IekbzPdTEBz7_LdDFeCkxCZ4gvcpfR-wcSHzF9Xy68LMKjpYEhLDw"},"issuer":{"name":"CrawlCheck observer","key":{"jwk":{"kty":"OKP","crv":"Ed25519","x":"Ny5tAiGdpyVWTm64G1_0g_sTo4ocLL7kqjZ6cK7G5KM"},"directory":"https://crawlcheck.io/.well-known/http-message-signatures-directory"}}},"verify":"https://crawlcheck.io/api/registry/capabilities/verify?domain=cloudflare.com"}