CrawlCheck

Registry · Capabilities

Evidence

The capability registry

What each measured site declares an AI agent can do — through OpenAPI, an MCP server, an A2A agent card or a skills index — sorted into the policy class that decides whether anything may ever call it. Declared beside observed, one page per site, each with a signed certificate.

48sites declaring capabilities
1,388capabilities declared
186public read-only
2called and verified
4declared ≠ observed
Public read-only: 186Authenticated read-only: 240Irreversible write: 80Financial: 14External communication: 26Identity and accounts: 102Unknown: 440Metadata: 300
Every declared capability in the registry by policy class (Public read-only 186 · Authenticated read-only 240 · Irreversible write 80 · Financial 14 · External communication 26 · Identity and accounts 102 · Unknown 440 · Metadata 300).

Nothing side-effectful is ever called

Discovery only reads the declarations a site publishes. The one stage that calls anything sends a GET with no input to public read-only operations on the scanned origin, and runs one read-only tool on a declared MCP server. Every other class is never invoked by CrawlCheck, and unknown is treated as the riskiest class, never the safest.

Policy classCalled automatically?Rule
Public read-only
public_read_only		yes, to verifyMay be called without credentials. CrawlCheck calls it only to check the declaration: GET with no input, on the scanned origin.
Authenticated read-only
authenticated_read_only		neverNever called by CrawlCheck. An agent needs the user's own credentials and consent.
Reversible write
reversible_write		neverNever invoked automatically. Needs the owner's written authorisation and a test account.
Irreversible write
irreversible_write		neverNever invoked automatically. Deletes or changes something that cannot be undone.
Financial
financial		neverNever invoked automatically. Moves money or creates a charge.
External communication
external_communication		neverNever invoked automatically. Sends a message, email or notification to someone.
Identity and accounts
identity		neverNever invoked automatically. Creates, signs in to or changes an account or credential.
Unknown
unknown		neverNever invoked. Its effect cannot be read from the declaration, so it is treated as the riskiest case.
Metadata
metadata		neverNothing to invoke: a listing, a server card or a skill file, not an operation.

Every site

DomainDeclaredPolicy classesVerifiedMismatchesProtocolsMeasured
surrealdb.com33Public read-only: 14Financial: 1Identity and accounts: 1Unknown: 6Metadata: 1120a2a, agent_skill, mcp, openapi2026-10-05
huggingface.co300Authenticated read-only: 96Irreversible write: 19Financial: 11External communication: 11Identity and accounts: 65Unknown: 97Metadata: 100api, openapi2026-10-07
apify.com247Public read-only: 6Authenticated read-only: 87Irreversible write: 38Financial: 1External communication: 11Identity and accounts: 5Unknown: 92Metadata: 700agent_skill, api, mcp, openapi2026-10-06
crawlcheck.io203Public read-only: 119Authenticated read-only: 15Irreversible write: 3Identity and accounts: 6Unknown: 59Metadata: 100a2a, agent_skill, mcp, openapi2026-10-07
browserless.io106Public read-only: 41Irreversible write: 5Identity and accounts: 15Unknown: 39Metadata: 602agent_skill, mcp, openapi2026-10-06
pinecone.io80Authenticated read-only: 30Irreversible write: 11Identity and accounts: 1Unknown: 31Metadata: 700a2a, api, openapi2026-10-04
zoom.com59Metadata: 5900agent_skill, mcp2026-10-04
webflow.com48External communication: 1Unknown: 23Metadata: 2400agent_skill, mcp2026-10-04
zapier.com39Metadata: 3900agent_skill, api, mcp2026-10-04
reducto.ai38Public read-only: 1Authenticated read-only: 2Irreversible write: 3External communication: 1Unknown: 27Metadata: 400a2a, agent_skill, api, mcp, openapi2026-10-04
context7.com26Public read-only: 1Authenticated read-only: 5Unknown: 16Metadata: 400agent_skill, mcp, openapi2026-10-01
cloudflare.com23Public read-only: 4Unknown: 2Metadata: 1702agent_skill, mcp, openapi2026-10-04
openrouter.ai22External communication: 2Unknown: 2000mcp2026-10-04
gitbook.com19Irreversible write: 1Financial: 1Unknown: 10Metadata: 700agent_skill, mcp2026-10-04
netlify.com15Metadata: 1500agent_skill, mcp2026-10-04
motherduck.com12Identity and accounts: 9Metadata: 300agent_skill, openapi2026-10-04
tavily.com12Unknown: 5Metadata: 700a2a, api2026-10-05
frase.io10Metadata: 1000agent_skill, mcp2026-10-05
vercel.com10Metadata: 1000agent_skill, api2026-10-04
brightdata.com9Metadata: 900api2026-10-06
jasper.ai9Unknown: 7Metadata: 200agent_skill, mcp2026-10-07
vast.ai9Metadata: 900agent_skill, api, mcp2026-10-05
elevenlabs.io8Metadata: 800agent_skill, mcp2026-10-04
crewai.com7Authenticated read-only: 5Metadata: 200agent_skill, mcp, openapi2026-10-06
xata.io7Unknown: 3Metadata: 400a2a, agent_skill2026-10-05
hostinger.com4Metadata: 400agent_skill, api, mcp2026-10-04
opensearch.org4Metadata: 400agent_skill2026-10-04
supabase.com4Metadata: 400agent_skill, api2026-10-04
replicate.com3Metadata: 300agent_skill, mcp2026-10-04
speakeasy.com3Unknown: 300mcp2026-10-05
sentry.io2Metadata: 200api2026-10-04
arvadatreeservicellc.com1Metadata: 100agent_skill2026-10-06
augmentcode.com1Metadata: 100mcp2026-10-02
emmanuelorta.com1Metadata: 100agent_skill2026-10-06
langfuse.com1Metadata: 100agent_skill2026-10-07
parallel.ai1Metadata: 100mcp2026-10-04
planetscale.com1Metadata: 100mcp2026-10-04
runpod.io1Metadata: 100agent_skill2026-10-04
scaleway.com1Metadata: 100agent_skill2026-10-04
shop.app1Metadata: 100agent_skill2026-10-04
supremearvadafencing.com1Metadata: 100agent_skill2026-10-06
supremeconcreteco.com1Metadata: 100agent_skill2026-10-06
supremeexcavationdenver.com1Metadata: 100agent_skill2026-10-06
supremefencingdenver.com1Metadata: 100agent_skill2026-10-07
supremefencinglakewood.com1Metadata: 100agent_skill2026-10-06
supremelandscapersdenver.com1Metadata: 100agent_skill2026-10-06
terrariumstation.com1Metadata: 100agent_skill2026-10-06
treeservicedenverllc.com1Metadata: 100agent_skill2026-10-07

JSON · JSON Feed · the six mismatch rules · API