What an agent is told about canva.com
This is the public, signed answer Resolve gives any agent that asks about canva.com before it reads, cites, connects or transacts, from a reading 3 days ago. Every line is a field of that answer; nothing is re-scored here. The decision on reading rests on this: permission is declared but delivery was not measured.
What it declares, what it was served, what is absent
Declared is what the site says about itself. Observed is what CrawlCheck was served. Not measured means this record does not carry that reading, and nothing is guessed in its place.
Crawl policy
declared90 of 114 named AI agents may read / under the site’s own robots.txt; some wildcard rules are shadowed by a named group
Rights
observedtrain not declared · ground not declared · summarize not declared · cite not declared · transact not declared
Delivery
not measuredthis record carries no per-identity delivery reading
Machine files
observed/robots.txt 200 · ok · /sitemap.xml 403 · fail · /sitemap_index.xml 403 · fail · /wp-sitemap.xml 403 · fail · /llms.txt 403 · absent
Capabilities
observed0 declared operations — no API catalog, MCP server card or agent-skills index found
Entity
not measuredthis record carries no entity reciprocity reading
Control
unprovennobody has proven control of canva.com to CrawlCheck, so who stands behind the site is unconfirmed
Assurance ladder
level: discovered✓ declared · ✓ discovered · – reachable (not measured) · – conformant (not measured) · ✗ owner verified · ✗ authorized · ✗ reliable · ✗ action ready
Findings
observed7 open, 1 serious. Top: robots.txt rules do not apply to named agents
Absences
observeda2a_agent_card — looked for and not served; each absence states the request that proved it
Transparency log
observedin the public append-only log, batch 537, leaf 23, with an inclusion proof
Freshness
observedobserved 3 days ago, fresh until 2026-10-22
The same answer, as calls
Everything on this page is a field of one signed body. An agent reads the body; a person reads this.
GET /api/v1/resolve?domain=canva.comJSON, Ed25519-signed, public, no keyBefore actingPOST /api/v1/preflight {domain, action}allow, warn, require_confirmation or block for one actionIts evidencethe sealed reportmanifest sha256 cf5f3408d124…Verify itnode crawlcheck-verify.mjs --online answer.jsonhash, signature and signing policy, against the keys CrawlCheck publishesWhat comes next
Each step builds on the same signed record. Start wherever you are.
- 01FixFix what holds the grade downSteps for your platform, checked by a re-scan.
- 02WatchWatch it every dayFree for 30 days. Changes and new findings reach your inbox.
- 03ClaimProve the domain is yoursOne DNS record or meta tag. Every signed answer about the site then says control is proven.
- 04Agent viewSee what agents are toldThe signed answer any agent gets before it reads, cites, connects or transacts.You are here
- 05BuildAsk from your own codeOne call before your agent acts: npm, PyPI or plain HTTPS.