| name | mcp-foundation |
|---|---|
| description | Build the agent-native foundation layer — protocol files, API endpoints, agent profiling, referral beacons, feedback loop — for any web service that needs to be natively consumable by AI agents. Each feature in this skill is a portable, config-driven generator that ships a single check against the Cloudflare Agent Readiness scanner. Install, point at a config, get a 100% score. Part of Mahoney Context Protocol. |
Part of Mahoney Context Protocol.
Build agent-ready protocol layers for any site, scoring 100% on Cloudflare's Agent Readiness scanner.
Each feature is a portable generator: takes a config, emits a protocol file. Compose them all to ship the full machine layer.
- Feature 01: robots.txt generator
- Feature 02: sitemap.xml generator
- Feature 03: Link headers (RFC 8288)
- Feature 04: Markdown content negotiation
- Feature 05: Content Signals validator + ai-preferences manifest
- Feature 06: API Catalog (RFC 9727 + RFC 9264)
- Feature 07: OAuth/OIDC discovery (RFC 8414 + OIDC Discovery 1.0)
- Feature 08: OAuth Protected Resource (RFC 9728)
- Feature 09: MCP Server Card (SEP-1649 + SEP-1960 + SEP-2127)
- Feature 10: A2A Agent Card (canonical + legacy paths)
- Feature 11: Agent Skills index (v0.2.0 + v0.1.0 + SKILL.md files)
- Feature 12: WebMCP runtime (navigator.modelContext registration)
- Feature 13: llms.txt site summary (https://llmstxt.org)
- Feature 14: operate.txt (Mahoney Context Protocol operate-txt v1.0)
- Feature 15: security.txt (RFC 9116 + MCP Agent-Disclosure extension)
- Feature 16: JSON-LD structured data (Schema.org)
- Feature 17: ai.txt (Spawning + AI Visibility v1.1.1) + humans.txt
- Feature 18: OpenAPI discovery (index + canonical paths + Worker)
- Feature 19: did:web verifiable identity (W3C DID Core v1.1)
Foundation status: 19/19 features complete. Coverage spans RFC 9116 / 9309 / 9727 / 9728, OpenID Connect Discovery 1.0, OAuth 2.0 Authorization Server Metadata, OpenAPI 3.x, W3C DID Core v1.1, Schema.org JSON-LD, and the Mahoney Context Protocol operate-txt v1.0 spec.
Feature 19 is the closer. Once an agent resolves
did:web:<domain>and verifies the keys, every other foundation file becomes trust-rooted via theMahoneyContextProtocolFoundationservice anchor. Custom service type is the third namespace marker (after operate.txt and the security.txtAgent-Disclosure:extension). Future move: submit to W3C DID Property Extensions registry.
- Feature 01-19 shipped
- Phase 2: build the it-IS-agent-ready scanner that consumes mcp-foundation outputs
- mcp-runtime: WebMCP framework as composable modules
- DID Property Extensions registry submission for MahoneyContextProtocolFoundation service type
- AI training opt-out namespace consolidation spec (EU AI Act Article 53 framing)
- Agent Security Disclosure spec (companion to security.txt Agent-Disclosure field)
Feature 18 ships OpenAPI discovery scaffolding —
.well-known/openapi-index.jsoncatalogs every spec the site serves, primary spec at/openapi.{json|yaml}canonical path, redirect from.well-known/openapi.{json|yaml}for the emerging convention,Link: describedbyheader advertising. mcp-foundation does not generate OpenAPI documents — it provides the discovery layer for ones the user already has.
Feature 17 ships clean reference implementations of two existing ai.txt formats (Spawning + AI Visibility Directory v1.1.1). Namespace fragmentation in AI training opt-out is a future consolidation opportunity (EU AI Act Article 53, Hamburg ruling Dec 2025) — not claimed here. humans.txt per humanstxt.org spec, with optional
<link rel="author">snippet for the HTML head.
Feature 16 is the first feature emitting per-page artifacts in addition to site-level files. Schema.org JSON-LD with an agent-readable
SoftwareApplicationblock declaring the site as a machine-callable service.
Note: Features 01–12 cover Cloudflare's current Agent Readiness scanner rubric. Feature 13 is the first feature beyond the upstream scanner — the foundation now covers the rubric AND extends past it.
Feature 14 implements the Mahoney Context Protocol operate-txt v1.0 spec. Every emitted file cites the spec URL — claiming the namespace by shipping the reference implementation.
Feature 15 ships RFC 9116 with an MCP custom extension —
Agent-Disclosure:— a dedicated channel for AI agents to report security issues they discover at runtime. The custom field is the seed for a future Mahoney Context Protocol companion spec on agent security disclosure.
npm install
cp config.example.yml config.yml # edit hostname + bot policy + urls
npm run generate -- config.yml # writes ./output/{robots.txt,sitemap.xml}
npm test # unit tests
npm run test:verify -- https://your-site.example.com # live scan (robots)
bash test/verify/sitemap-xml.sh https://your-site.example.com # live scan (sitemap)Drop output/robots.txt at the root of your site. Re-run the verify
script against the deployed URL to confirm a passing score on the
robots.txt portion of Cloudflare's Agent Readiness scanner.
https://github.com/MahoneyContextProtocol/mcp-foundation