Site Passport
即時檢查WordPress網站是否已準備好由AI代理安全操作：llms.txt、robots.txt中的AI爬蟲規則、schema.org標記——這些都是針對網站實際檢查，而非自我申報。
託管 MCP 伺服器
npx add-mcp 'https://sitepassport.org/.well-known/mcp.json'可安裝到 Claude Code、Codex、Cursor、VS Code 等客戶端
文件
Free · Instant · Re-checked live, not self-reported
Paste any URL. We check what's actually there — discoverability, bot access, and content markup — the same way SSL Labs checks a live site instead of trusting a form.
Checks llms.txt, robots.txt AI-crawler rules, and schema.org markup. WordPress-specific checks (tool exposure, approval gate) need Agent Builder installed — see why below.
What actually gets checked
Five categories, published and versioned — see the exact weights on the methodology page. Nothing here is a black box. Curious how real sites actually score? See 22 verified WordPress sites, checked live →
🔍
Capability Exposure
Can an agent actually find and use the site's tools? Requires the site itself to expose them — this is what Agent Builder does.
🛡️
Safety & Trust
Is anything risky gated behind human approval, or wide open? This is the category almost nobody else checks at all.
📡
Discoverability
llms.txt and a /.well-known/webmcp.json manifest — the files agents actually look for.
🤖
Bot Access
Does robots.txt explicitly welcome AI crawlers, or just stay silent on them?
📄
Content
Schema.org markup that tells an agent what it's actually looking at, not just what a human sees.
Not a vendor experiment
Built jointly by Google and Microsoft, under W3C
WebMCP is a real, open standard in progress — a W3C Community Group draft co-authored by engineers from both Google and Microsoft, with Mozilla and Apple also participating in the standards process. It's shipping today as a Chrome origin trial, not stuck in a single company's lab. Read the full explainer, with links to every primary source →
Where to verify this yourself
- github.com/webmachinelearning/webmcp — the spec source
- developer.chrome.com/docs/ai/webmcp — Chrome's implementation docs
- w3.org/community/webmachinelearning — the official W3C group page
Verified, not self-submitted
Every other WebMCP directory today is a form: you type in your site, they trust you. Site Passport pulls your score directly from your own site's public manifest — the same way SSL Labs re-checks a live TLS setup instead of taking your word for it. A listing is only ever as current as the last successful check.
The rule
Rankings are earned, never bought. Featured placement is always labeled "promoted" and never touches the underlying score. The methodology is public — read it in full.
Check your own site next
Free, instant, and it works whether or not you run WordPress — though that's where the fixes are one click away.