semgrep.dev.
level 3: structured interaction
Semgrep is a static analysis tool that finds bugs and enforces code standards. It uses pattern matching to identify security vulnerabilities, code quality issues, and other problems in your codebase. You can use Semgrep to scan your code, integrate it into your CI/CD pipeline, and write custom rules to detect specific issues.
LEVEL 1 /
BASIC ACCESSIBILITY
— 5/6
Uses semantic HTML elements (header, nav, main, article, section, footer) instead of just divs
PASS
Has proper meta tags (title, description, og:tags, twitter:card)
PASS
Includes Schema.org JSON-LD structured data
FAIL
Does not block automated access with CAPTCHAs on public content
PASS
Content is server-side rendered (visible in HTML source, not just JS-rendered)
PASS
Uses clean, readable URLs (no excessive query params or hash fragments)
PASS
LEVEL 2 /
DISCOVERABILITY
— 5/6
Has a robots.txt that allows legitimate bot access
PASS
Provides an XML sitemap
PASS
Has a /llms.txt file describing the site for LLMs
PASS
Publishes an OpenAPI/Swagger specification for its API
FAIL
Has comprehensive, machine-readable documentation
PASS
Primary content is text-based (not locked in images/videos/PDFs)
PASS
LEVEL 3 /
STRUCTURED INTERACTION
— 4/6
Provides a structured REST or GraphQL API
PASS
API returns JSON responses with consistent schema
PASS
API supports search and filtering parameters
PASS
Has an A2A agent card at /.well-known/agent.json
PASS
Rate limits are documented and return proper 429 responses with Retry-After
FAIL
API returns structured error responses with error codes and messages
FAIL
LEVEL 4 /
AGENT INTEGRATION
— 3/6
Provides an MCP (Model Context Protocol) server
PASS
Supports WebMCP for browser-based agent interaction
FAIL
API supports write operations (POST/PUT/PATCH/DELETE), not just reads
PASS
Supports agent-friendly authentication (API keys, OAuth client credentials)
PASS
Supports webhooks for event notifications
FAIL
Write operations support idempotency keys
FAIL
LEVEL 5 /
AUTONOMOUS OPERATION
— 2/6
Supports event streaming (SSE, WebSockets) for real-time updates
PASS
Supports agent-to-agent capability negotiation
FAIL
Has a subscription/management API for agents
FAIL
Supports multi-step workflow orchestration
PASS
Can proactively notify agents of relevant changes
FAIL
Supports cross-service handoff between agents
FAIL
SF Entry Point
https://semgrep.dev/llms.txt