Skip to content

feat(ai-agent): comprehensive IsAgentReady & WebMCP optimizations - #692

Merged
codercatdev merged 2 commits into
devfrom
feat/isagentready-mcp-optimization
Oct 8, 2026
Merged

codercatdev merged 2 commits into
devfrom
feat/isagentready-mcp-optimization

Conversation

@codercatdev

Copy link
Copy Markdown
Contributor

Summary

Implements comprehensive optimizations recommended by isagentready-mcp and isagentready-skills across all categories:

  • Security & Trust: Adds HSTS (max-age=31536000), Content-Security-Policy (frame-ancestors 'self'), X-Content-Type-Options: nosniff, X-Frame-Options: SAMEORIGIN, and Referrer-Policy: strict-origin-when-cross-origin
  • AIPREF Content-Usage: Adds Content-Usage: train-ai=n, search=y header and robots.txt directive
  • Agent Guides & Contracts: Adds /AGENTS.md, /pricing.md, and /.well-known/agents.json
  • Agent Protocols: Adds /openapi.json alias, /.well-known/agent-card.json (A2A), and SEP-1649 /.well-known/mcp.json
  • Agent Skills: Conforms to Cloudflare Agent Skills Discovery RFC v0.2.0 with valid sha256 digest and search-content/SKILL.md
  • Accessibility & Semantics: Provides descriptive fallbackAlt for all cover images and adds autocomplete="email" on newsletter form
  • Trust Anchors & Developer Documentation: Adds /about, /contact, /privacy, and /developers pages with links in footer
  • WebMCP: Adds explicit readOnlyHint: true and untrustedContentHint: true trust annotations to search_content tool

Verification

  • pnpm --filter @codingcatdev/site typecheck: Passed (0 errors)
  • pnpm --filter @codingcatdev/site build: Passed cleanly
  • Dual-track E2E test suite: 156/156 tests passing

- Security & Trust: Add HSTS, CSP frame-ancestors, X-Content-Type-Options, X-Frame-Options, and Referrer-Policy headers
- Content Signals: Add AIPREF Content-Usage header (train-ai=n, search=y) and robots.txt directive
- Agent Guides & Contracts: Add /AGENTS.md, /pricing.md, and /.well-known/agents.json
- Agent Protocols: Add /openapi.json alias, /.well-known/agent-card.json, and SEP-1649 /.well-known/mcp.json
- Agent Skills: Add v0.2.0 RFC index with valid sha256 digest and search-content/SKILL.md
- Accessibility & Semantics: Add descriptive fallbackAlt for all cover images and autocomplete on newsletter input
- Trust Anchors & Docs: Add /about, /contact, /privacy, and /developers pages and footer links
- WebMCP: Add explicit readOnlyHint and untrustedContentHint trust annotations
@vercel

vercel Bot commented Oct 8, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated
codingcat-dev Ignored Ignored Oct 8, 2026 12:19pm UTC

@codercatdev
codercatdev merged commit 0ad384a into dev Oct 8, 2026
4 checks passed
@codercatdev
codercatdev deleted the feat/isagentready-mcp-optimization branch October 8, 2026 12:22
@github-actions

github-actions Bot commented Oct 8, 2026

Copy link
Copy Markdown

⚡ Cloudflare Worker Preview Ready!

Environment URL
PR Preview https://8c45efad-codingcatdev-dev.codingcatdev.workers.dev
Dev Custom Domain https://dev.codingcat.dev
  • Worker Version ID: 8c45efad-2405-4772-9e9c-7ea70bd61f01
  • Protection: Restricted to @codingcat.dev accounts via Cloudflare Zero Trust Access

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant