Let Agents In

Agent readiness · here.com

2026-08-12 10:17 UTC · formula v9.2 · 6.5s

You publish files for machines to read, but nothing that tells one how to become a customer.

None of the nine known agent entry paths answered, including /agent-signup.md and /.well-known/agent-access.json. Reading is solved on your site; joining is not.

8/ 14
A · Discovery
5/5
B · Agent entry
0/4
C · Registration
0/1
D · Provisioning
2/3
E · Integration
1/1

of the 14 points that apply to you and we could measure · 3 of 17 were not scored

You 8 · category median 7.5 · best mapbox.com 10 · 15 deterministic HTTP checks, published formula

Pass it onEmail itLinkedIn

Fix this first

+3points, taking 8/14 to 11/14, past mapbox.com, maptiler.com

This is the whole list: everything we could measure and you do not pass. Another 3 points sit behind checks we could not evaluate on your domain, and each of those lines below says what would make it measurable.

  1. 1
    Free tier or no-card trial stated in textminutes · +1

    Every mention of free on your pricing page sits inside a button. An agent reads text, not chrome, so state the tier in a sentence or a price cell: what is free, what it is limited to, and whether a card is needed.

  2. 2
    Agent entry pointan afternoon · +2

    Publish /agent-signup.md: the path from nothing to a working key, written as steps for a machine rather than a tour for a person. Ours is at /agent-signup.md if you want a worked example, and it says plainly that we have nothing to sign up for.

Then, when you have room

  • OAuth dynamic client registration a project · +1Publish OAuth authorization server metadata with an RFC 7591 registration_endpoint in it. It is the only standard way an agent registers itself without a human.
  • MCP surface a project · +1You already talk about MCP, and nothing answered at the addresses named above. If your server is at another path, declare it at /.well-known/mcp.json: that file is what an agent reads first, and it is what makes the path stop mattering.
  • Signup reachable without a browser a project · +1Let https://platform.here.com/portal/sign-up?step=verify-identity&aid=www.here.com-top-nav-start-building render its form in server HTML and stop refusing non-browser requests to it.

Take it with you

6 of the checks an agent depends on, here.com does not pass.

Send yourself the list above with the checks that cost the most, and a permanent link. Whoever owns the fix is usually not the person who ran the scan.

One email with the report, and one follow-up asking what you did with it. No newsletter, no sequence. Delete on request at hello@letagentsin.com.

None of this tells you whether an agent picked you

Everything above is a file an agent could read. Whether one actually chose you is a different measurement, and we have not run it on here.com. What we have run it on is a rich text editor vendor: six agents, one brief, six isolated copies of a real codebase. All six picked the same competitor, and the vendor being studied was never named, not even on a rejection list, while the runs named and dismissed ten alternatives between them. In an earlier round, run before we isolated the copies, it was named twice and struck off both times in four words: Fully commercial, licence key required. That study is about them, not about you. It is here because it is the difference between a file and a decision.

Against maps and geocoding

You are 4 of 6 in a category where a developer is trying to turn an address into coordinates and draw it on a map.

  1. 1
    mapbox.com
    10/15
  2. 2
    locationiq.com
    7/11
  3. 3
    maptiler.com
    9/15
  4. 4
    here.comyou
    8/14
  5. 5
    tomtom.com
    5/11
  6. 6
    radar.com
    7/16

Where competitors pass and here.com does not

  • Free tier or no-card trial stated in textmapbox.com · maptiler.com · locationiq.com
  • OAuth dynamic client registrationmapbox.com
  • MCP surfacemapbox.com
  • Signup reachable without a browserlocationiq.com

Only domains we have actually scanned appear here, so the ranking is a floor: a competitor missing from the list has not been measured, not beaten.

By stage

A
DiscoveryCan an agent find and read you?
5/5
B
Agent entryIs there a door built for a machine?
0/4
C
RegistrationCan an agent get an account?
0/1
D
ProvisioningCan it get credentials without a human?
2/3
E
IntegrationCan it ship working code?
1/1

Every check

Each line is one HTTP observation with a published rule, so you can rerun any of them yourself. Most are the same tomorrow if you are: the two that are not are the bot gate and the pricing page, which answer inconsistently on their own, which is why those run more than once and say so when the tries disagreed. PASS and PART are counted. UNMEASURED means we could not evaluate it, N/A means it does not apply to a product like yours, and neither is in the score or its denominator. See the formula

A · Discovery

  • PASS
    Answers an agent user-agentAnswered 200 to LetAgentsIn/1.0 (+https://letagentsin.com/methodology)
  • PASS
    llms.txt publishedllms.txt present at https://docs.here.com/llms.txt, and the 12 links we sampled across the file all answer
  • PASS
    Docs readable without JavaScript22,371 characters of text without JS, on https://docs.here.com/here-kb/docs/matrix-v8-postman-curl-examples-apikey-authentication rather than on https://docs.here.com/
  • PASS
    On-demand agents not blockedNo on-demand agent is blocked
  • N/A
    Paths robots.txt points at answerrobots.txt names no concrete path, only patterns or nothing, so there is no claim to check
  • PASS
    No punishing crawl delayNo Crawl-delay applies to the agents we check

B · Agent entry

  • FAIL
    Agent entry pointNone of the 9 known agent entry paths returns a file rather than your page shellA markdown file written for a machine turns a guessing game into a procedure it can follow.
  • FAIL
    OAuth dynamic client registrationNo OAuth metadata on any of the 9 hosts probed, including the usual auth and api subdomainsRFC 7591 is the only standard path by which an agent can register itself without a human.
  • FAIL
    MCP surfaceMCP mentioned 1x in your own files, but nothing answered at mcp.here.com, mcp.here.com/mcp, mcp.here.com/v1/mcp, api.here.com/mcp, /mcp or /api/mcpAn MCP server turns your API from something an agent reads about into something it can call.

C · Registration

  • UNMEASURED
    No CAPTCHA in the signup HTMLUnmeasurable: the signup form at https://platform.here.com/portal/sign-up?step=verify-identity&aid=www.here.com-top-nav-start-building is not in the server HTML, so its gates are not eitherServer-render the form, or tell us the endpoint it posts to, and the gates become visible to us and to an agent.
  • FAIL
    Signup reachable without a browserhttps://platform.here.com/portal/sign-up?step=verify-identity&aid=www.here.com-top-nav-start-building is reachable, but its form needs JavaScriptIf a bare HTTP request gets a 403, the agent never sees the form at all.

D · Provisioning

  • PASS
    Programmatic key provisioning2 of 7 provisioning phrases across the 5 documents we read: "management api", "create an api key (or api token, access token, personal access token, service account, auth token, secret key), next to something programmatic"
  • FAIL
    Free tier or no-card trial stated in texthttps://here.com/pricing carries a "start for free" style link and nothing else about a free tier, so what we found is a button rather than a stated priceA free tier is what lets an agent finish the job in the same session it started. Usage-priced products with self-serve signup can fail this honestly, which is why it is one point and not a verdict.

E · Integration

  • UNMEASURED
    Typed SDK on the registryUnmeasurable: we could not identify the package a developer installs to use you, from your site, your docs or a registry searchName your package once in your docs, or link it from your repository, and we stop guessing. If your product is not something a developer installs, this check does not apply to you: unmeasured is out of the score and out of the denominator, so it costs you nothing.
  • PASS
    Machine-readable API descriptionDocs serve markdown to machines, at https://docs.here.com/here-kb/docs/matrix-v8-postman-curl-examples-apikey-authentication

What we discovered on the way

Docs
https://docs.here.com/ · linked from the site
Pricing
https://here.com/pricing · guessed path
npm package
not found
GitHub
not found
Package licence
not found
Crawl-delay
none
Content-Signal
none
Blocked on-demand agents
none