Postmark
postmarkapp.com
94Score 94 out of 100/100
149.8 of 160 points.
Missed 10.2 points:
An AI agent's path through Postmark
- FindCan an agent get in and find what it needs?100/100
5 of 5 pass
- ReadCan it read what it finds?94/100
11 of 12 pass · 1 gap
- ActCan it do something with your product?Weakest step89/100
9 of 12 pass · 3 gaps
GoalAn agent uses Postmark
Wider segments are worth more points. The overall adds up every check's points, so it isn't the average of the three parts. 2 checks don't count here: see why.
Easy to find, read and use.
Postmark passes every Find check, 11 of 12 Read checks and 9 of 12 Act checks. The weakest step is Act (Install shown for four languages, Every operation has an operationId). One more fails there, but we'd skip it for now.
The pages marketing owns pass. What's left sits with engineering and product.
- Rank
- 5 of 15 · Email APIs5th of 15 Email APIsOn our 9 Nov 2026 scan
- Checks passed
- 25 of 30 counted
- This scan
From our 9 Nov 2026 scan.
Board results come from one dated scan, so every company is compared on the same day. A live scan reads the site as it is now.
- Details
Scored on 29 of 30 checks: 1 check couldn't be checked.
1 check doesn't count here:
- 1 needs an OAuth sign-in to judge, and there isn't one.
1What to fixPart 1 of 4
3 gaps to fix
Most points for the least effort. Each sits next to the file the best email API on our board shipped, as of 9 Nov 2026. One more check fails with no example to follow yet; it's below the fixes.
All 31 checks25 pass · 4 fail
Find
Read
- ✓Readable without JavaScript (AR-READ-01), Pass12 of 15 pass
- ✓Docs readable without a login (LG-READ-01), PassPass
- ✓Real 404s (AR-READ-02), Pass15 of 15 pass
- ✓llms.txt (AR-READ-07), Pass14 of 15 pass
- ?llms.txt links work, and it fits (LG-READ-02), Couldn't checkCouldn't check
- ✓Docs pages fit an agent's context (LG-READ-04), PassPass
- ✓Meta description (AR-READ-03), Pass15 of 15 pass
- ✓Structured docs page (AR-READ-04), Pass13 of 15 pass
- ✓Code samples say their language (AR-READ-05), Pass13 of 15 pass
- ✓Readable pricing (AR-READ-11), Pass15 of 15 pass
- ✓Structured data (AR-READ-08), Pass13 of 15 pass
- ✓Machine-readable discovery file (AR-READ-06), Pass8 of 15 pass
Act
- ✓MCP server or CLI (AR-ACT-10), Pass12 of 15 pass
- ✓OpenAPI spec (AR-ACT-02), Pass11 of 15 pass
- ✓npm and PyPI packages (AR-ACT-06), Pass11 of 15 pass
- ✓Auth an agent can follow (proxy) (AR-ACT-01), Pass12 of 15 pass
- ✓MCP server (AR-ACT-03), Pass14 of 15 pass
- ✓Errors have a schema (LG-ACT-02), PassPass
- ×Tools for browser agents (AR-ACT-07), Fail0 of 15 pass
- ✓An agent skill is published (LG-ACT-03), PassPass
- –Sign-in an MCP client can use (LG-ACT-04), Not countedNot counted
Fix 1: Your API spec leaves some operations without a name
Do this: Give every operation in your OpenAPI spec an operationId: a short, unique name like sendEmail or listDomains.
Every operation has an operationId: each call in your API spec has a name (an operationId) that tools and agents use for it.
×FailWhat we read on Postmark (1)
- GEThttps://postmarkapp.com/swagger/server.ymlHTTP 20041 of 43 operations have an operationId; without one: GET /bounces/{bounceid}/dump, POST /templates
✓PassFrom Mailtrap, on our email API board, as of 9 Nov 2026
- GEThttps://raw.githubusercontent.com/mailtrap/mailtrap-openapi/main/specs/email-sending-transactional.openapi.ymlHTTP 2002 of 2 operations have an operationId
Why it might matter
Tools that turn a spec into an agent's tools or an SDK name each call by its operationId; without one, an agent gets a made-up name or none.
Our call · Worth doing.
Minutes of work in your spec, and tools that turn it into an agent's tools get real names.
Our judgement.
How we test this
- In the OpenAPI spec AR-ACT-02 finds, we count the operations with a non-empty operationId.
- The credit is the share that have one.
- With no spec, it isn't counted: AR-ACT-02 already counts that.
1 more fails, with no example yet: Tools for browser agents
Nobody on the board passes our check yet
No email API on our board passes our check on these yet, so there's no example to show.
Tools for browser agents: we found something close
Tools for browser agents: tools your web page offers to AI agents that work in a browser (a proposed standard).
We found navigator.modelContext and provideContext with a tools list in this script on 2 Nov, and your homepage loads it. Our rule reads your homepage's raw HTML and inline scripts, not the scripts it loads. Registering the same tools in an inline script would pass this check.
https://postmarkapp.com/dist/js/agentTools.40c0c4a861ddb1979269.js
It costs a point, but it's only worth building if agents need to operate forms on your site. If they do, a browser agent may find no tools to call and have to click through instead.
Don't do it for the score. It's still a proposed standard, and almost nobody on our boards passes our check, though Bird, Postmark and CrewAI load it from a script our check doesn't read. Build it only if agents need to operate forms on your site. Our judgement.
Show every address our checks read
Where our checks looked
Every address our checks read in our 9 Nov 2026 scan, by host. What each check read, not a recording of a visit, so there's no order.
✓ passes on this address alone× fails: select it to open the fix· also read here
postmarkapp.com
- /robots.txt200 OK✓AI agents allowed, homepage reachable: Pass
- /200 OK·Our scanner gets in: also read here·Readable without JavaScript: also read here?llms.txt links work, and it fits: Couldn't check✓Meta description: Pass✓Structured data: Pass×Tools for browser agents: Fail
- /developer200 OK·Our scanner gets in: also read here✓Docs page: Pass·llms.txt linked from your pages: also read here·Readable without JavaScript: also read here·Docs readable without a login: also read here·Docs pages fit an agent's context: also read here✓Structured docs page: Pass
- /llms.txt200 OK·llms.txt linked from your pages: also read here✓llms.txt: Pass✓Code samples say their language: Pass✓Auth an agent can follow (proxy): Pass
- /sitemap.xml200 OK✓Sitemap: Pass
- /developer/get-started200 OK·Readable without JavaScript: also read here·Docs readable without a login: also read here·Docs pages fit an agent's context: also read here✓npm and PyPI packages: Pass
- /why200 OK·Readable without JavaScript: also read here·Docs readable without a login: also read here·Docs pages fit an agent's context: also read here
- /email-api200 OK·Readable without JavaScript: also read here·Docs readable without a login: also read here·Docs pages fit an agent's context: also read here
- /smtp-service200 OK·Readable without JavaScript: also read here·Docs readable without a login: also read here·Docs pages fit an agent's context: also read here
- /message-streams200 OK·Readable without JavaScript: also read here·Docs readable without a login: also read here·Docs pages fit an agent's context: also read here
- /transactional-email200 OK·Readable without JavaScript: also read here·Docs readable without a login: also read here·Docs pages fit an agent's context: also read here
- /leaderfile-check-404404 · expected, it's a probe✓Real 404s: Pass
- /pricing200 OK✓Readable pricing: Pass✓Free tier in emails: Pass
- /.well-known/oauth-authorization-server404 not found·Machine-readable discovery file: also read here–Sign-in an MCP client can use: Not counted
- /.well-known/oauth-protected-resource404 not found·Machine-readable discovery file: also read here
- /.well-known/openid-configuration404 not found·Machine-readable discovery file: also read here
- /.well-known/api-catalog200 OK·Machine-readable discovery file: also read here
- /.well-known/agent-card.json404 not found·Machine-readable discovery file: also read here
- /swagger/server.yml200 OK✓OpenAPI spec: Pass✓Errors have a schema: Pass✓Send operation in the spec: Pass
- /.well-known/agent-skills/index.json200 OK·An agent skill is published: also read here
- /.well-known/agent-skills/postmark/SKILL.md200 OK·An agent skill is published: also read here
raw.githubusercontent.com
- /ActiveCampaign/postmark-mcp/main/README.md200 OK✓MCP server or CLI: Pass✓MCP server: Pass
3 checks in red are your fixes. Select one to open it.Sign-in an MCP client can use weren't counted.
Want a hand fixing this?
Leave your email and we'll reply about the gaps on postmarkapp.com. One reply, no newsletter.
We store your email, this domain and its gaps, to reply. Nothing else. To be removed, email rahulu626@gmail.com
2How it comparesPart 2 of 4
How Postmark compares
Score after each fix
Mailtrap, the leader, at 99ScoreRank
- Nowscore 94rank 5
- +1 fixscore 94rank 5
- +2 fixesscore 96rank =2level with Bird (ex-SparkPost) and Resend
- +3 fixesscore 99rank =1level with Mailtrap
Full scores and ranks on our 9 Nov 2026 board: our maths, not a forecast.
3 gaps with a real example to follow.
Find, Read and Act against the other 14 email APIs
Out of 100. On each bar, the light mark is their median and the dark one their best.
YouMedianBest
- Find100100100Find: 100, median 100, best 100.
- Read9495100Read: 94, median 95, best 100.
- Act898296Act: 89, median 82, best 96.
0100
Where Postmark stands
On our board
The 15 email APIs on our board average 88, and the top score is 99.
Neighbours on the board
ScoreVs Postmark
- Resend96+2
- Brevo95+1
- Postmark94
- Loops92−2
- SendGrid92−2
Resend 2 and Brevo 1 ahead. Three fixes, 99, puts Postmark past both.
Email APIs, our 9 Nov 2026 board. Our maths, not a forecast.
What Postmark does well
One more thing: only 8 of the 15 email APIs on our board pass Machine-readable discovery file. Postmark does.
The checks Postmark passes that are rarest among the 15 email APIs on our board.
- ✓Machine-readable discovery fileAR-READ-06 · 8 of 15 on our board pass this
- ✓OpenAPI specAR-ACT-02 · 11 of 15 on our board pass this
- ✓npm and PyPI packagesAR-ACT-06 · 11 of 15 on our board pass this
Compare Postmark with rivals
3Every checkPart 3 of 4
What these checks can't tell you
- Whether an agent can sign up and get a key. One registry found 30 of 100 developer tools blocked it.
- Whether coding agents write current code for your API. In our small test, a 96 and a 71 came out the same: what we found.
- Whether your bot protection lets an agent in when a person sends one. Check your CDN settings.
- Whether ChatGPT recommends you. That depends on far more than these files.
- What another scanner would give you. They ask different questions and weigh them differently: why the numbers differ.
All 31 checks
25 pass, 4 fail, 1 couldn't check, 1 not counted. The count on each row is how many of the 15 email APIs on our board pass that check.
Find · 5 of 5 pass · 36 of 36 points
✓PassAI agents allowed, homepage reachableAR-FIND-01checked / and /developer; none of the user or search agents is blocked10 of 10 points · 15 of 15 pass
10 of 10 points · Gate, worth 10
- GEThttps://postmarkapp.com/robots.txtHTTP 200checked / and /developer; none of the user or search agents is blocked
What our check kept, up to 60 lines or 6 KB
# Postmark marketing site — robots.txt # Crawl policy: AI crawlers are explicitly allowed. As a marketing site we want # our content discoverable and citable by AI search/answer engines and assistants. # Revisit this policy if crawl volume or usage becomes a concern. # # Usage policy: allowing the crawl is not the same as allowing every downstream # use, so each group below also carries a Content-Signal directive declaring how # the content may be used once fetched: # # search=yes — building a search index and serving search results # ai-input=yes — retrieval-augmented generation, grounding, and generative # AI search answers (i.e. being cited in an answer) # ai-train=no — training or fine-tuning AI models # # The Content-Signal directives in this file use the syntax and vocabulary of a # proposed IETF standard from the AI Preferences (aipref) working group and have # the meanings set forth in that draft. See https://contentsignals.org/ and # https://datatracker.ietf.org/doc/draft-romm-aipref-contentsignals/ # # Under RFC 9309 a crawler obeys only its single most-specific matching group, so # the directive is repeated in every group rather than declared once under "*". # Nothing here grants permission beyond these signals; to license this content, # contact Postmark directly. # --- AI crawlers: allowed --- # OpenAI User-agent: GPTBot Content-Signal: search=yes, ai-input=yes, ai-train=no Allow: / User-agent: OAI-SearchBot Content-Signal: search=yes, ai-input=yes, ai-train=no Allow: / User-agent: ChatGPT-User Content-Signal: search=yes, ai-input=yes, ai-train=no Allow: / # Anthropic User-agent: ClaudeBot Content-Signal: search=yes, ai-input=yes, ai-train=no Allow: / User-agent: Claude-User Content-Signal: search=yes, ai-input=yes, ai-train=no Allow: / User-agent: Claude-SearchBot Content-Signal: search=yes, ai-input=yes, ai-train=no Allow: / # Legacy Anthropic token, superseded by ClaudeBot. Listed explicitly because # RFC 9309 matches on the exact product token, so ClaudeBot does not cover it. User-agent: Claude-Web Content-Signal: search=yes, ai-input=yes, ai-train=no Allow: / # Google (AI/Gemini training — separate from Googlebot search) User-agent: Google-ExtendedHow we test this:
- We read robots.txt and check it doesn't disallow / for the agents that fetch for a user or find sites for AI search: ChatGPT-User, OAI-SearchBot, Claude-User, Claude-SearchBot, Perplexity-User, PerplexityBot (no robots.txt counts as allowed).
- We show blocks on GPTBot (OpenAI model training), not scored; ClaudeBot (Anthropic model training), not scored; Google-Extended (Gemini training and grounding), not scored in v1; CCBot (Common Crawl's open dataset), not scored: blocking them is the site's own call.
- Whether Google-Extended should be scored is a rubric v2 question, and we'll announce it before changing anything.
- Then we fetch your homepage as LeaderfileBot and check it returns 2xx after redirects, with no challenge page.
✓PassOur scanner gets inLG-FIND-01homepage: a real answer (200); docs page: a real answer (200)10 of 10 points
10 of 10 points · Gate, worth 10
- GEThttps://postmarkapp.com/HTTP 200homepage: a real answer (200)
- GEThttps://postmarkapp.com/developerHTTP 200docs page: a real answer (200)
How we test this:
- We fetch your homepage and your docs page as LeaderfileBot, our own scanner, and check neither answers with a challenge page, or a 401 or 403 that a normal browser gets past.
- One blocked page is a fail; both caps your score at 39.
- Firewalls often let in crawlers they can verify, so ChatGPT or Claude may still get in where our scanner can't.
✓PassDocs pageAR-FIND-02docs page, linked from https://postmarkapp.com/7 of 7 points · 15 of 15 pass
7 of 7 points · High, worth 7
- GEThttps://postmarkapp.com/developerHTTP 200docs page from our board config, linked from https://postmarkapp.com/
How we test this:
- We look for your docs page: the first homepage link to a docs., dev. or developer(s). subdomain of your domain, or to a /docs or /developer(s) path; with none, we try https://docs.<host>/ then https://<host>/docs.
- It passes if that page returns 200.
- Board companies use a docs URL we confirmed by hand.
✓Passllms.txt linked from your pagesLG-FIND-02docs page: a link to https://postmarkapp.com/llms.txt; an llms.txt with markdown links7 of 7 points
7 of 7 points · High, worth 7
- GEThttps://postmarkapp.com/developerHTTP 200docs page: a link to https://postmarkapp.com/llms.txt
- GEThttps://postmarkapp.com/llms.txtHTTP 200an llms.txt with markdown links
What our check kept, up to 60 lines or 6 KB
a link: https://postmarkapp.com/llms.txtHow we test this:
- We read your homepage and your docs page and look for a pointer to an llms.txt: a link to it, a <link> tag, a Link header with rel="llms-txt" or an X-Llms-Txt header, or a line on the page naming /llms.txt.
- It passes when one points at an llms.txt that answers with markdown links.
- AFDocs checks the same (llms-txt-directive).
✓PassSitemapAR-FIND-03sitemap listed in robots.txt, <urlset> root2 of 2 points · 15 of 15 pass
2 of 2 points · Low, worth 2
- GEThttps://postmarkapp.com/sitemap.xmlHTTP 200sitemap listed in robots.txt, <urlset> root
What our check kept, up to 60 lines or 6 KB
<?xml version="1.0" encoding="UTF-8"?> <urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"> <url> <loc>https://postmarkapp.com/</loc> <changefreq>daily</changefreq> <priority>1.0</priority> </url> <url> <loc>https://postmarkapp.com/why</loc> <changefreq>monthly</changefreq> <priority>0.9</priority> </url> <url> <loc>https://postmarkapp.com/customers</loc> <changefreq>monthly</changefreq> <priority>0.5</priority> </url> <url> <loc>https://postmarkapp.com/dedicated-ips</loc> <changefreq>monthly</changefreq> <priority>0.5</priority> </url> <url> <loc>https://postmarkapp.com/write-for-us</loc> <changefreq>monthly</changefreq> <priority>0.5</priority> </url> <url> <loc>https://postmarkapp.com/customers/1password</loc> <lastmod>2019-07-09T16:44:17-04:00</lastmod> <changefreq>weekly</changefreq> <priority>0.3</priority> </url> <url> <loc>https://postmarkapp.com/customers/asana</loc> <lastmod>2018-07-17T08:22:01-04:00</lastmod> <changefreq>weekly</changefreq> <priority>0.3</priority> </url> <url> <loc>https://postmarkapp.com/customers/feature-upvote</loc> <lastmod>2019-03-20T20:27:34-04:00</lastmod> <changefreq>weekly</changefreq> <priority>0.3</priority> </url> <url> <loc>https://postmarkapp.com/customers/eternia-web-solutions</loc> <lastmod>2023-12-21T16:47:07-05:00</lastmod> <changefreq>weekly</changefreq> <priority>0.3</priority> </url> <url> <loc>https://postmarkapp.com/customers/livechat</loc>How we test this:
- We fetch the Sitemap: URL from robots.txt, else /sitemap.xml, and check it returns 200 with a <urlset> or <sitemapindex> root element.
Read · 11 of 12 pass · 64 of 68 points
✓PassReadable without JavaScriptAR-READ-01homepage: 1452 words in the raw HTML; docs page: 1251 words in the raw HTML; docs surface: 2356 words in the raw HTML; linked from the docs page: 642 words in the raw HTML; linked from the docs page: 1210 words in the raw HTML; linked from the docs page: 961 words in the raw HTML; linked from the docs page: 1877 words in the raw HTML; linked from the docs page: 1376 words in the raw HTML10 of 10 points · 12 of 15 pass
10 of 10 points · Gate, worth 10
- GEThttps://postmarkapp.com/HTTP 200homepage: 1452 words in the raw HTML
- GEThttps://postmarkapp.com/developerHTTP 200docs page: 1251 words in the raw HTML
- GEThttps://postmarkapp.com/developer/get-startedHTTP 200docs surface: 2356 words in the raw HTML
- GEThttps://postmarkapp.com/whyHTTP 200linked from the docs page: 642 words in the raw HTML
- GEThttps://postmarkapp.com/email-apiHTTP 200linked from the docs page: 1210 words in the raw HTML
- GEThttps://postmarkapp.com/smtp-serviceHTTP 200linked from the docs page: 961 words in the raw HTML
- GEThttps://postmarkapp.com/message-streamsHTTP 200linked from the docs page: 1877 words in the raw HTML
- GEThttps://postmarkapp.com/transactional-emailHTTP 200linked from the docs page: 1376 words in the raw HTML
How we test this:
- We count the visible words in the raw HTML (no JavaScript run) of your homepage and your docs page, and check each has at least 150.
- With no docs page found (AR-FIND-02), the homepage is judged alone.
✓PassDocs readable without a loginLG-READ-01docs page: readable without a login; docs surface: readable without a login; linked from the docs page: readable without a login10 of 10 points
10 of 10 points · Gate, worth 10
- GEThttps://postmarkapp.com/developerHTTP 200docs page: readable without a login
- GEThttps://postmarkapp.com/developer/get-startedHTTP 200docs surface: readable without a login
- GEThttps://postmarkapp.com/whyHTTP 200linked from the docs page: readable without a login
- GEThttps://postmarkapp.com/email-apiHTTP 200linked from the docs page: readable without a login
- GEThttps://postmarkapp.com/smtp-serviceHTTP 200linked from the docs page: readable without a login
- GEThttps://postmarkapp.com/message-streamsHTTP 200linked from the docs page: readable without a login
- GEThttps://postmarkapp.com/transactional-emailHTTP 200linked from the docs page: readable without a login
How we test this:
- We read your docs page and up to 7 more docs pages (the ones we read for other checks, then links on your docs page).
- A page fails when it answers 401 or 403 to a normal browser too, redirects to a sign-in page, or is a sign-in form with little else on it.
- A redirect counts as a sign-in when it adds one: a sign-in path the page didn't have, a login subdomain, or an identity provider's site such as Okta's when the page was on another site.
- A sign-up page, one whose title or main heading says sign up or create an account, isn't a login.
- A refusal only to automated readers is our scanner being blocked, not a login.
- A login on your docs page caps your score at 39; across the pages, a share of 25% or less caps it at 39, 50% or less at 59.
✓PassReal 404sAR-READ-02returned 404 for a page that doesn't exist10 of 10 points · 15 of 15 pass
10 of 10 points · Must, worth 10
- GEThttps://postmarkapp.com/leaderfile-check-404HTTP 404returned 404 for a page that doesn't exist
How we test this:
- We fetch /leaderfile-check-404, a page that shouldn't exist, and check it returns 404 or 410 after redirects.
- Off the board, if that address refuses automated readers, we try /leaderfile-check-404.html.
✓Passllms.txtAR-READ-07text file with markdown links7 of 7 points · 14 of 15 pass
7 of 7 points · High, worth 7
- GEThttps://postmarkapp.com/llms.txtHTTP 200text file with markdown links
What our check kept, up to 60 lines or 6 KB
# Postmark > Postmark is a reliable transactional and bulk email service that helps developers deliver and track application emails. It provides REST APIs, SMTP support, webhooks, and comprehensive email templates to replace traditional SMTP with a scalable, developer-friendly solution. ## Quick Start To use Postmark for sending emails in your application: 1. Create a Postmark account and verify your sending domain or email address 2. Get your Server API Token from your Postmark server settings 3. Use the REST API or SMTP to send emails 4. Maximum email size is 10 MB (including attachments) 5. Maximum 50 recipients per email (To, CC, BCC combined) ### Authentication All API requests require authentication using the `X-Postmark-Server-Token` header with your Server API Token: ``` X-Postmark-Server-Token: your-server-token-here ``` For testing without actually sending emails, use `POSTMARK_API_TEST` as your token. ## Pricing - [Pricing](https://postmarkapp.com/pricing.txt): Plans, pricing by volume, per-1,000 overage rates, feature highlights, optional add-ons (dedicated IPs, custom retention, DMARC monitoring), and pricing FAQs ## API Reference - [TypeScript transactional email recipe](https://postmarkapp.com/developer/integration/official-libraries#typescript): Install, shared client, template send, batch handling, webhook payload validation, and repair guide — complete TypeScript path from setup to production - [Send a receipt with templates](https://postmarkapp.com/developer/api/templates-api#send-a-receipt-with-templates): Task-first TypeScript examples for receipts, welcome emails, and other structured transactional sends using `TemplateAlias` and `TemplateModel` - [Webhook protection guide](https://postmarkapp.com/developer/webhooks/webhooks-overview#protecting-your-webhook): Node/TypeScript HTTP Basic Authentication, IP allowlisting, payload shape validation, event parsing, Express route setup, and idempotency pattern — Postmark does not sign webhooks with HMAC - [Batch send with partial-failure handling](https://postmarkapp.com/developer/user-guide/send-email-with-api/batch-emails): TypeScript `Promise.allSettled` batch example with per-recipient `MessageID` and error reporting - [Send a single email](https://postmarkapp.com/developer/api/email-api#send-a-single-email): POST to `/email` endpoint - [Send batch emails](https://postmarkapp.com/developer/api/email-api#send-batch-emails): POST to `/email/batch` endpoint - [Send with templates](https://postmarkapp.com/developer/api/templates-api#email-with-template): POST to `/email/withTemplate` endpoint - [Send batch with templates](https://postmarkapp.com/developer/api/templates-api#send-batch-with-templates): POST to `/email/batchWithTemplates` endpoint - [Send bulk emails](https://postmarkapp.com/developer/api/bulk-email): POST to `/email/bulk` endpoint for broadcast streams - [Template management](https://postmarkapp.com/developer/api/templates-api): Create, edit, list templates via API - [Bounce API](https://postmarkapp.com/developer/api/bounce-api): Manage bounced emails and reactivate addresses - [Message tracking](https://postmarkapp.com/developer/api/messages-api): Search and retrieve message details - [Stats API](https://postmarkapp.com/developer/api/stats-api): Get delivery, open, and click statistics - [Webhooks](https://postmarkapp.com/developer/webhooks/webhooks-overview): Configure real-time event notifications - [Delivery webhook](https://postmarkapp.com/developer/webhooks/delivery-webhook): TypeScript handler, idempotency key guidance, and Express route for delivery events - [Bounce webhook](https://postmarkapp.com/developer/webhooks/bounce-webhook): TypeScript handler distinguishing hard and soft bounces, and Express route for bounce events - [Server management](https://postmarkapp.com/developer/api/servers-api): Create and configure servers - [Domain management](https://postmarkapp.com/developer/api/domains-api): Verify domains and configure DKIM/SPF ## Core Concepts ### Message Streams Postmark separates emails into two types of Message Streams: - **Transactional**: One-to-one emails triggered by user actions (welcome emails, password resets, order confirmations) - **Broadcast**: Bulk emails for newsletters, announcements, marketing campaigns Specify the stream using the `MessageStream` field in your API calls. Most API endpoints default to "outbound" (transactional) stream. ### Key LimitationsHow we test this:
- We read llms.txt at your site root and, if your docs live on another host, at your docs root, and check one returns 200, isn't HTML and has at least one markdown link.
- Off the board, we also try your docs. host and /docs/llms.txt.
- We read the first 2 MB: a larger file is judged on that part, and the result says "read the first 2 MB; the file is larger".
?Couldn't checkllms.txt links work, and it fitsLG-READ-02the scan ran out of time (10 s more)
Not in the score · High, worth 7
- GEThttps://postmarkapp.com/no answercouldn't check: the scan ran out of time (10 s more)
How we test this:
- We read the llms.txt AR-READ-07 passes on (the first with markdown links) and fetch up to 12 of its links, spread through the file, two at a time.
- A link is broken when it answers 404 or 410, or its host doesn't exist.
- A 2xx after redirects resolves, and so does an answer like 400, 405 or 406 that shows the address is there (an MCP endpoint answers a plain GET with 405).
- A refusal, a 429 or a server error isn't judged.
- The credit is the share that resolve, halved when the file runs to 50,000 characters or more, and nothing past 100,000: AFDocs' size bands.
- With no llms.txt it isn't counted: AR-READ-07 counts that.
✓PassDocs pages fit an agent's contextLG-READ-04docs page: 8,726 characters of text; docs surface: 18,301 characters of text; linked from the docs page: 4,426 characters of text; linked from the docs page: 9,649 characters of text; linked from the docs page: 7,303 characters of text; linked from the docs page: 12,674 characters of text; linked from the docs page: 9,082 characters of text7 of 7 points
7 of 7 points · High, worth 7
- GEThttps://postmarkapp.com/developerHTTP 200docs page: 8,726 characters of text
- GEThttps://postmarkapp.com/developer/get-startedHTTP 200docs surface: 18,301 characters of text
- GEThttps://postmarkapp.com/whyHTTP 200linked from the docs page: 4,426 characters of text
- GEThttps://postmarkapp.com/email-apiHTTP 200linked from the docs page: 9,649 characters of text
- GEThttps://postmarkapp.com/smtp-serviceHTTP 200linked from the docs page: 7,303 characters of text
- GEThttps://postmarkapp.com/message-streamsHTTP 200linked from the docs page: 12,674 characters of text
- GEThttps://postmarkapp.com/transactional-emailHTTP 200linked from the docs page: 9,082 characters of text
How we test this:
- On each docs page we read (up to 7) we count the characters of visible text in the raw HTML, and of its Markdown copy if it has one, and judge the page by the larger of the two: an agent reading either may be cut off.
- Under 50,000 passes, up to 100,000 is half, more fails: AFDocs' bands, from the limits agents cut pages at.
- The credit is the average across the pages.
✓PassMeta descriptionAR-READ-03has a meta description4 of 4 points · 15 of 15 pass
4 of 4 points · Medium, worth 4
- GEThttps://postmarkapp.com/HTTP 200has a meta description
What our check kept, up to 60 lines or 6 KB
<meta name="description" content="Send transactional and marketing emails and get them to the inbox on time, every time. Postmark is a fast and reliable email delivery service for developers.">How we test this:
- We check your homepage's raw HTML (no JavaScript run) has a non-empty meta description or og:description.
✓PassStructured docs pageAR-READ-0420 headings (h1 to h3), 1251 words in the raw HTML4 of 4 points · 13 of 15 pass
4 of 4 points · Medium, worth 4
- GEThttps://postmarkapp.com/developerHTTP 20020 headings (h1 to h3), 1251 words in the raw HTML
What our check kept, up to 60 lines or 6 KB
<h2>Features</h2> <h2>Postmark For</h2> <h2>Postmark vs.</h2> <h2>Features</h2> <h2>Postmark For</h2> <h2>Postmark vs.</h2> <h3>Overview</h3> <h3>Integration</h3> <h3>User guide</h3> <h3>API reference</h3>How we test this:
- We check your docs page's raw HTML (no JavaScript run) has at least 2 headings (h1 to h3) with text and at least 150 visible words.
- Off the board, a docs page that comes back as markdown counts # to ### lines outside code blocks as its headings.
✓PassCode samples say their languageAR-READ-05llms.txt: a code block with a language tag4 of 4 points · 13 of 15 pass
4 of 4 points · Medium, worth 4
- GEThttps://postmarkapp.com/llms.txtHTTP 200llms.txt: a code block with a language tag
What our check kept, up to 60 lines or 6 KB
```jsonHow we test this:
- On your docs surface, we look for a code block that carries a language tag: language-* or lang-* on <pre> or <code>, code-language-* on any element (a code block's wrapper, say), or a data-language or data-lang attribute.
- In markdown files, a fenced block with a language (```ts) counts.
- If no page shows one, we read the markdown copy each HTML page declares (a <link rel="alternate" type="text/markdown">, or its URL plus .md listed in your llms.txt), since many docs sites add the language label with JavaScript.
- If none of the pages we read is a quickstart or SDK page, a miss isn't counted: it can't fail you or withhold your score.
✓PassReadable pricingAR-READ-11raw text shows "Free" next to a month or year4 of 4 points · 15 of 15 pass
4 of 4 points · Medium, worth 4
- GEThttps://postmarkapp.com/pricingHTTP 200from our board config, linked from https://postmarkapp.com/; raw text shows "Free" with a period
What our check kept, up to 60 lines or 6 KB
res you need, at a price that makes sense. Start Free Trial No Credit Card Required How many emails do you send and receive each month? 10,000 emails Free $0.00 /mo Test your integration with 100 emails/month 100 emails/month. No overages allowed in this plan. Perfect for: Testing your integration EvaluHow we test this:
- We fetch the first homepage link with 'pricing' in its path, else /pricing (board companies: a pricing URL we confirmed by hand), and check it returns 200 and its raw text (no JavaScript run) shows a price or 'free' within 80 characters of month, mo, year or yr.
- Off the board, a pricing address that answers with JSON counts when it has a price field.
×FailDocs in MarkdownLG-READ-03Agents get your docs as HTML only, not as Markdown0 of 4 points
Agents get your docs as HTML only, not as Markdown. An agent reading HTML spends its context on menus and markup, and may cut the page off before it reaches the part it needs.
0 of 4 points · Medium, worth 4
- GEThttps://postmarkapp.com/transactional-emailHTTP 200linked from the docs page: HTML only
How we test this:
- On each docs page we read (up to 7), one Markdown answer with content passes the page: it answers Accept: text/markdown with text/markdown, declares a copy with <link rel="alternate" type="text/markdown"> that returns Markdown, or the address the page lands on, after redirects, ending in .md does (for one ending in a slash, both /page.md and /page/index.md).
- An empty answer doesn't count.
- The credit is the share of pages that pass.
- AFDocs, Cloudflare's isitagentready and is-agentic check it.
✓PassStructured dataAR-READ-08has an application/ld+json block2 of 2 points · 13 of 15 pass
2 of 2 points · Low, worth 2
- GEThttps://postmarkapp.com/HTTP 200has an application/ld+json block
What our check kept, up to 60 lines or 6 KB
{ "@context": "http://schema.org", "@type": "Organization", "url": "https://postmarkapp.com", "logo": "https://postmarkapp.com/images/logo-stamp-social.png", "name": "Postmark", "founder": [ { "@type": "Person", "name": "Jason VandeBoom", "jobTitle": "CEO" } ], "foundingLocation": { "@type": "Place", "address": { "@type": "PostalAddress", "streetAddress": "1 North Dearborn St, 5th Floor", "addressLocality": "Chicago", "addressRegion": "IL", "postalCode": "60602", "addressCountry": "US" } }, "location": { "@type": "Place", "address": { "@type": "PostalAddress", "streetAddress": "1 North Dearborn St, 5th Floor", "addressLocality": "Chicago", "addressRegion": "IL", "postalCode": "60602", "addressCountry": "US" } }, "sameAs": [ "https://x.com/postmarkapp", "https://discord.com/invite/cHzm4PYmvs", "https://www.linkedin.com/company/postmarkapp/", "https://www.youtube.com/@Postmarkapp" ] }How we test this:
- We check your homepage's raw HTML has an application/ld+json block that parses as JSON and has @type or @context.
✓PassMachine-readable discovery fileAR-READ-06valid JSON2 of 2 points · 8 of 15 pass
2 of 2 points · Low, worth 2
- GEThttps://postmarkapp.com/.well-known/oauth-authorization-serverHTTP 404returned 404
- GEThttps://postmarkapp.com/.well-known/oauth-protected-resourceHTTP 404returned 404
- GEThttps://postmarkapp.com/.well-known/openid-configurationHTTP 404returned 404
- GEThttps://postmarkapp.com/.well-known/api-catalogHTTP 200valid JSON
- GEThttps://postmarkapp.com/.well-known/agent-card.jsonHTTP 404returned 404
What our check kept, up to 60 lines or 6 KB
{ "linkset": [ { "anchor": "https://api.postmarkapp.com/", "service-desc": [ { "href": "https://postmarkapp.com/swagger/server.yml", "type": "application/yaml", "title": "Postmark Server API" }, { "href": "https://postmarkapp.com/swagger/account.yml", "type": "application/yaml", "title": "Postmark Account API" } ], "service-doc": [ { "href": "https://postmarkapp.com/developer", "type": "text/html", "title": "Postmark API documentation" }, { "href": "https://postmarkapp.com/api-explorer", "type": "text/html", "title": "Postmark API Explorer" } ], "status": [ { "href": "https://status.postmarkapp.com/", "type": "text/html", "title": "Postmark system status" } ] } ] }How we test this:
- We fetch five standard .well-known files and check at least one returns 200 with valid JSON: oauth-authorization-server (RFC 8414), oauth-protected-resource (RFC 9728), openid-configuration, api-catalog (RFC 9727) and agent-card.json (A2A).
- This list is ours: AgentReady v2.0 doesn't name one.
- Off the board, on a miss, we also read oauth-protected-resource on the mcp., api. and docs. hosts of your domain, where that metadata usually lives, and it counts only with its resource field.
Act · 9 of 12 pass · 49.8 of 56 points
✓PassMCP server or CLIAR-ACT-10MCP page: tools sendEmail, sendEmailWithTemplate, sendBatch, listTemplates, searchOutboundMessages, getDeliveryStats; sendEmail, sendEmailWithTemplate, sendBatch, listTemplates, searchOutboundMessages, getDeliveryStats act on the product (AR-ACT-03)10 of 10 points · 12 of 15 pass
10 of 10 points · Must, worth 10
- GEThttps://raw.githubusercontent.com/ActiveCampaign/postmark-mcp/main/README.mdHTTP 200MCP page: tools sendEmail, sendEmailWithTemplate, sendBatch, listTemplates, searchOutboundMessages, getDeliveryStats; sendEmail, sendEmailWithTemplate, sendBatch, listTemplates, searchOutboundMessages, getDeliveryStats act on the product (AR-ACT-03)
What our check kept, up to 60 lines or 6 KB
- [sendEmail](#sendemail)How we test this:
- Passes when AR-ACT-03 passes (your docs surface names your own MCP server, not just a mention or a blog post about one; on the board, only an MCP server with a tool that acts on the product: send, manage or query, not only search docs, since AgentReady calls this "the interface an agent acts through"), or when your docs surface shows a CLI install: brew install, npm i -g, npm install -g, pipx install, uv tool install, go install, az extension add, or curl ... | sh (or | bash).
- A mention of MCP that isn't your own server, with no CLI install, isn't counted.
- For board companies, the CLI half counts only a command of the product's own CLI that we confirmed by hand, like az communication email send or twilio email:send, on the pages we read or on the docs page that shows it: an install alone could be any tool (an MCP setup guide installing pnpm, say).
- For a product inside a larger platform, the platform's MCP server or CLI counts when its docs show it covers the product.
- An MCP server earns both this check and AR-ACT-03, because AgentReady lists them as two items.
- If none of the pages we read is a quickstart or SDK page, a miss isn't counted: it can't fail you or withhold your score.
✓PassOpenAPI specAR-ACT-02Swagger 2.0, 38 paths7 of 7 points · 11 of 15 pass
7 of 7 points · High, worth 7
- GEThttps://postmarkapp.com/swagger/server.ymlHTTP 200from our board config, linked from https://postmarkapp.com/developer; Swagger 2.0, 38 paths
How we test this:
- We look for an OpenAPI or Swagger document: for board companies, a URL we confirmed by hand; then up to 2 links on your docs surface whose URL mentions openapi or swagger, or whose link text does for a .json or .yaml file (files on other sites count when your docs link them; an address written out in your llms.txt or another text file counts as a link, and its line as the link text); then /openapi.json and /openapi.yaml on your host and your docs host.
- Off the board, a .json or .yaml link under an llms.txt heading that names OpenAPI counts as a link to a spec, or, where that section has none, a link with no file extension, and on a miss we also try those two on the docs., developers. and api. hosts of your domain.
- It passes if one parses as JSON or YAML with an openapi or swagger key and at least one path.
- A spec over 10 MB counts as couldn't check.
✓Passnpm and PyPI packagesAR-ACT-06quickstart page: npm install "npm install postmark"; quickstart page: pip install "pip install postmark-python"7 of 7 points · 11 of 15 pass
7 of 7 points · High, worth 7
- GEThttps://postmarkapp.com/developer/get-startedHTTP 200quickstart page: npm install "npm install postmark"
- GEThttps://postmarkapp.com/developer/get-startedHTTP 200quickstart page: pip install "pip install postmark-python"
What our check kept, up to 60 lines or 6 KB
npm install postmark pip install postmark-pythonHow we test this:
- On your docs surface we look for an npm install (npm, yarn, pnpm or bun) and a pip install (pip, poetry or uv) of a named package.
- Both must appear, on any of the pages (AgentReady: npm and PyPI).
- Off the board, uv tool install and pipx install also count as a pip install.
- Off the board, if one is missing we also read the markdown copy each HTML page declares (a <link rel="alternate" type="text/markdown">, or its URL plus .md listed in your llms.txt), then up to 2 pages your llms.txt names for that language.
- AgentReady v2.0 asks for SDKs and a CLI here; this check tests the npm and PyPI half, and a CLI counts under AR-ACT-10.
- If none of the pages we read is a quickstart or SDK page, a miss isn't counted: it can't fail you or withhold your score.
✓PassAuth an agent can follow (proxy)AR-ACT-01llms.txt: "API Token" next to an auth header4 of 4 points · 12 of 15 pass
4 of 4 points · Medium, worth 4
- GEThttps://postmarkapp.com/llms.txtHTTP 200llms.txt: "API Token" next to an auth header
What our check kept, up to 60 lines or 6 KB
All API requests require authentication using the `X-Postmark-Server-Token` header with your Server API Token:How we test this:
- A stand-in: AgentReady asks for self-serve key generation with documented scopes, or OAuth metadata, and key sign-up can't be tested in code.
- It passes if OAuth metadata parses as JSON with the field its RFC requires (issuer for RFC 8414, resource for RFC 9728), or if your docs say "API key" or "API token" (also inside a placeholder like YOUR_API_KEY) within 200 characters of a documented auth header: an X-...-Key or X-...-Token header, a header named ...-Key or ...-Token, Authorization with Bearer, or "Bearer API key".
- The word "token" on its own doesn't count.
- For board companies we also read the authentication page their docs link.
- Off the board, OAuth metadata with its resource field on your mcp., api. or docs. host also counts.
- A board company whose API signs each request (like AWS Signature Version 4) or takes the key in the request body isn't counted: this stand-in can't judge that kind of auth either way.
- If none of the pages we read is a quickstart or SDK page, a miss isn't counted: it can't fail you or withhold your score.
◐PartlyEvery operation has an operationIdLG-ACT-01Your API spec leaves some operations without a name3.8 of 4 points
Your API spec leaves some operations without a name. Tools that turn a spec into an agent's tools or an SDK name each call by its operationId; without one, an agent gets a made-up name or none.
3.8 of 4 points · Medium, worth 4 · 95% credit
- GEThttps://postmarkapp.com/swagger/server.ymlHTTP 20041 of 43 operations have an operationId; without one: GET /bounces/{bounceid}/dump, POST /templates
How we test this:
- In the OpenAPI spec AR-ACT-02 finds, we count the operations with a non-empty operationId.
- The credit is the share that have one.
- With no spec, it isn't counted: AR-ACT-02 already counts that.
✓PassMCP serverAR-ACT-03MCP page: tools sendEmail, sendEmailWithTemplate, sendBatch, listTemplates, searchOutboundMessages, getDeliveryStats; sendEmail, sendEmailWithTemplate, sendBatch, listTemplates, searchOutboundMessages, getDeliveryStats act on the product4 of 4 points · 14 of 15 pass
4 of 4 points · Medium, worth 4
- GEThttps://raw.githubusercontent.com/ActiveCampaign/postmark-mcp/main/README.mdHTTP 200MCP page: tools sendEmail, sendEmailWithTemplate, sendBatch, listTemplates, searchOutboundMessages, getDeliveryStats; sendEmail, sendEmailWithTemplate, sendBatch, listTemplates, searchOutboundMessages, getDeliveryStats act on the product
What our check kept, up to 60 lines or 6 KB
- [sendEmail](#sendemail)How we test this:
- On your docs surface we look for your own MCP server and quote the line: your name next to "MCP" ("Acme MCP server"), "our" or "official" MCP server, or an mcp.<your domain> address.
- Any other mention of "MCP server" or "Model Context Protocol", like a directory or an explainer, isn't counted: it can't fail you and it earns no points, because we can't tell the server is yours.
- A mention in a link to a blog post, or on an llms.txt line that links to one, doesn't count at all: a post about building a server isn't one you ship.
- For board companies we read the MCP page their docs link and list the tools it documents: a server that only searches your docs counts here, as AgentReady describes an MCP server as a "standard tool protocol for docs search and actions".
- We don't probe /mcp or call any server.
- Off the board, OAuth metadata with its resource field on your mcp. host also counts: it's the server's own file.
- If none of the pages we read is a quickstart or SDK page, a miss isn't counted: it can't fail you or withhold your score.
✓PassErrors have a schemaLG-ACT-0243 of 43 operations declare an error response with a schema4 of 4 points
4 of 4 points · Medium, worth 4
- GEThttps://postmarkapp.com/swagger/server.ymlHTTP 20043 of 43 operations declare an error response with a schema
How we test this:
- In the OpenAPI spec AR-ACT-02 finds, we count the operations that declare a 4xx, 5xx or default response with a schema, directly or through a $ref.
- The credit is the share that do.
- We note when they use application/problem+json (RFC 9457), the standard shape.
- With no spec, it isn't counted.
- The IETF's draft agent-friendly API profile, is-agentic and Alpic check it.
×FailTools for browser agentsAR-ACT-07· we found something close0 of 2 points · 0 of 15 pass
Tools for browser agents: we found something close. It costs a point, but it's only worth building if agents need to operate forms on your site. If they do, a browser agent may find no tools to call and have to click through instead.
0 of 2 points · Low, worth 2
- GEThttps://postmarkapp.com/HTTP 200no modelContext in the raw HTML or inline scripts
- GEThttps://postmarkapp.com/dist/js/agentTools.40c0c4a861ddb1979269.jsHTTP 200We found navigator.modelContext and provideContext with a tools list in this script on 2 Nov, and your homepage loads it. Our rule reads your homepage's raw HTML and inline scripts, not the scripts it loads. Registering the same tools in an inline script would pass this check.
How we test this:
- We check your homepage's raw HTML, inline scripts included, contains modelContext (AgentReady names document.modelContext).
- External scripts aren't fetched.
✓PassAn agent skill is publishedLG-ACT-036 skills listed (postmark, postmark-email-best-practices, postmark-inbound, ...); the first skill, postmark, answers2 of 2 points
2 of 2 points · Low, worth 2
- GEThttps://postmarkapp.com/.well-known/agent-skills/index.jsonHTTP 2006 skills listed (postmark, postmark-email-best-practices, postmark-inbound, ...)
- GEThttps://postmarkapp.com/.well-known/agent-skills/postmark/SKILL.mdHTTP 200the first skill, postmark, answers
What our check kept, up to 60 lines or 6 KB
{ "$schema": "https://schemas.agentskills.io/discovery/0.2.0/schema.json", "skills": [ { "name": "postmark", "type": "skill-md", "description": "Use when working with Postmark email platform - routes to specific sub-skills for sending emails, processing inbound email, managing templates, or configuring webhooks.", "url": "https://postmarkapp.com/.well-known/agent-skills/postmark/SKILL.md", "digest": "sha256:13464c46aedc1b118de4eb19ac1151811470b95b06ba79ceeac121aa52e87850" }, { "name": "postmark-email-best-practices", "type": "archive", "description": "Use when asking about email deliverability, compliance (CAN-SPAM, GDPR, CASL), transactional email design patterns, list management, testing safely, or general email best practices — provider-agnostic knowledge with Postmark-specific guidance.", "url": "https://postmarkapp.com/.well-known/agent-skills/postmark-email-best-practices.tar.gz", "digest": "sha256:a32e16b4825c30fa0c589dc6ccb2f04d1b8bb56f467b283a907d96e1a396fcdc" }, { "name": "postmark-inbound", "type": "archive", "description": "Use when processing incoming emails with Postmark inbound webhooks — building reply-by-email, email-to-ticket, document extraction, or any workflow that receives and parses email.", "url": "https://postmarkapp.com/.well-known/agent-skills/postmark-inbound.tar.gz", "digest": "sha256:5f730336e1d08a6c56d07cacd90780bb5761e72b36b0492c22c41d9a0ba7304a" }, { "name": "postmark-send-email", "type": "archive", "description": "Use when sending transactional or broadcast emails through Postmark — single sends, batch (up to 500), bulk, or template-based emails with support for attachments, tracking, and message streams.", "url": "https://postmarkapp.com/.well-known/agent-skills/postmark-send-email.tar.gz", "digest": "sha256:9e210a0bedec74e3abec60c9198fe5f294fb9be16c0df5ddb10346e8bf40eb1e" }, { "name": "postmark-templates", "type": "archive", "description": "Use when creating, managing, or sending with Postmark server-side email templates — Handlebars syntax, layout inheritance, template validation, and cross-server pushing.", "url": "https://postmarkapp.com/.well-known/agent-skills/postmark-templates.tar.gz", "digest": "sha256:beb488f8fd291db6e552fd3a72ee5b02cc990a69046ebf375dca793a64dae779" }, { "name": "postmark-webhooks", "type": "archive", "description": "Use when setting up Postmark webhooks for tracking email delivery, bounces, opens, clicks, spam complaints, or subscription changes — includes webhook configuration, payload handling, and security.", "url": "https://postmarkapp.com/.well-known/agent-skills/postmark-webhooks.tar.gz", "digest": "sha256:d481bccb758d339ba4b0e5e32ae8066dbeea98d90e218a04b2faa990defd04ea" } ] }How we test this:
- Any of three passes: /.well-known/agent-skills/index.json on your site or your docs (or one a Link header names) lists a skill whose file answers; your docs or llms.txt link a SKILL.md that answers with a name and a description; or your docs show a skills install command, on a page we read or on up to 3 pages your docs or llms.txt link about skills or your CLI.
- An install is npx skills add, claude plugin install, a git clone into a skills folder, or your own command line running plugin install or skills add right after the word skill.
- An index under a folder, like /developer/, may list its files from that folder.
- Cloudflare's isitagentready, agenticplug and Alpic check it.
–Not countedSign-in an MCP client can useLG-ACT-04no OAuth sign-in found to judge
Not in the score · Low, worth 2
- GEThttps://postmarkapp.com/.well-known/oauth-authorization-serverno answernot counted: no OAuth sign-in found to judge
How we test this:
- We look for OAuth authorization server metadata (RFC 8414): at /.well-known/oauth-authorization-server on your site, through the authorization_servers your protected-resource metadata (RFC 9728) names, and on your mcp. host.
- It passes when it lists S256 in code_challenge_methods_supported, has scopes_supported, and has a registration_endpoint or client_id_metadata_document_supported, as the MCP authorization spec asks.
- With no OAuth metadata, it isn't counted.
×FailInstall shown for four languagesEM-01We didn't find an install for Go on the 4 pages we read (TypeScript/JavaScript, Python and Java found)0 of 4 points · 6 of 15 pass
We didn't find an install for Go on the 4 pages we read (TypeScript/JavaScript, Python and Java found). An agent working in one of these languages may not find how to install your library in it.
0 of 4 points · Medium, worth 4
- GEThttps://postmarkapp.com/llms.txtHTTP 200llms.txt: no install shown for Go
- GEThttps://postmarkapp.com/developerHTTP 200docs page: no install shown for Go
- GEThttps://postmarkapp.com/developer/get-startedHTTP 200quickstart page: no install shown for Go
- GEThttps://raw.githubusercontent.com/ActiveCampaign/postmark-mcp/main/README.mdHTTP 200MCP page: no install shown for Go
- GEThttps://postmarkapp.com/developer/get-startedHTTP 200quickstart page: TypeScript/JavaScript "npm install postmark"
- GEThttps://postmarkapp.com/developer/get-startedHTTP 200quickstart page: Python "pip install postmark-python"
- GEThttps://postmarkapp.com/developer/get-startedHTTP 200quickstart page: Java "implementation 'com.postmarkapp:postmark"
How we test this:
- On your docs surface we look for an install in each of four languages: TypeScript/JavaScript (npm, yarn, pnpm or bun), Python (pip, poetry or uv), Go (go get) and Java (a Maven <artifactId> or a Gradle implementation line).
- All four must appear.
- This shows how to install, not that a package is official.
- If none of the pages we read is a quickstart or SDK page, a miss isn't counted: it can't fail you or withhold your score.
- Ours, not AgentReady's.
✓PassSend operation in the specEM-02the spec has POST /email, POST /email/batch, POST /email/withTemplate and 1 more4 of 4 points · 11 of 15 pass
4 of 4 points · Medium, worth 4
- GEThttps://postmarkapp.com/swagger/server.ymlHTTP 200the spec has POST /email, POST /email/batch, POST /email/withTemplate and 1 more
How we test this:
- In the OpenAPI spec AR-ACT-02 found, we look for a POST operation on a path containing mail, email, message or send.
- No spec counts as a fail.
- Ours, not AgentReady's.
✓PassFree tier in emailsEM-03free tier: "100 emails/month"4 of 4 points · 13 of 15 pass
4 of 4 points · Medium, worth 4
- GEThttps://postmarkapp.com/pricingHTTP 200from our board config, linked from https://postmarkapp.com/; free tier: "100 emails/month"
What our check kept, up to 60 lines or 6 KB
Start Free Trial No Credit Card Required How many emails do you send and receive each month? 10,000 emails Free $0.00 /mo Test your integration with 100 emails/month 100 emails/month. No overages allowed in this plan. Perfect for: Testing your integration Evaluating Postmark's deliverability Side projects with lowHow we test this:
- On the pricing page AR-READ-11 reads, we look for "free" within 300 characters of a number followed by emails, messages or sends and a period (a month, a day, or 30 days), like "3,000 emails/month" or "4,000 sends in any rolling 30-day window", in the raw text (no JavaScript run).
- A one-time allowance with no period doesn't count.
- Ours, not AgentReady's.
How we check: every check, its points and the thresholds, from the same code that runs the scan.
Something wrong? Report it to rahulu626@gmail.com
4Your next stepsPart 4 of 4
Your next steps
- 1Pick your fixes
- 2Hand them off
- 3Rescan once it's live
- 4Stay ahead of your category
- Then back to 1 when a rival passes you
Pick your fixes
Usually the founder or DevRel lead
3 fixes take Postmark from 94 to 99, joint 1st of 15 email APIs, past Brevo, Bird (ex-SparkPost) and Resend.
Nothing copied yet from this browser.
Hand them off
To whoever ships it
Fix with AI writes each fix for whoever ships it: your coding agent, an engineer, product or marketing. Open it in Cursor, as a GitHub issue or in Linear, or copy it. Nothing runs until you send it.
Rescan once it's live
Usually the engineer, after the deploy
A rescan reads Postmark again and shows what now passes, the new score and who you passed.
Last scan: 94 on 9 Nov, 5th of 15 email APIs.
Weekly, for 4 weeks. A calendar file: no email from us.Bookmark this page: it opens on our 9 Nov 2026 scan, with a live scan one press away.Stay ahead of your category
DevRel, the founder
Rivals ship too. Watch Postmark with Brevo and Resend, the nearest on the board: home keeps all three, and Rescan all there shows who moved.
Track it weekly, or scan from your terminal
Scan from your terminal
npx legible-cli postmark
Add it for your coding agent
Adds a skill to your project. Ask your agent to use it, and it scans your live site, reads the real file behind each gap and helps write your own. It only publishes if you ask.
npx legible-cli skill
If Windows PowerShell blocks npx, type npx.cmd instead.
Get warned if this slips
A GitHub Action that runs in your own repo, once a week. It fails, naming the check, if something this site passes today stops passing. Each alert links back to the result. Add a Slack webhook as a repo secret named SLACK_WEBHOOK_URL, and a change also posts to your channel; nothing else is sent to us. Anything we can't be sure of only warns. GitHub notifies whoever created the job, depending on their settings. In a public repo, it turns scheduled jobs off after 60 days with no activity.
.github/workflows/legible.yml
3 fixes · copy, or open in Cursor, GitHub, Linear