Legible
Scan APIChrome extension

Postmark

postmarkapp.com

Score 94 out of 100

An AI agent's path through Postmark

  1. FindCan an agent get in and find what it needs?100/100

    5 of 5 pass

  2. ReadCan it read what it finds?94/100

    11 of 12 pass · 1 gap

  3. ActCan it do something with your product?Weakest step89/100

    9 of 12 pass · 3 gaps

GoalAn agent uses Postmark

Wider segments are worth more points. The overall adds up every check's points, so it isn't the average of the three parts. 2 checks don't count here: see why.

Easy to find, read and use.

Postmark passes every Find check, 11 of 12 Read checks and 9 of 12 Act checks. The weakest step is Act (Install shown for four languages, Every operation has an operationId). One more fails there, but we'd skip it for now.

The pages marketing owns pass. What's left sits with engineering and product.

See the 3 fixes ↓See all 31 checks ↓
Rank
5th of 15 Email APIsOn our 9 Nov 2026 scan
Checks passed
25 of 30 counted
This scan

From our 9 Nov 2026 scan.

Board results come from one dated scan, so every company is compared on the same day. A live scan reads the site as it is now.

Details

Scored on 29 of 30 checks: 1 check couldn't be checked.

1 check doesn't count here:

  • 1 needs an OAuth sign-in to judge, and there isn't one.

What to fixPart 1 of 4

3 gaps to fix

Most points for the least effort. Each sits next to the file the best email API on our board shipped, as of 9 Nov 2026. One more check fails with no example to follow yet; it's below the fixes.

All 31 checks25 pass · 4 fail

FailAct stepFix 1 of 3+0.2 pointsEffort: minutes, our estimate

Fix 1: Your API spec leaves some operations without a name

Do this: Give every operation in your OpenAPI spec an operationId: a short, unique name like sendEmail or listDomains.

Every operation has an operationId: each call in your API spec has a name (an operationId) that tools and agents use for it.

FailWhat we read on Postmark (1)

PassFrom Mailtrap, on our email API board, as of 9 Nov 2026

Why it might matter

Tools that turn a spec into an agent's tools or an SDK name each call by its operationId; without one, an agent gets a made-up name or none.

Our call · Worth doing.

Minutes of work in your spec, and tools that turn it into an agent's tools get real names.

Our judgement.

How we test this
  • In the OpenAPI spec AR-ACT-02 finds, we count the operations with a non-empty operationId.
  • The credit is the share that have one.
  • With no spec, it isn't counted: AR-ACT-02 already counts that.
1 more fails, with no example yet: Tools for browser agents

Nobody on the board passes our check yet

No email API on our board passes our check on these yet, so there's no example to show.

  • Tools for browser agents: we found something close

    Tools for browser agents: tools your web page offers to AI agents that work in a browser (a proposed standard).

    We found navigator.modelContext and provideContext with a tools list in this script on 2 Nov, and your homepage loads it. Our rule reads your homepage's raw HTML and inline scripts, not the scripts it loads. Registering the same tools in an inline script would pass this check.

    https://postmarkapp.com/dist/js/agentTools.40c0c4a861ddb1979269.js

    It costs a point, but it's only worth building if agents need to operate forms on your site. If they do, a browser agent may find no tools to call and have to click through instead.

    Don't do it for the score. It's still a proposed standard, and almost nobody on our boards passes our check, though Bird, Postmark and CrewAI load it from a script our check doesn't read. Build it only if agents need to operate forms on your site. Our judgement.

Show every address our checks read

Where our checks looked

Every address our checks read in our 9 Nov 2026 scan, by host. What each check read, not a recording of a visit, so there's no order.

passes on this address alone fails: select it to open the fix also read here

postmarkapp.com

  • /robots.txt200 OKAI agents allowed, homepage reachable: Pass
  • /200 OKOur scanner gets in: also read hereReadable without JavaScript: also read herellms.txt links work, and it fits: Couldn't checkMeta description: PassStructured data: PassTools for browser agents: Fail
  • /developer200 OKOur scanner gets in: also read hereDocs page: Passllms.txt linked from your pages: also read hereReadable without JavaScript: also read hereDocs readable without a login: also read hereDocs pages fit an agent's context: also read hereStructured docs page: Pass
  • /llms.txt200 OKllms.txt linked from your pages: also read herellms.txt: PassCode samples say their language: PassAuth an agent can follow (proxy): Pass
  • /sitemap.xml200 OKSitemap: Pass
  • /developer/get-started200 OKReadable without JavaScript: also read hereDocs readable without a login: also read hereDocs pages fit an agent's context: also read herenpm and PyPI packages: Pass
  • /why200 OKReadable without JavaScript: also read hereDocs readable without a login: also read hereDocs pages fit an agent's context: also read here
  • /email-api200 OKReadable without JavaScript: also read hereDocs readable without a login: also read hereDocs pages fit an agent's context: also read here
  • /smtp-service200 OKReadable without JavaScript: also read hereDocs readable without a login: also read hereDocs pages fit an agent's context: also read here
  • /message-streams200 OKReadable without JavaScript: also read hereDocs readable without a login: also read hereDocs pages fit an agent's context: also read here
  • /transactional-email200 OKReadable without JavaScript: also read hereDocs readable without a login: also read hereDocs pages fit an agent's context: also read here
  • /leaderfile-check-404404 · expected, it's a probeReal 404s: Pass
  • /pricing200 OKReadable pricing: PassFree tier in emails: Pass
  • /.well-known/oauth-authorization-server404 not foundMachine-readable discovery file: also read hereSign-in an MCP client can use: Not counted
  • /.well-known/oauth-protected-resource404 not foundMachine-readable discovery file: also read here
  • /.well-known/openid-configuration404 not foundMachine-readable discovery file: also read here
  • /.well-known/api-catalog200 OKMachine-readable discovery file: also read here
  • /.well-known/agent-card.json404 not foundMachine-readable discovery file: also read here
  • /swagger/server.yml200 OKOpenAPI spec: PassErrors have a schema: PassSend operation in the spec: Pass
  • /.well-known/agent-skills/index.json200 OKAn agent skill is published: also read here
  • /.well-known/agent-skills/postmark/SKILL.md200 OKAn agent skill is published: also read here

raw.githubusercontent.com

  • /ActiveCampaign/postmark-mcp/main/README.md200 OKMCP server or CLI: PassMCP server: Pass

3 checks in red are your fixes. Select one to open it.Sign-in an MCP client can use weren't counted.

Want a hand fixing this?

Leave your email and we'll reply about the gaps on postmarkapp.com. One reply, no newsletter.

We store your email, this domain and its gaps, to reply. Nothing else. To be removed, email rahulu626@gmail.com

How it comparesPart 2 of 4

How Postmark compares

Score after each fix

Mailtrap, the leader, at 99
  1. Nowscore 94rank 5
  2. +1 fixscore 94rank 5
  3. +2 fixesscore 96rank =2level with Bird (ex-SparkPost) and Resend
  4. +3 fixesscore 99rank =1level with Mailtrap

Full scores and ranks on our 9 Nov 2026 board: our maths, not a forecast.

3 gaps with a real example to follow.

Find, Read and Act against the other 14 email APIs

Out of 100. On each bar, the light mark is their median and the dark one their best.

  1. FindFind: 100, median 100, best 100.
  2. ReadRead: 94, median 95, best 100.
  3. ActAct: 89, median 82, best 96.

Where Postmark stands

On our board

The 15 email APIs on our board average 88, and the top score is 99.

Neighbours on the board

  1. Resend96+2
  2. Brevo95+1
  3. Postmark94
  4. Loops92−2
  5. SendGrid92−2

Resend 2 and Brevo 1 ahead. Three fixes, 99, puts Postmark past both.

Email APIs, our 9 Nov 2026 board. Our maths, not a forecast.

What Postmark does well

One more thing: only 8 of the 15 email APIs on our board pass Machine-readable discovery file. Postmark does.

The checks Postmark passes that are rarest among the 15 email APIs on our board.

  • Machine-readable discovery fileAR-READ-06 · 8 of 15 on our board pass this
  • OpenAPI specAR-ACT-02 · 11 of 15 on our board pass this
  • npm and PyPI packagesAR-ACT-06 · 11 of 15 on our board pass this

Compare Postmark with rivals

Every checkPart 3 of 4

What these checks can't tell you

  • Whether an agent can sign up and get a key. One registry found 30 of 100 developer tools blocked it.
  • Whether coding agents write current code for your API. In our small test, a 96 and a 71 came out the same: what we found.
  • Whether your bot protection lets an agent in when a person sends one. Check your CDN settings.
  • Whether ChatGPT recommends you. That depends on far more than these files.
  • What another scanner would give you. They ask different questions and weigh them differently: why the numbers differ.

All 31 checks

25 pass, 4 fail, 1 couldn't check, 1 not counted. The count on each row is how many of the 15 email APIs on our board pass that check.

Find · 5 of 5 pass · 36 of 36 points

  • PassAI agents allowed, homepage reachableAR-FIND-01checked / and /developer; none of the user or search agents is blocked10 of 10 points · 15 of 15 pass

    10 of 10 points · Gate, worth 10

    What our check kept, up to 60 lines or 6 KB

    # Postmark marketing site — robots.txt
    # Crawl policy: AI crawlers are explicitly allowed. As a marketing site we want
    # our content discoverable and citable by AI search/answer engines and assistants.
    # Revisit this policy if crawl volume or usage becomes a concern.
    #
    # Usage policy: allowing the crawl is not the same as allowing every downstream
    # use, so each group below also carries a Content-Signal directive declaring how
    # the content may be used once fetched:
    #
    #   search=yes     — building a search index and serving search results
    #   ai-input=yes   — retrieval-augmented generation, grounding, and generative
    #                    AI search answers (i.e. being cited in an answer)
    #   ai-train=no    — training or fine-tuning AI models
    #
    # The Content-Signal directives in this file use the syntax and vocabulary of a
    # proposed IETF standard from the AI Preferences (aipref) working group and have
    # the meanings set forth in that draft. See https://contentsignals.org/ and
    # https://datatracker.ietf.org/doc/draft-romm-aipref-contentsignals/
    #
    # Under RFC 9309 a crawler obeys only its single most-specific matching group, so
    # the directive is repeated in every group rather than declared once under "*".
    # Nothing here grants permission beyond these signals; to license this content,
    # contact Postmark directly.
    
    # --- AI crawlers: allowed ---
    
    # OpenAI
    User-agent: GPTBot
    Content-Signal: search=yes, ai-input=yes, ai-train=no
    Allow: /
    
    User-agent: OAI-SearchBot
    Content-Signal: search=yes, ai-input=yes, ai-train=no
    Allow: /
    
    User-agent: ChatGPT-User
    Content-Signal: search=yes, ai-input=yes, ai-train=no
    Allow: /
    
    # Anthropic
    User-agent: ClaudeBot
    Content-Signal: search=yes, ai-input=yes, ai-train=no
    Allow: /
    
    User-agent: Claude-User
    Content-Signal: search=yes, ai-input=yes, ai-train=no
    Allow: /
    
    User-agent: Claude-SearchBot
    Content-Signal: search=yes, ai-input=yes, ai-train=no
    Allow: /
    
    # Legacy Anthropic token, superseded by ClaudeBot. Listed explicitly because
    # RFC 9309 matches on the exact product token, so ClaudeBot does not cover it.
    User-agent: Claude-Web
    Content-Signal: search=yes, ai-input=yes, ai-train=no
    Allow: /
    
    # Google (AI/Gemini training — separate from Googlebot search)
    User-agent: Google-Extended

    How we test this:

    • We read robots.txt and check it doesn't disallow / for the agents that fetch for a user or find sites for AI search: ChatGPT-User, OAI-SearchBot, Claude-User, Claude-SearchBot, Perplexity-User, PerplexityBot (no robots.txt counts as allowed).
    • We show blocks on GPTBot (OpenAI model training), not scored; ClaudeBot (Anthropic model training), not scored; Google-Extended (Gemini training and grounding), not scored in v1; CCBot (Common Crawl's open dataset), not scored: blocking them is the site's own call.
    • Whether Google-Extended should be scored is a rubric v2 question, and we'll announce it before changing anything.
    • Then we fetch your homepage as LeaderfileBot and check it returns 2xx after redirects, with no challenge page.
  • PassOur scanner gets inLG-FIND-01homepage: a real answer (200); docs page: a real answer (200)10 of 10 points

    10 of 10 points · Gate, worth 10

    How we test this:

    • We fetch your homepage and your docs page as LeaderfileBot, our own scanner, and check neither answers with a challenge page, or a 401 or 403 that a normal browser gets past.
    • One blocked page is a fail; both caps your score at 39.
    • Firewalls often let in crawlers they can verify, so ChatGPT or Claude may still get in where our scanner can't.
  • PassDocs pageAR-FIND-02docs page, linked from https://postmarkapp.com/7 of 7 points · 15 of 15 pass

    7 of 7 points · High, worth 7

    How we test this:

    • We look for your docs page: the first homepage link to a docs., dev. or developer(s). subdomain of your domain, or to a /docs or /developer(s) path; with none, we try https://docs.<host>/ then https://<host>/docs.
    • It passes if that page returns 200.
    • Board companies use a docs URL we confirmed by hand.
  • Passllms.txt linked from your pagesLG-FIND-02docs page: a link to https://postmarkapp.com/llms.txt; an llms.txt with markdown links7 of 7 points

    7 of 7 points · High, worth 7

    What our check kept, up to 60 lines or 6 KB

    a link: https://postmarkapp.com/llms.txt

    How we test this:

    • We read your homepage and your docs page and look for a pointer to an llms.txt: a link to it, a <link> tag, a Link header with rel="llms-txt" or an X-Llms-Txt header, or a line on the page naming /llms.txt.
    • It passes when one points at an llms.txt that answers with markdown links.
    • AFDocs checks the same (llms-txt-directive).
  • PassSitemapAR-FIND-03sitemap listed in robots.txt, <urlset> root2 of 2 points · 15 of 15 pass

    2 of 2 points · Low, worth 2

    What our check kept, up to 60 lines or 6 KB

    <?xml version="1.0" encoding="UTF-8"?>
    <urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
    
    
      <url>
        <loc>https://postmarkapp.com/</loc>
        <changefreq>daily</changefreq>
        <priority>1.0</priority>
      </url>
    
      <url>
        <loc>https://postmarkapp.com/why</loc>
        <changefreq>monthly</changefreq>
        <priority>0.9</priority>
      </url>
    
      <url>
        <loc>https://postmarkapp.com/customers</loc>
        <changefreq>monthly</changefreq>
        <priority>0.5</priority>
      </url>
    
      <url>
        <loc>https://postmarkapp.com/dedicated-ips</loc>
        <changefreq>monthly</changefreq>
        <priority>0.5</priority>
      </url>
    
      <url>
        <loc>https://postmarkapp.com/write-for-us</loc>
        <changefreq>monthly</changefreq>
        <priority>0.5</priority>
      </url>
    
      <url>
        <loc>https://postmarkapp.com/customers/1password</loc>
        <lastmod>2019-07-09T16:44:17-04:00</lastmod>
        <changefreq>weekly</changefreq>
        <priority>0.3</priority>
      </url>
      <url>
        <loc>https://postmarkapp.com/customers/asana</loc>
        <lastmod>2018-07-17T08:22:01-04:00</lastmod>
        <changefreq>weekly</changefreq>
        <priority>0.3</priority>
      </url>
      <url>
        <loc>https://postmarkapp.com/customers/feature-upvote</loc>
        <lastmod>2019-03-20T20:27:34-04:00</lastmod>
        <changefreq>weekly</changefreq>
        <priority>0.3</priority>
      </url>
      <url>
        <loc>https://postmarkapp.com/customers/eternia-web-solutions</loc>
        <lastmod>2023-12-21T16:47:07-05:00</lastmod>
        <changefreq>weekly</changefreq>
        <priority>0.3</priority>
      </url>
      <url>
        <loc>https://postmarkapp.com/customers/livechat</loc>

    How we test this:

    • We fetch the Sitemap: URL from robots.txt, else /sitemap.xml, and check it returns 200 with a <urlset> or <sitemapindex> root element.

Read · 11 of 12 pass · 64 of 68 points

  • PassReadable without JavaScriptAR-READ-01homepage: 1452 words in the raw HTML; docs page: 1251 words in the raw HTML; docs surface: 2356 words in the raw HTML; linked from the docs page: 642 words in the raw HTML; linked from the docs page: 1210 words in the raw HTML; linked from the docs page: 961 words in the raw HTML; linked from the docs page: 1877 words in the raw HTML; linked from the docs page: 1376 words in the raw HTML10 of 10 points · 12 of 15 pass

    10 of 10 points · Gate, worth 10

    How we test this:

    • We count the visible words in the raw HTML (no JavaScript run) of your homepage and your docs page, and check each has at least 150.
    • With no docs page found (AR-FIND-02), the homepage is judged alone.
  • PassDocs readable without a loginLG-READ-01docs page: readable without a login; docs surface: readable without a login; linked from the docs page: readable without a login10 of 10 points

    10 of 10 points · Gate, worth 10

    How we test this:

    • We read your docs page and up to 7 more docs pages (the ones we read for other checks, then links on your docs page).
    • A page fails when it answers 401 or 403 to a normal browser too, redirects to a sign-in page, or is a sign-in form with little else on it.
    • A redirect counts as a sign-in when it adds one: a sign-in path the page didn't have, a login subdomain, or an identity provider's site such as Okta's when the page was on another site.
    • A sign-up page, one whose title or main heading says sign up or create an account, isn't a login.
    • A refusal only to automated readers is our scanner being blocked, not a login.
    • A login on your docs page caps your score at 39; across the pages, a share of 25% or less caps it at 39, 50% or less at 59.
  • PassReal 404sAR-READ-02returned 404 for a page that doesn't exist10 of 10 points · 15 of 15 pass

    10 of 10 points · Must, worth 10

    How we test this:

    • We fetch /leaderfile-check-404, a page that shouldn't exist, and check it returns 404 or 410 after redirects.
    • Off the board, if that address refuses automated readers, we try /leaderfile-check-404.html.
  • Passllms.txtAR-READ-07text file with markdown links7 of 7 points · 14 of 15 pass

    7 of 7 points · High, worth 7

    What our check kept, up to 60 lines or 6 KB

    # Postmark
    
    > Postmark is a reliable transactional and bulk email service that helps developers deliver and track application emails. It provides REST APIs, SMTP support, webhooks, and comprehensive email templates to replace traditional SMTP with a scalable, developer-friendly solution.
    
    ## Quick Start
    
    To use Postmark for sending emails in your application:
    
    1. Create a Postmark account and verify your sending domain or email address
    2. Get your Server API Token from your Postmark server settings
    3. Use the REST API or SMTP to send emails
    4. Maximum email size is 10 MB (including attachments)
    5. Maximum 50 recipients per email (To, CC, BCC combined)
    
    ### Authentication
    
    All API requests require authentication using the `X-Postmark-Server-Token` header with your Server API Token:
    
    ```
    X-Postmark-Server-Token: your-server-token-here
    ```
    
    For testing without actually sending emails, use `POSTMARK_API_TEST` as your token.
    
    ## Pricing
    
    - [Pricing](https://postmarkapp.com/pricing.txt): Plans, pricing by volume, per-1,000 overage rates, feature highlights, optional add-ons (dedicated IPs, custom retention, DMARC monitoring), and pricing FAQs
    
    ## API Reference
    
    - [TypeScript transactional email recipe](https://postmarkapp.com/developer/integration/official-libraries#typescript): Install, shared client, template send, batch handling, webhook payload validation, and repair guide — complete TypeScript path from setup to production
    - [Send a receipt with templates](https://postmarkapp.com/developer/api/templates-api#send-a-receipt-with-templates): Task-first TypeScript examples for receipts, welcome emails, and other structured transactional sends using `TemplateAlias` and `TemplateModel`
    - [Webhook protection guide](https://postmarkapp.com/developer/webhooks/webhooks-overview#protecting-your-webhook): Node/TypeScript HTTP Basic Authentication, IP allowlisting, payload shape validation, event parsing, Express route setup, and idempotency pattern — Postmark does not sign webhooks with HMAC
    - [Batch send with partial-failure handling](https://postmarkapp.com/developer/user-guide/send-email-with-api/batch-emails): TypeScript `Promise.allSettled` batch example with per-recipient `MessageID` and error reporting
    - [Send a single email](https://postmarkapp.com/developer/api/email-api#send-a-single-email): POST to `/email` endpoint
    - [Send batch emails](https://postmarkapp.com/developer/api/email-api#send-batch-emails): POST to `/email/batch` endpoint  
    - [Send with templates](https://postmarkapp.com/developer/api/templates-api#email-with-template): POST to `/email/withTemplate` endpoint
    - [Send batch with templates](https://postmarkapp.com/developer/api/templates-api#send-batch-with-templates): POST to `/email/batchWithTemplates` endpoint
    - [Send bulk emails](https://postmarkapp.com/developer/api/bulk-email): POST to `/email/bulk` endpoint for broadcast streams
    - [Template management](https://postmarkapp.com/developer/api/templates-api): Create, edit, list templates via API
    - [Bounce API](https://postmarkapp.com/developer/api/bounce-api): Manage bounced emails and reactivate addresses
    - [Message tracking](https://postmarkapp.com/developer/api/messages-api): Search and retrieve message details
    - [Stats API](https://postmarkapp.com/developer/api/stats-api): Get delivery, open, and click statistics
    - [Webhooks](https://postmarkapp.com/developer/webhooks/webhooks-overview): Configure real-time event notifications
    - [Delivery webhook](https://postmarkapp.com/developer/webhooks/delivery-webhook): TypeScript handler, idempotency key guidance, and Express route for delivery events
    - [Bounce webhook](https://postmarkapp.com/developer/webhooks/bounce-webhook): TypeScript handler distinguishing hard and soft bounces, and Express route for bounce events
    - [Server management](https://postmarkapp.com/developer/api/servers-api): Create and configure servers
    - [Domain management](https://postmarkapp.com/developer/api/domains-api): Verify domains and configure DKIM/SPF
    
    ## Core Concepts
    
    ### Message Streams
    
    Postmark separates emails into two types of Message Streams:
    - **Transactional**: One-to-one emails triggered by user actions (welcome emails, password resets, order confirmations)
    - **Broadcast**: Bulk emails for newsletters, announcements, marketing campaigns
    
    Specify the stream using the `MessageStream` field in your API calls. Most API endpoints default to "outbound" (transactional) stream.
    
    ### Key Limitations

    How we test this:

    • We read llms.txt at your site root and, if your docs live on another host, at your docs root, and check one returns 200, isn't HTML and has at least one markdown link.
    • Off the board, we also try your docs. host and /docs/llms.txt.
    • We read the first 2 MB: a larger file is judged on that part, and the result says "read the first 2 MB; the file is larger".
  • Couldn't checkllms.txt links work, and it fitsLG-READ-02the scan ran out of time (10 s more)

    Not in the score · High, worth 7

    How we test this:

    • We read the llms.txt AR-READ-07 passes on (the first with markdown links) and fetch up to 12 of its links, spread through the file, two at a time.
    • A link is broken when it answers 404 or 410, or its host doesn't exist.
    • A 2xx after redirects resolves, and so does an answer like 400, 405 or 406 that shows the address is there (an MCP endpoint answers a plain GET with 405).
    • A refusal, a 429 or a server error isn't judged.
    • The credit is the share that resolve, halved when the file runs to 50,000 characters or more, and nothing past 100,000: AFDocs' size bands.
    • With no llms.txt it isn't counted: AR-READ-07 counts that.
  • PassDocs pages fit an agent's contextLG-READ-04docs page: 8,726 characters of text; docs surface: 18,301 characters of text; linked from the docs page: 4,426 characters of text; linked from the docs page: 9,649 characters of text; linked from the docs page: 7,303 characters of text; linked from the docs page: 12,674 characters of text; linked from the docs page: 9,082 characters of text7 of 7 points

    7 of 7 points · High, worth 7

    How we test this:

    • On each docs page we read (up to 7) we count the characters of visible text in the raw HTML, and of its Markdown copy if it has one, and judge the page by the larger of the two: an agent reading either may be cut off.
    • Under 50,000 passes, up to 100,000 is half, more fails: AFDocs' bands, from the limits agents cut pages at.
    • The credit is the average across the pages.
  • PassMeta descriptionAR-READ-03has a meta description4 of 4 points · 15 of 15 pass

    4 of 4 points · Medium, worth 4

    What our check kept, up to 60 lines or 6 KB

    <meta name="description" content="Send transactional and marketing emails and get them to the inbox on time, every time. Postmark is a fast and reliable email delivery service for developers.">

    How we test this:

    • We check your homepage's raw HTML (no JavaScript run) has a non-empty meta description or og:description.
  • PassStructured docs pageAR-READ-0420 headings (h1 to h3), 1251 words in the raw HTML4 of 4 points · 13 of 15 pass

    4 of 4 points · Medium, worth 4

    What our check kept, up to 60 lines or 6 KB

    <h2>Features</h2>
    <h2>Postmark For</h2>
    <h2>Postmark vs.</h2>
    <h2>Features</h2>
    <h2>Postmark For</h2>
    <h2>Postmark vs.</h2>
    <h3>Overview</h3>
    <h3>Integration</h3>
    <h3>User guide</h3>
    <h3>API reference</h3>

    How we test this:

    • We check your docs page's raw HTML (no JavaScript run) has at least 2 headings (h1 to h3) with text and at least 150 visible words.
    • Off the board, a docs page that comes back as markdown counts # to ### lines outside code blocks as its headings.
  • PassCode samples say their languageAR-READ-05llms.txt: a code block with a language tag4 of 4 points · 13 of 15 pass

    4 of 4 points · Medium, worth 4

    What our check kept, up to 60 lines or 6 KB

    ```json

    How we test this:

    • On your docs surface, we look for a code block that carries a language tag: language-* or lang-* on <pre> or <code>, code-language-* on any element (a code block's wrapper, say), or a data-language or data-lang attribute.
    • In markdown files, a fenced block with a language (```ts) counts.
    • If no page shows one, we read the markdown copy each HTML page declares (a <link rel="alternate" type="text/markdown">, or its URL plus .md listed in your llms.txt), since many docs sites add the language label with JavaScript.
    • If none of the pages we read is a quickstart or SDK page, a miss isn't counted: it can't fail you or withhold your score.
  • PassReadable pricingAR-READ-11raw text shows "Free" next to a month or year4 of 4 points · 15 of 15 pass

    4 of 4 points · Medium, worth 4

    What our check kept, up to 60 lines or 6 KB

    res you need, at a price that makes sense. Start Free Trial No Credit Card Required How many emails do you send and receive each month? 10,000 emails Free $0.00 /mo Test your integration with 100 emails/month 100 emails/month. No overages allowed in this plan. Perfect for: Testing your integration Evalu

    How we test this:

    • We fetch the first homepage link with 'pricing' in its path, else /pricing (board companies: a pricing URL we confirmed by hand), and check it returns 200 and its raw text (no JavaScript run) shows a price or 'free' within 80 characters of month, mo, year or yr.
    • Off the board, a pricing address that answers with JSON counts when it has a price field.
  • FailDocs in MarkdownLG-READ-03Agents get your docs as HTML only, not as Markdown0 of 4 points

    Agents get your docs as HTML only, not as Markdown. An agent reading HTML spends its context on menus and markup, and may cut the page off before it reaches the part it needs.

    0 of 4 points · Medium, worth 4

    How we test this:

    • On each docs page we read (up to 7), one Markdown answer with content passes the page: it answers Accept: text/markdown with text/markdown, declares a copy with <link rel="alternate" type="text/markdown"> that returns Markdown, or the address the page lands on, after redirects, ending in .md does (for one ending in a slash, both /page.md and /page/index.md).
    • An empty answer doesn't count.
    • The credit is the share of pages that pass.
    • AFDocs, Cloudflare's isitagentready and is-agentic check it.
  • PassStructured dataAR-READ-08has an application/ld+json block2 of 2 points · 13 of 15 pass

    2 of 2 points · Low, worth 2

    What our check kept, up to 60 lines or 6 KB

    {
      "@context": "http://schema.org",
      "@type": "Organization",
      "url": "https://postmarkapp.com",
      "logo": "https://postmarkapp.com/images/logo-stamp-social.png",
      "name": "Postmark",
      "founder": [
        {
          "@type": "Person",
          "name": "Jason VandeBoom",
          "jobTitle": "CEO"
        }
      ],
      "foundingLocation": {
        "@type": "Place",
        "address": {
          "@type": "PostalAddress",
          "streetAddress": "1 North Dearborn St, 5th Floor",
          "addressLocality": "Chicago",
          "addressRegion": "IL",
          "postalCode": "60602",
          "addressCountry": "US"
        }
      },
      "location": {
        "@type": "Place",
        "address": {
          "@type": "PostalAddress",
          "streetAddress": "1 North Dearborn St, 5th Floor",
          "addressLocality": "Chicago",
          "addressRegion": "IL",
          "postalCode": "60602",
          "addressCountry": "US"
        }
      },
      "sameAs": [
        "https://x.com/postmarkapp",
        "https://discord.com/invite/cHzm4PYmvs",
        "https://www.linkedin.com/company/postmarkapp/",
        "https://www.youtube.com/@Postmarkapp"
      ]
    }

    How we test this:

    • We check your homepage's raw HTML has an application/ld+json block that parses as JSON and has @type or @context.
  • PassMachine-readable discovery fileAR-READ-06valid JSON2 of 2 points · 8 of 15 pass

    2 of 2 points · Low, worth 2

    What our check kept, up to 60 lines or 6 KB

    {
        "linkset": [
            {
                "anchor": "https://api.postmarkapp.com/",
                "service-desc": [
                    {
                        "href": "https://postmarkapp.com/swagger/server.yml",
                        "type": "application/yaml",
                        "title": "Postmark Server API"
                    },
                    {
                        "href": "https://postmarkapp.com/swagger/account.yml",
                        "type": "application/yaml",
                        "title": "Postmark Account API"
                    }
                ],
                "service-doc": [
                    {
                        "href": "https://postmarkapp.com/developer",
                        "type": "text/html",
                        "title": "Postmark API documentation"
                    },
                    {
                        "href": "https://postmarkapp.com/api-explorer",
                        "type": "text/html",
                        "title": "Postmark API Explorer"
                    }
                ],
                "status": [
                    {
                        "href": "https://status.postmarkapp.com/",
                        "type": "text/html",
                        "title": "Postmark system status"
                    }
                ]
            }
        ]
    }

    How we test this:

    • We fetch five standard .well-known files and check at least one returns 200 with valid JSON: oauth-authorization-server (RFC 8414), oauth-protected-resource (RFC 9728), openid-configuration, api-catalog (RFC 9727) and agent-card.json (A2A).
    • This list is ours: AgentReady v2.0 doesn't name one.
    • Off the board, on a miss, we also read oauth-protected-resource on the mcp., api. and docs. hosts of your domain, where that metadata usually lives, and it counts only with its resource field.

Act · 9 of 12 pass · 49.8 of 56 points

  • PassMCP server or CLIAR-ACT-10MCP page: tools sendEmail, sendEmailWithTemplate, sendBatch, listTemplates, searchOutboundMessages, getDeliveryStats; sendEmail, sendEmailWithTemplate, sendBatch, listTemplates, searchOutboundMessages, getDeliveryStats act on the product (AR-ACT-03)10 of 10 points · 12 of 15 pass

    10 of 10 points · Must, worth 10

    What our check kept, up to 60 lines or 6 KB

    - [sendEmail](#sendemail)

    How we test this:

    • Passes when AR-ACT-03 passes (your docs surface names your own MCP server, not just a mention or a blog post about one; on the board, only an MCP server with a tool that acts on the product: send, manage or query, not only search docs, since AgentReady calls this "the interface an agent acts through"), or when your docs surface shows a CLI install: brew install, npm i -g, npm install -g, pipx install, uv tool install, go install, az extension add, or curl ... | sh (or | bash).
    • A mention of MCP that isn't your own server, with no CLI install, isn't counted.
    • For board companies, the CLI half counts only a command of the product's own CLI that we confirmed by hand, like az communication email send or twilio email:send, on the pages we read or on the docs page that shows it: an install alone could be any tool (an MCP setup guide installing pnpm, say).
    • For a product inside a larger platform, the platform's MCP server or CLI counts when its docs show it covers the product.
    • An MCP server earns both this check and AR-ACT-03, because AgentReady lists them as two items.
    • If none of the pages we read is a quickstart or SDK page, a miss isn't counted: it can't fail you or withhold your score.
  • PassOpenAPI specAR-ACT-02Swagger 2.0, 38 paths7 of 7 points · 11 of 15 pass

    7 of 7 points · High, worth 7

    How we test this:

    • We look for an OpenAPI or Swagger document: for board companies, a URL we confirmed by hand; then up to 2 links on your docs surface whose URL mentions openapi or swagger, or whose link text does for a .json or .yaml file (files on other sites count when your docs link them; an address written out in your llms.txt or another text file counts as a link, and its line as the link text); then /openapi.json and /openapi.yaml on your host and your docs host.
    • Off the board, a .json or .yaml link under an llms.txt heading that names OpenAPI counts as a link to a spec, or, where that section has none, a link with no file extension, and on a miss we also try those two on the docs., developers. and api. hosts of your domain.
    • It passes if one parses as JSON or YAML with an openapi or swagger key and at least one path.
    • A spec over 10 MB counts as couldn't check.
  • Passnpm and PyPI packagesAR-ACT-06quickstart page: npm install "npm install postmark"; quickstart page: pip install "pip install postmark-python"7 of 7 points · 11 of 15 pass

    7 of 7 points · High, worth 7

    What our check kept, up to 60 lines or 6 KB

    npm install postmark
    pip install postmark-python

    How we test this:

    • On your docs surface we look for an npm install (npm, yarn, pnpm or bun) and a pip install (pip, poetry or uv) of a named package.
    • Both must appear, on any of the pages (AgentReady: npm and PyPI).
    • Off the board, uv tool install and pipx install also count as a pip install.
    • Off the board, if one is missing we also read the markdown copy each HTML page declares (a <link rel="alternate" type="text/markdown">, or its URL plus .md listed in your llms.txt), then up to 2 pages your llms.txt names for that language.
    • AgentReady v2.0 asks for SDKs and a CLI here; this check tests the npm and PyPI half, and a CLI counts under AR-ACT-10.
    • If none of the pages we read is a quickstart or SDK page, a miss isn't counted: it can't fail you or withhold your score.
  • PassAuth an agent can follow (proxy)AR-ACT-01llms.txt: "API Token" next to an auth header4 of 4 points · 12 of 15 pass

    4 of 4 points · Medium, worth 4

    What our check kept, up to 60 lines or 6 KB

    All API requests require authentication using the `X-Postmark-Server-Token` header with your Server API Token:

    How we test this:

    • A stand-in: AgentReady asks for self-serve key generation with documented scopes, or OAuth metadata, and key sign-up can't be tested in code.
    • It passes if OAuth metadata parses as JSON with the field its RFC requires (issuer for RFC 8414, resource for RFC 9728), or if your docs say "API key" or "API token" (also inside a placeholder like YOUR_API_KEY) within 200 characters of a documented auth header: an X-...-Key or X-...-Token header, a header named ...-Key or ...-Token, Authorization with Bearer, or "Bearer API key".
    • The word "token" on its own doesn't count.
    • For board companies we also read the authentication page their docs link.
    • Off the board, OAuth metadata with its resource field on your mcp., api. or docs. host also counts.
    • A board company whose API signs each request (like AWS Signature Version 4) or takes the key in the request body isn't counted: this stand-in can't judge that kind of auth either way.
    • If none of the pages we read is a quickstart or SDK page, a miss isn't counted: it can't fail you or withhold your score.
  • PartlyEvery operation has an operationIdLG-ACT-01Your API spec leaves some operations without a name3.8 of 4 points

    Your API spec leaves some operations without a name. Tools that turn a spec into an agent's tools or an SDK name each call by its operationId; without one, an agent gets a made-up name or none.

    3.8 of 4 points · Medium, worth 4 · 95% credit

    How we test this:

    • In the OpenAPI spec AR-ACT-02 finds, we count the operations with a non-empty operationId.
    • The credit is the share that have one.
    • With no spec, it isn't counted: AR-ACT-02 already counts that.
  • PassMCP serverAR-ACT-03MCP page: tools sendEmail, sendEmailWithTemplate, sendBatch, listTemplates, searchOutboundMessages, getDeliveryStats; sendEmail, sendEmailWithTemplate, sendBatch, listTemplates, searchOutboundMessages, getDeliveryStats act on the product4 of 4 points · 14 of 15 pass

    4 of 4 points · Medium, worth 4

    What our check kept, up to 60 lines or 6 KB

    - [sendEmail](#sendemail)

    How we test this:

    • On your docs surface we look for your own MCP server and quote the line: your name next to "MCP" ("Acme MCP server"), "our" or "official" MCP server, or an mcp.<your domain> address.
    • Any other mention of "MCP server" or "Model Context Protocol", like a directory or an explainer, isn't counted: it can't fail you and it earns no points, because we can't tell the server is yours.
    • A mention in a link to a blog post, or on an llms.txt line that links to one, doesn't count at all: a post about building a server isn't one you ship.
    • For board companies we read the MCP page their docs link and list the tools it documents: a server that only searches your docs counts here, as AgentReady describes an MCP server as a "standard tool protocol for docs search and actions".
    • We don't probe /mcp or call any server.
    • Off the board, OAuth metadata with its resource field on your mcp. host also counts: it's the server's own file.
    • If none of the pages we read is a quickstart or SDK page, a miss isn't counted: it can't fail you or withhold your score.
  • PassErrors have a schemaLG-ACT-0243 of 43 operations declare an error response with a schema4 of 4 points

    4 of 4 points · Medium, worth 4

    How we test this:

    • In the OpenAPI spec AR-ACT-02 finds, we count the operations that declare a 4xx, 5xx or default response with a schema, directly or through a $ref.
    • The credit is the share that do.
    • We note when they use application/problem+json (RFC 9457), the standard shape.
    • With no spec, it isn't counted.
    • The IETF's draft agent-friendly API profile, is-agentic and Alpic check it.
  • FailTools for browser agentsAR-ACT-07· we found something close0 of 2 points · 0 of 15 pass

    Tools for browser agents: we found something close. It costs a point, but it's only worth building if agents need to operate forms on your site. If they do, a browser agent may find no tools to call and have to click through instead.

    0 of 2 points · Low, worth 2

    How we test this:

    • We check your homepage's raw HTML, inline scripts included, contains modelContext (AgentReady names document.modelContext).
    • External scripts aren't fetched.
  • PassAn agent skill is publishedLG-ACT-036 skills listed (postmark, postmark-email-best-practices, postmark-inbound, ...); the first skill, postmark, answers2 of 2 points

    2 of 2 points · Low, worth 2

    What our check kept, up to 60 lines or 6 KB

    {
      "$schema": "https://schemas.agentskills.io/discovery/0.2.0/schema.json",
      "skills": [
        {
          "name": "postmark",
          "type": "skill-md",
          "description": "Use when working with Postmark email platform - routes to specific sub-skills for sending emails, processing inbound email, managing templates, or configuring webhooks.",
          "url": "https://postmarkapp.com/.well-known/agent-skills/postmark/SKILL.md",
          "digest": "sha256:13464c46aedc1b118de4eb19ac1151811470b95b06ba79ceeac121aa52e87850"
        },
        {
          "name": "postmark-email-best-practices",
          "type": "archive",
          "description": "Use when asking about email deliverability, compliance (CAN-SPAM, GDPR, CASL), transactional email design patterns, list management, testing safely, or general email best practices — provider-agnostic knowledge with Postmark-specific guidance.",
          "url": "https://postmarkapp.com/.well-known/agent-skills/postmark-email-best-practices.tar.gz",
          "digest": "sha256:a32e16b4825c30fa0c589dc6ccb2f04d1b8bb56f467b283a907d96e1a396fcdc"
        },
        {
          "name": "postmark-inbound",
          "type": "archive",
          "description": "Use when processing incoming emails with Postmark inbound webhooks — building reply-by-email, email-to-ticket, document extraction, or any workflow that receives and parses email.",
          "url": "https://postmarkapp.com/.well-known/agent-skills/postmark-inbound.tar.gz",
          "digest": "sha256:5f730336e1d08a6c56d07cacd90780bb5761e72b36b0492c22c41d9a0ba7304a"
        },
        {
          "name": "postmark-send-email",
          "type": "archive",
          "description": "Use when sending transactional or broadcast emails through Postmark — single sends, batch (up to 500), bulk, or template-based emails with support for attachments, tracking, and message streams.",
          "url": "https://postmarkapp.com/.well-known/agent-skills/postmark-send-email.tar.gz",
          "digest": "sha256:9e210a0bedec74e3abec60c9198fe5f294fb9be16c0df5ddb10346e8bf40eb1e"
        },
        {
          "name": "postmark-templates",
          "type": "archive",
          "description": "Use when creating, managing, or sending with Postmark server-side email templates — Handlebars syntax, layout inheritance, template validation, and cross-server pushing.",
          "url": "https://postmarkapp.com/.well-known/agent-skills/postmark-templates.tar.gz",
          "digest": "sha256:beb488f8fd291db6e552fd3a72ee5b02cc990a69046ebf375dca793a64dae779"
        },
        {
          "name": "postmark-webhooks",
          "type": "archive",
          "description": "Use when setting up Postmark webhooks for tracking email delivery, bounces, opens, clicks, spam complaints, or subscription changes — includes webhook configuration, payload handling, and security.",
          "url": "https://postmarkapp.com/.well-known/agent-skills/postmark-webhooks.tar.gz",
          "digest": "sha256:d481bccb758d339ba4b0e5e32ae8066dbeea98d90e218a04b2faa990defd04ea"
        }
      ]
    }

    How we test this:

    • Any of three passes: /.well-known/agent-skills/index.json on your site or your docs (or one a Link header names) lists a skill whose file answers; your docs or llms.txt link a SKILL.md that answers with a name and a description; or your docs show a skills install command, on a page we read or on up to 3 pages your docs or llms.txt link about skills or your CLI.
    • An install is npx skills add, claude plugin install, a git clone into a skills folder, or your own command line running plugin install or skills add right after the word skill.
    • An index under a folder, like /developer/, may list its files from that folder.
    • Cloudflare's isitagentready, agenticplug and Alpic check it.
  • Not countedSign-in an MCP client can useLG-ACT-04no OAuth sign-in found to judge

    Not in the score · Low, worth 2

    How we test this:

    • We look for OAuth authorization server metadata (RFC 8414): at /.well-known/oauth-authorization-server on your site, through the authorization_servers your protected-resource metadata (RFC 9728) names, and on your mcp. host.
    • It passes when it lists S256 in code_challenge_methods_supported, has scopes_supported, and has a registration_endpoint or client_id_metadata_document_supported, as the MCP authorization spec asks.
    • With no OAuth metadata, it isn't counted.
  • FailInstall shown for four languagesEM-01We didn't find an install for Go on the 4 pages we read (TypeScript/JavaScript, Python and Java found)0 of 4 points · 6 of 15 pass

    We didn't find an install for Go on the 4 pages we read (TypeScript/JavaScript, Python and Java found). An agent working in one of these languages may not find how to install your library in it.

    0 of 4 points · Medium, worth 4

    How we test this:

    • On your docs surface we look for an install in each of four languages: TypeScript/JavaScript (npm, yarn, pnpm or bun), Python (pip, poetry or uv), Go (go get) and Java (a Maven <artifactId> or a Gradle implementation line).
    • All four must appear.
    • This shows how to install, not that a package is official.
    • If none of the pages we read is a quickstart or SDK page, a miss isn't counted: it can't fail you or withhold your score.
    • Ours, not AgentReady's.
  • PassSend operation in the specEM-02the spec has POST /email, POST /email/batch, POST /email/withTemplate and 1 more4 of 4 points · 11 of 15 pass

    4 of 4 points · Medium, worth 4

    How we test this:

    • In the OpenAPI spec AR-ACT-02 found, we look for a POST operation on a path containing mail, email, message or send.
    • No spec counts as a fail.
    • Ours, not AgentReady's.
  • PassFree tier in emailsEM-03free tier: "100 emails/month"4 of 4 points · 13 of 15 pass

    4 of 4 points · Medium, worth 4

    What our check kept, up to 60 lines or 6 KB

    Start Free Trial No Credit Card Required How many emails do you send and receive each month? 10,000 emails Free $0.00 /mo Test your integration with 100 emails/month 100 emails/month. No overages allowed in this plan. Perfect for: Testing your integration Evaluating Postmark's deliverability Side projects with low

    How we test this:

    • On the pricing page AR-READ-11 reads, we look for "free" within 300 characters of a number followed by emails, messages or sends and a period (a month, a day, or 30 days), like "3,000 emails/month" or "4,000 sends in any rolling 30-day window", in the raw text (no JavaScript run).
    • A one-time allowance with no period doesn't count.
    • Ours, not AgentReady's.

How we check: every check, its points and the thresholds, from the same code that runs the scan.

Something wrong? Report it to rahulu626@gmail.com

Your next stepsPart 4 of 4

Your next steps

  1. Pick your fixes
  2. Hand them off
  3. Rescan once it's live
  4. Stay ahead of your category
  5. Then back to 1 when a rival passes you
  1. Pick your fixes

    Usually the founder or DevRel lead

    3 fixes take Postmark from 94 to 99, joint 1st of 15 email APIs, past Brevo, Bird (ex-SparkPost) and Resend.

    Nothing copied yet from this browser.

  2. Hand them off

    To whoever ships it

    Fix with AI writes each fix for whoever ships it: your coding agent, an engineer, product or marketing. Open it in Cursor, as a GitHub issue or in Linear, or copy it. Nothing runs until you send it.

  3. Rescan once it's live

    Usually the engineer, after the deploy

    A rescan reads Postmark again and shows what now passes, the new score and who you passed.

    Last scan: 94 on 9 Nov, 5th of 15 email APIs.

    Weekly, for 4 weeks. A calendar file: no email from us.
    Bookmark this page: it opens on our 9 Nov 2026 scan, with a live scan one press away.
  4. Stay ahead of your category

    DevRel, the founder

    Rivals ship too. Watch Postmark with Brevo and Resend, the nearest on the board: home keeps all three, and Rescan all there shows who moved.

Track it weekly, or scan from your terminal

Scan from your terminal

npx legible-cli postmark
+ Add a rival

No sign-up. Checks the files and URLs agents read. It doesn't test an agent using your product, or whether ChatGPT recommends you.

3 fixes · copy, or open in Cursor, GitHub, Linear

Share Postmark's result

From our 9 Nov 2026 scan.

  • LinkThis result, so whoever opens it sees the same.
  • A line to postWhat it passes, and a way to check their own.

Cards with a place, and README badges, are for the top 3 on a board. When a rescan lifts your score, you can share the jump.