AX AUDIT VS. ORA

AX Audit vs. Ora

Ora runs 132 checks across four layers and ships a 14-tool MCP server with a 1,200+ site leaderboard — the most complete agent-readiness product we've compared against. Here's where it's ahead, where AX Audit is ahead, and what each actually scores.

Ora scores sites on 132 checks across four weighted layers — Discovery (20%), Access (30%), Usability (40%), and Payments (10%) — and exposes that scoring, plus a leaderboard, product discovery, and agent feedback loops, through a 14-tool MCP server at ora.ai/api/mcp. It is also free with no paid tier. AX Audit runs 16 checks across 6 AR-* categories through a 2-tool MCP server, and is the only one of the two that checks AR-PROV: whether an agent can actually open and configure an account with you, not just read about you. Ora is currently the more complete product on protocol breadth and MCP surface area; AX Audit is narrower but covers account-provisioning and ships a CLI with session login and scan history.

What Ora's checks cover (verified via its own list_checks MCP tool)

Source: ora.ai, ora.ai/llms.txt, ora.ai/pricing, and live calls to ora.ai/api/mcp (tools/list, list_checks) — 2026-10-24.

Discovery (20%)

ARD/AI-catalog discovery, llms.txt, sitemap.xml, agent-aware robots.txt

Access (30%)

content negotiation, server rendering, HTTP status correctness

Usability (40%)

MCP servers, OpenAPI, WebMCP manifests, SKILL.md, capability exposure

Payments (10%)

x402, Stripe SPT, Coinbase Commerce, AP2, MPP

Category-by-category

CATEGORY
AX AUDIT
ORA

Number of checks

132

MCP server of their own

2 tools — scan_site, run_full_audit

14 tools — scan, leaderboard, product discovery, agent feedback, skills catalog, check introspection

Public leaderboard

1 site (early)

1,200+ ranked companies

CLI

npx ainative-ax — audit, login, logout, history, --full

npx ax audit — single-site scan

Can an agent open an account with you?

Scored — AR-PROV (AINative-defined category)

Not among the 132 published checks

Pricing

Free quick scan; paid Business tier ($599/mo) for unlimited crawl, daily re-audits, competitor tracking

Entirely free — no paid tier (all endpoints open, rate-limited by IP)

AR-PROV · THE HONEST DIFFERENCE

Can an agent actually open an account with you?

Every tool on this page — including this one — checks whether agents can find and read your site, and most now check whether they can transact with it. None of the three we compare against here define or score agent-initiated account provisioning: machine-readable terms, credential issuance, and signed-mandate consent, so an agent can sign up and get configured without a human filling out a form. AX Audit calls that AR-PROV. It's AINative's own extension to the taxonomy, not a repackaging of someone else's check.

What AX Audit checks

10+ signals across 6 AR-* categories (AR-DISC, AR-CONT, AR-CAP, AR-AUTH, AR-COMM) plus AR-PROV — the only one of the three that checks agent-provisioning readiness.

AR-DISC

Discoverability

robots.txt · A2A Agent Card · llms.txt · sitemaps

AR-CONT

Content

JSON-LD · Markdown negotiation · canonical metadata

AR-CAP

Capabilities

MCP server card · OpenAPI 3.1 · API Catalog (RFC 9727)

AR-AUTH

Identity & Access

OAuth 2.0 + PKCE · RFC 8414/9728 · OIDC · Web Bot Auth

AR-COMM

Commerce

x402 · ACP · UCP · MPP

AR-PROV · ours

Provisioning

account-create · machine-readable terms · credential issuance · signed-mandate consent

HOW WE CHECKED THIS

Verified live, not from memory: fetched ora.ai/llms.txt (confirms the MCP server at ora.ai/api/mcp), called that server's own tools/list (confirmed 14 real tools) and list_checks (confirmed 132 checks, the 4 layers, and their weights, straight from Ora's own structured tool output), and checked ora.ai/pricing (confirmed the single free tier, no paid plan, 10 scans/minute rate limit). An earlier internal assessment claimed Ora had no MCP server of its own — that was wrong, and this page corrects it rather than repeating it. Our own check count (16) and MCP tool count (2) were pulled from our live production API and MCP server in the same session, not asserted from documentation.

See where your site actually stands

Free scan, about 60 seconds. Six categories plus AR-PROV — the one none of these tools check yet.

Run a free AX Audit →