Personal Agent Protocol report

stricklandai.com

stricklandai.com publishes a poppy.json, and at least one P0 or P1 check fails.
Verdict
Set up, with problems
Profile
pap-1.0@2026-11-13PAP Draft 1.0 (in progress, read 2026-11-13; starts from 0.4, published 2026-11-10; may change)
Last run
Tier 1 probed
Not probed
Each row is one check from the PAP spec, with its outcome, its severity (P0 blocks every agent or is a security MUST, P1 is a MUST that breaks one feature, P2 is a SHOULD or one of Ora's own consistency checks, Advisory never counts against a site) and the section it tests. The full list is in the check catalog, and what Ora's scanner sends is on its own page.

Tier 0: the public files

Plain reads of poppy.json and the documents it points to. None of these requests carries a credential.8 pass, 1 fail, 29 N/A
  1. T0-01Document exists
    Outcome: PassSeverity: P0§3
    served at https://stricklandai.com/.well-known/poppy.json
  2. T0-02Redirects safe
    Outcome: PassSeverity: P0§3
    no redirects
  3. T0-03Valid JSON object
    Outcome: PassSeverity: P0§3
    a JSON object
  4. T0-04Supported protocol_version
    Outcome: PassSeverity: P0§3.1
    protocol_version 1.0 (advisory: agents on 0.4, the latest published version, will not use this file (spec 3.4), so also list a 0.4 document in supported_version…Show the full noteprotocol_version 1.0 (advisory: agents on 0.4, the latest published version, will not use this file (spec 3.4), so also list a 0.4 document in supported_versions)
  5. T0-05Organization names its own host
    Outcome: PassSeverity: P0§3.1
    organization.domain stricklandai.com
  6. T0-06Has an interface
    Outcome: PassSeverity: P0§3.1
    interfaces: web
  7. T0-07Issuer identified
    Outcome: FailSeverity: P0§3.2
    https://stricklandai.com/.well-known/oauth-protected-resource: answers 200 with a body that is not a JSON object; an agent reads only a 404 or valid metadata as…Show the full notehttps://stricklandai.com/.well-known/oauth-protected-resource: answers 200 with a body that is not a JSON object; an agent reads only a 404 or valid metadata as "no issuer", and never falls back to the domain after any other answer
  8. T0-08All URLs HTTPS
    Outcome: PassSeverity: P0§3
    every URL is https
  9. T0-SIBPublished on the requested host
    Outcome: PassSeverity: P2§3.1
    published on stricklandai.com
  10. T0-27Other version documents consistent
    Outcome: N/ASeverity: P1§3.4
    an agent stops at poppy.json (T0-07)
  11. T0-09Issuer metadata reachable
    Outcome: N/ASeverity: P0§3.2
    poppy.json fails T0-07 (see pap-discovery)
  12. T0-10Issuer match
    Outcome: N/ASeverity: P0§3.2
    poppy.json fails T0-07 (see pap-discovery)
  13. T0-11Domain binding
    Outcome: N/ASeverity: P0§3.2
    poppy.json fails T0-07 (see pap-discovery)
  14. T0-12Required endpoints
    Outcome: N/ASeverity: P0§3.2
    poppy.json fails T0-07 (see pap-discovery)
  15. T0-21Cache headers
    Outcome: N/ASeverity: P2Draft 0.2 §3.2
    poppy.json fails T0-07 (see pap-discovery)
  16. T0-22Signing algorithms valid
    Outcome: N/ASeverity: P1§4.1
    poppy.json fails T0-07 (see pap-discovery)
  17. T0-34Signing algorithm list advertised
    Outcome: N/ASeverity: P2§4.1
    poppy.json fails T0-07 (see pap-discovery)
  18. T0-23Same sign-in on every domain
    Outcome: N/ASeverity: P1§3.2
    poppy.json fails T0-07 (see pap-discovery)
  19. ADV-PKCENo plain PKCE
    Outcome: N/ASeverity: Advisoryguides#company-consent
    poppy.json fails T0-07 (see pap-discovery)
  20. T0-13Scopes defined
    Outcome: N/ASeverity: P1§3.1, §4.7
    poppy.json fails T0-07 (see pap-discovery)
  21. T0-14Mediated sign-in well formed
    Outcome: N/ASeverity: P1Mediated Sign-In §2
    poppy.json fails T0-07 (see pap-discovery)
  22. T0-19Extensions named correctly
    Outcome: N/ASeverity: P1§3.3
    poppy.json fails T0-07 (see pap-discovery)
  23. T0-20Extensions advertised fully
    Outcome: N/ASeverity: P1Ops §2
    poppy.json fails T0-07 (see pap-discovery)
  24. T0-24Switched off consistently
    Outcome: N/ASeverity: P1§3.2, §6
    poppy.json fails T0-07 (see pap-discovery)
  25. T0-26Offered scopes described
    Outcome: N/ASeverity: P2§4.7
    poppy.json fails T0-07 (see pap-discovery)
  26. T0-28Browser sign-in scope listed
    Outcome: N/ASeverity: P2§6
    poppy.json fails T0-07 (see pap-discovery)
  27. T0-15Conversation entries
    Outcome: N/ASeverity: P1§3.1
    poppy.json fails T0-07 (see pap-discovery)
  28. T0-16API entries
    Outcome: N/ASeverity: P1§3.1
    poppy.json fails T0-07 (see pap-discovery)
  29. T0-17OpenAPI parses
    Outcome: N/ASeverity: P1§7
    poppy.json fails T0-07 (see pap-discovery)
  30. T0-18MCP resource metadata
    Outcome: N/ASeverity: P1§7
    poppy.json fails T0-07 (see pap-discovery)
  31. T0-25Excluded tasks document
    Outcome: N/ASeverity: P1Draft 0.3 §9.1
    poppy.json fails T0-07 (see pap-discovery)
  32. X-01Same MCP server everywhere
    Outcome: N/ASeverity: P2§7
    poppy.json fails T0-07 (see pap-discovery)
  33. X-02Same organization
    Outcome: N/ASeverity: P2§3.1
    poppy.json fails T0-07 (see pap-discovery)
  34. X-04Domains covered
    Outcome: N/ASeverity: P2§3.2
    poppy.json fails T0-07 (see pap-discovery)
  35. X-07One issuer
    Outcome: N/ASeverity: P2§3.2
    poppy.json fails T0-07 (see pap-discovery)
  36. X-08One metadata document
    Outcome: N/ASeverity: Advisory§3.2
    poppy.json fails T0-07 (see pap-discovery)
  37. X-10Shared token endpoint lists both protocols' grants
    Outcome: N/ASeverity: P2§3.2
    poppy.json fails T0-07 (see pap-discovery)
  38. X-12Consistent 401s
    Outcome: N/ASeverity: P2§7
    poppy.json fails T0-07 (see pap-discovery)

Tier 1: junk requests to the listed endpoints

Requests with no valid credential, which a correct site refuses. They run only when the scan asks for them, at most once per domain every 6 hours.No Tier 1 probe result from the last 30 days.11 not measured
  1. T1-01Token endpoint rejects a junk grant
    Outcome: Not measuredSeverity: P1§4.4
    poppy.json fails T0-07 (see pap-discovery)
  2. T1-02Error bodies leak nothing
    Outcome: Not measuredSeverity: Advisoryguides#company-errors
    poppy.json fails T0-07 (see pap-discovery)
  3. T1-03Conversation endpoint refuses a request with no credentials
    Outcome: Not measuredSeverity: P0§5.3
    poppy.json fails T0-07 (see pap-discovery)
  4. T1-05MCP server challenges unauthenticated initialize
    Outcome: Not measuredSeverity: P1§7
    poppy.json fails T0-07 (see pap-discovery)
  5. T1-15Browser join page is safe to load
    Outcome: Not measuredSeverity: P1§6
    poppy.json fails T0-07 (see pap-discovery)
  6. T1-07Browser endpoint rejects a junk join
    Outcome: Not measuredSeverity: P0§6
    poppy.json fails T0-07 (see pap-discovery)
  7. T1-16Browser join authorization requires a Session
    Outcome: Not measuredSeverity: P1§6
    poppy.json fails T0-07 (see pap-discovery)
  8. T1-09Operations endpoint requires a token
    Outcome: Not measuredSeverity: P2Draft 0.2 Ops §2
    poppy.json fails T0-07 (see pap-discovery)
  9. T1-13Feedback endpoint requires a token
    Outcome: Not measuredSeverity: P1Draft 0.2 §8
    poppy.json fails T0-07 (see pap-discovery)
  10. T1-14Protocol endpoints answer without a redirect
    Outcome: Not measuredSeverity: P1§3
    poppy.json fails T0-07 (see pap-discovery)
  11. ADV-REDIRECTEndpoint answers without a redirect
    Outcome: Not measuredSeverity: AdvisoryDraft 0.1 guides#agent-dpop
    poppy.json fails T0-07 (see pap-discovery)

Tier 2a: coming soon

Valid requests with a real client, once Ora publishes its own client metadata and signs real requests. Not measured yet. These planned checks were written for PAP Draft 0.2, and their sections are its numbering; they will be rewritten for Draft 1.0 before any is built.10 not measured
Show the 10 planned checks
  1. T2-M1Call each read-only OpenAPI GET with no token, then with a valid signed-out token
    Outcome: Not measuredSeverity: P1coming soonDraft 0.2 §6
  2. T2-M5Load the consent page for Ora's real client_id from a valid S256 request and inspect headers; never sign in
    Outcome: Not measuredSeverity: Advisorycoming soonDraft 0.2 guides
  3. T2-01Start a Session for U1
    Outcome: Not measuredSeverity: P0coming soonDraft 0.2 §4.2
  4. T2-02Token lifetime
    Outcome: Not measuredSeverity: P2coming soonDraft 0.2 §4.2
  5. T2-05Renew with session_id
    Outcome: Not measuredSeverity: P1coming soonDraft 0.2 §4.2
  6. T2-14Nonce challenge
    Outcome: Not measuredSeverity: P1coming soonDraft 0.2 §4.3
  7. T2-16Token request with no DPoP proof for an MCP server (resource = MCP url)
    Outcome: Not measuredSeverity: P1coming soonDraft 0.2 §4.3, §6
  8. T2-18Token accepted without cookies
    Outcome: Not measuredSeverity: P1coming soonDraft 0.2 §4.3
  9. T2-19Valid browser assertion, form POST
    Outcome: Not measuredSeverity: P0coming soonDraft 0.2 §5
  10. T2-25Cookie scope
    Outcome: Not measuredSeverity: Advisorycoming soonDraft 0.2 guides

Tier 2b: requires opt-in

Checks that run only for a verified owner who opts in. Not measured yet. These planned checks were written for PAP Draft 0.2, and their sections are its numbering; they will be rewritten for Draft 1.0 before any is built.36 not measured
Show the 36 planned checks
  1. T2-M2Send a valid Session Token in ?access_token= instead of the header
    Outcome: Not measuredSeverity: P0requires opt-inDraft 0.2 §4.3
  2. T2-M3Send a valid browser assertion in the URL instead of the form body
    Outcome: Not measuredSeverity: P1requires opt-inDraft 0.2 §5
  3. T2-M4Start Direct Sign-In with code_challenge_method=plain and Ora's real client_id; stop at the authorization endpoint
    Outcome: Not measuredSeverity: Advisoryrequires opt-inDraft 0.2 guides
  4. T1-12Mediated endpoint, only if the company opts in: two bad-credential attempts
    Outcome: Not measuredSeverity: P1requires opt-inDraft 0.2 §4.7, guides
  5. T2-03Replay the same assertion jti
    Outcome: Not measuredSeverity: P0requires opt-inDraft 0.2 §4.2
  6. T2-04Assertion with aud as an array, or as an endpoint URL instead of auth.issuer
    Outcome: Not measuredSeverity: P1requires opt-inDraft 0.2 §4.2
  7. T2-06Renew U1's Session with a U2 assertion
    Outcome: Not measuredSeverity: P0requires opt-inDraft 0.2 §4.2
  8. T2-07Assertion signed with a key not in Ora's JWKS
    Outcome: Not measuredSeverity: P0requires opt-inDraft 0.2 §4.1
  9. T2-08alg: none or HS256 assertion
    Outcome: Not measuredSeverity: Advisoryrequires opt-inDraft 0.2 guides
  10. T2-09Token request with a reused proof jti
    Outcome: Not measuredSeverity: P0requires opt-inDraft 0.2 §4.3
  11. T2-10Proof with wrong htu or htm
    Outcome: Not measuredSeverity: P0requires opt-inDraft 0.2 §4.3
  12. T2-11Proof with wrong ath
    Outcome: Not measuredSeverity: P0requires opt-inDraft 0.2 §4.3
  13. T2-12Proof signed by a different key than the token's binding
    Outcome: Not measuredSeverity: P0requires opt-inDraft 0.2 §4.3
  14. T2-13Stale iat (beyond ~1 min)
    Outcome: Not measuredSeverity: P1requires opt-inDraft 0.2 §4.3
  15. T2-15Token sent as Authorization: Bearer to a non-MCP endpoint
    Outcome: Not measuredSeverity: P0requires opt-inDraft 0.2 §4.3
  16. T2-17That Bearer token at another MCP server or an OpenAPI endpoint
    Outcome: Not measuredSeverity: P0requires opt-inDraft 0.2 §4.3
  17. T2-20Replay the same browser assertion
    Outcome: Not measuredSeverity: P0requires opt-inDraft 0.2 §5
  18. T2-21exp more than 60 s after iat
    Outcome: Not measuredSeverity: P1requires opt-inDraft 0.2 §5
  19. T2-22return_to on a foreign domain
    Outcome: Not measuredSeverity: P0requires opt-inDraft 0.2 §5
  20. T2-23Session assertion (wrong typ) at the browser endpoint
    Outcome: Not measuredSeverity: P1requires opt-inDraft 0.2 §5
  21. T2-24Browser assertion at the token endpoint
    Outcome: Not measuredSeverity: P1requires opt-inDraft 0.2 §5
  22. T2-26Start with a general question
    Outcome: Not measuredSeverity: P0requires opt-inDraft 0.2 §7.3
  23. T2-27Retry the same message id and content
    Outcome: Not measuredSeverity: P1requires opt-inDraft 0.2 §7.3
  24. T2-28Same id, different content
    Outcome: Not measuredSeverity: P1requires opt-inDraft 0.2 §7.3
  25. T2-29Read events with and without wait
    Outcome: Not measuredSeverity: P1requires opt-inDraft 0.2 §7.5, §7.7
  26. T2-30POST …/messages?wait=10
    Outcome: Not measuredSeverity: P2requires opt-inDraft 0.2 §7.3
  27. T2-31Junk cursor
    Outcome: Not measuredSeverity: P1requires opt-inDraft 0.2 §7.13
  28. T2-32U2 reads U1's conversation
    Outcome: Not measuredSeverity: P0requires opt-inDraft 0.2 §7.2
  29. T2-33Stream with Accept: text/event-stream
    Outcome: Not measuredSeverity: P2requires opt-inDraft 0.2 §7.6
  30. T2-34Ask about the account while signed out
    Outcome: Not measuredSeverity: P1requires opt-inDraft 0.2 §7.11
  31. T2-35Message with only context
    Outcome: Not measuredSeverity: P2requires opt-inDraft 0.2 §7.4
  32. T2-36Close, then send a message
    Outcome: Not measuredSeverity: P1requires opt-inDraft 0.2 §7.12
  33. T2-37Handoff (opt-in only; may page staff)
    Outcome: Not measuredSeverity: P2requires opt-inDraft 0.2 §7.9
  34. T2-38Ora client metadata without extensions.operations, trigger a proposing endpoint
    Outcome: Not measuredSeverity: P1requires opt-inDraft 0.2 Ops §2
  35. T2-39U2 reads U1's signed-out operation
    Outcome: Not measuredSeverity: P0requires opt-inDraft 0.2 Ops §3.2
  36. T2-40Confirm an old revision (if revisions can be triggered)
    Outcome: Not measuredSeverity: P1requires opt-inDraft 0.2 Ops §5.2

Tier 3: needs a test account and a person

Checks that need a test account from the company and a person at the keyboard. Ora does not run these on its own. These planned checks were written for PAP Draft 0.2, and their sections are its numbering; they will be rewritten for Draft 1.0 before any is built.17 not measured
Show the 17 planned checks
  1. T3-01Direct sign-in
    Outcome: Not measuredSeverity: P0needs a test account and a personDraft 0.2 §4.5
  2. T3-02Redirect URI not in Ora's redirect_uris
    Outcome: Not measuredSeverity: P0needs a test account and a personDraft 0.2 §4.5
  3. T3-03User declines
    Outcome: Not measuredSeverity: P1needs a test account and a personDraft 0.2 §4.5
  4. T3-04Device sign-in
    Outcome: Not measuredSeverity: P1needs a test account and a personDraft 0.2 §4.6
  5. T3-05Mediated sign-in (if offered)
    Outcome: Not measuredSeverity: P1needs a test account and a personDraft 0.2 §4.7
  6. T3-06Partial scope approval
    Outcome: Not measuredSeverity: P1needs a test account and a personDraft 0.2 §4.4
  7. T3-07Request an unlisted scope
    Outcome: Not measuredSeverity: P1needs a test account and a personDraft 0.2 §4.4
  8. T3-08Scope enforcement across channels
    Outcome: Not measuredSeverity: P0needs a test account and a personDraft 0.2 §4.4, guides
  9. T3-09Account Token from another client_id or at an API
    Outcome: Not measuredSeverity: P0needs a test account and a personDraft 0.2 §4.8
  10. T3-10Account Token with narrower and wider scope
    Outcome: Not measuredSeverity: P1needs a test account and a personDraft 0.2 §4.8
  11. T3-11Sign a Session into account B after account A
    Outcome: Not measuredSeverity: P1needs a test account and a personDraft 0.2 §4.4
  12. T3-12Revoke the Account Token
    Outcome: Not measuredSeverity: P0needs a test account and a personDraft 0.2 §4.9
  13. T3-13Signed-out token on an account-using conversation
    Outcome: Not measuredSeverity: P1needs a test account and a personDraft 0.2 §7.11
  14. T3-14Direct Conversation
    Outcome: Not measuredSeverity: P1needs a test account and a personDraft 0.2 §7.10
  15. T3-15Operation end to end (sandbox action)
    Outcome: Not measuredSeverity: P0needs a test account and a personDraft 0.2 Ops §3, Ops §6
  16. T3-16standing_permission on a user_approval_required operation
    Outcome: Not measuredSeverity: P1needs a test account and a personDraft 0.2 Ops §5.2
  17. T3-17Account settings
    Outcome: Not measuredSeverity: Advisoryneeds a test account and a personDraft 0.2 guides