McKesson: 67 of 100 on Ora's agent-readiness scan
In short
McKesson scores 67 of 100 on Ora's agent-readiness scan, grade C, read on 9 November 2026. 79 percent of the 132,085 domains Ora ranks score under 60, and the average score is 44. A readable distributor with no JSON-LD, scored on a Usability denominator of 24.
The score
McKesson is a pharmaceutical distributor and health technology company based in Texas.
- 67of 100, grade COra's agent-readiness scan of mckesson.com, read 9 November 2026.
- 9Discovery, of 10Whether assistants find the company: search presence, Wikipedia and Wikidata, catalogues.
- 16Access, of 39Whether they can read it: the door, text without JavaScript, llms.txt, structured data.
- 18Usability, of 24Whether they can act through it: an MCP server, an API with a specification, sign-in for agents.
- 0Payments, of 0No check in this layer applied to the site.
79 percent of the 132,085 domains Ora ranks score under 60, and the average score is 44.
Ora's one-line summary: Sitemap and robots.txt are well-configured, but WebMCP support is missing.
What an assistant meets at the door
Before an assistant can read, compare or buy, it has to get in. These rows are the door: whether the bot shield lets the main agents through, what robots.txt tells the search, training and user-triggered agents, and whether the home page has text without running JavaScript.
| Check | Result | What Ora saw |
|---|---|---|
| Not blocked by bot detection | Pass, 2 of 2 | Site accessible to 6 AI agent user-agents |
| Agent crawler reachability | Pass, 2 of 2 | Reachable to all major AI crawlers - ChatGPT-User: reachable, ClaudeBot: reachable, Google-Extended: reachable, ora-agent: reachable, DeepSeekBot: reachable |
| robots.txt AI crawler policy | Pass, 2 of 2 | Training: 2/2. Search: 3/3 page/crawler pairs permitted. No applicable crawl or usage restriction found for 5 training and search crawlers (gptbot, claudebot, oai-searchbot, claude-searchbot). |
| robots.txt agent-user policy | Pass, 2 of 2 | No applicable crawl or usage restriction found for 3 user-triggered agents (chatgpt-user, claude-user, perplexity-user) on 1 public page: https://mckesson.com/. Declared policy only; |
| Content without JavaScript | Pass, 3 of 3 | 2281 chars, semantic headings (1 H1 + 4 H2s + 6 H3s), 8.6% content ratio |
What it can read, and what it can do
The reading layer is what an assistant takes away from the pages: a text file written for it, markdown on request, structured data about the company, a sitemap. The act layer is whether it can do anything through a published interface rather than by clicking through the site.
| Check | Result | What Ora saw |
|---|---|---|
| llms.txt exists | Fail, 0 of 1 | No llms.txt found at /llms.txt or /.well-known/llms.txt. |
| llms.txt formatting | Fail, 0 of 2 | No llms.txt found to evaluate quality |
| Markdown agent docs | Fail, 0 of 1 | Missing markdown content negotiation. Homepage returned text/html when probed with Accept: text/markdown (expected text/markdown), and none of the well-known root paths (/llms.md, /auth.md, /agents.md, /developers.md). |
| Bot-UA markdown serving | Fail, 0 of 1 | No probed bot User-Agent (GPTBot, ClaudeBot, ChatGPT-User, PerplexityBot, Google-Extended, Applebot-Extended, ora-agent, DeepSeekBot) receives markdown when requesting HTML. |
| JSON-LD structured data | Fail, 0 of 4 | No JSON-LD structured data found on homepage |
| Organization schema completeness | Fail, 0 of 2 | No JSON-LD found - Organization schema missing |
| Sitemap exists | Pass, 2 of 2 | Valid sitemap found at https://www.mckesson.com/sitemap.xml with 1009 entries |
| Metadata completeness | Partial, 1 of 2 | 3/4 metadata signals present - missing: og:type |
| Page token budget | Pass, 1 of 1 | All 1 measured page fit an agent context budget (largest ~1K tokens) |
| Check | Result | What Ora saw |
|---|---|---|
| MCP server / manifest | Did not apply, 0 of 6 | No MCP server or manifest found |
| MCP well-known discovery | Fail, 0 of 2 | No MCP server URL discovered |
| Public API with reachable endpoints | Did not apply, 0 of 7 | No publicly reachable API surface detected (REST and GraphQL both absent or auth-gated) |
| Public API/docs linked from homepage | Did not apply, 0 of 3 | No public API or documentation page linked from homepage |
| OpenAPI spec published | Did not apply, 0 of 7 | No OpenAPI/Swagger specification found |
| Developer portal | Did not apply, 0 of 6 | No developer portal found |
| OAuth 2.0 support | Pass, 5 of 5 | OpenID Connect discovery endpoint found at https://auth.mckesson.com |
| Scoped permissions | Did not apply, 0 of 5 | No declared OAuth scopes, security schemes, or scoped-permission documentation found |
| Multi-language SDK packages | Did not apply, 0 of 3 | No SDK packages found across language ecosystems |
| CLI tool available | Did not apply, 0 of 3 | No CLI tool found |
| WebMCP support | Fail, 0 of 5 | No WebMCP support detected - no tool-attribute forms and no document.modelContext / navigator.modelContext usage found (scanned 5 of 5 same-origin script bundle(s) for modelContext registrations) |
| Check | Result | What Ora saw |
|---|---|---|
| Wikipedia / Wikidata entity presence | Pass, 4 of 4 | Wikipedia "McKesson" and Wikidata Q570473 both verified - domain confirmed on both sources |
| Brand name discoverability | Pass, 3 of 3 | mckesson.com appears at position #3 in a clean brand-name search for "McKesson" (1 total match) |
| Category share of voice | Did not apply, 0 of 6 | Category share of voice is in beta. It measures whether agents surface you for capability and use-case searches (not just your name). |
| Developer resource discoverability | Did not apply, 0 of 3 | Agent struggled to find developer resources by name - only 1 result(s) out of 10. Not found in this search sample: API docs, OpenAPI spec, developer portal, auth docs, MCP server, SDK documentation |
The six payment checks did not apply on this read: Ora did not read the site as a shop.
Three fixes to hand to the web team
Ora estimates how many points each open check would return. These are the largest on this read, in Ora's words where it gave them, so a leader can hand the list over without translating it.
- WebMCP support, worth about 9.3 points by Ora's estimate: No WebMCP support detected - no tool-attribute forms and no document.modelContext / navigator.modelContext usage found (scanned 5 of 5 same-origin script bundle(s) for modelContext registrations).
- JSON-LD structured data, worth about 3.4 points by Ora's estimate: No JSON-LD structured data found on homepage.
- Agent instruction / when-to-use, worth about 2.6 points by Ora's estimate: No agent instruction file with when-to-use guidance found.
Our read
McKesson is the best-read health distributor in this series, and a C on a short denominator. Six AI agent user agents reach mckesson.com, robots.txt permits every training and search pair Ora checked, the home page gives 2,281 characters at an 8.6 percent text ratio under a proper heading tree, and the sitemap lists 1,009 pages, so the Access layer reads 16 of 39; there is no JSON-LD and no llms.txt, and the metadata lacks og:type. The act layer is thin by nature for a distributor, which is why the Usability layer has a maximum of 24 and the WebMCP estimate of 9.3 points means less than it looks; OpenID Connect discovery at auth.mckesson.com is the one surface Ora found, with no public API, no developer portal and no MCP server. The Discovery layer is 9 of 10, with Wikipedia and Wikidata confirmed. An Organization block is the fix with the most points a web team can ship in a day; the rest of this page is already in order.
Test your own site
Run the same scan on your own domain at ora.ai. The score, the layers and the fixes on this page come from its public result for mckesson.com; a scan of a public site takes a few minutes and needs no account.
- Scan your domain on OraThe same checks, the same scoring, on your own site.
- The self-check, 18 questionsWhat to ask for, in business terms, before the scan.
- All the 360 checksThe other companies in this series, newest first.
Sources
- Ora report for mckesson.com (ora.ai/score/mckesson.com), read 9 Nov 2026. Vendor claim.
Last reviewed