Bogbog.ge

ScoredOct 22, 2026, 02:16 PM

Bog's API program shows strong fundamentals in design, discovery, and documentation structure — partners and agents can find and parse your APIs today. The two areas most likely to stall partners are developer experience and agent usability: there is no changelog to signal breaking changes before they cause incidents, no runnable collection that lets a partner or AI agent validate a workflow end-to-end, and no self-service signup path to convert interested developers without a sales conversation.

API DesignA clean, typed, well-governed API contract agents can reason about4 pass1 warn0 fail92A+
SignalPointsFindingsRationale
passMachine-readable, versioned contractvia spec25/25Uses OpenAPI 3.0.1 (3.0.x; 3.1 adds JSON Schema 2020-12 alignment but is not required for full credit), a current version that agent tooling reads natively. Investigated: spec 100%, docs 100%.A current OpenAPI version with a declared versioning scheme lets agents reason about the contract.
passAuth declared & discoverablevia spec25/25Authentication is required across the API (declared globally or on every operation), so an agent knows credentials are needed. Investigated: spec 100%, docs 100%.Agents can only call an API when they can determine its auth posture — a declared scheme, or an explicit statement that none is required.
warnSchema coverage & depthvia spec15.8/25Operations take a high 12.4 parameters each on average; the request body of POST /v1/{payment-service}/{payment-product}, POST /v1/{payment-service}/{payment-product}/{paymentId}/authorisations, PUT /v1/{payment-service}/{payment-product}/{paymentId}/authorisations/{authorisationId} (+5 more) has a structured shape (more than 5 top-level fields, or a nested object / array-of-objects field), making it hard for an agent to build a valid request. Investigated: spec 63%, sdk 0%.
Fix: Reduce the number of parameters per operation, or flatten the request body, or document each field's shape with a worked example.
Typed, complete request/response schemas are what make agent function-calling possible.
passSecurity & governance hygienevia spec15/15No credential-shaped strings detected in spec. Investigated: spec 100%, sdk 83%, wellknown 0%.No leaked secrets, no critical lint violations, no OWASP API Top-10 spec smells, and a published vulnerability-disclosure channel.
passExample coveragevia spec10/10Only 28% of parameters and responses (252 of 892) include example values, so an agent has little grounding in real payload shapes. Investigated: spec 100%, docs 100%, sdk 0%.Examples carry shape semantics schemas under-specify — for humans and agents alike.
Developer ExperienceThe context both developers and agents need to integrate fast — onboarding, code samples, complete descriptions and worked examples3 pass0 warn2 fail67C
SignalPointsFindingsRationale
passQuickstart presentvia docs25/25Quickstart at https://api.bog.ge/docs/en/bonline/introduction-token includes a runnable first-call code sample. Investigated: docs 100%.A quickstart is the fastest path from landing page to first successful call.
passCode samples in docsvia docs18/18Code samples appear on 4 of 20 sampled docs pages across 2 language(s), but broader multi-language coverage is missing. Investigated: docs 100%.Multi-language samples shorten time-to-first-call.
passDescription completenessvia spec15/15Only 85% of operations and parameters have substantive descriptions (31 of 40 ops, 460 of 496 params; target 90%+). Investigated: spec 100%.Complete descriptions are the context humans and agents need to use endpoints.
failSelf-service developer portalvia docs0/29No self-service signup detected — no signup link on the homepage or docs, and no conventional signup path (/signup, /sign-up, /register, /get-started, /console/signup, /dashboard/signup, /try, /try-free, /free, /free-trial, /start, /start-free, /join, /create-account, /account/signup, /auth/signup, /users/sign_up) resolved — so an agent can't onboard on its own. Investigated: docs 0%.
Fix: Publish a public signup endpoint and link it from your homepage/docs to compress time-to-first-call.
A first call without a human in the loop — self-serve credentials, a free tier, or an API that needs none.
failChangelog publishedvia spec0/13No changelog link or mention appears in the spec, so an agent can't tell what changed before something breaks. Investigated: spec 0%, docs 0%.
Fix: Publish a structured changelog (e.g., /changelog.json or releases.atom) and reference it in info or externalDocs.
A published changelog lets partners track changes without surprise.
Agent DiscoveryPartners and their agents can find your APIs — llms.txt, registries, crawlable and reachable docs1 pass3 warn0 fail86A
SignalPointsFindingsRationale
passRegistry & SDK presencevia docs28/28Indexed on Context7 (websites/api_bog_ge_en, 1534 snippets). Investigated: docs 100%, sdk 88%, cli 0%.Listing in MCP registries and publishing SDKs puts the API where agents and their tooling look.
warnllms.txt present, valid & comprehensivevia docs24.1/30No llms.txt directive found in HTML of any of 49 sampled pages; 1 failed to fetch. Investigated: docs 80%.A valid, comprehensive llms.txt is the machine-readable entry point for agents.
warnDocs reachable, not hard auth-gatedvia docs22.5/30Server ignores Accept: text/markdown header (0/49 sampled pages return markdown). Investigated: docs 75%.Agents can only index and fetch docs they can reach — past auth gates and over correct HTTP semantics.
warnCrawlable / AEOvia wellknown9/12Sitemap has 0 entries but no lastmod values, so crawlers can't tell what changed recently. Investigated: wellknown 75%.
Fix: Add accurate <lastmod> values to sitemap entries — AI-powered search uses them to prioritize crawling.
Bots allowed plus a fresh sitemap make docs findable by agent crawlers.
Agent UnderstandingAgents can correctly interpret your APIs — machine-readable errors, consistent descriptions, structured data, parseable docs1 pass4 warn1 fail79B
SignalPointsFindingsRationale
passMachine-readable errors (RFC 9457)via docs28/28Documents 11 distinct 4xx/5xx error response codes, so an agent can branch on specific failures instead of guessing. Investigated: docs 100%, spec 75%.RFC 9457 problem details and a documented error-code inventory let agents parse failures without burning tokens.
warnOperation purpose clarityvia spec22.5/25Only 63% of operations (25 of 40) have both a clear summary and a descriptive name (target 90%+), so an agent may pick the wrong endpoint for the rest. Investigated: spec 90%.
Fix: Give every operation a concise summary and a descriptive operationId so an agent can pick the right endpoint without guessing.
Agents select the right endpoint from its summary + operationId; clear, named operations make tool-selection reliable — the strongest driver of correct tool choice.
warnAgent-navigable, token-efficient docsvia docs19.4/2216 of 48 pages have substantive content differences between markdown and HTML (avg 11% missing); 1 failed to fetch. Investigated: docs 88%.Server-rendered, clean, small-footprint docs are what an agent can cheaply fetch and parse correctly.
warnAgent instructions file (AGENTS.md)via sdk5/10No agents.md or skill.md context file found (nice-to-have for agent operation). Investigated: sdk 50%, wellknown 0%.
Fix: Add an agents.md or skill.md describing how an agent should use this SDK (auth setup, key operations, gotchas).
An AGENTS.md gives coding agents explicit setup, auth, and usage instructions to interpret and operate the API — beyond llms.txt's link index.
warnDescription consistency across surfaces0.1/7Mean pairwise description similarity across 3 surfaces (spec, docs, sdk) is 1% (threshold 35% for full credit).
Fix: Align the API description across spec, docs, and SDK so an agent reading any one surface gets the same story.
Every surface tells the same story about what the product is.
failDocs structured datavia docs0/8No JSON-LD or OpenGraph/meta tags found across 3 assessed pages (3 JS-rendered), so answer engines have nothing to cite. Investigated: docs 0%.
Fix: Server-render structured data (JSON-LD) so AI answer engines can cite your docs.
Structured data (JSON-LD/schema.org) on docs pages gives agents an unambiguous parse target and is what answer engines cite. Detected on the JS-rendered head (Firecrawl) for a bounded page budget, so JS-injected JSON-LD is now caught; pages we can't render are excluded rather than failed.
Agent UsabilityAgents have the context to use your APIs reliably, not just find them2 pass0 warn2 fail68C
SignalPointsFindingsRationale
passIdempotency documentedvia spec27/27idempotency is documented on the docs site at https://api.bog.ge/docs/en/link-payment/glossary, even though it isn't declared in the API spec. Investigated: spec 100%, docs 100%.Documented idempotency lets agents retry safely.
passSandbox separationvia spec20/20sandbox is documented on the docs site at https://api.bog.ge/docs/en/sandbox/payments/introduction, even though it isn't declared in the API spec. Investigated: spec 100%, docs 100%.An isolated environment lets agents exercise destructive operations safely.
failRate-limit signalingvia spec0/22No rate-limit response headers are documented, so an agent can't tell when it is approaching a limit and will get throttled. Investigated: spec 0%, docs 0%.
Fix: Add x-ratelimit-* response headers and document retry-after semantics.
Machine-readable rate-limit headers let agents throttle adaptively.
failRunnable collection with test scriptsvia sdk0/9No README found. Investigated: sdk 0%, platform 0%.
Fix: Add a README with installation instructions and a runnable quickstart example.
A public, maintained collection with assertions is runnable truth agents validate against.
naPagination documented & consistent—/22No surface produced evidence for this capability in this run.Consistent, documented pagination lets agents traverse collections.
Resources Discovered
Want to improve your results?