Tomorrowtomorrow.io

ScoredJul 24, 2026, 10:40 AM

io's API program shows genuine strength in agent discoverability — documentation is reachable and well-indexed — but two areas are holding back partner adoption and AI-agent integration at scale. First, the API contract itself is incomplete: schemas lack depth and security hygiene is inconsistent, making it hard for partners and their agents to build with confidence.

API DesignA clean, typed, well-governed API contract agents can reason about1 pass0 warn2 fail45F
SignalPointsFindingsRationale
passExample coveragevia docs10/10Code samples present on 16/19 pages across 2 language(s); broader multi-language coverage missing. Investigated: docs 100%, sdk 100%.Examples carry shape semantics schemas under-specify — for humans and agents alike.
failSchema coverage & depthvia sdk0/25no .d.ts found. Investigated: sdk 0%.Typed, complete request/response schemas are what make agent function-calling possible.
failSecurity & governance hygienevia wellknown0/15No security.txt at /.well-known/security.txt or /security.txt. Investigated: wellknown 0%.No leaked secrets, no critical lint violations, no OWASP API Top-10 spec smells, and a published vulnerability-disclosure channel.
naMachine-readable, versioned contract—/25No surface produced evidence for this capability in this run.A current OpenAPI version with a declared versioning scheme lets agents reason about the contract.
naAuth declared & discoverable—/25No surface produced evidence for this capability in this run.Agents can only authenticate when auth is declared, scoped, and discoverable.
Developer ExperienceThe context both developers and agents need to integrate fast — onboarding, code samples, complete descriptions and worked examples1 pass0 warn3 fail46F
SignalPointsFindingsRationale
passCode samples in docsvia docs18/18Code samples present on 16/19 pages across 2 language(s); broader multi-language coverage missing. Investigated: docs 100%.Multi-language samples shorten time-to-first-call.
failSelf-service developer portalvia docs0/29No signup page detected across conventional paths (/signup, /sign-up, /register, /get-started, /console/signup, /dashboard/signup, /try, /try-free, /free, /free-trial, /start, /start-free). Investigated: docs 0%.Self-serve key/account creation is the fast first call for partners, with no sales gate.
failQuickstart presentvia docs0/25No quickstart/getting-started page found at the conventional paths. Investigated: docs 0%.A quickstart is the fastest path from landing page to first successful call.
failChangelog publishedvia sdk0/13Official SDKs stale: newest activity 911 days ago. Investigated: sdk 0%.A published changelog lets partners track changes without surprise.
naDescription completeness—/15No surface produced evidence for this capability in this run.Complete descriptions are the context humans and agents need to use endpoints.
Agent DiscoveryPartners and their agents can find your APIs — llms.txt, registries, crawlable and reachable docs2 pass2 warn0 fail82A
SignalPointsFindingsRationale
passRegistry & SDK presencevia docs28/28Indexed on Context7 (websites/tomorrow_io, 806 snippets). Investigated: docs 100%, sdk 50%, cli 0%, mcp 0%, wellknown 0%.Listing in MCP registries and publishing SDKs puts the API where agents and their tooling look.
warnllms.txt present, valid & comprehensivevia docs24/30No /llms-full.txt found at the candidate origins. Investigated: docs 80%, sdk 0%.A valid, comprehensive llms.txt is the machine-readable entry point for agents.
warnDocs reachable, not hard auth-gatedvia docs15/301 JavaScript redirect(s) detected across 1 pages. Investigated: docs 50%.Agents can only index and fetch docs they can reach — past auth gates and over correct HTTP semantics.
passCrawlable / AEOvia wellknown12/12Docs paths crawlable by all monitored AI agents. Investigated: wellknown 100%.Bots allowed plus a fresh sitemap make docs findable by agent crawlers.
Agent UnderstandingAgents can correctly interpret your APIs — machine-readable errors, consistent descriptions, structured data, parseable docs1 pass2 warn1 fail62C
SignalPointsFindingsRationale
warnAgent-navigable, token-efficient docsvia docs15.1/22No pages support .md URLs (0/1 tested). Investigated: docs 69%.Server-rendered, clean, small-footprint docs are what an agent can cheaply fetch and parse correctly.
passDocs structured datavia docs8/8JSON-LD Article markup on 17/17 assessed pages (100%) with dateModified present. Investigated: docs 100%.Structured data (JSON-LD/schema.org) on docs pages gives agents an unambiguous parse target and is what answer engines cite. Detected on the JS-rendered head (Firecrawl) for a bounded page budget, so JS-injected JSON-LD is now caught; pages we can't render are excluded rather than failed.
warnDescription consistency across surfaces0.7/7Mean pairwise description similarity across 2 surfaces (docs, sdk) is 3% (threshold 35% for full credit).Every surface tells the same story about what the product is.
failAgent instructions file (AGENTS.md)via wellknown0/10No AGENTS.md at the site root or /.well-known/. Investigated: wellknown 0%.An AGENTS.md gives coding agents explicit setup, auth, and usage instructions to interpret and operate the API — beyond llms.txt's link index.
naMachine-readable errors (RFC 9457)—/28No surface produced evidence for this capability in this run.RFC 9457 problem details and a documented error-code inventory let agents parse failures without burning tokens.
naOperation purpose clarity—/25No surface produced evidence for this capability in this run.Agents select the right endpoint from its summary + operationId; clear, named operations make tool-selection reliable — the strongest driver of correct tool choice.
Agent UsabilityAgents have the context to use your APIs reliably, not just find them0 pass1 warn2 fail45F
SignalPointsFindingsRationale
warnSandbox separationvia sdk10/20No test-mode flag or sandbox environment is exposed. Investigated: sdk 50%.An isolated environment lets agents exercise destructive operations safely.
failIdempotency documentedvia sdk0/27No built-in retry machinery was found; transient failures are not retried. Investigated: sdk 0%.Documented idempotency lets agents retry safely.
failRunnable collection with test scriptsvia platform0/9No public Postman workspace discovered for the org. Investigated: platform 0%.A public, maintained collection with assertions is runnable truth agents validate against.
naRate-limit signaling—/22No surface produced evidence for this capability in this run.Machine-readable rate-limit headers let agents throttle adaptively.
naPagination documented & consistent—/22No surface produced evidence for this capability in this run.Consistent, documented pagination lets agents traverse collections.
Resources Discovered

The public resources we found for Tomorrow — the evidence behind the score. All discovered from public sources; nothing here requires access to your systems.

Agent hintsContext7 (806)
Want to improve your results?