Agent Readiness Report Card · v0.1
Porkbun: agent readiness
Strong on the fundamentals an agent needs: a clean JSON API covering domains and DNS, a public pricing endpoint (machine-readable pricing is rare), and transparent low prices. It loses ground on delegation (single API key + secret, no OAuth, no scoped tokens), on safety (no audit-log API), and on developer tooling (no sandbox, no webhooks, no official SDK).
Methodology v0.1 · public-signal assessment (not yet an end-to-end live test) · last checked 2026-06-21
Best for (agent use)
- Agents that read live pricing programmatically
- Low, transparent prices
- Simple DNS automation
Not ideal for
- Least-privilege delegation
- Audited, reversible automation
- Teams needing a sandbox
Sub-scores & evidence
Ten criteria, each scored 0–10 from public evidence and weighted to the 0–100 overall. Porkbun's sub-scores reproduce an overall of 63.2.
| Criterion | Weight | Score | Why |
|---|---|---|---|
| API coverage | 18% | 8/10 | JSON API covers domain registration/management, DNS, SSL, and a pricing endpoint. |
| Authentication & delegation | 14% | 5/10 | API key + secret with a per-domain API-access toggle (coarse scoping); no OAuth, no short-lived tokens. |
| Agent safety | 12% | 3/10 | 2FA (TOTP) on the account; no audit-log API, approval flow, spend limit, or rollback. |
| Developer experience | 12% | 6/10 | Public docs and documented rate limits; no sandbox, no webhooks, no official SDK. |
| Agent-interface readiness | 12% | 4/10 | No official MCP; a public pricing endpoint provides genuinely machine-readable pricing, which most peers lack. |
| Pricing transparency | 10% | 9.5/10 | Low, transparent pricing with a programmatic pricing endpoint and no hidden fees. |
| DNS & infrastructure | 8% | 7.5/10 | Free DNS with ALIAS records and DNSSEC, fully API-manageable. |
| Privacy & compliance | 6% | 8.5/10 | Free WHOIS privacy by default; TOTP 2FA. |
| Support quality | 4% | 6.5/10 | Email and business-hours chat. |
| Trust signals | 4% | 7.5/10 | ICANN accredited, operating since 2014; smaller than legacy registrars. |
Open data: the neutral capability facts behind these sub-scores are published, versioned, by Open Domain Data — agent_capability_signals@2026.05, registrar_api_capabilities@2026.05, tld_pricing@2026.06, dns_capabilities@2026.05, registrar_security_contacts@2026.05, registrars@2026.06, rdap_metadata@2026.05. See the index data provenance for the criterion-by-criterion mapping.
How Porkbun could raise this score
The criteria with the most room to improve, lowest first. Each pairs the gap we observed with the capability that criterion rewards. These are improvement priorities, not predictions — implementing them is what would move the score in a future revision.
Agent safety
3/10 · 12% weightToday: 2FA (TOTP) on the account; no audit-log API, approval flow, spend limit, or rollback.
To improve
- Add per-token or per-agent spend limits so a delegated agent cannot overspend.
- Offer human-approval flows (webhooks/confirmations) for high-risk actions like transfers.
- Provide audit logs, change history, and a rollback window for registrations and transfers.
Agent-interface readiness
4/10 · 12% weightToday: No official MCP; a public pricing endpoint provides genuinely machine-readable pricing, which most peers lack.
To improve
- Ship an official MCP (or A2A) interface that an agent can call directly.
- Publish machine-readable pricing and machine-readable policies.
- Provide a capability manifest an agent can read before acting.
Authentication & delegation
5/10 · 14% weightToday: API key + secret with a per-domain API-access toggle (coarse scoping); no OAuth, no short-lived tokens.
To improve
- Issue scoped, least-privilege API tokens instead of all-or-nothing account keys.
- Make credentials revocable and short-lived (expiring tokens, key rotation).
- Support delegating limited access to an agent without sharing full account control.
Where Porkbun is already strong: Pricing transparency (9.5/10).
Frequently asked
- How agent-ready is Porkbun?
- Porkbun scores 63.2/100 in v0.1 of the Agent Readiness Index, ranking #2 of 7 registrars tracked. Strong on the fundamentals an agent needs: a clean JSON API covering domains and DNS, a public pricing endpoint (machine-readable pricing is rare), and transparent low prices. It loses ground on delegation (single API key + secret, no OAuth, no scoped tokens), on safety (no audit-log API), and on developer tooling (no sandbox, no webhooks, no official SDK).
- What would raise Porkbun's agent-readiness score?
- Its biggest gaps are agent safety, agent-interface readiness, authentication & delegation. Add per-token or per-agent spend limits so a delegated agent cannot overspend.
- How is Porkbun's score calculated?
- It is a weighted 0–100 overall computed from ten 0–10 sub-scores; for Porkbun the published sub-scores reproduce an overall of 63.2. Every sub-score is derived from public evidence cited on this page (methodology v0.1, public-signal assessment, not yet an end-to-end live agent test).
Best-Domain-Registrars.com is operated within Just (Just Done LLC). Just Done LLC also operates Just Domain, a domain reseller. Just Domain is not included in this index. Every registrar here is scored by the same published methodology on the same public evidence; see /editorial-policy/.