Evidence
observed · not disputed
Coverage
complete · 16/16 graded5/5 barrier checks verified
Freshness
fresh
Last tested
Revision
sha256:9aee48b9f63d…

Agent report card

Can an agent use Cloudflare 1.1.1.1 Public DNS through DNS over HTTPS query?

Grade A+: Ready.

Cloudflare / active

Agent ReadinessA+Ready

Five-stage assessment

Where agent autonomy holds and where it breaks

Five states · each from its own evidence · lifecycle order, not a journey
  1. EvaluateReady
  2. Sign upNot applicable
  3. PayReady
  4. ProvisionNot applicable
  5. OperateReady
  1. 01

    Evaluate

    Ready

    The exact service and stable evaluation or access entrypoints are publicly discoverable.

    Applicable terms are stable, readable, retrievable, and materially complete.

    Eligibility conditions and required inputs are explicit and decidable.

    Price or no-charge status, variables, currency, and material conditions are explicit.

    Evidence and actions6 signals

    Can an agent decide every material eligibility condition before commitment?

    supported: fresh

    Eligibility conditions and required inputs are explicit and decidable.

    Cloudflare's public DNS resolver 1.1.1.1 is available on all plans and free, requiring no special software and taking minutes to set up.

    eligibility_decidability: Ready: tested 20 Aug

    Method public-http-semantic-assessment 2026-08-20

    Can an agent estimate cost or confirm no-charge status before commitment?

    supported: fresh

    Price or no-charge status, variables, currency, and material conditions are explicit.

    Cloudflare explicitly declares that 1.1.1.1 is free.

    pricing_decidability: Ready: tested 20 Aug

    Method public-http-semantic-assessment 2026-08-20

    Can an agent find the exact service and its stable entrypoints?

    supported: fresh

    The exact service and stable evaluation or access entrypoints are publicly discoverable.

    The exact DNS over HTTPS resolver endpoint for programmatic API requests is publicly discoverable at https://cloudflare-dns.com/dns-query and requires no authentication.

    service_discovery: Ready: tested 20 Aug

    Method public-http-semantic-assessment 2026-08-20

    Are verified structured discovery artifacts available?

    missing: unknown

    Current admissible evidence does not resolve this finding.

    structured_evaluation_discovery: Unknown

    Can an agent retrieve and understand the applicable commitment terms?

    supported: fresh

    Applicable terms are stable, readable, retrievable, and materially complete.

    Cloudflare's Website and Online Services Terms of Use explicitly govern publicly available services including the 1.1.1.1 Public DNS Resolver service.

    terms_access: Ready: tested 20 Aug

    Method public-http-semantic-assessment 2026-08-20

    Does the vendor deliberately describe access for web agents?

    missing: unknown

    Current admissible evidence does not resolve this finding.

    verified_web_agent_access: Unknown

  2. 02

    Sign up

    Not applicable

    Admitted evidence establishes that this step does not apply to the assessed service.

    Admitted evidence establishes that this step does not apply to the assessed service.

    Admitted evidence establishes that this step does not apply to the assessed service.

    Admitted evidence establishes that this step does not apply to the assessed service.

    Admitted evidence establishes that this step does not apply to the assessed service.

    Evidence and actions5 signals

    Can an agent operate the access controls and safe handoffs deterministically?

    supported: fresh

    Admitted evidence establishes that this step does not apply to the assessed service.

    Cloudflare 1.1.1.1 Public DNS is an Online Service publicly available without a subscription or account, requiring no authentication to send DoH requests.

    access_control_operability: Not applicable: tested 20 Aug

    • no-access-bootstrap
    • no-operation-authentication

    Method bounded-headless-semantic-assessment 2026-08-20

    Is there a stable route to begin obtaining service access?

    supported: fresh

    Admitted evidence establishes that this step does not apply to the assessed service.

    Cloudflare Terms of Use explicitly defines Online Services like the 1.1.1.1 Public DNS Resolver service as publicly available without a subscription or a Cloudflare account.

    access_entrypoint_stability: Not applicable: tested 20 Aug

    • no-access-bootstrap

    Method bounded-headless-semantic-assessment 2026-08-20

    Can an agent obtain access without an unsupported CAPTCHA boundary?

    supported: fresh

    Admitted evidence establishes that this step does not apply to the assessed service.

    The 1.1.1.1 Public DNS Resolver service is publicly available without requiring a Cloudflare account or registration flow where CAPTCHA would apply.

    captcha_compatible_access: Not applicable: tested 20 Aug

    • no-access-bootstrap

    Method bounded-headless-semantic-assessment 2026-08-20

    Can an agent obtain scoped, revocable authority for this service?

    supported: fresh

    Admitted evidence establishes that this step does not apply to the assessed service.

    Documentation explicitly states that no authentication is required to send requests to the 1.1.1.1 DNS over HTTPS API.

    delegated_identity_access: Not applicable: tested 20 Aug

    • no-operation-authentication

    Method public-http-semantic-assessment 2026-08-20

    Can required phone verification be completed through a supported boundary?

    supported: fresh

    Admitted evidence establishes that this step does not apply to the assessed service.

    1.1.1.1 Public DNS is publicly available without a subscription or account, so phone verification does not apply to accessing the service.

    phone_verification_compatible: Not applicable: tested 20 Aug

    • no-access-bootstrap

    Method bounded-headless-semantic-assessment 2026-08-20

  3. 03

    Pay

    Ready

    Charge or no-charge status, currency, recurrence, and material conditions are disclosed.

    Admitted evidence establishes that this step does not apply to the assessed service.

    Admitted evidence establishes that this step does not apply to the assessed service.

    Admitted evidence establishes that this step does not apply to the assessed service.

    Evidence and actions4 signals

    Can an agent construct checkout, hand off approval safely, and resume?

    supported: fresh

    Admitted evidence establishes that this step does not apply to the assessed service.

    Cloudflare 1.1.1.1 Public DNS Resolver service is defined under the Terms of Use as an Online Service publicly available without a subscription or a Cloudflare account. Therefore, checkout step does not apply.

    checkout_operability: Not applicable: tested 20 Aug

    • no-checkout-step

    Method public-http-semantic-assessment 2026-08-20

    Is the exact commercial commitment disclosed before authorization?

    supported: fresh

    Charge or no-charge status, currency, recurrence, and material conditions are disclosed.

    Cloudflare's official documentation explicitly discloses that 1.1.1.1 is free, takes minutes to set up, and does not require special software.

    commitment_disclosure: Ready: tested 20 Aug

    Method public-http-semantic-assessment 2026-08-20

    Can payment be authorized within scoped agent or explicit human authority?

    supported: fresh

    Admitted evidence establishes that this step does not apply to the assessed service.

    Cloudflare 1.1.1.1 Public DNS Resolver service is provided without a subscription or account as a free Online Service, so payment authorization does not apply.

    payment_authorization: Not applicable: tested 20 Aug

    • no-checkout-step

    Method public-http-semantic-assessment 2026-08-20

    Is a direct self-service path to paid access documented?

    supported: fresh

    Admitted evidence establishes that this step does not apply to the assessed service.

    Cloudflare 1.1.1.1 Public DNS Resolver service is an Online Service provided publicly without a subscription or account, so self-service paid access does not apply.

    self_service_purchase: Not applicable: tested 20 Aug

    • no-checkout-step

    Method public-http-semantic-assessment 2026-08-20

  4. 04

    Provision

    Not applicable

    Admitted evidence establishes that this step does not apply to the assessed service.

    Admitted evidence establishes that this step does not apply to the assessed service.

    Admitted evidence establishes that this step does not apply to the assessed service.

    Evidence and actions3 signals

    Can usable access material be delivered securely to an authorized agent?

    supported: fresh

    Admitted evidence establishes that this step does not apply to the assessed service.

    Cloudflare explicitly declares that no authentication is required to send requests to this API.

    access_material_delivery: Not applicable: tested 20 Aug

    • no-operation-authentication

    Method public-http-semantic-assessment 2026-08-20

    Can an agent determine successful provisioning completion and reconcile asynchronous failure?

    supported: fresh

    Admitted evidence establishes that this step does not apply to the assessed service.

    Cloudflare explicitly declares that no authentication is required to send requests to this API, meaning provisioning is not applicable.

    provisioning_completion: Not applicable: tested 20 Aug

    • no-provisioning-step

    Method public-http-semantic-assessment 2026-08-20

    Can provisioning be initiated within supported agent authority?

    supported: fresh

    Admitted evidence establishes that this step does not apply to the assessed service.

    Direct queries to the Cloudflare 1.1.1.1 DNS over HTTPS endpoint execute immediately without requiring any provisioning step.

    provisioning_operability: Not applicable: tested 20 Aug

    Method public-http-semantic-assessment 2026-08-20

  5. 05

    Operate

    Ready

    Every essential target has a stable documented agent-usable interface alternative.

    Essential operations have stable readable request, response, and effect semantics.

    Applicable limits, errors, retry, idempotency, cancellation, and reconciliation semantics are documented.

    Admitted evidence establishes that this step does not apply to the assessed service.

    Admitted evidence establishes that this step does not apply to the assessed service.

    Evidence and actions6 signals

    Is an agent-native protocol interface verified against the essential targets?

    missing: unknown

    Current admissible evidence does not resolve this finding.

    agent_protocol_interface: Unknown

    Can an agent manage credential expiry, rotation, revocation, compromise, and recovery?

    supported: fresh

    Admitted evidence establishes that this step does not apply to the assessed service.

    The documentation explicitly states that no authentication is required to send requests to this API, establishing that credential lifecycle operations do not apply to this service.

    credential_lifecycle: Not applicable: tested 20 Aug

    • no-operation-authentication

    Method public-http-semantic-assessment 2026-08-20

    Can an agent handle applicable failure modes safely?

    supported: fresh

    Applicable limits, errors, retry, idempotency, cancellation, and reconciliation semantics are documented.

    Applicable failure codes (such as HTTP status 400, 413, 415, 504 and Extended DNS Error codes), retry behavior against alternative nameservers for temporary errors/unresponsive servers, and request deduplication semantics are documented.

    failure_contract: Ready: tested 20 Aug

    Method public-http-semantic-assessment 2026-08-20

    Can an agent authenticate service operations with scoped authority?

    supported: fresh

    Admitted evidence establishes that this step does not apply to the assessed service.

    The documentation explicitly states that no authentication is required to send requests to this API, establishing that operation authentication does not apply to this service.

    operation_authentication: Not applicable: tested 20 Aug

    • no-operation-authentication

    Method public-http-semantic-assessment 2026-08-20

    Are essential operation inputs, outputs, and effects stable and decidable?

    supported: fresh

    Essential operations have stable readable request, response, and effect semantics.

    Essential operation inputs, outputs, schemas, HTTP methods, MIME types, and upstream response resolution effects are stably documented across all essential targets.

    operation_contract: Ready: tested 20 Aug

    • doh-api

    Method public-http-semantic-assessment 2026-08-20

    Can an agent perform every essential assessment target through a usable interface?

    supported: fresh

    Every essential target has a stable documented agent-usable interface alternative.

    Every essential target is accessible through documented machine-usable HTTP interfaces (supporting GET/POST with JSON or DNS wireformat MIME types).

    target_interface_access: Ready: tested 20 Aug

    • doh-api

    Method public-http-semantic-assessment 2026-08-20

What works

  • Evaluate: The exact service and stable evaluation or access entrypoints are publicly discoverable.
  • Pay: Charge or no-charge status, currency, recurrence, and material conditions are disclosed.
  • Operate: Every essential target has a stable documented agent-usable interface alternative.

Not applicable: Sign up, Provision.

What blocks agents

No limited or blocked stage is established.

Startup offers

Cloudflare on the startup-offers board

catalog record →

Improve the report

Correct it, rerun it, or improve the funnel.

Report outdated evidenceRequest reassessmentClaim this vendor
Profile
arp_01m08rqxyvw1151ymp6kaxfgcc
Projection
sha256:72ecc2111edfcb77df45983492b31b95f12bb0d410fa8b3237710af856e65f18
Policy
service-use-2026-08-20-public-evidence-r9 · sha256:57bf95fd6d0fe6fe9173a68b60e8d8dc2179b357c88ff4349675a72d0e1d4139

Every request carries these exact identifiers.How report cards are assessed →View the exact declaration