sourcey
Add your company

agents:log.jsonSKILL.mdmcp.jsonopenapi.yml

← Cloudflare

Agent report card

Can an agent use Cloudflare 1.1.1.1 Public DNS through DNS over HTTPS query?

Grade A+: Ready.

Observedrev sha256:bb60075bc7f8…

Agent ReadinessA+Ready

Five-stage assessment

Where agent autonomy holds and where it breaks

Five states · each from its own evidence · lifecycle order, not a journey
  1. EvaluateReady
  2. Sign upNot applicable
  3. PayReady
  4. ProvisionNot applicable
  5. OperateReady
  1. 01

    Evaluate

    Ready

    The exact service and stable evaluation or access entrypoints are publicly discoverable.

    Cloudflare's DNS over HTTPS (DoH) resolver endpoint is located at https://cloudflare-dns.com/dns-query and requires no authentication.

    Applicable terms are stable, readable, retrievable, and materially complete.

    Eligibility conditions and required inputs are explicit and decidable.

    Price or no-charge status, variables, currency, and material conditions are explicit.

    Verified structured artifacts accelerate discovery of the evaluation surface.

    Evidence and actions6 signals

    Can an agent decide every material eligibility condition before commitment?

    supported: fresh

    Eligibility conditions and required inputs are explicit and decidable.

    Cloudflare 1.1.1.1 is Cloudflare's public DNS resolver available on all plans. Setting it up takes minutes and does not require any special software.

    eligibility_decidability: Ready: tested 6 Sept

    Method public-semantic-assessment 2026-09-06

    Can an agent estimate cost or confirm no-charge status before commitment?

    supported: fresh

    Price or no-charge status, variables, currency, and material conditions are explicit.

    Cloudflare explicitly declares that 1.1.1.1 is free.

    pricing_decidability: Ready: tested 6 Sept

    Method public-semantic-assessment 2026-09-06

    Can an agent find the exact service and its stable entrypoints?

    supported: fresh

    The exact service and stable evaluation or access entrypoints are publicly discoverable.

    Cloudflare's DNS over HTTPS (DoH) resolver endpoint is located at https://cloudflare-dns.com/dns-query and requires no authentication.

    service_discovery: Ready: tested 6 Sept

    Method public-semantic-assessment 2026-09-06

    Are verified structured discovery artifacts available?

    supported: fresh

    Verified structured artifacts accelerate discovery of the evaluation surface.

    A documentation index is explicitly available at https://developers.cloudflare.com/1.1.1.1/llms.txt to discover all available pages.

    structured_evaluation_discovery: Ready: tested 6 Sept

    Method public-semantic-assessment 2026-09-06

    Can an agent retrieve and understand the applicable commitment terms?

    supported: fresh

    Applicable terms are stable, readable, retrievable, and materially complete.

    Cloudflare's Website and Online Services Terms of Use apply to publicly available Online Services, explicitly including the 1.1.1.1 Public DNS Resolver service.

    terms_access: Ready: tested 6 Sept

    Method public-semantic-assessment 2026-09-06

    Does the vendor deliberately describe access for web agents?

    supported: fresh

    Current admissible evidence does not resolve this finding.

    The retained evidence does not provide explicit web agent access rules or directives such as robots.txt rules for the assessed service.

    verified_web_agent_access: Unknown: tested 6 Sept

    Method public-semantic-assessment 2026-09-06

  2. 02

    Sign up

    Not applicable

    Admitted evidence establishes that this step does not apply to the assessed service.

    Cloudflare Terms of Use explicitly state that 1.1.1.1 Public DNS Resolver is available without a subscription or a Cloudflare account, making sign up access entrypoints non-applicable.

    Admitted evidence establishes that this step does not apply to the assessed service.

    Admitted evidence establishes that this step does not apply to the assessed service.

    Admitted evidence establishes that this step does not apply to the assessed service.

    Admitted evidence establishes that this step does not apply to the assessed service.

    Evidence and actions5 signals

    Can an agent operate the access controls and safe handoffs deterministically?

    supported: fresh

    Admitted evidence establishes that this step does not apply to the assessed service.

    Cloudflare 1.1.1.1 Public DNS is an Online Service publicly available without a subscription or account, and no authentication is required to send API requests over DoH.

    access_control_operability: Not applicable: tested 6 Sept

    • no-access-bootstrap
    • no-operation-authentication

    Method public-semantic-assessment 2026-09-06

    Is there a stable route to begin obtaining service access?

    supported: fresh

    Admitted evidence establishes that this step does not apply to the assessed service.

    Cloudflare Terms of Use explicitly state that 1.1.1.1 Public DNS Resolver is available without a subscription or a Cloudflare account, making sign up access entrypoints non-applicable.

    access_entrypoint_stability: Not applicable: tested 6 Sept

    • no-access-bootstrap

    Method public-semantic-assessment 2026-09-06

    Can an agent obtain access without an unsupported CAPTCHA boundary?

    supported: fresh

    Admitted evidence establishes that this step does not apply to the assessed service.

    Cloudflare 1.1.1.1 Public DNS is publicly available without requiring an account or subscription, so sign-up CAPTCHA boundaries do not apply.

    captcha_compatible_access: Not applicable: tested 6 Sept

    • no-access-bootstrap

    Method public-semantic-assessment 2026-09-06

    Can an agent obtain scoped, revocable authority for this service?

    supported: fresh

    Admitted evidence establishes that this step does not apply to the assessed service.

    Cloudflare explicitly states that no authentication is required to send requests to the 1.1.1.1 DoH API.

    delegated_identity_access: Not applicable: tested 6 Sept

    • no-operation-authentication

    Method public-semantic-assessment 2026-09-06

    Can required phone verification be completed through a supported boundary?

    supported: fresh

    Admitted evidence establishes that this step does not apply to the assessed service.

    Cloudflare 1.1.1.1 Public DNS is accessible without an account or subscription, making sign-up phone verification non-applicable.

    phone_verification_compatible: Not applicable: tested 6 Sept

    • no-access-bootstrap

    Method public-semantic-assessment 2026-09-06

  3. 03

    Pay

    Ready

    Charge or no-charge status, currency, recurrence, and material conditions are disclosed.

    Documentation explicitly declares that 1.1.1.1 is free, takes minutes to set up, and does not require any special software.

    Admitted evidence establishes that this step does not apply to the assessed service.

    Admitted evidence establishes that this step does not apply to the assessed service.

    Admitted evidence establishes that this step does not apply to the assessed service.

    Evidence and actions4 signals

    Can an agent construct checkout, hand off approval safely, and resume?

    supported: fresh

    Admitted evidence establishes that this step does not apply to the assessed service.

    The Cloudflare Terms of Use explicitly state that 1.1.1.1 Public DNS Resolver is an Online Service publicly available without a subscription or a Cloudflare account.

    checkout_operability: Not applicable: tested 6 Sept

    • no-checkout-step

    Method public-semantic-assessment 2026-09-06

    Is the exact commercial commitment disclosed before authorization?

    supported: fresh

    Charge or no-charge status, currency, recurrence, and material conditions are disclosed.

    Documentation explicitly declares that 1.1.1.1 is free, takes minutes to set up, and does not require any special software.

    commitment_disclosure: Ready: tested 6 Sept

    Method public-semantic-assessment 2026-09-06

    Can payment be authorized within scoped agent or explicit human authority?

    supported: fresh

    Admitted evidence establishes that this step does not apply to the assessed service.

    The Cloudflare Terms of Use explicitly state that 1.1.1.1 Public DNS Resolver is an Online Service publicly available without a subscription or account, so payment authorization does not apply.

    payment_authorization: Not applicable: tested 6 Sept

    • no-checkout-step

    Method public-semantic-assessment 2026-09-06

    Is a direct self-service path to paid access documented?

    supported: fresh

    Admitted evidence establishes that this step does not apply to the assessed service.

    The Cloudflare Terms of Use explicitly state that 1.1.1.1 Public DNS Resolver is an Online Service publicly available without a subscription or a Cloudflare account.

    self_service_purchase: Not applicable: tested 6 Sept

    • no-checkout-step

    Method public-semantic-assessment 2026-09-06

  4. 04

    Provision

    Not applicable

    Admitted evidence establishes that this step does not apply to the assessed service.

    The public DNS over HTTPS query endpoint responds directly without requiring a prior provisioning procedure.

    Admitted evidence establishes that this step does not apply to the assessed service.

    Admitted evidence establishes that this step does not apply to the assessed service.

    Evidence and actions3 signals

    Can usable access material be delivered securely to an authorized agent?

    supported: fresh

    Admitted evidence establishes that this step does not apply to the assessed service.

    Cloudflare's documentation explicitly states that no authentication is required to send requests to the DNS over HTTPS API.

    access_material_delivery: Not applicable: tested 6 Sept

    • no-operation-authentication

    Method public-semantic-assessment 2026-09-06

    Can an agent determine successful provisioning completion and reconcile asynchronous failure?

    supported: fresh

    Admitted evidence establishes that this step does not apply to the assessed service.

    Documentation states that no authentication is required to send requests to this API, establishing that provisioning does not apply to this public DNS over HTTPS query endpoint.

    provisioning_completion: Not applicable: tested 6 Sept

    • no-provisioning-step

    Method public-semantic-assessment 2026-09-06

    Can provisioning be initiated within supported agent authority?

    supported: fresh

    Admitted evidence establishes that this step does not apply to the assessed service.

    The public DNS over HTTPS query endpoint responds directly without requiring a prior provisioning procedure.

    provisioning_operability: Not applicable: tested 6 Sept

    Method public-semantic-assessment 2026-09-06

  5. 05

    Operate

    Ready

    Every essential target has a stable documented agent-usable interface alternative.

    All essential targets are accessible and executable via usable HTTP endpoints (`https://cloudflare-dns.com/dns-query` and `https://one.one.one.one/dns-query`) using standard JSON or DNS wireformat interfaces.

    Essential operations have stable readable request, response, and effect semantics.

    Applicable limits, errors, retry, idempotency, cancellation, and reconciliation semantics are documented.

    Admitted evidence establishes that this step does not apply to the assessed service.

    Admitted evidence establishes that this step does not apply to the assessed service.

    Evidence and actions6 signals

    Is an agent-native protocol interface verified against the essential targets?

    supported: fresh

    Current admissible evidence does not resolve this finding.

    The retained excerpts describe REST or RPC interfaces, SDKs and CLIs for Cloudflare 1.1.1.1 Public DNS; they contain no first-party statement that an agent-native protocol interface is absent, and several navigation excerpts mention MCP resources without establishing coverage of the assessed targets.

    agent_protocol_interface: Unknown: tested 6 Sept

    • doh-api

    Method public-semantic-assessment 2026-09-06

    Can an agent manage credential expiry, rotation, revocation, compromise, and recovery?

    supported: fresh

    Admitted evidence establishes that this step does not apply to the assessed service.

    Documentation explicitly declares that no authentication is required to send requests to the 1.1.1.1 DoH API, making credential lifecycle management not applicable.

    credential_lifecycle: Not applicable: tested 6 Sept

    • no-operation-authentication

    Method public-semantic-assessment 2026-09-06

    Can an agent handle applicable failure modes safely?

    supported: fresh

    Applicable limits, errors, retry, idempotency, cancellation, and reconciliation semantics are documented.

    1.1.1.1 documents the failure contract that applies to a stateless read-only resolver query: the JSON error response and DNS Status code, Extended DNS Error codes with their meaning and next steps, and the retry behaviour that returns SERVFAIL or REFUSED to the client only when every authoritative nameserver failed. Idempotency, cancellation and reconciliation semantics concern stateful operations and do not apply to a read-only query.

    failure_contract: Ready: tested 6 Sept

    Method public-semantic-assessment 2026-09-06

    Can an agent authenticate service operations with scoped authority?

    supported: fresh

    Admitted evidence establishes that this step does not apply to the assessed service.

    Documentation explicitly states that no authentication is required to send requests to the 1.1.1.1 DoH API.

    operation_authentication: Not applicable: tested 6 Sept

    • no-operation-authentication

    Method public-semantic-assessment 2026-09-06

    Are essential operation inputs, outputs, and effects stable and decidable?

    supported: fresh

    Essential operations have stable readable request, response, and effect semantics.

    The essential DoH targets have stable and decidable request parameters, MIME types, GET/POST methods, response JSON schemas/wireformats, extended error codes, and upstream resolution behavior clearly documented.

    operation_contract: Ready: tested 6 Sept

    • doh-api

    Method public-semantic-assessment 2026-09-06

    Can an agent perform every essential assessment target through a usable interface?

    supported: fresh

    Every essential target has a stable documented agent-usable interface alternative.

    All essential targets are accessible and executable via usable HTTP endpoints (`https://cloudflare-dns.com/dns-query` and `https://one.one.one.one/dns-query`) using standard JSON or DNS wireformat interfaces.

    target_interface_access: Ready: tested 6 Sept

    • doh-api

    Method public-semantic-assessment 2026-09-06

What works

  • Evaluate: The exact service and stable evaluation or access entrypoints are publicly discoverable.
  • Pay: Charge or no-charge status, currency, recurrence, and material conditions are disclosed.
  • Operate: Every essential target has a stable documented agent-usable interface alternative.

Not applicable: Sign up, Provision.

What blocks agents

No stage is established as blocked.

What this grade establishes

14 of 14 graded signals have current supporting evidence. 5 of 5 additional barrier checks are verified.Unknown checks are not a pass or a confirmed blocker. This report is not proof of an end-to-end purchase or service session.

How the grade is derived

A through C grades count Limited stages; D and F reflect Blocked stages by lifecycle severity.

Coverage is complete only when every graded signal has supported, fresh, non-conflicting evidence. Barrier and informational signals do not change coverage; only fresh, supported barrier values that passed their admission evidence rule participate in stage outcomes.

Each stage takes its worst graded signal or verified barrier. A fresh, supported mandatory barrier that passed its admission evidence rule can block that stage; incomplete or stale barrier evidence remains context only. The overall grade is derived from the five stage states.

Startup offers

Cloudflare on the startup-offers board

catalog record →

Distribution

The grade’s badge

One stable image resolving the record’s current live facts, linking to the canonical page. Embed it once; it keeps itself current. Placement is never evidence and never affects rank.

Live sourcey badge for Cloudflare Agent Readiness grade A+
[![sourcey record](https://sourcey.com/badges/agent-readiness/arp_01m08rqxyvw1151ymp6kaxfgcc.svg)](https://sourcey.com/log/cloudflare/agent-readiness/cloudflare-public-dns/dns-over-https-query)

Improve the report

Correct it, rerun it, or improve the funnel.

Report outdated evidenceRequest reassessmentClaim this record
Profile
arp_01m08rqxyvw1151ymp6kaxfgcc
Projection
sha256:69a02202d628fe399fb80b2bf149bde071db8ac72471c5743cbf11711859cb5a
Policy
service-use-2026-09-07-blocking-barriers-r12 · sha256:fc9e8f046d86fcf19ab2f1bc547219e503cdc11ffa135d020db7285965cd7d1d

Every request carries these exact identifiers.How report cards are assessed →View the exact declaration