Skip to main content
Research500 Businesses Scanned

Why Developer Tools Dominate Agent Readiness (And What Everyone Else Can Learn)

Of the top 30 Silver-tier businesses on the Agent Readiness leaderboard, 22 are developer tools or infrastructure. Vercel 70. Supabase 69. Stripe 68. GitHub 67. There is a single pattern underneath all of them — and it is fully portable to any business that wants to stop being invisible to agents.

AH
AgentHermes Research
April 15, 202613 min read

The Data: Developer Tools Own the Top of the Leaderboard

Developer tools dominate agent readiness because their APIs are their product. We scanned 500 businesses across consumer, SMB, enterprise, and infrastructure categories. The distribution of scores looks like this: 1 Gold, 52 Silver, 249 Bronze, and 199 businesses below the Bronze threshold. When you look at the 52 Silver-tier companies, a single category dominates.

Twenty-two of the top thirty Silver-tier businesses are developer tools, developer infrastructure, or APIs sold to developers. The average score for this group is 66. The average across all 500 businesses we scanned is 43. That is a 23-point gap driven by one thing: these companies were built from day one to be called by machines, not clicked by humans.

22 / 30
top Silver are dev tools
66
avg dev tool score
43
avg all businesses
23 pts
the gap
Company
Score
Category
Vercel
70
Hosting / Infra
Supabase
69
Database / Auth
Stripe
68
Payments API
Slack
68
Communication API
GitHub
67
Code / VCS
Make
67
Automation
Opsgenie
67
Incident
Drata
66
Compliance
Mintlify
66
Docs
Amplitude
66
Analytics
Jira
66
Project Mgmt
Secureframe
65
Compliance
Grafana
65
Observability
MongoDB
65
Database
Monday
65
Project Mgmt
Calendly
64
Scheduling API
Growthbook
64
Feature Flags
Airbyte
63
Data Pipeline
Pipedream
63
Automation

Every one of these companies treats its API as a first-class product surface. They publish OpenAPI specs. They return structured JSON errors. They maintain public status pages and changelogs. They support OAuth and signed webhooks. None of this was built for AI agents — it was built for developers. But agents and developers need the same things, so the infrastructure transfers for free.

The Pattern: Five Traits That Make a Business Agent-Ready

Underneath every high-scoring developer tool are the same five traits. None of them are exclusive to dev tools. All five are borrowable by any business willing to treat its API as a product, not an afterthought.

The API is the product

Dev tool
Stripe sells an API. Vercel sells a deploy API. Supabase sells a Postgres + auth API.
Non-dev business
A restaurant sells food. The API (if it exists) is a bolt-on to manage orders.

Docs written by engineers for engineers

Dev tool
OpenAPI specs, code samples, copy-paste curl commands. Docs are a product surface area.
Non-dev business
A PDF service menu and a contact form. Docs are marketing copy, not integration specs.

Every error returns structured JSON

Dev tool
GitHub returns { error, code, documentation_url }. Stripe returns typed error objects. Agents can handle failures.
Non-dev business
A 500 HTML error page with no machine-readable signal. Agents guess what happened.

Status pages and changelogs live at predictable URLs

Dev tool
/status, /changelog, /api/status. Agents poll them. Reliability D8 is testable.
Non-dev business
Status info lives in a Twitter thread. Changelog lives in an internal PDF.

OAuth, API keys, webhooks — all standardized

Dev tool
OAuth 2.0 with scopes. Rotatable keys. Signed webhooks with HMAC. Onboard (D3) and Security (D7) are near-automatic.
Non-dev business
A login with password. Sometimes an API key mailed to you. No OAuth.

Why Dev Tools Built This Infrastructure Accidentally

Nobody at Stripe in 2011 was thinking about AI agents. Nobody at GitHub in 2008 was preparing for Claude or ChatGPT. The agent-readiness their products exhibit today is a second-order effect of building for developers.

When your customer is a developer, they will not tolerate ambiguity. They demand an OpenAPI spec because their IDE autocompletes from it. They demand JSON errors because their retry logic depends on them. They demand webhooks because polling is wasteful. They demand OAuth because password auth does not scale. Every one of these demands, met in service of human developers, happens to be exactly what AI agents also require.

Consumer businesses built for the opposite constraint. A restaurant does not need an OpenAPI spec because diners do not have IDEs. A dentist does not need webhooks because patients do not poll. A salon does not need OAuth because customers just log in. The incentives never pulled toward structured, machine-readable interfaces — so they never got built.

This creates an accidental 23-point lead for any business category that built for developers. And it creates a deterministic playbook for any business that wants to close the gap.

What Non-Dev Businesses Can Borrow (Ranked by ROI)

You do not need to become Stripe. You need to adopt the five specific patterns that drove Stripe's agent-readiness score. Ordered from cheapest to most expensive, here is the full list.

1

Publish an OpenAPI spec at /openapi.json

2 hours

Even if you have 3 endpoints. The spec makes them discoverable. D2 API Quality is the highest-weighted dimension at 0.15 — an OpenAPI spec moves it instantly.

2

Turn every error into JSON

1 hour

Replace your 500 HTML page with { error, code, request_id }. Agents can now retry intelligently instead of giving up. This alone moves D8 Reliability from failing to passing.

3

Add a /status page

30 minutes

Even a static HTML page that says "All Systems Operational" is better than nothing. Better: a JSON endpoint at /api/status that returns { ok: true, version, uptime }.

4

Publish a changelog

15 minutes

A markdown file at /changelog or /changelog.json. Agents scan it to know what changed. D9 Agent Experience directly tests for this.

5

Ship an agent-card.json

10 minutes

The A2A discovery standard. 3kb of JSON at /.well-known/agent-card.json tells agents what you do and how to call you. Zero non-dev businesses have one.

The 4-hour playbook: An agent-card.json (10 min), a /status page (30 min), a /changelog (15 min), JSON errors (1 hour), and a basic OpenAPI spec (2 hours). Most businesses move from Bronze to Silver inside a single afternoon — and the changes never need to be undone because they are standards-compliant from day one.

Three Reference Cases: Resend, Stripe, GitHub

We wrote deep breakdowns of three dev-tool reference cases. Each one illustrates a different aspect of the pattern.

Frequently Asked Questions

Why do developer tools score higher than consumer businesses on agent readiness?

Developer tools score higher because their primary product IS their API. Stripe, Vercel, Supabase, and GitHub built their businesses around structured, well-documented, machine-readable interfaces because their customers are developers who demand those things. When AI agents show up as a new "customer," the infrastructure is already in place. Consumer businesses built for human clicks on websites — which is exactly what agents cannot use efficiently.

What is the single biggest thing a non-developer business can do to score like a dev tool?

Publish an OpenAPI specification at /openapi.json and link to it from your agent-card.json. D2 API Quality is weighted 0.15 — higher than any other dimension. Companies with a published OpenAPI spec consistently score above 60. Companies without hit a ceiling around 45 no matter what else they do. You do not need hundreds of endpoints — you need the ones you have to be discoverable and typed.

Do I need to become a developer tool to score well?

No. You need to adopt developer-tool patterns for the parts of your business that agents will touch. A restaurant does not need to become Stripe — but its menu, hours, reservation system, and order flow should follow the same API-first patterns that Stripe uses for payments. The pattern is portable; you only apply it to the agent-facing surface.

Why does Cash App score 12 when Stripe scores 68 — they are both fintech?

Because Stripe built for developers and Cash App built for consumers. Stripe has a public API, OpenAPI spec, SDK in every language, webhook system, and OAuth. Cash App has a mobile app with no public developer API — agents cannot transact with it. Same industry, opposite agent-readiness. For more detail see our fintech breakdown.

Is this a temporary gap or a permanent advantage for dev tools?

Temporary. The patterns are portable and the tooling to adopt them (OpenAPI generators, JSON error middleware, OAuth libraries) is free and widely available. The first non-dev businesses to borrow these patterns will capture the agent-economy opportunity in their verticals. In 3 years the gap between Silver and Bronze will close as the playbook spreads.


See where your business ranks

Run a free Agent Readiness Scan to see your score across all 9 dimensions. Most businesses move from Bronze to Silver in an afternoon by adopting the patterns above.


Share this article: