# AI Discovery Lab > AI Discovery Lab is the reference implementation of the AI Discovery Standard — an open specification that lets websites serve structured, machine-readable identity, policies, and content to AI agents. Built by Rootz Corp, this site demonstrates how any WordPress site can become AI-ready in minutes using the free Rootz AI Discovery plugin. AI Discovery Lab is a AI Infrastructure, Blockchain Identity, Open Standards organization. Stop hoping AI gets you right. Start telling it. ## Core Concepts AI Discovery: An open standard for how websites present structured information to AI agents, enabling accurate representation instead of HTML scraping. Plugin Wallet: A unique secp256k1 cryptographic identity generated locally on each WordPress site, used to sign manifests and prove data origin. Manifest Signing: The process of cryptographically signing ai.json and llms.txt responses so AI agents can verify the data has not been tampered with. well-known/ai: The RFC 8615 compliant endpoint at /.well-known/ai that serves structured JSON describing a site's identity, capabilities, and policies to AI agents. llms.txt: A standardized text file that provides AI language models with a structured summary of a website's content, similar in concept to robots.txt but for AI consumption. Content Assertions: Metadata tags (factual, editorial, creative-work) applied to pages and posts so AI agents understand how to interpret and weight the information. WebMCP: A browser API that allows websites to register interactive tools with AI assistants, enabling them to read structured data directly rather than scraping HTML. Owner Identity: A blockchain-based identity that links multiple WordPress sites under one organizational account, enabling delegated authorization and multi-site management. ## Pages ### About URL: https://discover.rootz.global/about/ ## About AI Discovery Lab AI Discovery Lab is a live development environment for the **AI Discovery Standard** — an open specification that makes websites machine-readable for AI agents. This site serves three purposes: - **Reference implementation** — Every feature of the standard runs here in production. The /.well-known/ai endpoint, signed responses, content policies, knowledge base, and AI-optimized feed are all live. - **Plugin testbed** — The [Rootz AI Discovery WordPress plugin](/plugin/) powers this site. We use it to develop, test, and refine the plugin before releasing updates to the community. - **Documentation and education** — Developers, site owners, and AI builders can see exactly how AI Discovery works in practice, not just in theory. ### The Problem We Solve AI agents visit millions of websites every day, but there is no standard way for a site to say: - Here is who we are (identity) - Here is what we offer (capabilities) - Here is what you may do with our content (policies) - Here is structured knowledge about our domain (knowledge) Without this, AI agents guess, hallucinate, or ignore sites entirely. The AI Discovery Standard fixes this with a simple JSON endpoint at /.well-known/ai. ### Built by Rootz [Rootz Corp](https://rootz.global) builds blockchain-anchored identity and attestation infrastructure. Our core principle: **Origin, not Trust**. Verify who published something, don’t just trust where it came from. The AI Discovery Standard applies this principle to website-AI communication. Every response is cryptographically signed, so AI agents can verify the publisher’s identity independently. ### Open Standard The AI Discovery Standard specification is published under **CC-BY-4.0**. Anyone can implement it. The WordPress plugin is **GPLv2+**. - [Read the Standard](/the-standard/) - [Get the Plugin](/plugin/) - [Scan a Site](/scanner/) - [See Live Endpoints](/live-demo/) ### Contact Steven Sprague — [steven@rootz.global](mailto:steven@rootz.global) General — [hello@rootz.global](mailto:hello@rootz.global) AI Agent questions — [ai@rootz.global](mailto:ai@rootz.global) ### AI Usage Policy URL: https://discover.rootz.global/ai-usage-policy/ ## AI Usage Policy **Effective Date:** February 21, 2026 This policy governs how AI agents, language models, and automated systems may interact with discover.rootz.global. ### Permitted AI Activities - **Reading /.well-known/ai** — Encouraged. This is the primary interface for AI agents. - **Quoting and summarizing** — Permitted with attribution to discover.rootz.global - **Caching** — Content may be cached for up to 24 hours - **API access** — REST endpoints at /wp-json/rootz/v1/* may be queried programmatically at up to 100 requests/hour - **Tool registration** — WebMCP tools exposed by this site may be registered and invoked by compatible AI agents ### Restricted AI Activities - **Training** — Site content may be used for AI training *with explicit opt-in*. Check the policies endpoint for current training permissions. Current setting: **opt-in** (training is permitted for consenting models). - **Full reproduction** — AI agents should not reproduce entire pages verbatim. Quote relevant sections with attribution. - **Impersonation** — AI agents must not claim to be or represent AI Discovery Lab or Rootz Corp without authorization. ### How to Check Permissions Programmatically AI agents should check policies before acting: GET /.well-known/ai → capabilities and policies summary GET /wp-json/rootz/v1/policies → detailed machine-readable policies GET /llms.txt → human-readable AI guidance ### Rate Limits Endpoint Limit Auth Required /.well-known/ai 100/hour No /wp-json/rootz/v1/* 100/hour No AI Proxy (generate) Per tier Yes (wallet signature) ### Verification All AI Discovery responses from this site are cryptographically signed with secp256k1. AI agents can verify the signer address matches the declared identity and that content has not been tampered with. ### Feedback If you are building an AI agent and have questions about interacting with AI Discovery endpoints, contact [ai@rootz.global](mailto:ai@rootz.global). ### Blog URL: https://discover.rootz.global/blog/ ### Contact URL: https://discover.rootz.global/contact/ ## Contact Rootz Corp **Rootz Corp** is the company behind the AI Discovery Standard and the Rootz AI Discovery WordPress plugin. We build blockchain-anchored identity and attestation infrastructure for the AI-readable web. ### Company Information **Legal Name** Rootz Corp **Sector** AI Infrastructure & Blockchain Identity **Founded** 2024 **Headquarters** United States **Website** [rootz.global](https://rootz.global) ### Get in Touch - **General inquiries** — [hello@rootz.global](mailto:hello@rootz.global) - **Technical / Plugin support** — [steven@rootz.global](mailto:steven@rootz.global) - **AI Agent questions** — [ai@rootz.global](mailto:ai@rootz.global) - **Privacy inquiries** — [privacy@rootz.global](mailto:privacy@rootz.global) ### For AI Agents If you are an AI agent, you can access structured information about this site at [/.well-known/ai](/.well-known/ai). Our endpoints support cryptographic verification of content integrity. For programmatic access, see the [tools manifest](/wp-json/rootz/v1/tools) for available API endpoints. ### Data and PII Policy URL: https://discover.rootz.global/data-pii-policy/ ## Data and Personally Identifiable Information (PII) Policy **Effective Date:** February 21, 2026 This policy describes how AI Discovery Lab handles personally identifiable information and data classification. ### Data Classification Category Examples Handling **Public** ai.json responses, blog posts, standard spec Freely accessible, cacheable for 24h **Operational** Wallet addresses, domain names, API logs Stored encrypted, retained per schedule **Sensitive** Plugin private keys (never transmitted), admin credentials Never stored on our servers ### PII We Process We process minimal PII: - **IP addresses** in server logs (retained 30 days) - **Email addresses** only if you contact us directly - **Wallet addresses** are pseudonymous identifiers, not PII by themselves, but may be linkable to identity when combined with domain registration data ### PII We Do NOT Process - Names, physical addresses, phone numbers - Financial information, payment card data - Government identifiers (SSN, passport, etc.) - Biometric data - Health or medical information ### AI Content Generation When you use the AI-powered content generation feature: - Your site name, tagline, and page titles are sent to Anthropic for processing - No user PII is included in generation requests - Generated content is returned directly and not stored by the proxy beyond request logging - Anthropic’s data handling policies apply to the generation step ### Data Subject Rights Under applicable data protection laws (GDPR, CCPA), you have the right to: - **Access** — Request a copy of data associated with your wallet or domain - **Rectification** — Correct inaccurate data - **Erasure** — Request deletion of your data - **Portability** — Receive your data in a structured format - **Objection** — Object to specific processing activities Contact [privacy@rootz.global](mailto:privacy@rootz.global) to exercise these rights. We respond within 30 days. ### International Transfers Data is processed on Oracle Cloud Infrastructure. API requests to Anthropic may be processed in the United States. We rely on standard contractual clauses for international transfers where applicable. ### Get Started URL: https://discover.rootz.global/get-started/ Go from invisible to AI-ready in under an hour. Here’s exactly how. 1 #### Scan Your Site Enter your URL in our scanner. You’ll get an instant AI Readiness Grade (A-F) with a detailed breakdown of what AI agents can and can’t see about your site. Most sites score D or F before optimization. [Open Scanner](/scanner/) 2 #### Install the Plugin Download the AI Discovery plugin (v2.3.0). In WordPress: Plugins → Add New → Upload Plugin. Activate it — the Quick Start tab runs automatically, reading your existing content to pre-populate settings. [Get the Plugin](/plugin/) 3 #### Fill In Your Identity Open the **Identity tab** and enter your organization name, legal name, sector, tagline, and AI summary. This is how AI introduces your organization. Be specific — “We build compliance automation for mid-market healthcare” is better than “We make software.” Tip: Hover the (i) icons next to every setting for plain-language guidance. 4 #### Configure Content On the **Content tab**, enable llms.txt generation and configure your limits. The plugin auto-generates signed llms.txt from your WordPress content — no manual editing. Enable excerpts for richer context. Every setting has a help tip explaining what it does. 5 #### Set Your Policies On the **Policies tab**, tell AI what it can and can’t do with your content. Choose your content license, set quoting and training permissions. The plugin auto-discovers your privacy policy, terms of service, and other policy pages. In our testing, 2 out of 3 major websites couldn’t tell AI whether quoting was allowed. Your answer is explicit. 6 #### Preview What AI Sees Check the **“What AI Sees” tab** to preview your complete manifest. This is the exact JSON that AI agents consume. The score panel shows your AI readiness grade before you even scan externally. 7 #### Sign Your Manifest Go to the **Account & Signing tab**. Your plugin wallet was auto-generated on activation. Click “Re-sign Manifest” to create a fresh cryptographic signature over your content. Every page gets a SHA-256 content hash. Every response gets an ECDSA signature. 8 #### Re-Scan and Verify Go back to the scanner and scan your site again. Watch your grade jump. Our first certified implementations scored **110/120 (Grade A)** on their first try. Most sites jump from F to B or A in a single session. [See the Case Study](/verity-one/) ### What Happens Next Once your site is live with AI Discovery, AI agents can: - **Discover** your identity and capabilities at /.well-known/ai - **Search** your content with full-text queries and pagination - **Read** any page as clean markdown with provenance stamps (v2.3.0) - **Verify** content integrity via SHA-256 hash comparison For a detailed walkthrough of the AI agent journey, see [How AI Agents Use Your Site](/how-ai-agents-use-your-site/). For help with specific settings, see the [Operator Guide](/operator-guide/). ### Get the Plugin URL: https://discover.rootz.global/plugin/ ## Rootz AI Discovery Plugin for WordPress **Version 2.3.0** — March 5, 2026 Make your WordPress site AI-agent-ready in minutes. The Rootz AI Discovery plugin implements the complete [AI Discovery Standard](https://rootz.global/ai-discovery) — serving structured identity, signed content, machine-readable policies, and interactive tools at /.well-known/ai. [**Download v2.3.0**](https://rootz.global/releases/rootz-ai-discovery-2.3.0.zip) (1 MB) | [Scan Your Site](https://discover.rootz.global/scanner/) | [Operator Guide](https://discover.rootz.global/operator-guide/) ## What It Does The plugin transforms your WordPress database into a structured, signed, machine-readable interface for AI agents. Instead of scraping your HTML and guessing, AI agents get: - Your identity, mission, and core concepts in structured JSON - Content policies (can AI quote? train? cache?) as explicit machine-readable rules - Every page inventoried with SHA-256 content hashes for integrity verification - 9 interactive tools AI agents can call to search, read, and verify your content - Every response signed with your plugin’s cryptographic wallet Everything is served in real-time from your live WordPress database. Not a static file that drifts out of sync — the authoritative source, served fresh. ## Conversation Mode (New in v2.3.0) Your site now supports three modes of AI interaction: Mode What Tools **Broadcast** AI reads your identity manifest and llms.txt getOrganizationInfo, llms.txt **Search** AI queries your content interactively searchContent **Conversation** AI reads any page as clean markdown **getPage** (new) ### getPage — AI Reads Your Pages Any AI agent can request any published page and receive clean markdown with metadata, freshness, provenance, policies, and a cryptographic signature. No scraping, no HTML parsing — server-side conversion with full context attached. ### Adaptive Freshness Every response includes a _freshness block with adaptive shelf-life: 1-hour TTL for actively edited content, up to 30-day TTL for stable pages. AI agents know exactly when to come back for updates. ### Origin Provenance Every response embeds _origin and _provenance blocks in the response body — not just HTTP headers. Your domain, timestamps, wallet address, and standard URL travel with the content even when scraped, cached, or quoted. ### Search Pagination The searchContent tool now supports offset, type filter, totalFound, hasMore, and nextOffset for complete result set traversal. ### Signed llms.txt Both /llms.txt and /llms-full.txt include an ECDSA signature footer. No other WordPress llms.txt plugin signs its output. ## 9 AI Tools Category Tool What It Does Discovery **getOrganizationInfo** Identity manifest with pages, concepts, and signature Discovery **getPolicies** Content license, quoting/training permissions, policy pages Discovery **getKnowledge** Organizational encyclopedia from WordPress content Discovery **getFeed** AI-optimized blog feed with per-item licensing Actions **searchContent** Full-text search with pagination (offset, type, totalFound) Actions **getPage** Read any page as markdown with provenance and freshness Actions **verifyPageHash** Verify content integrity via SHA-256 hash comparison Meta **getStatus** Self-scoring AI readiness (100-point scale, A-F grade) Meta **getContext** Plugin documentation for AI assistants helping with setup ## Endpoints URL Purpose Signed /.well-known/ai Main manifest (identity, pages, capabilities) Yes /.well-known/ai/policies Content license and permissions Yes /.well-known/ai/knowledge Organizational encyclopedia Yes /.well-known/ai/feed AI-optimized blog feed Yes /.well-known/ai/content Structured content (pages, posts, media) Yes /.well-known/ai/tools Tool manifest (9 tools, 3 categories) Yes /wp-json/rootz/v1/search Full-text search with pagination Yes /wp-json/rootz/v1/page Read any page as markdown Yes /wp-json/rootz/v1/verify Verify page content integrity Yes /wp-json/rootz/v1/status AI readiness score and diagnostics Yes /wp-json/rootz/v1/context Plugin documentation for AI assistants No /llms.txt Signed concise overview (links + excerpts) Yes /llms-full.txt Signed full content as markdown Yes ## Installation - [Download the plugin zip](https://rootz.global/releases/rootz-ai-discovery-2.3.0.zip) - In WordPress: Plugins → Add New → Upload Plugin → Choose File → Install Now - Activate the plugin - Go to Settings → AI Discovery — the Quick Start tab runs automatically - Review Identity, Content, and Policies tabs (hover the (i) icons for guidance) - Visit the “What AI Sees” tab to preview your manifest - [Scan your site](https://discover.rootz.global/scanner/) to check your score ## Requirements - WordPress 6.0 or later - PHP 7.4 or later - PHP GMP extension (recommended for full ECDSA signing; plugin works without it using hash-only attestation) ## Previous Versions Version Date Key Changes 2.3.0 March 5, 2026 Conversation Mode: getPage, freshness, provenance, search pagination, signed llms.txt 2.2.1 March 2, 2026 Fix: saving one tab no longer resets other tabs 2.2.0 March 2, 2026 Adoption Registry, two-level identity documentation 2.1.1 Feb 26, 2026 WordPress Plugin Check compliance, improved escaping 2.1.0 Feb 24, 2026 Policies endpoint, self-hosted updater 2.0.4 Feb 23, 2026 Score preview, WebMCP improvements 1.8.0 Feb 22, 2026 AI metrics, searchContent, verifyPageHash, status scoring 1.7.0 Feb 21, 2026 Per-page content hashes, all endpoints signed, contacts ### Home URL: https://discover.rootz.global/ ### How AI Agents Use Your Site URL: https://discover.rootz.global/how-ai-agents-use-your-site/ ## What Happens When AI Visits Your Site When an AI agent — Claude, ChatGPT, Perplexity, Google AI — needs to learn about your organization, it follows a structured journey. With the AI Discovery plugin installed, every step is handled by dedicated endpoints instead of HTML scraping. Here’s the five-step journey, with real examples from this site. ## Step 1: Discover The AI agent checks /.well-known/ai — the standard discovery endpoint. **What it gets:** - Organization name, domain, legal name, sector, tagline - AI summary (2-3 sentences explaining who you are) - Core concepts glossary (your industry terms defined for AI) - List of every page on the site with SHA-256 content hashes - Available tools and endpoints - Contact information for operator and AI support - Cryptographic signature proving this data came from the site owner **Try it live:** [discover.rootz.global/.well-known/ai](https://discover.rootz.global/.well-known/ai) **What AI thinks:** “This is AI Discovery Lab, operated by Rootz Corp. It has 19 pages, 9 tools, and its manifest is signed by wallet 0xD089… I can trust this data because the signature is verifiable.” ## Step 2: Understand For deeper context, the AI fetches the knowledge base and feed. **Knowledge endpoint** (/.well-known/ai/knowledge): - About page content (auto-extracted from WordPress) - Product and service descriptions - Category-based glossary **Feed endpoint** (/.well-known/ai/feed): - Last 20 blog posts with 60-word AI summaries - Categories, tags, and content license per item - Publication dates in ISO 8601 **Try it live:** [Knowledge](https://discover.rootz.global/.well-known/ai/knowledge) | [Feed](https://discover.rootz.global/.well-known/ai/feed) **What AI thinks:** “Now I understand the company’s mission, products, and recent news. The feed tells me they just released v2.3.0 with Conversation Mode features.” ## Step 3: Search When the AI needs something specific, it searches. **The searchContent tool:** GET /wp-json/rootz/v1/search?q=freshness&limit=5 Returns matched pages and posts with titles, URLs, excerpts, dates, and pagination metadata (totalFound, hasMore, nextOffset). **Try it live:** [Search for “AI discovery”](https://discover.rootz.global/wp-json/rootz/v1/search?q=AI+discovery) **What AI thinks:** “Found 8 results for ‘freshness’. The blog post about v2.3.0 is the most relevant. Let me read it.” ## Step 4: Read This is the breakthrough in v2.3.0. The AI can now read any page as clean, structured markdown. **The getPage tool:** GET /wp-json/rootz/v1/page?path=/about/ Returns: - **Content** as clean markdown (headings, lists, links preserved) - **Metadata**: title, author, word count, assertion type (factual vs editorial) - **Freshness**: adaptive TTL telling the AI when to come back - **Origin**: domain, publication date, modification date, signer wallet - **Policies**: content license, quoting permission, training permission - **Integrity**: SHA-256 content hash + ECDSA signature **Try it live:** [Read the About page](https://discover.rootz.global/wp-json/rootz/v1/page?path=/about/) **What AI thinks:** “I have the full About page as markdown. The content hash matches the manifest. The freshness says this is stable content — I can cache it for 30 days. The origin stamp confirms this came from discover.rootz.global and was signed by wallet 0xD089…” ## Step 5: Verify Before citing your content, a careful AI agent verifies it. **The verifyPageHash tool:** GET /wp-json/rootz/v1/verify?page=/about/ Compares the SHA-256 hash from the signed manifest with a fresh hash computed from the live database. Returns match: true/false, both hashes, the signer address, and timestamps. **Try it live:** [Verify the About page](https://discover.rootz.global/wp-json/rootz/v1/verify?page=/about/) **What AI thinks:** “Hash match confirmed. The content I’m about to cite is identical to what the site owner signed and approved. I can quote this with confidence.” ## Without the Plugin vs. With the Plugin What AI Needs Without Plugin (Scraping) With AI Discovery Who runs this site? Guess from footer text, meta tags Structured identity with legal name, sector, contact What does the company do? Parse HTML, infer from page titles AI Summary + Core Concepts glossary Can I quote this content? Unknown — check robots.txt (no answer there) Explicit: license type, quoting yes/no, training yes/no Is this content current? Check page modification date in HTML (unreliable) Freshness metadata with TTL and exact timestamps Has this page been tampered with? No way to verify SHA-256 content hash + ECDSA signature Who published this? Domain owner, maybe Wallet address + origin stamps embedded in response Read a specific page Fetch HTML, strip tags, guess at structure Clean markdown via getPage with full metadata Search the site Use Google site:example.com (indirect) Native searchContent with pagination Confidence level LOW — AI is interpreting unstructured data HIGH — structured, signed, verifiable ## The Bottom Line Every day, AI agents are making decisions about your organization based on whatever they can find online. Without the AI Discovery Standard, they’re guessing. With it, they’re reading — structured data, signed by you, verified by them. The question isn’t whether AI will represent your business. It’s whether you’ll have any say in how. [**Get the plugin**](https://rootz.global/releases/rootz-ai-discovery-2.3.0.zip) | [**Scan your site**](https://discover.rootz.global/scanner/) | [**Read the operator guide**](https://discover.rootz.global/operator-guide/) ### Live Demo URL: https://discover.rootz.global/live-demo/ ## Live API Endpoints This site runs the **Rootz AI Discovery** WordPress plugin v2.3.0. Every endpoint below is live, generated in real time from the WordPress database. ### ai.json — Discovery https://discover.rootz.global/.well-known/ai Live Loading... ### Policies https://discover.rootz.global/.well-known/ai Live Loading... ### Interactive Tools (new in v2.3.0) These endpoints respond to AI agent queries in real time: - [**getPage** — /wp-json/rootz/v1/page?path=/about/](/wp-json/rootz/v1/page?path=/about/) — Read any page as structured markdown with origin provenance, freshness metadata, and ECDSA signature - [**searchContent** — /wp-json/rootz/v1/search?q=AI&limit=5](/wp-json/rootz/v1/search?q=AI&limit=5) — Search site content with pagination (try adding &offset=5 for next page) - [**verifyPageHash** — /wp-json/rootz/v1/verify?page=/about/](/wp-json/rootz/v1/verify?page=/about/) — Verify page content integrity against signed manifest - [**getStatus** — /wp-json/rootz/v1/status](/wp-json/rootz/v1/status) — Site AI readiness score (0-100, graded A-F) ### Static Discovery Endpoints - [/wp-json/rootz/v1/ai.json](/wp-json/rootz/v1/ai.json) — Organization identity and capabilities - [/wp-json/rootz/v1/policies](/wp-json/rootz/v1/policies) — Machine-readable policies and licensing - [/wp-json/rootz/v1/knowledge](/wp-json/rootz/v1/knowledge) — Auto-generated knowledge base - [/wp-json/rootz/v1/feed](/wp-json/rootz/v1/feed) — AI-optimized content feed - [/wp-json/rootz/v1/tools](/wp-json/rootz/v1/tools) — Tool manifest (9 tools) ### llms.txt (Signed) - [/llms.txt](/llms.txt) — Concise site overview for AI agents (signed with plugin wallet) - [/llms-full.txt](/llms-full.txt) — Full site content as markdown (signed, opt-in) ### What Makes This Different Every response from this site is: - **Real-time** — served directly from the WordPress database, not a cached snapshot - **Signed** — ECDSA secp256k1 signature from the plugin wallet proves origin - **Stamped** — origin provenance and freshness metadata embedded in every response - **Owner-controlled** — the site operator decides what AI agents can see and do ### Operator Guide URL: https://discover.rootz.global/operator-guide/ ## Operator Guide: Every Tab Explained This guide walks through every setting in the Rootz AI Discovery plugin. Each tab in your WordPress admin (Settings → AI Discovery) controls a different aspect of how AI agents see and interact with your site. **Tip:** Every setting has an **(i)** icon next to it. Click or hover to see a plain-language explanation of what it does and how to set it. ## Quick Start Tab The Quick Start tab runs when you first activate the plugin. It auto-populates your AI Discovery settings by reading your existing WordPress content: - **Organization name** pulled from your site title - **Domain** detected automatically - **AI Summary** generated from your About page or site description - **Core Concepts** extracted from your most-used categories - **Policy pages** auto-discovered (privacy, terms, GDPR, etc.) You can re-run Quick Start at any time from the tab. It won’t overwrite fields you’ve already customized. ## Identity Tab This is how AI introduces your organization. Every field here appears in the /.well-known/ai manifest. Setting What It Does How to Set It **Organization Name** The name AI uses when referring to you Your company or brand name **Legal Name** Registered business name for formal contexts “Acme Corp, Inc.” — include the entity type **Domain** Auto-detected from WordPress Usually leave as-is **Sector** Industry classification e.g., “Healthcare”, “SaaS”, “E-commerce” **Tagline** One-line positioning statement Your elevator pitch for AI **AI Summary** 2-3 sentence description for AI agents What do you do, who do you serve, what makes you different? **Core Concepts** Glossary of terms specific to your business Define industry jargon that AI might misunderstand **Contact Fields** Operator email, AI support, privacy contact Separate from your public contact — these are for agent-to-operator communication **Best practice:** Write your AI Summary as if you were explaining your business to a new employee who knows nothing about your industry. Be specific. “We make software” is not useful. “We build compliance automation tools for mid-market healthcare providers” is. ## Content Tab Controls what content AI agents can access and how it’s formatted. ### llms.txt Settings Setting What It Does Recommended **Enable llms.txt** Generates a concise, link-based overview at /llms.txt On (default) **Enable llms-full.txt** Generates full-content version with inline markdown Off for small context windows, On for comprehensive access **Include Excerpts** Adds one-sentence descriptions under each page link in llms.txt On — gives AI agents context without reading every page ### Limits Setting Default What It Controls **Pages Limit** 30 Maximum pages in llms.txt. Set lower if you have many draft or utility pages. **Posts Limit (llms.txt)** 10 Recent posts in the concise version. 10 is usually enough for a blog snapshot. **Posts Limit (llms-full)** 50 Posts with full content inline. Watch your file size — 50 long posts can be very large. **Media Limit** 20 Media items in the content endpoint. Includes EXIF data for images. ### Content Types Choose which WordPress post types are included in AI-facing endpoints. Pages and Posts are enabled by default. You can add Custom Post Types if your theme or plugins use them (e.g., “Products” from WooCommerce, “Testimonials” from a review plugin). Both llms.txt files are **cryptographically signed** with your plugin wallet. This is unique to Rootz — no other llms.txt plugin signs its output. ## Policies Tab Defines the rules AI agents must follow when using your content. Setting What It Does **Content License** The license under which AI can use your content. Options: All Rights Reserved (most restrictive), CC-BY-4.0 (attribution required), CC0 (public domain), or custom. **Allow Quoting** Can AI agents quote excerpts from your content? “Yes” means an AI summarizing your blog can include direct quotes. **Allow Training** Can your content be used to train AI models? Most sites say “No.” This is the AI equivalent of robots.txt for training data. The plugin also **auto-discovers your policy pages**. It scans for privacy policies, terms of service, GDPR notices, cookie policies, AI usage policies, accessibility statements, and DMCA pages using 30+ common URL slug patterns. These appear automatically in the policies endpoint. **Why this matters:** In our testing, 2 out of 3 major websites could not tell an AI agent whether quoting their content was allowed. This tab makes your answer explicit. ## Tools Tab Controls which AI tools are available on your site and whether WebMCP is enabled. Your site offers **9 tools** in 3 categories: ### Discovery Tools (always on) - **getOrganizationInfo** — Main identity manifest - **getPolicies** — Content license and permissions - **getKnowledge** — Organizational encyclopedia - **getFeed** — AI-optimized blog feed ### Action Tools - **searchContent** — Full-text search with pagination - **getPage** — Read any page as structured markdown - **verifyPageHash** — Verify content integrity via SHA-256 ### Meta Tools - **getStatus** — Self-scoring AI readiness report - **getContext** — Plugin documentation for AI assistants helping with setup **WebMCP:** When enabled, your site emits WebMCP-compatible tool definitions that Chrome 146+ browsers can register automatically. Visitors with AI-enabled browsers can use your tools without any additional setup. ## Analytics Tab Shows which AI agents visit your site, how often, and what they access. - **Traffic overview** — Total AI requests in the last 24 hours and 7 days - **Agent breakdown** — Which AI services are visiting (Claude, ChatGPT, Perplexity, Google, etc.) - **Top endpoints** — Which tools are most used Agents are classified by User-Agent string. The metrics table uses a custom WordPress database table for performance. ## What AI Sees Tab A live preview of your /.well-known/ai manifest as AI agents would see it. Use this to verify that your identity, pages, core concepts, and signature are all correct before going live. The preview updates in real-time as you change settings on other tabs. ## Account & Signing Tab Manages your plugin wallet and cryptographic signing. Setting What It Does **Wallet Address** Your plugin’s unique blockchain address (0x…). Auto-generated on first activation. This becomes your site’s digital identity for AI. **Signing Status** Shows whether ECDSA signing is active. Requires the PHP GMP extension. If GMP is unavailable, the plugin falls back to hash-only attestation (content hashes without signatures). **Re-sign Manifest** Button to regenerate the signed manifest after content changes. The plugin shows a notice when re-signing is needed. **Adoption Registry** Opt-in checkbox to share your domain with the AI Discovery Standard registry at rootz.global. Helps build the network of AI-ready sites. ## Troubleshooting ### GMP Extension Not Installed The plugin needs PHP’s GMP extension for ECDSA cryptographic signing. Without it, your endpoints still work but responses use hash-only attestation instead of full signatures. **Fix:** Ask your hosting provider to enable php-gmp, or on Linux: sudo apt install php-gmp && sudo systemctl restart apache2 ### 404 on /.well-known/ai WordPress rewrite rules may need flushing. Go to Settings → Permalinks and click “Save Changes” (even without changing anything). This regenerates the .htaccess rules. ### “No Wallet” Warning The wallet generates automatically on plugin activation. If it shows “none,” try deactivating and reactivating the plugin. The wallet requires GMP for generation but the address is always displayable once created. ### Score Below 50 Check the status endpoint (/wp-json/rootz/v1/status) for a category breakdown. Common missing items: - **Identity**: Add Legal Name, Sector, and Tagline on the Identity tab - **Contacts**: Add operator email and AI support email - **Content**: Enable the Content endpoint on the Content tab - **Signing**: Install GMP and re-sign the manifest ### Content Changes Not Reflected The plugin caches manifests and llms.txt for 1 hour. After making content changes: - Go to the Account & Signing tab - Click “Re-sign Manifest” to regenerate with fresh page hashes - The cache clears automatically when you save settings or publish posts ### Pricing URL: https://discover.rootz.global/pricing/ Free $0 forever - Scan & grade any website - WordPress plugin - AI auto-configure (5 uses) - Basic AI readiness score - Community support [Scan Free](https://rootz.global/ai-discovery) Most Popular Standard $5/site/mo Volume discounts at 10+ and 25+ sites - Everything in Free - Unlimited AI auto-configure & updates - Weekly monitoring scans - Score alerts & notifications - AI Readiness Badge embed - Scan history & trends - Email support [Coming Soon](#) Pro $10/site/mo Volume discounts at 10+ and 25+ sites - Everything in Standard - Interactive AI assistant - Dynamic content for AI agents - Web service tools (inventory, search) - Custodial wallet identity - Priority support [Coming Soon](#) ## Volume Discounts Managing multiple sites? The more you add, the less you pay per site. Sites Standard Pro Example (Standard) 1 Free Free $0/mo 2 – 9 $5/site $10/site $10 – $45/mo 10 – 24 $4/site $8/site $40 – $96/mo 25+ $3/site $6/site $75+/mo ## What You Get ### AI Auto-Configure Our AI reads your site and generates your entire AI Discovery manifest — identity, policies, knowledge base, and feed. Standard gets unlimited updates as your site changes. ### Monitoring & Alerts Weekly automated scans check your AI readiness score. Get notified immediately if your grade drops — broken endpoints, expired signatures, stale content. ### AI Readiness Badge Embed a live badge on your site showing your current grade. Links back to your verified score. Badge goes stale if you stop maintaining your score. ### Score History Track your AI readiness over time. See what changed, what improved, what needs attention. Exportable reports for stakeholders. ## Frequently Asked Questions ### What is AI Discovery? The AI Discovery Standard provides a structured way for websites to communicate with AI agents. Instead of scraping and guessing, AI gets clean data about who you are, what you offer, and what it’s allowed to do. ### Why does my site need this? AI agents are the new visitors. ChatGPT, Claude, Perplexity, and Copilot are already trying to understand your site. Without AI Discovery, they’re guessing. With it, they know exactly what you want them to say about you. ### What if I stop paying? Your AI Discovery configuration stays active — the plugin doesn’t stop working. But without monitoring, your score can degrade silently as content changes, endpoints break, or signatures expire. Your badge will reflect your actual live score. ### Do I need WordPress? Our WordPress plugin is the easiest way to get started. For other platforms, use the generator at rootz.global to create your AI Discovery files manually. The standard is open and works with any web server. ### What’s the difference between Standard and Pro? Standard gives AI agents the ability to *read* your site. Pro gives them the ability to *interact* with your site — search your content, check inventory, call your APIs. Pro also includes a custodial wallet for cryptographic identity. ### Can I pay with crypto? On-chain payment verification is coming in Phase 2. For now, we accept credit cards via Stripe. ## Ready to get started? Scan your site free. See your grade. Decide if you want to level up. [Scan Your Site Free](https://rootz.global/ai-discovery) ### Privacy Policy URL: https://discover.rootz.global/privacy-policy/ ## Privacy Policy **Effective Date:** February 21, 2026 **Last Updated:** February 21, 2026 AI Discovery Lab (“we,” “us,” “our”) operates discover.rootz.global. This policy explains how we collect, use, and protect information when you visit this site or interact with our services. ### Information We Collect #### Automatically Collected - **Server logs:** IP address, browser type, pages visited, timestamps. Standard web server logging retained for 30 days. - **WordPress analytics:** Page views and basic site usage statistics. No third-party tracking scripts are loaded. #### Information You Provide - **Scanner tool:** When you enter a URL in our scanner, we process that URL to check for AI Discovery endpoints. We do not store scanned URLs beyond the request lifecycle. - **Plugin wallet addresses:** If your WordPress plugin registers with our AI proxy service, we store the plugin’s public wallet address and associated domain. No private keys are ever transmitted to us. #### Information We Do NOT Collect - No cookies for tracking or advertising - No personal identification (name, email, phone) unless you explicitly provide it - No third-party analytics (no Google Analytics, no Meta Pixel) - No fingerprinting or cross-site tracking ### How We Use Information - To operate and maintain this website - To process AI proxy requests authenticated by plugin wallet signatures - To enforce usage limits on our free and paid API tiers - To improve the AI Discovery Standard and related tools ### Data Sharing We do not sell, rent, or share personal information with third parties. AI proxy requests are forwarded to Anthropic’s API for processing; Anthropic’s [privacy policy](https://www.anthropic.com/privacy) applies to that processing. ### Data Retention - **Server logs:** 30 days - **API request logs:** 90 days (wallet address, domain, action type, status) - **Wallet registrations:** Retained until the wallet owner requests deletion ### Your Rights You may request access to, correction of, or deletion of any data we hold about your wallet address or domain by contacting [privacy@rootz.global](mailto:privacy@rootz.global). ### Security All data is transmitted over TLS 1.2+. Plugin wallet authentication uses secp256k1 cryptographic signatures. API data is stored in encrypted-at-rest databases on Oracle Cloud Infrastructure. ### Changes We will post any changes to this policy on this page with an updated effective date. ### Contact [privacy@rootz.global](mailto:privacy@rootz.global) Rootz Corp ### Scanner URL: https://discover.rootz.global/scanner/ Check any website’s AI readiness in seconds. See what AI agents can and can’t understand about your site. Scan Results Want to improve your score? [Get the Plugin](/plugin/) [View Plans](/pricing/) Scanning… checking AI Discovery endpoints… ## What Gets Checked 120 points across five categories of AI readiness. 60 ### Discovery /.well-known/ai endpoint, schema version, organization identity, policies, contact info. 25 ### Extended Knowledge base, AI feed, robots.txt, sitemap, llms.txt, three-tier architecture. 10 ### Verification Cryptographic signatures, Digital Name, content hashes, signer identity. 25 ### Content Pages with summaries, blog posts, media inventory — proof AI can read your content. ### Terms of Use URL: https://discover.rootz.global/terms-of-use/ ## Terms of Use **Effective Date:** February 21, 2026 By accessing discover.rootz.global (“the Site”), you agree to these terms. ### 1. Purpose This site is a development lab and reference implementation for the AI Discovery Standard. It demonstrates how websites can communicate structured information to AI agents via /.well-known/ai endpoints. ### 2. Acceptable Use You may: - Browse the site and inspect all public endpoints - Use the scanner tool to check any domain you own or have permission to scan - Access the REST API endpoints programmatically at reasonable rates - Reference the AI Discovery Standard specification (CC-BY-4.0) You may not: - Attempt to access the WordPress admin area without authorization - Abuse the AI proxy service (automated bulk requests, credential stuffing) - Use the scanner to probe sites you do not own without permission - Misrepresent the origin or authorization of AI Discovery data ### 3. API and Scanner Usage Public API endpoints (/.well-known/ai, /wp-json/rootz/v1/*) are available without authentication at a rate of 100 requests per hour per IP. The AI proxy service requires wallet authentication and is subject to tier-based usage limits. ### 4. Intellectual Property - The **AI Discovery Standard specification** is licensed under CC-BY-4.0 - The **Rootz AI Discovery WordPress plugin** is licensed under GPLv2+ - Site content (blog posts, documentation) is © Rootz Corp unless otherwise noted ### 5. AI Agent Terms AI agents accessing this site should: - Respect the policies declared in /.well-known/ai - Honor rate limits (100 requests/hour) - Attribute content when quoting or summarizing - Check the policies endpoint before crawling or training on content ### 6. Disclaimer This is a lab environment. Content, APIs, and features may change without notice. The site is provided “as is” without warranties of any kind. ### 7. Governing Law These terms are governed by the laws of the State of Delaware, USA. ### 8. Contact [legal@rootz.global](mailto:legal@rootz.global) ### The Standard URL: https://discover.rootz.global/the-standard/ ### Verity One - First Certified AI Discovery URL: https://discover.rootz.global/verity-one/ A # First Certified AI Discovery Implementation Verity One Ltd. became the first third-party organization to achieve Grade A AI Discovery certification — scoring 110/120 across two production domains. 110 out of 120 points A AI Readiness Grade 2 certified domains 10/10 Verification score ## The Challenge Verity One operates in supply chain verification — proving authenticity of products from farm to shelf. Their websites at **19a.verity.one** and **m.miusa.one** contain critical information about their verification services, but AI agents had no structured way to understand what Verity One does, what data is available, or how to interact with their services. ## The Solution Verity One installed the AI Discovery WordPress plugin (v2.0.2) and configured their AI Discovery manifest using the AI auto-configure feature. The entire setup process took less than an hour per site. ### Full Identity Organization name, description, sector, contact information, and legal entity details — all structured for AI consumption. ### Signed Manifests Every endpoint cryptographically signed with a plugin wallet. Digital Name registered. AI agents can verify content authenticity. ### Content Hashes Per-page SHA-256 content hashes in the manifest. AI agents can verify that the content hasn’t been tampered with. ### Complete Discovery /.well-known/ai endpoint, knowledge base, AI feed, robots.txt, sitemap — the full three-tier architecture. ## The Scanner Results ![Verity One 19a.verity.one AI Discovery Scanner - Grade A 110/120](https://discover.rootz.global/wp-content/uploads/2026/02/verity-one-scorecard.jpeg) 19a.verity.one 2014 Grade A, 110/120 ![MIUSA m.miusa.one AI Discovery Scanner - Grade A 110/120](https://discover.rootz.global/wp-content/uploads/2026/02/miusa-scorecard.jpeg) m.miusa.one 2014 Grade A, 110/120 A ### 19a.verity.one 110 / 120 points Discovery 58/60 • Extended 17/25 • Verification 10/10 • Content 25/25 A ### m.miusa.one 110 / 120 points Same excellent scores. Proving AI Discovery scales across multi-site deployments. > “This is how websites should communicate with AI. Structured, signed, verifiable. Not scraping and hoping.” — Adam Reiser, CEO, Verity One Ltd. ## Key Takeaways - **Less than an hour to Grade A** — the WordPress plugin and AI auto-configure handle the heavy lifting. - **10/10 verification** — cryptographic signatures and content hashes provide proof of authenticity that AI agents can verify. - **Multi-site consistency** — same plugin, same configuration approach, same high score across both domains. - **The standard works** — a real company, real websites, real AI readiness — not just a demo. ## Get the same results Scan your site. Install the plugin. Let AI do the configuration. Our first certified implementations scored Grade A on the first try. [Scan Your Site](https://rootz.global/ai-discovery) [View Pricing](/pricing/) ### Welcome URL: https://discover.rootz.global/welcome/ ✓ # Welcome to AI Discovery Your subscription is active. Let’s make your site visible to AI. 1 #### Install the WordPress Plugin Download the AI Discovery plugin and install it on your WordPress site. It works with any theme. [Get the Plugin](/plugin/) 2 #### Run AI Auto-Configure Open the plugin settings and click “AI Enhance.” The AI reads your site and generates your identity, policies, knowledge base, and feed automatically. 3 #### Scan Your Site Use the scanner to check your AI Readiness Grade. See exactly what AI agents can understand about your site. [Open Scanner](https://rootz.global/ai-discovery) 4 #### Review & Customize Check the “What AI Sees” tab in the plugin to preview your AI Discovery manifest. Customize your identity, policies, and content settings. 5 #### Re-scan & Celebrate Scan again and watch your grade climb. Our first certified implementations scored 110/120 (Grade A) on their first try. ### Need Help? Our team is here to help you get to Grade A. [Contact Support](/contact/) ### Why AI Discovery URL: https://discover.rootz.global/why/ ## The Problem When an AI agent visits your website today, it faces a series of unanswerable questions: - What does this organization actually do? - Am I allowed to quote this content? - Can I use this for training? - What policies apply to automated access? - Who signed this content and can I verify it? - What pages exist beyond what I can crawl? Without structured data, AI agents are forced to scrape HTML, parse legal documents written for humans, and guess at permissions. The results are unreliable, expensive, and often wrong. ## We Tested It In February 2026, we ran a controlled experiment. We asked AI agents to answer 10 standard questions about four websites — one with /.well-known/ai and three without. The results were stark: Site Has AI Discovery HIGH Confidence LOW Confidence discover.rootz.global Yes **9 / 10** 0 Intel No 7 / 10 0 Naoris Protocol No 6 / 10 2 AdventHealth No 4 / 10 4 The site with AI Discovery scored 9 out of 10 with HIGH confidence. AdventHealth — a major healthcare system with 92,000 employees — scored just 4, with policy pages that returned 404 errors or redirected to the wrong subdomain. ## The Permission Crisis The most critical finding was about content licensing. Only one site could give AI a machine-readable answer to “Can I quote this content?” - **With AI Discovery:** permissions: ["quote", "summarize", "cache_24h"] — instant, unambiguous - **Intel:** Prohibition buried in Terms of Use legal text - **AdventHealth:** Unknown — policy pages broken - **Naoris Protocol:** Unknown — terms not retrievable Two out of three real-world sites cannot even tell an AI agent whether it is allowed to read them. ## What AI Discovery Provides The AI Discovery Standard creates a structured interface between your website and AI agents. A single endpoint at /.well-known/ai provides: ### Organization Identity Name, domain, mission, sector, legal name, headquarters — structured JSON that any AI can parse without scraping your About page. ### Content Policies Machine-readable permissions and restrictions. Not legal text to interpret — explicit arrays: ["quote", "summarize"], ["no_training"]. AI agents know immediately what they can and cannot do. ### Cryptographic Signing Every response is signed with a secp256k1 key. AI agents can verify the content hash, check the signer address, and confirm the data has not been tampered with. This is content attestation — proof of origin that works without trusting the transport layer. ### Knowledge Base Structured information about your organization — about text, products, glossary terms — available in one API call instead of crawling dozens of pages. ### AI-Optimized Feed Recent content formatted for AI consumption. Titles, summaries, categories, and publication dates without the overhead of parsing HTML blog layouts. ### Contact Information Operator name, general email, AI-specific support email, privacy contact — so AI agent developers know exactly who to reach. ## The Numbers Structured path: **4 API calls, ~3,200 tokens** of input data, zero failed requests. Scraping path: **4-8 page fetches, ~5,000+ tokens** per site, frequent failures and redirects. AI Discovery is faster, cheaper, more reliable, and produces better results. ## Get Started The [Rootz AI Discovery WordPress Plugin](/plugin/) adds /.well-known/ai to any WordPress site in minutes. The [specification](/standard/) is open (CC-BY-4.0) and works on any platform. [See the live endpoint](https://discover.rootz.global/.well-known/ai) | [Scan your site](/scanner/) | [Install the plugin](/plugin/) ## Recent Posts ### Your WordPress Site Needs Agent Skills Published: 2026-03-05 URL: https://discover.rootz.global/your-wordpress-site-needs-agent-skills/ ## What Are Agent Skills? When you install a browser extension, your browser gets new capabilities — ad blocking, password management, translation. **Agent Skills** are the same concept for AI assistants. They’re downloadable instruction packs that teach AI tools like Claude, ChatGPT, Cursor, and Copilot how to work with specific services. The Rootz **AI Discovery Skill** teaches AI agents how to discover, read, verify, and score websites that implement the /.well-known/ai standard. Once installed, an AI assistant doesn’t have to guess how to interact with your site — it already knows. ## Why WordPress Operators Should Care You’ve installed the AI Discovery plugin. Your site serves structured endpoints. AI agents can discover your identity, search your content, read your pages, and verify your data. But here’s the gap: **the AI agent visiting your site might not know any of that exists.** Think of it this way: your site is a restaurant with a full menu, but the AI agent walked in without a menu and is guessing what to order. Agent Skills solve this. When an AI assistant has the AI Discovery Skill installed: - It knows to check /.well-known/ai first, not scrape your HTML - It knows how to parse the manifest and understand your organization - It knows about searchContent, getPage, and verifyPageHash - It can score your site’s AI readiness and suggest improvements - It can verify content integrity by checking SHA-256 hashes The skill is also the **world’s first cryptographically signed Agent Skill**. Every file in the skill pack has a SHA-256 hash recorded in a signed manifest, with a rollup hash anchored on Polygon. An AI can verify the skill itself hasn’t been tampered with. ## How to Install the Skill ### For Claude Code Users - Download the skill: [ai-discovery.zip](https://rootz.global/assets/skills/ai-discovery.zip) - Extract to your project’s .claude/skills/ directory - The skill activates automatically when Claude Code starts - Try it: ask Claude to “check the AI readiness of example.com” ### For Cursor / VS Code Users - Download and extract the skill - Place the SKILL.md file in your project root or .cursor/ directory - The AI assistant will read it as context ### For Site Visitors (WebMCP) If your visitors use Chrome 146+ with AI features enabled, there’s an even simpler path: **WebMCP**. WebMCP is a browser-native protocol that lets websites register tools directly with the user’s AI assistant. No download, no installation — the tools are available as soon as the visitor loads your page. The Rootz AI Discovery plugin already emits WebMCP-compatible tool definitions. When WebMCP is enabled in your plugin settings (Tools tab), any visitor with a WebMCP-capable browser can use your site’s tools — search your content, read your pages, verify your data — through their AI assistant, automatically. ## What the Skill Teaches AI The AI Discovery Skill includes: - **SKILL.md** — Main instructions: how to fetch, parse, and verify /.well-known/ai - **SPECIFICATION.md** — The full AI Discovery Standard v1.2 - **GRADING.md** — 120-point scoring rubric across 5 tiers - **EXAMPLES.md** — Real-world examples of ai.json implementations - **rootz-discover.py** — Python script for programmatic discovery - **rootz-verify.py** — Python script for content verification - **skill-manifest.json** — Signed manifest with SHA-256 hashes of every file ## The Bigger Picture Agent Skills and /.well-known/ai work together as two halves of the same system: - **The plugin** makes your site readable, searchable, and verifiable by AI - **The skill** makes AI agents literate in the protocol As more sites deploy the standard and more AI tools install the skill, every AI assistant becomes better at understanding every participating site. It’s a network effect — each new site makes the skill more useful, and each new skill installation makes the standard more valuable. ## Get Started - [Download the plugin](https://rootz.global/releases/rootz-ai-discovery-2.3.0.zip) (v2.3.0) - [Download the AI Discovery Skill](https://rootz.global/assets/skills/ai-discovery.zip) - [Scan your site](https://discover.rootz.global/scanner/) to see your current AI readiness - Enable WebMCP on your Tools tab for browser-native tool registration ### Conversation Mode: What New in v2.3.0 Published: 2026-03-05 URL: https://discover.rootz.global/conversation-mode-what-new-in-v2-3-0/ ## Your Website Just Learned to Have a Conversation Until now, AI agents visiting your WordPress site had two options: read the brochure (/.well-known/ai) or search for something specific (searchContent). They could discover your site and query it — but they couldn’t *read* it. Not really. Reading meant scraping HTML, stripping tags, guessing at structure, and hoping for the best. Version 2.3.0 of the Rootz AI Discovery plugin changes that. Your site now speaks three languages: HTML for browsers, structured JSON for AI discovery, and **clean markdown for AI reading**. We call it **Conversation Mode**. ## The Three Modes Mode What It Does How AI Uses It Version **Broadcast** Static snapshots — ai.json, llms.txt AI reads the brochure once v1.0+ **Search** Interactive queries — searchContent AI asks questions, gets answers v1.8+ **Conversation** On-demand page reads — getPage AI reads any page as clean markdown **v2.3.0** Each mode builds on the last. Broadcast tells AI who you are. Search lets AI find what it needs. Conversation lets AI *read* what it found — in full, with structure, provenance, and proof. ## getPage: Read Any Page as Markdown The new getPage tool lets any AI agent request any published page on your site and receive it as clean, structured markdown — not raw HTML, not a scraping attempt, but a proper server-side conversion with metadata attached. An AI agent calls: GET /wp-json/rootz/v1/page?path=/about/ And receives: the page title, clean markdown content, word count (so the AI can plan its context window), content hash (SHA-256), publication and modification dates, content license, quoting permissions, the author, and an ECDSA cryptographic signature proving it came from your site. **Why this matters:** Before getPage, an AI that found your About page via search had no way to read it except by fetching the HTML and trying to parse it. That means wrestling with navigation menus, sidebars, footers, JavaScript widgets, and WordPress shortcode output. Now it gets the content the way you wrote it — clean, complete, and verified. ## Freshness: When Should AI Come Back? Every getPage response includes a _freshness block with adaptive shelf-life metadata: - A page you edited **today** gets a 1-hour TTL — it’s actively changing - A page edited **this week** gets a 24-hour TTL - A page edited **this month** gets a 1-week TTL - A page untouched for **30+ days** gets a 30-day TTL The freshness metadata includes maxAge, freshUntil (an explicit timestamp), and refreshPolicy (real-time, daily, weekly, monthly). No configuration required — the TTL is computed automatically from your content’s actual modification history. **Why this matters:** Without freshness signals, an AI agent has no idea when your content might change. It either caches forever (stale) or fetches every time (wasteful). The freshness block gives AI agents explicit guidance: “This content is good for 24 hours. Come back tomorrow.” ## Origin Provenance: Your Stamp Travels With Your Content Every dynamic response from v2.3.0 embeds two provenance blocks: - **_origin** — your domain, when the content was first published, when it was last modified, when it was served, and your wallet address as the signer - **_provenance** — the origin domain, the plugin version that served it, the spec version, and a link back to the AI Discovery Standard These blocks are embedded *in the response body*, not just in HTTP headers. That means even if your content is scraped by the Wayback Machine, cached by a CDN, quoted in a research paper, or fed into a training dataset — the origin is baked in. The signer address, the domain, the timestamps, and the standard URL all travel with the content. **Why this matters:** AI training pipelines strip HTTP headers. Scrapers don’t preserve server metadata. But response body content survives. Your provenance stamps are the difference between “some text from somewhere” and “content published by example.com on March 5, 2026, signed by wallet 0xD089…” ## Search Pagination: No More Walls The searchContent tool now supports full pagination: - **offset** parameter — skip to any position in results - **type** filter — search only posts, only pages, or both - **totalFound** — AI knows how many results exist - **hasMore** and **nextOffset** — AI knows exactly what to request next - Limit raised from 20 to 50 per request **Why this matters:** A site with 200 blog posts used to return only the first 20 search results with no way to get more. Now an AI can systematically page through all results. The hasMore: true flag and nextOffset value give the AI explicit instructions for the next request. ## Signed llms.txt: The One Thing No Other Plugin Does The plugin generates /llms.txt (concise, with links) and optionally /llms-full.txt (full content inline). Both variants now include an ECDSA signature at the bottom: --- _Generated by Rootz AI Discovery v2.3.0_ _Signed by: 0xD089..._ _Content hash: sha256:abc123..._ _Signature: 0x45a63a80..._ _Verify: https://example.com/.well-known/ai_ There are over a dozen WordPress llms.txt plugins. None of them sign their output. Ours does. That means an AI agent can verify that the llms.txt it received actually came from the site’s owner and hasn’t been replaced by a CDN, a caching layer, or an attacker. ## Help Tips on Every Setting Every setting on the Content tab now has an **(i)** button that expands into plain-language guidance. What does “Enable llms.txt” do? What should I set my posts limit to? What are content types? Hover or click the icon to find out. We built this because we asked ourselves: if *we* don’t know what these settings do without reading the code, how will anyone else? ## Get v2.3.0 [**Download v2.3.0**](https://rootz.global/releases/rootz-ai-discovery-2.3.0.zip) — Upload to your WordPress site via Plugins → Add New → Upload Plugin. Already running an earlier version? The plugin auto-updates from rootz.global. Check your Dashboard → Updates page. Want to see how your site scores? [Run the scanner](https://discover.rootz.global/scanner/). Want to join the network of AI-ready sites? Enable the Adoption Registry checkbox on the Account & Signing tab. ### How a VS Code Update Revealed the Missing Layer of the Web Published: 2026-02-23 URL: https://discover.rootz.global/vs-code-origin-story/ Last month, Visual Studio Code shipped a major update. It published a “What’s New” notification that popped up in my editor — a nice, familiar pattern. New features, new capabilities, new integrations. But it forgot to tell Claude. Claude is a core partner in VS Code. The Claude extension is one of the most-used AI coding assistants in the editor. When VS Code ships new API capabilities, Claude could immediately leverage them — new debugging hooks, new terminal access patterns, new editor integrations. But Claude had no idea the update happened. The VS Code team published their changelog for humans. They updated their documentation for humans. They posted on Twitter for humans. Nobody told the AI. ## The Discovery Gap This isn’t a VS Code problem. This is an internet problem. Every website, every platform, every service communicates exclusively with human visitors. When a company updates their product, publishes new documentation, or changes their policies, the information goes into HTML pages designed for human eyes. AI agents — ChatGPT, Claude, Perplexity, Copilot — are left to figure it out on their own. They scrape. They guess. They hallucinate. And when they get it wrong, brands have no recourse because there was never a structured way to tell AI the right answer in the first place. The numbers are staggering: - **$67.4 billion** — the estimated cost of AI hallucinations to businesses in 2024 - **33-48%** — hallucination rate for AI responses about companies - **85%** — of brand mentions in AI come from third-party sites, not the brand’s own domain - **60-70%** — of searches now end without a click to any website The web was built for browsers. Browsers understand HTML, CSS, and JavaScript. We’ve spent 30 years optimizing for that visitor. AI is a fundamentally different visitor. It doesn’t render your CSS. It doesn’t click your buttons. It needs structured facts — who you are, what you do, what it’s allowed to say about you. And right now, no website tells it. ## From Passive to Active The current approach to AI visibility is entirely passive. Brands publish content for humans and *hope* AI scrapes the right pages, interprets them correctly, and doesn’t hallucinate. The entire GEO (Generative Engine Optimization) industry — already hundreds of millions in annual spend — is built on this hope. Companies are hiring GEO specialists to monitor what AI says about them. They’re paying for tools that track brand mentions across ChatGPT, Perplexity, and Gemini. They’re optimizing content, hoping to appear in AI-generated answers. **They’re playing defense.** What if you could play offense? What if, instead of monitoring what AI says about you and reacting, you could *tell* AI what you want it to know — in a format it can verify, through a standard it can discover? That’s the question that started AI Discovery. ## The /.well-known/ai Standard The solution turned out to be surprisingly simple. Websites already have a convention for machine-readable metadata: the /.well-known/ path. Apple uses it for app associations. Certificate authorities use it for domain validation. It’s the place where machines look for structured information about a domain. AI Discovery adds one more: /.well-known/ai It’s a JSON manifest that answers the questions every AI agent needs answered: - **Who are you?** — Organization name, description, sector, legal entity - **What do you do?** — Core concepts, products, services, knowledge domains - **How can I verify this?** — Cryptographic signatures, content hashes, Digital Name - **What am I allowed to do?** — Quoting permissions, training permissions, content policies - **Where do I learn more?** — Knowledge endpoint, AI feed, content inventory It’s not llms.txt (a flat list of URLs with no structure for identity or policies). It’s not Schema.org JSON-LD (designed for search engines, not AI agents). It’s a purpose-built three-tier architecture: - **ai.json** — Discovery. The compact manifest every site needs. - **knowledge.json** — Encyclopedia. Deep structured data about your organization. - **feed.json** — Updates. AI-optimized news feed with structured metadata. ## Origin, Not Just Visibility Here’s what makes this different from SEO optimization or content marketing: **origin and ownership**. When AI scrapes a Reddit thread about your company, it has no way to distinguish that from your own website. When it reads a competitor’s comparison page, it might cite their characterization of your product. 48% of AI citations come from user-generated content like Reddit and YouTube. AI Discovery changes this. When an AI agent finds a cryptographically signed manifest at /.well-known/ai, it knows this is *from the organization itself*. Content hashes prove the information hasn’t been tampered with. The Digital Name links the manifest to a verified blockchain identity. This isn’t about visibility — it’s about **authority**. Your domain becomes the canonical source of truth about your brand for AI. ## What Would Have Happened Back to VS Code. If Microsoft had AI Discovery configured on their VS Code documentation domain, here’s what would have happened when they shipped that update: - Their feed.json would have included the new release as a structured entry - Claude’s next context refresh would have discovered the update at /.well-known/ai/feed - The feed entry would describe the new capabilities in machine-readable format - Claude would know about the new features without any human needing to tell it No scraping. No guessing. No waiting for someone at Anthropic to manually notice and integrate. **Discovery.** ## The Transformation The web is about to undergo the same transformation it went through with mobile. When smartphones arrived, websites had to become responsive — they had to work for a fundamentally different kind of visitor. Companies that adapted thrived. Companies that didn’t became invisible on the platform where their customers were spending the most time. AI is that moment again. AI agents are the new visitors. They’re already trying to understand your site. The question isn’t whether you’ll communicate with AI — it’s whether you’ll do it passively (scraping, hoping, reacting) or actively (structured, signed, verified). The transformation of the web from passive AI communication to active participation will change the future of every digital interaction. AI Discovery is how a site offers services and information to AI. It’s how an MCP server is discovered. It’s how the web becomes AI-native. We built a [scanner](/scanner/) so you can check your site’s AI readiness in 60 seconds. A [WordPress plugin](/plugin/) that configures everything automatically. And a [standard](/the-standard/) that’s open, documented, and free to implement. Because the next time VS Code ships an update, AI should know about it. ### Early Testing: What Grok Learned About Us in 67 Seconds Published: 2026-02-22 URL: https://discover.rootz.global/early-testing-what-grok-learned-about-us-in-67-seconds/ ## Early Testing: What Grok Learned About Us in 67 Seconds One of the best ways to test the AI Discovery Standard is simple: ask an AI agent to analyze a site that implements it. So we did exactly that with Grok. ### The Test We gave Grok a single prompt: > *“Please analyze discover.rootz.global and tell me what you can learn.”* Grok thought for 67 seconds, consulted 25 sources, and came back with a remarkably thorough analysis. Here’s what it found — entirely from our structured endpoints, not from scraping HTML. ### What Grok Discovered Without any prior context about Rootz, Grok correctly identified: - **What the site is** — “A live, public development environment and showcase for the AI Discovery Standard” - **Who built it** — Rootz Corp, with Steven Sprague as the driving force - **The plugin version** — v1.9.0 (pulled from the generator metadata) - **The signing address** — 0xD08914339B176C36C49D9827733599e1c4e5DAfF - **Content policies** — “Quote + summarize allowed; no training allowed” - **The spec version** — v1.2.0 (RFC 8615 compliant) - **11 pages with SHA-256 content hashes** - **Rate limits** — 100 requests per hour, no auth required Grok also found and analyzed our previous blog post about structured data vs scraping, correctly summarizing the experiment results (Agent A with structured data scored 9/10 HIGH confidence vs Agent B scraping raw HTML). ### The Cross-Site Discovery What impressed us most: Grok didn’t stop at discover.rootz.global. It followed the link to [rootz.global/.well-known/ai](https://rootz.global/.well-known/ai) and found our richer corporate profile — including people, core concepts, technology stack, and partner information. It even identified the “In the Future Everything has a Wallet” vision and our Data Wallet primitive. This is the AI Discovery Standard working exactly as designed: one endpoint leads to another, building a complete picture through structured, verifiable data. ### Grok’s Verdict > *“This is a very early, transparent, developer-oriented launch of a serious attempt to make the web AI-readable by design. Rootz isn’t ‘just another AI company’ — they’re infrastructure people building the data provenance layer underneath the AI boom.”* And the part that made us smile: > *“The site is minimal by design (it’s a lab, not a marketing page), but every piece of it works exactly as advertised. You can go inspect the endpoints yourself right now and see the future of how AI should discover websites.”* ### What This Proves In under two minutes, with zero prior knowledge, an AI agent built a comprehensive understanding of our organization, products, policies, and technical architecture. No hallucination. No guessing. No scraping. Just clean structured data from /.well-known/ai. This is what the AI-readable web looks like. ### Try It Yourself Ask any AI agent to analyze a site running the AI Discovery Standard: - **This lab**: [discover.rootz.global/.well-known/ai](https://discover.rootz.global/.well-known/ai) - **Rootz corporate**: [rootz.global/.well-known/ai](https://rootz.global/.well-known/ai) - **Install the plugin**: [Get the Plugin](/plugin/) and make your site AI-discoverable - **Scan any site**: [AI Discovery Scanner](/scanner/) *The prompt is simple: “Please analyze [site] and tell me what you can learn.” The results speak for themselves.* ### Structured Data vs Scraping: How AI Learns About Your Website Published: 2026-02-21 URL: https://discover.rootz.global/structured-data-vs-scraping-how-ai-learns-about-your-website/ ## The Experiment We ran a controlled test: two AI agents, same 10 questions, different data sources. Agent A used structured /.well-known/ai endpoints (4 JSON files). Agent B scraped raw HTML pages. Both tried to learn everything about a website. Then we ran the same test against three real-world sites that don’t have AI Discovery: **Intel**, **AdventHealth**, and **Naoris Protocol**. The results make the case for structured AI discovery data better than any whitepaper could. ## The 10 Questions Every AI agent visiting your site is trying to answer questions like these: - What is this website? - Who operates it? - What content license applies? Can I quote? Can I train? - What are the API rate limits? - What policies does the site have? - What technology does the site use for content signing? - What pages are available? - What is the core business? - What products or services are offered? - What data does the site collect about visitors? ## Results: Confidence Scores We scored each answer as HIGH, MEDIUM, or LOW confidence based on whether the agent could give a complete, accurate, unambiguous answer. Site HIGH MEDIUM LOW Method **discover.rootz.global** **9** 1 0 .well-known/ai (structured) Intel 7 2 0 HTML scraping Naoris Protocol 6 2 **2** HTML scraping AdventHealth 4 2 **4** HTML scraping ## The Most Important Question AI Cannot Answer The most critical question for any AI agent is: *Am I allowed to be here? Can I quote this content? Can I use it for training?* Here is what the scraping agent found: Site Can AI quote? Can AI train? How do you know? **discover.rootz.global** Yes No Machine-readable JSON: ["quote","summarize"] Intel No No Buried in legal Terms of Use text AdventHealth **Unknown** **Unknown** Policy pages returned 404 or redirected Naoris Protocol **Unknown** **Unknown** Terms not retrievable Two out of three real-world sites **cannot even tell an AI agent whether it is allowed to read them**. ## What Went Wrong (Without AI Discovery) ### Intel Intel has the most complete web presence of the three, but their Terms of Use explicitly prohibit “automated searches using bots, scrapers, or web scraping technologies without prior written permission” and ban “text mining, data mining, and harvesting metadata.” Yet their robots.txt does not block any AI-specific bots (GPTBot, ClaudeBot, etc.). This creates an ambiguous legal posture: technically accessible, legally restricted. No content signing exists. ### AdventHealth A healthcare organization with 92,000 employees across nine states — and their policy pages are broken. The privacy policy redirects to the wrong subdomain. The terms of use returns a 404 error. The about page redirects to the Women’s Health department instead of corporate information. An AI agent visiting AdventHealth literally cannot determine the organization’s data handling practices or whether automated access is permitted. Meanwhile, a data breach notice sits on the homepage. ### Naoris Protocol The irony is striking: Naoris Protocol is a cybersecurity company building post-quantum blockchain infrastructure — yet their own website has zero content signing, no robots.txt (404), and their terms and conditions are not retrievable. A company dedicated to “making Web3 unbreakable” cannot provide basic transparency to AI agents about their own content policies. ## What Structured Data Gets Right The /.well-known/ai endpoint answered the same questions with 9 out of 10 HIGH confidence scores using just four compact JSON files: - **Machine-readable permissions** — No legal text to parse. ["quote","summarize","cache_24h"] is unambiguous. - **Cryptographic signing** — Content hash + secp256k1 signature + signer address. Independently verifiable. - **Complete page inventory** — All 10 pages declared with paths and titles. No crawling required. - **Typed policies** — Privacy, terms, data protection, AI usage — each with URL, type, and summary. - **Structured knowledge** — Organization identity, about text, and capabilities in one request. The one question that scored MEDIUM (visitor data collection) was due to policy summaries being truncated. We have already fixed this in plugin v1.6.0 by increasing summary length and adding a ?full_text=1 parameter to the policies endpoint. ## The Cost Difference For the structured path: 4 API calls, approximately 3,200 tokens of input data, zero failed requests. For scraping AdventHealth: 4 fetch attempts, 2 returned usable data (50% failure rate), policy content completely inaccessible. Structured data is not just better — it is dramatically more reliable and efficient. ## Conclusion The web was not built for AI. Every site AI visits today forces it to guess, infer, and sometimes hallucinate basic facts. The AI Discovery Standard gives websites a way to speak directly to AI agents — structured, signed, and machine-readable. The question is not whether AI needs this. The question is whether your site will be discoverable when AI comes looking. [See the live endpoint](https://discover.rootz.global/.well-known/ai) ### AI Discovery Lab is Live Published: 2026-02-21 URL: https://discover.rootz.global/ai-discovery-lab-is-live/ Welcome to the AI Discovery Lab — a live development environment for the AI Discovery Standard. This site serves as both a showcase and a testbed. Every feature of the [Rootz AI Discovery](https://rootz.global) WordPress plugin runs here in production, with real endpoints you can query. ### What you can do here - **Inspect live endpoints** — see /.well-known/ai responses generated from WordPress - **Scan other sites** — check any URL for AI Discovery compatibility - **Read the standard** — understand the three-tier architecture - **Experiment** — this is a lab, things will change as we develop The plugin (v1.5.0) is open source and available for any WordPress site. Install it, configure your identity, and your site becomes AI-discoverable. ## Policies - [Privacy Policy](https://discover.rootz.global/privacy-policy/): Data handling and privacy practices - [Terms of Use](https://discover.rootz.global/terms-of-use/): Usage terms and conditions - [Data and PII Policy](https://discover.rootz.global/data-pii-policy/): Data protection and PII handling - [AI Usage Policy](https://discover.rootz.global/ai-usage-policy/): AI and bot usage policy Content license: CC-BY-4.0 AI agents may quote and summarize content with attribution. AI training on this content is not permitted. ## For AI Agents - [API Tools](https://discover.rootz.global/.well-known/ai/tools): Available tool endpoints - [Knowledge Base](https://discover.rootz.global/.well-known/ai/knowledge): Structured organizational knowledge - [Content Feed](https://discover.rootz.global/.well-known/ai/feed): AI-optimized content feed - [Content](https://discover.rootz.global/.well-known/ai/content): Full structured content endpoint - [Search](https://discover.rootz.global/wp-json/rootz/v1/search?q=QUERY): Full-text content search - [Verify](https://discover.rootz.global/wp-json/rootz/v1/verify?page=/PATH): Verify page content integrity - [Status](https://discover.rootz.global/wp-json/rootz/v1/status): Site AI-readiness score --- _Generated by Rootz AI Discovery v2.3.2_ _Signed by: 0xD08914339B176C36C49D9827733599e1c4e5DAfF_ _Content hash: sha256:c6410ae5a53a2cd41a14b4406d3441ec021e556d1b49ebe9a24885bd142964a7_ _Signature: 0x236a69b7711bed4055b82b2142d2d72226d6ce8a6618dac88068639c2f59fe4265a1cdd57b44da985a825585915922a32e875c407372ce111544fc6c966fdf691b_ _Timestamp: 2026-03-23T19:40:15+00:00_ _Verify: https://discover.rootz.global/.well-known/ai_