generated: '2026-09-06'
method: probed
source: https://www.activon-global.com/_api/mcp
name: ACTIVON conformance assertions
summary: >-
  ACTIVON publishes no API contract, so there is no OpenAPI, GraphQL SDL or AsyncAPI to
  assert conformance against. The only standards this company can be measured on are the
  ones carried by the agent surfaces its site actually serves: JSON-RPC 2.0 / MCP on the
  Wix site endpoint, and the llms.txt convention. Both were verified live.
conformance:
  - id: mcp
    name: Model Context Protocol
    conforms: true
    evidence: >-
      POST https://www.activon-global.com/_api/mcp with method tools/list returned HTTP 200,
      content-type application/json, an mcp-session-id response header, and a JSON-RPC 2.0
      result carrying 9 tools each with a JSON Schema inputSchema (2026-09-06).
    note: Platform-provided by Wix, served on the company's own host.
  - id: jsonrpc-2.0
    name: JSON-RPC 2.0
    conforms: true
    evidence: >-
      Live response body carries "jsonrpc":"2.0" with the request id echoed and a result
      member (https://www.activon-global.com/_api/mcp, 2026-09-06).
  - id: llms-txt
    name: llms.txt
    conforms: true
    evidence: >-
      GET https://www.activon-global.com/llms.txt returned HTTP 200, content-type text/plain,
      3330 bytes, in llms.txt form (H1 title, blockquote summary, H2 link sections) (2026-09-06).
    note: Auto-generated by the Wix platform, served from the company's own host.
  - id: rfc9116-security-txt
    name: RFC 9116 security.txt
    conforms: false
    evidence: >-
      /.well-known/security.txt returned 400 on www.activon-global.com and 404 on
      www.activon.kr (2026-09-06).
  - id: rfc9728-oauth-protected-resource
    name: RFC 9728 OAuth protected resource metadata
    conforms: false
    evidence: >-
      /.well-known/oauth-protected-resource returned 400 at the site root and 404 under
      /_api/mcp/ (2026-09-06). The MCP endpoint is anonymous and advertises no auth server.
  - id: a2a
    name: A2A Agent Card
    conforms: false
    evidence: >-
      /.well-known/agent-card.json and /.well-known/agent.json missed on all four hosts
      (2026-09-06).
domain_standards:
  checked: true
  found: []
  note: >-
    Cosmetic-ingredient supply has machine-readable domain standards in the trade-data layer
    (INCI naming, CAS numbers, EC numbers, IFRA/RIFM records, SDS/GHS classification), and
    ACTIVON does name INCI/CAS values in its human-readable product pages. None of it is
    published as a machine-readable contract, feed, or catalog endpoint, so nothing is
    asserted here. Reward-only dimension: recorded as absent, not as a failure.
compliance:
  certifications_published: false
  note: >-
    The company's Trust page (https://www.activon-global.com/trust, HTTP 200) carries only
    narrative corporate values — "eco-friendly bio materials which are safe and efficient",
    "sustainable growth based on technical excellence" — and names no certification
    (no ISO 9001/14001/22716, COSMOS, ECOCERT, halal or vegan claim). The Korean site's
    certification page (activon.kr/certification.html) is listed in its own sitemap but
    returns 404. No Compliance or TrustCenter pointer is emitted.