generated: '2026-08-09'
method: derived
source: mcp/cooler-heads-mcp-tools-list.json, llms/cooler-heads-llms.txt, live probes
note: >-
  Cooler Heads is a medical device manufacturer, not a software vendor. The only
  standards it can be assessed against are the ones its web host actually implements.
  It publishes no OpenAPI, no AsyncAPI, no GraphQL SDL and no compliance/trust page, so
  most rows below are honest negatives rather than untested.
standards:
- id: mcp
  name: Model Context Protocol
  conforms: true
  version: '2025-06-18'
  evidence: >-
    POST initialize to https://www.coolerheads.com/_api/mcp returned 200 with
    protocolVersion 2025-06-18 and a serverInfo object; tools/list returned 9 tools each
    carrying a JSON Schema inputSchema.
- id: llmstxt
  name: llms.txt
  conforms: true
  evidence: >-
    https://www.coolerheads.com/llms.txt returns 200 text/plain in llms.txt form (H1
    name, blockquote summary, H2 link sections).
- id: sitemaps-org
  name: Sitemaps 0.9
  conforms: true
  evidence: https://www.coolerheads.com/sitemap.xml returns a valid sitemapindex.
- id: openapi
  name: OpenAPI
  conforms: false
  evidence: >-
    No spec at any probed location on the only host the company serves
    (/openapi.json, /swagger.json, /api-docs, /docs, /api all 400 or 404).
- id: asyncapi
  conforms: false
  evidence: No event, streaming or webhook surface is published.
- id: graphql
  conforms: false
  evidence: /graphql returned 404.
- id: oauth2
  conforms: false
  evidence: No authorization server metadata; the MCP endpoint is anonymous.
- id: oidc
  conforms: false
  evidence: /.well-known/openid-configuration returned 400.
- id: rfc9457-problem-details
  conforms: false
  evidence: No API error surface is published.
- id: rfc9116-security-txt
  conforms: false
  evidence: /.well-known/security.txt returned 400.
- id: a2a
  name: A2A Agent Card
  conforms: false
  evidence: >-
    Both /.well-known/agent-card.json and /.well-known/agent.json returned 400 with an
    HTML body; no agent card is served.
regulatory:
  note: >-
    Recorded as company fact, not as an API conformance claim. Cooler Heads states the
    Amma Portable Scalp Cooling System is FDA-cleared, and its provider page discusses
    CPT billing codes for mechanical scalp cooling effective 2026-01-01. No SOC 2, ISO
    27001, HIPAA or other security/compliance attestation is published anywhere on the
    site, and no trust centre exists.
  claims:
  - claim: FDA clearance for the Amma Portable Scalp Cooling System
    source: https://www.coolerheads.com/why-amma
    verified_by_api_evangelist: false