generated: '2026-08-04'
method: probed
source: live probes of jerry.ai / getjerry.com + published Jerry pages
scope: >-
  Jerry publishes no machine-readable API contract, so most cross-cutting API
  standards are not applicable rather than failed. Every `conforms` value below
  is grounded in an artifact that was actually fetched; `null` means the standard
  could not be evaluated because there is no surface to evaluate.
standards:
- id: openapi
  conforms: false
  evidence: >-
    No OpenAPI/Swagger found. Probed /openapi.json, /openapi.yaml, /swagger.json,
    /v1/openapi.json, /api-docs, /docs, /redoc on jerry.ai, www.jerry.ai and
    getjerry.com — every path returns the WordPress 404 HTML shell.
- id: asyncapi
  conforms: false
  evidence: No event, streaming or webhook surface is published.
- id: graphql
  conforms: false
  evidence: No /graphql endpoint resolves on any Jerry host.
- id: grpc
  conforms: false
  evidence: No .proto published in github.com/getjerry or on buf.build.
- id: mcp
  conforms: false
  evidence: No hosted MCP server advertised in docs, llms.txt, or the GitHub org.
- id: a2a
  conforms: false
  evidence: >-
    /.well-known/agent-card.json and /.well-known/agent.json return 404 on every
    Jerry host. No agent card exists; none was authored.
- id: oidc-discovery
  conforms: partial
  evidence: >-
    https://getjerry.com/.well-known/openid-configuration returns a valid OpenID
    Connect Discovery 1.0 JSON document (issuer, jwks_uri, RS256, id_token). It
    omits authorization_endpoint, token_endpoint, scopes_supported and
    grant_types_supported, so it is not a complete discovery document for a
    third-party relying party.
- id: rfc7517-jwks
  conforms: true
  evidence: https://getjerry.com/.well-known/jwks.json returns a valid RSA JSON Web
    Key Set referenced by the discovery document's jwks_uri.
- id: oauth2
  conforms: false
  evidence: /.well-known/oauth-authorization-server returns 404; no token or authorization
    endpoint published.
- id: rfc9116-security-txt
  conforms: false
  evidence: /.well-known/security.txt returns 404 on jerry.ai, www.jerry.ai and getjerry.com.
- id: rfc9727-api-catalog
  conforms: false
  evidence: /.well-known/api-catalog returns 404 on every host.
- id: llms-txt
  conforms: true
  evidence: >-
    https://jerry.ai/llms.txt returns 200 text/plain (342,938 bytes). Valid
    llms.txt structure (H1 + summary, then ## Sitemaps / Posts / Pages / Car
    Insurance / Car Repair / Newsroom / Reviews link lists) — but generated by
    the Rank Math SEO WordPress plugin, so it describes marketing and editorial
    content, not an API or agent tool surface.
- id: content-signals
  conforms: true
  evidence: >-
    https://jerry.ai/robots.txt publishes `Content-Signal: ai-train=yes,
    search=yes, ai-input=yes` — an explicit machine-readable AI-usage consent
    declaration.
- id: rfc9457-problem-details
  conforms: null
  evidence: Not evaluable — no public API responses to inspect.
- id: rfc8594-sunset-header
  conforms: null
  evidence: Not evaluable — no public API and no deprecation policy.
- id: dnssec
  conforms: true
  evidence: DS records present for both jerry.ai and getjerry.com.
- id: hsts
  conforms: true
  evidence: 'jerry.ai and getjerry.com both return strict-transport-security: max-age=31536000;
    includeSubDomains; preload.'
- id: tls-1-3
  conforms: true
  evidence: Both domains negotiate TLSv1.3 with a valid certificate chain.
- id: caa
  conforms: true
  evidence: Both domains publish CAA issue records plus an iodef incident-reporting
    address.
- id: dmarc
  conforms: partial
  evidence: 'v=DMARC1; p=quarantine; pct=100 with rua reporting on both domains —
    enforced but not at p=reject.'
compliance_program:
  trust_center: https://trust.jerry.ai/
  trust_center_platform: Vanta
  certifications_observed: []
  certifications_note: The Vanta trust center is client-rendered; no certification
    names appeared in any fetched response, so none are asserted here.
  regulatory_licensing:
    published: true
    url: https://jerry.ai/insurance-licenses/
    claim: >-
      Jerry Insurance Agency, LLC is a licensed insurance producer in all 50 US
      states and the District of Columbia, with the state-by-state license
      register published.
  privacy:
    policy: https://jerry.ai/privacy-policy/
    updated: '2026-07-20'
    ccpa_notice: https://jerry.ai/california-job-applicant-privacy-notice/
x-evidence:
  fetched: '2026-08-04'
  method: unauthenticated HTTP GET + dig