Guide
How to Determine Which APIs to Make Agent-Ready
A practical way to prioritize which of your APIs need agent-ready work first — based on evidence, not guesswork. Ends with a free 12+2 checklist.
The question every platform team eventually asks
Enterprise platform teams tell us this is the most common question they get once agent adoption starts: which APIs should we make agent-ready first? What’s actually in scope — do we need MCP servers everywhere, or is a better API enough? Most teams don’t have a systematic answer. They guess, or they wait.
Demand evidence, not intuition
Before touching a single endpoint, evaluate what you have. You want to evaluate before you build, not build and hope. That means testing real agent behavior against your real APIs — watching where an agent guesses, retries, follows a description over a schema, or gives up and hallucinates an endpoint. Intuition about which APIs “seem important” is a weak substitute for watching an agent actually try to use them.
Score readiness — but don’t trust the score blindly
Automated readiness scoring tools exist and are worth running as a first pass. But they can mislead. One scoring tool rated a spec at 38% description coverage when the actual spec had 95% coverage — because it double-counted reused schemas and dereferenced $refs incorrectly. It also flagged conventional headers and standard API-key auth as gaps without considering context. Treat automated scores as a starting point, not a verdict. Always validate findings against the actual spec and real agent behavior before you prioritize based on a number.
Prioritize by familiarity and traffic, not gut feel
Here’s a concrete prioritization signal, not a guess: agents perform very differently depending on how well-known an API is. In one 756-run benchmark (Smithery, “MCP vs CLI is the wrong fight” (Mar 2026)), agents blind-calling a well-known REST API (like GitHub’s) succeeded 92% of the time — they leaned entirely on training data. A niche, unfamiliar REST API succeeded only 42% of the time. An unfamiliar GraphQL API succeeded just 17% of the time.
About this evidence: Smithery’s result is a 756-run benchmark across a specific harness and a small set of APIs. It is a strong signal for tool-calling agents, but results vary with API familiarity and agent design, so use it as directional evidence rather than a universal law.
The practical takeaway: your most popular, most “famous” APIs get a false positive on agent-readiness — models already know them, so they’ll limp along even with weak docs. Your internal, proprietary, and niche APIs have zero training-data advantage. They’re the ones that fail silently and the ones that benefit most from deliberate agent-ready design work. Combine that familiarity signal with actual or expected agent traffic volume, and you have a real prioritization matrix instead of a hunch.
Sequence the stack correctly
Agent readiness isn’t only about deciding “API vs. MCP.” The Agent Access Stack starts with APIs as the foundation; CLI and MCP wrap the API; skills sit on top. Get the API wrong and nothing built on top of it works reliably — an MCP server bolted onto a bad API just wraps the same problems in a nicer interface. Fix API-level agent-readiness issues (naming, errors, list endpoints, idempotency) before deciding whether a given API also needs an MCP server.
Start free: the 12+2 checklist
You don’t need a formal engagement to start this work. Run the free 12+2 Insights for Agent Experience checklist against your top few candidate APIs. It covers the concrete, testable items — descriptive naming, list endpoints, idempotency, structured errors, deprecation signaling, response verbosity — that determine both how much work an API needs and how much agent traffic it can safely support once it’s ready.
FAQ
- Should we start with our most popular API or our internal ones?
- Check familiarity first. Well-known, widely-documented APIs get a false positive on agent-readiness because models already know them from training data — they succeed even with weak docs. Internal and niche APIs have no training-data advantage, so they fail more often and benefit most from deliberate agent-ready design work.
- How do we know an API is actually agent-ready, not just well-documented?
- Test it with a real agent against a real task, not just a spec checklist. Automated scoring tools can mislead — one tool scored a spec with 95% description coverage at 38% because it double-counted reused schemas. Validate any score against actual agent behavior before trusting it.
- What's a low-cost way to start scoping this?
- Run the free 12+2 checklist against your top 3-5 candidate APIs before you build anything. It surfaces the concrete gaps — missing list endpoints, weak error responses, vague field names — that determine both effort and priority.