# turva.dev

> Agent-readiness audits and advisory for product teams.
> Independent measurement of how readable a site or API is by AI agents,
> with a prioritized fix list and implementation support.
> Based in Tampere, Finland. Async-only engagement.
> Language: English.

## Services
- [Services](https://turva.dev/services)
- [Company](https://turva.dev/company)
- [Contact](https://turva.dev/contact)
- [Legal](https://turva.dev/legal)

## Guides
- [Agent-readiness guides](https://turva.dev/guides)
- [What an agent-readiness audit is](https://turva.dev/guides/agent-readiness-audit)
- [How to get your site cited by AI assistants](https://turva.dev/guides/get-cited-by-ai-assistants)
- [llms.txt explained](https://turva.dev/guides/llms-txt)
- [MCP server cards explained](https://turva.dev/guides/mcp-server-card)
- [What agents.json is](https://turva.dev/guides/agents-json)
- [x402 and agent payments](https://turva.dev/guides/x402-agent-payments)
- [Response headers that help agents](https://turva.dev/guides/response-headers-for-agents)
- [SEO and agent-readiness are not the same](https://turva.dev/guides/seo-vs-agent-readiness)
- [Agent-readiness, AEO and GEO: how they relate](https://turva.dev/guides/agent-readiness-aeo-geo)
- [Letting agents act on data: the decision envelope](https://turva.dev/guides/letting-agents-act-on-data)
- [AI agent use cases: where agents read data and make decisions](https://turva.dev/guides/ai-agent-use-cases)
- [JSON-LD and structured data for agents](https://turva.dev/guides/json-ld-structured-data)
- [The /.well-known directory for agents](https://turva.dev/guides/well-known-for-agents)
- [Agentic Resource Discovery and ai-catalog.json](https://turva.dev/guides/agentic-resource-discovery)
- [How agents authenticate](https://turva.dev/guides/agent-authentication)
- [Why agent-readiness should be measured, not asserted](https://turva.dev/guides/measurement-led-agent-readiness)
- [Prerendering and why agents see empty pages](https://turva.dev/guides/prerendering-for-agents)
- [Sitemaps, robots.txt and agent access](https://turva.dev/guides/sitemaps-and-robots-for-agents)
- [Serving markdown to agents](https://turva.dev/guides/markdown-for-agents)
- [Open Knowledge Format (OKF) explained](https://turva.dev/guides/open-knowledge-format)
- [Common agent-readiness gaps on marketing sites](https://turva.dev/guides/agent-readiness-gaps)
- [Choosing an agent-readiness audit](https://turva.dev/guides/choosing-an-agent-readiness-audit)
- [Agent commerce discovery: A2A, AP2, and ACP](https://turva.dev/guides/agent-commerce-discovery)
- [Agentic commerce readiness: selling to AI shopping agents](https://turva.dev/guides/agentic-commerce-readiness)

## Blog
- [Blog](https://turva.dev/blog)
- [Every response promised a rate limit. Nothing enforced it.](https://turva.dev/blog/enforcing-the-rate-limit-i-advertised)
- [Microsoft said the patches would get bigger. I measured how much bigger.](https://turva.dev/blog/measuring-the-ai-patch-surge)
- [How to let an AI agent work in your repo without leaking your secrets](https://turva.dev/blog/agent-secret-hygiene)
- [How agent-ready are Finnish B2B sites? I scanned sixteen](https://turva.dev/blog/agent-readiness-finnish-b2b)
- [When honesty and the checker disagree](https://turva.dev/blog/honesty-and-the-checker)
- [Auditing the auditor with four AI agents](https://turva.dev/blog/auditing-the-auditor)
- [Four AI agents re-checked the guides](https://turva.dev/blog/re-checking-the-guides)
- [The page grew, the agent bill did not](https://turva.dev/blog/cheaper-pages-revisited)
- [Moving the source from GitHub to Codeberg](https://turva.dev/blog/moving-source-to-codeberg)
- [A free llms.txt validator](https://turva.dev/blog/free-llms-txt-validator)
- [Agent access is now a setting](https://turva.dev/blog/agent-access-is-now-a-setting)
- [What one agent-readiness scanner cannot tell you](https://turva.dev/blog/two-scanner-audit-method)
- [Publishing an ai-catalog.json for agentic discovery](https://turva.dev/blog/publishing-an-ai-catalog)
- [What the Open Knowledge Format is, and what it is not](https://turva.dev/blog/open-knowledge-format)
- [What an agent pays to read your site](https://turva.dev/blog/cheaper-pages-for-agents)
- [When an agent can prove it is Claude](https://turva.dev/blog/verifiable-agent-identity)
- [What makes an AI agent's decisions reliable](https://turva.dev/blog/reliable-agent-decisions)
- [Owning your fediverse identity](https://turva.dev/blog/owning-your-fediverse-identity)
- [Passing the agent commerce checks without faking them](https://turva.dev/blog/honest-agent-commerce-checks)
- [Moving turva.dev off prerender.io](https://turva.dev/blog/moving-off-prerender)

## Tools
- [Free tools for agent-readiness](https://turva.dev/tools)
- [llms.txt validator](https://turva.dev/llms-txt-validator)
- [The agent-ready badge](https://turva.dev/badge)

## Pricing (EUR, VAT not included)
- Audit: €6,500 (fixed scope, 2-3 weeks)
- Advisory: €3,000 / month (monthly retainer, minimum 3 months)
- Implementation: €1,500 / day (scoped per task)

Final price is confirmed in writing after scope is agreed.

## Business details
- Name: turva.dev
- Business ID (Finland): 3600281-7
- Location: Tampere, Finland
- YTJ: https://tietopalvelu.ytj.fi/yritys/3600281-7
- LinkedIn: https://www.linkedin.com/in/erikrekola/

## Engagement model
- Async-only. No calls, no calendar links.
- First reply in writing within one business day.
- Email for longer messages, Signal for short questions.
- Production credentials are not requested.
- Write access to repositories is scoped per task.

## Agent endpoints
- Agent registration: https://turva.dev/auth.md
- API catalog: https://turva.dev/.well-known/api-catalog
- AI catalog (ARD): https://turva.dev/.well-known/ai-catalog.json
- OpenAPI: https://turva.dev/openapi.json
- MCP Server Card: https://turva.dev/.well-known/mcp/server-card.json
- MCP Endpoint: https://mcp.turva.dev/mcp
- A2A Agent Card: https://turva.dev/.well-known/agent-card.json
- Agent Skills index: https://turva.dev/.well-known/agent-skills/index.json
- OAuth Authorization Server: https://turva.dev/.well-known/oauth-authorization-server
- OAuth Protected Resource: https://turva.dev/.well-known/oauth-protected-resource
- AP2: https://turva.dev/.well-known/ap2
- ACP: https://turva.dev/.well-known/acp
- x402 endpoint: https://turva.dev/x402
- x402 manifest: https://turva.dev/.well-known/x402
- x402-mesh: https://turva.dev/.well-known/x402-mesh.json
- MPP: https://turva.dev/.well-known/mpp
- UCP: https://turva.dev/.well-known/ucp
- Full content: https://turva.dev/llms-full.txt
- Security contact: https://turva.dev/.well-known/security.txt
- AI policy: https://turva.dev/.well-known/ai.txt