Industry
Internal tools: the easiest first project
No compliance surface, no public traffic, users who already work with agents, and a result you can measure in the first week. This is where to learn the standard before you point it at customers.
Last reviewed 27 August 2026
Every conversation about agent readiness starts with the public website, and that is usually the hardest place to start. The back office is easier, safer and faster to show a result in — and it is where we would begin with almost any company.
Why it is the easy one
- No compliance surface. No customer data leaving anywhere, no legal review, no privacy assessment. An internal dashboard is allowed to be experimental.
- No traffic risk. Nothing can regress publicly. No rankings, no conversion rate, no brand exposure.
- The users are already there. Whoever on your team uses an assistant daily needs no persuading about why this is useful.
- The result is measurable in a week. The report three people click through for twenty minutes becomes one tool call. That number goes in a slide.
- It produces a working proof inside the company. After the internal project, the conversation about the public site stops being theoretical.
What to pick
Look for the internal screen people complain about. Admin panels, stock and ordering views, CRM record screens, approval queues, reporting front-ends, ticket systems, the internal wiki.
The best candidate has three properties: it is used often, it is tedious, and the underlying data is already in an API. That last one matters — if the logic only exists inside the view layer, you have a refactor before you have a tool.
A first afternoon
// Read-only, session-scoped, three tools. search_orders(query, status, dateRange) readOnlyHint get_order(orderId) readOnlyHint summarise_queue(team, period) readOnlyHint // Add one write only once the reads are being used: reassign_ticket(ticketId, assignee) // confirm first
Ship the three reads. Watch what people actually ask for. The fourth tool will be obvious within a fortnight and it will not be the one you would have guessed.
How this is usually bought
As part of a package rather than a line item — a server for the headless callers, page tools for the interfaces, internal tools to learn on. The customer is buying an expert seat for a transition, not a single experimental technology.
The internal piece is what makes that package resilient. If the public standard moves slowly, the internal work still delivered value. That is not a sales trick; it is the reason we suggest starting there.
Our free check only reaches public URLs. An internal tool behind a VPN or an SSO wall cannot be scanned from outside, by design — the scanner refuses private hosts and bare IP addresses so it can never be used to probe someone's network. For internal work the assessment is a conversation and a look at the code, not a URL in a box.
Sources
Primary documents, checked on 27 August 2026
- webmachinelearning.github.io/webmcp
- modelcontextprotocol.io
- docs.mcp-b.ai — Polyfill and React hook, useful for internal apps on older browsers
Keep reading
Check your own site against this
The Agent Readiness Score measures exactly what this article describes, and shows the evidence behind every finding.
Run the check →