multifactor.com
A+ (94/100) Open to Search & TrainingMultifactor | Secure Online Account Sharing for Humans & AI
| AI & /llms.txt Readiness | Signal-to-Noise Ratio | Token Savings via /llms.txt | Network TTFB | TLS & HTTP Security | DNS & Edge Stack |
|---|---|---|---|---|---|
| 82/100 | 0.7% (673 / 98,275 tok) | -99.3% fewer tokens | 97 ms (98/100) | 98/100 | Cloudflare (Next.js) |
Web-to-Token Efficiency & Agent Ingestion Cost
~4 bytes/token UTF-8 heuristic| Ingestion Source | Payload | Est. Tokens | Cost / 1k Reads (Flash $0.35) | Cost / 1k Reads (Pro $1.25) |
|---|---|---|---|---|
Raw HTML DOM (GET /) |
383.9 KB | 98,275 | $34.3963 | $122.8438 |
| Stripped Readable Text | 2.6 KB | 673 | $0.2356 | $0.8413 |
/llms.txt Manifest |
2.6 KB | 656 | $0.2296 | $0.8200 |
/llms.txt Spec Linter & Agent Endpoint Probe
Status: Spec Compliant
| GET /llms.txt | HTTP 200 · 2,623 bytes (~656 tokens · 38 lines) |
| Spec Check: # H1 Title | Pass ("Multifactor") |
| Spec Check: > Summary | Pass ("Multifactor lets you securely share any online account with people and AI agents without ever actually sharing the password. You send a link; you set what it can do, see every acti") |
| ## H2 Sections & Links | 4 sections · 13 canonical markdown links |
| GET /llms-full.txt | Not deployed |
| GET /.well-known/mcp.json | Not advertised |
| JSON-LD Schema Entities | Organization, ImageObject, PostalAddress, Person, WebSite, WebApplication, Offer, VideoObject |
# Multifactor > Multifactor lets you securely share any online account with people and AI agents without ever actually sharing the password. You send a link; you set what it can do, see every action taken through it, and end access whenever you want. Multifactor, Inc. is a Delaware Public Benefit Corporation (131 Continental Dr, Ste 305, Newark, DE 19713, US). Its founder and CEO is Vivek Nair, Ph.D. The app is at https://app.multifactor.com. ## How it works - Share a link, not a password: t
AI Crawler /robots.txt Access Matrix
Open to Search & Training
| User-Agent Token | Purpose / Operator | Effective Directive |
|---|---|---|
| OAI-SearchBot | ChatGPT Search Citations | Allow: / |
| PerplexityBot | Perplexity Answer Citations | Allow: / |
| ChatGPT-User | Live User Agent Browsing | Allow: / |
| Claude-SearchBot | Anthropic Search Grounding | Allow: / |
| GPTBot | Foundation Model Training | Allow: / |
| ClaudeBot | Foundation Model Training | Allow: / |
| Google-Extended | Gemini Training Control | Allow: / |
| Applebot-Extended | Apple Intelligence Training | Allow: / |
| Meta-ExternalAgent | Llama Training & Indexing | Allow: / |
| CCBot | Open Dataset Training Corpus | Allow: / |
HTTP Response & Handshake Timing
GET https://multifactor.com/| DNS Lookup | 10 ms | HTML Document | 383.9 KB |
| TCP Connect | 14 ms | Script Tags | 23 |
| TLS Handshake | 0 ms | Stylesheets | 1 |
| Time to First Byte (TTFB) | 97 ms | Images (with alt) | 4 / 5 |
| Total Transfer | 99 ms | HTTP/3 (Alt-Svc) | Yes (h3) |
Edge Network & Application Stack
Header & DOM Signatures| Edge / Reverse Proxy | Cloudflare |
| Application Framework | Next.js |
| Server Header | cloudflare |
| Mail Provider (MX) | Google Workspace |
| Telemetry Signatures | Server-Side / None |
| TXT Verifications | Google Search Console, Microsoft Entra |
TLS Certificate & HTTP Security Policy
Port 443 X.509| Certificate Issuer | Google Trust Services (50 days remaining) |
| Strict-Transport-Security | Present |
| Content-Security-Policy | Present |
| X-Content-Type-Options | Present |
| X-Frame-Options | Present |
| Referrer-Policy | Present |
| Permissions-Policy | Present |
| SPF / DMARC Policy | SPF: Yes · DMARC: Yes |
Authoritative DNS & Document Head
A / AAAA / NS / Canonical| A (IPv4) | 104.21.1.211, 172.67.152.86 |
| AAAA (IPv6) | 2606:4700:3033::ac43:9856, 2606:4700:3034::6815:1d3 |
| NS (Nameservers) | heather.ns.cloudflare.com, amit.ns.cloudflare.com |
| HTML Title (59c) | Multifactor | Secure Online Account Sharing for Humans & AI |
| /sitemap.xml | Valid XML Sitemap |
Hosted /llms.txt Mirror & Status Badge
Platform Setup Guide →
<head> Tag (for Shopify, Webflow, Framer, Wix, Squarespace & WordPress):
Technical Synthesis & Agentic Ingestion Analysis: multifactor.com
Automated Engineering Assessment1. HTML-to-Token Efficiency & LLM Context Window Cost
An unauthenticated HTTPS GET request to https://multifactor.com/ returns an initial HTML payload of 383.9 KB, corresponding to approximately 98,275 UTF-8 tokens when ingested raw by an AI coding agent, retrieval pipeline, or headless browser. After stripping inline <script>, <style>, <svg>, and DOM markup tags, the human-readable text footprint measures 673 tokens (2.6 KB)—yielding an HTML Signal-to-Noise Ratio of 0.7%.
Because multifactor.com publishes a valid /llms.txt manifest (measuring 656 tokens across 38 lines), AI retrieval agents that read /llms.txt instead of scraping the raw DOM reduce token consumption by 99.3%—cutting 1,000-read inference input costs from $122.8438 to $0.8200 at frontier model rates ($1.25/1M tokens), or $0.2296 on Gemini 4 Hydrogen ($0.35/1M).
2. Indexed Structure Inside multifactor.com/llms.txt
Sitecube’s specification linter verified 4 H2 section headings and 13 Markdown links inside https://multifactor.com/llms.txt under the primary heading "Multifactor".
Documented sections include: How it works</code>, <code>Pricing</code>, <code>Apps</code>, <code>Pages.
Key canonical endpoints referenced in the manifest include
Home (https://multifactor.com/), Pricing (https://multifactor.com/pricing), Downloads (https://multifactor.com/downloads), Technology (https://multifactor.com/technology), Help Center (https://help.multifactor.com).
3. Edge Delivery, TLS Handshake & Security Header Assessment
Traffic for multifactor.com resolves to 104.21.1.211 via Cloudflare running Next.js, achieving a measured Time to First Byte (TTFB) of 97 ms (DNS lookup: 10 ms, TCP connect: 14 ms, TLS handshake: 0 ms). The port 443 TLS certificate is issued by Google Trust Services with 50 days remaining before expiration (valid through 2027-01-03). Outbound email authentication via SPF is present and DMARC (_dmarc.multifactor.com) is enforced.
Comparable Hosts in Web-to-Token & /llms.txt Registry
Full Index (26 hosts) →| Host | Rating | /llms.txt | HTML Tokens | Text Tokens | Signal % | Crawler Posture | TTFB |
|---|---|---|---|---|---|---|---|
| sitecube.com | A+ 98 | 1,600 tok | 11,832 | 1,132 | 9.6% | Open to Search & Training | 99 ms |
| cloudflare.com | A+ 96 | 4,294 tok | 333,631 | 471 | 0.1% | Open to Search & Training | 291 ms |
| trendyflash.com | A+ 95 | 2,987 tok | 12,123 | 1,660 | 13.7% | Open to Search & Training | 112 ms |
| multifactor.com | A+ 94 | 656 tok | 98,275 | 673 | 0.7% | Open to Search & Training | 97 ms |
| github.com | A+ 92 | 7,165 tok | 131,504 | 1,159 | 0.9% | Open to Search & Training | 35 ms |
| vercel.com | A+ 92 | 1,385 tok | 149,859 | 889 | 0.6% | Open to Search & Training | 53 ms |
| aiimpacted.org | A+ 92 | 971 tok | 17,598 | 3,568 | 20.3% | Open to Search & Training | 55 ms |
| tierones.io | A+ 92 | 481 tok | 3,744 | 693 | 18.5% | Open to Search & Training | 95 ms |
| cloq.com | A 91 | 1,169 tok | 2,109 | 690 | 32.7% | Open to Search & Training | 51 ms |
| supabase.com | A 89 | 879 tok | 337,513 | 1,905 | 0.6% | Open to Search & Training | 48 ms |
| dosefacts.org | A 89 | 10,936 tok | 29,008 | 7,291 | 25.1% | Open to Search & Training | 335 ms |
| postman.com | A 89 | 5,375 tok | 118,892 | 11,040 | 9.3% | Open to Search & Training | 947 ms |