Before you blame the agent framework, prove the endpoint. Each layer is checked independently and reported PASS / WARN / FAIL / UNKNOWN with evidence.
TransportDNS, TCP & TLS
Hostname resolution, port reachability with latency, and TLS certificate validity dates for https endpoints.
ProtocolsAPI probes
GET /v1/models (OpenAI-compatible: Ollama ≥0.1.24, vLLM, llama.cpp server, LM Studio, text-generation-webui), GET /api/tags (Ollama native), plus /health and /metrics presence.
IdentityServer fingerprint
Best-effort identification from response shapes and headers, with the served model list (names and sizes when the server reports them).
CORSBrowser-agent readiness
Server-side harnesses don't care about CORS — browser-based agents do. We check the headers so you know which world you're in.
SnippetsWiring configs
Copy-paste OpenAI-compatible base_url snippets and generic OpenClaw/Hermes-style config blocks pointing at your verified endpoint.
SafetySSRF-hardened
http/https only, DNS re-resolved and re-validated on every redirect hop, private/loopback/reserved ranges refused. The doctor cannot scan internal networks — including ours.