{"slug":"canva-amqns6","companyName":"Canva","domain":"canva.com","url":"https://canva.com","headline":"Canva blocks automated clients at the door while serving real browsers, making it invisible to agents and pricing inaccessible to machines.","compositeScore":57,"humanScore":94,"agentScore":19,"doorGap":75,"humanMeasured":4,"agentMeasured":5,"percentile":null,"humanPercentile":null,"agentPercentile":null,"isPartial":false,"depth":"free","siteClass":"b2b_saas","scannerVersion":12,"scannedAt":"2026-09-08T13:46:31.138Z","unlocked":false,"mission":{"steps":[{"url":"https://canva.com","outcome":"blocked","purpose":"reach the site at all"},{"url":"https://canva.com/robots.txt","outcome":"ok","purpose":"find out whether machines are welcome"},{"url":"https://canva.com","outcome":"ok","purpose":"ask whether the door opens for requests carrying the AI crawlers' names"},{"url":"https://canva.com/llms.txt","outcome":"blocked","purpose":"read the site's own guide for language models"},{"url":"https://sitemap.canva.com/sitemap_index.xml","outcome":"ok","purpose":"find out what pages exist"},{"url":"https://canva.com/.well-known/security.txt","outcome":"ok","purpose":"find a contact route for machines"},{"url":"https://canva.com","outcome":"missing","purpose":"find a published agent interface"},{"url":"https://canva.com/.well-known/ai-plugin.json","outcome":"missing","purpose":"find an agent plugin manifest"},{"url":"https://canva.com","outcome":"missing","purpose":"find out whether verified agents are recognised"},{"url":"https://canva.com","outcome":"missing","purpose":"read the homepage as data rather than as a page"},{"url":"https://canva.com","outcome":"missing","purpose":"find a machine readable API spec"},{"url":"https://canva.com","outcome":"blocked","purpose":"read the developer documentation"},{"url":"https://www.canva.com/en_gb/pricing/","outcome":"blocked","purpose":"read the prices without running JavaScript"},{"url":"https://canva.com","outcome":"ok","purpose":"find a comparison page worth citing"},{"url":"https://canva.com","outcome":"ok","purpose":"walk the way a visitor would, to a signup form or a product"}],"verdict":"The site refused automated access at canva.com, so the agent could not reach the site at all."},"observations":null,"dimensions":[{"key":"machine_discoverability","audience":"agent","score":27,"summary":"Robots.txt blocks 7 AI training crawlers (gptbot, claudebot, anthropic-ai, ccbot, applebot-extended, meta-externalagent, bytespider) while allowing search and agent crawlers. A sitemap lists 459 URLs and is declared in robots.txt.","evidence":{"locked":true,"count":4}},{"key":"programmatic_onboarding","audience":"agent","score":32,"summary":"OAuth authorization metadata is published at the standard path, enabling remote MCP server discovery. However, the product requires no account to use, so onboarding is not a programmatic problem.","evidence":{"locked":true,"count":3}},{"key":"pricing_legibility","audience":"agent","score":null,"summary":"Could not verify: this scan did not reach the pages that would show it.","evidence":{"locked":true,"count":1}},{"key":"agent_aware_instrumentation","audience":"agent","score":0,"summary":"No MCP manifest exists at the 2 standard paths checked. Seven AI crawlers are blocked in robots.txt. OAuth authorization metadata is published, which is the remote MCP discovery convention, but without a manifest or accessible.","evidence":{"locked":true,"count":4}},{"key":"machine_fetchable_trust","audience":"agent","score":25,"summary":"Security.txt is published at /.well-known/security.txt with a contact route for machines. However, the homepage refuses automated clients outright with HTTP 403, undermining trust in any machine-readable signal.","evidence":{"locked":true,"count":2}},{"key":"commercial_rails","audience":"agent","score":10,"summary":"OAuth authorization metadata is published, which is the standard for remote MCP procurement. Pricing is not machine-readable. No pricing.md or other structured pricing feed exists.","evidence":{"locked":true,"count":2}},{"key":"steps_to_first_value","audience":"human","score":95,"summary":"The product is usable immediately without any account, signup, or login. A visitor reaches working access in zero steps. This is the strongest possible score for this dimension because nothing stands between a user and the tool.","evidence":{"locked":true,"count":1}},{"key":"required_fields","audience":"human","score":100,"summary":"No form exists on the homepage or entry path. The site requires nothing of a visitor. Zero fields are required because there is no account system at all.","evidence":{"locked":true,"count":1}},{"key":"verification_walls","audience":"human","score":100,"summary":"There is no account system, so there is nothing to verify. No email confirmation, phone verification, or identity checks stand between a visitor and the product.","evidence":{"locked":true,"count":1}},{"key":"error_recovery","audience":"human","score":80,"summary":"No form exists to get wrong, so there is no error path to recover from. The score reflects the absence of a recovery problem rather than the presence of good recovery design.","evidence":{"locked":true,"count":1}}],"issues":[{"rank":1,"title":"/, /en_gb/pricing/, /docs/ turn the honest automated client away while serving a real browser, so the search crawlers that would cite the page are turned away by a rule about the.","dimensionKey":"machine_discoverability","evidence":{"locked":true,"count":1},"fix":null},{"rank":2,"title":"robots.txt blocks 7 AI crawlers, so those assistants cannot read this site at all.","dimensionKey":"machine_discoverability","evidence":{"locked":true,"count":1},"fix":null},{"rank":3,"title":"No MCP manifest or API specification is published, leaving agents unable to understand what they would be authorizing or how to use the API.","dimensionKey":"agent_aware_instrumentation","evidence":{"locked":true,"count":3},"fix":null}],"fixArtifacts":{"locked":true,"count":3,"summaries":[{"id":"bot_wall_guidance:notes","kind":"bot_wall_guidance","title":"Let verified assistants through","path":"notes","effort":{"minutes":60,"role":"developer"},"outcome":{"dimension":"machine_discoverability","external":["Assistant shopping and search crawlers reach the product, pricing and policy pages a buyer asks about."]}},{"id":"interfaces_note:notes","kind":"interfaces_note","title":"Machine interfaces: where you stand","path":"notes","effort":{"minutes":10,"role":"owner"},"outcome":{"dimension":"agent_aware_instrumentation","external":["The developer surface is built in an order where every published pointer answers."]}},{"id":"organization_jsonld:homepage","kind":"organization_jsonld","title":"Organization structured data","path":"homepage","effort":{"minutes":15,"role":"developer"},"outcome":{"dimension":"machine_discoverability","external":["Search and assistant crawlers read the company entity from the homepage rather than inferring it."]}}]},"feedback":{"endpoint":"/api/feedback","mcpTool":"rate_fix","targets":[{"type":"report","key":"report"},{"type":"dimension","dimensionKey":"machine_discoverability","key":"dimension:machine_discoverability"},{"type":"dimension","dimensionKey":"programmatic_onboarding","key":"dimension:programmatic_onboarding"},{"type":"dimension","dimensionKey":"pricing_legibility","key":"dimension:pricing_legibility"},{"type":"dimension","dimensionKey":"agent_aware_instrumentation","key":"dimension:agent_aware_instrumentation"},{"type":"dimension","dimensionKey":"machine_fetchable_trust","key":"dimension:machine_fetchable_trust"},{"type":"dimension","dimensionKey":"commercial_rails","key":"dimension:commercial_rails"},{"type":"dimension","dimensionKey":"steps_to_first_value","key":"dimension:steps_to_first_value"},{"type":"dimension","dimensionKey":"required_fields","key":"dimension:required_fields"},{"type":"dimension","dimensionKey":"verification_walls","key":"dimension:verification_walls"},{"type":"dimension","dimensionKey":"error_recovery","key":"dimension:error_recovery"},{"type":"issue","dimensionKey":"machine_discoverability","checkId":"bot_walls","key":"issue:machine_discoverability:bot_walls"},{"type":"issue","dimensionKey":"machine_discoverability","checkId":"robots","key":"issue:machine_discoverability:robots"},{"type":"issue","dimensionKey":"agent_aware_instrumentation","checkId":null,"key":"issue:agent_aware_instrumentation:-"}]}}