{"slug":"userpilot-ar64ue","companyName":"Userpilot","domain":"userpilot.com","url":"https://userpilot.com","headline":"Userpilot publishes prices and welcomes agents to browse, but offers no API access or programmatic onboarding path.","compositeScore":66,"humanScore":71,"agentScore":60,"doorGap":11,"humanMeasured":4,"agentMeasured":6,"percentile":67,"humanPercentile":50,"agentPercentile":75,"isPartial":false,"depth":"free","siteClass":"b2b_saas","scannerVersion":12,"scannedAt":"2026-09-08T13:59:56.238Z","unlocked":false,"mission":{"steps":[{"url":"https://userpilot.com","outcome":"ok","purpose":"reach the site at all"},{"url":"https://userpilot.com/robots.txt","outcome":"ok","purpose":"find out whether machines are welcome"},{"url":"https://userpilot.com","outcome":"ok","purpose":"ask whether the door opens for requests carrying the AI crawlers' names"},{"url":"https://userpilot.com/llms.txt","outcome":"missing","purpose":"read the site's own guide for language models"},{"url":"https://userpilot.com/sitemap_index.xml","outcome":"ok","purpose":"find out what pages exist"},{"url":"https://userpilot.com/.well-known/security.txt","outcome":"missing","purpose":"find a contact route for machines"},{"url":"https://userpilot.comhttps://docs.userpilot.com/.well-known/mcp.json","outcome":"ok","purpose":"find a published agent interface"},{"url":"https://userpilot.com/.well-known/ai-plugin.json","outcome":"missing","purpose":"find an agent plugin manifest"},{"url":"https://userpilot.com","outcome":"missing","purpose":"find out whether verified agents are recognised"},{"url":"https://userpilot.com","outcome":"ok","purpose":"read the homepage as data rather than as a page"},{"url":"https://userpilot.com","outcome":"missing","purpose":"find a machine readable API spec"},{"url":"https://userpilot.com","outcome":"missing","purpose":"read the developer documentation"},{"url":"https://userpilot.com/pricing/","outcome":"ok","purpose":"read the prices without running JavaScript"},{"url":"https://userpilot.com","outcome":"ok","purpose":"find a comparison page worth citing"},{"url":"https://userpilot.com/userpilot-demo/","outcome":"ok","purpose":"walk the way a visitor would, to a signup form or a product"}],"verdict":"The agent got through 9 of 15 requests, but could not read the site's own guide for language models. It came up empty on 5 other checks too."},"observations":null,"dimensions":[{"key":"machine_discoverability","audience":"agent","score":100,"summary":"No AI crawler is blocked by robots.txt, a real browser is served the page normally, and key pages render without JavaScript. The site publishes a sitemap with 177 URLs, 10 schema.org types on the homepage, and 30 comparison pages that read.","evidence":{"locked":true,"count":4}},{"key":"programmatic_onboarding","audience":"agent","score":10,"summary":"Documentation at docs.userpilot.com contains 7973 characters of text but shows no API credentials, endpoints, code samples, or self-serve key issuance. No OpenAPI spec exists at any of the 6 standard paths checked.","evidence":{"locked":true,"count":3}},{"key":"pricing_legibility","audience":"agent","score":85,"summary":"Two prices are readable without JavaScript on the pricing page: $299 and $849. An enterprise tier routes to sales, which is standard practice. Currency is USD. Prices are published in raw HTML, not hidden behind JavaScript or a form gate.","evidence":{"locked":true,"count":1}},{"key":"agent_aware_instrumentation","audience":"agent","score":58,"summary":"An MCP manifest is published at https://docs.userpilot.com/.well-known/mcp.json, enabling Claude and compatible agents to discover available tools. No llms.txt, ai-plugin.json, or Web Bot Auth signals are present.","evidence":{"locked":true,"count":4}},{"key":"machine_fetchable_trust","audience":"agent","score":40,"summary":"No security.txt file is published at /.well-known/security.txt. The homepage answers automated requests with HTTP 200 and serves structured data. Trust signals are minimal: the site is reachable and honest, but publishes no security.","evidence":{"locked":true,"count":2}},{"key":"commercial_rails","audience":"agent","score":65,"summary":"Prices are published in raw HTML on the pricing page, and a self-serve signup form is reachable from the homepage in 2 steps. The form asks for 4 fields with 0 required.","evidence":{"locked":true,"count":2}},{"key":"steps_to_first_value","audience":"human","score":80,"summary":"The primary call to action, 'Get Started', reaches a signup form in 2 steps from the homepage. The form contains 4 fields with 0 required, so a visitor can submit with minimal friction.","evidence":{"locked":true,"count":1}},{"key":"required_fields","audience":"human","score":90,"summary":"The signup form contains 4 fields, and 0 of them are marked required. A visitor can proceed without entering any information, removing the most common friction point in account creation.","evidence":{"locked":true,"count":1}},{"key":"verification_walls","audience":"human","score":65,"summary":"No verification requirement appears on the signup page itself. The form does not ask for email confirmation, phone verification, or identity proof before submission.","evidence":{"locked":true,"count":1}},{"key":"error_recovery","audience":"human","score":50,"summary":"Of the 4 input fields on the signup form, 0 carry validation rules such as type, pattern, or required attributes. The page contains 5 inline error containers and 2 live regions, so error messaging infrastructure exists, but no client-side.","evidence":{"locked":true,"count":1}}],"issues":[{"rank":1,"title":"No developer documentation is linked from the homepage, in raw HTML or the rendered page, so integration starts with a search engine.","dimensionKey":"programmatic_onboarding","evidence":{"locked":true,"count":1},"fix":null},{"rank":2,"title":"No security.txt file is published, so agents and security researchers cannot find a contact path for vulnerability disclosure.","dimensionKey":"machine_fetchable_trust","evidence":{"locked":true,"count":3},"fix":null},{"rank":3,"title":"No API surface is documented, so agents cannot obtain credentials or integrate programmatically.","dimensionKey":"programmatic_onboarding","evidence":{"locked":true,"count":3},"fix":null}],"fixArtifacts":{"locked":true,"count":6,"summaries":[{"id":"software_offer_jsonld:pricing-page","kind":"software_offer_jsonld","title":"Pricing as Offer structured data","path":"pricing page","effort":{"minutes":20,"role":"developer"},"outcome":{"dimension":"pricing_legibility","external":["Assistants comparing vendors read the plans and prices as Offer structured data."]}},{"id":"robots_search_bots:robots-txt","kind":"robots_search_bots","title":"robots.txt rules for AI crawlers","path":"/robots.txt","effort":{"minutes":10,"role":"owner"},"outcome":{"dimension":"machine_discoverability","external":["The assistants' search crawlers read and cite the site to buyers; training stays the owner's decision."]}},{"id":"interfaces_note:notes","kind":"interfaces_note","title":"Machine interfaces: where you stand","path":"notes","effort":{"minutes":10,"role":"owner"},"outcome":{"dimension":"agent_aware_instrumentation","external":["The developer surface is built in an order where every published pointer answers."]}},{"id":"pricing_md:pricing-md","kind":"pricing_md","title":"pricing.md","path":"/pricing.md","effort":{"minutes":20,"role":"owner"},"outcome":{"dimension":"agent_aware_instrumentation","external":["Agents read the price list directly instead of rendering the pricing page."]}},{"id":"security_txt:well-known-security-txt","kind":"security_txt","title":"security.txt","path":"/.well-known/security.txt","effort":{"minutes":10,"role":"owner"},"outcome":{"dimension":"machine_fetchable_trust","external":["Researchers and automated scanners find a disclosure address instead of guessing one."]}},{"id":"llms_txt:llms-txt","kind":"llms_txt","title":"llms.txt","path":"/llms.txt","effort":{"minutes":15,"role":"owner"},"outcome":{"dimension":"machine_discoverability","external":["Assistants that read llms.txt get a curated map of the site instead of guessing from the homepage."]}}]},"feedback":{"endpoint":"/api/feedback","mcpTool":"rate_fix","targets":[{"type":"report","key":"report"},{"type":"dimension","dimensionKey":"machine_discoverability","key":"dimension:machine_discoverability"},{"type":"dimension","dimensionKey":"programmatic_onboarding","key":"dimension:programmatic_onboarding"},{"type":"dimension","dimensionKey":"pricing_legibility","key":"dimension:pricing_legibility"},{"type":"dimension","dimensionKey":"agent_aware_instrumentation","key":"dimension:agent_aware_instrumentation"},{"type":"dimension","dimensionKey":"machine_fetchable_trust","key":"dimension:machine_fetchable_trust"},{"type":"dimension","dimensionKey":"commercial_rails","key":"dimension:commercial_rails"},{"type":"dimension","dimensionKey":"steps_to_first_value","key":"dimension:steps_to_first_value"},{"type":"dimension","dimensionKey":"required_fields","key":"dimension:required_fields"},{"type":"dimension","dimensionKey":"verification_walls","key":"dimension:verification_walls"},{"type":"dimension","dimensionKey":"error_recovery","key":"dimension:error_recovery"},{"type":"issue","dimensionKey":"programmatic_onboarding","checkId":"api_surface","key":"issue:programmatic_onboarding:api_surface"},{"type":"issue","dimensionKey":"machine_fetchable_trust","checkId":"security_txt","key":"issue:machine_fetchable_trust:security_txt"},{"type":"issue","dimensionKey":"programmatic_onboarding","checkId":null,"key":"issue:programmatic_onboarding:-"}]}}