{"slug":"zapier-su9rjz","companyName":"Zapier","domain":"zapier.com","url":"https://zapier.com","headline":"Zapier publishes prices and API documentation but blocks programmatic access to API keys, forcing agents into a manual signup flow.","compositeScore":72,"humanScore":73,"agentScore":71,"doorGap":2,"humanMeasured":4,"agentMeasured":6,"percentile":null,"humanPercentile":null,"agentPercentile":null,"isPartial":false,"depth":"free","siteClass":"b2b_saas","scannerVersion":9,"scannedAt":"2026-09-03T19:31:12.060Z","unlocked":false,"mission":{"steps":[{"url":"https://zapier.com","outcome":"ok","purpose":"reach the site at all"},{"url":"https://zapier.com/robots.txt","outcome":"ok","purpose":"find out whether machines are welcome"},{"url":"https://zapier.com","outcome":"ok","purpose":"ask whether the door opens for requests carrying the AI crawlers' names"},{"url":"https://zapier.com/llms.txt","outcome":"ok","purpose":"read the site's own guide for language models"},{"url":"https://zapier.com/uag6x9zaeydnbfy75xsggcsb37h8cgzf-two-service-sitemap.xml","outcome":"ok","purpose":"find out what pages exist"},{"url":"https://zapier.com/.well-known/security.txt","outcome":"missing","purpose":"find a contact route for machines"},{"url":"https://zapier.comhttps://docs.zapier.com/.well-known/mcp.json","outcome":"ok","purpose":"find a published agent interface"},{"url":"https://zapier.com/.well-known/ai-plugin.json","outcome":"missing","purpose":"find an agent plugin manifest"},{"url":"https://zapier.com","outcome":"missing","purpose":"find out whether verified agents are recognised"},{"url":"https://zapier.com","outcome":"ok","purpose":"read the homepage as data rather than as a page"},{"url":"https://zapier.com","outcome":"missing","purpose":"find a machine readable API spec"},{"url":"https://zapier.com","outcome":"ok","purpose":"read the developer documentation"},{"url":"https://zapier.com/pricing","outcome":"ok","purpose":"read the prices without running JavaScript"},{"url":"https://zapier.com","outcome":"ok","purpose":"find a comparison page worth citing"},{"url":"https://zapier.com/sign-up","outcome":"ok","purpose":"walk the way a visitor would, to a signup form or a product"}],"verdict":"The agent got through 11 of 15 requests, but could not find a contact route for machines. It came up empty on 3 other checks too."},"observations":null,"dimensions":[{"key":"machine_discoverability","audience":"agent","score":100,"summary":"Robots.txt names 8 AI crawlers and allows them all. A real browser is served the page normally. Key pages (home, pricing, docs) are readable without JavaScript. Sitemap lists 1228 URLs. 8 schema.org types on the homepage.","evidence":{"locked":true,"count":4}},{"key":"programmatic_onboarding","audience":"agent","score":25,"summary":"Authentication is documented, endpoint examples are shown, code samples are provided.","evidence":{"locked":true,"count":3}},{"key":"pricing_legibility","audience":"agent","score":93,"summary":"3 prices are readable without JavaScript on the pricing page: Free, Professional at $19.99, and Team at $69. An enterprise tier routes to sales, which is standard practice. Prices are published as Offer structured data. Currency is USD.","evidence":{"locked":true,"count":1}},{"key":"agent_aware_instrumentation","audience":"agent","score":90,"summary":"An MCP manifest is published at https://docs.zapier.com/.well-known/mcp.json. Robots.txt names 8 AI crawlers and allows them. Pricing.md publishes prices in machine readable form.","evidence":{"locked":true,"count":4}},{"key":"machine_fetchable_trust","audience":"agent","score":40,"summary":"No security.txt is published at /.well-known/security.txt (404). The homepage answers automated requests normally. Structured data is present on the homepage. No Web Bot Auth signals are published.","evidence":{"locked":true,"count":2}},{"key":"commercial_rails","audience":"agent","score":80,"summary":"Prices are published in raw HTML on the pricing page. A self serve signup form is reachable from the homepage in 2 steps. Pricing.md is machine readable. Plans are published as Offer structured data.","evidence":{"locked":true,"count":2}},{"key":"steps_to_first_value","audience":"human","score":80,"summary":"The primary call to action is 'Start free' on the homepage. The signup form is 2 steps away. The form contains 4 fields with 0 required. A visitor can enter an email and password or sign in with Google without friction.","evidence":{"locked":true,"count":1}},{"key":"required_fields","audience":"human","score":98,"summary":"The signup form contains 4 fields with 0 required. One sign in option is offered: Google. Of 13 total inputs on the form, 0 carry validation rules such as minlength, pattern, or required attributes.","evidence":{"locked":true,"count":1}},{"key":"verification_walls","audience":"human","score":80,"summary":"No verification requirement appears on the signup page itself. Single sign on via Google avoids email verification entirely. The form does not ask for phone, credit card, or proof of identity.","evidence":{"locked":true,"count":1}},{"key":"error_recovery","audience":"human","score":35,"summary":"Of 13 inputs on the signup form, 0 carry validation rules. No inline error containers are present. 3 live regions are present on the page. A visitor who enters invalid data will not receive client side feedback before submission.","evidence":{"locked":true,"count":1}}],"issues":[{"rank":1,"title":"No OpenAPI specification was found at the 5 standard paths checked, so a client must be written from prose instead of generated.","dimensionKey":"programmatic_onboarding","evidence":{"locked":true,"count":2},"fix":null},{"rank":2,"title":"No security.txt is published, leaving no machine readable security contact or vulnerability disclosure policy.","dimensionKey":"machine_fetchable_trust","evidence":{"locked":true,"count":3},"fix":null}],"fixArtifacts":{"locked":true,"count":2,"summaries":[{"id":"interfaces_note:notes","kind":"interfaces_note","title":"Machine interfaces: where you stand","path":"notes","effort":{"minutes":10,"role":"owner"},"outcome":{"dimension":"agent_aware_instrumentation","external":["The developer surface is built in an order where every published pointer answers."]}},{"id":"security_txt:well-known-security-txt","kind":"security_txt","title":"security.txt","path":"/.well-known/security.txt","effort":{"minutes":10,"role":"owner"},"outcome":{"dimension":"machine_fetchable_trust","external":["Researchers and automated scanners find a disclosure address instead of guessing one."]}}]},"feedback":{"endpoint":"/api/feedback","mcpTool":"rate_fix","targets":[{"type":"report","key":"report"},{"type":"dimension","dimensionKey":"machine_discoverability","key":"dimension:machine_discoverability"},{"type":"dimension","dimensionKey":"programmatic_onboarding","key":"dimension:programmatic_onboarding"},{"type":"dimension","dimensionKey":"pricing_legibility","key":"dimension:pricing_legibility"},{"type":"dimension","dimensionKey":"agent_aware_instrumentation","key":"dimension:agent_aware_instrumentation"},{"type":"dimension","dimensionKey":"machine_fetchable_trust","key":"dimension:machine_fetchable_trust"},{"type":"dimension","dimensionKey":"commercial_rails","key":"dimension:commercial_rails"},{"type":"dimension","dimensionKey":"steps_to_first_value","key":"dimension:steps_to_first_value"},{"type":"dimension","dimensionKey":"required_fields","key":"dimension:required_fields"},{"type":"dimension","dimensionKey":"verification_walls","key":"dimension:verification_walls"},{"type":"dimension","dimensionKey":"error_recovery","key":"dimension:error_recovery"},{"type":"issue","dimensionKey":"programmatic_onboarding","checkId":"openapi","key":"issue:programmatic_onboarding:openapi"},{"type":"issue","dimensionKey":"machine_fetchable_trust","checkId":"security_txt","key":"issue:machine_fetchable_trust:security_txt"}]}}