SecondDoor

The agent door · computed, not judged

Agent-aware instrumentation

Whether you publish anything built for machine callers.

How it is scored

0 to 20

no MCP server, no ai-plugin.json, no agent documentation, or known agent user agents are blocked.

40 to 60

some machine-oriented endpoints exist but nothing is advertised to agents specifically.

80 to 100

a published MCP server or equivalent agent interface, documented and discoverable.

What the scanner checks

  • Whether an MCP manifest is published at a well-known path
  • Whether an ai-plugin.json exists
  • Whether robots.txt names assistant crawlers, and whether it allows them
  • Whether a machine-readable API description exists at all
  • Whether Web Bot Auth signals are published, so verified agents can be recognised
  • Whether an agentic commerce discovery file, ACP or AP2, is published
Read the guide: Making your product discoverable to AI agentsScore your own site
Agent-aware instrumentation, SecondDoor