# Burrow: 11 point Door Gap
- Site: burrow.com
- Scanned: 2026-09-08
- Scan type: Basic scan
- Business type: ecommerce
- Report: https://www.seconddoor.io/r/burrow-g545ag
- Scanner version: 12
A furniture retailer with strong product data and agent checkout support, but no API documentation for programmatic catalog access.
## Scores
| Measure | Score |
| --- | --- |
| Humans | 76/100 |
| Agents | 65/100 |
| Composite | 71/100 |
| Door Gap | 11 points |
The human score is the mean of the four human dimensions, the agent score the mean of the six agent dimensions, and the Door Gap the difference between them.
## What the machine actually did
The agent got through 11 of 17 requests, but could not find a contact route for machines. It came up empty on 5 other checks too.
- ok      reach the site at all
- ok      find out whether machines are welcome
- ok      ask whether the door opens for requests carrying the AI crawlers' names
- ok      read the site's own guide for language models
- ok      find out what pages exist
- missing find a contact route for machines
- missing find a published agent interface
- missing find an agent plugin manifest
- missing find out whether verified agents are recognised
- ok      read the homepage as data rather than as a page
- missing find a machine readable API spec
- missing read the developer documentation
- ok      read the prices without running JavaScript
- ok      read the product catalogue as data
- ok      read a product page as data
- ok      read the returns and shipping terms
- ok      walk the way a visitor would, to a signup form or a product
## Top issues
1. **Product structured data omits return and shipping details, forcing agents to scrape policy pages instead of reading markup.** (commercial_rails)
2. **No developer documentation is linked from the homepage, in raw HTML or the rendered page, so integration starts with a search engine.** (programmatic_onboarding)
3. **No API documentation prevents agents from discovering how to query the catalog programmatically.** (programmatic_onboarding)
The evidence and the recommended fix for each are on the report page: https://www.seconddoor.io/r/burrow-g545ag
## Files generated from this scan
- **Product markup skeleton** at `/products/opera-media-console`, 30 minutes, developer. Verify: The next scan reads price, currency and availability in the Product markup of at least one product page.
- **Product markup snippet for every product page** at `snippets/seconddoor-product-jsonld.liquid`, 30 minutes, developer. Verify: The next scan reads price, currency and availability in the Product markup of every product page it samples, with the structured price matching the catalogue feed.
- **robots.txt rules for AI crawlers** at `/robots.txt`, 10 minutes, no developer needed. Verify: The next scan reads robots.txt and finds every search and agent crawler allowed, none of them kept off product or pricing paths.
- **Return policy and shipping structured data** at `product page`, 30 minutes, developer. Verify: The next scan reads a MerchantReturnPolicy on the product pages, and OfferShippingDetails when the shipping node was published.
- **Organization structured data** at `homepage`, 15 minutes, developer. Verify: The next scan reads Organization and WebSite nodes in the homepage JSON-LD and the structured data check passes.
- **security.txt** at `/.well-known/security.txt`, 10 minutes, no developer needed. Verify: The next scan fetches /.well-known/security.txt as text and the security.txt check passes.
- **Machine interfaces: where you stand** at `notes`, 10 minutes, no developer needed. Verify: The next scan finds the interface you published answering at its well-known path, and that check passes.
Each file is written from what this scan found on the site. The content is in the JSON once the evidence is opened: https://www.seconddoor.io/api/reports/burrow-g545ag
## The agent door
- **machine_discoverability** 100/100. No AI crawler is blocked by robots.txt; the site explicitly allows gptbot, claudebot, perplexitybot and others. A real browser is served normally. The sitemap lists 451 URLs including product pages.
- **programmatic_onboarding** 10/100. No API documentation is linked from the homepage or discoverable in the site structure. No OpenAPI spec exists at any of the 6 standard paths checked.
- **pricing_legibility** 83/100. 33 prices appear in the homepage HTML without JavaScript. 26 prices are readable across the 3 product pages checked. Product structured data publishes price and currency on every variant. An agent can parse cost from the markup.
- **agent_aware_instrumentation** 51/100. No MCP manifest exists at the 3 standard paths. A Universal Commerce Protocol manifest is published at version 2026-08-25, declaring 8 capabilities and 3 payment handlers, with a storefront MCP endpoint.
- **machine_fetchable_trust** 65/100. No security.txt is published. The returns policy (/returns) reads as text with a 30-day window and free returns. The shipping policy (/delivery) reads as text. Both are linked from product pages. The homepage answers automated requests.
- **commercial_rails** 81/100. Product markup carries price, currency, availability, identifier, brand, SKU and aggregate rating over 297 reviews. The sitemap lists products. Review text is in the server HTML. A UCP manifest publishes how to transact.
## The human door
- **steps_to_first_value** 95/100. A product with its price ($2000) and an add-to-cart control is reached in 2 steps from the homepage. The product page renders the price and availability without JavaScript. An agent can identify a buyable item and its cost immediately.
- **required_fields** 80/100. The product page does not require an account before adding to cart. Shop Pay is offered as an express wallet, which skips the form entirely. 7 inputs are present on the page; 3 carry validation constraints.
- **verification_walls** 75/100. No sign-in requirement appears on the product page. The add-to-cart control is available to any visitor. A guest checkout path exists. The verification wall is absent from the shopping phase, though account creation may be required at.
- **error_recovery** 54/100. 3 of 7 inputs on the product page carry validation rules. 6 live regions are present to announce changes. No inline error containers are visible in the markup.
---
Scored by SecondDoor. Method: https://www.seconddoor.io/methodology
Scan another site: https://www.seconddoor.io
Rate an issue or this report: POST https://www.seconddoor.io/api/feedback, or the rate_fix tool on https://www.seconddoor.io/api/mcp