# Cometeer: agent door 62, human door not measured - Site: cometeer.com - Scanned: 2026-09-08 - Scan type: Basic scan - Business type: ecommerce - Report: https://www.seconddoor.io/r/cometeer-kwsggx - Scanner version: 12 A Shopify storefront with agent checkout capability but no published policies for returns or shipping, leaving assistants unable to quote terms. ## Scores | Measure | Score | | --- | --- | | Humans | not measured | | Agents | 62/100 | | Composite | 62/100 | Agent door only. The human door could not be measured on this scan. A Door Gap needs both doors, so this scan does not report one. ## What the machine actually did The agent got through 10 of 17 requests, but could not find a contact route for machines. It came up empty on 6 other checks too. - ok reach the site at all - ok find out whether machines are welcome - ok ask whether the door opens for requests carrying the AI crawlers' names - ok read the site's own guide for language models - ok find out what pages exist - missing find a contact route for machines - missing find a published agent interface - missing find an agent plugin manifest - missing find out whether verified agents are recognised - ok read the homepage as data rather than as a page - missing find a machine readable API spec - missing read the developer documentation - ok read the prices without running JavaScript - ok read the product catalogue as data - ok read a product page as data - missing read the returns and shipping terms - ok walk the way a visitor would, to a signup form or a product ## Top issues 1. **No published returns or shipping policy pages exist, preventing agents from quoting terms to buyers.** (commercial_rails) 2. **No API documentation or developer surface is published, blocking programmatic integrations and feed syndication.** (programmatic_onboarding) 3. **No security.txt is published, leaving no contact channel for security researchers to report vulnerabilities.** (machine_fetchable_trust) The evidence and the recommended fix for each are on the report page: https://www.seconddoor.io/r/cometeer-kwsggx ## Files generated from this scan - **Product markup for Long Miles Giku 5** at `/products/frozen-gold-long-miles-giku-5`, 30 minutes, developer. Verify: The next scan reads price, currency and availability in the Product markup of at least one product page, with the structured price matching the catalogue feed. - **Product markup for OmbligoĢn** at `/products/klatch-ombligon`, 30 minutes, developer. Verify: The next scan reads price, currency and availability in the Product markup of at least one product page, with the structured price matching the catalogue feed. - **Product markup for Breakfast Club** at `/products/peak-season-breakfast-club`, 30 minutes, developer. Verify: The next scan reads price, currency and availability in the Product markup of at least one product page, with the structured price matching the catalogue feed. - **Product markup snippet for every product page** at `snippets/seconddoor-product-jsonld.liquid`, 30 minutes, developer. Verify: The next scan reads price, currency and availability in the Product markup of every product page it samples, with the structured price matching the catalogue feed. - **robots.txt rules for AI crawlers** at `/robots.txt`, 10 minutes, no developer needed. Verify: The next scan reads robots.txt and finds every search and agent crawler allowed, none of them kept off product or pricing paths. - **Returns and refunds page** at `/policies/refund-policy`, 30 minutes, no developer needed. Verify: The next scan reads the returns policy page as text without JavaScript and finds it linked from a product page. - **Shipping and delivery page** at `/policies/shipping-policy`, 30 minutes, no developer needed. Verify: The next scan reads the shipping policy page as text without JavaScript and finds it linked from a product page. - **Organization structured data** at `homepage`, 15 minutes, developer. Verify: The next scan reads Organization and WebSite nodes in the homepage JSON-LD and the structured data check passes. - **security.txt** at `/.well-known/security.txt`, 10 minutes, no developer needed. Verify: The next scan fetches /.well-known/security.txt as text and the security.txt check passes. - **Machine interfaces: where you stand** at `notes`, 10 minutes, no developer needed. Verify: The next scan finds the interface you published answering at its well-known path, and that check passes. Each file is written from what this scan found on the site. The content is in the JSON once the evidence is opened: https://www.seconddoor.io/api/reports/cometeer-kwsggx ## The agent door - **machine_discoverability** 100/100. No AI crawler is blocked by robots.txt; the site explicitly allows gptbot, claudebot, perplexitybot and others. A real browser is served the page normally. The sitemap lists 332 URLs including products themselves. - **programmatic_onboarding** 10/100. No API documentation is linked from the homepage or published at standard paths. No OpenAPI spec exists at any of the 6 paths checked. The site publishes a UCP manifest for checkout but offers no developer surface to build integrations. - **pricing_legibility** 90/100. 24 prices appear in the homepage HTML without JavaScript. Product pages carry 45 prices across 3 checked URLs, all readable server-side. Product structured data publishes price and currency on every offer. - **agent_aware_instrumentation** 57/100. No MCP manifest is published at the 3 standard paths. A Universal Commerce Protocol manifest at version 2026-08-25 is published, declaring 8 capabilities and 3 payment handlers, with a storefront MCP endpoint an agent can call. - **machine_fetchable_trust** 40/100. No security.txt is published at /.well-known/security.txt. The homepage answers automated requests with HTTP 200 and serves 2000 characters of rendered content. Key pages including the product feed are served to honest automated clients. - **commercial_rails** 72/100. Product markup carries price, currency, availability and identifier. The catalogue answers as data at /products.json with brand on each product. A UCP manifest publishes how to transact, declaring checkout, cart, order and fulfillment. ## The human door - **steps_to_first_value** null/100. Could not verify: this scan did not reach the pages that would show it. - **required_fields** null/100. Could not verify: this scan did not reach the pages that would show it. - **verification_walls** null/100. Could not verify: this scan did not reach the pages that would show it. - **error_recovery** null/100. Could not verify: this scan did not reach the pages that would show it. --- Scored by SecondDoor. Method: https://www.seconddoor.io/methodology Scan another site: https://www.seconddoor.io Rate an issue or this report: POST https://www.seconddoor.io/api/feedback, or the rate_fix tool on https://www.seconddoor.io/api/mcp