Some cookies are necessary for SecondDoor to work. Others are optional, and tell us how the site and the product are used. Accept all, or decline all optional ones. Without a selection, nothing optional is set. More in our cookie policy.
Basic scanRetail storefront · Storefront property/Scanned 8 Sept 2026, 20:00 UTC/1 browser pass
A Shopify coffee storefront that publishes product data openly but requires account creation to complete a purchase.
Ordered by what the evidence says is costing most. Written for whoever owns the site, not whoever builds it.
3 pieces of evidence and the recommended fix are recorded for this issue, with /products/frozen-gold-long-miles-giku-5 written from your own pages.
This is a basic scan, so it raises the three issues the deterministic evidence supports. A deep scan sends two agents over the site and raises up to ten, each with cited evidence and the screens to prove it.
A deep scan walks the site with two agents, records cited evidence and screenshots, and keeps a mission timeline. It comes with the paid plans. Making an account costs nothing and gives you one basic scan a month.
The score and the audit trail stay public. The evidence and the files open with an account.
The audit trail. Not measured is not zero.
Machine discoverability
No AI crawler is blocked by robots.txt or user agent rules; the site explicitly allows gptbot, claudebot, perplexitybot and others. A real browser is served normally. The sitemap lists 332 URLs including product pages.
4 observations recorded.
Programmatic onboarding
No API surface exists. The site publishes no OpenAPI spec, MCP manifest, or ai-plugin.json at any of the 6 standard paths checked. A shopper or agent must use the web interface; there is no programmatic way to authenticate, query.
1 observation recorded.
Pricing legibility
Prices are embedded in the raw HTML of all 3 product pages checked, with 45 prices visible without JavaScript. The homepage itself carries 24 prices. Product structured data publishes price in USD and currency code on every product.
2 observations recorded.
Agent-aware instrumentation
The catalogue answers as JSON at /products.json, which is the strongest signal. Product markup carries brand, identifier, price and currency. However, no MCP manifest exists at any of the 3 standard paths checked.
4 observations recorded.
Machine-fetchable trust
The homepage and all key pages are served to automated clients without blocking. However, no security.txt file is published at /.well-known/security.txt. No Web Bot Auth signals are present.
2 observations recorded.
Commercial rails
Product markup carries price, currency, brand and identifier on every product. The catalogue is readable as JSON. However, the structured data does not include a GTIN, which is required for most feed syndication platforms.
3 observations recorded.
Steps to first value
Could not verify: this scan did not reach the pages that would show it.
Required fields
Could not verify: this scan did not reach the pages that would show it.
Verification walls
Could not verify: this scan did not reach the pages that would show it.
Error recovery
Could not verify: this scan did not reach the pages that would show it.
It got through 9 of 14.
The agent got through 9 of 14 requests, but could not find a contact route for machines. It came up empty on 4 other checks too.