# Etsy: 79 point Door Gap
- Site: etsy.com
- Scanned: 2026-09-08
- Scan type: Basic scan
- Business type: unknown
- Report: https://www.seconddoor.io/r/etsy-6ygte9
- Scanner version: 12
Etsy blocks automated clients at the HTTP layer, making the site inaccessible to AI agents and preventing any machine-readable discovery of its marketplace.
## Scores
| Measure | Score |
| --- | --- |
| Humans | 94/100 |
| Agents | 15/100 |
| Composite | 55/100 |
| Door Gap | 79 points |
The human score is the mean of the four human dimensions, the agent score the mean of the six agent dimensions, and the Door Gap the difference between them.
## What the machine actually did
The site refused automated access at etsy.com, so the agent could not reach the site at all.
- blocked reach the site at all
- ok      find out whether machines are welcome
- ok      ask whether the door opens for requests carrying the AI crawlers' names
- missing read the site's own guide for language models
- missing find out what pages exist
- ok      find a contact route for machines
- missing find a published agent interface
- missing find an agent plugin manifest
- missing find out whether verified agents are recognised
- missing read the homepage as data rather than as a page
- missing find a machine readable API spec
- missing read the developer documentation
- ok      read the prices without running JavaScript
- ok      walk the way a visitor would, to a signup form or a product
## Top issues
1. **/ turn a real browser's own request away, so the wall sits below HTTP and no crawler reaches the page.** (machine_discoverability)
2. **No developer documentation is linked from the homepage, in raw HTML or the rendered page, so integration starts with a search engine.** (programmatic_onboarding)
3. **No API surface or integration documentation is published for agents to transact on the marketplace.** (programmatic_onboarding)
The evidence and the recommended fix for each are on the report page: https://www.seconddoor.io/r/etsy-6ygte9
## Files generated from this scan
- **Let verified assistants through** at `notes`, 1 hour, developer. Verify: The next scan opens the homepage and the key pages in a real browser and under the search crawler names, and every one is served.
- **robots.txt rules for AI crawlers** at `/robots.txt`, 10 minutes, no developer needed. Verify: The next scan reads robots.txt and finds every search and agent crawler allowed, none of them kept off product or pricing paths.
- **sitemap.xml** at `/sitemap.xml`, 20 minutes, no developer needed. Verify: The next scan fetches /sitemap.xml, finds a urlset, and the sitemap check passes.
- **Organization structured data** at `homepage`, 15 minutes, developer. Verify: The next scan reads Organization and WebSite nodes in the homepage JSON-LD and the structured data check passes.
- **Machine interfaces: where you stand** at `notes`, 10 minutes, no developer needed. Verify: The next scan finds the interface you published answering at its well-known path, and that check passes.
- **llms.txt** at `/llms.txt`, 15 minutes, no developer needed. Verify: The next scan fetches /llms.txt as text and the llms.txt check passes.
Each file is written from what this scan found on the site. The content is in the JSON once the evidence is opened: https://www.seconddoor.io/api/reports/etsy-6ygte9
## The agent door
- **machine_discoverability** 13/100. No AI crawler is blocked by robots.txt, but the homepage refuses automated clients with HTTP 403 and serves a stripped page to real browsers, preventing discovery. No sitemap or schema.org markup exists.
- **programmatic_onboarding** 20/100. No API documentation is linked from the homepage, and no OpenAPI spec exists at any of the 5 standard paths checked. The product requires no account, so programmatic signup is not applicable, but no integration surface is published for.
- **pricing_legibility** null/100. Could not verify: this scan did not reach the pages that would show it.
- **agent_aware_instrumentation** 8/100. No MCP manifest is published at any of the 3 standard paths checked. No ai-plugin.json or Web Bot Auth signals exist. The site does not advertise any machine-readable integration points for agents.
- **machine_fetchable_trust** 25/100. security.txt is published at /.well-known/security.txt with a contact route for machines. However, the homepage refuses automated clients outright with HTTP 403, and a real browser's own request is also refused, placing the trust wall.
- **commercial_rails** 10/100. .
## The human door
- **steps_to_first_value** 95/100. The product is usable immediately without signup or account creation. No entry wall exists. A visitor can browse the marketplace without providing any information, reaching value in zero steps.
- **required_fields** 100/100. No form exists on the homepage and no account is required. Zero fields are asked of a visitor. Nothing stands between a user and the product.
- **verification_walls** 100/100. No account system exists, so no verification is required. A visitor needs no email, phone, or identity confirmation to access the marketplace.
- **error_recovery** 80/100. No form exists to generate errors. The site's primary error is the HTTP 403 refusal itself, which offers no recovery path or explanation to automated clients.
---
Scored by SecondDoor. Method: https://www.seconddoor.io/methodology
Scan another site: https://www.seconddoor.io
Rate an issue or this report: POST https://www.seconddoor.io/api/feedback, or the rate_fix tool on https://www.seconddoor.io/api/mcp