SecondDoor

Basic scanRetail storefront · Storefront property/Scanned 2 Sept 2026, 19:17 UTC/1 browser pass

fahertybrand.com

A retail storefront with agent checkout capability but no documented API surface for programmatic product discovery or catalog access.

Human door85
Agent door61
Door Gap24Wider than 50 percent of retail storefronts in the corpus.

Three issues, in priority order

Each one is drawn from evidence recorded during the walks.

3 pieces of evidence and the recommended fix are recorded for this issue.

A work email. We send the report and nothing else unless you ask.

We sent a buying agent

14 requests, in order

The agent got through 8 of 14 requests, but could not find a contact route for machines. It came up empty on 5 other checks too.

  1. 01

    fahertybrand.com

    reach the site at all

    reached
  2. 02

    /robots.txt

    find out whether machines are welcome

    reached
  3. 03

    fahertybrand.com

    ask whether the door opens for requests carrying the AI crawlers' names

    reached
  4. 04

    /llms.txt

    read the site's own guide for language models

    reached
  5. 05

    /sitemap.xml

    find out what pages exist

    reached
  6. 06

    /.well-known/security.txt

    find a contact route for machines

    not found
  7. 07

    fahertybrand.com

    find a published agent interface

    not found
  8. 08

    /.well-known/ai-plugin.json

    find an agent plugin manifest

    not found
  9. 09

    fahertybrand.com

    find out whether verified agents are recognised

    not found
  10. 10

    fahertybrand.com

    read the homepage as data rather than as a page

    reached
  11. 11

    fahertybrand.com

    find a machine readable API spec

    not found
  12. 12

    fahertybrand.com

    read the developer documentation

    not found
  13. 13

    fahertybrand.com

    read the prices without running JavaScript

    reached
  14. 14

    fahertybrand.com

    walk the way a visitor would, to a signup form or a product

    reached

Deep scans need an account. Accounts are free.

A deep scan walks the site with two agents, records cited evidence and screenshots, and keeps a mission timeline. It comes with the paid plans. Making an account costs nothing and gives you one basic scan a month.

Create an account

Ten dimensions

Not measured is not zero.

The agent door

61 of 100

What a machine can do on your site with nobody watching.

Machine discoverability

Whether a retrieval system can find and read you at all.

100Strong

No AI crawler is blocked by robots.txt or user agent rules. The site serves a real browser normally, publishes llms.txt with 87 directives, declares a sitemap with 355 URLs, and includes 19 schema.org types on the homepage.

4 observations recorded.

Programmatic onboarding

Whether an agent can get working access without a human.

10Blocking

No API documentation is linked from the homepage or discoverable in raw HTML. The site publishes a UCP manifest for checkout but provides no documented endpoint for agents to search or browse the catalog programmatically.

3 observations recorded.

Pricing legibility

Whether total cost can be computed from published numbers.

63Passable

Prices appear in the raw HTML of product pages: 106 prices were found across 2 product pages checked, with examples at $95 and $150. Product structured data exists but does not carry price, currency or availability fields, so agents cannot.

1 observation recorded.

Agent-aware instrumentation

Whether you publish anything built for machine callers.

60Passable

A Universal Commerce Protocol manifest at version 2026-08-25 is published, declaring 8 capabilities and 3 payment handlers, with a storefront MCP endpoint that agents can call. No MCP manifest exists at the 3 standard paths checked.

4 observations recorded.

Machine-fetchable trust

Whether terms, security and status are readable as text.

40Weak

No security.txt file is published at /.well-known/security.txt. The homepage responds to automated requests with HTTP 200 and serves structured data, but no security contact or vulnerability disclosure policy is machine-readable.

2 observations recorded.

Commercial rails

Whether a purchase can complete without a sales call.

90Strong

A UCP manifest publishes 8 transactional capabilities including checkout, cart, fulfillment and discount handling. A storefront MCP endpoint answers agent calls.

2 observations recorded.

The human door

85 of 100

What a first time visitor meets between landing and first value.

Steps to first value

How far a new visitor travels before something useful happens.

95Strong

A product page with its price ($150) and an add-to-basket control is reachable in 2 steps from the homepage. The product page includes 13 size or colour choosers and accepts Apple Pay, Shop Pay and PayPal, allowing a buyer to transact.

1 observation recorded.

Required fields

How much you ask for before you give anything back.

80Strong

The product page does not require an account before adding to basket or checking out. Three express wallet options (Apple Pay, Shop Pay, PayPal) allow checkout without entering any form fields.

1 observation recorded.

Verification walls

How many gates stand between intent and access.

75Strong

No sign-in requirement appears on the product page before a buyer can add an item to the basket. Express wallets bypass form entry entirely. The page includes 79 inline error containers, suggesting validation happens during checkout rather.

1 observation recorded.

Error recovery

What happens when someone gets it wrong.

90Strong

A product page offers 13 size or colour choosers, allowing a shopper to correct their selection before committing to a purchase. The page includes 8 live regions for dynamic updates, supporting error correction and choice confirmation.

1 observation recorded.

Show the score

SecondDoor Door Gap badge for fahertybrand.com

The badge always shows the latest scores for this domain and links back to the report. Put it in a README or a footer.

This number moves every time you deploy

SecondDoor rescans on a schedule and tells you the day a release closes a door. Watch the trend on the dashboard, or scan another site now.

Some cookies are necessary for SecondDoor to work. Others are optional, and tell us how the site and the product are used. Accept all, or decline all optional ones. Without a selection, nothing optional is set. More in our cookie policy.