SecondDoor

Basic scanRetail storefront · Storefront property/Scanned 4 Sept 2026, 15:12 UTC/1 browser pass

fahertybrand.com

A Shopify storefront with strong agent discovery and checkout capability, but no programmatic API for integrations beyond the UCP protocol.

Human door85
Agent door70
Door Gap15

Composite

78

Three issues, in priority order

Each one is drawn from evidence recorded during the walks.

3 pieces of evidence and the recommended fix are recorded for this issue.

A work email. We send the report and nothing else unless you ask.

Did this report tell you something you did not know?

We sent a buying agent

17 requests, in order

The agent got through 11 of 17 requests, but could not find a contact route for machines. It came up empty on 5 other checks too.

  1. 01

    fahertybrand.com

    reach the site at all

    reached
  2. 02

    /robots.txt

    find out whether machines are welcome

    reached
  3. 03

    fahertybrand.com

    ask whether the door opens for requests carrying the AI crawlers' names

    reached
  4. 04

    /llms.txt

    read the site's own guide for language models

    reached
  5. 05

    /sitemap.xml

    find out what pages exist

    reached
  6. 06

    /.well-known/security.txt

    find a contact route for machines

    not found
  7. 07

    fahertybrand.com

    find a published agent interface

    not found
  8. 08

    /.well-known/ai-plugin.json

    find an agent plugin manifest

    not found
  9. 09

    fahertybrand.com

    find out whether verified agents are recognised

    not found
  10. 10

    fahertybrand.com

    read the homepage as data rather than as a page

    reached
  11. 11

    fahertybrand.com

    find a machine readable API spec

    not found
  12. 12

    fahertybrand.com

    read the developer documentation

    not found
  13. 13

    fahertybrand.com

    read the prices without running JavaScript

    reached
  14. 14

    fahertybrand.com

    read the product catalogue as data

    reached
  15. 15

    fahertybrand.com

    read a product page as data

    reached
  16. 16

    fahertybrand.com

    read the returns and shipping terms

    reached
  17. 17

    fahertybrand.com

    walk the way a visitor would, to a signup form or a product

    reached

Deep scans need an account. Accounts are free.

A deep scan walks the site with two agents, records cited evidence and screenshots, and keeps a mission timeline. It comes with the paid plans. Making an account costs nothing and gives you one basic scan a month.

Create an account

Ten dimensions

Not measured is not zero.

The agent door

70 of 100

What a machine can do on your site with nobody watching.

Machine discoverability

Whether a retrieval system can find and read you at all.

100Strong

No AI crawler is blocked by robots.txt or user agent rules; all declared AI names are allowed. The site publishes llms.txt, a sitemap with 704 URLs including products, 19 schema.org types on the homepage, and a /products.json feed.

4 observations recorded.

Programmatic onboarding

Whether an agent can get working access without a human.

10Blocking

No API documentation is linked from the homepage or discoverable in the raw HTML. The site publishes a UCP manifest for checkout, but offers no OpenAPI spec, developer docs, or integration surface for building on top of the catalogue.

3 observations recorded.

Pricing legibility

Whether total cost can be computed from published numbers.

75Strong

Prices appear in the raw HTML of product pages and in Product structured data with currency (USD). The visible price on the product page is $150, but structured data shows $88 for the same variant, creating ambiguity about which price.

2 observations recorded.

Agent-aware instrumentation

Whether you publish anything built for machine callers.

57Passable

A Universal Commerce Protocol manifest is published with 8 capabilities and a storefront MCP endpoint that agents can call. The catalogue answers as data at /products.json.

4 observations recorded.

Machine-fetchable trust

Whether terms, security and status are readable as text.

77Strong

The returns policy and shipping policy both read as text without JavaScript. Return policy is published in structured data. No security.txt is present at /.well-known/security.txt.

3 observations recorded.

Commercial rails

Whether a purchase can complete without a sales call.

98Strong

Product markup carries price, currency, GTIN, and brand. The catalogue answers as data at /products.json, ready for feed syndication. Return policy is in structured data; returns and shipping terms read as text.

4 observations recorded.

The human door

85 of 100

What a first time visitor meets between landing and first value.

Steps to first value

How far a new visitor travels before something useful happens.

95Strong

A product with its price ($150) and an add-to-cart control is reached in 2 steps from the homepage. The product page renders with 13 variant choosers and three express wallet options (Apple Pay, Shop Pay, PayPal) that skip the form.

1 observation recorded.

Required fields

How much you ask for before you give anything back.

80Strong

No account is required before buying. The product page does not demand sign-in. Three express wallets (Apple Pay, Shop Pay, PayPal) allow checkout without entering any form fields.

1 observation recorded.

Verification walls

How many gates stand between intent and access.

75Strong

No sign-in requirement appears on the product page. Express wallets skip verification entirely. The page contains 79 inline error containers and 8 live regions, suggesting form validation is present, but no wall blocks a guest from.

1 observation recorded.

Error recovery

What happens when someone gets it wrong.

90Strong

The product page offers 13 size or colour choosers, allowing a shopper to correct a variant selection before adding to cart. The page includes 79 inline error containers and 8 live regions for validation feedback, supporting error.

1 observation recorded.

Show the score

SecondDoor Door Gap badge for fahertybrand.com

The badge always shows the latest scores for this domain and links back to the report. Put it in a README or a footer.

This number moves every time you deploy

SecondDoor rescans on a schedule and tells you the day a release closes a door. Watch the trend on the dashboard, or scan another site now.

Some cookies are necessary for SecondDoor to work. Others are optional, and tell us how the site and the product are used. Accept all, or decline all optional ones. Without a selection, nothing optional is set. More in our cookie policy.