Deep scanUnclassified/Scanned 7 Sept 2026, 12:27 UTC/2 walks, 17 requests, 3 moments recorded/Partial scan
freeflyapparel.com
Free Fly's catalog and checkout are fully machine readable through a UCP manifest, but the site has zero developer surface and lets JavaScript-only reviews go invisible to any agent that can't run.
Incomplete scan
The human side of this site could not be measured, so there is no Door Gap to report. The scores below cover only what the scan actually reached.
Two issues, in priority order
Each one is drawn from evidence recorded during the walks.
1 piece of evidence and the recommended fix are recorded for this issue.
What a visitor actually meets
3 moments, 1 with friction
We walked the funnel in a real browser and captured every step. Nothing was submitted and no account was created.
- 01
Landing page
Page title states 'Bamboo & Sun Protective Clothing', clarifying the business fast. Homepage shows a lifestyle fishing scene and nav for Men, Women, Kids, Accessories. A discount popup covers the page on load asking for email signup for 15% off, dismissible via Close.
friction·freeflyapparel.com
Homepage - 02
Product page - Men's Bamboo Lightweight Hoodie
Page shows price $74, color and size selectors, materials, care instructions, shipping and returns, fit guide, and 4,105 reviews with rating breakdown. No login needed to view any of it. This is a normal browsable catalog page, not gated.
smooth·freeflyapparel.com
Product page - Men's Bamboo Lightweight Hoodie - 03
Cart page, unauthenticated
Cart is empty and reachable without any login. It offers 'Join or Log In to access perks and a quicker checkout' but does not force account creation to shop. A direct /account URL is blocked by robots.txt for automated visitors, so account signup fields could not be inspected in this walk.
smooth·/cart
Empty cart page
We sent a buying agent
17 requests, in order
The agent got through 10 of 17 requests, but could not find a contact route for machines. It came up empty on 6 other checks too.
- 01reached
freeflyapparel.com
reach the site at all
- 02reached
/robots.txt
find out whether machines are welcome
- 03reached
freeflyapparel.com
ask whether the door opens for requests carrying the AI crawlers' names
- 04reached
/llms.txt
read the site's own guide for language models
- 05reached
/sitemap.xml
find out what pages exist
- 06not found
/.well-known/security.txt
find a contact route for machines
- 07not found
freeflyapparel.com
find a published agent interface
- 08not found
/.well-known/ai-plugin.json
find an agent plugin manifest
- 09not found
freeflyapparel.com
find out whether verified agents are recognised
- 10not found
freeflyapparel.com
read the homepage as data rather than as a page
- 11not found
freeflyapparel.com
find a machine readable API spec
- 12not found
freeflyapparel.com
read the developer documentation
- 13reached
freeflyapparel.com
read the prices without running JavaScript
- 14reached
freeflyapparel.com
read the product catalogue as data
- 15reached
freeflyapparel.com
read a product page as data
- 16reached
freeflyapparel.com
read the returns and shipping terms
- 17reached
freeflyapparel.com
walk the way a visitor would, to a signup form or a product
Ten dimensions
Not measured is not zero.
The agent door
55 of 100What a machine can do on your site with nobody watching.
Machine discoverability
Whether a retrieval system can find and read you at all.
Robots.txt allows every named AI crawler, a real browser renders normally, llms.txt is published, and a 422-URL sitemap lists every product. Nothing here is hidden from a machine.
4 observations recorded.
Programmatic onboarding
Whether an agent can get working access without a human.
No OpenAPI spec at any of 6 standard paths, no MCP manifest at 3 standard paths, and no developer documentation linked anywhere on the homepage. There is no way for a program to onboard beyond browsing the storefront.
4 observations recorded.
Pricing legibility
Whether total cost can be computed from published numbers.
9 prices sit in the raw homepage HTML and 77 prices across 3 product pages with no JavaScript required. Product structured data carries price, currency and availability, so an agent can parse cost without scraping rendered content.
2 observations recorded.
Agent-aware instrumentation
Whether you publish anything built for machine callers.
No MCP manifest at standard paths, but a Universal Commerce Protocol manifest exists with checkout, cart and order capabilities over MCP, and the catalog answers as data at /products.json.
4 observations recorded.
Machine-fetchable trust
Whether terms, security and status are readable as text.
No security.txt at the standard well-known path. Returns and shipping policies are readable as plain text, and the homepage answers automated requests cleanly, but trust signals are incomplete.
3 observations recorded.
Commercial rails
Whether a purchase can complete without a sales call.
A UCP manifest declares checkout, cart, fulfillment and order capabilities with 3 payment handlers over MCP, and the catalog and policies are all machine readable, but no ACP manifest and no paid-crawl signal mean an agent-driven purchase.
4 observations recorded.
The human door
0 of 100What a first time visitor meets between landing and first value.
Steps to first value
How far a new visitor travels before something useful happens.
Could not verify: this scan did not reach the pages that would show it.
1 observation recorded.
Required fields
How much you ask for before you give anything back.
Could not verify: this scan did not reach the pages that would show it.
1 observation recorded.
Verification walls
How many gates stand between intent and access.
Could not verify: this scan did not reach the pages that would show it.
1 observation recorded.
Error recovery
What happens when someone gets it wrong.
Could not verify: this scan did not reach the pages that would show it.
1 observation recorded.
Show the score
The badge always shows the latest scores for this domain and links back to the report. Put it in a README or a footer.
This number moves every time you deploy
SecondDoor rescans on a schedule and tells you the day a release closes a door. Watch the trend on the dashboard, or scan another site now.