Some cookies are necessary for SecondDoor to work. Others are optional, and tell us how the site and the product are used. Accept all, or decline all optional ones. Without a selection, nothing optional is set. More in our cookie policy.
20 sites scanned and published.
Index updated 8 Sept 2026.
Basic scanUnclassified/Scanned 8 Sept 2026, 14:43 UTC/1 browser pass
A Shopify storefront with strong machine discoverability but no programmatic API for agents to automate orders or integrate inventory.
Older scan
This report was produced by an earlier version of the scanner. Some findings may not match how the site is measured now.
Ordered by what the evidence says is costing most. Written for whoever owns the site, not whoever builds it.
3 pieces of evidence and the recommended fix are recorded for this issue, with /.well-known/security.txt written from your own pages.
This is a basic scan, so it raises the three issues the deterministic evidence supports. A deep scan sends two agents over the site and raises up to ten, each with cited evidence and the screens to prove it.
A deep scan walks the site with two agents, records cited evidence and screenshots, and keeps a mission timeline. It comes with the paid plans. Making an account costs nothing and gives you one basic scan a month.
The score and the audit trail stay public. The evidence and the files open with an account.
The audit trail. Not measured is not zero.
Machine discoverability
No AI crawler is blocked by robots.txt; all major assistants are explicitly allowed. The site serves a real browser normally, publishes llms.txt, declares 7 schema.org types on the homepage, lists 37 URLs in a sitemap that includes product.
4 observations recorded.
Programmatic onboarding
No API documentation is linked from the homepage or discoverable in the site structure. The probe checked for OpenAPI specs at 6 standard paths and found none.
2 observations recorded.
Pricing legibility
Prices are embedded in the raw HTML of all 3 product pages checked, with 41 prices visible on the homepage alone and 150 across the product pages.
2 observations recorded.
Agent-aware instrumentation
No MCP manifest exists at the 3 standard paths checked. However, a Universal Commerce Protocol manifest is published at version 2026-08-25, declaring 8 capabilities including checkout, cart, and catalog search.
4 observations recorded.
Machine-fetchable trust
No security.txt is published at /.well-known/security.txt. The returns policy and shipping policy are both readable as plain text at their policy URLs, though neither is embedded in product page structured data.
3 observations recorded.
Commercial rails
The site runs on Shopify and publishes a Universal Commerce Protocol manifest with 3 payment handlers, so agents can theoretically initiate checkout.
4 observations recorded.
Steps to first value
Could not verify: this scan did not reach the pages that would show it.
Required fields
Could not verify: this scan did not reach the pages that would show it.
Verification walls
Could not verify: this scan did not reach the pages that would show it.
Error recovery
Could not verify: this scan did not reach the pages that would show it.
It got through 10 of 16.
The agent got through 10 of 16 requests, but could not find a contact route for machines. It came up empty on 5 other checks too.