Some cookies are necessary for SecondDoor to work. Others are optional, and tell us how the site and the product are used. Accept all, or decline all optional ones. Without a selection, nothing optional is set. More in our cookie policy.
Basic scanRetail storefront · Storefront property/Scanned 8 Sept 2026, 16:06 UTC/1 browser pass
A real browser is required to shop, blocking all assistant shopping and agent checkout despite published product data and a UCP manifest.
Ordered by what the evidence says is costing most. Written for whoever owns the site, not whoever builds it.
1 piece of evidence and the recommended fix are recorded for this issue, with /.well-known/security.txt written from your own pages.
This is a basic scan, so it raises the three issues the deterministic evidence supports. A deep scan sends two agents over the site and raises up to ten, each with cited evidence and the screens to prove it.
A deep scan walks the site with two agents, records cited evidence and screenshots, and keeps a mission timeline. It comes with the paid plans. Making an account costs nothing and gives you one basic scan a month.
The score and the audit trail stay public. The evidence and the files open with an account.
The audit trail. Not measured is not zero.
Machine discoverability
No AI crawler is blocked by robots.txt, key pages serve to automated clients without JavaScript, a sitemap lists 186 URLs including products, and the catalogue answers as data at /products.json with brand on each item.
4 observations recorded.
Programmatic onboarding
No API documentation is linked from the homepage or published at standard paths. The site publishes a UCP manifest declaring 8 capabilities and a storefront MCP endpoint, but no developer guide explains how to use it.
3 observations recorded.
Pricing legibility
93 prices appear in the homepage HTML and 514 prices across the 3 product pages checked, all readable without JavaScript. Product structured data publishes price and currency on every item. An identifier names each product.
2 observations recorded.
Agent-aware instrumentation
A Universal Commerce Protocol manifest at version 2026-08-25 is published, declaring 8 capabilities and 3 payment handlers, with a storefront MCP endpoint that agents can call. The catalogue answers as data at /products.json.
4 observations recorded.
Machine-fetchable trust
No security.txt is published. The returns policy and shipping policy read as text at /policies/refund-policy and /policies/shipping-policy, though neither is in structured data on product pages. The homepage answers automated requests.
3 observations recorded.
Commercial rails
Product markup carries price, currency, availability and identifier. The catalogue answers as data at /products.json with brand on each item. Returns and shipping policies read as text.
4 observations recorded.
Steps to first value
Could not verify: this scan did not reach the pages that would show it.
1 observation recorded.
Required fields
Could not verify: this scan did not reach the pages that would show it.
1 observation recorded.
Verification walls
Could not verify: this scan did not reach the pages that would show it.
1 observation recorded.
Error recovery
Could not verify: this scan did not reach the pages that would show it.
1 observation recorded.
It got through 9 of 17.
The agent got through 9 of 17 requests, but could not read the site's own guide for language models. It came up empty on 7 other checks too.