# HubSpot: 42 point Door Gap
- Site: hubspot.com
- Scanned: 2026-09-08
- Scan type: Basic scan
- Business type: b2b_saas
- Report: https://www.seconddoor.io/r/hubspot-9zz9kf
- Scanner version: 12
Prices render only in JavaScript, the signup form is blocked to agents by robots.txt, and API clients must be written by hand from prose documentation.
## Scores
| Measure | Score |
| --- | --- |
| Humans | 80/100 |
| Agents | 38/100 |
| Composite | 59/100 |
| Door Gap | 42 points |
The human score is the mean of the four human dimensions, the agent score the mean of the six agent dimensions, and the Door Gap the difference between them.
## What the machine actually did
The agent got through 9 of 15 requests, but could not find a published agent interface. It came up empty on 5 other checks too. That is enough missing for a machine to give up before it reaches a purchase.
- ok      reach the site at all
- ok      find out whether machines are welcome
- ok      ask whether the door opens for requests carrying the AI crawlers' names
- ok      read the site's own guide for language models
- ok      find out what pages exist
- ok      find a contact route for machines
- missing find a published agent interface
- missing find an agent plugin manifest
- missing find out whether verified agents are recognised
- ok      read the homepage as data rather than as a page
- missing find a machine readable API spec
- ok      read the developer documentation
- missing read the prices without running JavaScript
- ok      find a comparison page worth citing
- missing walk the way a visitor would, to a signup form or a product
## Top issues
1. **Prices appear only after JavaScript runs, so a client that reads raw HTML sees no price at all.** (pricing_legibility)
2. **No MCP manifest was found at the 3 standard paths checked, so an agent has no published machine door to this site.** (agent_aware_instrumentation)
3. **The API has no published OpenAPI specification, so clients must be written by hand from prose documentation.** (programmatic_onboarding)
The evidence and the recommended fix for each are on the report page: https://www.seconddoor.io/r/hubspot-9zz9kf
## Files generated from this scan
- **Prices in the HTML, not only after JavaScript** at `pricing page`, 1 hour, developer. Verify: The next scan reads the prices in the raw HTML of the pricing page, with none needing JavaScript to appear.
- **Pricing as Offer structured data** at `pricing page`, 20 minutes, developer. Verify: The next scan reads Offer structured data with a price and currency on the pricing page, and the pricing check credits it.
- **robots.txt rules for AI crawlers** at `/robots.txt`, 10 minutes, no developer needed. Verify: The next scan reads robots.txt and finds every search and agent crawler allowed, none of them kept off product or pricing paths.
- **Machine interfaces: where you stand** at `notes`, 10 minutes, no developer needed. Verify: The next scan finds the interface you published answering at its well-known path, and that check passes.
- **pricing.md** at `/pricing.md`, 20 minutes, no developer needed. Verify: The next scan fetches /pricing.md as text and records pricing as machine readable.
Each file is written from what this scan found on the site. The content is in the JSON once the evidence is opened: https://www.seconddoor.io/api/reports/hubspot-9zz9kf
## The agent door
- **machine_discoverability** 86/100. No AI crawler is blocked by robots.txt, a real browser is served the page normally, and 1052 URLs are listed in the sitemap. The homepage publishes 9 schema.org types including Product and Organization.
- **programmatic_onboarding** 16/100. Endpoint examples are shown in the developer documentation at developers.hubspot.com, but no OpenAPI spec is published at any of the 6 standard paths checked. No self-serve API key issuance is documented.
- **pricing_legibility** 30/100. 16 prices appear only after JavaScript runs, a client that does not render pages sees no price at all.
- **agent_aware_instrumentation** 8/100. No MCP manifest is published at any of the 3 standard paths checked. No ai-plugin.json is published. The site publishes llms.txt with 293 lines, but no machine-readable protocol for agents to invoke the product or retrieve data.
- **machine_fetchable_trust** 85/100. security.txt is published at /.well-known/security.txt with a contact route for machines. The homepage responds to automated requests with HTTP 200 and renders 2000 characters.
- **commercial_rails** 0/100. The pricing page at /pricing/marketing renders 16 prices after JavaScript runs, but routes to a sales contact form without publishing any prices in the raw HTML or in machine-readable form.
## The human door
- **steps_to_first_value** 80/100. The signup page is 2 steps from the homepage. However, robots.txt at app.hubspot.com contains 'Disallow: /' which closes the signup form to automated visitors that honour the standard.
- **required_fields** null/100. Could not verify: this scan did not reach the pages that would show it.
- **verification_walls** null/100. Could not verify: this scan did not reach the pages that would show it.
- **error_recovery** null/100. Could not verify: this scan did not reach the pages that would show it.
---
Scored by SecondDoor. Method: https://www.seconddoor.io/methodology
Scan another site: https://www.seconddoor.io
Rate an issue or this report: POST https://www.seconddoor.io/api/feedback, or the rate_fix tool on https://www.seconddoor.io/api/mcp