# Legion Athletics: agent door 58, human door not measured
- Site: legionathletics.com
- Scanned: 2026-09-08
- Scan type: Basic scan
- Business type: ecommerce
- Report: https://www.seconddoor.io/r/legionathletics-799dej
- Scanner version: 16
A retail storefront with strong product data but no checkout path for agents and no account-free purchase option for humans.
## Scores
| Measure | Score |
| --- | --- |
| Humans | not measured |
| Agents | 58/100 (6/6 dimensions) |
| Composite | 58/100 |
Agent door only. The human door could not be measured on this scan. A Door Gap needs both doors, so this scan does not report one.
## What the machine actually did
The site refused automated access at /.well-known/security.txt, so the agent could not find a contact route for machines.
- ok      reach the site at all
- ok      find out whether machines are welcome
- ok      ask whether the door opens for requests carrying the AI crawlers' names
- ok      read the site's own guide for language models
- ok      find out what pages exist
- blocked find a contact route for machines
- missing find a published agent interface
- missing find an agent plugin manifest
- missing find out whether verified agents are recognised
- ok      read the homepage as data rather than as a page
- missing find a machine readable API spec
- ok      read the prices without running JavaScript
- ok      read the product catalogue as data
- ok      read a product page as data
## Top issues
1. **The site refuses automated access to security.txt, blocking verification of security contact and disclosure policy.** (machine_fetchable_trust)
2. **No MCP manifest was found at the 3 standard paths checked, so an agent has no published machine door to this site.** (agent_aware_instrumentation)
3. **No OpenAPI specification was found at the 6 standard paths checked, so a client must be written from prose instead of generated.** (programmatic_onboarding)
The evidence and the recommended fix for each are on the report page: https://www.seconddoor.io/r/legionathletics-799dej
## Files generated from this scan
- **Product markup skeleton** at `/products/supplements/whey-protein-powder/`, 2 hours, developer. Verify: The next scan reads price, currency and availability in the Product markup of at least one product page.
- **robots.txt rules for AI crawlers** at `/robots.txt`, 10 minutes, no developer needed. Verify: The next scan reads robots.txt and finds every search and agent crawler allowed, none of them kept off product or pricing paths.
- **Machine interfaces: where you stand** at `notes`, 10 minutes, no developer needed. Verify: The next scan finds the interface you published answering at its well-known path, and that check passes.
Each file is written from what this scan found on the site. The content is in the JSON once the evidence is opened: https://www.seconddoor.io/api/reports/legionathletics-799dej
## The agent door
- **machine_discoverability** 100/100. No AI crawler is blocked by robots.txt or user agent rules. A real browser is served the page normally. The sitemap lists 111 URLs including products themselves. 9 schema.org types appear on the homepage. llms.txt is published.
- **programmatic_onboarding** 10/100. No API surface exists. No OpenAPI spec at any of 6 standard paths. No MCP manifest at any of 3 standard paths. An agent cannot programmatically authenticate, query inventory, or place orders. The storefront is read-only to machines.
- **pricing_legibility** 90/100. 47 prices appear in the homepage HTML without JavaScript. 176 prices across 3 product pages are readable as plain text. Product structured data publishes price and currency for every variant.
- **agent_aware_instrumentation** 16/100. No MCP manifest published. No AI plugin endpoint. Product markup carries SKU, brand, identifier, aggregate rating over 12133 reviews, return policy of 365 days, and shipping details.
- **machine_fetchable_trust** 60/100. security.txt returned HTTP 403, so its contents cannot be verified. The homepage answers automated requests normally. No Web Bot Auth signals are present. Trust signals are incomplete but the site does not refuse automated access.
- **commercial_rails** 71/100. Product markup carries price, currency, identifier, SKU, brand, aggregate rating, return policy of 365 days, and shipping details. The sitemap lists all products.
## The human door
- **steps_to_first_value** not measured. Could not verify: this scan did not reach the pages that would show it.
- **required_fields** not measured. Could not verify: this scan did not reach the pages that would show it.
- **verification_walls** not measured. Could not verify: this scan did not reach the pages that would show it.
- **error_recovery** not measured. Could not verify: this scan did not reach the pages that would show it.
---
Scored by SecondDoor. Method: https://www.seconddoor.io/methodology
Scan another site: https://www.seconddoor.io
Rate an issue or this report: POST https://www.seconddoor.io/api/feedback, or the rate_fix tool on https://www.seconddoor.io/api/mcp