Some cookies are necessary for SecondDoor to work. Others are optional, and tell us how the site and the product are used. Accept all, or decline all optional ones. Without a selection, nothing optional is set. More in our cookie policy.
Basic scanUnclassified/Scanned 8 Sept 2026, 16:09 UTC/1 browser pass
A WooCommerce storefront with full product visibility to machines but no agent checkout protocol or API surface to complete a purchase programmatically.
Ordered by what the evidence says is costing most. Written for whoever owns the site, not whoever builds it.
1 piece of evidence and the recommended fix are recorded for this issue.
This is a basic scan, so it raises the three issues the deterministic evidence supports. A deep scan sends two agents over the site and raises up to ten, each with cited evidence and the screens to prove it.
A deep scan walks the site with two agents, records cited evidence and screenshots, and keeps a mission timeline. It comes with the paid plans. Making an account costs nothing and gives you one basic scan a month.
The score and the audit trail stay public. The evidence and the files open with an account.
The audit trail. Not measured is not zero.
Machine discoverability
No AI crawler is blocked by robots.txt; all declared agents are allowed. A real browser is served the page normally. The sitemap lists 111 URLs including product pages. Schema.org markup includes 9 types on the homepage.
4 observations recorded.
Programmatic onboarding
No API documentation is linked from the homepage or published at any of the 6 standard OpenAPI paths checked. No developer portal or integration guide is discoverable.
2 observations recorded.
Pricing legibility
47 prices appear in the homepage HTML. 176 prices are readable across the 3 product pages checked without JavaScript. Product structured data publishes price and currency for every variant. Availability is marked in schema.org.
2 observations recorded.
Agent-aware instrumentation
No MCP manifest exists at any of the 3 standard paths. No AI plugin manifest is published. WooCommerce supports agent checkout protocols and the platform is ready for one, but no manifest has been deployed.
4 observations recorded.
Machine-fetchable trust
Security.txt could not be verified; automated access to /.well-known/security.txt was refused with HTTP 403. The returns policy and shipping policy both read as plain text.
3 observations recorded.
Commercial rails
WooCommerce is the platform and it supports agent checkout protocols. No agent checkout manifest is published. No payment integration is exposed to machines.
4 observations recorded.
Steps to first value
Could not verify: this scan did not reach the pages that would show it.
Required fields
Could not verify: this scan did not reach the pages that would show it.
Verification walls
Could not verify: this scan did not reach the pages that would show it.
Error recovery
Could not verify: this scan did not reach the pages that would show it.
It got through 10 of 16.
The site refused automated access at /.well-known/security.txt, so the agent could not find a contact route for machines.