Some cookies are necessary for SecondDoor to work. Others are optional, and tell us how the site and the product are used. Accept all, or decline all optional ones. Without a selection, nothing optional is set. More in our cookie policy.
Basic scanUnclassified/Scanned 8 Sept 2026, 14:21 UTC/1 browser pass
A WooCommerce storefront with full product visibility to machines but no agent checkout protocol or API surface to complete transactions programmatically.
Older scan
This report was produced by an earlier version of the scanner. Some findings may not match how the site is measured now.
Ordered by what the evidence says is costing most. Written for whoever owns the site, not whoever builds it.
1 piece of evidence and the recommended fix are recorded for this issue.
This is a basic scan, so it raises the three issues the deterministic evidence supports. A deep scan sends two agents over the site and raises up to ten, each with cited evidence and the screens to prove it.
A deep scan walks the site with two agents, records cited evidence and screenshots, and keeps a mission timeline. It comes with the paid plans. Making an account costs nothing and gives you one basic scan a month.
The score and the audit trail stay public. The evidence and the files open with an account.
The audit trail. Not measured is not zero.
Machine discoverability
No AI crawler is blocked by robots.txt, a real browser is served the page normally, and the site publishes llms.txt with 130 lines of guidance. The sitemap lists 111 URLs including product pages.
4 observations recorded.
Programmatic onboarding
No API documentation is linked from the homepage or published at any of the 6 standard OpenAPI paths checked (/openapi.json, /openapi.yaml, /swagger.json, /api/openapi.json, /api-docs, /.well-known/openapi.json).
2 observations recorded.
Pricing legibility
49 prices appear in the homepage HTML without JavaScript. Across 3 product pages checked, 176 prices are readable as plain text. Product structured data publishes price and currency (USD) for every variant.
2 observations recorded.
Agent-aware instrumentation
No MCP manifest is published at any of the 3 standard paths. WooCommerce, the platform in use, supports agent checkout protocols, but no agent checkout manifest is present.
4 observations recorded.
Machine-fetchable trust
Security.txt could not be verified; automated access to /.well-known/security.txt was refused with HTTP 403. The returns policy at /return-policy reads as plain text (9341 characters) and is linked from product pages.
3 observations recorded.
Commercial rails
WooCommerce is the platform, which supports agent checkout protocols. No agent checkout manifest is published. No OpenAPI spec exists to query cart, shipping, or payment state.
4 observations recorded.
Steps to first value
Could not verify: this scan did not reach the pages that would show it.
Required fields
Could not verify: this scan did not reach the pages that would show it.
Verification walls
Could not verify: this scan did not reach the pages that would show it.
Error recovery
Could not verify: this scan did not reach the pages that would show it.
It got through 10 of 16.
The site refused automated access at /.well-known/security.txt, so the agent could not find a contact route for machines.