Some cookies are necessary for SecondDoor to work. Others are optional, and tell us how the site and the product are used. Accept all, or decline all optional ones. Without a selection, nothing optional is set. More in our cookie policy.
Basic scanUnclassified/Scanned 8 Sept 2026, 16:13 UTC/1 browser pass
A Shopify storefront that blocks real browsers from loading the homepage, cutting off assistant shopping despite publishing agent protocols.
Ordered by what the evidence says is costing most. Written for whoever owns the site, not whoever builds it.
1 piece of evidence and the recommended fix are recorded for this issue, with /products/fg-treat-4p-cookies-cream-40g written from your own pages.
This is a basic scan, so it raises the three issues the deterministic evidence supports. A deep scan sends two agents over the site and raises up to ten, each with cited evidence and the screens to prove it.
A deep scan walks the site with two agents, records cited evidence and screenshots, and keeps a mission timeline. It comes with the paid plans. Making an account costs nothing and gives you one basic scan a month.
The score and the audit trail stay public. The evidence and the files open with an account.
The audit trail. Not measured is not zero.
Machine discoverability
No AI crawler is blocked by robots.txt; llms.txt is published; a sitemap lists 89 URLs including 12 products; product pages carry Product schema with price, currency, brand and aggregate rating; the catalogue answers as JSON at.
4 observations recorded.
Programmatic onboarding
No API documentation is linked from the homepage or discoverable at standard paths. No OpenAPI spec, developer docs, or integration guide exists. The site publishes a UCP manifest for agent checkout but provides no onboarding path for a.
2 observations recorded.
Pricing legibility
Prices appear in raw HTML on the homepage (4 instances) and across 3 product pages checked (47 instances). Product structured data publishes price and currency on every product. An agent can read cost without scraping.
2 observations recorded.
Agent-aware instrumentation
A Universal Commerce Protocol manifest version 2026-08-25 is published, declaring 8 capabilities and 3 payment handlers; a storefront MCP endpoint answers agent calls. No MCP manifest exists at standard paths.
4 observations recorded.
Machine-fetchable trust
No security.txt is published. The returns policy and shipping policy are readable as text at /policies/refund-policy and /policies/shipping-policy, but neither appears in structured data on product pages.
3 observations recorded.
Commercial rails
A UCP manifest is published with 3 payment handlers and 8 shopping capabilities, and a storefront MCP endpoint is live. A real browser cannot load the homepage to initiate a purchase, blocking the human path to checkout.
4 observations recorded.
Steps to first value
Could not verify: this scan did not reach the pages that would show it.
Required fields
Could not verify: this scan did not reach the pages that would show it.
Verification walls
Could not verify: this scan did not reach the pages that would show it.
Error recovery
Could not verify: this scan did not reach the pages that would show it.
It got through 10 of 16.
The agent got through 10 of 16 requests, but could not find a contact route for machines. It came up empty on 5 other checks too.