# OtterlyAI: 13 point Door Gap
- Site: otterly.ai
- Scanned: 2026-09-08
- Scan type: Basic scan
- Business type: b2b_saas
- Report: https://www.seconddoor.io/r/otterly-kkut8u
- Scanner version: 16
Signup automation is blocked by robots.txt, forcing agents into a manual funnel that humans can reach in two clicks.
## Scores
| Measure | Score |
| --- | --- |
| Humans | 80/100 (1/4 dimensions) |
| Agents | 67/100 (6/6 dimensions) |
| Composite | 74/100 |
| Door Gap | 13 points |
The human score is the mean of the measured human dimensions, the agent score the mean of the measured agent dimensions, and the Door Gap the difference between them.
## What the machine actually did
The agent got through 9 of 14 requests, but could not find a contact route for machines. It came up empty on 4 other checks too.
- ok      reach the site at all
- ok      find out whether machines are welcome
- ok      ask whether the door opens for requests carrying the AI crawlers' names
- ok      read the site's own guide for language models
- ok      find out what pages exist
- missing find a contact route for machines
- ok      find a published agent interface
- missing find an agent plugin manifest
- missing find out whether verified agents are recognised
- ok      read the homepage as data rather than as a page
- missing find a machine readable API spec
- ok      read the developer documentation
- ok      read the prices without running JavaScript
- missing walk the way a visitor would, to a signup form or a product
## Top issues
1. **No OpenAPI specification was found at the 4 standard paths checked, so a client must be written from prose instead of generated.** (programmatic_onboarding)
2. **No security.txt is published, leaving no machine-readable contact point for security researchers or agents to report vulnerabilities.** (machine_fetchable_trust)
The evidence and the recommended fix for each are on the report page: https://www.seconddoor.io/r/otterly-kkut8u
## Files generated from this scan
- **robots.txt rules for AI crawlers** at `/robots.txt`, 10 minutes, no developer needed. Verify: The next scan reads robots.txt and finds every search and agent crawler allowed, none of them kept off product or pricing paths.
- **Machine interfaces: where you stand** at `notes`, 10 minutes, no developer needed. Verify: The next scan finds the interface you published answering at its well-known path, and that check passes.
- **security.txt** at `/.well-known/security.txt`, 10 minutes, no developer needed. Verify: The next scan fetches /.well-known/security.txt as text and the security.txt check passes.
Each file is written from what this scan found on the site. The content is in the JSON once the evidence is opened: https://www.seconddoor.io/api/reports/otterly-kkut8u
## The agent door
- **machine_discoverability** 100/100. No AI crawler is blocked by user agent rules, a real browser is served normally, and the site publishes a sitemap with 67 URLs, llms.txt, and 14 schema.org types including SoftwareApplication. All key pages are readable without JavaScript.
- **programmatic_onboarding** 60/100. API documentation describes self-serve key issuance, authentication, and endpoint examples with code samples. However, the signup form itself is blocked to automated visitors by robots.txt, so an agent cannot complete onboarding without.
- **pricing_legibility** 93/100. 33 prices are readable without JavaScript across the pricing page, with no tier gated behind a sales contact. Plans are published as Offer structured data. One tier is gated behind a demo request, which is standard practice.
- **agent_aware_instrumentation** 68/100. An MCP manifest is published, developer documentation describes an API, but only in prose.
- **machine_fetchable_trust** 40/100. No security.txt is published at /.well-known/security.txt. The homepage answers automated requests and structured data is present, but no machine-readable trust signals are available.
- **commercial_rails** 40/100. Prices are published in raw HTML and as Offer structured data on the pricing page. No payment flow was observed, and the signup path is blocked to automated visitors, so the ability to complete a purchase programmatically could not be.
## The human door
- **steps_to_first_value** 80/100. The signup page is 2 steps from the homepage. However, robots.txt blocks automated visitors from reaching it, so an agent cannot proceed without human assistance or violating the published crawl rules. A human can reach it normally.
- **required_fields** not measured. Could not verify: this scan did not reach the pages that would show it.
- **verification_walls** not measured. Could not verify: this scan did not reach the pages that would show it.
- **error_recovery** not measured. Could not verify: this scan did not reach the pages that would show it.
---
Scored by SecondDoor. Method: https://www.seconddoor.io/methodology
Scan another site: https://www.seconddoor.io
Rate an issue or this report: POST https://www.seconddoor.io/api/feedback, or the rate_fix tool on https://www.seconddoor.io/api/mcp