# Pipedrive: 60 point Door Gap
- Site: pipedrive.com
- Scanned: 2026-09-08
- Scan type: Basic scan
- Business type: b2b_saas
- Report: https://www.seconddoor.io/r/pipedrive-6gwzkt
- Scanner version: 12
A CRM with published prices and immediate access, but pricing pages and API documentation are walled off from automated evaluation.
## Scores
| Measure | Score |
| --- | --- |
| Humans | 94/100 |
| Agents | 34/100 |
| Composite | 64/100 |
| Door Gap | 60 points |
| Percentile | 50th |
The human score is the mean of the four human dimensions, the agent score the mean of the six agent dimensions, and the Door Gap the difference between them.
## What the machine actually did
The site refused automated access at /en/pricing, so the agent could not read the prices without running JavaScript.
- ok      reach the site at all
- ok      find out whether machines are welcome
- ok      ask whether the door opens for requests carrying the AI crawlers' names
- ok      read the site's own guide for language models
- ok      find out what pages exist
- missing find a contact route for machines
- missing find a published agent interface
- missing find an agent plugin manifest
- missing find out whether verified agents are recognised
- ok      read the homepage as data rather than as a page
- missing find a machine readable API spec
- missing read the developer documentation
- blocked read the prices without running JavaScript
- blocked find a comparison page worth citing
- ok      walk the way a visitor would, to a signup form or a product
## Top issues
1. **/en/pricing turn the honest automated client away while serving a real browser, so the search crawlers that would cite the page are turned away by a rule about the client.** (machine_discoverability)
2. **The API documentation site contains no credentials, endpoints, code samples, or self-serve key issuance.** (programmatic_onboarding)
3. **No machine-readable integration protocol is published, leaving agents unable to understand Pipedrive's capabilities or connect to it programmatically.** (agent_aware_instrumentation)
The evidence and the recommended fix for each are on the report page: https://www.seconddoor.io/r/pipedrive-6gwzkt
## Files generated from this scan
- **Let verified assistants through** at `notes`, 1 hour, developer. Verify: The next scan opens the homepage and the key pages in a real browser and under the search crawler names, and every one is served.
- **robots.txt rules for AI crawlers** at `/robots.txt`, 10 minutes, no developer needed. Verify: The next scan reads robots.txt and finds every search and agent crawler allowed, none of them kept off product or pricing paths.
- **Machine interfaces: where you stand** at `notes`, 10 minutes, no developer needed. Verify: The next scan finds the interface you published answering at its well-known path, and that check passes.
- **security.txt** at `/.well-known/security.txt`, 10 minutes, no developer needed. Verify: The next scan fetches /.well-known/security.txt as text and the security.txt check passes.
Each file is written from what this scan found on the site. The content is in the JSON once the evidence is opened: https://www.seconddoor.io/api/reports/pipedrive-6gwzkt
## The agent door
- **machine_discoverability** 94/100. No AI crawler is blocked by robots.txt, a real browser is served the page normally, and llms.txt is published with 95 lines. The sitemap lists 138 URLs and the homepage includes 6 schema.org types.
- **programmatic_onboarding** 20/100. The documentation site at developers.pipedrive.com contains 2563 characters of text but shows no API credentials, endpoints, code samples, or self-serve key issuance.
- **pricing_legibility** null/100. Could not verify: this scan did not reach the pages that would show it.
- **agent_aware_instrumentation** 8/100. No MCP manifest is published at any of the 3 standard paths checked. The site offers no machine-readable protocol for agents to understand its capabilities or integrate with it.
- **machine_fetchable_trust** 40/100. No security.txt file is published at /.well-known/security.txt. The homepage responds to automated requests, but the site provides no machine-readable security contact or vulnerability disclosure policy.
- **commercial_rails** 10/100. .
## The human door
- **steps_to_first_value** 95/100. The product is usable immediately without signup or account creation. A visitor can explore the CRM interface and understand its core functionality on the first visit, with no form or verification step required.
- **required_fields** 100/100. No signup form exists on the entry path. The site requires nothing of a visitor before they can access the product, so there are zero required fields to complete.
- **verification_walls** 100/100. There is no account system and no verification step. A visitor encounters no email confirmation, phone verification, or identity check before accessing the product.
- **error_recovery** 80/100. No form exists on the primary path, so there is no validation error to recover from. The site does not block or reject visitor input, but the absence of a form means error handling cannot be directly observed.
---
Scored by SecondDoor. Method: https://www.seconddoor.io/methodology
Scan another site: https://www.seconddoor.io
Rate an issue or this report: POST https://www.seconddoor.io/api/feedback, or the rate_fix tool on https://www.seconddoor.io/api/mcp