# Sundays Company: agent door 51, human door not measured
- Site: sundays-company.com
- Scanned: 2026-09-09
- Scan type: Basic scan
- Business type: ecommerce
- Report: https://www.seconddoor.io/r/sundays-company-56hzxg
- Scanner version: 25
0 human and 5 agent dimensions measured from the pages checked; remaining dimensions are not scored.
## Scores
| Measure | Score |
| --- | --- |
| Humans | not measured |
| Agents | 51/100 (5/6 dimensions) |
| Composite | 51/100 |
Agent door only. The human door could not be measured on this scan. A Door Gap needs both doors, so this scan does not report one.
## What the machine actually did
The scanner recorded successful observations for 10 of 16 checks, but could not find a contact route for machines. It came up empty on 5 other checks too. 1 checks could not be measured; see the report limitations.
- ok      reach the site at all
- ok      find out whether machines are welcome
- ok      ask whether the door opens for requests carrying the AI crawlers' names
- ok      read the site's own guide for language models
- ok      find out what pages exist
- missing find a contact route for machines
- missing find a published agent interface
- missing find an agent plugin manifest
- missing find out whether verified agents are recognised
- ok      read the homepage as data rather than as a page
- missing find a machine readable API spec
- missing read the developer documentation
- ok      read the prices without running JavaScript
- ok      read the product catalogue as data
- ok      read a product page as data
- ok      read the returns and shipping terms
## Top issues
1. **No valid security.txt was identified at /.well-known/security.txt.** (machine_fetchable_trust)
2. **No MCP manifest was identified at the 3 standard paths checked.** (agent_aware_instrumentation)
3. **No OpenAPI specification was identified at the 6 standard paths checked.** (programmatic_onboarding)
The evidence and the recommended fix for each are on the report page: https://www.seconddoor.io/r/sundays-company-56hzxg
## Files generated from this scan
- **robots.txt rules for AI crawlers** at `/robots.txt`, 10 minutes, no developer needed. Verify: The next scan reads robots.txt and finds every search and agent crawler allowed, none of them kept off product or pricing paths.
- **Return policy and shipping structured data** at `product page`, 30 minutes, developer. Verify: The next scan reads a MerchantReturnPolicy on the product pages, and OfferShippingDetails when the shipping node was published.
- **Variants missing a GTIN or a brand** at `catalog-identifiers.csv`, 5 minutes, no developer needed. Verify: The next scan reads the catalogue feed and finds a valid GTIN on at least nine in ten variants and a brand on at least nine in ten products.
- **security.txt** at `/.well-known/security.txt`, 10 minutes, no developer needed. Verify: The next scan fetches /.well-known/security.txt as text and the security.txt check passes.
- **Machine interfaces: where you stand** at `notes`, 10 minutes, no developer needed. Verify: The next scan finds the interface you published answering at its well-known path, and that check passes.
Each file is written from what this scan found on the site. The content is in the JSON once the evidence is opened: https://www.seconddoor.io/api/reports/sundays-company-56hzxg
## The agent door
- **machine_discoverability** 97/100. No restriction on the tested crawler names was found in robots.txt. on its first visit, our browser read the homepage. no user agent rule refused the tested retrieval crawler names. a sitemap listing 793 URLs.
- **programmatic_onboarding** 10/100. No API interface was identified through the discovery paths and homepage links checked.
- **pricing_legibility** 35/100. Prices are in the homepage HTML. 10 prices on the homepage itself.
- **agent_aware_instrumentation** 49/100. No MCP manifest was identified at the discovery paths checked. a Universal Commerce Protocol manifest is published. a storefront MCP endpoint answers agent calls. the catalogue answers as data at /products.json.
- **machine_fetchable_trust** 65/100. No security.txt was identified at the checked path. the returns policy reads as text, with a 30-day window. the shipping policy reads as text. the homepage answers automated requests.
- **commercial_rails** not measured. Not measured: our scanner could not identify the required evidence on the pages checked.
## The human door
- **steps_to_first_value** not measured. Not measured: our scanner could not identify the required evidence on the pages checked.
- **required_fields** not measured. Not measured: our scanner could not identify the required evidence on the pages checked.
- **verification_walls** not measured. Not measured: our scanner could not identify the required evidence on the pages checked.
- **error_recovery** not measured. Not measured: our scanner could not identify the required evidence on the pages checked.
---
Scored by SecondDoor. Method: https://www.seconddoor.io/methodology
Scan another site: https://www.seconddoor.io
Rate an issue or this report: POST https://www.seconddoor.io/api/feedback, or the rate_fix tool on https://www.seconddoor.io/api/mcp