SecondDoor

Basic scanSoftware business · Marketing site/Scanned 3 Sept 2026, 19:29 UTC/1 browser pass/Partial scan

webflow.com

Webflow publishes prices and welcomes agents to browse, but requires a human to obtain API credentials and offers no machine readable specification for integration.

Incomplete scan

The human side of this site could not be measured, so there is no Door Gap to report. The scores below cover only what the scan actually reached.

Human door0
Agent door35
Door Gap-35

Composite

18

Two issues, in priority order

Each one is drawn from evidence recorded during the walks.

2 pieces of evidence and the recommended fix are recorded for this issue.

A work email. We send the report and nothing else unless you ask.

Did this report tell you something you did not know?

We sent a buying agent

15 requests, in order

The agent got through 12 of 15 requests, but could not find a published agent interface. It came up empty on 2 other checks too. That is enough missing for a machine to give up before it reaches a purchase.

  1. 01

    webflow.com

    reach the site at all

    reached
  2. 02

    webflow.com

    find out whether machines are welcome

    reached
  3. 03

    webflow.com

    ask whether the door opens for requests carrying the AI crawlers' names

    reached
  4. 04

    webflow.com

    read the site's own guide for language models

    reached
  5. 05

    /sitemap.xml

    find out what pages exist

    reached
  6. 06

    webflow.com

    find a contact route for machines

    reached
  7. 07

    webflow.com

    find a published agent interface

    not found
  8. 08

    webflow.com

    find an agent plugin manifest

    reached
  9. 09

    webflow.com

    find out whether verified agents are recognised

    not found
  10. 10

    webflow.com

    read the homepage as data rather than as a page

    reached
  11. 11

    webflow.com

    find a machine readable API spec

    not found
  12. 12

    webflow.com

    read the developer documentation

    reached
  13. 13

    webflow.com

    read the prices without running JavaScript

    reached
  14. 14

    webflow.com

    find a comparison page worth citing

    reached
  15. 15

    /signup

    walk the way a visitor would, to a signup form or a product

    reached

Deep scans need an account. Accounts are free.

A deep scan walks the site with two agents, records cited evidence and screenshots, and keeps a mission timeline. It comes with the paid plans. Making an account costs nothing and gives you one basic scan a month.

Create an account

Ten dimensions

Not measured is not zero.

The agent door

35 of 100

What a machine can do on your site with nobody watching.

Machine discoverability

Whether a retrieval system can find and read you at all.

95Strong

No AI crawler is blocked by user agent rules, a real browser is served the page normally, and the sitemap lists 6510 URLs across 2 child sitemaps. The homepage carries 19 schema.org types including SoftwareApplication and Organization.

4 observations recorded.

Programmatic onboarding

Whether an agent can get working access without a human.

24Blocking

Authentication is documented in prose at developers.webflow.com with code samples provided, but no OpenAPI spec exists at any of the 5 standard paths checked. An agent can read how to authenticate but must write a client by hand from text.

3 observations recorded.

Pricing legibility

Whether total cost can be computed from published numbers.

35Weak

Ten prices appear in the homepage HTML itself, ranging from $4 to $200, making the cost structure machine readable without JavaScript. However, the prices lack structured data attributes for currency, availability or product identifier, so.

1 observation recorded.

Agent-aware instrumentation

Whether you publish anything built for machine callers.

8Blocking

No MCP manifest is published at /mcp.json or any other standard path. No ai-plugin.json, llms.txt or Web Bot Auth signals are present. The site offers no machine readable way for an agent to discover what it can do or how to invoke it.

4 observations recorded.

Machine-fetchable trust

Whether terms, security and status are readable as text.

40Weak

No security.txt, the homepage answers automated requests.

2 observations recorded.

Commercial rails

Whether a purchase can complete without a sales call.

10Blocking

Prices are published on the homepage in plain HTML. No pricing.md, OAuth authorization metadata, or self-serve API key issuance is offered. An agent can read the cost but cannot proceed to purchase or credential issuance without a human.

2 observations recorded.

The human door

0 of 100

What a first time visitor meets between landing and first value.

Steps to first value

How far a new visitor travels before something useful happens.

Not measured

Could not verify: this scan did not reach the pages that would show it.

1 observation recorded.

Required fields

How much you ask for before you give anything back.

Not measured

Could not verify: this scan did not reach the pages that would show it.

1 observation recorded.

Verification walls

How many gates stand between intent and access.

Not measured

Could not verify: this scan did not reach the pages that would show it.

1 observation recorded.

Error recovery

What happens when someone gets it wrong.

Not measured

Could not verify: this scan did not reach the pages that would show it.

1 observation recorded.

Show the score

SecondDoor Door Gap badge for webflow.com

The badge always shows the latest scores for this domain and links back to the report. Put it in a README or a footer.

This number moves every time you deploy

SecondDoor rescans on a schedule and tells you the day a release closes a door. Watch the trend on the dashboard, or scan another site now.

Some cookies are necessary for SecondDoor to work. Others are optional, and tell us how the site and the product are used. Accept all, or decline all optional ones. Without a selection, nothing optional is set. More in our cookie policy.