# Zapier: 1 point Door Gap
- Site: zapier.com
- Scanned: 2026-09-03
- Scan type: Deep scan
- Business type: b2b_saas
- Report: https://www.seconddoor.io/r/zapier-2fgeyc
- Scanner version: 9
Zapier lets a human or an agent start free in two clicks, but there is no documented way for an agent to get an API key or a machine readable spec without reading prose first.
## Scores
| Measure | Score |
| --- | --- |
| Humans | 73/100 |
| Agents | 72/100 |
| Composite | 73/100 |
| Door Gap | 1 points |
The human score is the mean of the four human dimensions, the agent score the mean of the six agent dimensions, and the Door Gap the difference between them.
## What the machine actually did
The agent got through 12 of 16 requests, but could not find a contact route for machines. It came up empty on 3 other checks too.
- ok      reach the site at all
- ok      find out whether machines are welcome
- ok      ask whether the door opens for requests carrying the AI crawlers' names
- ok      read the site's own guide for language models
- ok      find out what pages exist
- missing find a contact route for machines
- ok      find a published agent interface
- missing find an agent plugin manifest
- missing find out whether verified agents are recognised
- ok      read the homepage as data rather than as a page
- missing find a machine readable API spec
- ok      read the developer documentation
- ok      read the prices without running JavaScript
- ok      find a comparison page worth citing
- ok      walk the way a visitor would, to a signup form or a product
- ok      check whether API key can be self-issued
## What a visitor meets
1. **Landing page first impression** (friction). Headline is vague, but subhead and app logos (Claude, ChatGPT, Cursor) clarify this is an AI workflow automation platform for teams and IT. A survey popup covers part of the screen unprompted before the page is even read.
2. **Pricing page** (smooth). Published prices without login: Free, Professional $19.99, Team $69. Enterprise is quote only via sales, standard practice. A task-volume slider adjusts cost by usage, useful for estimating total spend.
3. **Signup form** (smooth). Form asks for work email, first name, last name, password, or Google SSO. Fields marked with asterisks but not actually enforced as required in the markup. No credit card requested for the free plan. Mentions a 14-day trial of premium features layered on top of the free tier. Two clicks from homepage to this point.
## Top issues
1. **No OpenAPI specification was found at the 5 standard paths checked, so a client must be written from prose instead of generated.** (programmatic_onboarding)
The evidence and the recommended fix for each are on the report page: https://www.seconddoor.io/r/zapier-2fgeyc
## Files generated from this scan
- **Machine interfaces: where you stand** at `notes`, 10 minutes, no developer needed. Verify: The next scan finds the interface you published answering at its well-known path, and that check passes.
- **security.txt** at `/.well-known/security.txt`, 10 minutes, no developer needed. Verify: The next scan fetches /.well-known/security.txt as text and the security.txt check passes.
Each file is written from what this scan found on the site. The content is in the JSON once the evidence is opened: https://www.seconddoor.io/api/reports/zapier-2fgeyc
## The agent door
- **machine_discoverability** 100/100. Robots.txt names 8 AI crawlers and allows them, a sitemap lists 1228 URLs, llms.txt is published, and comparison pages render without JavaScript. Nothing blocks discovery.
- **programmatic_onboarding** 40/100. Authentication is documented, endpoint examples are shown, code samples are provided.
- **pricing_legibility** 93/100. Three tiers (Free $0, Professional $19.99, Team $69) are readable in raw HTML with Offer structured data attached. Enterprise routes to a quote, which is standard and does not count against this.
- **agent_aware_instrumentation** 90/100. An MCP manifest is published, robots.txt names 8 AI crawlers and allows them, pricing.md publishes prices in a form an agent can read directly, developer documentation describes an API, but only in prose.
- **machine_fetchable_trust** 40/100. No security.txt at the standard path, returning a 404. The homepage does answer automated requests normally, but no other machine readable trust signal was found.
- **commercial_rails** 70/100. Prices are published in raw HTML, pricing.md is machine readable, and the free signup form asks for no payment card. But the SDK's Enterprise tier is off by default and requires a manual sales opt-in, so the highest-value path is not.
## The human door
- **steps_to_first_value** 80/100. The Start free CTA reaches a working signup form in 2 clicks from the homepage, with no payment requested for the free tier.
- **required_fields** 98/100. The signup form has 4 fields and 0 are enforced as required in the markup, plus a Google SSO option. Almost nothing stands between a visitor and an account.
- **verification_walls** 80/100. No verification step appears on the signup page itself, and the Google SSO path bypasses any such check entirely.
- **error_recovery** 35/100. 0 of 13 inputs on the signup form carry validation constraints, and there are no inline error containers, only 3 live regions. A mistyped field has no client-side signal before submission.
---
Scored by SecondDoor. Method: https://www.seconddoor.io/methodology
Scan another site: https://www.seconddoor.io
Rate an issue or this report: POST https://www.seconddoor.io/api/feedback, or the rate_fix tool on https://www.seconddoor.io/api/mcp