Free agent-readiness scanner
Can AI agents shop your store?
Shopping agents from ChatGPT, Gemini, and Claude now look for stores they can browse and buy from without a person clicking around. Cartquay checks your store the way an agent would and tells you what to fix.
What we found
The door is open. There's nobody at the counter.
We scanned 73 stores from the official WooCommerce showcase in November 2026, so these are stores built by people who care. Almost all of them let agents in. Almost none give agents anything to work with.
28/100
Median agent-readiness score
- 72 of 73
-
let shopping agents in
- 17 of 73
-
publish /llms.txt
- 1 of 73
-
have a valid UCP profile
- 0 of 73
-
have an MCP server
Two kinds of visitor
Your customers see a storefront. Agents see this.
A shopping agent doesn't look at your theme, your photos, or your banner. It asks your server a few specific questions. On most stores, nobody answers.
-
Rain boots
$89
Add to cart -
Raincoat
$120
Add to cart -
Umbrella
$34
Add to cart
-
GET /robots.txt200 You may come in -
GET /llms.txt404 Nothing to read -
GET /.well-known/ucp200 text/html A theme page, not a checkout profile -
POST /mcp404 No tools here
Typical answers, from our scan of 73 stores.
The agent's route
Four stops between a question and a sale
Every agent purchase passes through the same places. Cartquay checks each one and shows where the agent gives up.
-
The front door
“Can I come in? What do you sell?”
Agents are allowed in and can read a summary of the store
robots.txtllms.txt
Without it: The agent skips your store or guesses from pages built for human eyes.
-
The socket
“How do I search your products?”
Agents can search the catalog with tools
MCP
Without it: There's no reliable way to find a product or its price.
-
The counter
“Can I build a cart and check out?”
Agents can build a cart and reach checkout
UCP
Without it: The agent can recommend you, but it can't finish the sale.
-
The card machine
“How do I pay for this?”
Agents can pay per request, or with cards and stablecoins through Stripe
x402MPP
Without it: A person has to step in and finish the purchase.
How it works
Ten seconds, one link, a clear to-do list
-
Paste your store's address
No signup, nothing to install, and no access to your admin.
-
Our agent knocks on each door
It makes the same requests a shopping agent would. At most 20 of them, read-only.
-
You get a score and a to-do list
Two scores and a fix for each gap, in plain language. Send the link to your developer or agency.
Agent readiness
28/100
Commerce readiness
0/100
-
Pass
robots.txt lets shopping agents in
-
Missing
The store publishes /llms.txt
How to fix: Publish /llms.txt with a short description of the store.
-
Missing
There is an MCP server
In private testing
Running WooCommerce? We're building the fix.
Cartquay for WooCommerce adds what the report asks for.
Ask for early accessMoney never moves through AI-written code. Anything that charges a customer follows a fixed contract: deterministic, authorized, and auditable.
-
Catalog MCP server
Agents search your products with tools.
-
UCP checkout
A checkout agents can complete, or hand off to the buyer.
-
Shipping and tax quotes
Agents see the real total before anyone pays.
-
Stripe agent payments
Each payment is bound to its cart, amount, and expiry.
For developers
Scan from your own tools
The same scanner answers JSON. Reports are kept so you can compare scans over time.
Optional fields: mcpEndpoint when your MCP server lives on a subdomain, and
paymentProbePaths to test paid resources for x402 or MPP challenges.
curl -X POST https://cartquay.com/scans \
-H "content-type: application/json" \
-d '{"url":"https://your-store.com"}'{
"id": "3f2b8c1e-4d5a-4b6c-8d7e-9f0a1b2c3d4e",
"origin": "https://your-store.com",
"score": 28,
"protocolScores": [{ "protocol": "MCP", "score": 0 }],
"checks": [{ "id": "mcp.endpoint.reachable", "status": "FAIL" }],
"requestCount": 11
}Questions
What store owners ask first
What is a shopping agent?
An AI assistant that shops for someone. A person asks for rain boots under $120, and the agent compares stores, builds a cart, and can pay. It doesn't click through your theme. It looks for a few machine-readable files and protocols.
What do MCP, UCP, x402, and MPP mean?
They are layers of the same purchase. MCP is the socket: how an agent finds and calls tools. UCP gives commerce its meaning: product, cart, checkout, order. x402 and MPP move the money.
Can the scanner break something or place an order?
No. A scan makes at most 20 requests, reads at most 256 KiB per response, and never submits forms, logs in, or places orders.
Does blocking AI training crawlers lower my score?
No. Blocking training crawlers like GPTBot is fine and is not penalized. What counts are shopping and search agents, such as ChatGPT-User, Claude-User, and PerplexityBot.
Does it only work on WooCommerce?
The scanner works on any public site served over HTTPS. It gives two scores, agent readiness and commerce readiness, so a SaaS with a good MCP server is not marked as failing because it has no checkout. The plugin starts with WooCommerce.
Why do x402 and MPP say “Not tested”?
Those checks need the address of a paid resource on your own domain. You can send it through the API with paymentProbePaths.
What happens to my report?
It is stored so you can compare scans over time, and anyone with its link can open it. Links are random and not listed anywhere.
What does an agent find at your store?
Find out in about ten seconds.