{"found":true,"method":"v0.1","host":"www.nytimes.com","input_host":"www.nytimes.com","name":"NY Times","category":"Social & media","scanned_at":"2026-09-22T03:48:03.796Z","vantage":"local-node","elapsed_ms":284,"score":22,"grade":"F","stance":"Walled","pillars":{"access":17,"consent":0,"surface":3,"protocols":0,"task":null},"pillar_max":{"access":40,"consent":10,"surface":25,"protocols":15,"task":10},"evidence":[{"t":"critical","text":"robots.txt disallows 6 of 19 user-directed agents: ChatGPT-User, Claude-User, Perplexity-User, Meta-ExternalFetcher, meta-externalfetcher, DuckAssistBot"},{"t":"critical","text":"Homepage returns a bot interstitial (HTTP 403, “nytimes.com”) to every non-browser client, agents included"},{"t":"warn","text":"robots.txt names 66 user-agents"},{"t":"warn","text":"Also disallows 13 of 15 training/search crawlers (not scored; agents ≠ crawlers)"},{"t":"warn","text":"No Content-Signal in robots.txt"},{"t":"warn","text":"No llms.txt"},{"t":"warn","text":"No agent-protocol manifest (UCP, MCP, A2A, OpenAPI)"}],"matrix":{"Muse":"untested","ChatGPT Agent":"disallowed","Claude":"disallowed","Comet":"disallowed","Grok Bot":"allowed-robots","Gemini":"walled","Manus":"allowed-robots","Instinct":"untested"},"files":[],"jsonld":0,"semantic":{"main":0,"nav":0,"aria":0,"forms":0},"noscript_shell":false,"content_signal":false,"wildcard_block":false,"robots_status":200,"robots_ua_rules":66,"agents_disallowed":6,"agents_partial":0,"agents_total":19,"crawlers_blocked":13,"crawlers_total":15,"ua_policy":{"ChatGPT-User":"blocked","Claude-User":"blocked","Perplexity-User":"blocked","GoogleAgent-Mariner":"unlisted","GoogleAgent-Shopping":"unlisted","Manus-User":"unlisted","MistralAI-User":"unlisted","Devin":"unlisted","Copilot":"unlisted","GrokBot":"unlisted","Grok-DeepSearch":"unlisted","Meta-ExternalFetcher":"blocked","meta-externalfetcher":"blocked","Gemini-Deep-Research":"unlisted","DuckAssistBot":"blocked","Operator":"unlisted","Comet":"unlisted","Muse":"unlisted","Instinct":"unlisted"},"crawler_policy":{"GPTBot":"blocked","ClaudeBot":"blocked","Claude-SearchBot":"blocked","OAI-SearchBot":"blocked","PerplexityBot":"blocked","Google-Extended":"blocked","Applebot-Extended":"blocked","meta-externalagent":"blocked","Meta-ExternalAgent":"blocked","Bytespider":"blocked","CCBot":"blocked","Amazonbot":"partial","xAI-Bot":"unlisted","Anthropic-ai":"blocked","anthropic-ai":"blocked"},"live_served":0,"live_total":4,"agent_access":{"ChatGPT-User":{"status":403,"challenged":true,"title":"Not Authorized - The New York Times"},"Claude-User":{"status":403,"challenged":true,"title":"Not Authorized - The New York Times"},"Perplexity-User":{"status":403,"challenged":true,"title":"Not Authorized - The New York Times"},"GoogleAgent-Mariner":{"status":403,"challenged":true,"title":"nytimes.com"}},"human_status":403,"human_title":"nytimes.com","human_challenged":true,"edge":"DataDome fastly datadome","probe_dead":false,"seed":true,"url":"https://standardweb.xyz/site/www.nytimes.com","recommendations":[{"k":"wba","pillar":"Access","pts":23,"title":"Verify agents cryptographically instead of blocking them at the door","body":"Your edge answers ChatGPT-User, Claude-User, Perplexity-User, GoogleAgent-Mariner with a block or interstitial. Web Bot Auth (HTTP Message Signatures, RFC 9421) lets an agent prove who it is per request; Cloudflare, Akamai, AWS WAF and Vercel can verify it. Allow verified agents and keep challenging the rest.","code":"# Cloudflare: Security → Bots → Verified bots → allow category \"AI Agent\"\n# Or verify yourself: fetch the agent's key from\n#   https://<signature-agent>/.well-known/http-message-signatures-directory\n# and check the Signature / Signature-Input headers (tag=\"web-bot-auth\")"},{"k":"front-door","pillar":"Protocols","pts":12,"title":"Give agents a front door","body":"A Universal Commerce Protocol manifest for shopping, or an MCP server card for everything else. An agent that can call an API never needs to hold a customer's password.","code":"GET /.well-known/ucp\n{ \"ucp\": { \"version\": \"2026-01-23\",\n  \"services\": { \"dev.ucp.shopping\": [{ \"transport\": \"rest\", \"endpoint\": \"https://www.nytimes.com/api/ucp/v1\" }] },\n  \"capabilities\": { \"dev.ucp.shopping.checkout\": [ … ] } } }\n\n# or\nGET /.well-known/mcp.json\n{ \"name\": \"NY Times\", \"endpoint\": \"https://www.nytimes.com/mcp\", \"transport\": \"streamable-http\" }"},{"k":"llms","pillar":"Surface","pts":8,"title":"Publish llms.txt","body":"A short markdown map of what the site does, where the important pages are, and how to search or check out.","code":"/llms.txt\n# NY Times\n> One paragraph on what this site is for.\n- [Products](/products): how to search and filter\n- [Checkout](/checkout): steps and constraints"},{"k":"robots","pillar":"Access","pts":5,"title":"Stop disallowing identified user-directed agents in robots.txt","body":"You disallow 6 agents that act live for a person. Crawler rules (GPTBot, ClaudeBot) can stay; user-directed agents are the ones a customer sends.","code":"User-agent: ChatGPT-User\nUser-agent: Claude-User\nUser-agent: Perplexity-User\nUser-agent: Meta-ExternalFetcher\nUser-agent: meta-externalfetcher\nUser-agent: DuckAssistBot\nAllow: /"},{"k":"signal","pillar":"Consent","pts":3,"title":"Say your stance with a Content-Signal","body":"Two lines in robots.txt end the guessing game. ai-input covers agents reading pages on a person's behalf.","code":"User-Agent: *\nContent-Signal: search=yes, ai-input=yes, ai-train=no\nAllow: /"}]}