The Index › Commerce platform › shopify.com
B
Shopifyshopify.com
70/ 100 · Agentic Usability Score
Muse
Meta
?UntestedChatGPT Agent
OpenAI
✓AllowedClaude
Anthropic
✓AllowedComet
Perplexity
✓AllowedGrok Bot
xAI
◌Not disallowedGemini
Google
✓AllowedManus
Manus
◌Not disallowedInstinct
Spear Street
?UntestedScore breakdown
Five pillars. Task completion is pending until the live task runner ships; the other four are rescaled to 100.
Accessrobots.txt stance + live door test
40/40
Consent & identity pathContent-Signal, published agent policy
0/10
Machine-readable surfacellms.txt, JSON-LD, landmarks, SSR
23/25
Agent protocolsUCP, MCP, A2A, OpenAPI
0/15
Task completionlive agent run: search → cart → checkout
pending
Evidence
Generated by the scanner from this run. Every line is reproducible with the open-source probe.
- ✓Homepage serves a normal page to ChatGPT-User, Claude-User, Perplexity-User and GoogleAgent-Mariner
- ✓robots.txt has no rule against any user-directed agent we test
- ◐No Content-Signal in robots.txt
- ✓Publishes llms.txt
- ✓Homepage carries 1 JSON-LD block
- ✓Semantic landmarks present (main, nav)
- ◐No agent-protocol manifest (UCP, MCP, A2A, OpenAPI)
| Identified as | HTTP | Result |
|---|---|---|
ChatGPT-User | 200 | normal page |
Claude-User | 200 | normal page |
Perplexity-User | 200 | normal page |
GoogleAgent-Mariner | 200 | normal page |
browser (human) | 200 | normal page |
What Shopify would need to change
1Give agents a front doorProtocols · up to 12 pts
A Universal Commerce Protocol manifest for shopping, or an MCP server card for everything else. An agent that can call an API never needs to hold a customer's password.
GET /.well-known/ucp
{ "ucp": { "version": "2026-01-23",
"services": { "dev.ucp.shopping": [{ "transport": "rest", "endpoint": "https://www.shopify.com/api/ucp/v1" }] },
"capabilities": { "dev.ucp.shopping.checkout": [ … ] } } }
# or
GET /.well-known/mcp.json
{ "name": "Shopify", "endpoint": "https://www.shopify.com/mcp", "transport": "streamable-http" }2Say your stance with a Content-SignalConsent · up to 3 pts
Two lines in robots.txt end the guessing game. ai-input covers agents reading pages on a person's behalf.
User-Agent: * Content-Signal: search=yes, ai-input=yes, ai-train=no Allow: /