{"slug":"shopify","name":"Shopify","domain":"shopify.com","category":{"slug":"ecommerce-d2c","name":"E-commerce / D2C Retail"},"usageMode":"integrated","score":69,"scoreLow":38,"scoreHigh":88,"unassessed":["email_otp","sms_otp","phone_verification_call","mailed_physical_code","contact_sales_wall","manual_approval_queue","rate_limit_manual_review","account_payment_provisioning","kyc_identity_verification","crypto_wallet_custody_setup"],"propertyStates":{"sms_otp":"unassessed","email_otp":"unassessed","tos_bot_ban":"success","captcha_challenge":"failed","contact_sales_wall":"unassessed","sso_only_no_api_key":"success","mailed_physical_code":"unassessed","no_machine_interface":"success","manual_approval_queue":"unassessed","phone_verification_call":"unassessed","redirect_to_vendor_site":"success","rate_limit_manual_review":"unassessed","kyc_identity_verification":"unassessed","crypto_wallet_custody_setup":"unassessed","account_payment_provisioning":"unassessed"},"badge":"MODERATE_INTERRUPT","machineReadabilityScore":43.75,"compositeScore":56,"custodyRiskFlag":"unknown","confidenceLabel":"PROVISIONAL","lastProbedAt":"2026-08-09T23:51:12.945Z","status":"active","homepageUrl":"https://www.shopify.com","description":"E-commerce platform powering 1M+ merchants rolling out ACP","machineReadabilityBreakdown":[{"id":"llms_txt","label":"llms.txt","status":"pass","evidence":"https://www.shopify.com/llms.txt (12.2 KB, 74 links)"},{"id":"llms_full_txt","label":"llms-full.txt","status":"pass","evidence":"https://www.shopify.com/llms-full.txt (18.4 KB, 109 links)"},{"id":"agents_md","label":"AGENTS.md","status":"fail"},{"id":"agent_card","label":"A2A agent card","status":"fail"},{"id":"mcp_server","label":"MCP server (well-known or official registry)","status":"fail","evidence":"no /.well-known/mcp.json and no match in the official MCP registry"},{"id":"openapi_spec","label":"OpenAPI/Swagger spec","status":"fail"},{"id":"rate_limit_headers","label":"Rate-limit headers","status":"fail"},{"id":"structured_errors","label":"Structured JSON error responses","status":"fail","evidence":"sampled 9 error response(s); none returned structured JSON"},{"id":"oauth_metadata","label":"OAuth authorization-server metadata (RFC 8414)","status":"pass","evidence":"https://api.shopify.com/.well-known/oauth-authorization-server"},{"id":"api_catalog","label":"API catalog (RFC 9727) (emerging)","status":"fail"},{"id":"payment_protocol","label":"Agent-payment discovery (x402 / UCP) (emerging)","status":"fail"},{"id":"page_byte_weight","label":"Lean HTML transfer size","status":"pass","evidence":"413 KB raw HTML (threshold 488 KB)"},{"id":"dom_node_count","label":"Manageable DOM size","status":"fail","evidence":"2246 DOM nodes (threshold 1500)"},{"id":"content_density","label":"High content-to-markup density","status":"fail","evidence":"1.7% text/HTML (7120 chars in 413 KB, threshold 2%)"},{"id":"js_dependence","label":"Content readable without JS execution","status":"pass","evidence":"raw HTML holds 141% of rendered text (7120 vs 5034 chars; threshold 40%)"},{"id":"clean_content_path","label":"Clean-content alternate (RSS/Atom/feed/markdown)","status":"fail","evidence":"no <link rel=alternate> feed/markdown variant"},{"id":"markdown_content","label":"Serves markdown on Accept: text/markdown","status":"fail","evidence":"returned text/html; charset=utf-8 (not markdown)"},{"id":"semantic_interactive","label":"Interactive elements are semantic","status":"fail","evidence":"326/342 semantic (95%); 16 div/span click targets"},{"id":"form_field_names","label":"Form fields have accessible names","status":"pass","evidence":"3/3 named (100%)"},{"id":"input_autocomplete","label":"Inputs carry autocomplete hints","status":"not_checked","evidence":"no autocomplete-eligible inputs"},{"id":"webmcp","label":"WebMCP tools (modelContext API)","status":"fail","evidence":"no document/navigator.modelContext tool registration observed"},{"id":"retrieval_bot_access","label":"AI retrieval/search fetchers allowed (robots.txt)","status":"pass","evidence":"no retrieval-fetcher blocks in robots.txt"},{"id":"sitemap_xml","label":"Sitemap (indexability)","status":"pass","evidence":"https://www.shopify.com/sitemaps_list.xml"},{"id":"schema_org_jsonld","label":"schema.org JSON-LD in raw HTML","status":"pass","evidence":"1 valid JSON-LD block(s) in raw (pre-JS) HTML"},{"id":"content_signals","label":"Content-Signal directives (robots.txt)","status":"fail","evidence":"no Content-Signal lines in robots.txt"},{"id":"web_bot_auth","label":"Web Bot Auth key directory (emerging)","status":"fail"},{"id":"link_header_discovery","label":"Discovery Link headers on homepage (emerging)","status":"fail","evidence":"no Link header on the homepage response"},{"id":"robots_ai_crawlers","label":"robots.txt AI-crawler access","status":"pass","evidence":"no AI-crawler blocks in robots.txt"},{"id":"unauthed_api_error_shape","label":"Unauthenticated API error is structured JSON","status":"fail","evidence":"https://api.shopify.com/ (HTTP 404)"},{"id":"unauthed_api_auth_guidance","label":"Unauthenticated API returns auth guidance (401/403 or documented)","status":"fail","evidence":"https://api.shopify.com/ (HTTP 404)"},{"id":"unauthed_api_rate_limit","label":"API exposes rate-limit headers","status":"fail","evidence":"no RateLimit-* / X-RateLimit-* headers on the sampled response"},{"id":"api_key_self_serve","label":"API key obtainable without human interaction","status":"pass","evidence":"API documentation host reachable: https://developer.shopify.com/"}],"confidence":0.55,"rubricVersion":"rubric@2026.4","tiersTested":{"tier0":true,"tier1":true,"tier2":false,"tier2Complete":false},"flags":{"tosBan":false,"hardBlocker":true,"contactSalesOnly":false,"perTxnHardBlocker":false},"scoreHistory":[{"score":69,"badge":"MODERATE_INTERRUPT","confidenceLabel":"PROVISIONAL","rubricVersion":"rubric@2026.4","isCurrent":true,"createdAt":"2026-08-09T23:51:12.958Z"},{"score":51,"badge":"MODERATE_INTERRUPT","confidenceLabel":"PROVISIONAL","rubricVersion":"rubric@2026.4","isCurrent":false,"createdAt":"2026-08-09T23:51:11.150Z"},{"score":51,"badge":"MODERATE_INTERRUPT","confidenceLabel":"PROVISIONAL","rubricVersion":"rubric@2026.4","isCurrent":false,"createdAt":"2026-08-09T22:53:11.265Z"},{"score":0,"badge":"BLOCKED","confidenceLabel":"PROVISIONAL","rubricVersion":"rubric@2026.4","isCurrent":false,"createdAt":"2026-08-09T17:13:21.578Z"},{"score":0,"badge":"BLOCKED","confidenceLabel":"PROVISIONAL","rubricVersion":"rubric@2026.3","isCurrent":false,"createdAt":"2026-08-09T07:23:36.940Z"},{"score":0,"badge":"BLOCKED","confidenceLabel":"PROVISIONAL","rubricVersion":"rubric@2026.3","isCurrent":false,"createdAt":"2026-08-09T05:27:58.049Z"},{"score":0,"badge":"BLOCKED","confidenceLabel":"PROVISIONAL","rubricVersion":"rubric@2026.3","isCurrent":false,"createdAt":"2026-08-09T05:27:57.390Z"},{"score":88,"badge":"LOW_INTERRUPT","confidenceLabel":"PROVISIONAL","rubricVersion":"rubric@2026.3","isCurrent":false,"createdAt":"2026-08-09T03:14:06.341Z"},{"score":88,"badge":"LOW_INTERRUPT","confidenceLabel":"PROVISIONAL","rubricVersion":"rubric@2026.2","isCurrent":false,"createdAt":"2026-08-09T01:50:28.524Z"},{"score":88,"badge":"LOW_INTERRUPT","confidenceLabel":"PROVISIONAL","rubricVersion":"rubric@2026.2","isCurrent":false,"createdAt":"2026-08-09T01:45:29.857Z"},{"score":100,"badge":"LOW_INTERRUPT","confidenceLabel":"PROVISIONAL","rubricVersion":"rubric@2026.1","isCurrent":false,"createdAt":"2026-07-10T07:18:41.029Z"}],"findings":[{"interruptType":"captcha_challenge","tier":1,"timing":"setup","hardness":"hard","flowLocation":"signup","description":"Signup page embeds a turnstile CAPTCHA/bot-challenge (matched: script[src*=\"turnstile\"]).","provenance":null,"rawSignal":{"vendor":"turnstile","detected":true,"signupUrl":"https://admin.shopify.com/signup?locale=en&language=en&signup_page=https%3A%2F%2Fwww.shopify.com%2F&signup_types%5B%5D=paid_trial_experience","matchedSignal":"script[src*=\"turnstile\"]"},"detectedAt":"2026-08-09T23:51:12.943Z"}]}