Why it matters
Every captcha on a form an agent was about to submit is a booking you did not get, and you never see it happen.
No captcha blocking the last step
6 points
What we check. reCAPTCHA, hCaptcha, Turnstile and others. An agent that has done everything right still cannot submit.
How to fix it. Keep the captcha for anonymous spam if you need it, but give verified agents a path that does not require solving it, such as a WebMCP tool that submits through your own validated endpoint.
Public information stays public
3 points
What we check. Whether a login wall sits in front of what you offer.
How to fix it. Let prices, services and availability be read without an account. Gate the transaction, not the shop window. Where a page really is account only, publish OAuth discovery, so a customer can let their agent in.
Second request still works
3 points
What we check. We ask twice. Comparing three products is three requests, which is shopping, not an attack.
How to fix it. Raise the rate limit for verified AI agents. Comparing three products is three requests, which is shopping, not an attack.
Few third party frames in the way
3 points
What we check. Each embedded window is a place an agent can lose the thread.
How to fix it. Reduce the embedded windows on your conversion pages, or mirror what they do as a tool on your own domain.
See how your site does.
A free scan takes about a minute and shows the evidence for every check.
Other areas: Reach · Comprehend · Act · Delegate · Accurate · Locations · Commerce · How the score works