Can an AI agent buy your Shopify product?
The No Hacks agentic commerce check is a free tool for Shopify stores. Paste one product page and it follows the route an AI shopping agent takes to a sale: whether the agent can find the product, understand what it is and what it costs, and buy it. It checks everything an agent needs to buy and stops there: it never places an order or adds anything to a cart, so nothing lands in your store. Each result says who is confirmed to read that signal today. There is no score.
Find
robots.txt for every named AI agent, and Shopify's catalog
Understand
The page before any script runs, its product schema and identifiers, and whether the price agrees everywhere
Buy
Agent checkout through UCP, and the return and shipping terms an agent can state
What this check doesn't look at, and why
No AI shopping agent is confirmed to read the first two, so a missing file there costs you nothing yet. The last two matter, but they cannot be seen from outside your accounts. Protocol files such as ACP, agents.md and A2A cards are covered in the protocols part of your results.
- /.well-known/api-catalog
- A real standard (RFC 9727) for listing a website's APIs. No AI agent is documented as reading it, and most stores have no public API to list.
- llms.txt
- Ahrefs checked server logs across 137,000 domains: 97% of llms.txt files got zero requests in a month, and SEO audit tools were among the most frequent readers of the rest. Podcast episode 229: Does llms.txt work?.
- Product feeds
- OpenAI, Google and Microsoft do read the product feeds stores send them, but none of them offers a public way to see whether a store's feed is live. Check it in your accounts: Google Merchant Center, the OpenAI merchant portal, and in Shopify, Sales channels > Agentic.
- CDN and firewall bot rules
- Many stores block or challenge bots at the CDN or firewall, before robots.txt matters. Those rules cannot be seen from outside. Your CDN or hosting dashboard shows them.
The check reads what is public: the product page you paste, robots.txt, your policy pages and well-known files, and for Shopify stores, Shopify's catalog and your store's agent API. It only reads: every request identifies itself as NoHacksStoreCheck, and it never adds anything to a cart. For the full picture of how AI agents find, choose and buy from stores, read the agentic commerce guide.