No Hacks
NO HACKS
No Hacks

What can AI shopping agents read on your store?

The No Hacks store check is a free tool that looks at an online store the way AI shopping agents do. In a few seconds it checks which AI agents your robots.txt lets in, whether your sitemap lists product pages, whether a product's name, price and stock are in the HTML without JavaScript, whether the page carries Product and Offer schema, whether your store publishes a UCP profile and, on Shopify, whether Shopify's catalog returns your products. Each result says who is confirmed to read that thing today, so you can see what is worth fixing and what nothing reads yet. There is no score.

To check one product page, paste its address instead of the homepage.

Slobodan "Sani" Manic

A copy of your results is emailed to you, and to me. Nothing else is saved, and your results are never shared or used in an article. You are not signed up to anything.

Sani

Slobodan Manic, No Hacks

What this check doesn't look at, and why

No AI shopping agent is confirmed to read the first five today, so a missing file there costs you nothing yet. The last two matter, but they cannot be seen from outside your own accounts.

/.well-known/acp.json
Part of the Agentic Commerce Protocol from OpenAI and Stripe. No AI product is documented as fetching it, and ChatGPT onboards merchants by application.
/.well-known/mcp/server-card.json
The final MCP Server Card design (October 2026) moved away from this path. Its replacement has no confirmed reader either.
/.well-known/api-catalog
A real standard (RFC 9727) for listing a website’s APIs. No AI agent is documented as reading it, and most stores have no public API to list.
/.well-known/agent-card.json
An A2A card for an AI agent your website runs. No shopping agent is documented as reading merchants’ agent cards. You only need one if you run your own agent.
llms.txt
Ahrefs checked server logs across 137,000 domains: 97% of llms.txt files got zero requests in a month, and SEO audit tools were among the most frequent readers of the rest. Podcast episode 229: Does llms.txt work?.
Product feeds
OpenAI, Google and Microsoft do read the product feeds stores send them, but none of them offers a public way to see whether a store’s feed is live. Check it in your own accounts: Google Merchant Center, the OpenAI merchant portal, and in Shopify, Sales channels > Agentic.
CDN and firewall bot rules
Many stores block or challenge bots at the CDN or firewall, before robots.txt matters. Those rules cannot be seen from outside. Your CDN or hosting dashboard shows them.

The check looks at what is public: robots.txt, the sitemap, one product page, /.well-known/ucp and, for Shopify stores, Shopify's catalog. Each request is a single GET that identifies itself as NoHacksStoreCheck. For the full picture of how AI agents find, choose and buy from stores, read the agentic commerce guide.