AI commerce evidence audit

Find the gaps before AI shoppers do.

Run a free scan of the public evidence an agent can actually retrieve. Then get a fixed-scope evidence map and three prioritized repairs for catalogs, policies, checkout, payments, and attribution.

Public-firstuse current externally readable evidence before requesting deeper access
Fail closedunknown evidence never becomes permission or success
Actionablethree repairs, retest steps, and residual unknowns

One audit. Three decisions.

Built for merchants and agencies that need to know what an AI agent can discover, what it may attempt, and what evidence actually proves commercial impact.

01 / FIND

Discovery and catalog truth

Inspect public agent instructions, robots policy, structured profiles, product identity, price scope, freshness, route availability, and the audience, use-case, differentiation, and value evidence an agent needs to make a recommendation.

02 / BOUND

Policy and authority

Separate technical capability from agent identity, customer-account ownership, delegated scopes, connector-specific access, buyer approval, publish/send/spend approval, rail-specific budget enforcement and revocation, provider automation and human-presence rules, policy effective dates, qualified review and disclosure duties, physical-action stop controls, AI-plan or credit consent, vendor fees, data sharing, payment authorization, replay-safe receipts, and intent-to-effect consistency.

03 / PROVE

Attribution and revenue

Distinguish paid placement, affiliate influence, sponsorship disclosure, recommendation independence, ad clicks, conversion data, incremental lift, cart readiness, completed checkout, delivery, settlement, reversals, costs, and collected net revenue.

Live product

See what an agent can read right now.

The scanner checks a bounded set of public HTTPS surfaces: the homepage, structured offer evidence, policy links, robots rules, llms.txt, and a UCP discovery profile. It does not log in, transact, bypass access controls, or store the report.

Agent-callable: discovery is published at /.well-known/ucp and /.well-known/agent-card.json; MCP tools are served from /mcp.

No signup. No result storage.

Check your exposure in 60 seconds.

Answer fourteen questions using current, independently readable evidence. “Unsure” counts as a gap because an agent cannot safely infer what your systems do not prove.

1. Are product IDs, prices, availability, and canonical URLs current and consistent?
2. Can an agent retrieve current evidence for each product’s intended audience, use cases, differentiators, and value—not just its SKU and price?
3. Can an outside reviewer identify which AI discovery surfaces you support?
4. Do robots, agent instructions, terms, and route-specific policies agree?
5. For agent actions, can you separately prove caller identity, customer-account ownership, delegated scopes, and a replay-safe action receipt?
6. Can you prove the authorized intent remains bound to the resulting order, fulfillment, settlement, and reversals across every actor and stage?
7. If you use AI-native advertising, can you separately verify conversion-data provenance, click attribution, and incremental lift?
8. If customers can use an AI plan or credits inside your app, are consent, usage caps, vendor fees, and data sharing independently documented?
9. Do current provider terms explicitly permit your automation, resale, account model, and human-presence assumptions?
10. For provider-covered high-risk decisions or physical actions, can you prove the effective policy version, qualified human review, AI disclosure, and observable stop or safe-state controls?
11. If a business agent connects to storefront, finance, advertising, or customer systems, can you prove connector-specific scopes, data-use boundaries, and human approval before it publishes, sends, or spends?
12. For every payment rail and fallback path, are amount, merchant, expiry, and revocation limits enforced outside the agent and independently testable?
13. Can you independently connect order, delivery, attribution, and settlement?
14. If recommendations or sponsored-agent conversations can generate ad or affiliate revenue, can you independently prove recommendation independence, clear sponsorship disclosure, conversation-data boundaries, and handoff attribution?

Evidence, not theater.

The audit records what was checked, what the evidence supports, what remains unknown, and the smallest repair that can be independently retested.

merchant: Glossier
surfaces: legal terms + robots/agent route
classification:
SPECIFIC_ROUTE_AMBIGUITY_
REQUIRES_MERCHANT_CLARIFICATION

repair:
Publish one current route-specific statement naming allowed capabilities, buyer-approval boundaries, precedence, and effective version.
BOUNDARIES

The sample does not claim

  • which public policy surface has legal priority
  • that checkout or payment is authorized
  • that a merchant defect caused customer loss
  • that an integration produced revenue

Request a business audit.

This form is the dedicated business channel for the offer. It does not use personal email, phone, profiles, contacts, referrals, or advertising audiences.

Submit a business-channel address. Personal-contact provenance does not authorize outreach.

Submitted details are stored privately for scope review. No automatic reply, mailing list, ad audience, or third-party lead export is created. Any reply is limited to this request and remains blocked until business provenance is verified.

Focused audits for live agent channels.

Choose the surface where access, authority, or attribution is most likely to fail first.

ACCESS

AI Agent Access Compatibility

Map what outside agents may discover, compare, place in a cart, purchase, or support—and make blocks and approvals explicit.

ENTERPRISE

Enterprise Agent Governance

Test persistent jobs, event triggers, sub-agent identities, connector writes, memory, cost controls, checkpoints, and rollback.

SPONSORSHIP

Sponsored-Agent Readiness

Verify recommendation independence, disclosure, conversation-data boundaries, and handoff attribution.

HOSPITALITY

Hospitality AI Transactions

Check property truth, booking identity, rate and fee transparency, guest-service authority, and completion receipts.