glossier.com

Agents will struggle with significant parts of this site.

Partial results

Our scanner was blocked by this site's bot protection. Results are partial and the real score may be higher.

Note: real AI agents likely get blocked too.

Needs work (4)

MCP server card Needs work

GET /.well-known/mcp.json returned 404

An MCP server card at a well-known location lets agents discover tool/action interfaces automatically.

Publish an MCP server descriptor at /.well-known/mcp.json describing available tools and endpoints.

.well-known/verified.md Needs work

GET /.well-known/verified.md returned 404

Publishing /.well-known/verified.md is the strongest first-party signal that a site actively participates in agent-readiness self-attestation.

Publish a markdown file at /.well-known/verified.md describing your entity for verified.md self-verification.

x402 payments (experimental) Needs work

no x402 signals detected (probed /api paths, headers, agents.md)

x402 is an emerging standard for agent-native micropayments over HTTP 402. Early support signals forward-looking infrastructure.

Consider returning 402 Payment Required with X-Payment headers on metered API routes, or mention x402 support in agents.md.

Bot access Needs work

homepage returned 200 but body looks like a bot-challenge page

If the homepage returns a 403 or a challenge page to a scanner-style user agent, real agents likely get blocked too.

Allow the scanner's user agent (and known AI crawlers) through any bot-protection layer (WAF, Cloudflare challenge, etc.).

Passed (6)

agents.md Pass

/agents.md is reachable and looks like markdown

agents.md is the primary self-description file AI agents look for when deciding how to interact with a site.

llms.txt Pass

/llms.txt is reachable and looks like markdown

llms.txt is the emerging convention for pointing LLMs at the most relevant content on a site.

llms-full.txt Pass

/llms-full.txt is reachable and looks like markdown

llms-full.txt provides an extended, unabridged version of llms.txt for agents that can handle more context.

robots.txt AI access Pass

robots.txt does not block crawlers; no explicit AI-crawler directives found

robots.txt controls whether AI crawlers (GPTBot, ClaudeBot, PerplexityBot, Google-Extended) can access your site at all.

sitemap.xml Pass

/sitemap.xml is reachable and looks like a sitemap

A sitemap helps agents discover the full set of pages worth crawling or indexing.

HTTPS + redirect Pass

HTTPS reachable and HTTP redirects to HTTPS

Agents should reach the site over HTTPS, and plain HTTP should redirect there so credentials and payloads are never sent in the clear.

Could not evaluate (4)

Content negotiation Could not evaluate

Could not evaluate: the homepage was blocked by bot protection

Structured data (JSON-LD) Could not evaluate

Could not evaluate: the homepage was blocked by bot protection

Meta hygiene Could not evaluate

Could not evaluate: the homepage was blocked by bot protection

Content readability Could not evaluate

Could not evaluate: the homepage was blocked by bot protection

What this means for glossier.com

Your bot protection is turning AI agents away at the door. Nothing else on this list matters until they can get in.
Agents can read glossier.com but cannot interact with it. To them you are a brochure, not a service.
Nothing proves glossier.com is who it says it is, so an agent has no way to tell you apart from an impersonator.
When agent checkout arrives, your store cannot take the payment. The buyer's agent moves on to a store that can.

Detected platform: Shopify

Make glossier.com agent ready

Displace implements every failing check above and re-verifies monthly. Beta rate EUR 990 flat (list EUR 1,900), first 10 sites only, includes the first 3 months of certification.

Or email hello@verified.md.