gymshark.com
Verdict
Agents reached the payment step
- Task
- Buy one item
- Best path
- protocol_ucp
- Verified
- 4 Oct 2026
Agent runs
The last 3 runs, newest first. Agents stop at the payment step and buy nothing. Tiers: T1 real agent, T2 self-hosted, T3 emulated, T4 protocol. What the tiers mean
| Date | Tier | Profile | Network | Outcome | Furthest step | Evidence |
|---|---|---|---|---|---|---|
| 4 Oct 2026 | T3 emulated | consumer-chromeclaude-haiku-4-5 | non-US network (comparison) | Did not reach the payment step | Product found | VideoSigned bundle |
| 4 Oct 2026 | T3 emulated | consumer-chromeclaude-haiku-4-5 | non-US network (comparison) | Did not reach the payment step | Product found | VideoSigned bundle |
| 3 Oct 2026 | T4 protocol | ucp | non-US network (comparison) | Reached the payment step (stopped there) | Checkout reached | VideoSigned bundle |
Static checks
What an agent can read and reach before it starts shopping, from our scan on 3 Oct 2026.
Access
- Met
Home page reachable
HTTP 200
- Met
Agents not blocked
No block or challenge on the home page
- Met
robots.txt present
HTTP 200
- Met
AI agents allowed in robots.txt
No AI user agent is disallowed from /
- Partly met
Content signals declared
No Content-Signal line in robots.txt
How to fix: Add a Content-Signal line to robots.txt stating whether content may be used for search, AI input and AI training.
Discovery
- Met
Sitemap present
/sitemap.xml is valid XML
- Met
llms.txt present
# Agent Instructions — Gymshark US
- Not applicable
Link headers for agents
Not expected for shops
- Partly met
API catalog
/.well-known/api-catalog: HTTP 404
How to fix: Publish an RFC 9727 linkset at /.well-known/api-catalog listing your public APIs.
- Partly met
MCP server card
/.well-known/mcp/server-card.json: HTTP 404
How to fix: Publish an MCP server card at /.well-known/mcp/server-card.json describing your MCP endpoint.
- Partly met
A2A agent card
/.well-known/agent-card.json: HTTP 404
How to fix: Publish an A2A agent card at /.well-known/agent-card.json if you run an agent other agents can call.
- Partly met
Agent skills index
/.well-known/agent-skills/index.json: HTTP 404
How to fix: Publish an agent skills index at /.well-known/agent-skills/index.json listing tasks agents can perform.
- Met
OAuth server metadata
/.well-known/oauth-authorization-server has issuer plus token_endpoint or authorization_endpoint
- Met
OAuth protected resource metadata
/.well-known/oauth-protected-resource has a resource identifier
- Partly met
auth.md
/auth.md: HTTP 404
How to fix: Publish /auth.md explaining in plain text how agents authenticate to your site or API.
Content
- Met
Markdown on request
Content-Type text/markdown; charset=utf-8
- Not met
Content in server HTML
14 characters of visible text without JavaScript
How to fix: Render page content on the server so agents that do not run JavaScript can read it.
Commerce data
- Not met
Product structured data
No Product JSON-LD on the product or home page
How to fix: Add schema.org Product JSON-LD with name, offers.price, priceCurrency and availability to product pages.
- Not applicable
Offer details complete
No Product JSON-LD to evaluate
- Met
UCP manifest
/.well-known/ucp lists services or capabilities
- Not applicable
Shopify Storefront MCP
Shopify Storefront MCP expected at /api/mcp (verified in protocol run)
- Not met
Shipping and returns policies linked
No link to shipping, returns or refund policy pages on the home page
How to fix: Link shipping, returns and refund policy pages from the home page footer.
Next steps
Something changed?
Ask for a fresh scan. One re-test per site every 24 hours.
Get the full audit
Every agent tier including real consumer agents, a per-agent map of where they stop, and a fix plan.
Get the full auditIs this your site? Claim it
Use an email at gymshark.com. Claimed owners can request re-tests, opt out of testing or stop our emails.