Agent Check

Measured 2026-09-16 · public surface only

Can an AI agent buy from Narvar?

55/100

An assistant stops at: read the catalog → find a machine price → buy without a human → pay as a machine

Verdict: early — 7 failing checks out of 13 we run.

The six gates, as an agent walks them

GateResultEvidence
discover itpassespresent, 7780 bytes
read the catalogan agent stops heremissing (HTTP 404)
get past robots.txtpassesno named AI agent blocked (0 restricted by path)
find a machine pricealso failsno /pricing page found
buy without a humanalso failspurchase path gated by: Sign up, Contact sales
pay as a machinealso fails/api returned HTTP 404, no 402 challenge

What would close it

Failing checkWhat we measuredThe fix
llms-full.txt (bulk docs for models)missing (HTTP 404)Publish `llms-full.txt` with the full documentation inlined for large-context models.
Agent surfaces publishedno agent card, MCP descriptor or payment manifest at /.well-known/*Publish an A2A agent card and an MCP descriptor under `/.well-known/`.
Pricing published for machinesno /pricing page foundPublish machine-readable pricing that needs no session to read.
Agent payment protocol referencedx402 / ACP / MPP / AP2 never mentionedDocument the payment protocols you accept (x402, ACP, MPP, AP2).
Purchase possible with no human signuppurchase path gated by: Sign up, Contact salesAdd a paid path that needs no account — an HTTP 402 challenge the agent can settle.
Machine-native payment challenge (HTTP 402)/api returned HTTP 404, no 402 challengeReturn HTTP 402 with a payment challenge instead of a signup wall — this is the one nobody has.

Why this matters

We audited 206 companies the way an assistant reads them. None can accept payment from a machine, and this one is no exception: the documentation checks are widely passed, the payment checks are almost universally failed. Discovery earns nothing on its own — the money is in the last gate.

The full report, method and raw data →

Get the same measurement for your domain

Free, ten seconds, no signup — and the score is public either way.

Run an audit

For the record