gamestop.com

https://gamestop.com/

Commerce site · Static audit

The static audit found gaps. Start with the fixes below.

Pass starts at 80 / 100. This scan does not prove that an agent can complete a purchase. Method and limits

51/ 100

NEEDS WORK

Core coverage: 80.7% of core weight verified
Score model: v27Versioned criteria

Scanned 2026-09-30 19:02:39 UTC

What to fix first

Start with these changes. Open a fix for the finding, example, and supporting evidence.

5 priority changes

1
Make crawler access explicit
+13.5 points estimated
Review the recorded robots rule and access response. Permit public content for the clients you support.

robots.txt AI crawler policy robots.txt agent-user policy Redirect hygiene
Starting example
```
User-agent: AgentReadiness
Allow: /

Sitemap: https://example.com/sitemap.xml
```
View findings and full example

Suggested location: /robots.txt
- robots.txt AI crawler policy
  
  Finding: robots.txt has no explicit policy for known AI crawler tokens.
  
  Change: Publish explicit retrieval and training crawler groups in robots.txt.
  Open this check and its evidence
- robots.txt agent-user policy
  
  Finding: robots.txt has no explicit policy for user-directed agent tokens.
  
  Change: Add explicit groups for user-directed agent fetchers.
  Open this check and its evidence
- Redirect hygiene
  
  Finding: The target uses 1 redirect(s), including 1 cross-origin redirect(s).
  
  Change: Use one stable canonical HTTPS URL and keep the chain on the intended origin.
  Open this check and its evidence
Starting example
```
User-agent: AgentReadiness
Allow: /

Sitemap: https://example.com/sitemap.xml
```
Adapt this example to the service. Apply every relevant change listed above, then confirm it with a new scan.
2
Make page controls readable
+8.8 points estimated
Use headings, native controls, and visible labels. Review the recorded control findings.

Accessible document structure Accessible names on controls Form control labeling
Starting example
```
<label for="site">Website URL</label><input id="site" name="url" type="url"><button type="submit">Check site</button>
```
View findings and full example

Suggested location: /
- Accessible document structure
  
  Finding: The document has some semantic structure, but its landmarks or heading order are incomplete.
  
  Change: Use one main region, a navigation landmark, one clear H1, and sequential heading levels.
  Open this check and its evidence
- Accessible names on controls
  
  Finding: 151 of 407 detected controls have no computed source name.
  
  Change: Give every control a stable name that an accessibility client can compute.
  Open this check and its evidence
- Form control labeling
  
  Finding: 1 of 4 form fields do not have an explicit computed label.
  
  Change: Associate each field with a visible label or a valid ARIA labeling relationship.
  Open this check and its evidence
Starting example
```
<label for="site">Website URL</label><input id="site" name="url" type="url"><button type="submit">Check site</button>
```
Adapt this example to the service. Apply every relevant change listed above, then confirm it with a new scan.
3
Declare discovery links in the response
+5.8 points estimated
Link only resources that the service provides. Use a Link header to identify the API description.

HTTP Link header discovery
Starting example
```
Link: </openapi.json>; rel="service-desc"; type="application/json"
```
View findings and full example

Suggested location: Main page response headers
- HTTP Link header discovery
  
  Finding: The final response has no HTTP Link header.
  
  Change: Add HTTP Link relations for important machine-readable discovery resources.
  Open this check and its evidence
Starting example
```
Link: </openapi.json>; rel="service-desc"; type="application/json"
```
Adapt this example to the service. Apply every relevant change listed above, then confirm it with a new scan.

2 more priority changes

4
Return a useful missing-page response
+3.5 points estimated
Return HTTP 404 with a clear message and links to public resources.

Agent-friendly 404 responses
Starting example
```
HTTP/1.1 404 Not Found
Content-Type: text/html

<main><h1>Page not found</h1><a href="/">Home</a><a href="/docs">Documentation</a></main>
```
View findings and full example

Suggested location: A missing public page
- Agent-friendly 404 responses
  
  Finding: The missing-path probe does not return 404 or 410.
  
  Change: Return a real 404 or 410 instead of a 200 application shell for unknown paths.
  Open this check and its evidence
Starting example
```
HTTP/1.1 404 Not Found
Content-Type: text/html

<main><h1>Page not found</h1><a href="/">Home</a><a href="/docs">Documentation</a></main>
```
Adapt this example to the service. Apply every relevant change listed above, then confirm it with a new scan.
5
Return useful source HTML
+3.5 points estimated
Put the main text and navigation in the initial HTML response.

Page token budget
Starting example
```
<main><h1>Your product</h1><p>Explain its purpose.</p></main>
```
View findings and full example

Suggested location: /
- Page token budget
  
  Finding: The estimated visible-text size is 129253 tokens.
  
  Change: Keep the main page between 100 and 15,000 estimated visible-text tokens.
  Open this check and its evidence
Starting example
```
<main><h1>Your product</h1><p>Explain its purpose.</p></main>
```
Adapt this example to the service. Apply every relevant change listed above, then confirm it with a new scan.

Estimated gains use this report's model. All checks listed in a fix must pass to earn its full estimated gain.

All checks 124Findings, recommended changes, and score weights

What this scan found

9 checks passed. 31 need attention. 7 could not be verified. Checks that do not apply stay out of the score.

Passed: 9
Needs attention: 31
Could not verify: 7
Not applicable: 77

Capture rules: 19 of 19 complete
HTTP requests: 53
Saved artifacts: 50
Observations: 61

All results

Results that need attention are listed first. Open a row for its reason and recommended change.

001 Accessible names on controls Usability · Recommended · Core Failed 0 of 600

Finding

151 of 407 detected controls have no computed source name.

Recommended change

Give every control a stable name that an accessibility client can compute.

Check ID: ax-accessible-names@1
Supporting evidence: View stored observation

002 Agent Plugins manifest Discovery · Emerging · Informational Failed Info No score effect

Finding

The product page does not advertise a public GitHub source repository.

Recommended change

Link the canonical public GitHub repository from the product page.

Check ID: agent-plugins-repo@1
Supporting evidence: View stored observation

003 Agent Skills index conformance Discovery · Emerging · Informational Failed Info No score effect

Finding

No Agent Skills index was found at the v0.2.0 discovery path.

Recommended change

Publish /.well-known/agent-skills/index.json with the v0.2.0 schema.

Check ID: agent-skills-index-v2@1
Supporting evidence: View stored observation

004 Agent discovery file Discovery · Required · Core Failed 0 of 500

Finding

No Agent Skills index was found at /.well-known/agent-skills/index.json.

Recommended change

Publish an index with a non-empty skills array and a name and description for every skill.

Check ID: agent-discovery-file@1
Supporting evidence: View stored observation

005 Agent mode view Accessibility · Emerging · Informational Failed Info No score effect

Finding

The homepage agent-mode query did not return a dedicated view.

Recommended change

Serve ?mode=agent as JSON, Markdown, or plain text with capability and integration details.

Check ID: agent-mode-view@1
Supporting evidence: View stored observation

006 Agent platform repository configurations Discovery · Emerging · Informational Failed Info No score effect

Finding

The product page does not advertise a public GitHub source repository.

Recommended change

Link the canonical public GitHub repository from the product page.

Check ID: agent-rules-repo@1
Supporting evidence: View stored observation

007 Agent usage instructions Accessibility · Required · Core Failed 0 of 400

Finding

The checked llms.txt and dedicated instruction paths do not explain when an agent should use the product.

Recommended change

Add a specific when-to-use section to llms.txt or a dedicated agent instruction document.

Check ID: agent-instruction@1
Supporting evidence: View stored observation View stored observation

008 Agent-friendly 404 responses Usability · Recommended · Core Failed 0 of 600

Finding

The missing-path probe does not return 404 or 410.

Recommended change

Return a real 404 or 410 instead of a 200 application shell for unknown paths.

Check ID: agent-friendly-404@1
Supporting evidence: View stored observation

009 Agentic resource catalog Discovery · Emerging · Informational Failed Info No score effect

Finding

No usable resource catalog was found at either bounded well-known path.

Recommended change

Publish /.well-known/ard.json or /.well-known/ai-catalog.json.

Check ID: ard-catalog@1
Supporting evidence: View stored observation View stored observation

010 Form control labeling Usability · Recommended · Core Failed 0 of 600

Finding

1 of 4 form fields do not have an explicit computed label.

Recommended change

Associate each field with a visible label or a valid ARIA labeling relationship.

Check ID: ax-form-labeling@1
Supporting evidence: View stored observation

011 HTTP Link header discovery Access · Required · Core Failed 0 of 1000

Finding

The final response has no HTTP Link header.

Recommended change

Add HTTP Link relations for important machine-readable discovery resources.

Check ID: link-headers-discovery@1
Supporting evidence: View stored observation

012 Identified bot Markdown serving Access · Emerging · Informational Failed Info No score effect

Finding

The identified bot request received text/html, not Markdown.

Recommended change

Optionally serve a Markdown representation to the truthful AgentReadinessBot identity.

Check ID: agent-ua-markdown@1
Supporting evidence: View stored observation

013 Markdown URL fallback Access · Emerging · Informational Failed Info No score effect

Finding

The scan did not find a Markdown homepage at /index.md.

Recommended change

Publish a text/markdown homepage at /index.md.

Check ID: markdown-url-fallback@1
Supporting evidence: View stored observation

014 Markdown agent docs Access · Emerging · Informational Failed Info No score effect

Finding

The canonical root did not return Markdown for a Markdown-preferred request.

Recommended change

Implement Accept: text/markdown negotiation or publish a stable Markdown route.

Check ID: markdown-negotiation@1
Supporting evidence: View stored observation

015 Markdown alternate link Access · Emerging · Informational Failed Info No score effect

Finding

The page does not declare a Markdown alternate.

Recommended change

Add a link rel=alternate with type=text/markdown and a stable URL.

Check ID: markdown-link-alternate@1
Supporting evidence: View stored observation

016 Modular llms.txt Accessibility · Emerging · Informational Failed Info No score effect

Finding

No scoped llms.txt file was found at the bounded docs, API, or developers paths.

Recommended change

Publish /docs/llms.txt, /api/llms.txt, or /developers/llms.txt with a focused resource index.

Check ID: modular-llms-txt@1
Supporting evidence: View stored observation

017 NLWeb /ask endpoint Usability · Emerging · Informational Failed Info No score effect

Finding

The /ask route requires credentials for the public discovery query.

Recommended change

Permit a bounded public list query, or publish an explicit public NLWeb access policy.

Check ID: nlweb-ask@1
Supporting evidence: View stored observation

018 NLWeb Schema Map directive Accessibility · Emerging · Informational Failed Info No score effect

Finding

robots.txt does not publish a Schema Map directive.

Recommended change

Add schemamap: followed by the absolute URL of the structured feed map.

Check ID: nlweb-schema-feeds@1
Supporting evidence: View stored observation

019 NLWeb streaming support Usability · Emerging · Informational Failed Info No score effect

Finding

The /ask route requires credentials before streaming can be tested.

Recommended change

Permit a bounded public NLWeb query and its streaming form.

Check ID: nlweb-streaming@1
Supporting evidence: View stored observation

020 Page token budget Access · Recommended · Core Failed 0 of 600

Finding

The estimated visible-text size is 129253 tokens.

Recommended change

Keep the main page between 100 and 15,000 estimated visible-text tokens.

Check ID: page-token-budget@1
Supporting evidence: View stored observation

021 Verified skills.sh listing Discovery · Emerging · Informational Failed Info No score effect

Finding

The product page exposes no direct skills.sh link or verifiable GitHub-owner association for a catalog lookup.

Recommended change

Link the official GitHub organization or exact skills.sh page from the product page or structured sameAs data.

Check ID: skills-sh-listed@1
Supporting evidence: View stored observation

022 Web Bot Auth key directory Usability · Emerging · Informational Failed Info No score effect

Finding

No Web Bot Auth key directory was found at the well-known path.

Recommended change

Publish an Ed25519 JWK keys array with kid, x, nbf, and exp fields.

Check ID: web-bot-auth-directory@1
Supporting evidence: View stored observation

023 WebMCP source declarations Usability · Emerging · Informational Failed Info No score effect

Finding

No server-rendered or inline-script WebMCP declaration was found.

Recommended change

Add declarative form tools or register tools through document.modelContext.

Check ID: webmcp@1
Supporting evidence: View stored observation

024 robots.txt AI crawler policy Discovery · Required · Core Failed 0 of 1000

Finding

robots.txt has no explicit policy for known AI crawler tokens.

Recommended change

Publish explicit retrieval and training crawler groups in robots.txt.

Check ID: robots-ai-policy-quality@1
Supporting evidence: View stored observation

025 robots.txt agent-user policy Access · Required · Core Failed 0 of 1000

Finding

robots.txt has no explicit policy for user-directed agent tokens.

Recommended change

Add explicit groups for user-directed agent fetchers.

Check ID: robots-agent-user-policy@1
Supporting evidence: View stored observation

026 Accessible document structure Usability · Recommended · Core Warning 300 of 600

Finding

The document has some semantic structure, but its landmarks or heading order are incomplete.

Recommended change

Use one main region, a navigation landmark, one clear H1, and sequential heading levels.

Check ID: ax-document-structure@1
Supporting evidence: View stored observation

027 Organization schema completeness Access · Recommended · Core Warning 500 of 600

Finding

The best Organization entity has 5 of 6 fields.

Recommended change

Add name, URL, logo, description, sameAs, and contactPoint fields.

Check ID: org-schema-completeness@1
Supporting evidence: View stored observation

028 Pricing information is accessible Access · Required · Core Warning 500 of 1000

Finding

The page has one pricing signal, but not both visible text and a pricing link.

Recommended change

Add a clear pricing link and plain-language pricing information.

Check ID: pricing-info@1
Supporting evidence: View stored observation View stored observation

029 Redirect hygiene Access · Recommended · Core Warning 300 of 600

Finding

The target uses 1 redirect(s), including 1 cross-origin redirect(s).

Recommended change

Use one stable canonical HTTPS URL and keep the chain on the intended origin.

Check ID: redirect-hygiene@1
Supporting evidence: View stored observation

030 Schema type breadth Access · Recommended · Core Warning 200 of 600

Finding

The page declares only 1 JSON-LD type(s).

Recommended change

Describe the organization, site, and main product with linked schema types.

Check ID: schema-type-breadth@1
Supporting evidence: View stored observation

031 Trust anchor pages Access · Required · Core Warning 500 of 1000

Finding

The page links to only 2 trust-page category or categories.

Recommended change

Link to public about, contact, privacy, terms, and security pages.

Check ID: trust-anchors@1
Supporting evidence: View stored observation

032 Brand name discoverability Discovery · Required · Core Could not verify 0 of 0

Finding

The scan did not collect valid ranked web-search evidence for this query.

Recommended change

Configure the ranked search provider and run capture profile version 26 to collect new evidence.

Check ID: ranked-brand-discoverability@1
Supporting evidence: No linked observation was stored.

033 Category search visibility Discovery · Recommended · Core Could not verify 0 of 0

Finding

The scan did not collect valid ranked web-search evidence for this query.

Recommended change

Configure the ranked search provider and run capture profile version 26 to collect new evidence.

Check ID: ranked-category-visibility@1
Supporting evidence: No linked observation was stored.

034 Pricing Markdown exists Access · Emerging · Informational Could not verify Info No score effect

Finding

The scan could not collect the required discovery evidence.

Recommended change

Run capture profile version 3 and confirm that robots and network access permit this request.

Check ID: pricing-md@1
Supporting evidence: View stored observation

035 Sitemap exists Access · Required · Core Could not verify 0 of 0

Finding

The scan could not collect the required discovery evidence.

Recommended change

Run capture profile version 3 and confirm that robots and network access permit this request.

Check ID: sitemap@1
Supporting evidence: View stored observation

036 Sitemap freshness metadata Access · Recommended · Core Could not verify 0 of 0

Finding

The scan could not collect the required discovery evidence.

Recommended change

Run capture profile version 3 and confirm that robots and network access permit this request.

Check ID: sitemap-lastmod@1
Supporting evidence: View stored observation

037 llms.txt exists Access · Required · Core Could not verify 0 of 0

Finding

The scan could not collect the required discovery evidence.

Recommended change

Run capture profile version 3 and confirm that robots and network access permit this request.

Check ID: llms-txt-exists@1
Supporting evidence: View stored observation

038 llms.txt formatting Access · Recommended · Core Could not verify 0 of 0

Finding

The scan could not collect the required discovery evidence.

Recommended change

Run capture profile version 3 and confirm that robots and network access permit this request.

Check ID: llms-txt-formatting@1
Supporting evidence: View stored observation

039 Accessibility-tree instruction safety Usability · Recommended · Core Passed 600 of 600

Finding

No configured instruction-risk pattern was found in the evaluated hidden accessibility text.

Check ID: ax-tree-injection-safe@1
Supporting evidence: View stored observation

040 Agent crawler reachability Access · Recommended · Core Passed 600 of 600

Finding

robots policy permits all 3 evaluated retrieval crawlers at the root path.

Check ID: agent-crawler-reachability@1
Supporting evidence: View stored observation

041 Content without JavaScript Access · Required · Core Passed 1000 of 1000

Finding

The source HTML has 517009 visible text characters.

Check ID: content-no-js@1
Supporting evidence: View stored observation

042 JSON-LD entity linking Access · Recommended · Core Passed 600 of 600

Finding

JSON-LD has 7 unique sameAs link(s).

Check ID: json-ld-entity-linking@1
Supporting evidence: View stored observation

043 JSON-LD structured data Access · Required · Core Passed 1000 of 1000

Finding

The page has 1 valid JSON-LD block(s).

Check ID: json-ld@1
Supporting evidence: View stored observation

044 Metadata completeness Access · Required · Core Passed 1000 of 1000

Finding

All 9 metadata fields are present.

Check ID: metadata-completeness@1
Supporting evidence: View stored observation

045 Native interactive controls Usability · Recommended · Core Passed 600 of 600

Finding

All 407 detected controls use native HTML semantics.

Check ID: ax-native-controls@1
Supporting evidence: View stored observation

046 Not blocked by bot detection Access · Required · Core Passed 1000 of 1000

Finding

The scanner received the target content without a bot block.

Check ID: bot-detection@1
Supporting evidence: View stored observation

047 Verified Wikidata and English Wikipedia presence Discovery · Recommended · Informational Passed Info No score effect

Finding

Wikidata has a verified entity for the domain and that entity has an English Wikipedia sitelink.

Check ID: wikipedia-presence@1
Supporting evidence: View stored observation

048 A2A Agent Card Access · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: a2a-agent-card@1
Supporting evidence: View stored observation

049 A2UI generative UI support Usability · Emerging · Informational Not applicable Info No score effect

Finding

No inspectable public MCP HTTP endpoint was found.

Check ID: a2ui-support@1
Supporting evidence: No linked observation was stored.

050 ACP checkout protocol Payments · Required · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: acp-support@1
Supporting evidence: No linked observation was stored.

051 ACP delegated payment Payments · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: acp-delegate-payment@1
Supporting evidence: No linked observation was stored.

052 AI Catalog discovery Discovery · Emerging · Informational Not applicable Info No score effect

Finding

The optional AI Catalog alias is not published. Its absence does not reduce the score.

Check ID: ai-catalog-published@1
Supporting evidence: No linked observation was stored.

053 AP2 mandate capability Payments · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: ap2-support@1
Supporting evidence: No linked observation was stored.

054 API catalog Access · Required · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: api-catalog-rfc9727@1
Supporting evidence: View stored observation

055 API schema complexity Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: api-schema-analysis@1
Supporting evidence: No linked observation was stored.

056 Agent auth WWW-Authenticate hint Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: agent-auth-www-authenticate@1
Supporting evidence: No linked observation was stored.

057 Agent auth discovery metadata Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: agent-auth-discovery-metadata@1
Supporting evidence: View stored observation View stored observation

058 Agent auth endpoints respond Usability · Emerging · Informational Not applicable Info No score effect

Finding

No identity, claim, or events endpoint was advertised.

Check ID: agent-auth-endpoints-reachable@1
Supporting evidence: No linked observation was stored.

059 Agent onboarding friction Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: onboarding-friction@1
Supporting evidence: View stored observation View stored observation View stored observation View stored observation View stored observation

060 CLI tool available Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: cli-tool@1
Supporting evidence: View stored observation

061 Developer portal Access · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: developer-portal@1
Supporting evidence: View stored observation

062 Developer resource discoverability Discovery · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: ranked-developer-discoverability@1
Supporting evidence: No linked observation was stored.

063 Function calling compatibility Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: function-calling-compat@1
Supporting evidence: No linked observation was stored.

064 GraphQL asynchronous job pattern Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: graphql-async-job-pattern@1
Supporting evidence: No linked observation was stored.

065 GraphQL batch mutations Usability · Recommended · Informational Not applicable Info No score effect

Finding

The scanner found a protected GraphQL route, but it does not use credentials.

Check ID: graphql-batch-mutations@1
Supporting evidence: No linked observation was stored.

066 GraphQL pagination pattern Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: graphql-pagination-pattern@1
Supporting evidence: No linked observation was stored.

067 GraphQL schema description coverage Usability · Recommended · Informational Not applicable Info No score effect

Finding

The scanner found a protected GraphQL route, but it does not use credentials.

Check ID: graphql-schema-completeness@1
Supporting evidence: No linked observation was stored.

068 GraphQL typed error model Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: graphql-error-type-definition@1
Supporting evidence: No linked observation was stored.

069 GraphQL versioning and deprecation policy Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: graphql-versioning-policy@1
Supporting evidence: No linked observation was stored.

070 Idempotency-Key support Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: idempotency-key-support@1
Supporting evidence: No linked observation was stored.

071 JSON error responses Usability · Required · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: json-error-responses@1
Supporting evidence: View stored observation

072 Linked content is publicly readable Accessibility · Recommended · Core Not applicable 0 of 0

Finding

No llms.txt content links were available for a bounded public-access sample.

Check ID: docs-public-content@1
Supporting evidence: No linked observation was stored.

073 MCP App view CSP Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: mcp-view-csp@1
Supporting evidence: No linked observation was stored.

074 MCP App view reachable Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: mcp-view-domain@1
Supporting evidence: No linked observation was stored.

075 MCP Apps UI quality Usability · Recommended · Informational Not applicable Info No score effect

Finding

No inspectable public MCP HTTP endpoint was found.

Check ID: mcp-apps-ui-quality@1
Supporting evidence: No linked observation was stored.

076 MCP Apps support Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: mcp-app-registry@1
Supporting evidence: No linked observation was stored.

077 MCP OAuth challenge alignment Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: mcp-auth-mechanism@1
Supporting evidence: No linked observation was stored.

078 MCP PKCE S256 support Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: mcp-pkce-s256@1
Supporting evidence: No linked observation was stored.

079 MCP Streamable HTTP transport Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: mcp-streamable-http@1
Supporting evidence: No linked observation was stored.

080 MCP error handling Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: mcp-error-handling@1
Supporting evidence: No linked observation was stored.

081 MCP parameter schemas Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: mcp-param-schemas@1
Supporting evidence: No linked observation was stored.

082 MCP registry branding Discovery · Emerging · Informational Not applicable Info No score effect

Finding

No MCP server card is published, so registry branding does not apply.

Check ID: registry-branding@1
Supporting evidence: No linked observation was stored.

083 MCP resource quality Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: mcp-resource-quality@1
Supporting evidence: No linked observation was stored.

084 MCP resources exposed Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: mcp-resource-listing@1
Supporting evidence: No linked observation was stored.

085 MCP server card Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: mcp-server-card@1
Supporting evidence: View stored observation

086 MCP server identity Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: mcp-server-identity@1
Supporting evidence: No linked observation was stored.

087 MCP server or manifest Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: mcp-server@1
Supporting evidence: View stored observation View stored observation View stored observation

088 MCP tool annotations Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: mcp-tool-annotations@1
Supporting evidence: No linked observation was stored.

089 MCP tool descriptions Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: mcp-tool-descriptions@1
Supporting evidence: No linked observation was stored.

090 MCP tool listing Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: mcp-tool-listing@1
Supporting evidence: No linked observation was stored.

091 MCP tool naming Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: mcp-tool-naming@1
Supporting evidence: No linked observation was stored.

092 MCP well-known discovery Accessibility · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: mcp-well-known-discovery@1
Supporting evidence: View stored observation View stored observation View stored observation

093 MPP payment protocol Payments · Required · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: mpp-support@1
Supporting evidence: No linked observation was stored.

094 Markdown code fence validity Accessibility · Emerging · Informational Not applicable Info No score effect

Finding

No served Markdown document was confirmed at the bounded paths.

Check ID: code-fence-validity@1
Supporting evidence: No linked observation was stored.

095 Markdown frontmatter metadata Accessibility · Emerging · Informational Not applicable Info No score effect

Finding

No served Markdown document was confirmed at the bounded document paths.

Check ID: markdown-frontmatter@1
Supporting evidence: No linked observation was stored.

096 Markdown negotiation cache variation Access · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: markdown-negotiation-vary@1
Supporting evidence: No linked observation was stored.

097 Multi-language SDK packages Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: rest-sdk-packages@1
Supporting evidence: View stored observation

098 NPM or PyPI SDK package Discovery · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: npm-sdk-package@1
Supporting evidence: View stored observation

099 OAuth 2.0 support Usability · Required · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: oauth-support@1
Supporting evidence: View stored observation View stored observation

100 OAuth authorization-server metadata Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: mcp-oauth-metadata@1
Supporting evidence: View stored observation View stored observation

101 OAuth protected resource metadata Usability · Required · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: oauth-protected-resource@1
Supporting evidence: View stored observation

102 Official MCP Registry listing Discovery · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: mcp-registry-listed@1
Supporting evidence: No linked observation was stored.

103 OpenAPI document is published Access · Required · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: openapi-spec@1
Supporting evidence: View stored observation

104 Product and documentation MCP coverage Usability · Recommended · Informational Not applicable Info No score effect

Finding

No public streamable HTTP MCP endpoint was discovered.

Check ID: mcp-multi-surface-coverage@1
Supporting evidence: No linked observation was stored.

105 Public API documentation is linked Access · Required · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: public-api-docs@1
Supporting evidence: View stored observation View stored observation

106 Public API endpoint responds Usability · Required · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: public-api-reachable@1
Supporting evidence: No linked observation was stored.

107 REST asynchronous job pattern Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: async-job-pattern@1
Supporting evidence: No linked observation was stored.

108 REST batch endpoint Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: batch-endpoints@1
Supporting evidence: No linked observation was stored.

109 REST pagination pattern Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: pagination-shape@1
Supporting evidence: No linked observation was stored.

110 REST response schema coverage Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: response-schema-coverage@1
Supporting evidence: No linked observation was stored.

111 REST typed error model Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: api-error-model@1
Supporting evidence: No linked observation was stored.

112 REST versioning and deprecation policy Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: api-versioning-policy@1
Supporting evidence: No linked observation was stored.

113 Rate limit response headers Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: rate-limit-headers@1
Supporting evidence: No linked observation was stored.

114 Resource catalog entry quality Discovery · Emerging · Informational Not applicable Info No score effect

Finding

No catalog exists, so catalog-entry quality does not apply.

Check ID: ard-entries-valid@1
Supporting evidence: No linked observation was stored.

115 Resource catalog trust manifests Discovery · Emerging · Informational Not applicable Info No score effect

Finding

No catalog exists, so optional trust metadata does not apply.

Check ID: ard-trust-manifest@1
Supporting evidence: No linked observation was stored.

116 Sandbox or test environment Usability · Recommended · Informational Not applicable Info No score effect

Finding

No public OpenAPI document was found for environment analysis.

Check ID: sandbox-environment@1
Supporting evidence: No linked observation was stored.

117 Scoped permissions Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: scoped-permissions@1
Supporting evidence: View stored observation View stored observation

118 Skills.sh catalog-page quality Access · Emerging · Informational Not applicable Info No score effect

Finding

Quality is not evaluated because the scan found no verified skills.sh listing.

Check ID: skills-sh-quality@1
Supporting evidence: No linked observation was stored.

119 Universal Commerce Protocol Payments · Required · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: ucp-support@1
Supporting evidence: View stored observation

120 auth.md exists Usability · Required · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: auth-md-exists@1
Supporting evidence: View stored observation

121 auth.md structure Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: auth-md-structure@1
Supporting evidence: No linked observation was stored.

122 auth.md walkthrough simulation Usability · Recommended · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: auth-md-walkthrough-simulation@1
Supporting evidence: No linked observation was stored.

123 llms.txt links resolve Accessibility · Recommended · Core Not applicable 0 of 0

Finding

No links were found in a published llms.txt document.

Check ID: llms-links-resolve@1
Supporting evidence: No linked observation was stored.

124 x402 payment protocol Payments · Required · Out of scope Not applicable 0 of 0

Finding

This check is outside the selected site type.

Check ID: x402-support@1
Supporting evidence: No linked observation was stored.

Scan evidence and limitsPages read, HTTP records, observations, and scan identity

Initial HTML preview

Consoles, Collectibles, Video Games, and More – Buy, Sell or Trade | GameStop · HTTP 200

187 of 226 links have names. 112 form controls have no name.

These initial HTML counts are separate from the final accessibility checks.

First result: 25.75 s · Queue: 23.11 s · Total: 35.59 s

Linked pages read

3 of 3 selected pages were read. Maximum: five pages.

Promotions and Exclusions | GameStop · pricing · Read · HTTP 200
Privacy Policy | Help Center | GameStop · privacy · Read · HTTP 200
Conditions of Use | GameStop · terms · Read · HTTP 200

These pages add evidence. Model 27 uses main-page and protocol facts for its score.

Access

62/100

78.4% coverage

Accessibility

0/100

100.0% coverage

Discovery

0/100

62.5% coverage

Usability

42/100

100.0% coverage

Scan scope and limits

This is a static audit. It does not prove that an agent can complete a task.
Browser rendering was not captured.
Search checks were unavailable because the scanner has no search provider key.

How the score works

What the scanner tested

Open a rule to inspect its HTTP and extracted evidence.

1 Robots access Can a standards-aware agent access this site? web.robots@4 · Robots · attempt 1 Allowed

Duration: 26 ms
Fetches: 2
Artifacts: 2
Observations: 2

Observed facts

robots.analysis

100.0% confidence

Allowed agent user count: 3
Allowed retrieval count: 3
Availability: available
Explicit agent user count: 0
Explicit ai crawler count: 0
Group count: 3
Known policy count: 0
Same origin schema map url count: 0

robots.policy

100.0% confidence

Outcome: allow
Availability: available

HTTP transactions

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/robots.txt

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 107 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/html, application/xhtml+xml;q=0.9, application/json;q=0.5, text/plain;q=0.4, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 19:03:02 GMT
location: [value stored]
server: CloudFront
via: 1.1 73552abbaf31717af86cb9621017148a.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 200 Success

agent_readiness_req · Protocol not exposed

https://www.gamestop.com//robots.txt

Content type: text/plain
Transferred: 766 B
Decoded: 2.1 KB
Duration: 224 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/html, application/xhtml+xml;q=0.9, application/json;q=0.5, text/plain;q=0.4, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: www.gamestop.com

Response headers (16)

age: 342814
cache-control: public, max-age=14400
cf-cache-status: [value stored]
cf-ray: [value stored]
connection: [value stored]
content-encoding: gzip
content-type: text/plain;charset=UTF-8
date: Wed, 30 Sep 2026 19:03:03 GMT
expires: Wed, 30 Sep 2026 23:03:03 GMT
last-modified: Sat, 26 Sep 2026 19:49:28 GMT
pragma: [value stored]
server: cloudflare
set-cookie: [REDACTED]
set-cookie: [REDACTED]
transfer-encoding: [value stored]
vary: accept-encoding

2 Primary HTTP response What does a direct HTTP client receive? web.primary_http@2 · Static capture · attempt 1 Succeeded

Duration: 37 ms
Fetches: 3
Artifacts: 3
Observations: 1

Observed facts

transport.fetch

100.0% confidence

Available: Yes
Outcome: success
Https: Yes
Status: 200
Content type: text/html
Body bytes: 1669430
Final url: https://www.gamestop.com/

HTTP transactions

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 66 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/html, application/xhtml+xml;q=0.9, application/json;q=0.5, text/plain;q=0.4, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 19:03:03 GMT
location: [value stored]
server: CloudFront
via: 1.1 73552abbaf31717af86cb9621017148a.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 200 Success

agent_readiness_req · Protocol not exposed

https://www.gamestop.com/robots.txt

Content type: text/plain
Transferred: 766 B
Decoded: 2.1 KB
Duration: 76 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/html, application/xhtml+xml;q=0.9, application/json;q=0.5, text/plain;q=0.4, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: www.gamestop.com

Response headers (16)

age: 494607
cache-control: public, max-age=14400
cf-cache-status: [value stored]
cf-ray: [value stored]
connection: [value stored]
content-encoding: gzip
content-type: text/plain;charset=UTF-8
date: Wed, 30 Sep 2026 19:03:03 GMT
expires: Wed, 30 Sep 2026 23:03:03 GMT
last-modified: Fri, 25 Sep 2026 01:39:35 GMT
pragma: [value stored]
server: cloudflare
set-cookie: [REDACTED]
set-cookie: [REDACTED]
transfer-encoding: [value stored]
vary: accept-encoding

GET 200 Success

agent_readiness_req · Protocol not exposed

https://www.gamestop.com/

Content type: text/html
Transferred: 186.9 KB
Decoded: 1.59 MB
Duration: 270 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/html, application/xhtml+xml;q=0.9, application/json;q=0.5, text/plain;q=0.4, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: www.gamestop.com

Response headers (29)

cache-control: no-cache, no-store, must-revalidate
cf-cache-status: [value stored]
cf-ray: [value stored]
connection: [value stored]
content-encoding: gzip
content-type: text/html;charset=UTF-8
date: Wed, 30 Sep 2026 19:03:03 GMT
expires: Thu, 01 Dec 1994 16:00:00 GMT
pragma: [value stored]
server: cloudflare
server-timing: [value stored]
server-timing: [value stored]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
transfer-encoding: [value stored]
vary: accept-encoding

3 HTML extraction What structure can an agent extract from the HTML? web.html_extract@5 · Extract · attempt 1 Succeeded

Duration: 23 ms
Fetches: 0
Artifacts: 0
Observations: 10

Observed facts

html.accessibility

90.0% confidence

Structured evidence was stored. This view has no safe summary for it yet.

html.content

100.0% confidence

Visible chars: 517009
Estimated tokens: 129253
Has pricing language: Yes
Has api language: No

html.discovery

100.0% confidence

Structured evidence was stored. This view has no safe summary for it yet.

html.forms

100.0% confidence

Forms: 4
Controls: 262
Controls missing name: 112

html.images

100.0% confidence

Total: 69
Missing alt: 0

html.links

100.0% confidence

Total: 226
Missing name: 39

html.metadata

100.0% confidence

Title: Consoles, Collectibles, Video Games, and More – Buy, Sell or Trade | GameStop
Description: Shop GameStop, the world's largest retail gaming and trade-in destination for Xbox, PlayStation, and Nintendo games, systems, consoles & accessories. Shop a wide selection of gamer-centric apparel, collectibles & more.
Language: en
Charset: UTF-8
Canonical: https://www.gamestop.com/
Json ld blocks: 1
Json ld valid blocks: 1

html.structure

100.0% confidence

H1: 2
H2: 13
H3: 1
Landmarks: 4
Lists: 19
Tables: 0
Visible chars: 517009
Estimated tokens: 129253

html.structured_data

100.0% confidence

Blocks: 1
Valid blocks: 1
Invalid blocks: 0
Entity count: 1
Type count: 1
Same as count: 7
Organization count: 1
Organization field count: 5

html.web_mcp

90.0% confidence

Complete declarative tool count: 0
Declarative element count: 0
Document registration count: 0
Model context reference count: 0
Navigator registration count: 0

4 Web.http semantics What evidence did this capture rule record? web.http_semantics@2 · Extract · attempt 1 Succeeded

Duration: 23 ms
Fetches: 0
Artifacts: 0
Observations: 1

Observed facts

http.semantics

100.0% confidence

Attempt count: 3
Cross origin redirect count: 1
Final status: 200
Https downgrade count: 0
Outcome: success
Redirect count: 1
Transport available: Yes

5 Web.response semantics What evidence did this capture rule record? web.response_semantics@2 · Extract · attempt 1 Succeeded

Duration: 21 ms
Fetches: 0
Artifacts: 0
Observations: 1

Observed facts

response.semantics

100.0% confidence

Available: Yes
Content type: text/html
Status: 200

6 Web.core preview What evidence did this capture rule record? web.core_preview@1 · Finalize · attempt 1 Succeeded

Duration: 26 ms
Fetches: 0
Artifacts: 0
Observations: 1

Observed facts

scan.core_preview

100.0% confidence

Controls missing name: 112
Description present: Yes
Links: 226
Named links: 187
Provisional: Yes
Status: 200
Title: Consoles, Collectibles, Video Games, and More – Buy, Sell or Trade | GameStop
Visible chars: 517009

7 Web.linked pages What evidence did this capture rule record? web.linked_pages@1 · Finalize · attempt 1 Succeeded

Duration: 24 ms
Fetches: 7
Artifacts: 7
Observations: 4

Observed facts

linked_pages.page

100.0% confidence

Body sha256: 09d905b44f0dabad60efafe992fb24e0ebda5d3c004d4577891f8f5201cfb248
Category: pricing
Final url: https://www.gamestop.com/promotions-and-exclusions
Label: *See offer details. Terms and exclusions apply. Pricing, promotions and availability may vary by location and at GameSto
Outcome: read
Status: 200
Text excerpt: Promotions and Exclusions | GameStop Menu Trade-In GameStop Pro Cart ‹ Trading Cards Graded Cards PSA Card Grading New Trading Cards Sports Trading Cards Pokémon Trading Cards Out-Of-Print Cards Deals Shop My Store Pre-Order Collectibles & More Board Games Clothing Homewares Stuffed Animals & Plush Funko LEGO Figures S…
Title: Promotions and Exclusions | GameStop

linked_pages.page

100.0% confidence

Body sha256: 9c13a77073b6bf0dc94e7550d95bb13f206e513d4deb01c919fcdf61b16cf0f1
Category: privacy
Final url: https://www.gamestop.com/PrivacyPolicy.html
Label: CA Privacy Rights
Outcome: read
Status: 200
Text excerpt: Privacy Policy | Help Center | GameStop Menu Trade-In GameStop Pro Cart ‹ Trading Cards Graded Cards PSA Card Grading New Trading Cards Sports Trading Cards Pokémon Trading Cards Out-Of-Print Cards Deals Shop My Store Pre-Order Collectibles & More Board Games Clothing Homewares Stuffed Animals & Plush Funko LEGO Figure…
Title: Privacy Policy | Help Center | GameStop

linked_pages.page

100.0% confidence

Body sha256: 7a62705aafaa17b8424ffa74d695daf83b52fa75ed9be496085f2e913e86364e
Category: terms
Final url: https://www.gamestop.com/disclaimer.html
Label: Conditions of Use
Outcome: read
Status: 200
Text excerpt: Conditions of Use | GameStop Menu Trade-In GameStop Pro Cart ‹ Trading Cards Graded Cards PSA Card Grading New Trading Cards Sports Trading Cards Pokémon Trading Cards Out-Of-Print Cards Deals Shop My Store Pre-Order Collectibles & More Board Games Clothing Homewares Stuffed Animals & Plush Funko LEGO Figures Statues R…
Title: Conditions of Use | GameStop

linked_pages.summary

100.0% confidence

Maximum pages: 5
Read: 3
Selected: 3

HTTP transactions

GET 200 Success

agent_readiness_req · Protocol not exposed

https://www.gamestop.com/robots.txt

Content type: text/plain
Transferred: 766 B
Decoded: 2.1 KB
Duration: 63 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/html, application/xhtml+xml;q=0.9, application/json;q=0.5, text/plain;q=0.4, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: www.gamestop.com

Response headers (16)

age: 494609
cache-control: public, max-age=14400
cf-cache-status: [value stored]
cf-ray: [value stored]
connection: [value stored]
content-encoding: gzip
content-type: text/plain;charset=UTF-8
date: Wed, 30 Sep 2026 19:03:05 GMT
expires: Wed, 30 Sep 2026 23:03:05 GMT
last-modified: Fri, 25 Sep 2026 01:39:35 GMT
pragma: [value stored]
server: cloudflare
set-cookie: [REDACTED]
set-cookie: [REDACTED]
transfer-encoding: [value stored]
vary: accept-encoding

GET 200 Success

agent_readiness_req · Protocol not exposed

https://www.gamestop.com/promotions-and-exclusions

Content type: text/html
Transferred: 46.8 KB
Decoded: 169.7 KB
Duration: 359 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/html, application/xhtml+xml;q=0.9, application/json;q=0.5, text/plain;q=0.4, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: www.gamestop.com

Response headers (28)

cache-control: no-cache, no-store, must-revalidate
cf-cache-status: [value stored]
cf-ray: [value stored]
connection: [value stored]
content-encoding: gzip
content-type: text/html;charset=UTF-8
date: Wed, 30 Sep 2026 19:03:05 GMT
expires: Thu, 01 Dec 1994 16:00:00 GMT
pragma: [value stored]
server: cloudflare
server-timing: [value stored]
server-timing: [value stored]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
transfer-encoding: [value stored]
vary: accept-encoding

GET 200 Success

agent_readiness_req · Protocol not exposed

https://www.gamestop.com/robots.txt

Content type: text/plain
Transferred: 766 B
Decoded: 2.1 KB
Duration: 46 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/html, application/xhtml+xml;q=0.9, application/json;q=0.5, text/plain;q=0.4, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: www.gamestop.com

Response headers (16)

age: 494610
cache-control: public, max-age=14400
cf-cache-status: [value stored]
cf-ray: [value stored]
connection: [value stored]
content-encoding: gzip
content-type: text/plain;charset=UTF-8
date: Wed, 30 Sep 2026 19:03:05 GMT
expires: Wed, 30 Sep 2026 23:03:05 GMT
last-modified: Fri, 25 Sep 2026 01:39:35 GMT
pragma: [value stored]
server: cloudflare
set-cookie: [REDACTED]
set-cookie: [REDACTED]
transfer-encoding: [value stored]
vary: accept-encoding

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://www.gamestop.com/californiaprivacy

Content type: text/html
Transferred: 0 B
Decoded: 0 B
Duration: 130 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/html, application/xhtml+xml;q=0.9, application/json;q=0.5, text/plain;q=0.4, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: www.gamestop.com

Response headers (28)

accept-ranges: bytes
cache-control: no-cache, no-store, must-revalidate
cf-cache-status: [value stored]
cf-ray: [value stored]
connection: [value stored]
content-type: text/html;charset=UTF-8
date: Wed, 30 Sep 2026 19:03:06 GMT
expires: Thu, 01 Dec 1994 16:00:00 GMT
location: [value stored]
pragma: [value stored]
server: cloudflare
server-timing: [value stored]
server-timing: [value stored]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
transfer-encoding: [value stored]

GET 200 Success

agent_readiness_req · Protocol not exposed

https://www.gamestop.com/PrivacyPolicy.html

Content type: text/html
Transferred: 65.3 KB
Decoded: 245.1 KB
Duration: 339 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/html, application/xhtml+xml;q=0.9, application/json;q=0.5, text/plain;q=0.4, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: www.gamestop.com

Response headers (28)

cache-control: no-cache, no-store, must-revalidate
cf-cache-status: [value stored]
cf-ray: [value stored]
connection: [value stored]
content-encoding: gzip
content-type: text/html;charset=UTF-8
date: Wed, 30 Sep 2026 19:03:06 GMT
expires: Thu, 01 Dec 1994 16:00:00 GMT
pragma: [value stored]
server: cloudflare
server-timing: [value stored]
server-timing: [value stored]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
transfer-encoding: [value stored]
vary: accept-encoding

GET 200 Success

agent_readiness_req · Protocol not exposed

https://www.gamestop.com/robots.txt

Content type: text/plain
Transferred: 766 B
Decoded: 2.1 KB
Duration: 54 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/html, application/xhtml+xml;q=0.9, application/json;q=0.5, text/plain;q=0.4, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: www.gamestop.com

Response headers (16)

age: 494610
cache-control: public, max-age=14400
cf-cache-status: [value stored]
cf-ray: [value stored]
connection: [value stored]
content-encoding: gzip
content-type: text/plain;charset=UTF-8
date: Wed, 30 Sep 2026 19:03:06 GMT
expires: Wed, 30 Sep 2026 23:03:06 GMT
last-modified: Fri, 25 Sep 2026 01:39:35 GMT
pragma: [value stored]
server: cloudflare
set-cookie: [REDACTED]
set-cookie: [REDACTED]
transfer-encoding: [value stored]
vary: accept-encoding

GET 200 Success

agent_readiness_req · Protocol not exposed

https://www.gamestop.com/disclaimer.html

Content type: text/html
Transferred: 54.4 KB
Decoded: 186.1 KB
Duration: 215 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/html, application/xhtml+xml;q=0.9, application/json;q=0.5, text/plain;q=0.4, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: www.gamestop.com

Response headers (29)

cache-control: no-cache, no-store, must-revalidate
cf-cache-status: [value stored]
cf-ray: [value stored]
connection: [value stored]
content-encoding: gzip
content-type: text/html;charset=UTF-8
date: Wed, 30 Sep 2026 19:03:06 GMT
expires: Thu, 01 Dec 1994 16:00:00 GMT
pragma: [value stored]
server: cloudflare
server-timing: [value stored]
server-timing: [value stored]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
transfer-encoding: [value stored]
vary: accept-encoding

8 Web.discovery files What evidence did this capture rule record? web.discovery_files@12 · Static capture · attempt 1 Succeeded

Duration: 26 ms
Fetches: 32
Artifacts: 30
Observations: 27

Observed facts

discovery.a2a_agent_card

100.0% confidence

Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Final url: https://gamestop.com/.well-known/agent-card.json
Format valid: No
Id: a2a_agent_card
Method: GET
Outcome: redirect
Path: /.well-known/agent-card.json

discovery.acp_checkout_options

100.0% confidence

Allow header count: 0
Allow post: No
Body bytes: 1053
Body sha256: 6b53448e6a48ba290f0e28e7177d80a7951578d2fb4a83d0586d3cf4abd658ba
Content type: text/html
Final url: https://gamestop.com/checkout_sessions
Format valid: No
Id: acp_checkout_options

discovery.acp_delegate_payment_options

100.0% confidence

Allow header count: 0
Allow post: No
Body bytes: 1053
Body sha256: af6daa2c4849689a3fc0d8773811b926c75cc77a032337f777c88e4eb890a66b
Content type: text/html
Final url: https://gamestop.com/agentic_commerce/delegate_payment
Format valid: No
Id: acp_delegate_payment_options

discovery.agent_friendly_404

100.0% confidence

Body bytes: 0
Body chars: 0
Body concise: Yes
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Final url: https://gamestop.com/.well-known/agent-readiness-probe/not-found-7b91e8d4
Format valid: No
Guidance present: No
Id: agent_friendly_404

discovery.agent_instructions

100.0% confidence

Agent instruction action signal count: 0
Agent instruction heading present: No
Agent instruction section chars: 0
Agent instruction valid: No
Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Canonical link present: No
Code fence delimiter count: 0

discovery.agent_mode_view

100.0% confidence

Auth signal: No
Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Capability signal: No
Endpoint signal: No
Final url: https://gamestop.com/
Format valid: No
Id: agent_mode_view

discovery.agent_skills_index

100.0% confidence

Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Final url: https://gamestop.com/.well-known/agent-skills/index.json
Format valid: No
Id: agent_skills_index
Method: GET
Outcome: redirect
Path: /.well-known/agent-skills/index.json

discovery.ai_catalog

100.0% confidence

Attested trust manifest count: 0
Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Display name entry count: 0
Entry count: 0
Exclusive target entry count: 0
Final url: https://gamestop.com/.well-known/ai-catalog.json
Format valid: No

discovery.api_catalog

100.0% confidence

Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Final url: https://gamestop.com/.well-known/api-catalog
Format valid: No
Id: api_catalog
Method: GET
Outcome: redirect
Path: /.well-known/api-catalog

discovery.api_catalog_head

100.0% confidence

Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Final url: https://gamestop.com/.well-known/api-catalog
Format valid: No
Id: api_catalog_head
Method: HEAD
Outcome: redirect
Path: /.well-known/api-catalog

discovery.ard_catalog

100.0% confidence

Attested trust manifest count: 0
Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Display name entry count: 0
Entry count: 0
Exclusive target entry count: 0
Final url: https://gamestop.com/.well-known/ard.json
Format valid: No

discovery.auth_md

100.0% confidence

Agent instruction action signal count: 0
Agent instruction heading present: No
Agent instruction section chars: 0
Agent instruction valid: No
Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Canonical link present: No
Code fence delimiter count: 0

discovery.llms_txt

100.0% confidence

Agent instruction action signal count: 0
Agent instruction heading present: No
Agent instruction section chars: 0
Agent instruction valid: No
Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Canonical link present: No
Code fence delimiter count: 0

discovery.markdown_negotiation

100.0% confidence

Agent instruction action signal count: 0
Agent instruction heading present: No
Agent instruction section chars: 0
Agent instruction valid: No
Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Canonical link present: No
Code fence delimiter count: 0

discovery.markdown_url_fallback

100.0% confidence

Agent instruction action signal count: 0
Agent instruction heading present: No
Agent instruction section chars: 0
Agent instruction valid: No
Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Canonical link present: No
Code fence delimiter count: 0

discovery.mcp_endpoint

100.0% confidence

Allow header present: No
Bearer challenge present: No
Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Challenge count: 0
Endpoint signal: No
Final url: https://gamestop.com/.well-known/mcp
Format valid: No

discovery.mcp_manifest

100.0% confidence

Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Direct endpoint present: No
Final url: https://gamestop.com/.well-known/mcp/manifest.json
Format valid: No
Id: mcp_manifest
Json valid: No
Method: GET

discovery.mcp_server_card

100.0% confidence

Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Description present: No
Display name present: No
Endpoint count: 0
Final url: https://gamestop.com/.well-known/mcp/server-card.json
Format valid: No
Icon count: 0

discovery.modular_llms_txt

100.0% confidence

Agent instruction action signal count: 0
Agent instruction heading present: No
Agent instruction section chars: 0
Agent instruction valid: No
Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Canonical link present: No
Code fence delimiter count: 0

discovery.oauth_authorization_server

100.0% confidence

Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Final url: https://gamestop.com/.well-known/oauth-authorization-server
Format valid: No
Id: oauth_authorization_server
Method: GET
Outcome: redirect
Path: /.well-known/oauth-authorization-server

discovery.oauth_protected_resource

100.0% confidence

Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Final url: https://gamestop.com/.well-known/oauth-protected-resource
Format valid: No
Id: oauth_protected_resource
Method: GET
Outcome: redirect
Path: /.well-known/oauth-protected-resource

discovery.openapi

100.0% confidence

Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Final url: https://gamestop.com/openapi.yml
Format valid: No
Id: openapi
Method: GET
Outcome: redirect
Path: /openapi.yml

discovery.pricing_markdown

100.0% confidence

Agent instruction action signal count: 0
Agent instruction heading present: No
Agent instruction section chars: 0
Agent instruction valid: No
Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Canonical link present: No
Code fence delimiter count: 0

discovery.sitemap

100.0% confidence

Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Final url: https://gamestop.com/sitemap.xml
Format valid: No
Id: sitemap
Method: GET
Outcome: redirect
Path: /sitemap.xml

discovery.ucp

100.0% confidence

Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Final url: https://gamestop.com/.well-known/ucp
Format valid: No
Id: ucp
Method: GET
Outcome: redirect
Path: /.well-known/ucp

discovery.web_bot_auth_directory

100.0% confidence

Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Final url: https://gamestop.com/.well-known/http-message-signatures-directory
Format valid: No
Id: web_bot_auth_directory
Json valid: No
Key count: 0
Method: GET

discovery.x402

100.0% confidence

Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Final url: https://gamestop.com/discovery/resources
Format valid: No
Id: x402_discovery
Method: GET
Outcome: redirect
Path: /discovery/resources?limit=1

HTTP transactions

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/sitemap.xml

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 95 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/xml, text/xml;q=0.9, text/plain;q=0.2, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 19:03:07 GMT
location: [value stored]
server: CloudFront
via: 1.1 a7a79203b6ae3d246964225605f2ee9c.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/llms.txt

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 49 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/plain, text/markdown;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 19:03:07 GMT
location: [value stored]
server: CloudFront
via: 1.1 a7a79203b6ae3d246964225605f2ee9c.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/pricing.md

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 61 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/markdown, text/plain;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 19:03:07 GMT
location: [value stored]
server: CloudFront
via: 1.1 a7a79203b6ae3d246964225605f2ee9c.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/.well-known/agent-card.json

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 44 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 19:03:07 GMT
location: [value stored]
server: CloudFront
via: 1.1 a7a79203b6ae3d246964225605f2ee9c.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/.well-known/api-catalog

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 43 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/linkset+json, application/json;q=0.8, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 19:03:07 GMT
location: [value stored]
server: CloudFront
via: 1.1 a7a79203b6ae3d246964225605f2ee9c.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

HEAD 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/.well-known/api-catalog

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 44 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: */*
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 19:03:07 GMT
location: [value stored]
server: CloudFront
via: 1.1 a7a79203b6ae3d246964225605f2ee9c.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/.well-known/oauth-protected-resource

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 46 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 19:03:07 GMT
location: [value stored]
server: CloudFront
via: 1.1 a7a79203b6ae3d246964225605f2ee9c.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/.well-known/ucp

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 42 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 19:03:07 GMT
location: [value stored]
server: CloudFront
via: 1.1 a7a79203b6ae3d246964225605f2ee9c.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/openapi.json

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 49 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, application/yaml;q=0.9, application/x-yaml;q=0.9, text/yaml;q=0.8, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 19:03:07 GMT
location: [value stored]
server: CloudFront
via: 1.1 a7a79203b6ae3d246964225605f2ee9c.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/openapi.yaml

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 44 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, application/yaml;q=0.9, application/x-yaml;q=0.9, text/yaml;q=0.8, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 19:03:07 GMT
location: [value stored]
server: CloudFront
via: 1.1 a7a79203b6ae3d246964225605f2ee9c.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/openapi.yml

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 43 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, application/yaml;q=0.9, application/x-yaml;q=0.9, text/yaml;q=0.8, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 19:03:07 GMT
location: [value stored]
server: CloudFront
via: 1.1 a7a79203b6ae3d246964225605f2ee9c.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/auth.md

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 47 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/markdown, text/plain;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 19:03:07 GMT
location: [value stored]
server: CloudFront
via: 1.1 a7a79203b6ae3d246964225605f2ee9c.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/.well-known/oauth-authorization-server

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 49 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 19:03:07 GMT
location: [value stored]
server: CloudFront
via: 1.1 a7a79203b6ae3d246964225605f2ee9c.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/index.md

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 50 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/markdown, text/plain;q=0.8, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 19:03:07 GMT
location: [value stored]
server: CloudFront
via: 1.1 a7a79203b6ae3d246964225605f2ee9c.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 46 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/markdown, text/plain;q=0.8, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 19:03:07 GMT
location: [value stored]
server: CloudFront
via: 1.1 a7a79203b6ae3d246964225605f2ee9c.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/.well-known/agent-readiness-probe/not-found-7b91e8d4

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 47 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/problem+json, application/json;q=0.9, text/markdown;q=0.8, text/plain;q=0.5, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 19:03:07 GMT
location: [value stored]
server: CloudFront
via: 1.1 a7a79203b6ae3d246964225605f2ee9c.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/.well-known/agent-skills/index.json

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 45 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 19:03:07 GMT
location: [value stored]
server: CloudFront
via: 1.1 a7a79203b6ae3d246964225605f2ee9c.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/docs/llms.txt

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 42 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/plain, text/markdown;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 19:03:07 GMT
location: [value stored]
server: CloudFront
via: 1.1 a7a79203b6ae3d246964225605f2ee9c.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/api/llms.txt

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 43 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/plain, text/markdown;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 19:03:07 GMT
location: [value stored]
server: CloudFront
via: 1.1 a7a79203b6ae3d246964225605f2ee9c.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/developers/llms.txt

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 46 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/plain, text/markdown;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 19:03:08 GMT
location: [value stored]
server: CloudFront
via: 1.1 a7a79203b6ae3d246964225605f2ee9c.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/.well-known/agent-instructions.md

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 46 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/markdown, text/plain;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 19:03:08 GMT
location: [value stored]
server: CloudFront
via: 1.1 a7a79203b6ae3d246964225605f2ee9c.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/agent-instructions.md

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 48 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/markdown, text/plain;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 19:03:08 GMT
location: [value stored]
server: CloudFront
via: 1.1 a7a79203b6ae3d246964225605f2ee9c.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/.well-known/ard.json

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 44 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, application/ld+json;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 19:03:08 GMT
location: [value stored]
server: CloudFront
via: 1.1 a7a79203b6ae3d246964225605f2ee9c.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/.well-known/ai-catalog.json

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 42 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, application/ld+json;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 19:03:08 GMT
location: [value stored]
server: CloudFront
via: 1.1 a7a79203b6ae3d246964225605f2ee9c.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

HEAD 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/.well-known/mcp

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 44 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, text/event-stream;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 19:03:08 GMT
location: [value stored]
server: CloudFront
via: 1.1 a7a79203b6ae3d246964225605f2ee9c.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/.well-known/mcp/server-card.json

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 43 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/mcp-server-card+json, application/json;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 19:03:08 GMT
location: [value stored]
server: CloudFront
via: 1.1 a7a79203b6ae3d246964225605f2ee9c.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/.well-known/mcp/manifest.json

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 44 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 19:03:08 GMT
location: [value stored]
server: CloudFront
via: 1.1 a7a79203b6ae3d246964225605f2ee9c.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/.well-known/http-message-signatures-directory

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 48 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 19:03:08 GMT
location: [value stored]
server: CloudFront
via: 1.1 a7a79203b6ae3d246964225605f2ee9c.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 41 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, text/markdown;q=0.9, text/plain;q=0.8, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 19:03:08 GMT
location: [value stored]
server: CloudFront
via: 1.1 a7a79203b6ae3d246964225605f2ee9c.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

OPTIONS 403 Access denied

agent_readiness_req · Protocol not exposed

https://gamestop.com/checkout_sessions

Content type: text/html
Transferred: 1.0 KB
Decoded: 1.0 KB
Duration: 23 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 1053
content-type: text/html
date: Wed, 30 Sep 2026 19:03:08 GMT
server: CloudFront
via: 1.1 a7a79203b6ae3d246964225605f2ee9c.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

OPTIONS 403 Access denied

agent_readiness_req · Protocol not exposed

https://gamestop.com/agentic_commerce/delegate_payment

Content type: text/html
Transferred: 1.0 KB
Decoded: 1.0 KB
Duration: 25 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 1053
content-type: text/html
date: Wed, 30 Sep 2026 19:03:08 GMT
server: CloudFront
via: 1.1 a7a79203b6ae3d246964225605f2ee9c.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/discovery/resources

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 52 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 19:03:08 GMT
location: [value stored]
server: CloudFront
via: 1.1 a7a79203b6ae3d246964225605f2ee9c.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

9 Web.link validation What evidence did this capture rule record? web.link_validation@1 · Finalize · attempt 1 Succeeded

Duration: 25 ms
Fetches: 0
Artifacts: 0
Observations: 4

Observed facts

links.agent_auth

100.0% confidence

Advertised count: 0
Probed count: 0
Reachable count: 0
Robots denied count: 0
Stale count: 0

links.docs_access

100.0% confidence

Gated count: 0
Login form count: 0
Public count: 0
Sampled count: 0
Unavailable count: 0

links.llms

100.0% confidence

Advertised count: 0
Broken count: 0
Homepage fallback count: 0
Probed count: 0
Resolved count: 0
Robots denied count: 0

links.public_api

100.0% confidence

Advertised: No
Machine readable response: No
Probed: No
Reachable: No
Successful response: No

10 Web.mcp inspection What evidence did this capture rule record? web.mcp_inspection@2 · Finalize · attempt 1 Succeeded

Duration: 19 ms
Fetches: 0
Artifacts: 0
Observations: 1

Observed facts

mcp.inspection

100.0% confidence

Advertised: No
Attempted: No
Candidate count: 0
Initialized notification accepted: No
Outcome: no_candidate
Session established: No

11 Web.nlweb inspection What evidence did this capture rule record? web.nlweb_inspection@1 · Finalize · attempt 1 Succeeded

Duration: 24 ms
Fetches: 1
Artifacts: 1
Observations: 1

Observed facts

nlweb.inspection

100.0% confidence

Outcome: auth_required

HTTP transactions

OPTIONS 403 Access denied

agent_readiness_req · Protocol not exposed

https://gamestop.com/ask

Content type: text/html
Transferred: 1.0 KB
Decoded: 1.0 KB
Duration: 29 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

accept: */*
user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 1053
content-type: text/html
date: Wed, 30 Sep 2026 19:03:09 GMT
server: CloudFront
via: 1.1 e8e5d02c2ea3d5f8a88bac040b29c218.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

12 Web.graphql inspection What evidence did this capture rule record? web.graphql_inspection@1 · Finalize · attempt 1 Succeeded

Duration: 24 ms
Fetches: 3
Artifacts: 3
Observations: 1

Observed facts

graphql.inspection

100.0% confidence

Auth required count: 3
Candidate count: 3
Checked count: 3
Outcome: auth_required
Robots denied count: 0

HTTP transactions

OPTIONS 403 Access denied

agent_readiness_req · Protocol not exposed

https://gamestop.com/graphql

Content type: text/html
Transferred: 1.0 KB
Decoded: 1.0 KB
Duration: 30 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

accept: */*
user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 1053
content-type: text/html
date: Wed, 30 Sep 2026 19:03:09 GMT
server: CloudFront
via: 1.1 73552abbaf31717af86cb9621017148a.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

OPTIONS 403 Access denied

agent_readiness_req · Protocol not exposed

https://gamestop.com/api/graphql

Content type: text/html
Transferred: 1.0 KB
Decoded: 1.0 KB
Duration: 29 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

accept: */*
user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 1053
content-type: text/html
date: Wed, 30 Sep 2026 19:03:09 GMT
server: CloudFront
via: 1.1 ced95c1372317defee9f67338d1249ec.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

OPTIONS 403 Access denied

agent_readiness_req · Protocol not exposed

https://gamestop.com/v1/graphql

Content type: text/html
Transferred: 1.0 KB
Decoded: 1.0 KB
Duration: 30 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

accept: */*
user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 1053
content-type: text/html
date: Wed, 30 Sep 2026 19:03:09 GMT
server: CloudFront
via: 1.1 ba2bf3dcbee66a465d4e02d790eb412e.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

13 Web.mcp apps inspection What evidence did this capture rule record? web.mcp_apps_inspection@1 · Finalize · attempt 1 Succeeded

Duration: 23 ms
Fetches: 0
Artifacts: 0
Observations: 1

Observed facts

mcp_apps.inspection

100.0% confidence

Candidate count: 0
Initialized notification accepted: No
Linked resource count: 0
Outcome: no_candidate
Session established: No

14 Web.developer tooling inspection What evidence did this capture rule record? web.developer_tooling_inspection@1 · Finalize · attempt 1 Succeeded

Duration: 26 ms
Fetches: 0
Artifacts: 0
Observations: 1

Observed facts

developer_tooling.inspection

100.0% confidence

Candidate count: 0
Candidate limit: 6
Cli link candidate count: 0
Inspected link count: 226
Install command count: 0
Install command present: No
Not found count: 0
Npm candidate count: 0

15 Web.repository inspection What evidence did this capture rule record? web.repository_inspection@1 · Finalize · attempt 1 Not applicable

Duration: 22 ms
Fetches: 0
Artifacts: 0
Observations: 1

Observed facts

repository.inspection

100.0% confidence

Candidate count: 0
Inspection complete: No
Outcome: no_candidate
Repository advertised: No
Root response valid: No

16 Web.mcp registry inspection What evidence did this capture rule record? web.mcp_registry_inspection@1 · Finalize · attempt 1 Partial

Duration: 24 ms
Fetches: 2
Artifacts: 1
Observations: 1

Observed facts

mcp_registry.inspection

100.0% confidence

Outcome: fetch_error
Query available: No
Repository available: No

HTTP transactions

GET 404 Success

agent_readiness_req · Protocol not exposed

https://registry.modelcontextprotocol.io/robots.txt

Content type: application/problem+json
Transferred: 155 B
Decoded: 155 B
Duration: 154 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/plain, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: registry.modelcontextprotocol.io

Response headers (7)

connection: [value stored]
content-length: 155
content-type: application/problem+json
date: Wed, 30 Sep 2026 19:03:10 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin
x-content-type-options: nosniff

GET No status Transport failure

agent_readiness_req · Protocol not exposed

https://registry.modelcontextprotocol.io/v0.1/servers

Content type: Not recorded
Transferred: Not recorded
Decoded: Not recorded
Duration: 2.96 s

Headers: not exposed Redirects: not exposed DNS: recorded TLS: not exposed Timings: not exposed Sizes: not exposed Digest: not exposed

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: registry.modelcontextprotocol.io

Response headers (0)

17 Web.wikimedia inspection What evidence did this capture rule record? web.wikimedia_inspection@1 · Finalize · attempt 1 Succeeded

Duration: 25 ms
Fetches: 3
Artifacts: 3
Observations: 1

Observed facts

wikimedia.inspection

100.0% confidence

Direct wikidata link count: 1
Direct wikipedia link count: 1
Outcome: succeeded
Query available: Yes

HTTP transactions

GET 301 Transport failure

agent_readiness_req · Protocol not exposed

https://api.wikimedia.org/robots.txt

Content type: text/html
Transferred: 293 B
Decoded: 293 B
Duration: 121 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/plain, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: api.wikimedia.org

Response headers (19)

age: 33355
cache-control: max-age=2592000
content-length: 293
content-type: text/html; charset=iso-8859-1
date: Wed, 30 Sep 2026 09:47:18 GMT
expires: Fri, 30 Oct 2026 09:47:18 GMT
location: [value stored]
nel: [value stored]
report-to: [value stored]
server: mw-web.eqiad.main-69cd799d9d-s952z
server-timing: [value stored]
set-cookie: [REDACTED]
strict-transport-security: max-age=106384710; includeSubDomains; preload
vary: X-Forwarded-Proto
x-analytics: [value stored]
x-cache: [value stored]
x-cache-status: [value stored]
x-client-ip: [value stored]
x-request-id: [value stored]

GET 200 Success

agent_readiness_req · Protocol not exposed

https://api.wikimedia.org/core/v1/wikidata/search/page

Content type: application/json
Transferred: 32 B
Decoded: 12 B
Duration: 192 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: api.wikimedia.org

Response headers (22)

accept-ranges: bytes
access-control-allow-origin: [value stored]
age: 2
cache-control: no-cache
content-encoding: gzip
content-length: 32
content-type: application/json
date: Wed, 30 Sep 2026 19:03:13 GMT
nel: [value stored]
report-to: [value stored]
server: mw-api-ext.eqiad.main-7d5459bd5c-pbwtj
server-timing: [value stored]
set-cookie: [REDACTED]
strict-transport-security: max-age=106384710; includeSubDomains; preload
vary: x-restbase-compat, Accept-Encoding
x-analytics: [value stored]
x-cache: [value stored]
x-cache-status: [value stored]
x-client-ip: [value stored]
x-content-type-options: nosniff
x-request-id: [value stored]
x-search-id: [value stored]

GET 200 Success

agent_readiness_req · Protocol not exposed

https://api.wikimedia.org/core/v1/wikidata/page/Q202210/html

Content type: text/html
Transferred: 24.4 KB
Decoded: 348.9 KB
Duration: 202 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/html
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: api.wikimedia.org

Response headers (26)

accept-ranges: bytes
access-control-allow-origin: [value stored]
age: 0
cache-control: no-cache
content-encoding: gzip
content-language: en
content-revision-id: [value stored]
content-type: text/html; charset=utf-8; profile="https://www.mediawiki.org/wiki/Specs/HTML/0.0.0"
date: Wed, 30 Sep 2026 19:03:14 GMT
etag: W/"2549968664/959dc6b9-ba5f-11f1-9a56-f754b1f597ea/view+lang:en-us"
last-modified: Sun, 27 Sep 2026 10:16:39 GMT
nel: [value stored]
report-to: [value stored]
server: mw-api-ext.eqiad.main-7d5459bd5c-5c49z
server-timing: [value stored]
set-cookie: [REDACTED]
strict-transport-security: max-age=106384710; includeSubDomains; preload
transfer-encoding: [value stored]
vary: Accept-Language,x-restbase-compat, Accept-Encoding
x-analytics: [value stored]
x-cache: [value stored]
x-cache-status: [value stored]
x-client-ip: [value stored]
x-content-type-options: nosniff
x-mediawiki-render-id: [value stored]
x-request-id: [value stored]

18 Web.skills sh inspection What evidence did this capture rule record? web.skills_sh_inspection@1 · Finalize · attempt 1 Succeeded

Duration: 21 ms
Fetches: 0
Artifacts: 0
Observations: 1

Observed facts

skills_sh.inspection

100.0% confidence

Direct skills link count: 0
Github association count: 0
Outcome: succeeded

19 Web.ranked search inspection What evidence did this capture rule record? web.ranked_search_inspection@1 · Finalize · attempt 1 Partial

Duration: 26 ms
Fetches: 0
Artifacts: 0
Observations: 1

Observed facts

ranked_search.inspection

100.0% confidence

Brand: GameStop, Inc.
Brand source: json_ld_name
Category: shop gamestop world
Category source: meta_description_terms_v1
Outcome: provider_unconfigured
Provider: brave_web_search
Provider api version: 2023-10-11
Query template revision: 1

Immutable scan identity

Capture profile: static@28
Rule set: web-capture@28
Time bucket: 2026-09-30 19:02:00 UTC
Scan ID: 13ebeed2-a409-4b6d-9598-730ab6e028fb

Versioned evidence first

A later criteria version can evaluate this same stored scan without changing what the scanner observed.

Open this exact snapshot

Give your team a clear next step.

Share this report, apply the relevant changes, then scan again to check the result.

gamestop.com

What to fix first

Make crawler access explicit

Starting example

robots.txt AI crawler policy

robots.txt agent-user policy

Redirect hygiene

Starting example

Make page controls readable

Starting example

Accessible document structure

Accessible names on controls

Form control labeling

Starting example

Declare discovery links in the response

Starting example

HTTP Link header discovery

Starting example

Return a useful missing-page response

Starting example

Agent-friendly 404 responses

Starting example

Return useful source HTML

Starting example

Page token budget

Starting example

What this scan found

All results

Initial HTML preview

Linked pages read

Access

Accessibility

Discovery

Usability

What the scanner tested

Observed facts

HTTP transactions

Observed facts

HTTP transactions

Observed facts

Observed facts

Observed facts

Observed facts

Observed facts

HTTP transactions

Observed facts

HTTP transactions

Observed facts

Observed facts

Observed facts

HTTP transactions

Observed facts

HTTP transactions

Observed facts

Observed facts

Observed facts

Observed facts

HTTP transactions

Observed facts

HTTP transactions

Observed facts

Observed facts

Give your team a clear next step.