gamestop.com

https://gamestop.com/

Legacy site · Static audit

The static audit found gaps. Start with the fixes below.

Pass starts at 80 / 100. This scan does not prove that an agent can complete a purchase. Method and limits

30/ 100

NEEDS WORK

Core coverage: Not measured of core weight verified
Score model: v26Versioned criteria

Scanned 2026-09-30 15:43:15 UTC

What to fix first

Start with these changes. Open a fix for the finding, example, and supporting evidence.

5 priority changes

1
Document the access method
+12.9 points estimated
State whether access is public or needs credentials. Link the applicable authentication metadata.

OAuth 2.0 support Scoped permissions OAuth authorization-server metadata auth.md exists Agent auth discovery metadata
Starting example
```
# Authentication

Public report reads need no credentials.
Write requests require a bearer token.
Never put tokens in URLs.
```
View findings and full example

Suggested location: /auth.md
- OAuth 2.0 support
  
  Finding: The fixed discovery paths did not provide a usable OAuth authorization-server signal.
  
  Change: Publish RFC 9728 protected-resource metadata and RFC 8414 authorization-server metadata.
  Open this check and its evidence
- Scoped permissions
  
  Finding: The discovered OAuth metadata does not declare supported scopes.
  
  Change: Publish scopes_supported in protected-resource or authorization-server metadata.
  Open this check and its evidence
- OAuth authorization-server metadata
  
  Finding: The scan did not find authorization-server metadata at the fixed well-known path.
  
  Change: Publish RFC 8414 metadata at /.well-known/oauth-authorization-server.
  Open this check and its evidence
- auth.md exists
  
  Finding: The scan did not find /auth.md.
  
  Change: Publish a stable agent authentication walkthrough at /auth.md.
  Open this check and its evidence
- Agent auth discovery metadata
  
  Finding: The fixed discovery documents do not publish an agent_auth chain.
  
  Change: Publish protected-resource metadata and an agent_auth block that points to /auth.md.
  Open this check and its evidence
Starting example
```
# Authentication

Public report reads need no credentials.
Write requests require a bearer token.
Never put tokens in URLs.
```
Adapt this example to the service. Apply every relevant change listed above, then confirm it with a new scan.
2
Publish a usable API contract
+9.5 points estimated
Link public API instructions and a valid OpenAPI document. Show request and response examples.

Public API documentation is linked Developer portal MCP well-known discovery MCP server or manifest MCP server card
View findings and full example

Suggested location: /docs
- Public API documentation is linked
  
  Finding: No public API documentation link was found.
  
  Change: Add a named link to the public API documentation.
  Open this check and its evidence
- Developer portal
  
  Finding: No developer portal link was found.
  
  Change: Add a named link to a public developer portal.
  Open this check and its evidence
- MCP well-known discovery
  
  Finding: No MCP discovery signal was found at the bounded well-known paths.
  
  Change: Publish /.well-known/mcp, a server card, or an MCP manifest.
  Open this check and its evidence
- MCP server or manifest
  
  Finding: The bounded static scan found no usable MCP endpoint, card, or manifest.
  
  Change: Publish a server card or manifest and expose a Streamable HTTP MCP endpoint.
  Open this check and its evidence
- MCP server card
  
  Finding: No MCP server card was found at /.well-known/mcp/server-card.json.
  
  Change: Publish a server card with name, version, description, and a remote endpoint.
  Open this check and its evidence
Starting example
```
{
  "info": {
    "title": "Example API",
    "version": "1.0.0"
  },
  "openapi": "3.1.0",
  "paths": {
    "/status": {
      "get": {
        "responses": {
          "200": {
            "description": "Service status"
          }
        }
      }
    }
  }
}
```
Adapt this example to the service. Apply every relevant change listed above, then confirm it with a new scan.
3
Make crawler access explicit
+7.8 points estimated
Review the recorded robots rule and access response. Permit public content for the clients you support.

robots.txt AI crawler policy robots.txt agent-user policy Redirect hygiene
Starting example
```
User-agent: AgentReadiness
Allow: /

Sitemap: https://example.com/sitemap.xml
```
View findings and full example

Suggested location: /robots.txt
- robots.txt AI crawler policy
  
  Finding: robots.txt has no explicit policy for known AI crawler tokens.
  
  Change: Publish explicit retrieval and training crawler groups in robots.txt.
  Open this check and its evidence
- robots.txt agent-user policy
  
  Finding: robots.txt has no explicit policy for user-directed agent tokens.
  
  Change: Add explicit groups for user-directed agent fetchers.
  Open this check and its evidence
- Redirect hygiene
  
  Finding: The target uses 1 redirect(s), including 1 cross-origin redirect(s).
  
  Change: Use one stable canonical HTTPS URL and keep the chain on the intended origin.
  Open this check and its evidence
Starting example
```
User-agent: AgentReadiness
Allow: /

Sitemap: https://example.com/sitemap.xml
```
Adapt this example to the service. Apply every relevant change listed above, then confirm it with a new scan.

2 more priority changes

4
Make page controls readable
+5.1 points estimated
Use headings, native controls, and visible labels. Review the recorded control findings.

Accessible document structure Accessible names on controls Form control labeling
Starting example
```
<label for="site">Website URL</label><input id="site" name="url" type="url"><button type="submit">Check site</button>
```
View findings and full example

Suggested location: /
- Accessible document structure
  
  Finding: The document has some semantic structure, but its landmarks or heading order are incomplete.
  
  Change: Use one main region, a navigation landmark, one clear H1, and sequential heading levels.
  Open this check and its evidence
- Accessible names on controls
  
  Finding: 151 of 407 detected controls have no computed source name.
  
  Change: Give every control a stable name that an accessibility client can compute.
  Open this check and its evidence
- Form control labeling
  
  Finding: 1 of 4 form fields do not have an explicit computed label.
  
  Change: Associate each field with a visible label or a valid ARIA labeling relationship.
  Open this check and its evidence
Starting example
```
<label for="site">Website URL</label><input id="site" name="url" type="url"><button type="submit">Check site</button>
```
Adapt this example to the service. Apply every relevant change listed above, then confirm it with a new scan.
5
Declare discovery links in the response
+3.4 points estimated
Link only resources that the service provides. Use a Link header to identify the API description.

HTTP Link header discovery
Starting example
```
Link: </openapi.json>; rel="service-desc"; type="application/json"
```
View findings and full example

Suggested location: Main page response headers
- HTTP Link header discovery
  
  Finding: The final response has no HTTP Link header.
  
  Change: Add HTTP Link relations for important machine-readable discovery resources.
  Open this check and its evidence
Starting example
```
Link: </openapi.json>; rel="service-desc"; type="application/json"
```
Adapt this example to the service. Apply every relevant change listed above, then confirm it with a new scan.

Estimated gains use this report's model. All checks listed in a fix must pass to earn its full estimated gain.

All checks 124Findings, recommended changes, and score weights

What this scan found

9 checks passed. 46 need attention. 14 could not be verified. Checks that do not apply stay out of the score.

Passed: 9
Needs attention: 46
Could not verify: 14
Not applicable: 55

Capture rules: 17 of 17 complete
HTTP requests: 46
Saved artifacts: 43
Observations: 56

All results

Results that need attention are listed first. Open a row for its reason and recommended change.

001 Accessible names on controls Usability · Recommended · Legacy Failed 0 of 600

Finding

151 of 407 detected controls have no computed source name.

Recommended change

Give every control a stable name that an accessibility client can compute.

Check ID: ax-accessible-names@1
Supporting evidence: View stored observation

002 Agent Plugins manifest Discovery · Emerging · Legacy Failed 0 of 100

Finding

The product page does not advertise a public GitHub source repository.

Recommended change

Link the canonical public GitHub repository from the product page.

Check ID: agent-plugins-repo@1
Supporting evidence: View stored observation

003 Agent Skills index conformance Discovery · Emerging · Legacy Failed 0 of 300

Finding

No Agent Skills index was found at the v0.2.0 discovery path.

Recommended change

Publish /.well-known/agent-skills/index.json with the v0.2.0 schema.

Check ID: agent-skills-index-v2@1
Supporting evidence: View stored observation

004 Agent auth discovery metadata Usability · Recommended · Legacy Failed 0 of 600

Finding

The fixed discovery documents do not publish an agent_auth chain.

Recommended change

Publish protected-resource metadata and an agent_auth block that points to /auth.md.

Check ID: agent-auth-discovery-metadata@1
Supporting evidence: View stored observation View stored observation

005 Agent discovery file Discovery · Required · Legacy Failed 0 of 500

Finding

No Agent Skills index was found at /.well-known/agent-skills/index.json.

Recommended change

Publish an index with a non-empty skills array and a name and description for every skill.

Check ID: agent-discovery-file@1
Supporting evidence: View stored observation

006 Agent mode view Accessibility · Emerging · Legacy Failed 0 of 300

Finding

The homepage agent-mode query did not return a dedicated view.

Recommended change

Serve ?mode=agent as JSON, Markdown, or plain text with capability and integration details.

Check ID: agent-mode-view@1
Supporting evidence: View stored observation

007 Agent onboarding friction Usability · Recommended · Legacy Failed 0 of 200

Finding

The scan found fewer than two bounded onboarding signals.

Recommended change

Provide a visible developer entry point, public documentation, llms.txt, agent instructions, and an OpenAPI document.

Check ID: onboarding-friction@1
Supporting evidence: View stored observation View stored observation View stored observation View stored observation View stored observation

008 Agent platform repository configurations Discovery · Emerging · Legacy Failed 0 of 100

Finding

The product page does not advertise a public GitHub source repository.

Recommended change

Link the canonical public GitHub repository from the product page.

Check ID: agent-rules-repo@1
Supporting evidence: View stored observation

009 Agent usage instructions Accessibility · Required · Legacy Failed 0 of 400

Finding

The checked llms.txt and dedicated instruction paths do not explain when an agent should use the product.

Recommended change

Add a specific when-to-use section to llms.txt or a dedicated agent instruction document.

Check ID: agent-instruction@1
Supporting evidence: View stored observation View stored observation

010 Agent-friendly 404 responses Usability · Recommended · Legacy Failed 0 of 600

Finding

The missing-path probe does not return 404 or 410.

Recommended change

Return a real 404 or 410 instead of a 200 application shell for unknown paths.

Check ID: agent-friendly-404@1
Supporting evidence: View stored observation

011 Agentic resource catalog Discovery · Emerging · Legacy Failed 0 of 300

Finding

No usable resource catalog was found at either bounded well-known path.

Recommended change

Publish /.well-known/ard.json or /.well-known/ai-catalog.json.

Check ID: ard-catalog@1
Supporting evidence: View stored observation View stored observation

012 CLI tool available Usability · Recommended · Legacy Failed 0 of 300

Finding

The product page does not provide a usable public CLI path.

Recommended change

Publish a CLI, a copyable install command, and a stable public documentation or package link.

Check ID: cli-tool@1
Supporting evidence: View stored observation

013 Developer portal Access · Recommended · Legacy Failed 0 of 600

Finding

No developer portal link was found.

Recommended change

Add a named link to a public developer portal.

Check ID: developer-portal@1
Supporting evidence: View stored observation

014 Form control labeling Usability · Recommended · Legacy Failed 0 of 600

Finding

1 of 4 form fields do not have an explicit computed label.

Recommended change

Associate each field with a visible label or a valid ARIA labeling relationship.

Check ID: ax-form-labeling@1
Supporting evidence: View stored observation

015 HTTP Link header discovery Access · Required · Legacy Failed 0 of 1000

Finding

The final response has no HTTP Link header.

Recommended change

Add HTTP Link relations for important machine-readable discovery resources.

Check ID: link-headers-discovery@1
Supporting evidence: View stored observation

016 Identified bot Markdown serving Access · Emerging · Legacy Failed 0 of 300

Finding

The identified bot request received text/html, not Markdown.

Recommended change

Optionally serve a Markdown representation to the truthful AgentReadinessBot identity.

Check ID: agent-ua-markdown@1
Supporting evidence: View stored observation

017 JSON error responses Usability · Required · Legacy Failed 0 of 1000

Finding

The missing-path response is not a structured JSON error.

Recommended change

Return application/problem+json or a stable JSON error object for API errors.

Check ID: json-error-responses@1
Supporting evidence: View stored observation

018 MCP server card Usability · Recommended · Legacy Failed 0 of 300

Finding

No MCP server card was found at /.well-known/mcp/server-card.json.

Recommended change

Publish a server card with name, version, description, and a remote endpoint.

Check ID: mcp-server-card@1
Supporting evidence: View stored observation

019 MCP server or manifest Usability · Recommended · Legacy Failed 0 of 500

Finding

The bounded static scan found no usable MCP endpoint, card, or manifest.

Recommended change

Publish a server card or manifest and expose a Streamable HTTP MCP endpoint.

Check ID: mcp-server@1
Supporting evidence: View stored observation View stored observation View stored observation

020 MCP well-known discovery Accessibility · Recommended · Legacy Failed 0 of 400

Finding

No MCP discovery signal was found at the bounded well-known paths.

Recommended change

Publish /.well-known/mcp, a server card, or an MCP manifest.

Check ID: mcp-well-known-discovery@1
Supporting evidence: View stored observation View stored observation View stored observation

021 Markdown URL fallback Access · Emerging · Legacy Failed 0 of 300

Finding

The scan did not find a Markdown homepage at /index.md.

Recommended change

Publish a text/markdown homepage at /index.md.

Check ID: markdown-url-fallback@1
Supporting evidence: View stored observation

022 Markdown agent docs Access · Emerging · Legacy Failed 0 of 300

Finding

The canonical root did not return Markdown for a Markdown-preferred request.

Recommended change

Implement Accept: text/markdown negotiation or publish a stable Markdown route.

Check ID: markdown-negotiation@1
Supporting evidence: View stored observation

023 Markdown alternate link Access · Emerging · Legacy Failed 0 of 300

Finding

The page does not declare a Markdown alternate.

Recommended change

Add a link rel=alternate with type=text/markdown and a stable URL.

Check ID: markdown-link-alternate@1
Supporting evidence: View stored observation

024 Modular llms.txt Accessibility · Emerging · Legacy Failed 0 of 200

Finding

No scoped llms.txt file was found at the bounded docs, API, or developers paths.

Recommended change

Publish /docs/llms.txt, /api/llms.txt, or /developers/llms.txt with a focused resource index.

Check ID: modular-llms-txt@1
Supporting evidence: View stored observation

025 Multi-language SDK packages Usability · Recommended · Legacy Failed 0 of 300

Finding

The product page has no reachable multi-language SDK evidence.

Recommended change

Link stable public SDK pages or package pages and identify their programming languages.

Check ID: rest-sdk-packages@1
Supporting evidence: View stored observation

026 NLWeb /ask endpoint Usability · Emerging · Legacy Failed 0 of 100

Finding

The /ask route requires credentials for the public discovery query.

Recommended change

Permit a bounded public list query, or publish an explicit public NLWeb access policy.

Check ID: nlweb-ask@1
Supporting evidence: View stored observation

027 NLWeb Schema Map directive Accessibility · Emerging · Legacy Failed 0 of 200

Finding

robots.txt does not publish a Schema Map directive.

Recommended change

Add schemamap: followed by the absolute URL of the structured feed map.

Check ID: nlweb-schema-feeds@1
Supporting evidence: View stored observation

028 NLWeb streaming support Usability · Emerging · Legacy Failed 0 of 100

Finding

The /ask route requires credentials before streaming can be tested.

Recommended change

Permit a bounded public NLWeb query and its streaming form.

Check ID: nlweb-streaming@1
Supporting evidence: View stored observation

029 NPM or PyPI SDK package Discovery · Recommended · Legacy Failed 0 of 100

Finding

The product page does not link an NPM or PyPI SDK package.

Recommended change

Publish an SDK package and link its exact NPM or PyPI package page.

Check ID: npm-sdk-package@1
Supporting evidence: View stored observation

030 OAuth 2.0 support Usability · Required · Legacy Failed 0 of 1000

Finding

The fixed discovery paths did not provide a usable OAuth authorization-server signal.

Recommended change

Publish RFC 9728 protected-resource metadata and RFC 8414 authorization-server metadata.

Check ID: oauth-support@1
Supporting evidence: View stored observation View stored observation

031 OAuth authorization-server metadata Usability · Recommended · Legacy Failed 0 of 600

Finding

The scan did not find authorization-server metadata at the fixed well-known path.

Recommended change

Publish RFC 8414 metadata at /.well-known/oauth-authorization-server.

Check ID: mcp-oauth-metadata@1
Supporting evidence: View stored observation View stored observation

032 Page token budget Access · Recommended · Legacy Failed 0 of 600

Finding

The estimated visible-text size is 127560 tokens.

Recommended change

Keep the main page between 100 and 15,000 estimated visible-text tokens.

Check ID: page-token-budget@1
Supporting evidence: View stored observation

033 Public API documentation is linked Access · Required · Legacy Failed 0 of 1000

Finding

No public API documentation link was found.

Recommended change

Add a named link to the public API documentation.

Check ID: public-api-docs@1
Supporting evidence: View stored observation View stored observation

034 Scoped permissions Usability · Recommended · Legacy Failed 0 of 600

Finding

The discovered OAuth metadata does not declare supported scopes.

Recommended change

Publish scopes_supported in protected-resource or authorization-server metadata.

Check ID: scoped-permissions@1
Supporting evidence: View stored observation View stored observation

035 Verified skills.sh listing Discovery · Emerging · Legacy Failed 0 of 100

Finding

The product page exposes no direct skills.sh link or verifiable GitHub-owner association for a catalog lookup.

Recommended change

Link the official GitHub organization or exact skills.sh page from the product page or structured sameAs data.

Check ID: skills-sh-listed@1
Supporting evidence: View stored observation

036 Web Bot Auth key directory Usability · Emerging · Legacy Failed 0 of 300

Finding

No Web Bot Auth key directory was found at the well-known path.

Recommended change

Publish an Ed25519 JWK keys array with kid, x, nbf, and exp fields.

Check ID: web-bot-auth-directory@1
Supporting evidence: View stored observation

037 WebMCP source declarations Usability · Emerging · Legacy Failed 0 of 400

Finding

No server-rendered or inline-script WebMCP declaration was found.

Recommended change

Add declarative form tools or register tools through document.modelContext.

Check ID: webmcp@1
Supporting evidence: View stored observation

038 auth.md exists Usability · Required · Legacy Failed 0 of 1000

Finding

The scan did not find /auth.md.

Recommended change

Publish a stable agent authentication walkthrough at /auth.md.

Check ID: auth-md-exists@1
Supporting evidence: View stored observation

039 robots.txt AI crawler policy Discovery · Required · Legacy Failed 0 of 1000

Finding

robots.txt has no explicit policy for known AI crawler tokens.

Recommended change

Publish explicit retrieval and training crawler groups in robots.txt.

Check ID: robots-ai-policy-quality@1
Supporting evidence: View stored observation

040 robots.txt agent-user policy Access · Required · Legacy Failed 0 of 1000

Finding

robots.txt has no explicit policy for user-directed agent tokens.

Recommended change

Add explicit groups for user-directed agent fetchers.

Check ID: robots-agent-user-policy@1
Supporting evidence: View stored observation

041 Accessible document structure Usability · Recommended · Legacy Warning 300 of 600

Finding

The document has some semantic structure, but its landmarks or heading order are incomplete.

Recommended change

Use one main region, a navigation landmark, one clear H1, and sequential heading levels.

Check ID: ax-document-structure@1
Supporting evidence: View stored observation

042 Organization schema completeness Access · Recommended · Legacy Warning 500 of 600

Finding

The best Organization entity has 5 of 6 fields.

Recommended change

Add name, URL, logo, description, sameAs, and contactPoint fields.

Check ID: org-schema-completeness@1
Supporting evidence: View stored observation

043 Pricing information is accessible Access · Required · Legacy Warning 500 of 1000

Finding

The page has one pricing signal, but not both visible text and a pricing link.

Recommended change

Add a clear pricing link and plain-language pricing information.

Check ID: pricing-info@1
Supporting evidence: View stored observation View stored observation

044 Redirect hygiene Access · Recommended · Legacy Warning 300 of 600

Finding

The target uses 1 redirect(s), including 1 cross-origin redirect(s).

Recommended change

Use one stable canonical HTTPS URL and keep the chain on the intended origin.

Check ID: redirect-hygiene@1
Supporting evidence: View stored observation

045 Schema type breadth Access · Recommended · Legacy Warning 200 of 600

Finding

The page declares only 1 JSON-LD type(s).

Recommended change

Describe the organization, site, and main product with linked schema types.

Check ID: schema-type-breadth@1
Supporting evidence: View stored observation

046 Trust anchor pages Access · Required · Legacy Warning 500 of 1000

Finding

The page links to only 2 trust-page category or categories.

Recommended change

Link to public about, contact, privacy, terms, and security pages.

Check ID: trust-anchors@1
Supporting evidence: View stored observation

047 A2A Agent Card Access · Recommended · Legacy Could not verify 0 of 0

Finding

The scan could not collect the required discovery evidence.

Recommended change

Run capture profile version 3 and confirm that robots and network access permit this request.

Check ID: a2a-agent-card@1
Supporting evidence: View stored observation

048 API catalog Access · Required · Legacy Could not verify 0 of 0

Finding

The scan could not collect the required discovery evidence.

Recommended change

Run capture profile version 3 and confirm that robots and network access permit this request.

Check ID: api-catalog-rfc9727@1
Supporting evidence: View stored observation

049 Brand name discoverability Discovery · Required · Legacy Could not verify 0 of 0

Finding

The scan did not collect valid ranked web-search evidence for this query.

Recommended change

Configure the ranked search provider and run capture profile version 26 to collect new evidence.

Check ID: ranked-brand-discoverability@1
Supporting evidence: No linked observation was stored.

050 Category search visibility Discovery · Recommended · Legacy Could not verify 0 of 0

Finding

The scan did not collect valid ranked web-search evidence for this query.

Recommended change

Configure the ranked search provider and run capture profile version 26 to collect new evidence.

Check ID: ranked-category-visibility@1
Supporting evidence: No linked observation was stored.

051 Developer resource discoverability Discovery · Recommended · Legacy Could not verify 0 of 0

Finding

The scan did not collect valid ranked web-search evidence for this query.

Recommended change

Configure the ranked search provider and run capture profile version 26 to collect new evidence.

Check ID: ranked-developer-discoverability@1
Supporting evidence: No linked observation was stored.

052 OAuth protected resource metadata Usability · Required · Legacy Could not verify 0 of 0

Finding

The scan could not collect the required discovery evidence.

Recommended change

Run capture profile version 3 and confirm that robots and network access permit this request.

Check ID: oauth-protected-resource@1
Supporting evidence: View stored observation

053 Official MCP Registry listing Discovery · Recommended · Legacy Could not verify 0 of 0

Finding

The scan did not collect valid official MCP Registry evidence.

Recommended change

Run capture profile version 23 to collect MCP Registry evidence.

Check ID: mcp-registry-listed@1
Supporting evidence: No linked observation was stored.

054 OpenAPI document is published Access · Required · Legacy Could not verify 0 of 0

Finding

The scan could not collect the required discovery evidence.

Recommended change

Run capture profile version 3 and confirm that robots and network access permit this request.

Check ID: openapi-spec@1
Supporting evidence: View stored observation

055 Pricing Markdown exists Access · Emerging · Legacy Could not verify 0 of 0

Finding

The scan could not collect the required discovery evidence.

Recommended change

Run capture profile version 3 and confirm that robots and network access permit this request.

Check ID: pricing-md@1
Supporting evidence: View stored observation

056 Sitemap exists Access · Required · Legacy Could not verify 0 of 0

Finding

The scan could not collect the required discovery evidence.

Recommended change

Run capture profile version 3 and confirm that robots and network access permit this request.

Check ID: sitemap@1
Supporting evidence: View stored observation

057 Sitemap freshness metadata Access · Recommended · Legacy Could not verify 0 of 0

Finding

The scan could not collect the required discovery evidence.

Recommended change

Run capture profile version 3 and confirm that robots and network access permit this request.

Check ID: sitemap-lastmod@1
Supporting evidence: View stored observation

058 Universal Commerce Protocol Payments · Required · Legacy Could not verify 0 of 0

Finding

The scan could not collect the required discovery evidence.

Recommended change

Run capture profile version 3 and confirm that robots and network access permit this request.

Check ID: ucp-support@1
Supporting evidence: View stored observation

059 llms.txt exists Access · Required · Legacy Could not verify 0 of 0

Finding

The scan could not collect the required discovery evidence.

Recommended change

Run capture profile version 3 and confirm that robots and network access permit this request.

Check ID: llms-txt-exists@1
Supporting evidence: View stored observation

060 llms.txt formatting Access · Recommended · Legacy Could not verify 0 of 0

Finding

The scan could not collect the required discovery evidence.

Recommended change

Run capture profile version 3 and confirm that robots and network access permit this request.

Check ID: llms-txt-formatting@1
Supporting evidence: View stored observation

061 Accessibility-tree instruction safety Usability · Recommended · Legacy Passed 600 of 600

Finding

No configured instruction-risk pattern was found in the evaluated hidden accessibility text.

Check ID: ax-tree-injection-safe@1
Supporting evidence: View stored observation

062 Agent crawler reachability Access · Recommended · Legacy Passed 600 of 600

Finding

robots policy permits all 3 evaluated retrieval crawlers at the root path.

Check ID: agent-crawler-reachability@1
Supporting evidence: View stored observation

063 Content without JavaScript Access · Required · Legacy Passed 1000 of 1000

Finding

The source HTML has 510239 visible text characters.

Check ID: content-no-js@1
Supporting evidence: View stored observation

064 JSON-LD entity linking Access · Recommended · Legacy Passed 600 of 600

Finding

JSON-LD has 7 unique sameAs link(s).

Check ID: json-ld-entity-linking@1
Supporting evidence: View stored observation

065 JSON-LD structured data Access · Required · Legacy Passed 1000 of 1000

Finding

The page has 1 valid JSON-LD block(s).

Check ID: json-ld@1
Supporting evidence: View stored observation

066 Metadata completeness Access · Required · Legacy Passed 1000 of 1000

Finding

All 9 metadata fields are present.

Check ID: metadata-completeness@1
Supporting evidence: View stored observation

067 Native interactive controls Usability · Recommended · Legacy Passed 600 of 600

Finding

All 407 detected controls use native HTML semantics.

Check ID: ax-native-controls@1
Supporting evidence: View stored observation

068 Not blocked by bot detection Access · Required · Legacy Passed 1000 of 1000

Finding

The scanner received the target content without a bot block.

Check ID: bot-detection@1
Supporting evidence: View stored observation

069 Verified Wikidata and English Wikipedia presence Discovery · Recommended · Legacy Passed 100 of 100

Finding

Wikidata has a verified entity for the domain and that entity has an English Wikipedia sitelink.

Check ID: wikipedia-presence@1
Supporting evidence: View stored observation

070 A2UI generative UI support Usability · Emerging · Legacy Not applicable 0 of 0

Finding

No inspectable public MCP HTTP endpoint was found.

Check ID: a2ui-support@1
Supporting evidence: No linked observation was stored.

071 ACP checkout protocol Payments · Required · Legacy Not applicable 0 of 0

Finding

No commerce or payment protocol signal was found.

Check ID: acp-support@1
Supporting evidence: No linked observation was stored.

072 ACP delegated payment Payments · Recommended · Legacy Not applicable 0 of 0

Finding

No commerce or payment protocol signal was found.

Check ID: acp-delegate-payment@1
Supporting evidence: No linked observation was stored.

073 AI Catalog discovery Discovery · Emerging · Legacy Not applicable 0 of 0

Finding

The optional AI Catalog alias is not published. Its absence does not reduce the score.

Check ID: ai-catalog-published@1
Supporting evidence: No linked observation was stored.

074 AP2 mandate capability Payments · Recommended · Legacy Not applicable 0 of 0

Finding

No commerce or payment protocol signal was found.

Check ID: ap2-support@1
Supporting evidence: No linked observation was stored.

075 API schema complexity Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No OpenAPI document was found at the bounded fixed paths, so this REST contract check does not apply to the stored evidence.

Check ID: api-schema-analysis@1
Supporting evidence: No linked observation was stored.

076 Agent auth WWW-Authenticate hint Usability · Recommended · Legacy Not applicable 0 of 0

Finding

The primary public request did not return 401, so an authentication challenge hint was not required.

Check ID: agent-auth-www-authenticate@1
Supporting evidence: No linked observation was stored.

077 Agent auth endpoints respond Usability · Emerging · Legacy Not applicable 0 of 0

Finding

No identity, claim, or events endpoint was advertised.

Check ID: agent-auth-endpoints-reachable@1
Supporting evidence: No linked observation was stored.

078 Function calling compatibility Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No OpenAPI document was found at the bounded fixed paths, so this REST contract check does not apply to the stored evidence.

Check ID: function-calling-compat@1
Supporting evidence: No linked observation was stored.

079 GraphQL asynchronous job pattern Usability · Recommended · Legacy Not applicable 0 of 0

Finding

The scanner found a protected GraphQL route, but it does not use credentials.

Check ID: graphql-async-job-pattern@1
Supporting evidence: No linked observation was stored.

080 GraphQL batch mutations Usability · Recommended · Legacy Not applicable 0 of 0

Finding

The scanner found a protected GraphQL route, but it does not use credentials.

Check ID: graphql-batch-mutations@1
Supporting evidence: No linked observation was stored.

081 GraphQL pagination pattern Usability · Recommended · Legacy Not applicable 0 of 0

Finding

The scanner found a protected GraphQL route, but it does not use credentials.

Check ID: graphql-pagination-pattern@1
Supporting evidence: No linked observation was stored.

082 GraphQL schema description coverage Usability · Recommended · Legacy Not applicable 0 of 0

Finding

The scanner found a protected GraphQL route, but it does not use credentials.

Check ID: graphql-schema-completeness@1
Supporting evidence: No linked observation was stored.

083 GraphQL typed error model Usability · Recommended · Legacy Not applicable 0 of 0

Finding

The scanner found a protected GraphQL route, but it does not use credentials.

Check ID: graphql-error-type-definition@1
Supporting evidence: No linked observation was stored.

084 GraphQL versioning and deprecation policy Usability · Recommended · Legacy Not applicable 0 of 0

Finding

The scanner found a protected GraphQL route, but it does not use credentials.

Check ID: graphql-versioning-policy@1
Supporting evidence: No linked observation was stored.

085 Idempotency-Key support Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No OpenAPI document was found at the bounded fixed paths, so this REST contract check does not apply to the stored evidence.

Check ID: idempotency-key-support@1
Supporting evidence: No linked observation was stored.

086 Linked content is publicly readable Accessibility · Recommended · Legacy Not applicable 0 of 0

Finding

No llms.txt content links were available for a bounded public-access sample.

Check ID: docs-public-content@1
Supporting evidence: No linked observation was stored.

087 MCP App view CSP Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No inspectable public MCP HTTP endpoint was found.

Check ID: mcp-view-csp@1
Supporting evidence: No linked observation was stored.

088 MCP App view reachable Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No inspectable public MCP HTTP endpoint was found.

Check ID: mcp-view-domain@1
Supporting evidence: No linked observation was stored.

089 MCP Apps UI quality Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No inspectable public MCP HTTP endpoint was found.

Check ID: mcp-apps-ui-quality@1
Supporting evidence: No linked observation was stored.

090 MCP Apps support Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No inspectable public MCP HTTP endpoint was found.

Check ID: mcp-app-registry@1
Supporting evidence: No linked observation was stored.

091 MCP OAuth challenge alignment Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No MCP server signal was found.

Check ID: mcp-auth-mechanism@1
Supporting evidence: No linked observation was stored.

092 MCP PKCE S256 support Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No MCP server signal was found.

Check ID: mcp-pkce-s256@1
Supporting evidence: No linked observation was stored.

093 MCP Streamable HTTP transport Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No MCP server signal was found.

Check ID: mcp-streamable-http@1
Supporting evidence: No linked observation was stored.

094 MCP error handling Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No inspectable MCP HTTP endpoint was found.

Check ID: mcp-error-handling@1
Supporting evidence: No linked observation was stored.

095 MCP parameter schemas Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No inspectable MCP HTTP endpoint was found.

Check ID: mcp-param-schemas@1
Supporting evidence: No linked observation was stored.

096 MCP registry branding Discovery · Emerging · Legacy Not applicable 0 of 0

Finding

No MCP server card is published, so registry branding does not apply.

Check ID: registry-branding@1
Supporting evidence: No linked observation was stored.

097 MCP resource quality Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No inspectable MCP HTTP endpoint was found.

Check ID: mcp-resource-quality@1
Supporting evidence: No linked observation was stored.

098 MCP resources exposed Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No inspectable MCP HTTP endpoint was found.

Check ID: mcp-resource-listing@1
Supporting evidence: No linked observation was stored.

099 MCP server identity Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No inspectable MCP HTTP endpoint was found.

Check ID: mcp-server-identity@1
Supporting evidence: No linked observation was stored.

100 MCP tool annotations Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No inspectable MCP HTTP endpoint was found.

Check ID: mcp-tool-annotations@1
Supporting evidence: No linked observation was stored.

101 MCP tool descriptions Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No inspectable MCP HTTP endpoint was found.

Check ID: mcp-tool-descriptions@1
Supporting evidence: No linked observation was stored.

102 MCP tool listing Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No inspectable MCP HTTP endpoint was found.

Check ID: mcp-tool-listing@1
Supporting evidence: No linked observation was stored.

103 MCP tool naming Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No inspectable MCP HTTP endpoint was found.

Check ID: mcp-tool-naming@1
Supporting evidence: No linked observation was stored.

104 MPP payment protocol Payments · Required · Legacy Not applicable 0 of 0

Finding

No commerce or payment protocol signal was found.

Check ID: mpp-support@1
Supporting evidence: No linked observation was stored.

105 Markdown code fence validity Accessibility · Emerging · Legacy Not applicable 0 of 0

Finding

No served Markdown document was confirmed at the bounded paths.

Check ID: code-fence-validity@1
Supporting evidence: No linked observation was stored.

106 Markdown frontmatter metadata Accessibility · Emerging · Legacy Not applicable 0 of 0

Finding

No served Markdown document was confirmed at the bounded document paths.

Check ID: markdown-frontmatter@1
Supporting evidence: No linked observation was stored.

107 Markdown negotiation cache variation Access · Recommended · Legacy Not applicable 0 of 0

Finding

The canonical response did not negotiate Markdown, so Vary: Accept does not apply.

Check ID: markdown-negotiation-vary@1
Supporting evidence: No linked observation was stored.

108 Product and documentation MCP coverage Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No public streamable HTTP MCP endpoint was discovered.

Check ID: mcp-multi-surface-coverage@1
Supporting evidence: No linked observation was stored.

109 Public API endpoint responds Usability · Required · Legacy Not applicable 0 of 0

Finding

No parameter-free GET operation was available in the discovered OpenAPI document.

Check ID: public-api-reachable@1
Supporting evidence: No linked observation was stored.

110 REST asynchronous job pattern Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No OpenAPI document was found at the bounded fixed paths, so this REST contract check does not apply to the stored evidence.

Check ID: async-job-pattern@1
Supporting evidence: No linked observation was stored.

111 REST batch endpoint Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No OpenAPI document was found at the bounded fixed paths, so this REST contract check does not apply to the stored evidence.

Check ID: batch-endpoints@1
Supporting evidence: No linked observation was stored.

112 REST pagination pattern Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No OpenAPI document was found at the bounded fixed paths, so this REST contract check does not apply to the stored evidence.

Check ID: pagination-shape@1
Supporting evidence: No linked observation was stored.

113 REST response schema coverage Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No OpenAPI document was found at the bounded fixed paths, so this REST contract check does not apply to the stored evidence.

Check ID: response-schema-coverage@1
Supporting evidence: No linked observation was stored.

114 REST typed error model Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No OpenAPI document was found at the bounded fixed paths, so this REST contract check does not apply to the stored evidence.

Check ID: api-error-model@1
Supporting evidence: No linked observation was stored.

115 REST versioning and deprecation policy Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No OpenAPI document was found at the bounded fixed paths, so this REST contract check does not apply to the stored evidence.

Check ID: api-versioning-policy@1
Supporting evidence: No linked observation was stored.

116 Rate limit response headers Usability · Recommended · Legacy Not applicable 0 of 0

Finding

The primary public response is not rate limited and exposes no API rate-limit contract.

Check ID: rate-limit-headers@1
Supporting evidence: No linked observation was stored.

117 Resource catalog entry quality Discovery · Emerging · Legacy Not applicable 0 of 0

Finding

No catalog exists, so catalog-entry quality does not apply.

Check ID: ard-entries-valid@1
Supporting evidence: No linked observation was stored.

118 Resource catalog trust manifests Discovery · Emerging · Legacy Not applicable 0 of 0

Finding

No catalog exists, so optional trust metadata does not apply.

Check ID: ard-trust-manifest@1
Supporting evidence: No linked observation was stored.

119 Sandbox or test environment Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No public OpenAPI document was found for environment analysis.

Check ID: sandbox-environment@1
Supporting evidence: No linked observation was stored.

120 Skills.sh catalog-page quality Access · Emerging · Legacy Not applicable 0 of 0

Finding

Quality is not evaluated because the scan found no verified skills.sh listing.

Check ID: skills-sh-quality@1
Supporting evidence: No linked observation was stored.

121 auth.md structure Usability · Recommended · Legacy Not applicable 0 of 0

Finding

auth.md was not available, so its walkthrough structure cannot be evaluated.

Check ID: auth-md-structure@1
Supporting evidence: No linked observation was stored.

122 auth.md walkthrough simulation Usability · Recommended · Legacy Not applicable 0 of 0

Finding

No auth.md or agent authentication discovery signal was found.

Check ID: auth-md-walkthrough-simulation@1
Supporting evidence: No linked observation was stored.

123 llms.txt links resolve Accessibility · Recommended · Legacy Not applicable 0 of 0

Finding

No links were found in a published llms.txt document.

Check ID: llms-links-resolve@1
Supporting evidence: No linked observation was stored.

124 x402 payment protocol Payments · Required · Legacy Not applicable 0 of 0

Finding

No commerce or payment protocol signal was found.

Check ID: x402-support@1
Supporting evidence: No linked observation was stored.

Scan evidence and limitsPages read, HTTP records, observations, and scan identity

Scan scope and limits

This report uses an earlier score model. Rescan for site scope and coverage.

How the score works

What the scanner tested

Open a rule to inspect its HTTP and extracted evidence.

1 Robots access Can a standards-aware agent access this site? web.robots@4 · Robots · attempt 1 Allowed

Duration: 135 ms
Fetches: 2
Artifacts: 2
Observations: 2

Observed facts

robots.analysis

100.0% confidence

Allowed agent user count: 3
Allowed retrieval count: 3
Availability: available
Explicit agent user count: 0
Explicit ai crawler count: 0
Group count: 3
Known policy count: 0
Same origin schema map url count: 0

robots.policy

100.0% confidence

Outcome: allow
Availability: available

HTTP transactions

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/robots.txt

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 290 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/html, application/xhtml+xml;q=0.9, application/json;q=0.5, text/plain;q=0.4, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 15:43:17 GMT
location: [value stored]
server: CloudFront
via: 1.1 e8e5d02c2ea3d5f8a88bac040b29c218.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 200 Success

agent_readiness_req · Protocol not exposed

https://www.gamestop.com//robots.txt

Content type: text/plain
Transferred: 766 B
Decoded: 2.1 KB
Duration: 560 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/html, application/xhtml+xml;q=0.9, application/json;q=0.5, text/plain;q=0.4, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: www.gamestop.com

Response headers (16)

age: 330829
cache-control: public, max-age=14400
cf-cache-status: [value stored]
cf-ray: [value stored]
connection: [value stored]
content-encoding: gzip
content-type: text/plain;charset=UTF-8
date: Wed, 30 Sep 2026 15:43:18 GMT
expires: Wed, 30 Sep 2026 19:43:18 GMT
last-modified: Sat, 26 Sep 2026 19:49:28 GMT
pragma: [value stored]
server: cloudflare
set-cookie: [REDACTED]
set-cookie: [REDACTED]
transfer-encoding: [value stored]
vary: accept-encoding

2 Primary HTTP response What does a direct HTTP client receive? web.primary_http@2 · Static capture · attempt 1 Succeeded

Duration: 118 ms
Fetches: 3
Artifacts: 3
Observations: 1

Observed facts

transport.fetch

100.0% confidence

Available: Yes
Outcome: success
Https: Yes
Status: 200
Content type: text/html
Body bytes: 1652132
Final url: https://www.gamestop.com/

HTTP transactions

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 247 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/html, application/xhtml+xml;q=0.9, application/json;q=0.5, text/plain;q=0.4, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 15:43:19 GMT
location: [value stored]
server: CloudFront
via: 1.1 e8e5d02c2ea3d5f8a88bac040b29c218.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 200 Success

agent_readiness_req · Protocol not exposed

https://www.gamestop.com/robots.txt

Content type: text/plain
Transferred: 766 B
Decoded: 2.1 KB
Duration: 242 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/html, application/xhtml+xml;q=0.9, application/json;q=0.5, text/plain;q=0.4, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: www.gamestop.com

Response headers (16)

age: 482623
cache-control: public, max-age=14400
cf-cache-status: [value stored]
cf-ray: [value stored]
connection: [value stored]
content-encoding: gzip
content-type: text/plain;charset=UTF-8
date: Wed, 30 Sep 2026 15:43:19 GMT
expires: Wed, 30 Sep 2026 19:43:19 GMT
last-modified: Fri, 25 Sep 2026 01:39:35 GMT
pragma: [value stored]
server: cloudflare
set-cookie: [REDACTED]
set-cookie: [REDACTED]
transfer-encoding: [value stored]
vary: accept-encoding

GET 200 Success

agent_readiness_req · Protocol not exposed

https://www.gamestop.com/

Content type: text/html
Transferred: 183.8 KB
Decoded: 1.58 MB
Duration: 354 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/html, application/xhtml+xml;q=0.9, application/json;q=0.5, text/plain;q=0.4, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: www.gamestop.com

Response headers (29)

cache-control: no-cache, no-store, must-revalidate
cf-cache-status: [value stored]
cf-ray: [value stored]
connection: [value stored]
content-encoding: gzip
content-type: text/html;charset=UTF-8
date: Wed, 30 Sep 2026 15:43:20 GMT
expires: Thu, 01 Dec 1994 16:00:00 GMT
pragma: [value stored]
server: cloudflare
server-timing: [value stored]
server-timing: [value stored]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
set-cookie: [REDACTED]
transfer-encoding: [value stored]
vary: accept-encoding

3 Web.discovery files What evidence did this capture rule record? web.discovery_files@12 · Static capture · attempt 1 Succeeded

Duration: 132 ms
Fetches: 32
Artifacts: 30
Observations: 27

Observed facts

discovery.a2a_agent_card

100.0% confidence

Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Final url: https://gamestop.com/.well-known/agent-card.json
Format valid: No
Id: a2a_agent_card
Method: GET
Outcome: redirect
Path: /.well-known/agent-card.json

discovery.acp_checkout_options

100.0% confidence

Allow header count: 0
Allow post: No
Body bytes: 1053
Body sha256: de80365f58dd81fb6657ba3be307fcd450b458d5f348d33615bef691b9b335d7
Content type: text/html
Final url: https://gamestop.com/checkout_sessions
Format valid: No
Id: acp_checkout_options

discovery.acp_delegate_payment_options

100.0% confidence

Allow header count: 0
Allow post: No
Body bytes: 1053
Body sha256: a189f1277bab926b2239819a6e55735e2aa36c4fa1bbba0ff4c1a3b522c70e1e
Content type: text/html
Final url: https://gamestop.com/agentic_commerce/delegate_payment
Format valid: No
Id: acp_delegate_payment_options

discovery.agent_friendly_404

100.0% confidence

Body bytes: 0
Body chars: 0
Body concise: Yes
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Final url: https://gamestop.com/.well-known/agent-readiness-probe/not-found-7b91e8d4
Format valid: No
Guidance present: No
Id: agent_friendly_404

discovery.agent_instructions

100.0% confidence

Agent instruction action signal count: 0
Agent instruction heading present: No
Agent instruction section chars: 0
Agent instruction valid: No
Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Canonical link present: No
Code fence delimiter count: 0

discovery.agent_mode_view

100.0% confidence

Auth signal: No
Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Capability signal: No
Endpoint signal: No
Final url: https://gamestop.com/
Format valid: No
Id: agent_mode_view

discovery.agent_skills_index

100.0% confidence

Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Final url: https://gamestop.com/.well-known/agent-skills/index.json
Format valid: No
Id: agent_skills_index
Method: GET
Outcome: redirect
Path: /.well-known/agent-skills/index.json

discovery.ai_catalog

100.0% confidence

Attested trust manifest count: 0
Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Display name entry count: 0
Entry count: 0
Exclusive target entry count: 0
Final url: https://gamestop.com/.well-known/ai-catalog.json
Format valid: No

discovery.api_catalog

100.0% confidence

Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Final url: https://gamestop.com/.well-known/api-catalog
Format valid: No
Id: api_catalog
Method: GET
Outcome: redirect
Path: /.well-known/api-catalog

discovery.api_catalog_head

100.0% confidence

Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Final url: https://gamestop.com/.well-known/api-catalog
Format valid: No
Id: api_catalog_head
Method: HEAD
Outcome: redirect
Path: /.well-known/api-catalog

discovery.ard_catalog

100.0% confidence

Attested trust manifest count: 0
Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Display name entry count: 0
Entry count: 0
Exclusive target entry count: 0
Final url: https://gamestop.com/.well-known/ard.json
Format valid: No

discovery.auth_md

100.0% confidence

Agent instruction action signal count: 0
Agent instruction heading present: No
Agent instruction section chars: 0
Agent instruction valid: No
Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Canonical link present: No
Code fence delimiter count: 0

discovery.llms_txt

100.0% confidence

Agent instruction action signal count: 0
Agent instruction heading present: No
Agent instruction section chars: 0
Agent instruction valid: No
Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Canonical link present: No
Code fence delimiter count: 0

discovery.markdown_negotiation

100.0% confidence

Agent instruction action signal count: 0
Agent instruction heading present: No
Agent instruction section chars: 0
Agent instruction valid: No
Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Canonical link present: No
Code fence delimiter count: 0

discovery.markdown_url_fallback

100.0% confidence

Agent instruction action signal count: 0
Agent instruction heading present: No
Agent instruction section chars: 0
Agent instruction valid: No
Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Canonical link present: No
Code fence delimiter count: 0

discovery.mcp_endpoint

100.0% confidence

Allow header present: No
Bearer challenge present: No
Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Challenge count: 0
Endpoint signal: No
Final url: https://gamestop.com/.well-known/mcp
Format valid: No

discovery.mcp_manifest

100.0% confidence

Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Direct endpoint present: No
Final url: https://gamestop.com/.well-known/mcp/manifest.json
Format valid: No
Id: mcp_manifest
Json valid: No
Method: GET

discovery.mcp_server_card

100.0% confidence

Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Description present: No
Display name present: No
Endpoint count: 0
Final url: https://gamestop.com/.well-known/mcp/server-card.json
Format valid: No
Icon count: 0

discovery.modular_llms_txt

100.0% confidence

Agent instruction action signal count: 0
Agent instruction heading present: No
Agent instruction section chars: 0
Agent instruction valid: No
Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Canonical link present: No
Code fence delimiter count: 0

discovery.oauth_authorization_server

100.0% confidence

Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Final url: https://gamestop.com/.well-known/oauth-authorization-server
Format valid: No
Id: oauth_authorization_server
Method: GET
Outcome: redirect
Path: /.well-known/oauth-authorization-server

discovery.oauth_protected_resource

100.0% confidence

Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Final url: https://gamestop.com/.well-known/oauth-protected-resource
Format valid: No
Id: oauth_protected_resource
Method: GET
Outcome: redirect
Path: /.well-known/oauth-protected-resource

discovery.openapi

100.0% confidence

Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Final url: https://gamestop.com/openapi.yml
Format valid: No
Id: openapi
Method: GET
Outcome: redirect
Path: /openapi.yml

discovery.pricing_markdown

100.0% confidence

Agent instruction action signal count: 0
Agent instruction heading present: No
Agent instruction section chars: 0
Agent instruction valid: No
Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Canonical link present: No
Code fence delimiter count: 0

discovery.sitemap

100.0% confidence

Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Final url: https://gamestop.com/sitemap.xml
Format valid: No
Id: sitemap
Method: GET
Outcome: redirect
Path: /sitemap.xml

discovery.ucp

100.0% confidence

Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Final url: https://gamestop.com/.well-known/ucp
Format valid: No
Id: ucp
Method: GET
Outcome: redirect
Path: /.well-known/ucp

discovery.web_bot_auth_directory

100.0% confidence

Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Final url: https://gamestop.com/.well-known/http-message-signatures-directory
Format valid: No
Id: web_bot_auth_directory
Json valid: No
Key count: 0
Method: GET

discovery.x402

100.0% confidence

Body bytes: 0
Body sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Final url: https://gamestop.com/discovery/resources
Format valid: No
Id: x402_discovery
Method: GET
Outcome: redirect
Path: /discovery/resources?limit=1

HTTP transactions

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/sitemap.xml

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 248 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/xml, text/xml;q=0.9, text/plain;q=0.2, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 15:43:21 GMT
location: [value stored]
server: CloudFront
via: 1.1 2901d5c3dd73b8266bb51b33068f7702.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/llms.txt

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 153 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/plain, text/markdown;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 15:43:21 GMT
location: [value stored]
server: CloudFront
via: 1.1 2901d5c3dd73b8266bb51b33068f7702.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/pricing.md

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 154 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/markdown, text/plain;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 15:43:21 GMT
location: [value stored]
server: CloudFront
via: 1.1 2901d5c3dd73b8266bb51b33068f7702.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/.well-known/agent-card.json

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 133 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 15:43:21 GMT
location: [value stored]
server: CloudFront
via: 1.1 2901d5c3dd73b8266bb51b33068f7702.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/.well-known/api-catalog

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 170 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/linkset+json, application/json;q=0.8, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 15:43:21 GMT
location: [value stored]
server: CloudFront
via: 1.1 2901d5c3dd73b8266bb51b33068f7702.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

HEAD 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/.well-known/api-catalog

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 141 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: */*
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 15:43:21 GMT
location: [value stored]
server: CloudFront
via: 1.1 2901d5c3dd73b8266bb51b33068f7702.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/.well-known/oauth-protected-resource

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 134 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 15:43:22 GMT
location: [value stored]
server: CloudFront
via: 1.1 2901d5c3dd73b8266bb51b33068f7702.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/.well-known/ucp

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 160 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 15:43:22 GMT
location: [value stored]
server: CloudFront
via: 1.1 2901d5c3dd73b8266bb51b33068f7702.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/openapi.json

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 134 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, application/yaml;q=0.9, application/x-yaml;q=0.9, text/yaml;q=0.8, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 15:43:22 GMT
location: [value stored]
server: CloudFront
via: 1.1 2901d5c3dd73b8266bb51b33068f7702.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/openapi.yaml

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 135 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, application/yaml;q=0.9, application/x-yaml;q=0.9, text/yaml;q=0.8, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 15:43:22 GMT
location: [value stored]
server: CloudFront
via: 1.1 2901d5c3dd73b8266bb51b33068f7702.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/openapi.yml

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 133 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, application/yaml;q=0.9, application/x-yaml;q=0.9, text/yaml;q=0.8, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 15:43:22 GMT
location: [value stored]
server: CloudFront
via: 1.1 2901d5c3dd73b8266bb51b33068f7702.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/auth.md

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 152 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/markdown, text/plain;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 15:43:22 GMT
location: [value stored]
server: CloudFront
via: 1.1 2901d5c3dd73b8266bb51b33068f7702.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/.well-known/oauth-authorization-server

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 140 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 15:43:22 GMT
location: [value stored]
server: CloudFront
via: 1.1 2901d5c3dd73b8266bb51b33068f7702.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/index.md

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 133 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/markdown, text/plain;q=0.8, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 15:43:23 GMT
location: [value stored]
server: CloudFront
via: 1.1 2901d5c3dd73b8266bb51b33068f7702.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 136 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/markdown, text/plain;q=0.8, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 15:43:23 GMT
location: [value stored]
server: CloudFront
via: 1.1 2901d5c3dd73b8266bb51b33068f7702.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/.well-known/agent-readiness-probe/not-found-7b91e8d4

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 156 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/problem+json, application/json;q=0.9, text/markdown;q=0.8, text/plain;q=0.5, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 15:43:23 GMT
location: [value stored]
server: CloudFront
via: 1.1 2901d5c3dd73b8266bb51b33068f7702.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/.well-known/agent-skills/index.json

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 138 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 15:43:23 GMT
location: [value stored]
server: CloudFront
via: 1.1 2901d5c3dd73b8266bb51b33068f7702.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/docs/llms.txt

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 169 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/plain, text/markdown;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 15:43:23 GMT
location: [value stored]
server: CloudFront
via: 1.1 2901d5c3dd73b8266bb51b33068f7702.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/api/llms.txt

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 143 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/plain, text/markdown;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 15:43:23 GMT
location: [value stored]
server: CloudFront
via: 1.1 2901d5c3dd73b8266bb51b33068f7702.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/developers/llms.txt

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 141 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/plain, text/markdown;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 15:43:24 GMT
location: [value stored]
server: CloudFront
via: 1.1 2901d5c3dd73b8266bb51b33068f7702.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/.well-known/agent-instructions.md

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 133 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/markdown, text/plain;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 15:43:24 GMT
location: [value stored]
server: CloudFront
via: 1.1 2901d5c3dd73b8266bb51b33068f7702.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/agent-instructions.md

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 134 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/markdown, text/plain;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 15:43:24 GMT
location: [value stored]
server: CloudFront
via: 1.1 2901d5c3dd73b8266bb51b33068f7702.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/.well-known/ard.json

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 158 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, application/ld+json;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 15:43:24 GMT
location: [value stored]
server: CloudFront
via: 1.1 2901d5c3dd73b8266bb51b33068f7702.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/.well-known/ai-catalog.json

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 152 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, application/ld+json;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 15:43:24 GMT
location: [value stored]
server: CloudFront
via: 1.1 2901d5c3dd73b8266bb51b33068f7702.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

HEAD 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/.well-known/mcp

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 141 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, text/event-stream;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 15:43:24 GMT
location: [value stored]
server: CloudFront
via: 1.1 2901d5c3dd73b8266bb51b33068f7702.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/.well-known/mcp/server-card.json

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 147 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/mcp-server-card+json, application/json;q=0.9, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 15:43:24 GMT
location: [value stored]
server: CloudFront
via: 1.1 2901d5c3dd73b8266bb51b33068f7702.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/.well-known/mcp/manifest.json

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 138 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 15:43:25 GMT
location: [value stored]
server: CloudFront
via: 1.1 2901d5c3dd73b8266bb51b33068f7702.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/.well-known/http-message-signatures-directory

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 140 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 15:43:25 GMT
location: [value stored]
server: CloudFront
via: 1.1 2901d5c3dd73b8266bb51b33068f7702.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 133 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, text/markdown;q=0.9, text/plain;q=0.8, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 15:43:25 GMT
location: [value stored]
server: CloudFront
via: 1.1 2901d5c3dd73b8266bb51b33068f7702.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

OPTIONS 403 Access denied

agent_readiness_req · Protocol not exposed

https://gamestop.com/checkout_sessions

Content type: text/html
Transferred: 1.0 KB
Decoded: 1.0 KB
Duration: 112 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 1053
content-type: text/html
date: Wed, 30 Sep 2026 15:43:25 GMT
server: CloudFront
via: 1.1 2901d5c3dd73b8266bb51b33068f7702.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

OPTIONS 403 Access denied

agent_readiness_req · Protocol not exposed

https://gamestop.com/agentic_commerce/delegate_payment

Content type: text/html
Transferred: 1.0 KB
Decoded: 1.0 KB
Duration: 113 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 1053
content-type: text/html
date: Wed, 30 Sep 2026 15:43:25 GMT
server: CloudFront
via: 1.1 2901d5c3dd73b8266bb51b33068f7702.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

GET 301 Redirect

agent_readiness_req · Protocol not exposed

https://gamestop.com/discovery/resources

Content type: Not recorded
Transferred: 0 B
Decoded: 0 B
Duration: 136 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 0
date: Wed, 30 Sep 2026 15:43:25 GMT
location: [value stored]
server: CloudFront
via: 1.1 2901d5c3dd73b8266bb51b33068f7702.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

4 Web.link validation What evidence did this capture rule record? web.link_validation@1 · Finalize · attempt 1 Succeeded

Duration: 117 ms
Fetches: 0
Artifacts: 0
Observations: 4

Observed facts

links.agent_auth

100.0% confidence

Advertised count: 0
Probed count: 0
Reachable count: 0
Robots denied count: 0
Stale count: 0

links.docs_access

100.0% confidence

Gated count: 0
Login form count: 0
Public count: 0
Sampled count: 0
Unavailable count: 0

links.llms

100.0% confidence

Advertised count: 0
Broken count: 0
Homepage fallback count: 0
Probed count: 0
Resolved count: 0
Robots denied count: 0

links.public_api

100.0% confidence

Advertised: No
Machine readable response: No
Probed: No
Reachable: No
Successful response: No

5 Web.mcp inspection What evidence did this capture rule record? web.mcp_inspection@2 · Finalize · attempt 1 Succeeded

Duration: 112 ms
Fetches: 0
Artifacts: 0
Observations: 1

Observed facts

mcp.inspection

100.0% confidence

Advertised: No
Attempted: No
Candidate count: 0
Initialized notification accepted: No
Outcome: no_candidate
Session established: No

6 Web.nlweb inspection What evidence did this capture rule record? web.nlweb_inspection@1 · Finalize · attempt 1 Succeeded

Duration: 116 ms
Fetches: 1
Artifacts: 1
Observations: 1

Observed facts

nlweb.inspection

100.0% confidence

Outcome: auth_required

HTTP transactions

OPTIONS 403 Access denied

agent_readiness_req · Protocol not exposed

https://gamestop.com/ask

Content type: text/html
Transferred: 1.0 KB
Decoded: 1.0 KB
Duration: 148 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

accept: */*
user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 1053
content-type: text/html
date: Wed, 30 Sep 2026 15:43:29 GMT
server: CloudFront
via: 1.1 ced95c1372317defee9f67338d1249ec.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

7 Web.graphql inspection What evidence did this capture rule record? web.graphql_inspection@1 · Finalize · attempt 1 Succeeded

Duration: 111 ms
Fetches: 3
Artifacts: 3
Observations: 1

Observed facts

graphql.inspection

100.0% confidence

Auth required count: 3
Candidate count: 3
Checked count: 3
Outcome: auth_required
Robots denied count: 0

HTTP transactions

OPTIONS 403 Access denied

agent_readiness_req · Protocol not exposed

https://gamestop.com/graphql

Content type: text/html
Transferred: 1.0 KB
Decoded: 1.0 KB
Duration: 112 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

accept: */*
user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 1053
content-type: text/html
date: Wed, 30 Sep 2026 15:43:30 GMT
server: CloudFront
via: 1.1 ced95c1372317defee9f67338d1249ec.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

OPTIONS 403 Access denied

agent_readiness_req · Protocol not exposed

https://gamestop.com/api/graphql

Content type: text/html
Transferred: 1.0 KB
Decoded: 1.0 KB
Duration: 112 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

accept: */*
user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 1053
content-type: text/html
date: Wed, 30 Sep 2026 15:43:30 GMT
server: CloudFront
via: 1.1 ced95c1372317defee9f67338d1249ec.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

OPTIONS 403 Access denied

agent_readiness_req · Protocol not exposed

https://gamestop.com/v1/graphql

Content type: text/html
Transferred: 1.0 KB
Decoded: 1.0 KB
Duration: 123 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

accept: */*
user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: gamestop.com

Response headers (9)

connection: [value stored]
content-length: 1053
content-type: text/html
date: Wed, 30 Sep 2026 15:43:30 GMT
server: CloudFront
via: 1.1 ced95c1372317defee9f67338d1249ec.cloudfront.net (CloudFront)
x-amz-cf-id: [value stored]
x-amz-cf-pop: [value stored]
x-cache: [value stored]

8 Web.mcp apps inspection What evidence did this capture rule record? web.mcp_apps_inspection@1 · Finalize · attempt 1 Succeeded

Duration: 113 ms
Fetches: 0
Artifacts: 0
Observations: 1

Observed facts

mcp_apps.inspection

100.0% confidence

Candidate count: 0
Initialized notification accepted: No
Linked resource count: 0
Outcome: no_candidate
Session established: No

9 Web.developer tooling inspection What evidence did this capture rule record? web.developer_tooling_inspection@1 · Finalize · attempt 1 Succeeded

Duration: 112 ms
Fetches: 0
Artifacts: 0
Observations: 1

Observed facts

developer_tooling.inspection

100.0% confidence

Candidate count: 0
Candidate limit: 6
Cli link candidate count: 0
Inspected link count: 226
Install command count: 0
Install command present: No
Not found count: 0
Npm candidate count: 0

10 Web.repository inspection What evidence did this capture rule record? web.repository_inspection@1 · Finalize · attempt 1 Not applicable

Duration: 110 ms
Fetches: 0
Artifacts: 0
Observations: 1

Observed facts

repository.inspection

100.0% confidence

Candidate count: 0
Inspection complete: No
Outcome: no_candidate
Repository advertised: No
Root response valid: No

11 Web.mcp registry inspection What evidence did this capture rule record? web.mcp_registry_inspection@1 · Finalize · attempt 1 Partial

Duration: 135 ms
Fetches: 2
Artifacts: 1
Observations: 1

Observed facts

mcp_registry.inspection

100.0% confidence

Outcome: fetch_error
Query available: No
Repository available: No

HTTP transactions

GET 404 Success

agent_readiness_req · Protocol not exposed

https://registry.modelcontextprotocol.io/robots.txt

Content type: application/problem+json
Transferred: 155 B
Decoded: 155 B
Duration: 435 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/plain, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: registry.modelcontextprotocol.io

Response headers (7)

connection: [value stored]
content-length: 155
content-type: application/problem+json
date: Wed, 30 Sep 2026 15:43:33 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin
x-content-type-options: nosniff

GET No status Transport failure

agent_readiness_req · Protocol not exposed

https://registry.modelcontextprotocol.io/v0.1/servers

Content type: Not recorded
Transferred: Not recorded
Decoded: Not recorded
Duration: 9.17 s

Headers: not exposed Redirects: not exposed DNS: recorded TLS: not exposed Timings: not exposed Sizes: not exposed Digest: not exposed

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: registry.modelcontextprotocol.io

Response headers (0)

12 Web.wikimedia inspection What evidence did this capture rule record? web.wikimedia_inspection@1 · Finalize · attempt 1 Succeeded

Duration: 111 ms
Fetches: 3
Artifacts: 3
Observations: 1

Observed facts

wikimedia.inspection

100.0% confidence

Direct wikidata link count: 1
Direct wikipedia link count: 1
Outcome: succeeded
Query available: Yes

HTTP transactions

GET 301 Transport failure

agent_readiness_req · Protocol not exposed

https://api.wikimedia.org/robots.txt

Content type: text/html
Transferred: 293 B
Decoded: 293 B
Duration: 561 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/plain, */*;q=0.1
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: api.wikimedia.org

Response headers (19)

age: 21385
cache-control: max-age=2592000
content-length: 293
content-type: text/html; charset=iso-8859-1
date: Wed, 30 Sep 2026 09:47:18 GMT
expires: Fri, 30 Oct 2026 09:47:18 GMT
location: [value stored]
nel: [value stored]
report-to: [value stored]
server: mw-web.eqiad.main-69cd799d9d-s952z
server-timing: [value stored]
set-cookie: [REDACTED]
strict-transport-security: max-age=106384710; includeSubDomains; preload
vary: X-Forwarded-Proto
x-analytics: [value stored]
x-cache: [value stored]
x-cache-status: [value stored]
x-client-ip: [value stored]
x-request-id: [value stored]

GET 200 Success

agent_readiness_req · Protocol not exposed

https://api.wikimedia.org/core/v1/wikidata/search/page

Content type: application/json
Transferred: 32 B
Decoded: 12 B
Duration: 310 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: application/json
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: api.wikimedia.org

Response headers (21)

access-control-allow-origin: [value stored]
age: 2
cache-control: no-cache
content-encoding: gzip
content-length: 32
content-type: application/json
date: Wed, 30 Sep 2026 15:43:43 GMT
nel: [value stored]
report-to: [value stored]
server: mw-api-ext.eqiad.main-699b8554b9-mpwg9
server-timing: [value stored]
set-cookie: [REDACTED]
strict-transport-security: max-age=106384710; includeSubDomains; preload
vary: x-restbase-compat, Accept-Encoding
x-analytics: [value stored]
x-cache: [value stored]
x-cache-status: [value stored]
x-client-ip: [value stored]
x-content-type-options: nosniff
x-request-id: [value stored]
x-search-id: [value stored]

GET 200 Success

agent_readiness_req · Protocol not exposed

https://api.wikimedia.org/core/v1/wikidata/page/Q202210/html

Content type: text/html
Transferred: 24.4 KB
Decoded: 348.9 KB
Duration: 265 ms

Headers: not exposed Redirects: recorded DNS: recorded TLS: not exposed Timings: not exposed Sizes: recorded Digest: recorded

Request headers (7)

user-agent: AgentReadinessBot/0.1 (+https://readiness.sh/scanner)
accept: text/html
accept-language: en-US,en;q=0.8
accept-encoding: gzip
cache-control: no-cache
pragma: no-cache
host: api.wikimedia.org

Response headers (25)

access-control-allow-origin: [value stored]
age: 0
cache-control: no-cache
content-encoding: gzip
content-language: en
content-revision-id: [value stored]
content-type: text/html; charset=utf-8; profile="https://www.mediawiki.org/wiki/Specs/HTML/0.0.0"
date: Wed, 30 Sep 2026 15:43:44 GMT
etag: W/"2549968664/959dc6b9-ba5f-11f1-9a56-f754b1f597ea/view+lang:en-us"
last-modified: Sun, 27 Sep 2026 10:16:39 GMT
nel: [value stored]
report-to: [value stored]
server: mw-api-ext.eqiad.main-699b8554b9-2zpkn
server-timing: [value stored]
set-cookie: [REDACTED]
strict-transport-security: max-age=106384710; includeSubDomains; preload
transfer-encoding: [value stored]
vary: Accept-Language,x-restbase-compat, Accept-Encoding
x-analytics: [value stored]
x-cache: [value stored]
x-cache-status: [value stored]
x-client-ip: [value stored]
x-content-type-options: nosniff
x-mediawiki-render-id: [value stored]
x-request-id: [value stored]

13 Web.skills sh inspection What evidence did this capture rule record? web.skills_sh_inspection@1 · Finalize · attempt 1 Succeeded

Duration: 117 ms
Fetches: 0
Artifacts: 0
Observations: 1

Observed facts

skills_sh.inspection

100.0% confidence

Direct skills link count: 0
Github association count: 0
Outcome: succeeded

14 Web.ranked search inspection What evidence did this capture rule record? web.ranked_search_inspection@1 · Finalize · attempt 1 Partial

Duration: 133 ms
Fetches: 0
Artifacts: 0
Observations: 1

Observed facts

ranked_search.inspection

100.0% confidence

Brand: GameStop, Inc.
Brand source: json_ld_name
Category: shop gamestop world
Category source: meta_description_terms_v1
Outcome: provider_unconfigured
Provider: brave_web_search
Provider api version: 2023-10-11
Query template revision: 1

15 Web.http semantics What evidence did this capture rule record? web.http_semantics@1 · Extract · attempt 1 Succeeded

Duration: 110 ms
Fetches: 0
Artifacts: 0
Observations: 1

Observed facts

http.semantics

100.0% confidence

Attempt count: 3
Cross origin redirect count: 1
Final status: 200
Https downgrade count: 0
Outcome: success
Redirect count: 1
Transport available: Yes

16 Web.response semantics What evidence did this capture rule record? web.response_semantics@1 · Extract · attempt 1 Succeeded

Duration: 131 ms
Fetches: 0
Artifacts: 0
Observations: 1

Observed facts

response.semantics

100.0% confidence

Available: Yes
Content type: text/html
Status: 200

17 HTML extraction What structure can an agent extract from the HTML? web.html_extract@4 · Extract · attempt 1 Succeeded

Duration: 140 ms
Fetches: 0
Artifacts: 0
Observations: 10

Observed facts

html.accessibility

90.0% confidence

Structured evidence was stored. This view has no safe summary for it yet.

html.content

100.0% confidence

Visible chars: 510239
Estimated tokens: 127560
Has pricing language: Yes
Has api language: No

html.discovery

100.0% confidence

Structured evidence was stored. This view has no safe summary for it yet.

html.forms

100.0% confidence

Forms: 4
Controls: 262
Controls missing name: 112

html.images

100.0% confidence

Total: 69
Missing alt: 0

html.links

100.0% confidence

Total: 226
Missing name: 39

html.metadata

100.0% confidence

Title: Consoles, Collectibles, Video Games, and More – Buy, Sell or Trade | GameStop
Description: Shop GameStop, the world's largest retail gaming and trade-in destination for Xbox, PlayStation, and Nintendo games, systems, consoles & accessories. Shop a wide selection of gamer-centric apparel, collectibles & more.
Language: en
Charset: UTF-8
Canonical: https://www.gamestop.com/
Json ld blocks: 1
Json ld valid blocks: 1

html.structure

100.0% confidence

H1: 2
H2: 13
H3: 1
Landmarks: 4
Lists: 19
Tables: 0
Visible chars: 510239
Estimated tokens: 127560

html.structured_data

100.0% confidence

Blocks: 1
Valid blocks: 1
Invalid blocks: 0
Entity count: 1
Type count: 1
Same as count: 7
Organization count: 1
Organization field count: 5

html.web_mcp

90.0% confidence

Complete declarative tool count: 0
Declarative element count: 0
Document registration count: 0
Model context reference count: 0
Navigator registration count: 0

Immutable scan identity

Capture profile: static@27
Rule set: web-capture@27
Time bucket: 2026-09-30 15:43:00 UTC
Scan ID: 4aaa2c41-6a5e-43e5-945b-a923afc112a6

Versioned evidence first

A later criteria version can evaluate this same stored scan without changing what the scanner observed.

Open this exact snapshot

Give your team a clear next step.

Share this report, apply the relevant changes, then scan again to check the result.

gamestop.com

What to fix first

Document the access method

Starting example

OAuth 2.0 support

Scoped permissions

OAuth authorization-server metadata

auth.md exists

Agent auth discovery metadata

Starting example

Publish a usable API contract

Public API documentation is linked

Developer portal

MCP well-known discovery

MCP server or manifest

MCP server card

Starting example

Make crawler access explicit

Starting example

robots.txt AI crawler policy

robots.txt agent-user policy

Redirect hygiene

Starting example

Make page controls readable

Starting example

Accessible document structure

Accessible names on controls

Form control labeling

Starting example

Declare discovery links in the response

Starting example

HTTP Link header discovery

Starting example

What this scan found

All results

What the scanner tested

Observed facts

HTTP transactions

Observed facts

HTTP transactions

Observed facts

HTTP transactions

Observed facts

Observed facts

Observed facts

HTTP transactions

Observed facts

HTTP transactions

Observed facts

Observed facts

Observed facts

Observed facts

HTTP transactions

Observed facts

HTTP transactions

Observed facts

Observed facts

Observed facts

Observed facts

Observed facts

Give your team a clear next step.