# Shopify AI agent readiness: get your store ready for agentic commerce What Shopify already does for AI agents, what is off or missing by default, and how to fix each gap, with the admin path for every setting and the check it moves. By Valerii Checha, 3 Nov 2026 Is a Shopify store ready for AI agents? Mostly yes, by default. Shopify's generated robots.txt names no AI agent, the platform publishes agent files and a UCP profile for you, and Agentic Storefronts are on for eligible stores. What is left to you is the part only you can fill in: whether checkout asks for a sign-in, your policies, product data such as barcodes, and any edit you make to robots.txt. This guide goes through what Shopify already does for agents, what is off or missing by default, and how to fix each common gap, with the admin path for each setting and the [check](https://storewalk.ai/checks) in our scan that it moves. Storewalk is ours: we build it, and this blog is part of its site. Shopify's behaviour comes from Shopify's own help pages and developer docs, read on 3 November 2026, and from the demo store for Dawn, Shopify's free theme. Where we explain something in plain words, the explanation is ours. New to the series? [The hub article](https://storewalk.ai/blog/why-agents-cant-buy) sets out the five walls between an agent and a finished purchase. This page is the Shopify view of the same walls. ## What does Shopify already do for AI agents? Quite a lot, and most of it without asking you. Shopify writes robots.txt for every store. In its words: "All Shopify stores have a default robots.txt file that's optimal for Search Engine Optimization (SEO)." The default on the Dawn demo store names no AI agent at all. It has one group for every crawler and one for Google's ad bot, and it asks crawlers to stay out of the cart, checkout, account and order pages, plus sorted and filtered collection URLs that would otherwise multiply forever. Above the rules it now carries comments addressed to agents, pointing them to `agents.md`, the UCP profile and the UCP MCP endpoint, and asking them to use those "instead" of the cart's AJAX URLs. For agent instructions, Shopify's developer docs say "Shopify manages an `agents.md` file by default for every store", and that `/llms.txt` and `/llms-full.txt` mirror its content. So a store has an llms.txt it never wrote. Whether it passes our [llms.txt check](https://storewalk.ai/checks/DISC-002) depends on its length and links, which we did not measure for every store. On the Dawn demo store, `/.well-known/ucp` returns a [UCP](https://storewalk.ai/blog/agentic-commerce-glossary#ucp) profile, version 2026-08-25, with checkout, cart, catalog search, order and identity linking among its thirteen capabilities, and an MCP endpoint at `/api/ucp/mcp`. That is one store, so read it as what the platform serves, not a promise about yours. If you have read older guides, note the move: Shopify says "The catalog and cart tools on `https://{shop}/api/mcp` were removed" and tells developers to "Use the Universal Commerce Protocol (UCP) instead." [UCP explained](https://storewalk.ai/blog/ucp-explained) covers what the profile holds. Agentic Storefronts list your products in AI channels that Shopify names as "ChatGPT, Google AI Mode and Gemini, Microsoft Copilot, and Meta". The help page says "Agentic storefronts is active by default for eligible stores." When we read a Shopify store in September, a Shopify platform script had added eleven [WebMCP](https://storewalk.ai/blog/agentic-commerce-glossary#webmcp) tools for browser agents, from catalogue search to checkout. That is our observation of one store, not a Shopify statement. Dawn prints its product JSON-LD with Shopify's `structured_data` filter. Shopify's docs say it outputs a schema.org Product when there are no variants and "a ProductGroup if they have one or more variants", which is what our [variant check](https://storewalk.ai/checks/EVAL-005) likes to see. Our [product data check](https://storewalk.ai/checks/DISC-004) and the price and stock checks read that ProductGroup as one product, with an offer for each variant. Other themes write their own, so check yours. On bots, Shopify says "Bot management is handled directly for stores on Shopify, and you don't need to take any action." Since May 2026 it has also given unsigned bots the tightest rate limits: "Bots and agents that don't sign their requests are subject to the strictest limits." Agents that sign with [Web Bot Auth](https://storewalk.ai/blog/agentic-commerce-glossary#web-bot-auth) can get higher ones. What Shopify ships, against what an agent needs. - robots.txt lets AI agents in: Fine by default. The generated file names no AI agent. Cart, checkout and account lines apply to everyone, so our DISC-001 reports WARN, which is expected. Checks: [DISC-001 robots.txt allows AI agents](https://storewalk.ai/checks/DISC-001). Sources: [Dawn demo store: robots.txt (read 3 November 2026)](https://theme-dawn-demo.myshopify.com/robots.txt) and [Shopify Help Center: Editing robots.txt](https://help.shopify.com/en/manual/promoting-marketing/seo/editing-robots-txt). - agents.md, llms.txt, llms-full.txt: Fine by default. Managed by Shopify for every store; the two llms files mirror agents.md. Whether yours meets our 20-line rule depends on its content. Checks: [DISC-002 llms.txt present and non-trivial](https://storewalk.ai/checks/DISC-002). Source: [Shopify.dev: agents.md.liquid](https://shopify.dev/docs/storefronts/themes/architecture/templates/agents-md-liquid). - UCP profile and UCP MCP endpoint: Fine by default. Served at /.well-known/ucp and /api/ucp/mcp on the demo store we read; the old catalog and cart tools at /api/mcp were removed. We read one store, not every one. Checks: [DISC-018 UCP profile passes schema validation](https://storewalk.ai/checks/DISC-018), [DISC-020 UCP services and transports declared](https://storewalk.ai/checks/DISC-020) and [TRX-013 UCP MCP server answers tools/list](https://storewalk.ai/checks/TRX-013). Sources: [Dawn demo store: /.well-known/ucp (read 3 November 2026)](https://theme-dawn-demo.myshopify.com/.well-known/ucp) and [Shopify.dev: Storefront MCP](https://shopify.dev/docs/apps/build/storefront-mcp). - Selling inside AI assistants: Fine by default. Agentic storefronts are on by default for eligible stores: ChatGPT, Google AI Mode and Gemini, Microsoft Copilot, and Meta. Checks: [DISC-007 Agent commerce discovery documents](https://storewalk.ai/checks/DISC-007) and [TRX-004 Agent checkout endpoint present](https://storewalk.ai/checks/TRX-004). Source: [Shopify Help Center: Agentic storefronts](https://help.shopify.com/en/manual/online-sales-channels/agentic-storefronts). - Product JSON-LD: Fine by default. Dawn prints the structured_data filter: a Product, or a ProductGroup when there are variants. Our checks read the ProductGroup as one product, with an offer per variant. Other themes may differ. Checks: [DISC-004 Product structured data](https://storewalk.ai/checks/DISC-004) and [EVAL-005 Variant data structured](https://storewalk.ai/checks/EVAL-005). Source: [Shopify.dev: the structured_data filter](https://shopify.dev/docs/api/liquid/filters/structured_data). - GTIN, shipping and returns in JSON-LD: Not stated or not shipped. The filter’s docs do not mention gtin, shippingDetails or hasMerchantReturnPolicy, and we have not confirmed what live pages print. Checks: [EVAL-001 Shipping cost and terms machine-readable](https://storewalk.ai/checks/EVAL-001) and [EVAL-002 Return policy machine-readable](https://storewalk.ai/checks/EVAL-002). Source: [Shopify.dev: the structured_data filter](https://shopify.dev/docs/api/liquid/filters/structured_data). - Markdown on request: Gap by default. On the stores we read in September, the answer was labelled text/markdown but the body was HTML. A merchant reported the same in Shopify’s forum on 29 September. Checks: [DISC-009 Pages served as Markdown on request](https://storewalk.ai/checks/DISC-009). Source: [Shopify developer forum: 404 for Markdown requests (29 September 2026)](https://community.shopify.dev/t/storefront-returns-404-for-product-and-collection-pages-when-requested-with-accept-text-markdown/38079). - Guest checkout: Yours to set. A setting under Settings > Checkout. Shopify’s page gives no default, so check yours. Checks: [TRX-001 Guest checkout available](https://storewalk.ai/checks/TRX-001). Source: [Shopify Help Center: Checkout form options](https://help.shopify.com/en/manual/checkout-settings/checkout-form-options). - No CAPTCHA before payment: Fine by default. hCaptcha’s default covers forms and login pages, not checkout. Checkout bot protection is Plus only and runs for at most 60 minutes at a time. Checks: [TRX-002 No CAPTCHA before the payment step](https://storewalk.ai/checks/TRX-002). Sources: [Shopify Help Center: Online store preferences](https://help.shopify.com/en/manual/online-store/setting-up/preferences) and [Shopify Help Center: Bot protection](https://help.shopify.com/en/manual/checkout-settings/bot-protection). - Bot management: Fine by default. Handled by Shopify. Unsigned bots get the strictest rate limits; agents that sign with Web Bot Auth can get higher ones. Checks: [VER-001 Bot management present](https://storewalk.ai/checks/VER-001) and [VER-002 Web Bot Auth key directory published](https://storewalk.ai/checks/VER-002). Sources: [Shopify Help Center: Editing robots.txt](https://help.shopify.com/en/manual/promoting-marketing/seo/editing-robots-txt) and [Shopify.dev changelog: bots and agents should identify themselves (7 May 2026)](https://shopify.dev/changelog/bots-and-agents-should-identify-themselves-via-web-bot-auth). Statuses are ours, read from each source’s own words. “Not stated or not shipped” means the platform’s pages do not say, or the feature is announced but not something you can switch on. ## Where do the Shopify settings live? Seven settings decide most of what an agent meets. Pick one to see its path, its default as Shopify states it, and the checks it moves. Where each Shopify setting lives, and what it defaults to. 1. Agentic storefronts. Where: Sales channels > Agentic. Default: On for eligible stores. In its words: “Agentic storefronts is active by default for eligible stores.” What to do (our advice): Open the page and look for an ineligibility warning. A store must be on Starter or higher and not in private mode; each product needs a title, an image, a price above 0, and must not be Unlisted. Checks: [DISC-007 Agent commerce discovery documents](https://storewalk.ai/checks/DISC-007) and [TRX-004 Agent checkout endpoint present](https://storewalk.ai/checks/TRX-004). Sources: [Shopify Help Center: Agentic storefronts](https://help.shopify.com/en/manual/online-sales-channels/agentic-storefronts) and [Shopify Help Center: Shopify Catalog requirements](https://help.shopify.com/en/manual/shopify-catalog/requirements). 2. robots.txt. Where: Theme code: templates/robots.txt.liquid. Default: Shopify generates the file. It names no AI agent. In its words: “This is an unsupported customization.” What to do (our advice): Leave it alone unless you mean to block someone. If you add the template, keep the loop over robots.default_groups so Shopify’s own rules stay in. Checks: [DISC-001 robots.txt allows AI agents](https://storewalk.ai/checks/DISC-001), [DISC-023 robots.txt lets agents read the UCP profile](https://storewalk.ai/checks/DISC-023) and [VER-004 Content Signals / AI usage preferences declared](https://storewalk.ai/checks/VER-004). Sources: [Shopify Help Center: Editing robots.txt](https://help.shopify.com/en/manual/promoting-marketing/seo/editing-robots-txt) and [Shopify.dev: Customize robots.txt](https://shopify.dev/docs/storefronts/themes/seo/robots-txt). 3. agents.md and llms.txt. Where: Theme code: templates/agents.md.liquid, llms.txt.liquid, llms-full.txt.liquid. Default: Shopify manages /agents.md; /llms.txt and /llms-full.txt mirror it. What to do (our advice): Read your own /agents.md and /llms.txt. Add a template only if you want to say more than the default does about your store. Checks: [DISC-002 llms.txt present and non-trivial](https://storewalk.ai/checks/DISC-002). Source: [Shopify.dev: agents.md.liquid](https://shopify.dev/docs/storefronts/themes/architecture/templates/agents-md-liquid). 4. Sign-in at checkout. Where: Settings > Checkout. Default: Not stated on Shopify’s page. In its words: “Select whether to require customers to sign in to their customer account before checking out.” What to do (our advice): Make sure sign-in is not required. An agent buying for a shopper has no account of its own to sign in with. Checks: [TRX-001 Guest checkout available](https://storewalk.ai/checks/TRX-001). Source: [Shopify Help Center: Checkout form options](https://help.shopify.com/en/manual/checkout-settings/checkout-form-options). 5. Spam protection (hCaptcha). Where: Online Store > Preferences > Spam protection. Default: On, for contact, newsletter and comment forms, and login, create account and password recovery pages. In its words: “hCaptcha is activated by default on all Shopify stores.” What to do (our advice): Checkout is not on the list. The login pages are, so this matters only if you require sign-in at checkout. One more reason not to. Checks: [TRX-002 No CAPTCHA before the payment step](https://storewalk.ai/checks/TRX-002). Source: [Shopify Help Center: Online store preferences](https://help.shopify.com/en/manual/online-store/setting-up/preferences). 6. Checkout bot protection. Where: Shopify Plus only: a scheduled bot protection event. Default: Off unless you schedule an event; each one ends on its own. In its words: “The maximum duration for a bot protection event is 60 minutes.” What to do (our advice): Schedule it for a product drop, not as a standing setting. It shows a CAPTCHA, and Shopify’s page says nothing about AI agents. Checks: [TRX-002 No CAPTCHA before the payment step](https://storewalk.ai/checks/TRX-002) and [VER-003 Checkout has stricter controls than the product page](https://storewalk.ai/checks/VER-003). Source: [Shopify Help Center: Bot protection](https://help.shopify.com/en/manual/checkout-settings/bot-protection). 7. Policies and return rules. Where: Settings > Policies (and Return and cancellation rules). Default: No default stated for the return window. What to do (our advice): Fill in the refund and shipping policies; they publish at /policies/refund-policy and /policies/shipping-policy. Set a return window of 14, 30 or 90 days, unlimited, or your own. Checks: [EVAL-001 Shipping cost and terms machine-readable](https://storewalk.ai/checks/EVAL-001) and [EVAL-002 Return policy machine-readable](https://storewalk.ai/checks/EVAL-002). Sources: [Shopify Help Center: Store policies](https://help.shopify.com/en/manual/checkout-settings/refund-privacy-tos) and [Shopify Help Center: Return rules](https://help.shopify.com/en/manual/fulfillment/managing-orders/returns/return-rules). Two of them deserve a closer look, because Shopify's help pages leave the default open. The first is sign-in at checkout. Under Settings > Checkout, Shopify asks you to "Select whether to require customers to sign in to their customer account before checking out." The page states no default for this choice. An agent buying for someone has no customer account of its own, so a required sign-in stops it at the door. Our [guest checkout check](https://storewalk.ai/checks/TRX-001) reads your checkout entry and reports it. [Why agents stall at checkout](https://storewalk.ai/blog/why-agents-stall-at-checkout) has the longer version. The second is the return window. Under Settings > Policies you write your refund and shipping policies, which Shopify publishes at fixed addresses such as `/policies/refund-policy` and `/policies/shipping-policy`. The return window comes from your return rules, with 14, 30 or 90 days, unlimited or a custom number. Shopify states no default window and says nothing about whether those rules reach structured data. ## What is off or missing by default? Four things. The first is Shopify's to fix; you can work on the other three. When we sent `Accept: text/markdown` to Shopify home pages in September, the answer was labelled `text/markdown` and the body was the full HTML page. A merchant reported the same in Shopify's developer forum on 29 September, adding that product and collection pages returned 404 for Markdown requests. We found no Shopify doc on the subject. Our [Markdown check](https://storewalk.ai/checks/DISC-009) reads the body, not the label, so it fails such a reply. There is nothing in the admin to switch; this one is Shopify's to fix. For structured data, the `structured_data` filter's page does not mention `gtin`, `shippingDetails` or `hasMerchantReturnPolicy`, and we have not confirmed what live product pages print. Shopify's own advice for AI platforms still asks for a "Barcode (ISBN, UPC, GTIN, etc.)", "Variants, including Option name" and policies kept "complete and up-to-date". Fill those in whatever the markup turns out to say, since the same facts feed your policy pages and Shopify Catalog. Setup differs on Shopify's Agentic plan, and Shopify notes that there "direct checkout is deactivated by default." Agentic Storefronts are on only for eligible stores. Shopify Catalog wants a store on the Starter plan or higher and not in private mode, and products with "a title and at least 1 product image" and "a price greater than 0". A product set to Unlisted is hidden from AI channels too, and from sitemaps and online store search. If the admin shows an ineligibility warning on the Agentic page, start there. ## How do you fix the common failures? Most of these take a minute in the admin. The robots.txt one mostly takes restraint. If our [robots.txt check](https://storewalk.ai/checks/DISC-001) fails, someone edited the file. Shopify allows it through a `robots.txt.liquid` template in your theme, and is blunt about the risk: "This is an unsupported customization." and "Incorrect use of the feature can result in loss of all traffic." The template replaces the generated file, so keep Shopify's loop over `robots.default_groups` and add your lines after it. With the default file our check reports WARN rather than PASS, because every agent inherits the cart and checkout lines. That is expected and fine. Blocking does less than you might think. Shopify says "Blocking AI crawlers at the /robots.txt or network layer affects only open-web discoverability," and that a block "doesn't stop your product data from being sent by Shopify Catalog to the agentic storefronts that you've activated." Try it on the default file below. Shopify’s default robots.txt, and what an edit changes. The default file below is abridged from the demo store for Dawn, Shopify’s own free theme, read on 3 November 2026, with its address swapped for example.myshopify.com. Shopify default. No AI agent is named. The comments at the top point agents to agents.md, the UCP profile and the UCP MCP endpoint. By the rule of our DISC-001, this file is WARN: no agent is fully blocked, but each inherits some Disallow lines, such as cart or checkout. That is normal for a store and costs little. ```text # Agent instructions: https://example.myshopify.com/agents.md # UCP discovery: https://example.myshopify.com/.well-known/ucp # UCP/MCP endpoint: https://example.myshopify.com/api/ucp/mcp User-agent: * Allow: / Disallow: /admin Disallow: /cart/ Disallow: /checkout Disallow: /checkouts/ Disallow: /orders Allow: /account/login Disallow: /account Disallow: /services Disallow: /sf_* # AJAX surfaces: agents should use UCP/MCP instead Disallow: /cart.js Disallow: /recommendations/products # Filters, sort, previews, language-picker crawl traps Disallow: /collections/*sort_by* Disallow: /collections/*+* Disallow: /*?*preview_theme_id=* Sitemap: https://example.myshopify.com/sitemap.xml ``` | Path | GPTBot under “Shopify default” | | ---------------------------------------------------------------- | ---------------------------------------------- | | A product page: /products/linen-shirt | Allowed, by Allow: / | | A sorted collection: /collections/shirts?sort_by=price-ascending | Blocked, by Disallow: /collections/\*sort_by\* | | The cart: /cart/ | Blocked, by Disallow: /cart/ | | A checkout: /checkouts/abc123 | Blocked, by Disallow: /checkouts/ | | The cart AJAX endpoint: /cart.js | Blocked, by Disallow: /cart.js | | The UCP profile: /.well-known/ucp | Allowed, by Allow: / | | agents.md: /agents.md | Allowed, by Allow: / | With GPTBot blocked. GPTBot gets its own group and is asked to stay out of everything. Shopify says a block like this “affects only open-web discoverability”: Shopify Catalog still sends your products to the agentic storefronts you have turned on. By the rule of our DISC-001, this file is WARN: only training crawlers and tokens are fully blocked, so search and shopping agents can still read the store. A fair choice, though some assistants may know less about you. ```text # Agent instructions: https://example.myshopify.com/agents.md # UCP discovery: https://example.myshopify.com/.well-known/ucp # UCP/MCP endpoint: https://example.myshopify.com/api/ucp/mcp User-agent: * Allow: / Disallow: /admin Disallow: /cart/ Disallow: /checkout Disallow: /checkouts/ Disallow: /orders Allow: /account/login Disallow: /account Disallow: /services Disallow: /sf_* # AJAX surfaces: agents should use UCP/MCP instead Disallow: /cart.js Disallow: /recommendations/products # Filters, sort, previews, language-picker crawl traps Disallow: /collections/*sort_by* Disallow: /collections/*+* Disallow: /*?*preview_theme_id=* Sitemap: https://example.myshopify.com/sitemap.xml User-agent: GPTBot Disallow: / ``` | Path | GPTBot under “With GPTBot blocked” | | ---------------------------------------------------------------- | ---------------------------------- | | A product page: /products/linen-shirt | Blocked, by Disallow: / | | A sorted collection: /collections/shirts?sort_by=price-ascending | Blocked, by Disallow: / | | The cart: /cart/ | Blocked, by Disallow: / | | A checkout: /checkouts/abc123 | Blocked, by Disallow: / | | The cart AJAX endpoint: /cart.js | Blocked, by Disallow: / | | The UCP profile: /.well-known/ucp | Blocked, by Disallow: / | | agents.md: /agents.md | Blocked, by Disallow: / | With a Content-Signal line. A Content-Signal line states how your content may be used, without blocking anyone. VER-004 looks for it; DISC-001’s result does not change. By the rule of our DISC-001, this file is WARN: no agent is fully blocked, but each inherits some Disallow lines, such as cart or checkout. That is normal for a store and costs little. ```text # Agent instructions: https://example.myshopify.com/agents.md # UCP discovery: https://example.myshopify.com/.well-known/ucp # UCP/MCP endpoint: https://example.myshopify.com/api/ucp/mcp User-agent: * Content-Signal: search=yes, ai-train=no Allow: / Disallow: /admin Disallow: /cart/ Disallow: /checkout Disallow: /checkouts/ Disallow: /orders Allow: /account/login Disallow: /account Disallow: /services Disallow: /sf_* # AJAX surfaces: agents should use UCP/MCP instead Disallow: /cart.js Disallow: /recommendations/products # Filters, sort, previews, language-picker crawl traps Disallow: /collections/*sort_by* Disallow: /collections/*+* Disallow: /*?*preview_theme_id=* Sitemap: https://example.myshopify.com/sitemap.xml ``` | Path | GPTBot under “With a Content-Signal line” | | ---------------------------------------------------------------- | ---------------------------------------------- | | A product page: /products/linen-shirt | Allowed, by Allow: / | | A sorted collection: /collections/shirts?sort_by=price-ascending | Blocked, by Disallow: /collections/\*sort_by\* | | The cart: /cart/ | Blocked, by Disallow: /cart/ | | A checkout: /checkouts/abc123 | Blocked, by Disallow: /checkouts/ | | The cart AJAX endpoint: /cart.js | Blocked, by Disallow: /cart.js | | The UCP profile: /.well-known/ucp | Allowed, by Allow: / | | agents.md: /agents.md | Allowed, by Allow: / | Sources: [Dawn demo store: robots.txt (read 3 November 2026)](https://theme-dawn-demo.myshopify.com/robots.txt) and [Shopify Help Center: Editing robots.txt](https://help.shopify.com/en/manual/promoting-marketing/seo/editing-robots-txt). If checkout asks for a sign-in, go to Settings > Checkout and choose not to require it. While you are there, look at Online Store > Preferences > Spam protection. Shopify says "hCaptcha is activated by default on all Shopify stores", on contact, newsletter and comment forms and on the login, create account and password recovery pages. Checkout is not on that list, but the login page is, so a required sign-in also puts a CAPTCHA in an agent's way. Our [CAPTCHA check](https://storewalk.ai/checks/TRX-002) looks for that. If a CAPTCHA appears at checkout, it is probably Plus bot protection. On Shopify Plus, checkout bot protection is a scheduled event: "The bot protection feature is available only for merchants on a Shopify Plus plan," and "The maximum duration for a bot protection event is 60 minutes." It switches itself off when the time ends. Use it for a product drop, when you actually want to slow every buyer down, and let it lapse. If an agent cannot read your terms, fill in Settings > Policies and set a return window. Our [shipping](https://storewalk.ai/checks/EVAL-001) and [returns](https://storewalk.ai/checks/EVAL-002) checks pass on a policy page that states its terms in plain words: a cost with its currency, or free delivery, and a return window. "30 days from delivery" beats "contact us to arrange a return", and "calculated at checkout" tells an agent nothing it can compare. [How agents read a page](https://storewalk.ai/blog/how-agents-read-a-page) explains why the wording matters. If products are missing from AI channels, clear the ineligibility warning under Sales channels > Agentic, give every product a title, an image and a price, and check none is Unlisted by mistake. Shopify's help also describes opting out of ChatGPT or Copilot if you would rather not sell there. If your agents.md says too little, add `templates/agents.md.liquid` to your theme to replace the managed file. Shopify's changelog from 28 May 2026 says that if no template is present for a path, "it falls back to your agents.md template, then to the Shopify-generated default", so one template can feed all three files. ## How does Shopify's own audit fit in? Shopify runs a free Product Page Audit at `shopify.com/agentic-readiness`. It reads one product page's structured data and checks robots.txt against 10 search and AI user agents, then reports each factor with equal weight. It is a good first look at a single page. Our scan reads the whole path an agent takes, from robots.txt to checkout. [Alternatives to isitagentready](https://storewalk.ai/blog/isitagentready-alternatives) compares Shopify's audit with ten other tools, ours among them, each from its own pages. ## Shopify agent readiness checklist Tick as you go. The ticks stay in this browser and nowhere else, which is more than can be said for most carts. Your Shopify checklist, saved in this browser. - \[ ] No ineligibility warning on the Agentic page (Sales channels > Agentic). Checks: [DISC-007 Agent commerce discovery documents](https://storewalk.ai/checks/DISC-007) and [TRX-004 Agent checkout endpoint present](https://storewalk.ai/checks/TRX-004). - \[ ] Every product has a title, an image and a price above 0, and is not Unlisted. Checks: [EVAL-003 Price transparency](https://storewalk.ai/checks/EVAL-003). - \[ ] Barcodes (GTIN, UPC, ISBN) and variant option names are filled in. Checks: [DISC-004 Product structured data](https://storewalk.ai/checks/DISC-004) and [EVAL-005 Variant data structured](https://storewalk.ai/checks/EVAL-005). - \[ ] robots.txt is the default, or any edit keeps robots.default_groups (templates/robots.txt.liquid). Checks: [DISC-001 robots.txt allows AI agents](https://storewalk.ai/checks/DISC-001). - \[ ] /agents.md and /llms.txt describe your store the way you want. Checks: [DISC-002 llms.txt present and non-trivial](https://storewalk.ai/checks/DISC-002). - \[ ] Sign-in is not required at checkout (Settings > Checkout). Checks: [TRX-001 Guest checkout available](https://storewalk.ai/checks/TRX-001). - \[ ] Refund and shipping policies are filled in and a return window is set (Settings > Policies). Checks: [EVAL-001 Shipping cost and terms machine-readable](https://storewalk.ai/checks/EVAL-001) and [EVAL-002 Return policy machine-readable](https://storewalk.ai/checks/EVAL-002). - \[ ] Plus only: bot protection is scheduled for drops, not left as a habit. Checks: [TRX-002 No CAPTCHA before the payment step](https://storewalk.ai/checks/TRX-002). ## Frequently asked questions ### Does Shopify block AI agents by default? No. The default robots.txt on Shopify's Dawn demo store names no AI agent and lets every crawler read products, collections and pages. It asks all crawlers to stay out of cart, checkout and account pages, which is normal. Shopify adds that robots.txt blocks affect "only open-web discoverability", not Shopify Catalog. ### Does every Shopify store have an llms.txt? Shopify's docs say it manages an `agents.md` for every store and that `/llms.txt` and `/llms-full.txt` mirror it by default. You can replace any of the three with a theme template. ### Is guest checkout on by default on Shopify? Shopify's help page does not say. The setting is under Settings > Checkout, where you choose whether customers must sign in before checking out. Check it, because an agent has no account to sign in with. ### Where is Shopify's MCP endpoint? On the store we read, at `/api/ucp/mcp`, as declared in its UCP profile at `/.well-known/ucp`. Shopify removed the catalog and cart tools from the older `/api/mcp` address and points developers to UCP instead. ### Do I need to turn on Agentic Storefronts? Shopify says they are "active by default for eligible stores". Check Sales channels > Agentic for an ineligibility warning, and review which channels your products appear in. The sources below were last checked on the date shown. ## Sources - [Shopify Help Center: Editing robots.txt](https://help.shopify.com/en/manual/promoting-marketing/seo/editing-robots-txt) - [Shopify.dev: Customize robots.txt](https://shopify.dev/docs/storefronts/themes/seo/robots-txt) - [Dawn demo store: robots.txt and /.well-known/ucp (read 3 November 2026)](https://theme-dawn-demo.myshopify.com/robots.txt) - [Shopify.dev: agents.md.liquid](https://shopify.dev/docs/storefronts/themes/architecture/templates/agents-md-liquid) - [Shopify.dev changelog: customize llms.txt, llms-full.txt and agents.md (28 May 2026)](https://shopify.dev/changelog/customize-llmstxt-llms-fulltxt-and-agentsmd) - [Shopify.dev: Storefront MCP](https://shopify.dev/docs/apps/build/storefront-mcp) - [Shopify Help Center: Agentic storefronts](https://help.shopify.com/en/manual/online-sales-channels/agentic-storefronts) - [Shopify Help Center: Agentic storefront products](https://help.shopify.com/en/manual/online-sales-channels/agentic-storefronts/products) - [Shopify Help Center: Shopify Catalog requirements](https://help.shopify.com/en/manual/shopify-catalog/requirements) - [Shopify Help Center: Optimizing products for AI platforms](https://help.shopify.com/en/manual/shopify-catalog/optimizing-products) - [Shopify.dev: the structured_data filter](https://shopify.dev/docs/api/liquid/filters/structured_data) - [Shopify Help Center: Checkout form options](https://help.shopify.com/en/manual/checkout-settings/checkout-form-options) - [Shopify Help Center: Online store preferences (spam protection)](https://help.shopify.com/en/manual/online-store/setting-up/preferences) - [Shopify Help Center: Bot protection](https://help.shopify.com/en/manual/checkout-settings/bot-protection) - [Shopify Help Center: Store policies](https://help.shopify.com/en/manual/checkout-settings/refund-privacy-tos) - [Shopify Help Center: Return rules](https://help.shopify.com/en/manual/fulfillment/managing-orders/returns/return-rules) - [Shopify.dev changelog: bots and agents should identify themselves via Web Bot Auth (7 May 2026)](https://shopify.dev/changelog/bots-and-agents-should-identify-themselves-via-web-bot-auth) - [Shopify developer forum: 404 for Markdown requests (29 September 2026)](https://community.shopify.dev/t/storefront-returns-404-for-product-and-collection-pages-when-requested-with-accept-text-markdown/38079) - [Shopify: Product Page Audit for Agentic Commerce](https://www.shopify.com/agentic-readiness) Last checked 4 Nov 2026