The 47-Point Agent Readiness Audit: Your Complete ACO Checklist for E-Commerce
The definitive AI shopping agent readiness checklist covering entity verification, structured data, API performance, machine-readable policies, UCP readiness, and AI checkout optimization. Interactive progress tracking included.
Founder, Agent Commerce Optimization

Your Agent Readiness Score
Track your progress through this AI shopping agent readiness checklist. Your progress saves automatically in your browser.
If You Only Do 10 Things (Start Here)
Overwhelmed? These 10 points give you 70% of the value with the least friction. Focus here first:
Fastest Wins (No Developer Required)
Platform owners can implement these through admin settings alone:
By 2030, analysts expect a meaningful share of global commerce will be orchestrated by autonomous AI agents. As AI shopping agents mediate discovery, comparison, and purchase, the merchants who provide the path of least friction will capture disproportionate market share. This agentic commerce readiness audit is your comprehensive UCP readiness checklist for transforming from a traditional e-commerce store to an AI checkout-ready merchant.
Understanding Agent Commerce Optimization (ACO)
Agent Commerce Optimization (ACO) is the systematic process of making your product data, business policies, and transactional capabilities legible, citable, and transactable for AI agents. Unlike traditional SEO, which focuses on human keywords and visual persuasion, ACO prioritizes "retrieval qualification" and the reduction of machine ambiguity.
The foundation of the agentic web rests upon standardized protocols: the Agentic Commerce Protocol (ACP) by OpenAI and Stripe for in-platform checkout, and Google's Universal Commerce Protocol (UCP) for multi-surface discovery and orchestration.
For Non-Technical Merchants: What This Means for You
If you're running a Shopify store or using another e-commerce platform, think of this audit as a health check for how well AI shopping assistants can find, understand, and buy from your store. When someone asks ChatGPT or Google's AI to "find waterproof hiking boots under $150," you want to be the merchant the AI recommends and can actually complete the purchase through.
The 47 points are organized into 6 pillars. Some you can handle yourself through your platform's settings, others may require help from a developer or an ACO specialist. We've marked each point as "Platform Settings," "Developer Required," or "Advanced" to help you understand what's in your control.
The 5-Level Maturity Model
The transition to full agent readiness typically follows a 90-day roadmap structured into five maturity levels. Understanding where you are helps you prioritize the most impactful improvements.
| Level | Focus | Timeline | Key Actions |
|---|---|---|---|
| Level 1 | Entity Verification | Weeks 1-2 | GBP verification, Merchant Center setup, domain authentication |
| Level 2 | Data Modernization | Weeks 3-6 | Real-time data access, high-velocity inventory syncing |
| Level 3 | Discovery Layer | Weeks 7-8 | llms.txt deployment, UCP manifest publication |
| Level 4 | Transactional Endpoints | Weeks 9-12 | API endpoints for inventory, cart, checkout |
| Level 5 | Autonomous Scaling | Ongoing | Dynamic pricing, B2B negotiation, continuous optimization |
The 47-Point Agent Readiness Audit
Pillar 1: Entity Verification and Institutional Trust (7 Points)
AI agents are fundamentally risk-averse. They won't recommend your store if there's any doubt about your legitimacy, pricing accuracy, or fulfillment reliability. This pillar establishes your "Data Moat" with verifiable business identity.
Verified Google Business Profile (GBP) Status
Platform SettingsYour GBP serves as the primary source of truth for business identity, providing agents with confirmed phone numbers, physical addresses, and operational hours.
Log into Google Business Profile, complete verification via postcard or phone, ensure all information matches your website exactly.
Merchant Center Account Health and Standing
Platform SettingsMaintain an active Google Merchant Center account with zero policy violations.
Create or review your Merchant Center account at merchant.google.com, resolve any policy violations, ensure product feed has no disapprovals.
Domain Ownership and SSL/TLS Integrity
Platform SettingsValid SSL certificates and verified domain ownership are non-negotiable security requirements.
Ensure your domain has a valid SSL certificate (look for https:// and the padlock icon). Most platforms like Shopify handle this automatically.
Brand Verification in Feed Metadata
Platform SettingsBrand identity must be explicitly confirmed within your Merchant Center feed.
In your product feed, ensure the 'brand' field is consistently populated with your official brand name for all products.
Decentralized Identifier (DID) Integration
AdvancedDIDs facilitate account linking, verifiable credentials, and passkey-based authentication, allowing agents to provide user credentials without password creation.
Work with development team to implement DID support through standards like did:web or did:key. Focus on guest checkout optimization and cross-platform identity linking. Consider passkey integration for passwordless flows.
Persistent Agentic Identity Management
Developer RequiredYour database must handle persistent identities for AI agents, allowing continuous relationships.
Configure your platform to store agent IDs alongside customer records, enabling agents to query order status or initiate returns.
Merchant Center 'Capability Command Center' Sync
Platform SettingsSynchronize operational capabilities like same-day delivery or specific return logistics with Merchant Center.
In Merchant Center, navigate to Shipping & Returns settings, configure all available delivery options and return policies with accurate timelines.
Pillar 2: Semantic Depth and Advanced Structured Data (9 Points)
Schema.org markup is the primary language through which your products communicate with AI agents. Deep structured data is the prerequisite for "retrieval qualification."
Comprehensive Schema.org Product Audit
Developer RequiredBeyond basic names and prices, verify the presence of GTIN, SKU, and brand attributes in JSON-LD markup.
Review your product page source code for JSON-LD schema. Ensure gtin, sku, mpn, and brand are populated for all products. Use Google's Rich Results Test to validate.
Real-Time Inventory Level Markup
Developer RequiredUse the inventoryLevel node within JSON-LD to allow agents to prioritize merchants with guaranteed stock.
Add 'offers.inventoryLevel' property to product schema with actual quantity or availability status. Sync in real-time with your WMS.
Advanced OfferShippingDetails Implementation
Developer RequiredShipping schema must include complete matrix with shippingRate and deliveryTime for specific regions.
Implement OfferShippingDetails schema with shippingDestination, shippingRate, deliveryTime, and transitTimeValue for each region you serve.
MerchantReturnPolicy Organization Schema
Platform SettingsPublish return policy schema at the organization level on your site and validate it in Search Console.
In your site's Organization schema (typically in header/footer), add MerchantReturnPolicy with returnPolicyCategory, returnMethod, returnFees, and merchantReturnDays. Use Google's Rich Results Test to validate.
Structured Variant Attribute Mapping
Developer RequiredAll product variants (size, color, material) must map to standardized fields.
Use PropertyValue schema for variants. Map colors to standardized names or HSL codes, sizes to industry standards (S/M/L or numeric), materials to fabric composition percentages.
PotentialAction Actionable URLs
Developer RequiredSchema must include potentialAction properties with direct URLs for cart initialization or checkout.
Add potentialAction to Product schema with ViewAction (product page), BuyAction (add to cart URL), and OrderAction (direct checkout URL) with proper urlTemplate values.
GS1 Product Identifier Compliance
Platform SettingsUse industry-standard GS1 identifiers to ensure perfect legibility to cross-merchant comparison engines.
Obtain GTINs from GS1 for your products. Add to product data feeds and schema. Avoid making up or reusing GTINs from other products.
Semantic HTML5 Page Hierarchy
Developer RequiredUse proper HTML5 tags and logical heading hierarchy for headless browser parsing.
Ensure product pages use
ARIA Label Optimization for Interaction
Developer RequiredAdd ARIA labels to interactive elements to provide context about button/form field functions.
Add aria-label or aria-labelledby to buttons ('Add to Cart,' 'Proceed to Checkout'), form fields ('Shipping Address,' 'Card Number'), and interactive elements.
Pillar 3: Machine-Readable Discovery Manifests (7 Points)
The "AI Identity" of your brand is defined by the manifest files you host at your domain root. These files provide the "Rules of Engagement" for AI agents.
Some files below (ai.txt, brand.txt, developer-ai.txt, ai.json) are emerging conventions, not formal standards yet. Prioritize llms.txt + sitemap + schema + feeds as your core foundation. Use the additional files when helpful for your specific use case. The UCP manifest is an established open standard.
The /.well-known/ucp Service Manifest
Developer RequiredThis JSON file is the cornerstone of the Discovery Layer, declaring your capabilities, supported regions, and API endpoints.
Create a JSON file at yourdomain.com/.well-known/ucp with serviceType, capabilities (inventory, cart, checkout), supportedRegions, and authentication requirements. Reference UCP implementation guide.
The llms.txt Foundation
Platform SettingsCurated content map highlighting important pages for AI systems in a quickly-parsable format.
Create llms.txt at domain root with: site description, key pages (products, policies, FAQs) as markdown list, attribution guidelines. See llmstxt.org for spec.
The ai.txt Behavioral Guidelines (Optional)
Platform SettingsEmerging convention providing behavioral rules defining when AI should recommend your service and how to attribute your brand.
Create ai.txt file with sections for: Allowed Usage, Attribution Requirements, Prohibited Usage, and Contact Info for agent developers. This is experimental—prioritize llms.txt first.
The brand.txt Identity Reference (Optional)
Platform SettingsEmerging convention establishing concise brand identity including official name, legal entity, and name variations.
Create brand.txt with: Official Brand Name, Legal Entity, Acceptable Variations, Prohibited Variations, and Brand Guidelines URL. Consider if brand disambiguation is a priority for your business.
The developer-ai.txt Technical Path (Optional)
Developer RequiredEmerging convention providing API documentation endpoints, rate limiting info, and programmatic discovery paths for specialized agents.
Create developer-ai.txt with: API Documentation URL, Rate Limits, Authentication Methods, Sitemap URLs, and OpenAPI/Swagger spec links. Most useful for API-first businesses.
The ai.json Structured Data Layer (Optional)
Developer RequiredEmerging convention providing programmatic data layer for agents that prioritize JSON-LD or XML formats over markdown.
Create ai.json with same information as llms.txt but in JSON format with: siteInfo, capabilities, products array, policies object. Use if you have JSON-first processing needs.
Agent Allow List and Robots.txt Optimization
Platform SettingsEnsure robots.txt explicitly allows legitimate agents while blocking non-compliant scrapers.
Edit robots.txt to add: User-agent: GPTBot / Allow: /, User-agent: Google-Extended / Allow: /, User-agent: ChatGPT-User / Allow: /, User-agent: Claude-Web / Allow: /.
Pillar 4: API Architecture and Performance (9 Points)
Agentic commerce moves at the speed of computation. If your API is slow or inconsistent, agents will move to more performant competitors.
API Response Latency (<200ms Target)
Developer RequiredFor agent-mediated flows, sub-second latency becomes table stakes. <200ms is an aggressive target for critical endpoints.
Use monitoring tools (New Relic, Datadog) to track API endpoint performance. Optimize database queries, implement caching, use CDN for static assets. Focus on inventory and pricing endpoints first.
Real-Time Stock Check (GET /inventory/{sku})
Developer RequiredDedicated endpoint for real-time inventory and pricing without page simulation.
Create GET endpoint at /api/inventory/{sku} returning: { sku, inStock (boolean), quantity, price, currency, lastUpdated (timestamp) }.
Cart Validation (POST /cart/validate)
Developer RequiredEndpoint allowing agents to test cart validity before payment commitment.
Create POST endpoint accepting: items array, shippingAddress, returning: isValid (boolean), totalPrice, tax, shipping, errors array, estimatedDelivery.
Checkout Session Creation (POST /checkout/create)
Developer RequiredAPI support for initializing checkout session with temporary inventory allocation.
Create POST endpoint that: creates session ID, holds inventory for 30 minutes, calculates final pricing, returns sessionToken and expiresAt timestamp.
Checkout Completion (POST /checkout/complete)
Developer RequiredEndpoint finalizing payment via provider like Stripe and generating order.
Create POST endpoint accepting: sessionToken, paymentToken (from Stripe/PayPal), returning: orderId, orderStatus, confirmationEmail, trackingInfo (if available).
HMAC-SHA256 Signature Verification
AdvancedCryptographically sound authentication for agent-to-merchant traffic.
Implement HMAC signature verification on API endpoints. Share secret keys with verified agent platforms. Validate signature on each request.
Headless and Composable IT Architecture
AdvancedShift toward headless models where primary interface is API, not visual storefront.
Consider platforms like Shopify Hydrogen, BigCommerce Catalyst, or custom headless solutions with separate frontend and backend.
Inventory Syncing Velocity
Developer RequiredReal-time connection between e-commerce platform and Warehouse Management System.
Implement webhook-based inventory updates. When WMS updates quantity, trigger immediate update to product database and Merchant Center feed.
API Key Management and Whitelisting
Developer RequiredRobust framework for managing API keys and whitelisting trusted agents.
Implement API key generation system. Maintain whitelist of verified agent platforms (verified through registries like Web Bot Auth). Rate limit by key.
Pillar 5: Policy Machine-Readability and Constraints (7 Points)
AI agents resolve "state trees" to find the path of least friction. If business logic is buried in PDF policies, agents will fail the transaction.
Structured Shipping Thresholds
Platform SettingsConvert prose-based shipping rules into data-driven constraints.
In your platform settings, define clear shipping tiers: under $50 = $5.99, $50-99 = $3.99, $100+ = Free. Add to schema as OfferShippingDetails with eligibleTransactionVolume.
Machine-Readable Return Windows
Platform SettingsDefine return windows as programmatic parameters.
In MerchantReturnPolicy schema, set merchantReturnDays: 30, returnMethod: 'ByMail', returnFees: 'FreeReturn'. Make this data available via API.
Warranty and Guarantee Parameters
Platform SettingsDeconstruct warranty conditions into structured data.
Use WarrantyPromise schema with: durationOfWarranty (P1Y for 1 year), warrantyScope (description), and warrantyCoverage (product coverage details).
Geographical Order Disqualifiers
Platform SettingsClearly code order disqualifiers like PO Box exclusions or international shipping limits.
In shipping settings, explicitly list: excluded regions, PO Box policy, APO/FPO support. Add to OfferShippingDetails with eligibleRegion and ineligibleRegion.
Age-Gated and Compliance Metadata
Developer RequiredMachine-readable tags for products with legal restrictions.
Add 'ageRequirement' property to Product schema (e.g., 'P21Y' for 21 years). Include compliance flags for hazmat, alcohol, tobacco.
Deterministic Variant Selection Logic
Developer RequiredVariant options must be deterministic, not ambiguous.
Structure variants as: Required selections (size, color) with clear options; Optional add-ons clearly marked; Incompatible combinations explicitly defined in schema.
Final Landed Cost Calculation
Developer RequiredProvide final total including taxes and shipping through API before checkout.
Create endpoint that accepts: items, shipping address, returns: subtotal, shipping, tax, total. Must not require UI interaction to calculate.
Pillar 6: Agent Experience (AX) and Success Metrics (8 Points)
Measuring agentic commerce effectiveness requires departure from traditional KPIs like CTR or page views.
Agentic Trust Score (ATS) Optimization
AdvancedThe most critical metric in 2026, measuring reliability of pricing, fulfillment data, and reputation as perceived by AI agents.
Monitor: pricing consistency across channels, fulfillment promise accuracy, return rate, product data quality score. Work with ACO partners to track your ATS.
Prompt-Space Occupancy Score (PSOS)
AdvancedMeasures share of voice your brand occupies in LLM responses across platforms.
Use tools to track brand mentions across ChatGPT, Gemini, Claude, Perplexity for key product queries. Calculate percentage of relevant queries where you're mentioned.
Agent Hit Rate and Traffic Analysis
Platform SettingsTrack percentage of total traffic originating from verified AI agents.
In Google Analytics 4, create segment for user agents: ChatGPT-User, GPTBot, Claude-Web, Google-Extended. Monitor traffic trends and conversion rates.
Agent Checkout Completion vs. Abort Rates
Developer RequiredInstrument tracking of where agents drop out of the funnel.
Add logging to checkout API endpoints. Track: sessions started, cart validations, checkouts initiated, checkouts completed, abort reasons.
Semantic Form Field Standardization
Developer RequiredForm fields must use standard semantic names for headless browsing agents.
Use autocomplete attributes: autocomplete='name', autocomplete='email', autocomplete='address-line1', autocomplete='cc-number', autocomplete='cc-exp'.
Implementation of Web Bot Auth
AdvancedDistinguish legitimate agents from malicious bots, allowing removal of aggressive CAPTCHAs.
Integrate with Web Bot Auth service. Verify agent signatures against registry. Remove CAPTCHAs for verified agents.
Agent Payments Protocol (AP2) Readiness
AdvancedSupport secure, cryptographic payment handshakes without exposing card numbers.
Integrate with Stripe or payment provider supporting AP2. Accept cryptographically signed payment mandates. Never request raw card details from agents.
Post-Purchase API Accessibility
Developer RequiredOrder management system accessible via API for post-purchase agent operations.
Create endpoints for: GET /orders/{id} (order status), GET /orders/{id}/tracking (shipment tracking), POST /orders/{id}/return (initiate return), GET /orders/{id}/invoice.
Canonical Sources: Entity Graph for Agent Trust
AI agents don't just read your website—they cross-reference your business across multiple authoritative sources to verify legitimacy and build trust. This "entity graph" of canonical sources is critical for retrieval qualification.
Canonical Sources Agents Trust
- Google Business Profile (verified)
- Google Merchant Center account
- Wikidata entry (if applicable)
- LinkedIn company page
- Crunchbase profile (if applicable)
- Major marketplace presence (Amazon, eBay if applicable)
- Returns policy page (yoursite.com/returns)
- Shipping information page
- Support/contact page with verified phone/email
- Privacy policy with clear data handling
Implementation: Use Schema.org sameAs property in your Organization schema to link all these canonical sources. Agents cross-reference these to verify your business legitimacy and build a trust score.
Priority Framework for Non-Technical Merchants
Feeling overwhelmed? Here's how to prioritize if you're a Shopify or similar platform user:
Start Here (You Can Do This):
- Points 1-4, 7, 11: Verify Google Business Profile, set up Merchant Center, ensure SSL is active, configure shipping & return policies in your platform
- Points 18-20, 23: Create simple llms.txt and ai.txt files (basic text files following the guides)
- Points 33-36: Structure your shipping rules clearly, define return windows, add warranty info
Get Developer Help For:
- Points 8-16: Schema.org implementation, product markup, structured data
- Points 17, 21-22: UCP manifest, developer-ai.txt, ai.json files
- Points 24-32: API development for inventory, cart, checkout
Consider ACO Specialist For:
- Points 5-6, 29-30: Advanced identity management, headless architecture
- Points 40-47: Agentic Trust Score optimization, AP2 integration, comprehensive agent analytics
Need help implementing this audit? Our Agent Readiness Audit service provides a prioritized roadmap with difficulty scoring and ROI projections for your specific situation.
The Business Imperative of Agent Readiness
By the end of 2026, the digital storefront will no longer be a destination—it will be a data source. The shift from Human-to-Browser to Agent-to-Agent commerce represents a fundamental reset in e-commerce power dynamics.
Implementing this 47-point audit is not merely a technical exercise; it's a strategic defense against "Agent Invisibility." Merchants who provide the path of least friction for AI agents will capture the projected 25% of global commerce expected to be driven by autonomous systems by 2030.
The Agentic Trust Score will become the most valuable asset on your balance sheet—representing the quantifiable reliability of your digital infrastructure in a world where software does the shopping.
Ready to Make Your Store Agent-Ready?
Whether you're a Shopify merchant looking to start with the basics or an enterprise needing full protocol implementation, we can help you navigate this transition.