01
Everyone lets agents in. Almost no one talks to them.
All ten sites allow AI crawlers in robots.txt. But access is not
communication: only one site publishes an agent identity
manifest, and none publish an A2A agent card or a payment
manifest at the paths agents check.
02
Cloudflare is the only site an agent could actually use.
cloudflare.com scored 66 (ASO-3 Invocable): perfect
discoverability and identity, llms.txt plus llms-full.txt, an
agent.json manifest ("Cloudflare Site Agent"), markdown
negotiation via /index.md, and an OpenAPI spec. It is the only
site in the batch that reached ASO-3 Invocable.
03
llms.txt splits the field in half.
Cloudflare, Vercel, Stripe, Shopify, and GitHub publish llms.txt.
Hugging Face, Anthropic, Nike, and Amazon return 404. OpenAI
returns 403 -- the file path is actively blocked on the apex
domain.
04
Agent commerce is at zero.
No site in the batch exposes machine-readable pricing, a payment
manifest, or x402 support at the apex domain. The highest
commerce pillar score was 2.5 out of 15. The companies that
process the world's payments are not yet payable by agents.
05
The AI companies are not the leaders.
openai.com scored 19 and anthropic.com scored 25 -- both ASO-1
Discoverable, behind Nike-adjacent retail basics on identity
signals. Building frontier models and publishing agent-readable
signals are evidently different muscles.