Walgreens: 28 of 100 on Ora's agent-readiness scan

In short

Walgreens scores 28 of 100 on Ora's agent-readiness scan, grade D, read on 9 November 2026. 9 percent of the 132,085 domains Ora ranks score under 20, and the average score is 44. A pharmacy that challenges every agent, with a gated GraphQL endpoint behind the wall.

The score

Walgreens is a pharmacy chain based in Illinois.

  • 28of 100, grade D
    Ora's agent-readiness scan of walgreens.com, read 9 November 2026.
  • 10Discovery, of 11
    Whether assistants find the company: search presence, Wikipedia and Wikidata, catalogues.
  • 0Access, of 41
    Whether they can read it: the door, text without JavaScript, llms.txt, structured data.
  • 7Usability, of 42
    Whether they can act through it: an MCP server, an API with a specification, sign-in for agents.
  • 0Payments, of 0
    No check in this layer applied to the site.

9 percent of the 132,085 domains Ora ranks score under 20, and the average score is 44.

Ora's one-line summary: Walgreens offers discoverable public APIs and endpoints, but lacks published OpenAPI specifications for agent integration.

What an assistant meets at the door

Before an assistant can read, compare or buy, it has to get in. These rows are the door: whether the bot shield lets the main agents through, what robots.txt tells the search, training and user-triggered agents, and whether the home page has text without running JavaScript.

The door at walgreens.com
CheckResultWhat Ora saw
Not blocked by bot detectionPartial, 0 of 2Bot management challenged ChatGPT-User, OAI-SearchBot, Claude-User, PerplexityBot. A challenge is an identity check that verified crawlers pass.
Agent crawler reachabilityPartial, 0 of 2Bot management challenged ChatGPT-User, OAI-SearchBot, Claude-User, PerplexityBot - a challenge is an identity check verified crawlers pass, so reachability is undetermined rather than blocked (ChatGPT-User: challenged).
robots.txt AI crawler policyDid not apply, 0 of 2Cannot verify robots.txt permission for search crawlers: WAF/bot challenge (HTTP 403)
robots.txt agent-user policyDid not apply, 0 of 2Cannot verify robots.txt permission for user-triggered agents: WAF/bot challenge (HTTP 403)
Content without JavaScriptPartial, 0 of 3Homepage blocked by WAF/security challenge - content not accessible to agents
Homepage not hidden from searchDid not apply, 0 of 1Homepage blocked by WAF - cannot read its indexing directives

What it can read, and what it can do

The reading layer is what an assistant takes away from the pages: a text file written for it, markdown on request, structured data about the company, a sitemap. The act layer is whether it can do anything through a published interface rather than by clicking through the site.

Reading walgreens.com
CheckResultWhat Ora saw
llms.txt existsFail, 0 of 1No llms.txt found at /llms.txt or /.well-known/llms.txt.
llms.txt formattingFail, 0 of 2No llms.txt found to evaluate quality
Markdown agent docsFail, 0 of 1Missing markdown content negotiation. Homepage returned text/html when probed with Accept: text/markdown (expected text/markdown), and none of the well-known root paths (/llms.md, /auth.md, /agents.md, /developers.md).
Bot-UA markdown servingDid not apply, 0 of 1Site is behind a WAF/bot wall - cannot probe bot-UA serving
JSON-LD structured dataPartial, 0 of 4Homepage blocked by WAF - cannot check structured data
Organization schema completenessPartial, 0 of 2Homepage blocked by WAF - cannot check Organization schema
Sitemap existsFail, 0 of 2No sitemap found
Metadata completenessPartial, 0 of 2Homepage blocked by WAF - cannot check metadata
Page token budgetDid not apply, 0 of 1Nothing sampled to measure
Acting through walgreens.com
CheckResultWhat Ora saw
MCP server / manifestFail, 0 of 6No MCP server or manifest found
MCP well-known discoveryFail, 0 of 2No MCP server URL discovered
Public API with reachable endpointsPass, 7 of 7GraphQL endpoint at https://walgreens.com/graphql is reachable; introspection requires authentication (API key / OAuth), which is expected for agent access. Best-of-protocols score: 7/7.
Public API/docs linked from homepagePartial, 0 of 3Homepage blocked by WAF - cannot check for docs links
OpenAPI spec publishedFail, 0 of 7No OpenAPI/Swagger specification found
Developer portalDid not apply, 0 of 6No developer portal found
OAuth 2.0 supportDid not apply, 0 of 5No OAuth 2.0 or OpenID Connect support detected
Scoped permissionsDid not apply, 0 of 5No declared OAuth scopes, security schemes, or scoped-permission documentation found
Multi-language SDK packagesDid not apply, 0 of 3No SDK packages found across language ecosystems
CLI tool availableDid not apply, 0 of 3No CLI tool found
WebMCP supportFail, 0 of 5No WebMCP support detected - no document.modelContext / navigator.modelContext usage found
Finding Walgreens
CheckResultWhat Ora saw
Wikipedia / Wikidata entity presencePass, 4 of 4Wikipedia "Walgreens" and Wikidata Q1591889 both verified - domain confirmed on both sources
Brand name discoverabilityPass, 3 of 3walgreens.com ranks #1 for "walgreens" (searched your brand name alone: we could not read a product term from your site)
Category share of voiceDid not apply, 0 of 6Category share of voice is in beta. It measures whether agents surface you for capability and use-case searches (not just your name).
Developer resource discoverabilityPass, 3 of 3Agent discovered 1 developer-resource type by name (developer portal) across 4 pages

The six payment checks did not apply on this read: Ora did not read the site as a shop.

Three fixes to hand to the web team

Ora estimates how many points each open check would return. These are the largest on this read, in Ora's words where it gave them, so a leader can hand the list over without translating it.

  1. MCP server / manifest, worth about 6.3 points by Ora's estimate: No MCP server or manifest found.
  2. OpenAPI spec published, worth about 5.7 points by Ora's estimate: No OpenAPI/Swagger specification found.
  3. WebMCP support, worth about 5.3 points by Ora's estimate: No WebMCP support detected - no document.modelContext / navigator.modelContext usage found.

Our read

Walgreens challenges every agent at the door and keeps one endpoint behind it. Bot management challenged ChatGPT-User, OAI-SearchBot, Claude-User and PerplexityBot, robots.txt answered with a 403 challenge and the home page came back as a security page, so the door, content, policy, structured-data and metadata rows are unverified rather than failed, and the Access layer reads 0 of 41; there is no sitemap and no llms.txt. The act layer is a GraphQL endpoint at walgreens.com/graphql with introspection gated behind authentication, and nothing around it that an agent could use: no developer portal, no OpenAPI specification, and neither an MCP server nor OAuth discovery, so the Usability layer reads 7 of 42. The Discovery layer is nearly full at 10 of 11, with Wikipedia and Wikidata confirmed and walgreens.com first for walgreens. A pharmacy whose customers ask assistants whether a prescription is ready has a site those assistants cannot open; an MCP server is the fix Ora values most, at 6.3 points, and the challenge is the one that comes first.

Test your own site

Run the same scan on your own domain at ora.ai. The score, the layers and the fixes on this page come from its public result for walgreens.com; a scan of a public site takes a few minutes and needs no account.

Sources

  1. Ora report for walgreens.com (ora.ai/score/walgreens.com), read 9 Nov 2026. Vendor claim.

Last reviewed