AI agents and your website: common questions

In short

Thirty questions business leaders ask about AI agents, answered in plain terms with a dated source for each. They cover whether agents visit your site, whether to block bots, how checkout and payment work, what Cloudflare and Shopify changed in 2026, how each sector is affected and which standards matter first.

Getting started

Is my website ready for AI agents?

Start with the 18-question self-check: it scores five areas (find, read, act, pay, trust) in your browser and stores nothing. Then ask your web team to run a free public scanner. Ora reported an average score of 44 out of 100 across 145,922 sites on 5 Nov 2026, with 7 percent at B or above, so most sites have gaps.

Source: Ora home page, read 5 Nov 2026.

Do AI agents actually visit business websites?

Yes, and the volume is rising fast. Cloudflare reported on 30 September 2026 that daily requests from AI agents on its network grew by more than 1,700 percent in a year, and that more than half of Internet traffic this year was not human.

Source: Cloudflare: The Internet has a second audience (30 Sep 2026), read 4 Nov 2026.

What should I ask my web team first?

Ask two things: which of our page templates show their main text without JavaScript, and whether our CDN or bot protection blocks AI agents. Those match the only two changes that broke an agent in Ora's experiment.

Source: AgentReady.org guide, read 4 Nov 2026.

How much does an agent readiness check cost?

The main public scanners are free: Cloudflare's isitagentready.com, is-agentic.com built by Vercel with Ora, and Ora's own scan, which needs no key or signup (read 4 Nov 2026). Fixing the findings is web team time.

Source: Ora pricing (JSON), read 4 Nov 2026.

Is Ora the only way to check my site?

No. Cloudflare's scanner is free and public, is-agentic.com targets content sites, and others exist. Ora's scan is free; its fixing product is behind a waitlist with no published price on 4 Nov 2026.

Source: Is Your Site Agent-Ready? (Cloudflare, isitagentready.com), read 4 Nov 2026.

How often should we review agent readiness?

Quarterly, and after any redesign, checkout change or CDN change. Platform defaults change too: Cloudflare changed new-domain defaults on 15 September 2026 and Shopify switched on Meta checkout by default in September 2026.

Source: Cloudflare changelog: New options to manage AI traffic (1 Jul 2026), read 4 Nov 2026.

Bots, blocking and bot rules

Should I block AI bots from my website?

Treat it as four decisions: training crawlers, AI search crawlers, assistants fetching a page for a person, and agents acting for a customer. On Cloudflare, 17 percent of sites block training but fewer than 1 percent block search (30 Sep 2026). Blocking assistants and agents turns away customers' requests.

Source: Cloudflare: The Internet has a second audience (30 Sep 2026), read 4 Nov 2026.

What are the two things that most often break an agent?

In Ora's 19-configuration experiment, only two changes stopped an agent getting the answer: hiding it in JavaScript (fails a plain fetch) and returning 403 to agent user agents (fails every client). llms.txt, JSON-LD, sitemaps and markdown mirrors changed nothing in that test.

Source: AgentReady.org guide, read 4 Nov 2026.

What happens if an agent cannot read my site?

It answers anyway from other sources. Ora's lab found (8 Oct 2026) that in about 99 percent of journeys that hit a dead end, the agent answered from elsewhere, and those answers were 3.7 times as likely to miss every fact the buyer asked for.

Source: Ora research: AX is the new AEO (8 Oct 2026), read 4 Nov 2026.

What did Cloudflare change for AI bots in 2026?

On 1 July 2026 every plan got separate controls for Search, Agent and Training traffic. From 15 September 2026 new domains block Training and Agent bots on pages with ads by default, and a Disallow AI Training setting keeps search crawling while refusing training.

Source: Cloudflare changelog: New options to manage AI traffic (1 Jul 2026), read 4 Nov 2026.

Should publishers charge AI crawlers?

It is a trade between revenue and reach. Cloudflare argues a recipe site could charge a fraction of a cent per fetch, but operators that decline to pay stop reading and citing you. Test on one section first and measure both.

Source: Cloudflare: the agentic internet, WebMCP example (6 Aug 2026), read 4 Nov 2026.

How do I know an agent is who it says it is?

Ask your CDN or bot vendor whether it checks signatures. Cloudflare said operators including OpenAI, Google and AWS sign their agents' requests with Web Bot Auth, and it sees more than 500 billion verified bot requests a week (30 Sep 2026).

Source: Cloudflare: The Internet has a second audience (30 Sep 2026), read 4 Nov 2026.

Selling and paying

Can ChatGPT buy from my store?

Mostly not inside the chat any more. OpenAI's docs say Instant Checkout is available to approved partners; since March 2026, Shopify products in ChatGPT are typically bought on the merchant's own storefront. ChatGPT still finds and compares your products, so readable prices matter.

Source: OpenAI commerce docs: key concepts, read 4 Nov 2026.

Which shopping agents can complete a purchase today?

Google AI Mode and Gemini through UCP for integrated merchants, Microsoft Copilot Checkout, Perplexity with PayPal merchants, Amazon's Buy for Me for eligible products on brand sites, and Meta's Muse with user approval where merchants allow it. Each has its own rules and dates.

Source: Google: holiday shopping updates (16 Sep 2026), read 4 Nov 2026.

Why did Amazon block Meta's Muse?

Amazon said Meta had not told it Muse would access its store and that Muse did not identify itself while browsing, and it told users that continued access by an unauthorised AI agent breached its conditions of use (reported 22 September 2026).

Source: Retail Gazette: Amazon blocks Meta's Muse (22 Sep 2026), read 4 Nov 2026.

Is my Shopify store already selling through AI agents?

Possibly. Shopify keeps direct checkout through Meta and Muse on by default for eligible stores, and Microsoft enrols Shopify merchants in Copilot Checkout after an opt-out window. Check Sales channels, Agentic in your admin.

Source: Shopify Help Center: Meta agentic storefront, read 4 Nov 2026.

Who is the merchant of record when an agent buys?

Usually you. Google's AI Mode hotel booking keeps the hotel or platform as merchant of record, Microsoft says merchants stay merchant of record in Copilot Checkout, and OpenAI says it is not the merchant of record under ACP.

Source: OpenAI commerce docs: key concepts, read 4 Nov 2026.

What should our fraud team do about agent purchases?

Agree a written position first: allowed, allowed within limits, or handed back to the customer. Then set fraud rules to match. Ora's lab found agents paying through Stripe Link got 92.3 percent of test checkouts right (733 of 794 runs in a cloud browser, October 2026), so payment-level checks exist.

Source: AgentReady.org guide, read 4 Nov 2026.

Prices, answers and mentions

How do AI agents see my pricing?

Most read the page as your server first sends it. If prices load by script, sit in an image or appear only at checkout, the agent may report them as missing. Ora's lab found pricing answers built from the business's own pages were right 60 percent of the time against 37 percent from other sources (8 Oct 2026).

Source: Ora research: AX is the new AEO (8 Oct 2026), read 4 Nov 2026.

Does being mentioned in AI answers mean agents can buy from me?

No. Being mentioned happens inside someone else's AI answer; completing a task happens on your site. Track them separately. Ora's lab found agents clearly recommended agent-ready businesses in 20 percent of answers against 11 percent for others, matched on brand fame (8 Oct 2026).

Source: Ora research: AX is the new AEO (8 Oct 2026), read 4 Nov 2026.

What is the difference between AEO and agent experience?

AEO tracks whether AI answers mention and cite you. Agent experience is whether a customer's agent can read your site, get in and finish the task. They need different tools and owners. An AEO tool such as Scrunch starts at 250 US dollars a month billed annually (read 4 Nov 2026).

Source: Scrunch pricing, read 4 Nov 2026.

Your sector

Can an AI agent book an appointment at my clinic?

Yes, through networks that accept agents. Zocdoc opened booking to registered agents on 28 October 2026, with Gemini, Amazon Health AI and Instinct connected, and requires explicit patient consent before an agent books, changes or cancels.

Source: Healthcare Dive: Zocdoc invites AI agents (28 Oct 2026), read 4 Nov 2026.

Can an agent book a hotel room?

In the US, Google began rolling out hotel booking inside AI Mode on 27 August 2026 with partners such as Booking.com, Expedia, Hilton and Marriott, paid with Google Pay. AI Mode does not buy flights; those finish on the airline's site.

Source: Google: How to book travel with AI Mode (27 Aug 2026), read 4 Nov 2026.

Can Google call my business on a customer's behalf?

Yes. Google can call nearby stores to ask about stock, price and promotions, and for categories such as home repair, beauty and pet care it can call for pricing and availability. Businesses control this through Business Profile settings.

Source: Google: Search I/O 2026 updates (19 May 2026), read 4 Nov 2026.

Does my sector need a different self-check?

The 18 core questions apply everywhere; each sector variant swaps in sector examples and adds two questions. For clinics, for example, the extra questions cover patient consent and booking networks.

Source: Zocdoc for Agents (markdown), read 4 Nov 2026.

Can an AI agent sign up for our software trial?

It can if your signup allows it. Since 30 April 2026, agents using Stripe Projects can create a Cloudflare account, start a paid plan and get an API token, with a default 100 US dollar monthly limit per provider.

Source: Cloudflare: Agents can now create Cloudflare accounts (30 Apr 2026), read 4 Nov 2026.

What do financial services firms do with agents today?

Mostly quotes and comparisons inside assistants that hand off to the firm's own site. Experian's ChatGPT app compares card offers then sends users to Experian (27 Aug 2026); Aviva's ChatGPT quotes pre-fill its online application.

Source: Experian: Credit Cards app on ChatGPT (27 Aug 2026), read 4 Nov 2026.

Files, standards and protocols

Do I need an llms.txt file?

It is a decision, not a requirement. Ora's experiment found llms.txt did not change whether an agent retrieved the answer, but when agents did read llms.txt, 86 percent arrived by a link. If you publish one, link it from every page.

Source: AgentReady.org guide, read 4 Nov 2026.

Do I need an MCP server?

Only if you want agents to finish tasks directly, such as booking or ordering. AgentReady makes an MCP server or a CLI a MUST in that case. In the network crawl of 4 Nov 2026, 2.1 percent of sites published any act discovery file, so you would be early.

Source: AgentReady.org guide, read 4 Nov 2026.

What is AgentReady.org?

An open, MIT-licensed list of what a product should implement so agents can find, read and act, launched 19 October 2026 by Ora with Vercel, Stripe, Auth0, Mintlify, Tavily, Google, Elementor and MIT. It names practices with identifiers and does not score anyone.

Source: Introducing AgentReady.org (19 Oct 2026), read 4 Nov 2026.

Sources

  1. Ora home page (ora.ai), read 5 Nov 2026.
  2. Cloudflare: The Internet has a second audience (30 Sep 2026) (blog.cloudflare.com/agentic-web), read 4 Nov 2026.
  3. AgentReady.org guide (agentready.org), read 4 Nov 2026.
  4. Ora pricing (JSON) (ora.ai/pricing), read 4 Nov 2026.
  5. Is Your Site Agent-Ready? (Cloudflare, isitagentready.com) (isitagentready.com), read 4 Nov 2026.
  6. Cloudflare changelog: New options to manage AI traffic (1 Jul 2026) (developers.cloudflare.com/changelog/post/2026-07-01-ai-traffic-options), read 4 Nov 2026.
  7. Ora research: AX is the new AEO (8 Oct 2026) (ora.ai/blog/ax-is-the-new-aeo), read 4 Nov 2026.
  8. Cloudflare: the agentic internet, WebMCP example (6 Aug 2026) (blog.cloudflare.com/the-agentic-internet), read 4 Nov 2026.
  9. OpenAI commerce docs: key concepts (developers.openai.com/commerce/guides/key-concepts), read 4 Nov 2026.
  10. Google: holiday shopping updates (16 Sep 2026) (blog.google/products-and-platforms/products/shopping/google-shopping-updates-holiday-shopping), read 4 Nov 2026.
  11. Retail Gazette: Amazon blocks Meta's Muse (22 Sep 2026) (retailgazette.co.uk/blog/2026/09/amazon-blocks-metas-new-ai-shopping-agent-from-its-website), read 4 Nov 2026.
  12. Shopify Help Center: Meta agentic storefront (help.shopify.com/en/manual/online-sales-channels/agentic-storefronts/meta), read 4 Nov 2026.
  13. Scrunch pricing (scrunch.com/pricing), read 4 Nov 2026.
  14. Healthcare Dive: Zocdoc invites AI agents (28 Oct 2026) (healthcaredive.com/news/zocdoc-invites-ai-agents-to-book-appointments-on-behalf-of-patients/873035), read 4 Nov 2026.
  15. Google: How to book travel with AI Mode (27 Aug 2026) (blog.google/products-and-platforms/products/search/book-travel-ai-mode), read 4 Nov 2026.
  16. Google: Search I/O 2026 updates (19 May 2026) (blog.google/products-and-platforms/products/search/search-io-2026), read 4 Nov 2026.
  17. Zocdoc for Agents (markdown) (zocdoc.com/business/welcome-agents.md), read 4 Nov 2026.
  18. Cloudflare: Agents can now create Cloudflare accounts (30 Apr 2026) (blog.cloudflare.com/agents-stripe-projects), read 4 Nov 2026.
  19. Experian: Credit Cards app on ChatGPT (27 Aug 2026) (experianplc.com/newsroom/press-releases/2026/experian-launches-credit-cards-app-on-chatgpt--offering-a-new-wa), read 4 Nov 2026.
  20. Introducing AgentReady.org (19 Oct 2026) (ora.ai/blog/agentready-launch), read 4 Nov 2026.

Last reviewed