PHPackages expandingwebcom/module-agent-readiness - PHPackages - PHPackages [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register) 1. [Directory](/) 2. / 3. expandingwebcom/module-agent-readiness ActiveMagento2-module expandingwebcom/module-agent-readiness ====================================== AI Agent Readiness for Magento 2 / Adobe Commerce: the eight public agent-readiness checks run in-admin against your own store, plus a counter of AI agent traffic (GPTBot, ClaudeBot, PerplexityBot, ...). 1.0.0(yesterday)00MITPHPPHP ~8.2.0||~8.3.0||~8.4.0||~8.5.0CI passing Since Aug 28Pushed yesterdayCompare [ Source](https://github.com/Expanding-Web/magento-agent-readiness)[ Packagist](https://packagist.org/packages/expandingwebcom/module-agent-readiness)[ Docs](https://expandingweb.com/agentic-commerce-suite)[ RSS](/packages/expandingwebcom-module-agent-readiness/feed)WikiDiscussions master Synced today READMEChangelog (1)Dependencies (9)Versions (2)Used By (0) AI Agent Readiness for Magento 2 ================================ [](#ai-agent-readiness-for-magento-2) **ExpandingWeb\_AgentReadiness** runs the eight public agent-readiness checks against your own Magento 2 / Adobe Commerce store from inside the admin, and counts the AI agent traffic (GPTBot, ClaudeBot, PerplexityBot, …) your storefront already gets. It is the free, open-source tier of the [Agentic Commerce Suite](https://expandingweb.com/agentic-commerce-suite) by [Expanding Web](https://expandingweb.com/). MIT licence. Nothing leaves your store by default (see [Privacy](#privacy)). The eight checks ---------------- [](#the-eight-checks) Same check ids, semantics and verdict language as the public scanner at — a score means the same thing in your admin, on the public scan and in the quarterly [benchmark](https://expandingweb.com/benchmark). IDCheckWhat passesUCP-01`/.well-known/ucp` profileA profile at that path that validates against the Universal Commerce Protocol spec, version 2026-04-08.MCP-01Advertised MCP endpoint reachableThe MCP endpoint the UCP profile names (or a ``) answers an `initialize` handshake and lists at least one tool. A profile that advertises a dead endpoint fails.BOT-01`robots.txt` policy for AI shopping crawlersThe policy for the crawlers agents use (GPTBot, ClaudeBot, PerplexityBot, OAI-SearchBot, ChatGPT-User, Claude-User, Applebot-Extended, Amazonbot, Bingbot, meta-externalagent, CCBot) lets them read product URLs, not only the homepage, and the homepage carries no `noindex`/`noai` directive.AGENT-01AI agent user-agents served at the edge`robots.txt` states a policy; the edge states the truth. The scanner fetches the homepage *as* GPTBot and ClaudeBot and checks the CDN or firewall does not answer 401/403/429/503 or a bot challenge to that user agent.CRAWL-01Crawl limits on search and faceted URLsCatalog search and layered navigation generate unlimited distinct URLs, each a cache miss; the check asks whether `robots.txt` bounds them (`/catalogsearch/result/`, `/search`, query-string URLs) for every AI crawler, not only `*`.LLMS-01`/llms.txt` presentA plain-text index of the site written for language models exists at the root.FEED-01Product structured data completenessSampled product pages (up to three) score at least 16 of 35 weighted points across 27 attributes. The eight an agent cannot transact without — name, image, GTIN, price, currency, availability, shipping details, return policy — count double; a value that would mislead (bad GS1 check digit, non-numeric price, expired `priceValidUntil`) earns nothing.SCHEMA-01Product, Offer, AggregateRating JSON-LDA product page carries valid JSON-LD for the product with an offer and, where reviews exist, an aggregate rating.Reading the result: - **Score** is checks passed out of applicable checks. It is a readiness measure, not a ranking prediction — nobody can promise placement in an AI answer, and this module does not. - **N/A** appears when a check cannot run (no product catalog to sample, the edge refused that one path, the 60-second budget ran out). It does not count against the score. - **Blocked** (the scan stops before the checks) means the store refused the scanner's own user agent at the edge; **unreachable** means nothing answered. Neither is reported as eight failed checks, but every real agent meets the same wall, so an edge rule is usually the first thing to fix. Where the numbers come from: in the Q3 2026 [benchmark](https://expandingweb.com/benchmark) of 1,867 Magento stores, 33.9% passed none of the eight checks; on SCHEMA-01 alone, [54% of reachable product pages carried no Product+Offer JSON-LD](https://expandingweb.com/benchmark/schema-01). Installation ------------ [](#installation) ``` composer require expandingwebcom/module-agent-readiness bin/magento module:enable ExpandingWeb_AgentReadiness bin/magento setup:upgrade bin/magento cache:flush ``` Requirements: Magento Open Source / Adobe Commerce 2.4.6 or newer, PHP 8.2 or newer, `guzzlehttp/guzzle` 7 (already part of Magento). Two tables are created: `expw_readiness_scan` and `expw_readiness_daily`. `bin/magento module:uninstall ExpandingWeb_AgentReadiness` drops both and every `expw_readiness/*` config value. The module can be installed alongside the Agentic Commerce Suite — tables, config paths, routes, ACL ids and cron jobs do not collide. In the admin ------------ [](#in-the-admin) - **Marketing → AI Agent Readiness → Readiness Dashboard**: the latest scan as a score gauge and one row per check (short verdict, severity, and the scanner's full technical verdict folded under *Technical details*), a *Run scan now* button, and the agent-traffic cards. - **Stores → Configuration → ExpandingWeb → AI Agent Readiness**: counting on/off, retention, daily cron scan on/off, TLS verification. The scan runs on your own server against the default store view's base URL, from the outside in — the same fetches an agent would make: `/`, `/robots.txt`, `/.well-known/ucp`, `/llms.txt`, `/sitemap.xml`, up to three product pages, the homepage again as GPTBot and as ClaudeBot, and an MCP handshake if a profile advertises an endpoint. Budget: 60 seconds wall clock, 5 seconds per request, 2 MB per response. Cron `expw_readiness_scan` runs it daily at 03:15 server time; the last 400 scans are kept. *Run scan now* is synchronous: the admin POST waits for the scan, so PHP-FPM's request timeout needs to clear 60 seconds. How the agent-traffic counter works — and what it cannot see ------------------------------------------------------------ [](#how-the-agent-traffic-counter-works--and-what-it-cannot-see) An observer on `controller_action_predispatch` matches the request's `User-Agent` against a list of known AI agent tokens (`Model/Tracking/AgentDetector`: OAI-SearchBot, ChatGPT-User, GPTBot, Claude-User, Claude-SearchBot, ClaudeBot, Perplexity-User, PerplexityBot, Google-Extended, Applebot-Extended, Amazonbot, Meta-ExternalAgent, Bytespider, CCBot, Bingbot) and, on a match, upserts one row per `(day, agent, store view)` in `expw_readiness_daily`. Nothing happens for the other 99.x% of requests beyond one substring scan. "Day" is the store's configured timezone. Rows older than the retention setting (default 400 days) are pruned nightly. The token list is compiled into the module and updated with a module release — a new agent means a new version, never a runtime download. The dashboard shows 7/30/90-day totals per agent, the change against the previous 30 days, and a 14-day sparkline. **The count is a floor, not a total**, for two reasons the dashboard states next to the number: 1. Attribution is by declared user-agent. An agent that presents a browser user-agent is invisible to it. 2. The observer runs in PHP. A page served entirely from Varnish or the built-in full-page cache never reaches PHP, so cache hits by agents are not counted. On a store with a high hit rate the counter sees mostly cache misses — first visits, uncached URLs, and everything that bypasses the cache. For a complete picture, count at the edge (CDN or web-server logs). This module deliberately does not ship an edge-log parser. Privacy ------- [](#privacy) The module makes **no request to anything but your own store**: - The self-scan fetches your own storefront URLs (listed above), with the User-Agent `ExpandingWebAgentReadiness/1.0.0 (+https://expandingweb.com/; readiness self-scan)`. The one exception is MCP-01: if your UCP profile advertises an MCP endpoint on another host, the handshake goes there — because that is what the profile tells agents to do. - The agent-traffic counter reads the request's `User-Agent` header and writes an integer to your own database. No IP addresses, no URLs, no headers are stored. - Scan results and counters live in your database and are shown only in your admin. The dashboard's link to the Agentic Commerce Suite is a static URL with no parameters — it carries nothing about your store. No telemetry, no licence check, no agent-list download, no phone-home. Keeping the checks in lock-step with the public scanner ------------------------------------------------------- [](#keeping-the-checks-in-lock-step-with-the-public-scanner) `Model/Scanner/Scanner.php` and `Model/Scanner/UcpProfile.php` are **generated**, not hand-maintained: `bin/port-scanner.php` re-ports the public scanner's source (`app/Agentic/Scanner.php` in the expandingweb.com repo, which is not public) into this module's namespace and records the upstream revision in `Model/Scanner/.upstream-hash`. The script applies exactly five deliberate differences — namespace and strict types, `ScanHttp` in place of the public scanner's SSRF-hardened client (the only target here is your own base URL, which may legitimately be a private address), sequential instead of concurrent phase-1 fetches, a 60-second instead of 15-second budget (nobody waits on a cron), and the scanner's own identity in the MCP `clientInfo` and robots.txt matching — and refuses to run if upstream changed shape. The reason is the promise on the tin: the public scan, the benchmark and the in-store scan have to give the same verdict for the same store. Hand-merging 1,800 lines twice a quarter is how that promise would quietly die, so the file carries a `DO NOT EDIT BY HAND` marker that CI enforces. Found a check misbehaving? Open an issue with the store shape that trips it; the fix lands upstream and the port is re-run. See [CONTRIBUTING.md](CONTRIBUTING.md). What is not in this module -------------------------- [](#what-is-not-in-this-module) Merchant-feed syndication (OpenAI, Perplexity, Google Merchant Center), Product/Offer/ProductGroup JSON-LD repair, the agent endpoints (`/llms.txt`, `/.well-known/ucp`, MCP server, agent product feed, checkout sessions), agent funnel and revenue-exposure analytics, AI visibility and share-of-voice probes and competitor analysis are the paid tier: the [Agentic Commerce Suite](https://expandingweb.com/agentic-commerce-suite). This module diagnoses; the Suite repairs. Development ----------- [](#development) ``` ln -s /path/to/agent-readiness app/code/ExpandingWeb/AgentReadiness bin/magento module:enable ExpandingWeb_AgentReadiness && bin/magento setup:upgrade ``` Tests, static analysis and coding standard: see [CONTRIBUTING.md](CONTRIBUTING.md). Version history: [CHANGELOG.md](CHANGELOG.md). ### Health Score 41 — FairBetter than 87% of packages Maintenance100 Actively maintained with recent releases Popularity0 Limited adoption so far Community6 Small or concentrated contributor base Maturity50 Maturing project, gaining track record Bus Factor1 Top contributor holds 100% of commits — single point of failure How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window. **Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores. **Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement. **Maturity (30%)** — Project age, version count, PHP version support, and release stability. ### Release Activity Cadence Unknown Total 1 Last Release 1d ago ### Community Maintainers ![](https://www.gravatar.com/avatar/8fc4f85c47c99b9668bfbcf247942a8bc78b38e2b9946ae67fe6dfbd9a708e88?d=identicon)[marcinsdance](/maintainers/marcinsdance) --- Top Contributors [![marcinsdance](https://avatars.githubusercontent.com/u/1252171?v=4)](https://github.com/marcinsdance "marcinsdance (14 commits)") --- Tags adobe-commerceagentic-commerceai-agentsjson-ldllms-txtmagento2mcpseoucpmcprobots-txtJSON-LDmagento2ai-agentsadobe commercellms-txtagentic commerceucp ### Code Quality TestsPHPUnit ### Embed Badge ![Health badge](/badges/expandingwebcom-module-agent-readiness/health.svg) ``` [![Health](https://phpackages.com/badges/expandingwebcom-module-agent-readiness/health.svg)](https://phpackages.com/packages/expandingwebcom-module-agent-readiness) ``` ### Alternatives [run-as-root/magento2-prometheus-exporter Magento2 Prometheus Exporter 69362.0k](/packages/run-as-root-magento2-prometheus-exporter)[mollie/magento2 Mollie Payment Module for Magento 2 1142.0M17](/packages/mollie-magento2)[eslazarev/wildberries-sdk Wildberries OpenAPI clients (generated). 353.6k](/packages/eslazarev-wildberries-sdk)[loki/magento2-components Core module for defining Alpine.js components with advanced AJAX features 1015.1k29](/packages/loki-magento2-components)[buckaroo/magento2 Buckaroo Magento 2 extension 32426.0k8](/packages/buckaroo-magento2)[opengento/module-category-import-export This module add the capability to import and export the categories from the back-office. 1312.0k3](/packages/opengento-module-category-import-export) PHPackages © 2026 [Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)