Can AI Shoppers Get Into Your Store? A 20-Minute Audit

01 This season the AI is checking, not buying

In early October, an AI shopping agent got thrown out of Walmart's website by a prove-you're-human button. Walmart says that wasn't on purpose. If Walmart can do it by accident, so can you. First, read the holiday numbers the way they are counted:

Adobe forecasts AI traffic to U.S. retail sites up 130% this season, 159% on Thanksgiving. That counts people clicking a link from an AI tool to a store. Salesforce predicts 20% of holiday e-commerce traffic will come from AI agents. That mixes bots answering shoppers with competitor scrapers checking your prices. A DOSS survey of 1,000 Americans found only 6% would let an AI agent complete a purchase on its own. What they want it for: watching for price drops (63%) and comparing products (62%).

Every check is a visit to a store. Below: three doors an AI shopper must get through, one test at each, then the plan.

The AI isn't buying. It's checking. And it can't check a store it can't get into.

02 Door one: can it get in?

The sign on the door: robots.txt. A small file that tells bots where they may go. Read yours by adding /robots.txt to your store's address. In June 2026, DOSS checked 500 big retailers: about one in ten blocked the AI crawlers behind ChatGPT and Claude, 21% in apparel, 23% in marketplaces. A block looks like a "Disallow" line under names like GPTBot, ChatGPT-User, OAI-SearchBot (OpenAI) or ClaudeBot (Anthropic). The bouncer: your security layer. Cloudflare runs it for about a fifth of the web. Its September default for sites that run ads blocks agents acting for a person on any page with an ad. If you run ads or sponsored listings, go look. The checkbox. The prove-you're-human box. An agent shopping for a real person is a bot.

Don't open every door. Some bots are competitors scraping your prices. Yelp and Amazon block on purpose. The problem is blocking by accident.

The door test

[PASTE YOUR PRODUCT PAGE LINK]
Is this in stock, and what's the return policy?

Run the door test in two AI assistants. Answered, quoted an old page, or gave up?

Open your robots.txt. Look for "Disallow" under the crawler names above.

Ask whoever runs your site what your bot protection does with AI agents. Include the ad-page setting and the checkbox.

Decide on purpose which bots you let in. Write it down, with the reason.

03 Door two: the stockroom list

Shopping results inside the big assistants often read lists, not pages. A product feed is the stockroom list you send to the platforms: every product, its price, stock and shipping.

Peec AI looked at 43,000 products in ChatGPT's shopping results. 83% were strong matches for products in Google Shopping's top organic results. For Bing, 11%. So the feed you already keep for Google is probably doing more work than you think.

In late November, prices, stock and shipping cutoffs change daily. If the list lags, the agent quotes yesterday's deal.

Check In the feed On the live page

Price

Stock

Shipping offer

Returns

Fill it in for your ten best gift products. Every mismatch is a wrong answer an agent gives for you. Look hardest at shipping: Salesforce found free shipping is shoppers' top reason to pick a store. Is it in your feed, or only on a banner?

04 Door three: the shelf label

Adobe's AI Content Visibility Checker scores how much of a page AI can read. In May, beauty sites scored 63%. Furniture and home: 47%, so more than half the page was out of reach. What reads well: specs, ingredient lists, how-to guides, customer service pages.

If the agent sent the customer, the return still comes to you. On your twenty best sellers, put the holiday facts in words, not in a banner image:

Holiday facts block

Order by [DATE] for delivery by Christmas.
Holiday returns: items bought from [DATE] can be returned until [DATE].
Gift receipts: [YES OR NO, AND HOW TO ASK FOR ONE].
Shipping: [YOUR SHIPPING OFFER].

05 Six weeks is really three

Many stores lock their site before Black Friday, so fixes land first. How I'd split it:

Week one, the door. The door test, your bot settings, your decision. Week two, the list. Feed against site on top sellers. Week three, the label. Holiday facts in plain text, your last big change. Week four, make it visible. Report AI visits (people arriving from a link in an AI tool) on their own. PYMNTS found only 23% of merchants see both AI traffic and the sales it brings. Week five, sale prices. Load them, then rerun the first two tests. Week six, freeze. On Thanksgiving morning, run the door test one more time.

Do this today. Run the door test on one product. Did the AI get in, yes or no?

Sources

TechCrunch: The next hurdle for AI agents, getting websites to let them in Adobe: 2026 holiday shopping forecast Salesforce: 2026 holiday predictions DOSS: Would you let a bot shop for you? Modern Retail: Shopify sets boundaries for AI agents (robots.txt) PYMNTS: Cloudflare blocks AI agents from ad-supported pages Dataiads: ChatGPT products from Google Shopping, the 83% study Seeders: Why ChatGPT scrapes Google Shopping Digital Commerce 360: Adobe AI readability by sector

Mathew's LibraryLibrary card

Free access

Keep reading free with your library card

One email opens this checklist and all 3 resources in Mathew's library. No account, no password.