AI Agent Readiness 2026: 5,095 Websites Probed for an MCP Door

On 26 October 2026 we asked 5,095 live websites a question most audits skip: can an AI agent call this site, or only read it? A site that only publishes pages gets summarised. A site that answers the Model Context Protocol lets the agent search its catalogue, book a slot or start a checkout on the user's behalf. We knocked on every door an agent would try and counted who answered. The short version: very few businesses have built a door themselves, most of those who did are missing from the registry agents use to find them, and the biggest store platforms quietly built doors for millions of merchants.

Key numbers

#13.7%Of 5,095 live websites probed on 26 October 2026, 188 (3.7%) answered at least one MCP door.

#285%For 160 of the 188 websites with an MCP door (85%), the official MCP registry listed no server for the domain on 26 October 2026.

#34.9% vs 1.6%Among the global top sites, 156 of 3,191 (4.9%) answered an MCP door; among sites in Brazil, Argentina, Chile and Mexico, 25 of 1,603 (1.6%); in Spain, 7 of 301 (2.3%).

#485%Of 181 MCP doors that businesses built themselves on 176 sites, 154 (85%) asked for a sign-in with OAuth and 27 answered anyone.

#573%133 of those 181 doors (73%) lived on an mcp. subdomain, 29 at /mcp and 19 at /api/mcp on the main site.

#66 of 86 of the 8 Shopify stores in the probe (75%) published a Universal Commerce Protocol profile, version 2026-08-25, with catalog search, cart, checkout and order tracking.

#77 of 97 of the 9 Wix-built websites in the probe answered MCP at /_api/mcp without a sign-in; wix.com and deviantart.com did not.

#86 of 25Of 25 open MCP servers that businesses built themselves and that returned a tool list we could grade, 6 offered tools that change data to anyone who connects.

#918 of 25Graded by the INITE Atlas's rules for tool definitions, 18 of those 25 open servers scored A, 6 scored B and 1 scored C; the median server offered 4 tools costing about 1,110 tokens of an agent's context.

#1010.4%528 of 5,095 homepages (10.4%) sent fewer than 80 words in their server HTML, against 1.1% of WordPress sites and 14.9% of sites on a stack we could not identify.

How we counted

We took the 5,000 most linked domains in the Majestic Million plus 600 from each of the .br, .ar, .cl, .mx and .es zones, 8,000 in all, and read each homepage once. 5,095 answered with a page. For each of them our analyzer asked the places an agent asks: an MCP initialize at /mcp, /api/mcp, /_api/mcp and mcp. plus the domain, the commerce profile at /.well-known/ucp, and the booking services the homepage links to. A path counts as a door only when it answers the way MCP does: a JSON-RPC reply, or a 401 with the Bearer challenge MCP authorization prescribes. A firewall that refuses every request is not a door. No language model took part in the count. We then matched every site against our copy of the official MCP registry, 50,130 entries read on 26 October 2026.

The sample leans towards large sites, because that is what a ranked list of links contains. Small stores and local businesses are under-represented, so read the platform findings below as how each platform behaves, checked on a handful of sites each, not as market shares.

How many websites can an AI agent call?

What we found. 188 of 5,095 sites, 3.7%. The global top sites do better (4.9%) than sites in Latin America (1.6%) or Spain (2.3%). The doors that exist are mostly on software companies' sites: Dropbox, ClickUp, Vimeo, Mixpanel, DigitalOcean, GitBook, Basecamp and Shopify all answered. A few names were less expected, such as Gallup and Criteo.

So what. Agents can read almost every site and operate almost none of them. For a SaaS product that is a gap a competitor can close first. For a newspaper or a local shop it is not a gap at all, which is why our analyzer scores the door only for the kinds of business an agent would actually act on.

Now what. If your product has an API, the cheapest path to a door is a remote MCP server over it; our 90-day plan for a SaaS MCP server covers the order of work.

Why are most doors missing from the registry?

What we found. For 160 of the 188 sites with a door, the official MCP registry lists nothing for the domain. The official servers of Dropbox, ClickUp, Vimeo and Mixpanel are not there, while wrappers of the same products, published by third parties such as Pipeworx, UsefulAPI and Smithery, are.

So what. The registry is where clients, directories and catalogues look first, our own Atlas included. A vendor that ships a server and never registers it leaves the first impression to whoever wrapped its API, with that wrapper's permissions, uptime and tool descriptions.

Now what. Publish your server under your own domain's namespace. The registry proves ownership with a key served at /.well-known/mcp-registry-auth, and our analyzer prints the namespace your domain would claim.

Who can call the doors that exist?

What we found. 154 of the 181 doors businesses built themselves (85%) ask for a sign-in, through OAuth that the server describes at a protected-resource address (RFC 9728). 133 of them (73%) live on a separate mcp. subdomain. Of the 25 open servers that returned a tool list, 6 offer tools that change data to anyone who connects. One of them marks a tool that deletes as harmless, with destructiveHint: false or readOnlyHint: true. The definitions themselves are good: 18 of the 25 grade A by the Atlas's rules, and the median server offers 4 tools for about 1,110 tokens.

So what. A sign-in is the right posture for tools that act on an account. An open server with write tools is the risky one: any agent with the address can call them. A missing annotation matters less than it looks: the spec defaults an unannotated tool to destructive, so a careful client asks first. The real hazard is a delete tool marked destructiveHint: false or readOnlyHint: true.

Now what. Put write tools behind OAuth and annotate every tool honestly: readOnlyHint: true on the ones that only read, so a client can run them without asking, and never destructiveHint: false on one that deletes, sends or pays. The INITE Atlas shows how other vendors' servers grade on the same rules.

Which platforms open the door for you?

What we found. Shopify and Wix did it for their customers. 6 of the 8 Shopify stores we read published a Universal Commerce Protocol profile at /.well-known/ucp, version 2026-08-25, naming an MCP endpoint on the store's myshopify.com address with catalog search, cart, checkout and order tracking. The older /api/mcp on these stores now offers only a search of policies and FAQs; Shopify moved the catalogue behind UCP on 31 August 2026. 7 of the 9 Wix-built sites answered MCP at /_api/mcp without a sign-in and published a UCP profile too; wix.com and deviantart.com did not answer. Tiendanube stores answer at /api/mcp with eight commerce tools, from product search to order tracking, though none of them appeared in this top-sites sample.

So what. On these platforms "do we have an MCP server" is already answered, and the answer is the platform's. What the merchant controls is what the door contains: a catalogue an agent can search, shipping and payment methods it can quote, policies it can cite. Whether an agent can complete the purchase depends on more than the profile; we went through the checkout side in the AI checkout got cancelled, the AI customer did not.

Now what. If you sell on Shopify or Wix, do not commission a second MCP server. Check what your platform's door exposes, and fill the data it reads.

What can an agent read without running JavaScript?

What we found. 528 homepages (10.4%) send fewer than 80 words in the HTML the server returns. WordPress sites almost never do (1.1%); sites on a stack our fingerprints could not name, mostly single-page apps, do it 14.9% of the time.

So what. ChatGPT, Claude and Perplexity fetch pages without running scripts. A homepage that only exists after hydration is close to empty for them, whatever the browser shows.

Now what. Render the text of your key pages on the server. The bots themselves also need to be let in; our AI crawler allowlist for 2026 lists which user agent does which job.

Does a door make you more visible in AI answers?

Not yet, as far as anyone has measured. Studies of AI citations through October 2026 tie visibility to ranking in classic search and to mentions on other people's pages, not to MCP. A door matters for a different reason: it decides whether an assistant that already chose you can act for the user, or has to send them to your website to finish. For a product that is used through an API, or a store that wants to be bought from inside an assistant, that is the step after visibility. For a site that is read rather than used, it can wait.

Check your own site

The INITE analyzer now runs this probe on any site you give it: which platform you are on, every door an agent can knock on, whether the registry lists you, and for an open door, the same grade the Atlas gives the servers it tracks. It is free. For a browser agent working through your interface rather than an API, see making a SaaS usable by Operator and Claude.

Data and method

The domain sample is from the Majestic Million (CC BY 3.0), read on 26 October 2026: the top 5,000 domains plus 600 per zone for .br, .ar, .cl, .mx and .es. Each homepage was read once on 26 October 2026; 5,095 answered with a page. Doors were asked with MCP initialize at four usual addresses and through the UCP profile; registry matching used a copy of the official MCP registry with 50,130 entries read on 26 October 2026, matching a server to a domain by its namespace, its website or its remote address. Open servers were graded with the INITE Atlas's definition rules. Platforms were identified by their runtime, such as window.Shopify, not by files a site may embed. A door on www.wixapis.com or on a *.myshopify.com address counts as the platform's, and a site built on a site builder that embeds a Shopify widget counts as the builder's. The census was read again on 26 October 2026 after the platform detection was fixed: the first version counted the doors Wix and Shopify set up for their sites as doors the businesses had built themselves. Download the counts: agent-rails-census-2026-10.csv by region and agent-rails-by-platform-2026-10.csv by platform, both CC BY 4.0. The same census now runs every month; the numbers in AI tools statistics cover what AI vendors' own sites publish.