Research

Shopify AI readiness statistics

In November 2026, we could only tell which sites run on Shopify where our scanner could read the page, so this page covers those sites and says nothing about how many turned our scanner away.

Updated 16:07 UTC · November 2026

Based on the sites Bot Appétit has scanned. Most of these sites come from lists we scan for research. Not a random sample of the web.

All sites on the State of the Web

How Shopify sites land

Every page we read gets a score out of 100, the number at the top of its report (how scoring works). Each row is a range of scores. Where too few sites score in the lowest ranges, they are joined into one row.

Not enough sites yet There are not enough sites yet to split them by score.

A platform is only detectable on a page our scanner could read, so these shares are of the Shopify sites we could read.

Based on the sites Bot Appétit has scanned. Most of these sites come from lists we scan for research. Not a random sample of the web.

Better or worse

Not enough history yet.

Based on the sites Bot Appétit has scanned. Most of these sites come from lists we scan for research. Not a random sample of the web.

AI access

  • robots.txt disallows some AI crawlers 10%
  • robots.txt disallows major AI crawlers 0%
Show as a table
How Shopify sites treat AI crawlers
What we foundShare of sites
robots.txt disallows some AI crawlers10%
robots.txt disallows major AI crawlers0%

Based on the sites Bot Appétit has scanned. Most of these sites come from lists we scan for research. Not a random sample of the web.

What Shopify sites get right and wrong

Passed more often than on the average site: “OAuth protected-resource metadata” (89%, against 2% of all sites); “Images are optimised” (78%, against 13% of all sites); “llms.txt is present and valid” (92%, against 28% of all sites). Least often passed: several checks that no Shopify site we could read passed.

Every check, Shopify against all sites

Share of sites that pass each check, over the sites the check applies to. The Gap column is the difference in percentage points between the two shares; a dash means not enough sites yet.

Shopify sites against all sites: share passing each check
Check Shopify sites All sites Gap (points)
Served over a secure HTTPS connection 100% >99% Level
HTTP redirects to HTTPS 100% 95% +5 points
No mixed (insecure) content 97% 99% −2 points
Core security headers are set 5% 8% −3 points
Not flagged for malware or phishing 100% 100% Level
No server version leakage 97% 94% +3 points
security.txt is published 3% 4% −1 point
Reached without a redirect chain 100% 99% +1 point
Caching or validation headers are set 100% 95% +5 points
The site settles on one host (www vs non-www) 95% 87% +8 points
robots.txt is present and not over-blocking 100% 91% +9 points
Not accidentally set to noindex 100% 99% +1 point
This page declares its canonical URL 97% 59% +38 points
Mobile viewport is set 95% 94% +1 point
Has a title tag 100% >99% Level
Title fits a search snippet 62% 58% +4 points
Has a meta description 68% 88% −20 points
Description fits a search snippet — 65% —
The page has an H1 70% 86% −16 points
Logical heading order 57% 63% −6 points
Topic is consistent across title, H1 and description 49% 64% −15 points
Images have descriptive alt text 81% 95% −14 points
Your page's HTML isn't oversized — 99% —
Open Graph tags for sharing 84% 23% +61 points
Twitter/X card tags 84% 75% +9 points
XML sitemap is present and referenced 100% 75% +25 points
Missing pages return a real 404 100% 94% +6 points
Images are optimised 78% 13% +65 points
Language and charset declared 100% 85% +15 points
hreflang for language variants — 99% —
Analytics is installed 73% 76% −3 points
Search Console / Bing verification 76% 81% −5 points
A favicon is set 89% 99% −10 points
No meta-refresh redirect 100% >99% Level
Your content survives without JavaScript 100% 97% +3 points
Your answer is in the HTML 97% 96% +1 point
Buttons, links and fields have names — 30% —
Semantic HTML landmarks 92% 50% +42 points
Content is scannable in self-contained chunks 97% 94% +3 points
Claims come with figures, quotes or sources — 55% —
Section headings are phrased as questions — 22% —
Reading the page is affordable for a machine — 76% —
No hidden text written for an AI model — 99% —
Sitemap dates tell a machine what changed — 52% —
The links in llms.txt resolve — 91% —
Author / publisher is clear 76% 50% +26 points
A machine-readable published / updated date 0% 10% −10 points
llms.txt is present and valid 92% 28% +64 points
Clean content for agents (Markdown) 0% 4% −4 points
Structured data is present 84% 56% +28 points
Structured data is valid 97% 97% Level
FAQ / Q&A schema — 46% —
Organization schema with sameAs 43% 33% +10 points
Right schema type for the page 97% 94% +3 points
Schema facts also appear in the page text — 57% —
Breadcrumb structured data — 28% —
AI crawlers aren't blocked 89% 92% −3 points
Automated visitors can reach your pages — — —
Engines are allowed to quote the page — 99% —
Your page arrives quickly — 97% —
AI bot rules are explicit and intentional 19% 13% +6 points
Content usage preferences declared 3% 4% −1 point
Resource-discovery Link headers 0% 1% −1 point
No broken links 97% 87% +10 points
Links don't point at redirects 100% 93% +7 points
Descriptive anchor text 100% 99% +1 point
Sensible internal/external link mix 100% 96% +4 points
Links are real links — 93% —
Largest Contentful Paint (LCP) — — —
Cumulative Layout Shift (CLS) — — —
Interaction to Next Paint (INP) — — —
Page weight and render-blocking — — —
MCP Server Card 0% 1% −1 point
AI catalog 0% 1% −1 point
A2A Agent Card — <1% —
WebMCP tools in the page — <1% —
AI usage preferences (Content-Usage) — <1% —
Licensing terms for AI (RSL) — <1% —
Text-and-data-mining reservation (TDMRep) — <1% —
Markdown version linked from the page — 1% —
Content signals agree everywhere — — —
Agent Skills index 0% 1% −1 point
API catalog 0% 1% −1 point
OAuth authorization-server metadata 89% 3% +86 points
OAuth protected-resource metadata 89% 2% +87 points
OpenID Connect discovery 89% 2% +87 points
Web Bot Auth (operates a signed bot) 3% <1% +3 points
Universal Commerce Protocol manifest — 7% —
Auth.md agent registration 0% <1% Level
AI discovery via DNS 0% <1% Level

Based on the sites Bot Appétit has scanned. Most of these sites come from lists we scan for research. Not a random sample of the web.

See how your site compares

A free scan checks all of this on your page in seconds, with no signup.

Scan your site free

Want it handled? We do that too. No pitch, just a plain-English chat.

Book a call