Callable Audit
Assess whether a business can be reached, evaluated, and transacted with by an AI agent without a human re-routing through a UI. Returns a per-surface score and a verdict.
When to Invoke
Trigger on: "callable audit", "is this business callable", "can an agent transact here", "agent-commerce readiness", "agent-accessible", "discoverable by agents", or when a user provides a business name/URL and asks how agent-ready it is from a buyer's perspective.
Inputs
Accept any of:
- A business name (e.g. "Shopify")
- A URL (homepage, pricing page, or checkout flow)
- A product/service description in free text
If multiple surfaces exist (website, API docs, MCP server, plugin), audit each surface separately.
Phase 1: Surface Discovery
Identify all agent-reachable surfaces the business exposes:
| Surface Type |
Examples |
How to Check |
| MCP server |
.well-known/mcp.json, plugin manifest |
Fetch <domain>/.well-known/mcp.json; check plugin directories |
| Typed REST/GraphQL API |
OpenAPI spec, GraphQL schema |
Check /docs, /openapi.json, <domain>/graphql |
| Agent-readable catalog |
Structured product data, RSS, sitemap |
Check for JSON-LD, schema.org markup, machine-readable pricing |
| Checkout automation |
Stripe Link, hosted payment endpoint, B2B procurement API |
Check payment docs |
| Chat/NLP only |
Chatbot, FAQ widget |
Flag as chat-only |
If a URL is provided, fetch and inspect it. If only a name, reason from publicly known documentation.
Phase 2: Economic Task Completion Rubric
Score each step of the full economic task. For each step: 1 = impossible without a human, 3 = partially automatable, 5 = fully agent-operable.
Step 1 — Discover (Can an agent find this business and its offerings?)
- Is the business indexed in a way agents can retrieve? (LLM training data, web search, agent directories)
- Are products/services described in machine-readable structured data?
- Is there an MCP server, plugin manifest, or API the agent can call directly?
Step 2 — Compare (Can an agent evaluate options against criteria?)
- Are pricing, features, and constraints machine-readable?
- Are comparison attributes (specs, tiers, SLAs) in a structured format?
- Can an agent filter/query the catalog programmatically?
Step 3 — Decide (Can an agent make a selection without ambiguity?)
- Is the selection interface (add-to-cart, configure, quote request) API-accessible?
- Are decision inputs well-typed (required fields, validation rules exposed)?
- Can the agent complete configuration without a visual UI?
Step 4 — Pay (Can an agent authorize and complete a transaction?)
- Is there a payment endpoint the agent can call (Stripe Link, agent-payment token, B2B purchase order API)?
- Are spend caps and authorization delegation supported?
- Is idempotency supported (agent can retry without double-charging)?
Step 5 — Confirm (Can an agent receive and verify order confirmation?)
- Does the business return a structured confirmation (JSON receipt, order ID, tracking reference)?
- Is there a status-check endpoint the agent can poll?
- Is the confirmation machine-readable without screen-scraping?
Phase 3: Auth & Security Assessment
Assess the authentication model for agent compatibility:
- API key: Supported and documented? (agent-friendly)
- OAuth 2.0 / PKCE: Supported? (agent-friendly with proper delegation)
- Session cookies / CAPTCHA: Requires human browser session? (agent-hostile)
- Agent payment tokens: Scoped spend tokens supported? (future-proof)
Note any fraud or rate-limit controls that would block legitimate agent traffic.
Phase 4: Score & Verdict
Calculate the overall score:
Per-surface score = average of 5 step scores (1-5 scale)
Overall score = average across all surfaces
Map to verdict:
| Score |
Verdict |
Meaning |
| 4.0–5.0 |
Agent-Callable |
Agent can complete the full economic task autonomously |
| 2.5–3.9 |
Wrappable |
Agent can complete the task with a thin wrapper (scraper, RPA, custom adapter) |
| 1.0–2.4 |
Chat-Only Dead End |
Agent can discover but not transact; human required at critical steps |
Phase 5: Output Report
# Callable Audit: [Business Name]
Date: [today]
## Verdict: [AGENT-CALLABLE / WRAPPABLE / CHAT-ONLY DEAD END]
Overall Score: X.X / 5.0
## Surface Inventory
| Surface | Type | Score |
|---------|------|-------|
| [surface] | [MCP/API/Catalog/Chat] | X.X |
## Economic Task Scores
| Step | Score | Notes |
|------|-------|-------|
| Discover | X/5 | ... |
| Compare | X/5 | ... |
| Decide | X/5 | ... |
| Pay | X/5 | ... |
| Confirm | X/5 | ... |
## Auth Model
[Description of auth options and agent-compatibility assessment]
## Critical Gaps
[What prevents a higher verdict — specific blockers, not generic advice]
## Recommended Path to Agent-Callable
1. [Highest-leverage change]
2. [...]
Verification
A good audit:
- Scores all 5 economic task steps with evidence, not assumptions
- Identifies the specific blocking step (usually Pay or Confirm for most businesses)
- Does not rate a business "Agent-Callable" if Pay requires a human browser session
- Recommended path items are specific and actionable (not "add an API")
Source Attribution
Diagnostic frame derived from Nate's Newsletter (2026-05-03): "Executive Briefing: What Stripe Sessions 2026 actually means for how you sell" — the named diagnostic "the new competition is to be callable." The 5-step economic task model (discover → compare → decide → pay → confirm) is extracted from the briefing's "callable business" rubric.
1---2name: callable-audit3description: Audit whether a business is callable by an AI agent end-to-end. Takes a business name, URL, or description and walks a structured rubric — discoverable surface, full economic task completion (discover → compare → decide → pay → confirm), auth model — producing a verdict of agent-callable, wrappable, or chat-only-dead-end with a per-surface score. Use when asked "can an agent buy from this business", "is this service agent-callable", "callable audit", or "agent-commerce readiness".4---56# Callable Audit78Assess whether a business can be reached, evaluated, and transacted with by an AI agent without a human re-routing through a UI. Returns a per-surface score and a verdict.910## When to Invoke1112Trigger on: "callable audit", "is this business callable", "can an agent transact here", "agent-commerce readiness", "agent-accessible", "discoverable by agents", or when a user provides a business name/URL and asks how agent-ready it is from a buyer's perspective.1314## Inputs1516Accept any of:17- A business name (e.g. "Shopify")18- A URL (homepage, pricing page, or checkout flow)19- A product/service description in free text2021If multiple surfaces exist (website, API docs, MCP server, plugin), audit each surface separately.2223## Phase 1: Surface Discovery2425Identify all agent-reachable surfaces the business exposes:2627| Surface Type | Examples | How to Check |28|---|---|---|29| MCP server | `.well-known/mcp.json`, plugin manifest | Fetch `<domain>/.well-known/mcp.json`; check plugin directories |30| Typed REST/GraphQL API | OpenAPI spec, GraphQL schema | Check `/docs`, `/openapi.json`, `<domain>/graphql` |31| Agent-readable catalog | Structured product data, RSS, sitemap | Check for JSON-LD, schema.org markup, machine-readable pricing |32| Checkout automation | Stripe Link, hosted payment endpoint, B2B procurement API | Check payment docs |33| Chat/NLP only | Chatbot, FAQ widget | Flag as chat-only |3435If a URL is provided, fetch and inspect it. If only a name, reason from publicly known documentation.3637## Phase 2: Economic Task Completion Rubric3839Score each step of the full economic task. For each step: 1 = impossible without a human, 3 = partially automatable, 5 = fully agent-operable.4041### Step 1 — Discover (Can an agent find this business and its offerings?)42- Is the business indexed in a way agents can retrieve? (LLM training data, web search, agent directories)43- Are products/services described in machine-readable structured data?44- Is there an MCP server, plugin manifest, or API the agent can call directly?4546### Step 2 — Compare (Can an agent evaluate options against criteria?)47- Are pricing, features, and constraints machine-readable?48- Are comparison attributes (specs, tiers, SLAs) in a structured format?49- Can an agent filter/query the catalog programmatically?5051### Step 3 — Decide (Can an agent make a selection without ambiguity?)52- Is the selection interface (add-to-cart, configure, quote request) API-accessible?53- Are decision inputs well-typed (required fields, validation rules exposed)?54- Can the agent complete configuration without a visual UI?5556### Step 4 — Pay (Can an agent authorize and complete a transaction?)57- Is there a payment endpoint the agent can call (Stripe Link, agent-payment token, B2B purchase order API)?58- Are spend caps and authorization delegation supported?59- Is idempotency supported (agent can retry without double-charging)?6061### Step 5 — Confirm (Can an agent receive and verify order confirmation?)62- Does the business return a structured confirmation (JSON receipt, order ID, tracking reference)?63- Is there a status-check endpoint the agent can poll?64- Is the confirmation machine-readable without screen-scraping?6566## Phase 3: Auth & Security Assessment6768Assess the authentication model for agent compatibility:69- **API key**: Supported and documented? (agent-friendly)70- **OAuth 2.0 / PKCE**: Supported? (agent-friendly with proper delegation)71- **Session cookies / CAPTCHA**: Requires human browser session? (agent-hostile)72- **Agent payment tokens**: Scoped spend tokens supported? (future-proof)7374Note any fraud or rate-limit controls that would block legitimate agent traffic.7576## Phase 4: Score & Verdict7778Calculate the overall score:7980```81Per-surface score = average of 5 step scores (1-5 scale)82Overall score = average across all surfaces83```8485Map to verdict:8687| Score | Verdict | Meaning |88|---|---|---|89| 4.0–5.0 | **Agent-Callable** | Agent can complete the full economic task autonomously |90| 2.5–3.9 | **Wrappable** | Agent can complete the task with a thin wrapper (scraper, RPA, custom adapter) |91| 1.0–2.4 | **Chat-Only Dead End** | Agent can discover but not transact; human required at critical steps |9293## Phase 5: Output Report9495```96# Callable Audit: [Business Name]97Date: [today]9899## Verdict: [AGENT-CALLABLE / WRAPPABLE / CHAT-ONLY DEAD END]100Overall Score: X.X / 5.0101102## Surface Inventory103| Surface | Type | Score |104|---------|------|-------|105| [surface] | [MCP/API/Catalog/Chat] | X.X |106107## Economic Task Scores108| Step | Score | Notes |109|------|-------|-------|110| Discover | X/5 | ... |111| Compare | X/5 | ... |112| Decide | X/5 | ... |113| Pay | X/5 | ... |114| Confirm | X/5 | ... |115116## Auth Model117[Description of auth options and agent-compatibility assessment]118119## Critical Gaps120[What prevents a higher verdict — specific blockers, not generic advice]121122## Recommended Path to Agent-Callable1231. [Highest-leverage change]1242. [...]125```126127## Verification128129A good audit:130- Scores all 5 economic task steps with evidence, not assumptions131- Identifies the specific blocking step (usually Pay or Confirm for most businesses)132- Does not rate a business "Agent-Callable" if Pay requires a human browser session133- Recommended path items are specific and actionable (not "add an API")134135## Source Attribution136137Diagnostic frame derived from Nate's Newsletter (2026-05-03): "Executive Briefing: What Stripe Sessions 2026 actually means for how you sell" — the named diagnostic "the new competition is to be callable." The 5-step economic task model (discover → compare → decide → pay → confirm) is extracted from the briefing's "callable business" rubric.