ACP Info
Menu

Public URL scanner

Scan public merchant signals

Check only a small set of public endpoints and visible HTML signals. The scan never submits a checkout, logs in, leaves the merchant's own domain or assesses payment security. Same-site redirects (apex to www, home to a language path) are followed, up to five.

What this result means: it is a snapshot of public technical signals, not a certification and not evidence that a merchant has completed an agentic transaction. Use a controlled integration test before making any production claim.

Private, local and non-HTTP targets are rejected. The scanner reads no more than the public homepage and three standard discovery paths. Results for the same normalized URL may be reused for up to five minutes. Cloudflare limits the scan and badge endpoints to 8 requests per 10 seconds per IP.