How ShopBouncerScanner works

If you saw ShopBouncerScanner/1.0 (+https://shopbouncer.com/scanner) in your logs, someone asked us to check how your store handles AI shopping agents, or your store was included in our quarterly readiness research.

What it requests

At most six requests per scan, all public pages a browser or AI agent could fetch:

• /robots.txt
• Your homepage, twice: once as a browser and once with a ChatGPT shopping-agent user agent, to see whether agents are treated differently
• /.well-known/ucp (Universal Commerce Protocol manifest)
• A read-only tools/list call to /api/mcp, the listing an AI agent sees. It never calls a tool.

We never log in, submit forms, add to cart, or test for vulnerabilities. Results are cached for six hours, so repeat requests don't reach your store.

Opt out

Add this to your robots.txt and we will not scan your store, on demand or in research:

User-agent: ShopBouncerScanner
Disallow: /

Research scans (unsolicited) also honor a site-wide User-agent: * / Disallow: /. To have past results removed, email hello@shopbouncer.com from an address at your domain.