doordash.com
visiting doordash.com twice: once in a real browser, once as an agent. takes about ten seconds.
visiting doordash.com twice: once in a real browser, once as an agent. takes about ten seconds.
Agents see a security wall, not your site: DoorDash blocks all bot traffic with a 403 error before any content loads.
what the agent hit: HTTP 403 for a bot request
Performing security verification
This website uses a security service to protect against malicious bots. This page is displayed while the website verifies you are not a bot.
Verification successful. Waiting for www.doordash.com to respond
Ray ID: a36bde442b2bdc03
Performance and Security by Cloudflare Privacy
Work with your security team to allow legitimate AI agents (like search crawlers and accessibility tools) through your bot detection system, or you'll remain invisible to them.
0 of 3 content blocks survive the trip. This drives the score up top; heavy UI noise only trims a few points.
0 of 0
actions on this page agents can call
Humans get 0 buttons and forms here. Agents get none of them. WebMCP is the emerging standard that fixes this, and being early stands out.
webmcp audit on ora →checked sun, 06 sep 2026 07:47
Ora runs the full agent-readiness audit: can agents find you, read you, use you end to end, and pay you. Free, public, no signup.
Your robots.txt turns no one away. Good.
DoorDash
[ no description. agents improvise one for you. ]
This is your entire elevator pitch to an agent deciding whether to read on.
273 KB shipped · 164 B of words
Everything beyond the words is code and markup an agent downloads and throws away.
~70k tokens to read this page
An agent pays for every token. Only the green ones are what you actually want it to read.