How many WooCommerce stores stop AI agents at checkout?
On 7 October 2026 we checked 66 WooCommerce stores from the outside. 29 had at least one thing that can stop an AI shopping agent before it pays: a firewall that turned our check away, or a captcha on the checkout page. None asked for an account to check out.
The stores are named by the WooCommerce showcase or a 2026 roundup. They are well-known stores, not a random sample of every store.
What we found
| Finding | Stores |
|---|---|
| Cloudflare in front of the store | 40 of 66 |
| A firewall turned our check away | 10 of 66 (8 on every page, 2 at checkout) |
| Captcha on the checkout page | 19 of the 39 checkouts we could open (16 reCAPTCHA, 3 Cloudflare Turnstile) |
| Checkout needs an account | 0 of the 36 where we could tell |
| The cart API agents use did not answer | 4 of 57 |
| robots.txt keeps a shopping agent off product pages | 1 of 66 |
| No schema.org Product markup on a product page | 21 of 57 |
| A product with no barcode (GTIN, UPC, EAN) | 33 of 36 |
How we checked
We ran the same check as the free check. It names itself honestly as AgentStampCheck and never poses as ChatGPT or Claude. For each store it opens the home page, robots.txt, the WooCommerce Store API, one product page and checkout.
An empty cart's checkout sends you to the cart, so the check puts one in-stock product in a cart through the Store API, as a shopper would, and then opens checkout. No order is placed. Checkout opened on 39 of the 57 stores we could confirm as WooCommerce. The others had nothing in stock to add, a firewall in the way, or a checkout set up in a way the check could not follow.
What the numbers do not say
- A firewall that turned our check away may still let a signed agent such as ChatGPT through. Cloudflare can allow verified agents while it challenges unknown programs.
- A reCAPTCHA script on checkout may be the invisible kind that scores visitors instead of asking them to solve a puzzle. It still decides who gets through.
- We checked from one home connection. Firewalls challenge datacenter traffic more often, so they may turn more agents away than these numbers show.
- 9 stores refused every page, so we could not confirm they still run WooCommerce. They are listed as WooCommerce stores by the showcase.
What to do on your store
Run the free check on your own store. If a captcha is on your checkout, let agents with a verified signature skip it (see Does a captcha block AI shopping agents at checkout?). If Cloudflare is in front, look at its AI bot setting (see Does Cloudflare block AI shopping agents on my store?). Agent Stamp then shows which agents your store still stops, and what their carts held.