Is Expedia ready for AI agents?

Company: Expedia (EXPE) URL tested: https://www.expedia.com Observed at: 2026-08-27T21:03:22.913Z Methodology: AgentReady `2026-08-23-v2`, scanner `agentready-scanner-2026-08-23-v2` Observation coverage: 41% Report status: Partial evidence; the browser interaction pass was unavailable Correction route: [Request an evidence correction](/contact?subject=index-correction)

The result in one sentence

Expedia received an applicability-aware diagnostic with 41% observation coverage. The defensible conclusion is narrow: the public homepage and protocol probes exposed several useful machine-readable and trust signals, while a large set of rendered-interface checks could not be observed in this run. That distinction is the foundation of this index. The private numeric diagnostic helps maintainers locate changes; the public article emphasizes evidence and coverage because a number without observation context invites false precision.

Expedia Group says its Hotels.com AI Agent spans conversational discovery, shopping, and servicing, and that integrations with Operator and Copilot Actions are intended to bridge planning and booking. Expedia’s own announcement emphasizes real-time pricing, guest reviews, contextual imagery, booking changes, and an end-to-end experience rather than discovery alone. Those official claims establish strategic relevance, not proof that an arbitrary external agent can complete the audited task. This report tests the public evidence a third-party agent could discover without credentials and frames a safe, reversible customer journey for follow-up verification.

The exact journey we evaluated

The goal was: Select a hotel using dates, occupancy, total price, location, cancellation, and payment constraints.

The fixed task was: Find a refundable hotel in downtown Chicago for two adults over a two-night weekend, compare two options using total price and guest evidence, verify cancellation and payment timing, then prepare the preferred room for booking review.

The safe stopping point was: Stop before signing in, entering traveler details, accepting a non-refundable rate, submitting payment, or confirming a reservation. This boundary matters. AgentReady did not place an order, make a reservation, transmit private data, authorize software, create credentials, or accept terms. The URL scanner inspected public discovery files, response behavior, homepage content, security and trust signals, and optional commerce evidence. The journey contract describes what a controlled browser evaluation should attempt; it is not a claim that the current diagnostic executed every step.

Travel search is stateful and price-sensitive. Dates, taxes, room type, cancellation deadline, occupancy, and availability can change the correct answer from one request to the next. A travel agent must preserve the exact rate conditions it compared. Omitting taxes or substituting a restrictive room can turn a superficially correct recommendation into an expensive mistake. A useful benchmark therefore asks more than “can an agent open the site?” It asks whether the agent can preserve constraints, locate current evidence, explain uncertainty, recognize consequential transitions, and stop before authority is required.

What the AgentReady score measured

This report used methodology version `2026-08-23-v2`. The model produces 34 stable checks across public web discovery, API and MCP discovery when applicable, semantic and accessible structure, browser compatibility, security and safety, legal and trust evidence, repository signals when authorized, and optional commerce interoperability. Essential checks account for 80 base points, recommended checks account for 20, and positive bonus signals can add up to five without lifting the headline above 100. The relevant test shape here is specific: Travel search is stateful and price-sensitive. Dates, taxes, room type, cancellation deadline, occupancy, and availability can change the correct answer from one request to the next.

The states are deliberately non-binary. Pass means the scanner found positive evidence for that check. Partial means some evidence was present but the condition was incomplete or ambiguous. Fail is reserved for observed negative evidence. Not applicable removes an optional surface from the denominator when it was not observed or advertised. Unobservable means the provider could not collect the necessary evidence in this run; it lowers coverage rather than the target’s score. The raw artifact retains a legacy migration value for audit continuity, but that value is not rendered or used for public comparison. For Expedia, that restraint is consequential: A travel agent must preserve the exact rate conditions it compared. Omitting taxes or substituting a restrictive room can turn a superficially correct recommendation into an expensive mistake.

The scanner recorded 6 passes, 6 partials, 1 failures, 2 not-applicable checks, and 19 unobservable checks. The completed pass set included Crawler and agent access policy, LLM-readable product description, HTTPS transport, Browser security headers, No agent-blocking CAPTCHA, No exposed secrets. The partial set included Sitemap discovery, Agent instructions, Agent card or manifest, Discoverable and well-typed API contract, MCP discovery card, Commerce interoperability. The explicit failure set was: Legal and trust pages.

Observable evidence

• Crawler and agent access policy: pass. robots.txt found: HTTP 200; AI agents are not explicitly blocked in robots.txt
• Sitemap discovery: partial. sitemap.xml missing or invalid: https://www.expedia.com/sitemap.xml
• LLM-readable product description: pass. llms.txt found: Quality: 3/3
• Agent instructions: partial. Missing agent instructions (agents.md / AGENTS.md): Add one to site or repo
• Agent card or manifest: partial. No agent manifest found: Checked /.well-known/agent-card.json and ai-agent.json
• Discoverable and well-typed API contract: partial. No OpenAPI/Swagger spec found: API advertised; checked common paths
• MCP discovery card: partial. MCP advertised but no server card: Detected “mcp” reference — /.well-known/mcp.json missing or invalid
• Accessible landmarks: unobservable. The scan provider could not observe this surface in this run.
• HTTPS transport: pass. HTTP redirects to HTTPS
• Browser security headers: pass. Content-Security-Policy present; Frame embedding protection present; X-Content-Type-Options nosniff present
• Agent bot access: unobservable. The scan provider could not observe this surface in this run.
• Structured data quality: unobservable. The scan provider could not observe this surface in this run.
• Rendered browser interaction evidence: unobservable. No rendered browser evidence was returned in the canonical run: Browser-dependent behavior remains unknown and is not classified as a failure

These observations are point-in-time facts about the returned public responses, not permanent properties of Expedia. A missing conventional path such as `/sitemap.xml` does not prove the company has no sitemap; robots.txt may advertise a different valid location. A missing `llms.txt`, agent card, MCP card, or OpenAPI file does not prove there is no private or partner integration. Conversely, the presence of a discovery file does not prove that a multi-step customer journey works. Public discovery and operational completion are different layers. The official context for this particular target is also narrower than a readiness claim: Expedia’s own announcement emphasizes real-time pricing, guest reviews, contextual imagery, booking changes, and an end-to-end experience rather than discovery alone.

Strengths visible in this run

The strongest part of Expedia’s result is that the scanner could obtain concrete evidence instead of relying only on marketing language. HTTPS transport, crawler policy, legal discoverability, structured data, security headers, sitemap references, and agent-oriented files each answer a different operational question. Their value is cumulative: a crawler needs permission and entry points; a reasoning system needs structured, current content; an acting system needs stable controls and explicit consequence boundaries. For this journey, the operational question is: Select a hotel using dates, occupancy, total price, location, cancellation, and payment constraints.

The report’s complete passes—Crawler and agent access policy, LLM-readable product description, HTTPS transport, Browser security headers, No agent-blocking CAPTCHA, No exposed secrets—provide the clearest starting assets. Teams should preserve these during redesigns and protocol launches. If a discovery surface already works, the next improvement should connect it to canonical product, policy, pricing, or developer truth rather than publish a second, divergent narrative. For Expedia, that connection is especially important because expedia’s own announcement emphasizes real-time pricing, guest reviews, contextual imagery, booking changes, and an end-to-end experience rather than discovery alone.

Another strength is category fit. Travel search is stateful and price-sensitive. Dates, taxes, room type, cancellation deadline, occupancy, and availability can change the correct answer from one request to the next. This makes the company more informative than a generic brochure site. The journey includes real constraints and a natural handoff point where an agent can summarize evidence for a person without claiming authority it does not have.

Failures, gaps, and uncertainty

The largest limitation is systematic: the canonical run returned no rendered browser evidence. As a result, rendered DOM, accessible names, form labels, interaction targets, runtime stability, primary CTA discovery, and several content checks were unobservable. The run is therefore marked partial, even where its observable checks are strong. This is missing evidence, not a failed site check, and we did not substitute a manual impression for scanner evidence. In concrete terms, the report cannot verify this Expedia task: Find a refundable hotel in downtown Chicago for two adults over a two-night weekend, compare two options using total price and guest evidence, verify cancellation and payment timing, then prepare the preferred room for booking review.

The partial checks—Sitemap discovery, Agent instructions, Agent card or manifest, Discoverable and well-typed API contract, MCP discovery card, Commerce interoperability—represent practical opportunities, but each needs live verification before implementation. Conventional discovery paths are valuable because external agents can find them cheaply, yet conventions alone cannot establish correctness. API or MCP marketing mentions should lead to authenticated documentation, schemas, scopes, error models, and test environments. Commerce feeds and product schema should share the same price and availability source. Policies should be linked near the action they govern, not merely in a footer.

A travel agent must preserve the exact rate conditions it compared. Omitting taxes or substituting a restrictive room can turn a superficially correct recommendation into an expensive mistake. That is why the safe stopping point is part of the published profile. The index rewards explainable progress toward a customer goal, not aggressive clicking. An agent should surface unresolved terms and ask for confirmation rather than treating a technically enabled action as authorized.

The correction route

The most valuable correction is reproducible evidence. Expedia can use the [index correction route](/contact?subject=index-correction) to identify the exact observation, provide a public canonical URL or response, and request a rerun under the same methodology. A correction should include the tested hostname, timestamp, check ID, expected evidence, and whether the response varies by geography, authentication, user agent, or account state. AgentReady should update an observation when the public evidence changes, not negotiate the score as a matter of opinion. The highest-value correction for this profile would reduce uncertainty around: Select a hotel using dates, occupancy, total price, location, cancellation, and payment constraints.

For the browser gap, the correction is first internal: obtain a functioning configured browser provider, rerun the same journey and URL, and publish the new timestamp and coverage. The prior artifact should remain available so readers can see why the evidence changed. If Expedia publishes new protocol files or changes bot rules, the next report should identify the changed response rather than silently overwrite history. Any interactive rerun must retain this company-specific boundary: Stop before signing in, entering traveler details, accepting a non-refundable rate, submitting payment, or confirming a reservation.

A practical improvement sequence

1. Make canonical discovery cheap. Keep robots directives, sitemap locations, agent guidance, and machine-readable descriptions current and mutually consistent.
2. Bind claims to operational truth. Product, pricing, availability, policy, API, and protocol statements should come from authoritative systems with timestamps and stable identifiers.
3. Expose structured constraints. Agents need dimensions, eligibility, dates, totals, cancellation terms, fulfillment options, scopes, and consequence metadata—not just persuasive copy.
4. Design the review boundary. Before any purchase, reservation, signature, integration, or payment, show the exact subject, amount, terms, identity, and resulting effect.
5. Support recovery. Offer idempotency, back navigation, cancellation, correction, and a human escalation path. The happy path is not enough.
6. Verify the same task after changes. Improvements should be judged against the fixed journey above with the same methodology and a new production timestamp.
7. Resolve this target’s dominant uncertainty. For Expedia, publish or expose the authoritative fields needed to select a hotel using dates, occupancy, total price, location, cancellation, and payment constraints. Then test the exact task—Find a refundable hotel in downtown Chicago for two adults over a two-night weekend, compare two options using total price and guest evidence, verify cancellation and payment timing, then prepare the preferred room for booking review.—without crossing the safe stopping point.

For Expedia, the most commercially meaningful next test is not another homepage scan. It is a controlled browser run that attempts this exact task: Find a refundable hotel in downtown Chicago for two adults over a two-night weekend, compare two options using total price and guest evidence, verify cancellation and payment timing, then prepare the preferred room for booking review. The run should record every decision-relevant field and stop at: Stop before signing in, entering traveler details, accepting a non-refundable rate, submitting payment, or confirming a reservation. The resulting report should distinguish target facts, agent inferences, missing data, changed data, and user choices. That creates a useful product artifact for Expedia and a credible benchmark for readers.

Patterns this profile contributes to the index

This company illustrates three wider trends. First, public companies are announcing agentic partnerships faster than their public web surfaces are converging on common discovery conventions. A UCP, MCP, AI assistant, marketplace integration, or internal agent can be strategically important without making the conventional homepage easy for arbitrary agents to interpret. Second, discovery is separating from action: product and content data may be portable while checkout, booking, signing, or payment remains governed by proprietary identity and policy systems. Third, safety is becoming a product feature. The most trustworthy journey is not the one that reaches commitment fastest; it is the one that preserves constraints and asks for authority at the right moment. Expedia makes that pattern concrete because expedia group says its hotels.com ai agent spans conversational discovery, shopping, and servicing, and that integrations with operator and copilot actions are intended to bridge planning and booking.

The report should therefore be read as a diagnostic entry point. Expedia’s evidence at 41% coverage is useful for locating observable strengths and gaps under one frozen model. It is not a certification, accessibility determination, security audit, legal opinion, search-placement guarantee, or claim that every agent can use the site. Comparisons are responsible only when methodology version, task, timestamp, target, and coverage are shown together.

Sources and reproducibility

• Expedia Group Expands B2B Platform and Launches GenAI Partnerships — Expedia Group Investor Relations, checked August 27, 2026.
• Expedia Group News and Events — Expedia Group Investor Relations, checked August 27, 2026.

The raw scanner output is stored with this article at `raw/expedia.json`. It contains the complete check list, evidence messages, phase results, score metadata, timestamps, and the browser limitation. The official sources above provide company context; they did not replace scanner observations. This separation lets a reader reproduce public HTTP evidence, challenge a finding, and understand which conclusions are measured versus editorial.

Bottom line: Expedia belongs in the Agentic Customer Journey Index because travel search is stateful and price-sensitive. dates, taxes, room type, cancellation deadline, occupancy, and availability can change the correct answer from one request to the next. This run found enough public evidence to identify concrete strengths and correction opportunities, but the incomplete browser coverage prevents a final judgment about task completion. The honest next move is a same-task rerun focused on select a hotel using dates, occupancy, total price, location, cancellation, and payment constraints., followed by a reviewed report that stops here: Stop before signing in, entering traveler details, accepting a non-refundable rate, submitting payment, or confirming a reservation.