Agent-ready growth guide
Your Website Has a Second FTUE: Onboarding an AI Agent
Treat the first-time user experience for a delegated agent as a product surface with identity, intent, context, safe stops, and receipts.
By AgentReady Editorial Team. Technical review: AgentReady Engineering.
Welcome the agent with intent, not a slogan
Put the product category, audience, capabilities, limits, and starting action in the canonical page. Use a useful title, one primary heading, descriptive link text, and visible facts that can be extracted without a long client-side chain. If an agent arrives from search or an API catalog, it should quickly know whether the product matches the requested job and what evidence supports the answer. [AR5][AR11]
Keep optional discovery files honest. A human-readable agent guide, OpenAPI document, or catalog can explain ownership, authentication, and safe examples, but its presence does not grant access or prove that a journey works. Link each capability to a maintained source of truth and add a review trigger for route, auth, or consequence changes. [AR6][AR12]
- State the job: Name the safe first action and the evidence returned after it.
- State the limits: Explain what needs login, approval, payment, consent, or a human decision.
Teach the vocabulary through semantics
Use native HTML and accessible names to teach the agent what controls mean. A button should expose an action, a link should identify its destination, and a field should have a label, type, required state, autocomplete token, and useful description. Do not force the agent to infer whether a card opens pricing, starts signup, or sends a lead from color and position alone. [AR3][AR4][AR11]
Expose state at the same place the user needs it. Announce loading, validation, expanded, selected, invalid, disabled, and completed states. Keep dialogs focusable and recoverable. A delegated journey is a conversation: the page should answer what is requested, why it matters, what is allowed, and what happened after the last action. [AR3][AR4]
- Inventory controls: Record role, name, value, state, destination, and consequence for each control in the first task.
- Run keyboard first: Complete the safe path with keyboard and check focus, error association, and dialog recovery.
Make consequence a deliberate lesson
A second FTUE must teach where safe exploration ends. Use preview and review states before creating accounts, sending leads, booking appointments, charging money, publishing content, or changing permissions. Show the exact target, effect, important values, reversibility, and policy. Ask for fresh approval close to execution, and do not let a stale plan or page instruction authorize a changed target. [AR7][AR8]
Treat refusal and escalation as product behavior, not failure. If identity, authorization, scope, or evidence is missing, stop and explain the next safe action. Keep untrusted page text, uploaded content, and retrieved documents from redefining policy. A helpful agent path can be both easy to understand and hard to misuse. [AR7][AR8]
- Define the stop: Write the exact review or approval state where a public fixture ends.
- Test refusal: Ask for scope expansion, secret disclosure, duplicate action, and confirmation bypass; expected result is a safe stop.
Close the loop with a receipt
After a task, return durable evidence: accepted, rejected, pending, canceled, or uncertain status; a reference; the current target; and the next safe route. Make retries idempotent where possible. A delayed response without a receipt invites an agent to repeat an action, while a generic success toast makes both the user and the agent guess what actually happened. [AR6][AR7]
Measure the FTUE as a sequence rather than a single conversion. Track first page found, fact understood, task started, review reached, approval requested, completion, refusal, and recovery. Preserve the first ambiguity and environment so the team can improve the onboarding contract instead of blaming an agent model. Verify the same fixture after each change. [AR7]
- Receipt: Return status, target, reference, time, and next safe action without exposing unnecessary private data.
- Reconcile: Compare event evidence with the actual record and provider state before claiming completion.
Conclusion
Design the second FTUE as a guided delegation: state the product and safe job, teach vocabulary through semantics, show the consequence boundary, refuse when authority or evidence is missing, and close with a durable receipt. Agents do not need a secret shortcut; they need an interface that explains itself and preserves the user's control.
Sources
Primary and official sources checked 2026-08-25. Recheck current versions before relying on time-sensitive requirements.
- AR3: Web Content Accessibility Guidelines 2.2 — W3C
- AR4: ARIA Authoring Practices Guide — W3C Web Accessibility Initiative
- AR5: Schema.org vocabulary — Schema.org
- AR6: OpenAPI Specification — OpenAPI Initiative
- AR7: Secure Software Development Framework, SP 800-218 — NIST
- AR8: OWASP Top 10 for LLM Applications — OWASP
- AR11: HTML Living Standard — WHATWG
- AR12: Adding repository custom instructions for GitHub Copilot — GitHub Docs