Can an AI agent get
your API key?
Most checkers stop at whether agents can read your site. We send one to get a key: it reads your docs, hits every human gate on the way, and you get the exact changes to fix it. Free, no account.
A gate map, not just another score.
See every step from “no account” to a working key, which ones an agent can do alone, and where a person has to step in.
- Time to key, traced step by step
- Every human gate named: email, phone OTP, card, KYC, sales
- A fix pack filled in for your domain, ready to paste
- npm i -g @stripe/cli
- stripe sandbox create --from-git --non-interactive (solves a proof-of-work challenge, no account, test keys saved to CLI profile)
- use the sandbox sk_test key / stripe CLI commands immediately
- optional: within 7 days a human runs `stripe sandbox claim` (browser) to turn it into a real account; then `stripe login` (pairing code) for permanent keys
- Working test key
From a domain to a fix list in a minute.
Read-only checks, a real agent run, and changes you can paste.
Probe like an agent
About 60 requests as Claude-User: bot walls, robots.txt, llms.txt, markdown docs, OpenAPI and a live MCP handshake.
Try to get a key
An agent maps your real pages and follows the public path to a key. It never signs in, and it marks every step that needs a person.
Paste the fixes
Every missing piece as a file or snippet filled in for your domain, with a check command. Or hand the whole pack to your coding agent.
Who lets agents in.
We traced the shortest path from no account to a working credential for 64 platforms. The leaders give agents a sandbox key without an account and let a person claim it later.
| Platform | Time to key | Gates |
|---|---|---|
| Fastest | ||
| CloudflareDevtools | 1 min | No human needed |
| NeonDevtools | 1 min | No human needed |
| WorkOSObservability & auth | 1 min | No human needed |
| StripePayments | 2 min | No human needed |
| PostHogComms & data | 2 min | No human needed |
| NetlifyDevtools | 1 min | No human needed |
| Slowest | ||
| AirbnbCommerce | n/a | Invite-only API; no MCP |
| WisePayments | days | No self-serve sandbox; no MCP |
| MSG91India & cloud | 15 min | Phone OTP just to view a key |
| PhonePeIndia & cloud | days | No MCP or machine-readable docs |
Built in public.
The gate map for 64 platforms, scores for 2,000 companies and the scanner are open. Spotted a gate that changed? Send a pull request with evidence.