Benchmark · Oct 2026
Who lets agents in
Part one: 64 platforms where we traced the path to an API key by hand. Part two: an automated readiness score for 2,000 companies. 9 of the 64 let an agent reach a key with nobody clicking anything.
Time to key, verified
| # | Platform | Time to key | No-human path | Human gates | Main blocker | Score /10 |
|---|---|---|---|---|---|---|
| 1 | StripePayments | 2 min | YES | Email verificationKYC / business checkMandatory 2FA | Live keys still need KYC; sandbox expires in 7 days | 10 |
| 2 | CloudflareDevtools | 1 min | YES | CAPTCHACard before first callEmail verification | Classic dashboard signup is behind Turnstile and email | 10 |
| 3 | NeonDevtools | 1 min | YES | Email verification | Unclaimed projects expire after 72 hours | 10 |
| 4 | PostHogComms & data | 2 min | YES | Email verification | Signup wizard can't run headless | 10 |
| 5 | WorkOSObservability & auth | 1 min | YES | Production still needs a human claim | 10 | |
| 6 | ElevenLabsAI models | 3 min | no | Email verification | MCP OAuth uses CIMD only, no DCR | 9 |
| 7 | VercelDevtools | 4 min | no | Email verification | MCP OAuth limited to approved clients | 9 |
| 8 | NetlifyDevtools | 1 min | YES | CAPTCHAEmail verification | No scoped tokens; 1-hour claim window | 9 |
| 9 | RailwayDevtools | 3 min | YES | Email verification | Tokens only minted in the dashboard | 9 |
| 10 | LinearSaaS | 4 min | no | Email verification | No CLI login; keys made in web settings | 9 |
| 11 | NotionSaaS | 4 min | no | Email verification | MCP is OAuth-only, still beta | 9 |
| 12 | AirtableSaaS | 3 min | no | Email verification | No official OpenAPI spec or CLI login | 9 |
| 13 | ResendComms & data | 3 min | no | Domain verificationEmail verification | Sending needs DNS domain verification | 9 |
| 14 | AlgoliaComms & data | 5 min | no | Email verification | MCP must be switched on in the dashboard | 9 |
| 15 | ClerkObservability & auth | 2 min | YES | Email verification | No product-management MCP | 9 |
| 16 | ZapierObservability & auth | 4 min | no | Admin approvalEmail verification | Each downstream app needs its own OAuth | 9 |
| 17 | ShopifyCommerce | 3 min | YES | Email verificationManual reviewWaitlist | Agent checkout limited to trusted tier | 9 |
| 18 | Google Gemini APIIndia & cloud | 2 min | no | Card before first callPhone OTP | Cloud MCPs need a hand-made OAuth client | 9 |
| 19 | Mistral AIAI models | 5 min | no | Email verificationPhone OTP | Phone OTP; MCP takes a pasted key | 8 |
| 20 | DeepgramAI models | 4 min | no | Email verification | No hosted MCP; docs MCP returns 401 | 8 |
| 21 | PlaidPayments | 6 min | no | Email verificationKYC / business checkManual reviewTalk to sales | Remote MCP only for production-approved teams | 8 |
| 22 | SupabaseDevtools | 5 min | no | Email verification | No claimable database for a lone agent | 8 |
| 23 | PineconeComms & data | 5 min | no | Email verification | MCP is local-only with a raw key | 8 |
| 24 | MapboxComms & data | 3 min | no | Card before first callEmail verification | No CLI login; tokens copied by hand | 8 |
| 25 | SentryObservability & auth | 5 min | no | CAPTCHAEmail verification | Captcha on signup; 3 confusing token types | 8 |
| 26 | MongoDB AtlasObservability & auth | 7 min | no | Email verification | Remote MCP off by default for existing orgs | 8 |
| 27 | OpenAIAI models | 8 min | no | Card before first callEmail verificationKYC / business checkPhone OTP | Phone OTP and prepaid credit before first call | 7 |
| 28 | AnthropicAI models | 6 min | no | Card before first callEmail verificationPhone OTP | Prepaid credit before first call | 7 |
| 29 | RazorpayPayments | 6 min | no | Email verificationKYC / business checkMandatory 2FAManual reviewPhone OTP | Phone OTP; key regeneration needs OTP | 7 |
| 30 | PayPalPayments | 8 min | no | CAPTCHAEmail verificationKYC / business checkPhone OTP | Local MCP needs short-lived raw tokens | 7 |
| 31 | CashfreePayments | 7 min | no | Email verificationKYC / business checkMandatory 2FAManual reviewPhone OTPTalk to sales | OTP on every key generation | 7 |
| 32 | SquarePayments | 5 min | no | Email verificationKYC / business check | Remote MCP is production-only | 7 |
| 33 | GitHubDevtools | 8 min | no | CAPTCHAEmail verificationMandatory 2FA | Captcha, mandatory 2FA, no DCR | 7 |
| 34 | RenderDevtools | 6 min | no | Card before first callEmail verification | Account-wide keys that never expire | 7 |
| 35 | HubSpotSaaS | 6 min | no | Admin approvalEmail verification | No DCR outside prebuilt connectors | 7 |
| 36 | SlackSaaS | 6 min | no | Admin approvalEmail verification | Every agent needs a registered app | 7 |
| 37 | DatadogObservability & auth | 8 min | no | Email verification | Business email and irreversible region choice | 7 |
| 38 | Auth0Observability & auth | 6 min | no | Email verification | No hosted MCP; needs an M2M app | 7 |
| 39 | LaunchDarklyObservability & auth | 6 min | no | Email verification | llms.txt points at a stale preview host | 7 |
| 40 | SetuIndia & cloud | 15 min | no | Email verificationKYC / business checkManual reviewTalk to sales | No developer MCP; KYC for production | 7 |
| 41 | Microsoft AzureIndia & cloud | 30 min | no | Card before first callEmail verificationMandatory 2FAPhone OTP | Card and phone at signup; no llms.txt | 7 |
| 42 | GroqAI models | 3 min | no | Email verification | No agent-native auth; local MCP only | 6 |
| 43 | AtlassianSaaS | 8 min | no | Email verificationMandatory 2FA | No llms.txt; MCP token auth needs admin | 6 |
| 44 | AsanaSaaS | 5 min | no | Admin approvalEmail verification | Users must register their own OAuth client | 6 |
| 45 | TwilioComms & data | 10 min | no | Card before first callEmail verificationMandatory 2FAManual reviewPhone OTP | Phone OTP; no hosted product MCP; carrier rules | 6 |
| 46 | SpotifyCommerce | 10 min | no | CAPTCHACard before first callEmail verificationManual review | Premium required for dev mode; no DCR | 6 |
| 47 | Zerodha Kite ConnectIndia & cloud | days | no | Card before first callEmail verificationKYC / business checkMandatory 2FA | Broker KYC; token expires daily | 6 |
| 48 | ZohoIndia & cloud | 10 min | no | Email verificationMandatory 2FAPhone OTP | No CLI login; region-specific hosts | 6 |
| 49 | Together AIAI models | 7 min | no | Card before first call | $15 card purchase before first call | 5 |
| 50 | Sarvam AIAI models | 5 min | no | CAPTCHAEmail verification | No CLI login, OAuth MCP or key API | 5 |
| 51 | SalesforceSaaS | 15 min | no | Admin approvalEmail verificationMandatory 2FA | MCP needs a hand-built app and sales contact | 5 |
| 52 | PostmarkComms & data | 5 min | no | Domain verificationEmail verificationManual review | Manual account review before sending | 5 |
| 53 | Booking.comCommerce | 2 min | no | KYC / business checkManual reviewPartner applicationTalk to sales | Affiliate contract and account manager | 5 |
| 54 | ZomatoCommerce | 3 min | no | Manual reviewPartner applicationPhone OTP | No third-party apps; robots.txt blocks agents | 5 |
| 55 | FreshworksIndia & cloud | 10 min | no | CAPTCHAEmail verification | MCP uses a full-power personal key | 5 |
| 56 | AdyenPayments | 30 min | no | Email verificationKYC / business checkMandatory 2FAManual reviewTalk to sales | Sales-led test account; no remote MCP | 4 |
| 57 | AmazonCommerce | days | no | CAPTCHAEmail verificationKYC / business checkMandatory 2FAManual reviewPhone OTP | Video ID check; robots.txt blocks AI agents | 4 |
| 58 | UberCommerce | 5 min | no | Manual reviewPartner applicationPhone OTPTalk to sales | No self-serve ride API; no llms.txt | 4 |
| 59 | SendGridComms & data | 20 min | no | Card before first callDomain verificationEmail verificationMandatory 2FAManual reviewPhone OTP | Mandatory 2FA; no product MCP | 3 |
| 60 | FlipkartCommerce | days | no | Email verificationKYC / business checkManual reviewPartner applicationPhone OTP | Seller KYC; no agent surface | 3 |
| 61 | PhonePeIndia & cloud | days | no | KYC / business checkManual reviewPhone OTP | No MCP or machine-readable docs | 3 |
| 62 | MSG91India & cloud | 15 min | no | Card before first callEmail verificationManual reviewPhone OTP | Phone OTP just to view a key | 3 |
| 63 | WisePayments | days | no | Email verificationKYC / business checkMandatory 2FAManual reviewPhone OTPTalk to sales | No self-serve sandbox; no MCP | 2 |
| 64 | AirbnbCommerce | n/a | no | KYC / business checkManual reviewPartner applicationTalk to sales | Invite-only API; no MCP | 1 |
Paths read from official docs on 11 Oct 2026, with no accounts created. Time to key assumes an agent does every step and a human clears only the gates.
Readiness index
1,846 reachable companies, scored on 20 checks across access, context, interfaces, onboarding and trust. Average 41/100.
| # | Domain | Group | Score | Level | llms.txt | MCP | OAuth self-reg | Bot wall |
|---|---|---|---|---|---|---|---|---|
| 1 | turso.tech | Devtools & infra | 100 | L4 | ✓ | ✓ | ✓ | · |
| 2 | amplitude.com | Devtools & infra | 100 | L4 | ✓ | ✓ | ✓ | · |
| 3 | postman.com | Devtools & infra | 100 | L4 | ✓ | ✓ | ✓ | · |
| 4 | bird.com | Comms & SaaS | 100 | L4 | ✓ | ✓ | ✓ | · |
| 5 | workos.com | Devtools & infra | 98 | L4 | ✓ | ✓ | ✓ | · |
| 6 | telnyx.com | Comms & SaaS | 98 | L4 | ✓ | ✓ | ✓ | · |
| 7 | clerk.com | Devtools & infra | 97 | L4 | ✓ | ✓ | ✓ | · |
| 8 | resend.com | Comms & SaaS | 97 | L4 | ✓ | ✓ | ✓ | · |
| 9 | browser-use.com | AI & ML | 96 | L4 | ✓ | ✓ | ✓ | · |
| 10 | supabase.com | Devtools & infra | 96 | L4 | ✓ | ✓ | ✓ | · |
| 11 | upstash.com | Devtools & infra | 96 | L4 | ✓ | ✓ | ✓ | · |
| 12 | rootly.com | Devtools & infra | 96 | L4 | ✓ | ✓ | ✓ | · |
| 13 | tavily.com | AI & ML | 95 | L4 | ✓ | ✓ | ✓ | · |
| 14 | railway.app | Devtools & infra | 95 | L4 | ✓ | ✓ | ✓ | · |
| 15 | checklyhq.com | Devtools & infra | 95 | L4 | ✓ | ✓ | ✓ | · |
| 16 | razorpay.com | Payments & fintech | 95 | L4 | ✓ | ✓ | ✓ | · |
| 17 | monday.com | Devtools & infra | 95 | L4 | ✓ | ✓ | ✓ | · |
| 18 | exa.ai | AI & ML | 94 | L4 | ✓ | ✓ | ✓ | · |
| 19 | mem0.ai | AI & ML | 94 | L4 | ✓ | ✓ | ✓ | · |
| 20 | fal.ai | AI & ML | 94 | L4 | ✓ | ✓ | ✓ | · |
| 21 | neon.tech | Devtools & infra | 94 | L4 | ✓ | ✓ | ✓ | · |
| 22 | ngrok.com | Devtools & infra | 94 | L4 | ✓ | ✓ | · | · |
| 23 | alchemy.com | Payments & fintech | 94 | L4 | ✓ | ✓ | ✓ | · |
| 24 | heygen.com | AI & ML | 93 | L4 | ✓ | ✓ | ✓ | · |
| 25 | bland.ai | Comms & SaaS | 93 | L4 | ✓ | ✓ | ✓ | · |
| 26 | bland.com | YC startups | 93 | L4 | ✓ | ✓ | ✓ | · |
| 27 | openrouter.ai | AI & ML | 92 | L4 | ✓ | ✓ | ✓ | · |
| 28 | firecrawl.dev | AI & ML | 92 | L4 | ✓ | ✓ | ✓ | · |
| 29 | cloudflare.com | Devtools & infra | 92 | L4 | ✓ | ✓ | ✓ | · |
| 30 | netlify.com | Devtools & infra | 92 | L4 | ✓ | ✓ | ✓ | · |
| 31 | gitbook.com | Devtools & infra | 92 | L4 | ✓ | ✓ | ✓ | · |
| 32 | attio.com | Comms & SaaS | 92 | L4 | ✓ | ✓ | ✓ | · |
| 33 | notion.com | API-first (APIs.guru) | 92 | L4 | ✓ | ✓ | ✓ | · |
| 34 | crewai.com | AI & ML | 91 | L4 | ✓ | ✓ | · | · |
| 35 | render.com | Devtools & infra | 91 | L4 | ✓ | ✓ | · | · |
| 36 | digitalocean.com | Devtools & infra | 91 | L4 | ✓ | ✓ | ✓ | · |
| 37 | prisma.io | Devtools & infra | 91 | L4 | ✓ | ✓ | ✓ | · |
| 38 | close.com | Comms & SaaS | 91 | L4 | ✓ | ✓ | ✓ | · |
| 39 | apollo.io | Comms & SaaS | 91 | L4 | ✓ | ✓ | ✓ | · |
| 40 | appwrite.io | API-first (APIs.guru) | 91 | L4 | ✓ | ✓ | · | · |
| 41 | vercel.com | Devtools & infra | 90 | L4 | ✓ | ✓ | ✓ | · |
| 42 | posthog.com | Devtools & infra | 90 | L4 | ✓ | ✓ | ✓ | · |
| 43 | padlet.com | YC startups | 90 | L4 | ✓ | ✓ | ✓ | · |
| 44 | novita.ai | AI & ML | 89 | L4 | ✓ | ✓ | · | · |
| 45 | airbyte.com | Devtools & infra | 89 | L4 | ✓ | ✓ | ✓ | · |
| 46 | loops.so | Comms & SaaS | 89 | L4 | ✓ | ✓ | · | · |
| 47 | lusha.com | Comms & SaaS | 89 | L4 | ✓ | ✓ | ✓ | · |
| 48 | elevenlabs.io | AI & ML | 88 | L4 | ✓ | ✓ | · | · |
| 49 | cartesia.ai | AI & ML | 88 | L4 | ✓ | ✓ | ✓ | · |
| 50 | braintrust.dev | AI & ML | 88 | L4 | ✓ | ✓ | ✓ | · |
| 51 | v0.dev | AI & ML | 88 | L4 | ✓ | ✓ | ✓ | · |
| 52 | mux.com | Devtools & infra | 88 | L4 | ✓ | ✓ | ✓ | · |
| 53 | novu.co | Comms & SaaS | 88 | L4 | ✓ | ✓ | ✓ | · |
| 54 | ramp.com | Payments & fintech | 87 | L4 | ✓ | ✓ | ✓ | · |
| 55 | import.io | API-first (APIs.guru) | 87 | L4 | ✓ | ✓ | ✓ | · |
| 56 | hygraph.com | Devtools & infra | 86 | L4 | ✓ | ✓ | ✓ | · |
| 57 | mixpanel.com | Devtools & infra | 85 | L4 | ✓ | ✓ | ✓ | · |
| 58 | grafana.com | Devtools & infra | 85 | L4 | ✓ | ✓ | ✓ | · |
| 59 | retool.com | Devtools & infra | 85 | L4 | ✓ | ✓ | ✓ | · |
| 60 | kraken.com | Payments & fintech | 85 | L4 | ✓ | ✓ | ✓ | · |
| 61 | vanta.com | Data, security & logistics | 85 | L4 | ✓ | ✓ | ✓ | · |
| 62 | elmah.io | API-first (APIs.guru) | 85 | L4 | ✓ | ✓ | · | · |
| 63 | flat.io | API-first (APIs.guru) | 85 | L4 | ✓ | ✓ | ✓ | · |
| 64 | pinecone.io | Devtools & infra | 84 | L4 | ✓ | ✓ | · | · |
| 65 | tally.so | Payments & fintech | 84 | L4 | ✓ | ✓ | ✓ | · |
| 66 | messagebird.com | Comms & SaaS | 84 | L4 | ✓ | · | ✓ | · |
| 67 | synthflow.ai | Comms & SaaS | 84 | L4 | ✓ | ✓ | · | · |
| 68 | e2b.dev | AI & ML | 83 | L4 | ✓ | ✓ | · | · |
| 69 | growthbook.io | Devtools & infra | 83 | L4 | ✓ | ✓ | ✓ | · |
| 70 | buildkite.com | Devtools & infra | 83 | L4 | ✓ | ✓ | ✓ | · |
| 71 | prismic.io | Devtools & infra | 83 | L4 | ✓ | ✓ | ✓ | · |
| 72 | plain.com | Comms & SaaS | 83 | L4 | ✓ | ✓ | ✓ | · |
| 73 | brightdata.com | Data, security & logistics | 83 | L4 | ✓ | ✓ | ✓ | · |
| 74 | mapbox.com | Data, security & logistics | 83 | L4 | ✓ | ✓ | ✓ | · |
| 75 | fathom.ai | YC startups | 83 | L4 | ✓ | ✓ | ✓ | · |
| 76 | roboflow.com | YC startups | 83 | L4 | ✓ | ✓ | ✓ | · |
| 77 | tavus.io | YC startups | 83 | L4 | ✓ | ✓ | ✓ | · |
| 78 | expo.dev | YC startups | 83 | L4 | ✓ | ✓ | ✓ | · |
| 79 | lambdatest.com | API-first (APIs.guru) | 83 | L4 | ✓ | ✓ | · | · |
| 80 | browserbase.com | AI & ML | 82 | L4 | ✓ | ✓ | · | · |
| 81 | descope.com | Devtools & infra | 82 | L4 | ✓ | ✓ | ✓ | · |
| 82 | webflow.com | Devtools & infra | 82 | L4 | ✓ | ✓ | ✓ | · |
| 83 | customer.io | Comms & SaaS | 82 | L4 | ✓ | ✓ | ✓ | · |
| 84 | knock.app | Comms & SaaS | 82 | L4 | ✓ | ✓ | ✓ | · |
| 85 | builtwith.com | Data, security & logistics | 82 | L4 | ✓ | ✓ | · | · |
| 86 | suger.io | YC startups | 82 | L4 | ✓ | ✓ | ✓ | · |
| 87 | apify.com | Data, security & logistics | 81 | L4 | ✓ | · | ✓ | · |
| 88 | bitmovin.com | YC startups | 81 | L4 | ✓ | ✓ | ✓ | · |
| 89 | enode.io | API-first (APIs.guru) | 81 | L4 | ✓ | ✓ | ✓ | · |
| 90 | jumpseller.com | API-first (APIs.guru) | 81 | L4 | ✓ | ✓ | · | · |
| 91 | motaword.com | API-first (APIs.guru) | 81 | L4 | ✓ | ✓ | ✓ | · |
| 92 | pdfgeneratorapi.com | API-first (APIs.guru) | 81 | L4 | ✓ | ✓ | · | · |
| 93 | resemble.ai | AI & ML | 80 | L4 | ✓ | ✓ | · | · |
| 94 | stripe.com | Payments & fintech | 80 | L4 | ✓ | ✓ | ✓ | · |
| 95 | alpaca.markets | Payments & fintech | 80 | L4 | ✓ | ✓ | · | · |
| 96 | retellai.com | Comms & SaaS | 80 | L4 | ✓ | ✓ | · | · |
| 97 | inevent.com | YC startups | 80 | L4 | ✓ | ✓ | ✓ | · |
| 98 | conveo.ai | YC startups | 80 | L4 | ✓ | ✓ | ✓ | · |
| 99 | gumloop.com | YC startups | 80 | L4 | ✓ | ✓ | ✓ | · |
| 100 | openindex.ai | API-first (APIs.guru) | 80 | L4 | ✓ | ✓ | ✓ | · |
Showing 100 of 1846Show 200 more