NewAgent-ready skill for Claude Code, Cursor and Codex →
AgentsReady
Guides · As of

How to make your SaaS sign-up work for AI agents

A SaaS sign-up is agent-ready when an AI agent acting for a person can get from your homepage to a working account with the person stepping in only to approve: it finds a sign-up link, reads public pricing, opens the form without a bot challenge, fills fields it can identify, and gets through verification with a code or link the person relays, not a CAPTCHA. A free plan or trial with no card up front lets the agent show the product works before anyone pays.

From our data: As of 3 Nov 2026, 143 of the 214 software vendors in our rankings linked a sign-up page from the homepage, and for 24 of them that page didn't open for an AI user-agent. 165 linked a pricing page. In our hand-checked deep dives, 9 of 64 developer platforms let an agent reach a working API key with no human step.

What the agent needs, in order

  1. Public pricing page

    Publish a pricing page with real numbers in the HTML. "Contact us" pricing is a dead end for an agent.

  2. A self-serve sign-up link

    Link a sign-up page from the homepage. Agents can't book a demo for a user.

  3. Sign-up page opens for agents

    Don't block AI user-agents from the sign-up page. Rate-limit accounts instead of hiding the form.

  4. A free plan or trial

    Offer a free plan or trial so an agent can show a user the product works before anyone pays.

  5. No card needed to start

    Let people start without a card, and say "no credit card required" on the page.

  6. SoftwareApplication data

    Add SoftwareApplication JSON-LD with applicationCategory and an Offer for each plan.

The gates that stop agents

  1. CAPTCHAs and bot challenges

    An agent can't solve them, and shouldn't. Rate-limit by IP and email domain, and score risk after sign-up instead of before the form loads.

  2. "Book a demo" as the only path

    An agent can fill a demo form, but nobody gets an account. Keep a self-serve path even if sales-led is your main motion.

  3. Card before first use

    A card form is the point where the agent has to hand over to the person. Put it after the trial, not before.

  4. Phone verification

    SMS codes need the person's phone. If you must verify, prefer email, which the person can forward or approve from the same device.

Verification an agent can hand over

  1. Email codes over links

    A six-digit code is easy for a person to read back to their agent. A magic link opens in the person's browser, not the agent's.

  2. Sign in with Google or Microsoft

    OAuth sign-in lets the person approve on a consent screen they trust while the agent waits.

  3. auth.md

    An open protocol WorkOS published on 21 May 2026: a markdown file at /auth.md, plus your /.well-known/oauth-protected-resource metadata, that tells agents how to register. It supports agent-verified registration (a trusted agent provider signs an assertion about the user) and user-claimed registration (the person gives the agent a six-digit code).

A sign-up form agents can fill

<form action="/signup" method="post">
  <label for="name">Full name</label>
  <input id="name" name="name" autocomplete="name" required>

  <label for="email">Work email</label>
  <input id="email" name="email" type="email" autocomplete="email" required>

  <label for="password">Password (12+ characters)</label>
  <input id="password" name="password" type="password" autocomplete="new-password" minlength="12" required>

  <p id="terms">Free plan, no credit card required.</p>
  <button type="submit">Create account</button>
</form>

Vendors whose sign-up page didn't open for an AI agent

24 of the vendors in our rankings, from our scan on 3 Nov 2026.

VendorCategoryWhat we saw
PuzzleRe-check liveaccounting softwareChallenge or error for Claude-User
QuickBooksRe-check liveaccounting softwareChallenge or error for Claude-User
WaveRe-check liveaccounting softwareChallenge or error for Claude-User
XeroRe-check liveaccounting softwareChallenge or error for Claude-User
SmartRecruitersRe-check liveATSChallenge or error for Claude-User
GhostRe-check liveCMSChallenge or error for Claude-User
WebflowRe-check liveCMSChallenge or error for Claude-User
WordPress.comRe-check liveCMSChallenge or error for Claude-User
SalesforceRe-check liveCRMChallenge or error for Claude-User
BoldSignRe-check livee-signature toolChallenge or error for Claude-User
beehiivRe-check liveemail marketing platformChallenge or error for Claude-User
KitRe-check liveemail marketing platformChallenge or error for Claude-User
MailerLiteRe-check liveemail marketing platformChallenge or error for Claude-User
MailgunRe-check liveemail or SMS APIChallenge or error for Claude-User
CrispRe-check livehelp deskChallenge or error for Claude-User
FreshdeskRe-check livehelp deskChallenge or error for Claude-User
IntercomRe-check livehelp deskChallenge or error for Claude-User
PagerDutyRe-check liveobservability toolChallenge or error for Claude-User
SplunkRe-check liveobservability toolChallenge or error for Claude-User
RazorpayRe-check livepayments platformChallenge or error for Claude-User
AsanaRe-check liveproject management toolChallenge or error for Claude-User
Acuity SchedulingRe-check livescheduling toolChallenge or error for Claude-User
FramerRe-check livewebsite builderChallenge or error for Claude-User
WeeblyRe-check livewebsite builderChallenge or error for Claude-User

Check it yourself

The first command opens your sign-up page as an AI agent: you want 200. The second checks your pricing page has real numbers in the HTML. Then run the free check with the Sign up job, or ask a real agent to create a test account.

curl -s -o /dev/null -w "%{http_code}\n" -A "Mozilla/5.0 (compatible; Claude-User/1.0)" https://example.com/signup
curl -s https://example.com/pricing | grep -oE '[$€£][0-9]+' | head -5
Run the free check on your siteGet the full checklist

Questions

Won't letting agents sign up bring in spam accounts?

Bots that spam sign-ups don't announce themselves as Claude-User. Blocking AI user-agents mostly stops real customers' assistants. Rate limits, email verification and post-sign-up risk scoring work on both.

Should I remove my CAPTCHA?

Move it rather than remove it: show it only when risk signals fire, not to every visitor. An always-on CAPTCHA is a hard stop for every agent.

What is auth.md?

An open protocol from WorkOS (May 2026) for agent registration: a markdown file at /auth.md that walks an agent through discovering your OAuth metadata, registering, getting the user's claim code and using the credential. It's new, so treat it as an addition to a normal sign-up, not a replacement.

Can an agent handle email verification?

Only with the person's help, which is fine. A short code the person can read out is the smoothest handover. What fails is verification that has to happen in the agent's own browser session.