Canva vs Penpot for AI agents
As of 16 Oct 2026, Penpot gets an AI agent further: L3 · Does the work against L1 · Needs a person.
- Find: Some docs for agents: llms.txt, an OpenAPI and an MCP server.
- Access: Can't sign up.
- Use: Work not reached.
- Pay: Payment not reached.
- Leave: Leaving not reached.
Stopped at sign up: needs a human. Next: let an agent sign up on its own
Canva is a design tool with templates, AI image/video generation, and export to many formats. An agent testing it on its own could not even sign up: every Canva page, including sign-up and login, showed a Cloudflare security check that never let the automated browser through. So nothing beyond reading the public developer docs could be done.
Driven 16 Oct 2026 · The drive and its evidence- Find: Docs for agents: llms.txt, an OpenAPI and an MCP server.
- Access: Sign-up by email.
- Use: 57% of the work.
- Pay: Payment not reached.
- Leave: Leaves on its own: Nothing to cancel, deletes its account.
In on its own; 57% of the work done. Next: do 80% of the core work (now 57%)
L3 · Does the work: our agent gets in on its own and makes its first design call. Sign-up needed no CAPTCHA; the verification mail arrived late, after a resend, for reasons unknown. The documented curl path for the first call hit a Cloudflare managed challenge, but our agent found a working RPC endpoint and got through to create a project and file, reading both back. Pricing showed Unlimited and Enterprise plans with a trial button, but checkout stayed hidden after continuing, so paying is unconfirmed. Account deletion worked cleanly, with no plan ever started.
Gets furtherDriven 6 Oct 2026 · The drive and its evidenceThe two summaries: written by our agents from each product's drive. How we write.
Where each one stops.
CanvaStopped at sign up: needs a human
PenpotIn on its own; 57% of the work done
| Checkpoint | Canva | Penpot |
|---|---|---|
| Docs | Headless | Headless |
| Sign up | Needs a human | Headless |
| Verify | Not reached | Headless |
| Key | Not reached | Headless |
| First call | Not reached | Headless |
| First action | Not reached | Headless |
| Pay | Not reached | In a browser |
| Cancel | Not reached | Not needed |
| Delete | Not reached | Headless |
Headless or in a browser.
How our agent passed each checkpoint, and what each product offers an agent.
Checkpoints by route, API, MCP, CLI and SDK
| Canva | Penpot | |
|---|---|---|
| Headless (checkpoints) | 1 | 7 |
| In a browser (checkpoints) | 0 | 1 |
| Needs a human (checkpoints) | 1 | 0 |
| Blocked (checkpoints) | 0 | 0 |
| Not tested (checkpoints) | 7 | 0 |
| Work done | Not measured | 57% of the core |
| API | Yes | Yes |
| OpenAPI | Yes | Yes |
| MCP server | Yes (official) | Yes (official) |
| CLI | – | No |
| SDK | – | No |
| llms.txt | Yes | Yes |
Bot checks, and where a person was needed.
| Canva | Penpot | |
|---|---|---|
| Bot check | Cloudflare managed challenge (Turnstile interstitial) stopped it at sign up, with a visible challenge | None met |
| Wall type | A check of our network and browser | No bot-check wall |
| First wall | Cloudflare interstitial on Canva sign-up | None |
| A person helped | No | No |
A check of our network and browser: It judged where our agent connects from and its browser, not a person. An agent that works on its own from a data center doesn't get through unless the owner lets signed agents in. How agents in a person's own browser fare isn't measured yet. Where we drive from.
Level and part scores.
| Canva | Penpot | |
|---|---|---|
| Level | L1 · Needs a person | L3 · Does the work |
| Agent-ready setup | 100 of 100, good | 90 of 100, good |
| Standards | MCP client registration (current) · OpenAPI 3.0.0 (2 versions behind) | MCP spec of 25 Nov 2025 (1 version behind) · MCP discovery (behind) · OpenAPI 3.0.0 (2 versions behind) |
| Security | No review in this drive | Reported privately to the owner |
Holds up: not measured in these drives. Docs match is measured in an Audit. What the scores mean.
Pay, cancel and delete.
| Canva | Penpot | |
|---|---|---|
| Pay | Payment not reached | Payment not reached |
| Free plan or trial | None | Free plan |
| Cancel | Not reached | Not needed |
| Delete the account | Not reached | Headless |
How each one takes payment
- Canva: Payment not reached.
- Penpot: Payment not reached.
Canva vs Penpot: the short answers.
Which can an AI agent use, Canva or Penpot?
Penpot gets an AI agent further: L3 · Does the work against L1 · Needs a person. With Canva our agent was stopped at sign up (needs a human); with Penpot it got in on its own and did 57% of the work. Driven 16 Oct 2026 (Canva) and 6 Oct 2026 (Penpot).
Can an AI agent sign up for Canva and Penpot on its own?
Canva: no, needs a human. Penpot: yes, headless.
Do Canva and Penpot have an MCP server?
Canva: yes (official). Penpot: yes (official).
Can an AI agent delete its Canva or Penpot account?
Canva: not reached. Penpot: yes, headless.
The drives and the category.
Put your own shortlist side by side.
A Stack check drives the tools you're choosing between and shows which ones your agents can use. $490 for three tools, ready in 24 hours.