GitHub vs Shortcut for AI agents
As of 13 Oct 2026, both reach L4 · Runs on its own, and our agent got as far with each: with GitHub it went through every checkpoint, with Shortcut it got in and met its first wall at delete (blocked).
- Find: Docs for agents: llms.txt, an OpenAPI and an MCP server; a docs page for each core task.
- Access: No key needed, sign-up in a browser.
- Use: 89% of the work.
- Pay: Payment not tried: robots.txt keeps our agent off the payment page for now.
- Leave: Leaves on its own: Nothing to cancel, made nothing to delete.
Through every checkpoint. Next: pay without a person
Runs on its own once it holds an existing identity: L4 · Runs on its own. Sign-up itself never got past a block on the signup page, so every later call ran on an existing account approved once through device-flow login. From there the work ran headless: REST, GraphQL, the gh CLI and the official MCP server created repos, commits, pull requests, reviews, issues and Actions runs, repeated across the core work. Codespaces refused our datacenter network, and the cloud coding agent needs a paid plan, so neither ran. Nothing to cancel on the free plan; account deletion is documented as web-only, so our agent revoked its grant and left the identity in place.
Driven 13 Oct 2026 · The drive and its evidence- Find: Docs for agents: llms.txt, an OpenAPI and an MCP server.
- Access: Sign-up in a browser.
- Use: 88% of the work.
- Pay: Card checkout.
- Leave: Nothing to cancel: Can't delete its account.
Got in; first wall at delete (blocked). Next: pay without a person
Gets in on its own: L4 · Runs on its own. Sign-up is a web form with a mailed code; an invisible reCAPTCHA let our agent through. From there, work moved to the API: an accurate OpenAPI spec and an official MCP server with dynamic OAuth registration let our agent create, move and link stories, epics, iterations, objectives and docs headless, once it had a token from the browser. Our agent started no paid plan, so there was nothing to cancel. Delete Account failed silently in the browser: the app's own call rejected it as sole owner of an organization, and the workspace stayed behind, emptied but not removed.
Driven 2 Oct 2026 · The drive and its evidenceThe two summaries: written and checked by our agents from each product's drive. How we write.
Where each one stops.
GitHubThrough every checkpoint
ShortcutGot in; first wall at delete (blocked)
| Checkpoint | GitHub | Shortcut |
|---|---|---|
| Docs | Headless | Headless |
| Sign up | Not needed | In a browser |
| Verify | Not needed | In a browser |
| Key | In a browser | In a browser |
| First call | Headless | Headless |
| First action | Headless | Headless |
| Pay | Not tried | Not tried |
| Cancel | Not needed | Not needed |
| Delete | Blocked | Blocked |
Headless or in a browser.
How our agent passed each checkpoint, and what each product offers an agent.
Checkpoints by route, API, MCP, CLI and SDK
| GitHub | Shortcut | |
|---|---|---|
| Headless (checkpoints) | 3 | 3 |
| In a browser (checkpoints) | 1 | 3 |
| Needs a human (checkpoints) | 0 | 0 |
| Blocked (checkpoints) | 1 | 1 |
| Not tested (checkpoints) | 1 | 1 |
| Work done | 89% of the core | 88% of the core |
| API | Yes | Yes |
| OpenAPI | Yes | Yes |
| MCP server | Yes (official) | Yes (official) |
| CLI | Yes | No |
| SDK | – | No |
| llms.txt | Yes | Yes |
Bot checks, and where a person was needed.
| GitHub | Shortcut | |
|---|---|---|
| Bot check | A challenge on the form stopped one way in (Email and password); it got in another way | reCAPTCHA (script on www.shortcut.com/signup) let it through at sign up |
| Wall type | A challenge on the form | No bot-check wall |
| First wall | None | Got in; first wall at delete (blocked) |
| A person helped | No | No |
A challenge on the form: It asks every visitor to prove they are human. It stops every agent on any network, and a signature doesn't help: a person does this step, or the owner opens it for agents. Where we drive from.
Level and part scores.
| GitHub | Shortcut | |
|---|---|---|
| Level | L4 · Runs on its own | L4 · Runs on its own |
| Holds up | 59 of 100, fair | Not measured |
| Agent-ready setup | 100 of 100, good | 90 of 100, good |
| Standards | MCP spec of 28 Jul 2026 (current) · MCP discovery (current) · OpenAPI 3.0.3 (2 versions behind) | None recorded |
Docs match is measured in an Audit. What the scores mean.
Pay, cancel and delete.
| GitHub | Shortcut | |
|---|---|---|
| Pay | Payment not tried | Card checkout |
| Free plan or trial | Free plan | Trial, no card |
| Cancel | Not needed | Not needed |
| Delete the account | Blocked | Blocked |
How each one takes payment
- GitHub: Not tried yet: robots.txt keeps our agent off the payment page for now.
- Shortcut: Card checkout.
GitHub vs Shortcut: the short answers.
Which can an AI agent use, GitHub or Shortcut?
Both reach L4 · Runs on its own, and our agent got as far with each: with GitHub it went through every checkpoint, with Shortcut it got in and met its first wall at delete (blocked). Driven 13 Oct 2026 (GitHub) and 2 Oct 2026 (Shortcut).
Can an AI agent sign up for GitHub and Shortcut on its own?
GitHub: not needed. Shortcut: yes, in a browser.
Do GitHub and Shortcut have an MCP server?
GitHub: yes (official). Shortcut: yes (official).
Can an AI agent delete its GitHub or Shortcut account?
GitHub: blocked. Shortcut: blocked.
The drives and the category.
Put your own shortlist side by side.
A Stack check drives the tools you're choosing between and shows which ones your agents can use. $490 for three tools, ready in 24 hours.