# An MCP server is not a way in for AI agents 85 of 133 products with an MCP server still kept our agent out at the door. What an agent needs behind the server, and how to give it. Source: https://agentdrives.com/guides/an-mcp-server-is-not-a-way-in?via=md · Updated 2026-10-24 · Topic: MCP Most products we drove have an MCP server. At most of them our agent still couldn't get in, because the account and the key behind the server needed a person. ## The numbers From the drives of 151 products, 1–24 Oct 2026 (https://agentdrives.com/data/facts?via=md): - Products with an MCP server: 133 of 151 - Of those, products that kept our agent out at the door: 85 of 133 - Of those, products our agent got into on its own: 48 of 133 ## What we found 133 of 151 products we drove have an MCP server, 127 of them their own. Of those, 85 of 133 kept our agent out at the door. It got into 48 on its own. The server answers once the agent has an account and a key. Getting those is where it stopped: a bot check on the sign-up form, a key that only a dashboard hands out, or an OAuth sign-in that waits for a person in a browser. ## What an agent needs behind the server 1. **An account it can open.** A sign-up an agent can finish, or an API call that opens one. [Let agents sign up and get a key](https://agentdrives.com/guides/let-agents-sign-up-and-get-a-key?via=md). 2. **A sign-in it can finish.** The MCP spec's sign-in is OAuth. [1] Let the agent register its client and finish the flow without a person clicking through it, or use a device code. [MCP sign-in agents can finish](https://agentdrives.com/guides/mcp-sign-in-agents-can-finish?via=md). 3. **A bot check that knows signed agents.** An agent that signs its requests can be let through where the sign-up page has a check. [Let signed agents past your bot check](https://agentdrives.com/guides/let-signed-agents-past-your-bot-check?via=md). 4. **Docs that say how.** Name the server's address, how to sign in and which tools need which plan, on one page an agent can read. ## Check it yourself 1. **Start from nothing.** A new email address, no account and no key. Add your MCP server to an agent and ask it to do one real task. 2. **Count the times a person had to step in.** Each one is where an agent on its own stops. The first one is the one to fix. ## After the fix Fixed something? Tell us in your account and our agent drives it again for free, up to twice a year. ## Questions **We have an MCP server. Why do agents still not use us?** Because the server is behind an account. If opening the account or getting the key needs a person, an agent working on its own never reaches the server. ## Sources 1. [MCP authorization](https://modelcontextprotocol.io/specification/2026-07-28/basic/authorization) ## More guides - [Make your SaaS agent-ready: the whole path, step by step](https://agentdrives.com/guides/make-your-saas-agent-ready.md?via=md): Docs, sign-up, the key, MCP, paying and leaving: what an agent needs at each step, with the fix for each. - [How AI agents pay for software: x402, MPP and checkouts](https://agentdrives.com/guides/how-ai-agents-pay-for-software.md?via=md): Card checkouts, x402 and MPP: what an agent can pay with today, and what most products ask instead. - [llms.txt, OpenAPI and MCP alone don't let AI agents in](https://agentdrives.com/guides/agent-ready-files-dont-open-the-door.md?via=md): Most products publish llms.txt, OpenAPI or MCP. Most still keep agents out. What the files do, and what they can't. - [Test your product with an AI agent: the nine checkpoints](https://agentdrives.com/guides/test-your-product-with-an-ai-agent.md?via=md): The nine checkpoints of a drive, with the commands to try each one from a terminal. - [Let signed AI agents past your bot check](https://agentdrives.com/guides/let-signed-agents-past-your-bot-check.md?via=md): The setting for Cloudflare, Vercel, Akamai, DataDome and HUMAN, and what to do about a check on the form. - [Let AI agents sign up and get an API key](https://agentdrives.com/guides/let-agents-sign-up-and-get-a-key.md?via=md): An API call that signs up and returns a limited key, and a claim step for the person. - [Let AI agents sign up without a phone number](https://agentdrives.com/guides/sign-up-without-a-phone-number.md?via=md): No phone on the first step: an email code, a person who approves the agent, limits until they do. - [Let AI agents sign up with their own email address](https://agentdrives.com/guides/accept-any-email-address.md?via=md): Take any address that receives mail, confirm it with a mailed code, and limit new accounts instead of filtering domains. - [MCP sign-in an AI agent can finish: OAuth and CIMD](https://agentdrives.com/guides/mcp-sign-in-agents-can-finish.md?via=md): OAuth metadata, CIMD or DCR, and a way to approve without a browser on the agent's side. - [Let AI agents start without a credit card](https://agentdrives.com/guides/card-free-starts.md?via=md): A free plan or a trial without a card, an API key that works on it, and limits instead of a card. - [Let AI agents pay you per call: x402 and MPP](https://agentdrives.com/guides/let-agents-pay-per-call.md?via=md): x402 or MPP on a paid endpoint, your prices where agents read them, and plans an agent can buy by API or MCP. - [Docs AI agents can read: llms.txt, Markdown, OpenAPI](https://agentdrives.com/guides/docs-agents-can-read.md?via=md): An llms.txt, Markdown twins of your pages, an OpenAPI spec and an MCP server card. - [Let AI agents delete the account they opened](https://agentdrives.com/guides/let-agents-delete-their-account.md?via=md): A delete call for the account, a clear answer when it's done, and the same in the settings for people. Every guide: https://agentdrives.com/guides.md?via=md