# BookStack: L4 · Runs on its own

As of 23 Oct 2026, our agent got into BookStack on its own and did 100% of the core work.

Source: https://agentdrives.com/tools/bookstackapp?via=md · driven 23 Oct 2026 by AgentDrives's agent · 2 drives agree · [Rules of 25 Oct 2026](https://agentdrives.com/method/changelog?via=md#rules-2026-10-25-27) · category Docs and workspace · license CC BY 4.0

BookStack has no hosted sign-up: it is self-hosted, plus a public demo with a shared admin login. On that demo an agent drove every core task end to end through the REST API (books, chapters, pages, edits, moves, exports, ZIP import, search, delete and restore), three times each, all verified. The one browser step is making the API token. Webhooks, revisions, templates, drawings and sort rules are UI-only.

_Written with AI from this drive (https://agentdrives.com/method?via=md#notes)._

L4 · Runs on its own: An agent gets in on its own, does at least 80% of the core work and can stop paying on its own: it cancels any plan it started, or there is nothing to cancel. Whether it can also remove what it made is shown on its own, outside the level.

- Learn: Docs with gaps (No getting-started page)
- Access: No key needed
- Use: 100% of the work
- Pay: Reaches the checkout (Stopped at the €559.01 a year charge)
- Leave: Leaves on its own (Nothing to cancel, deletes its account)
- Ways in: No key needed, 10 of 10 core tasks
- Next: pay without a person
- robots.txt asks crawlers to stay off sign-up and the API. Nothing to fix. It keeps these pages out of search and doesn't stop agents signing up.

## The drive, checkpoint by checkpoint

The drive this page reads, on 23 Oct 2026. A newer drive, on 25 Oct 2026, is in its history.

1. **Docs**: on its own (23 Oct 2026)
2. **Sign up**: not needed (23 Oct 2026)
3. **Verify**: not needed (23 Oct 2026)
4. **Key**: in a browser (23 Oct 2026)
5. **First call**: on its own (23 Oct 2026)
6. **First action**: on its own (23 Oct 2026)
7. **Pay**: reaches the checkout (23 Oct 2026)
8. **Cancel**: not needed (23 Oct 2026)
9. **Delete**: in a browser (23 Oct 2026)

Got in; reaches the checkout in the drive of 23 Oct 2026.

## How an agent gets in

1 of 3 ways in worked without a person.

- **No key needed**, 4 min (drive of 23 Oct 2026): an inbox not needed, a browser needed, a person not needed; core tasks done this way: 10 of 10

The other ways in, as our agent tried them:

- Runs locally, no account: Not tested
- Company single sign-on: Not tried: needs a person's account

Not tested: our drives leave this way out ([how we test](https://agentdrives.com/method?via=md)).

## Two kinds of agent

- An assistant in a browser (like ChatGPT agent or Claude on a computer): Does all of the core work. Payment: reaches the checkout, stopped at the €559.01 a year charge.
- An agent talking to it directly (API, MCP, agent payments): Stops at the API key: the key comes only from a browser page.

## Who gets in

- Agents on a server: Get in on their own.
- Signed agents: The site opens.
- Agents in a person's browser: Needs a person.

Sign-up page checked 25 Oct 2026. Signed agents: the ones Cloudflare knows, ours included.

## What an agent can do

10 of 10 core capabilities done on at least one surface, in the drive of 23 Oct 2026.

| Capability | Result | API | MCP | CLI | UI |
|---|---|---|---|---|---|
| Create a book | Done | Done | Not offered | Not offered | Not tried |
| Create a chapter within a book | Done | Done | Not offered | Not offered | Not tried |
| Create a page | Done | Done | Not offered | Not offered | Not tried |
| Edit a page's content (WYSIWYG or Markdown) | Done | Done | Not offered | Not offered | Not tried |
| Read a page, chapter or book | Done | Done | Not offered | Not offered | Not tried |
| Delete or archive a page, chapter or book | Done | Done | Not offered | Not offered | Not tried |
| Organise content into books, chapters, bookshelves and move items | Done | Done | Not offered | Not offered | Not tried |
| Export a page, chapter or book | Done | Done | Not offered | Not offered | Not tried |
| Import content from a Portable ZIP export | Done | Done | Not offered | Not offered | Not tried |
| Search content across books, chapters and pages | Done | Done | Not offered | Not offered | Not tried |

Other capabilities: 14 of 20 done.

| Capability | Result | API | MCP | CLI | UI |
|---|---|---|---|---|---|
| Insert or edit a diagrams.net drawing in a page | Done | Not offered | Not offered | Not offered | Done |
| Upload a file or link attachment to a page | Done | Done | Not offered | Not offered | Not tried |
| Tag a book, chapter, page or shelf | Done | Done | Not offered | Not offered | Not tried |
| Mark a page as a reusable template | Done | Not offered | Not offered | Not offered | Done |
| Include another page's content via an include tag | Done | Done | Not offered | Not offered | Not tried |
| Get a stable permalink to a page or page section | Done | Not offered | Not offered | Not offered | Done |
| View page revision history and restore an earlier version | Done | Not offered | Not offered | Not offered | Done |
| Create and manage roles with content and system permissions | Done | Done | Not offered | Not offered | Not tried |
| Override content-level permissions on a shelf, book, chapter or page | Done | Done | Not offered | Not offered | Not tried |
| Invite and manage a user account | Blocked | Blocked | Not offered | Not offered | Not tried |
| Configure SSO via LDAP, SAML2 or OIDC with group role-syncing | Blocked | Not offered | Not offered | Not offered | Not tried |
| Enable multi-factor authentication for a user or role | Not tried | Not offered | Not offered | Not offered | Not tried |
| Register an outgoing webhook for content events | Done | Not tried | Not offered | Not offered | Done |
| Restore a deleted item from the recycle bin | Done | Done | Not offered | Not offered | Not tried |
| Define a sort rule for automatic book ordering | Done | Not offered | Not offered | Not offered | Done |
| View the system-wide audit log | Done | Done | Not offered | Not offered | Not tried |
| Switch between light and dark interface themes | Not tried | Not offered | Not offered | Not offered | Not tried |
| Set the instance preferred language/locale | Not tried | Not offered | Not offered | Not offered | Not tried |
| Customise instance branding (name, logo, colours) | Not tried | Not offered | Not offered | Not offered | Not tried |
| Create an API token for a user | Done | Not offered | Not offered | Not offered | Done |

What it can't, and why:

- Create an API token without a browser: Tokens are made only in the profile UI; no API or CLI route
- Create webhooks through the API: POST /api/webhooks answers 405; webhooks are UI-only
- Set a book's sort rule through the API: PUT /api/books/{id} with sort_rule_id returns 200 but ignores it
- Configure SSO (OIDC, SAML2, LDAP): Set in the server's .env file; not reachable without a server
- Use a hosted account of its own: No hosted BookStack: self-hosted only, plus a shared public demo

## BookStack, drive by drive

The same level in both drives.

| Drive | Level | Stopped at | Owner-paid |
|---|---|---|---|
| 25 Oct 2026 | L4 | Delete | no |
| 23 Oct 2026 | L4 | through every checkpoint | no |

Every drive and move as data: https://agentdrives.com/api/tools/bookstackapp/changes.json

## How an agent connects

- **MCP server**: none found · id srf_01m5km2y27czgvsvn2gt4hb2nv
- **API**: yes. REST, per instance at /api; token auth; books, chapters, pages, shelves, attachments, comments, images, imports, exports, search, users, roles, content permissions, recycle bin, audit log. No webhooks or tokens endpoints. · id srf_01m5km2y27q6jvtmy7dgs63rhm
- **OpenAPI**: none found. none; own docs.json format at /api/docs.json
- **CLI**: none found
- **SDK**: none found
- **Agent payments**: none found
- **llms.txt**: none found

## This drive's record

- Stopped by: No other company's check or sign-in
- Fixes found: 7 (3 small, 4 medium)
- Level by drive: L4 on 23 Oct, L4 on 25 Oct
- First driven: 23 Oct 2026
- Evidence hash: `sha256 fd3688838ed543bec69faf0468f9de36c53564ec63fe49102a4b74fd1383a744`
- Licence: CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/)

## Checked 25 Oct 2026

A separate check of bookstackapp.com from outside, without signing up.

- What stood in the way: None
- Sign-up page: Not found
- llms.txt: Not found
- MCP server: None named
- OpenAPI: Not found
- Pay over HTTP 402: Not checked

## Does BookStack have an MCP server, and can an agent connect to it?

No. The drive found no MCP server for BookStack.

A new agent can get in on its own: in the drive of 23 Oct 2026, our agent got its key without signing up, and without a person.

## How does an AI agent get a BookStack API key?

In the drive of 23 Oct 2026, our agent got its BookStack API key in a browser, without a person. API tokens are made only in the profile UI (My Account > Access & Security > API Tokens). The secret is shown once. There is no API or CLI route to create a token, and tokens have no scopes of their own.

## Paying the agent way

Reaches the checkout: stopped at the €559.01 a year charge.

The checkout: Reached the card form and stopped: BookStack Professional Support Plan (£450/year), €559.01 a year; Checkout: Stripe Checkout; An invisible bot check loaded at checkout; Wallets: Apple Pay, Link.

What would let agents pay on their own:
- Accept x402 or MPP on your API: Answer an unpaid call with 402 and a payment challenge, so an agent pays per call or buys credits without an account or a card.
- List your plans on Stripe Projects: Agents buy a plan with `stripe projects add`, paid with a token under a spend cap the owner sets (projects.dev).
Ways to pay checked 23 Oct 2026.

Not audited.

## Behind the level

- Holds up: 80/100
- Agent-ready setup: llms.txt not found, OpenAPI not found, MCP server not found, CLI not found
- Not measured in this drive: Docs match

## The docs

All 50 pages read. Some gaps.

- No getting-started page
- An auth page
- Errors only mentioned in passing
- Code examples on most pages
- Newest page updated 23 Oct 2026
- A page for 9 of 10 core tasks

## Tried as documented

9 of 9 documented ways to do the core work worked when tried.

## How BookStack compares with every product we measured

On the 6 criteria of our standard we measured.

- [DOCS-08 Pages fit one fetch](https://agentdrives.com/standard#docs-08): Ahead of most: 37 of the 68 other products we measured had a lower result, 31 the same.
- [DOCS-10 A path written for agents](https://agentdrives.com/standard#docs-10): Behind most: 53 of the 68 other products we measured had a higher result, 15 the same.
- [DOCS-11 Docs an agent can navigate](https://agentdrives.com/standard#docs-11): Level with most: 43 of the 68 other products we measured had the same result, 1 a lower one and 24 a higher one.
- [IN-11 Every way in works for an agent](https://agentdrives.com/standard#in-11): Ahead of most: 58 of the 72 other products we measured had a lower result, 14 the same.
- [IN-12 The best way in is built for agents](https://agentdrives.com/standard#in-12): Ahead of most: 55 of the 73 other products we measured had a lower result, 18 the same.
- [LEAVE-03 Export before leaving](https://agentdrives.com/standard#leave-03): 31 of the 73 other products we measured had a lower result, 27 the same and 15 a higher one.

## Alternatives an agent can use

Products in Docs and workspace our agent took to L4 or higher, sorted by level, then work done, then time to the first call.

- [Craft](https://agentdrives.com/tools/craft.md?via=md): L4 · Runs on its own, driven 17 Oct 2026

## BookStack in Docs and workspace

1st of 3 Docs and workspace products our agent got into on its own.

None of the 4 products we drove in Docs and workspace is higher; 1 other shares L4. As of 23 Oct 2026.

Products by level: L0 0, L1 1, L2 0, L3 1, L4 2, L5 0.

Also at L4:

- [Craft](https://agentdrives.com/tools/craft.md?via=md): L4 · Runs on its own, driven 17 Oct 2026

All of Docs and workspace, by level: https://agentdrives.com/categories/workspace?via=md

## Where BookStack fits

- Category: [Work and collaboration](https://agentdrives.com/categories/work?via=md); [Docs and workspace](https://agentdrives.com/categories/workspace?via=md)
- Rivals: [Craft](https://agentdrives.com/tools/craft.md?via=md) (L4); [Coda](https://agentdrives.com/tools/coda.md?via=md) (L3); [Notion](https://agentdrives.com/tools/notion.md?via=md) (L1)

## Tips for agent builders

- There is no hosted BookStack: use your own instance, or the public demo at demo.bookstackapp.com (shared admin login on the home page, reset every half hour, user and setting changes refused).
- Create the API token in My Account > Access & Security. The secret is shown once, so capture it on the same page load.
- Auth header: Authorization: Token <id>:<secret>. Send JSON with Content-Type set. List endpoints take count, offset, sort and filter[field:op].
- Validation errors are 422 with a per-field 'validation' object, clear enough to fix and retry.
- POST /api/imports plus POST /api/imports/{id} re-creates a book from a ZIP export without a browser.
- Exports come back as application/octet-stream for every format: read the body, not the content type.
- Unknown body fields are ignored silently (e.g. sort_rule_id on books): read back what you set.
- No Idempotency-Key support: a retried create duplicates.

## As data

- JSON: https://agentdrives.com/api/tools/bookstackapp.json?via=md
- Markdown: https://agentdrives.com/tools/bookstackapp.md?via=md
- Changes: https://agentdrives.com/api/tools/bookstackapp/changes.json
- Stable id: prd_01m57vgtmfkhg6e946h35k97gx (https://agentdrives.com/id/prd_01m57vgtmfkhg6e946h35k97gx)
- MCP: get_tool {"slug":"bookstackapp"}

## For the team behind BookStack

[Watch this product](https://agentdrives.com/watch) · [Claim this listing](https://agentdrives.com/app/products?add=bookstackapp.com&ref=listing) · [Get the data](https://agentdrives.com/data?via=md#plans)

See what stops agents in yours: [Free check](https://agentdrives.com/scan?via=md)