Bufferbuffer.comCan an AI agent use Buffer?
As of 6 Oct 2026, an AI agent can't use Buffer on its own: hCaptcha puzzle on the sign-up form.
Level 1 · Needs a personAgents can't get in on their own.
- Find: Some docs for agents: llms.txt and an MCP server.
- Access: Can't sign up.
- Use: Work not reached.
- Pay: Payment not reached.
- Leave: Leaving not reached.
To reach L2 · Gets in: let an agent sign up on its own.
With an account set up by a person: not measured yet.
What the levels meanDriven 6 Oct 2026Same level in 4 drives in a rowRules of 15 Oct 2026Claim this page
Written and checked by our agents from this drive's record. How we write.
Who gets in
- Agents on a serverStopped by a CAPTCHA on the sign-up form.
- Signed agentsThe sign-up page opens. The CAPTCHA on the form stops them too.
- Agents in a person's browserNot measured yet.
Sign-up page checked 12 Oct 2026. Signed agents: the ones Cloudflare verifies. Where agents come from
What an agent can do in Buffer.
On its own
- Read Buffer's help guides and pricing page without an account
- Look at the shape of Buffer's API (what actions exist) without an account
- Install Buffer's command-line tool and check post formats offline without an account
What it can't, and why
- Create a Buffer accountSign-up shows a picture puzzle only a person can solve
- Get a key to use the API or chat assistantKeys are only made inside the account, which needs the puzzle solved first
- Schedule posts, read stats, manage ideas or commentsNone of these work without an account
1 more
- Buy a plan or cancel one, or delete the accountNo account was ever created to buy or delete
Can an AI agent sign up for Buffer on its own?
No. Sign-up: needs a human. Web-only sign-up at auth.buffer.com; clicking Sign Up shows a visible hCaptcha puzzle. No API/CLI sign-up route.
Does Buffer have an MCP server, and can an agent connect to it?
Yes. Buffer has an official MCP server. The server is hosted and signs an agent in with OAuth.
A new agent can't get in on its own: in the drive of 6 Oct 2026, our agent stopped at sign up (it needs a person). Through the MCP server, 0 of our agent's 1 attempt worked.
What the drive found
API–OpenAPIMCP · officialCLI–SDKllms.txt–Webhooks–SandboxNot reached in this drive: the API key, deleting the account and paying. Every checkpoint, in detail
For the team behind Buffer.
Where agents stop in Buffer today, and the fixes that get them further, highest impact first.
Stops at sign up
The fixes, highest impact first
- Let verified agents sign upStep-by-step guide
- Issue API keys without the web UIStep-by-step guide
- Support CIMD client registrationStep-by-step guide
3 more fixes
- Answer server/discover with supported versions
- Add account delete and billing to API Step-by-step guide
- Document 401 status for auth errors
- Claim it free and reply next to the result.
- A Drive, $49: your private report, with where agents stop, the evidence and the fixes that move your level.
- Fixed something? Order a Drive ($49) any time, or the Monthly drive ($29/month).
Details
Your API, MCP server or CLI is the product? An Audit ($299) also checks every documented route, MCP tool and CLI command against your docs. Compare plans.
Already claimed it? Open it in your dashboard.
Rather not be driven? Block AgentDrivesAgent in robots.txt or write to us. We stop driving it ourselves; this page stays, with its date.
Embed the badge on your site
Behind the level.
Our agent couldn't get into Buffer, so the work, its reliability and the crash test aren't measured. The part scores are what it could judge from the outside.
Part scores · level history
Part scores
Agent-ready setup
- llms.txt: found
- OpenAPI: not found
- MCP server: found
- CLI: found
Not measured in this drive: Holds up, Docs match (part of an Audit).
Level history
- 1 Oct 20263 drivesL1Needs a person
- 6 Oct 2026L1Needs a person
For agents and builders.
The drive as data, every checkpoint and all 51 attempts.
How an agent connects · 4 tips
/api/tools/buffer.json/tools/buffer.mdMCP get_tool {"slug":"buffer"}
- Have a human create the account and an API key at publish.buffer.com/settings/api; then use the CLI (BUFFER_API_KEY) or MCP at https://mcp.buffer.com/mcp with a Bearer key.
- GraphQL introspection works without a key: use `buffer schema describe posts create` and --dry-run to build payloads first.
- Free plan API: 1 key, 100 req/15 min, 250/day, 3,000/30 days (docs).
- Auth errors are HTTP 401 despite the docs saying 200.
Every checkpoint, in detail · 9 checkpoints
- DocsHeadlessdevelopers.buffer.com/llms.txt, guides as .md URLs, CLI, MCP and Agent Setup guides.
- Sign upNeeds a humanWeb-only sign-up at auth.buffer.com; clicking Sign Up shows a visible hCaptcha puzzle. No API/CLI sign-up route.
- VerifyNot reachedNo account was created, so no verification mail.
- KeyNot reachedAPI keys only in the web app (Settings > API); OAuth PKCE/DCR needs a logged-in human to consent; no device flow.
- First callNot reachedNo credential; unauthenticated GraphQL and MCP calls return 401.
- First actionNot reachedNo credential.
- PayNot reachedNo 402, no x402/MPP, no billing API. Pricing FAQ: card only, payment details entered under Billing Method in the account; 14-day trial without a card per the FAQ (not confirmed). The account needed to buy sits behind an hCaptcha puzzle a human must solve; checkout not seen.
- CancelNot reachedNo plan started; no cancel or billing operation in the API or CLI.
- DeleteNot reachedNo account to delete; no account-deletion mutation in the API schema or CLI.
The attempt log · 51 attempts
| Capability | Route | Result | Evidence |
|---|---|---|---|
| agent discovery: llms.txt | api | done ✓ | developers.buffer.com/llms.txt 200 text/plain 10703 bytes; buffer.com/llms.txt 301 -> developers llms.txt; guides as .md URLs |
| agent discovery: MCP server/discover 2026-07-28 unauthenticated | api | partial ✓ | POST https://mcp.buffer.com/mcp -> 401 {'error':'Authorization header is required'}; WWW-Authenticate: Bearer realm="buffer-mcp", resource_metadata="https://mcp.buffer.com/.well-known/oauth-protected-resource/mcp" |
| agent discovery: MCP PRM + AS metadata | api | done ✓ | PRM 200 JSON at /.well-known/oauth-protected-resource(/mcp), AS https://auth.buffer.com; AS metadata: registration_endpoint /reg (DCR), no client_id_metadata_document_supported, no device_authorization_endpoint, PKCE S256, resource_parameter_supported true; OIDC config authorization_response_iss_parameter_supported true |
| agent discovery: cards and well-knowns | api | failed ✓ | mcp.buffer.com/mcp/server-card 404; buffer.com/.well-known/ai-catalog.json, mcp/server-card.json, agent-card.json, agent.json, ucp, /auth.md, /SKILL.md all 404 HTML |
| agent discovery: aipref / markdown negotiation | api | partial ✓ | robots.txt has no Content-Usage / Content-signal lines; no Content-Usage header on buffer.com; Accept: text/markdown on developers.buffer.com/guides/introduction returns text/html (no vary: accept); .md URLs work (guides/*.md) |
| find docs: Find API docs | api | done ✓ | developers.buffer.com llms.txt + .md guides, GraphQL API at api.buffer.com, MCP guide, CLI guide (@bufferapp/cli) |
| sign up: Create a Buffer account with the agent's inbox | browser | blocked | buffer.com/signup -> 301 auth.buffer.com/signup/ (headless GET lands on /error?kind=expired: SPA flow). In browser: filled email+password, clicked Sign Up -> hCaptcha image puzzle 'Select the material that is soft and flexible' (visible_challenge true, screenshot browser/shots/002.png). |
| agent discovery: MCP with invalid bearer / legacy initialize | mcp | partial ✓ | server/discover with Bearer invalid -> 401 {'error':'Unauthorized: Invalid or expired token','httpCode':401}; initialize without auth -> 401 'Authorization header is required'. Body is plain JSON, not JSON-RPC; protocol version cannot be read without a key. |
| agent discovery: GraphQL API and CLI without account | api | done ✓ | POST api.buffer.com without auth -> 401 {'errors':[{'message':'An authentication JWT or Access Token is required','extensions':{'code':'UNAUTHENTICATED'}}]}; introspection allowed unauthenticated: 20 queries, 22 mutations (no account/channel/API-key/billing mutations, no updateIdea/deleteIdea). @bufferapp/cli 2.0.1 installs via npm, 42 commands, 'buffer context' skill topics, --dry-run validates locally; 'buffer account' -> AUTH_ERROR code 4 with clear fix. |
| verify email: Verify sign-up email | none | blocked | No account created: sign-up stopped at hCaptcha; no mail expected |
| login: Log in | none | blocked | No account: sign-up blocked by hCaptcha. API keys are created only in the web app Settings > API; OAuth (auth.buffer.com, PKCE, DCR at /reg) needs a logged-in user to consent; no device flow, no agent registration. |
| credentials: Create API key at publish.buffer.com/settings/api | none | blocked | No account: sign-up blocked by hCaptcha. API keys are created only in the web app Settings > API; OAuth (auth.buffer.com, PKCE, DCR at /reg) needs a logged-in user to consent; no device flow, no agent registration. |
| The first call: GraphQL account query / MCP get_account | none | blocked | No account: sign-up blocked by hCaptcha. API keys are created only in the web app Settings > API; OAuth (auth.buffer.com, PKCE, DCR at /reg) needs a logged-in user to consent; no device flow, no agent registration. |
| The first action: Create a post | none | blocked | No account: sign-up blocked by hCaptcha. API keys are created only in the web app Settings > API; OAuth (auth.buffer.com, PKCE, DCR at /reg) needs a logged-in user to consent; no device flow, no agent registration. |
| buy a plan: Find an agent purchase route | api | failed ✓ | x402./mpp./agents.buffer.com no answer (000); API unauthenticated -> 401 not 402; no /.well-known/ucp, /auth.md; Buffer not in x402 Bazaar or mpp.dev/api/services; no billing mutation in schema; buffer.com/pricing.md (text/markdown, 'machine-readable pricing for AI agents'): Free $0 (3 channels, API 1 key 3,000 req/month), Essentials from $6/channel, Team from $12/channel; pricing FAQ: card only (Visa, Mastercard, Amex, JCB, Discover, Diners), 14-day free trial, payment details entered under 'Billing Method' in the account. Checkout itself not seen (no account). |
| cancel plan: Cancel plan | none | skipped | No plan started (no account). No billing/cancel mutation in the GraphQL schema. |
| delete account: Delete account | none | blocked | No account to delete. No account-deletion mutation in the GraphQL schema (introspection) or CLI (42 commands). |
| Schedule a post to a channel: Schedule a post to a channel in account | api | blocked | Not attempted on the product: no account. Sign-up blocked by a visible hCaptcha puzzle, so no API key, OAuth token or web session exists. |
| Add post to the next available queue slot: Add post to the next available queue slot in account | api | blocked | Not attempted on the product: no account. Sign-up blocked by a visible hCaptcha puzzle, so no API key, OAuth token or web session exists. |
| Publish immediately / share next: Publish immediately / share next in account | api | blocked | Not attempted on the product: no account. Sign-up blocked by a visible hCaptcha puzzle, so no API key, OAuth token or web session exists. |
| Edit a scheduled or draft post: Edit a scheduled or draft post in account | api | blocked | Not attempted on the product: no account. Sign-up blocked by a visible hCaptcha puzzle, so no API key, OAuth token or web session exists. |
| Delete a post: Delete a post in account | api | blocked | Not attempted on the product: no account. Sign-up blocked by a visible hCaptcha puzzle, so no API key, OAuth token or web session exists. |
| Attach media (image/video/document) to a post: Attach media (image/video/document) to a post in account | api | blocked | Not attempted on the product: no account. Sign-up blocked by a visible hCaptcha puzzle, so no API key, OAuth token or web session exists. |
| View post and channel performance insights: View post and channel performance insights in account | api | blocked | Not attempted on the product: no account. Sign-up blocked by a visible hCaptcha puzzle, so no API key, OAuth token or web session exists. |
| Reply to comments across connected channels: Reply to comments across connected channels in account | browser | blocked | Not attempted on the product: no account. Sign-up blocked by a visible hCaptcha puzzle, so no API key, OAuth token or web session exists. |
| Capture a content idea: Capture a content idea in account | api | blocked | Not attempted on the product: no account. Sign-up blocked by a visible hCaptcha puzzle, so no API key, OAuth token or web session exists. |
| Connect a social channel/account: Connect a social channel/account in account | browser | blocked | Not attempted on the product: no account. Sign-up blocked by a visible hCaptcha puzzle, so no API key, OAuth token or web session exists. |
| Save a post as draft: Save a post as draft in account | api | blocked | Not attempted on the product: no account. Sign-up blocked by a visible hCaptcha puzzle, so no API key, OAuth token or web session exists. |
| Create a threaded post (X, Bluesky, Threads, Mastodon): Create a threaded post (X, Bluesky, Threads, Mastodon) in account | api | blocked | Not attempted on the product: no account. Sign-up blocked by a visible hCaptcha puzzle, so no API key, OAuth token or web session exists. |
| Generate or rewrite post content with AI Assistant: Generate or rewrite post content with AI Assistant in account | browser | blocked | Not attempted on the product: no account. Sign-up blocked by a visible hCaptcha puzzle, so no API key, OAuth token or web session exists. |
| Tag posts and ideas: Tag posts and ideas in account | api | blocked | Not attempted on the product: no account. Sign-up blocked by a visible hCaptcha puzzle, so no API key, OAuth token or web session exists. |
| Organize ideas into board columns/groups: Organize ideas into board columns/groups in account | api | blocked | Not attempted on the product: no account. Sign-up blocked by a visible hCaptcha puzzle, so no API key, OAuth token or web session exists. |
| Create and reuse post templates: Create and reuse post templates in account | api | blocked | Not attempted on the product: no account. Sign-up blocked by a visible hCaptcha puzzle, so no API key, OAuth token or web session exists. |
| Schedule a first comment on a post: Schedule a first comment on a post in account | api | blocked | Not attempted on the product: no account. Sign-up blocked by a visible hCaptcha puzzle, so no API key, OAuth token or web session exists. |
| Duplicate an existing post: Duplicate an existing post in account | browser | blocked | Not attempted on the product: no account. Sign-up blocked by a visible hCaptcha puzzle, so no API key, OAuth token or web session exists. |
| View visual content calendar: View visual content calendar in account | browser | blocked | Not attempted on the product: no account. Sign-up blocked by a visible hCaptcha puzzle, so no API key, OAuth token or web session exists. |
| Save and use canned replies for comments: Save and use canned replies for comments in account | browser | blocked | Not attempted on the product: no account. Sign-up blocked by a visible hCaptcha puzzle, so no API key, OAuth token or web session exists. |
| Get AI-suggested comment replies: Get AI-suggested comment replies in account | browser | blocked | Not attempted on the product: no account. Sign-up blocked by a visible hCaptcha puzzle, so no API key, OAuth token or web session exists. |
| Turn a comment reply into a new post: Turn a comment reply into a new post in account | browser | blocked | Not attempted on the product: no account. Sign-up blocked by a visible hCaptcha puzzle, so no API key, OAuth token or web session exists. |
| Submit post for team approval and approve/reject: Submit post for team approval and approve/reject in account | browser | blocked | Not attempted on the product: no account. Sign-up blocked by a visible hCaptcha puzzle, so no API key, OAuth token or web session exists. |
| Leave notes/comments on a draft post: Leave notes/comments on a draft post in account | browser | blocked | Not attempted on the product: no account. Sign-up blocked by a visible hCaptcha puzzle, so no API key, OAuth token or web session exists. |
| Build and customize a Start Page link-in-bio: Build and customize a Start Page link-in-bio in account | browser | blocked | Not attempted on the product: no account. Sign-up blocked by a visible hCaptcha puzzle, so no API key, OAuth token or web session exists. |
| View Start Page click/traffic analytics: View Start Page click/traffic analytics in account | browser | blocked | Not attempted on the product: no account. Sign-up blocked by a visible hCaptcha puzzle, so no API key, OAuth token or web session exists. |
| Shorten links in posts: Shorten links in posts in account | browser | blocked | Not attempted on the product: no account. Sign-up blocked by a visible hCaptcha puzzle, so no API key, OAuth token or web session exists. |
| Manage queue and post from the mobile app: Manage queue and post from the mobile app in account | browser | blocked | Not attempted on the product: no account. Sign-up blocked by a visible hCaptcha puzzle, so no API key, OAuth token or web session exists. |
| Invite team members and set channel permissions: Invite team members and set channel permissions in account | browser | blocked | Not attempted on the product: no account. Sign-up blocked by a visible hCaptcha puzzle, so no API key, OAuth token or web session exists. |
| Generate an API key and manage app clients: Generate an API key and manage app clients in account | browser | blocked | Not attempted on the product: no account. Sign-up blocked by a visible hCaptcha puzzle, so no API key, OAuth token or web session exists. |
| Create branded analytics reports: Create branded analytics reports in account | browser | blocked | Not attempted on the product: no account. Sign-up blocked by a visible hCaptcha puzzle, so no API key, OAuth token or web session exists. |
| Set custom UTM parameters for post links: Set custom UTM parameters for post links in account | browser | blocked | Not attempted on the product: no account. Sign-up blocked by a visible hCaptcha puzzle, so no API key, OAuth token or web session exists. |
| Enable two-factor authentication: Enable two-factor authentication in account | browser | blocked | Not attempted on the product: no account. Sign-up blocked by a visible hCaptcha puzzle, so no API key, OAuth token or web session exists. |
| Connect third-party app integrations (Canva, Zapier, Dropbox, etc.): Connect third-party app integrations (Canva, Zapier, Dropbox, etc.) in account | browser | blocked | Not attempted on the product: no account. Sign-up blocked by a visible hCaptcha puzzle, so no API key, OAuth token or web session exists. |
Also in Social media scheduling.
PostizL2Gets in on its ownBuffer vs Postiz
PublerL1Can't sign up on its ownBuffer vs Publer
TypefullyL1Can't sign up on its ownBuffer vs Typefully
LaterL0Can't sign up on its own