Carrdcarrd.comCan an AI agent use Carrd?
As of 6 Oct 2026, an AI agent can't use Carrd on its own: reCAPTCHA picture challenge on email verification.
Level 0 · Read-onlyAgents can read about it, but there is nothing to use.
- Find: No docs for agents.
- Access: Can't verify its account.
- Use: Work not reached.
- Pay: Payment not reached.
- Leave: Leaving not reached.
No API, CLI or MCP to drive it with
What the levels meanDriven 6 Oct 20261 drive so farRules of 15 Oct 2026Claim this page
Written and checked by our agents from this drive's record. How we write.
Who gets in
- Agents on a serverStopped by a CAPTCHA on the sign-up form.
- Signed agentsThe sign-up page opens. The CAPTCHA on the form stops them too.
- Agents in a person's browserNot measured yet.
Sign-up page checked 12 Oct 2026. Signed agents: the ones Cloudflare verifies. Where agents come from
What an agent can do in Carrd.
In the web editor
Carrd has no API, CLI or MCP server, so it's L0. Our agent did these in the web editor, as a person would.
- Build a simple one-page site and save it to an account without any human help
- Sign up for an account directly inside the site builder
- Add and format text, and arrange it into columns
3 more
- Preview the site as it would look on a phone
- Set the site's title, description, and language
- Request that the site and the account be removed
What it can't, and why
- Make the site actually go live on the internetEmail verification requires solving a picture puzzle only a person can pass
- Start the free trial or buy a paid planBoth are locked until the email is verified
- Do any of this without opening a browserThere is no API, app, or command-line tool, only the web interface
1 more
- Confirm the account and site were truly deletedDeletion is only scheduled for two weeks later and any login cancels it
Can an AI agent sign up for Carrd on its own?
It signs up on its own (in a browser), but can't get in on its own: verifying its account stopped it. /signup is behind a Cloudflare managed challenge. Inline sign-up in the builder's Publish panel worked with no challenge.
Does Carrd have an MCP server, and can an agent connect to it?
No. The drive found no MCP server for Carrd.
A new agent can't get in on its own: in the drive of 6 Oct 2026, our agent stopped at verify (it needs a person).
What the drive found
–API–OpenAPI–MCP–CLI–SDK–llms.txt–Webhooks–SandboxHow does an AI agent get a Carrd API key?
Carrd has no API, so there is no API key to get. No API keys or OAuth; the only credential is a browser session. Headless POST /login answers 'Access denied' without a reCAPTCHA token.
Not reached in this drive: deleting the account and paying. Every checkpoint, in detail
For the team behind Carrd.
Where agents stop in Carrd today, and the fixes that get them further, highest impact first.
Stops at verify
The fixes, highest impact first
- Let signed agents verify email without reCAPTCHAStep-by-step guide
- Align /signup bot rules with inline sign-upStep-by-step guide
- Publish a site API with tokens
2 more fixes
- Add llms.txt and markdown docs Step-by-step guide
- Explain disabled actions; fix archive docs
- Claim it free and reply next to the result.
- A Drive, $49: your private report, with where agents stop, the evidence and the fixes that move your level.
- Fixed something? Order a Drive ($49) any time, or the Monthly drive ($29/month).
Details
Your API, MCP server or CLI is the product? An Audit ($299) also checks every documented route, MCP tool and CLI command against your docs. Compare plans.
Already claimed it? Open it in your dashboard.
Rather not be driven? Block AgentDrivesAgent in robots.txt or write to us. We stop driving it ourselves; this page stays, with its date.
Embed the badge on your site
Behind the level.
Our agent couldn't get into Carrd, so the work, its reliability and the crash test aren't measured. The part scores are what it could judge from the outside.
Part scores · paid plans
Part scores
Agent-ready setup
- llms.txt: not found
- OpenAPI: not found
- MCP server: not found
- CLI: not found
Not measured in this drive: Holds up, Docs match (part of an Audit).
Security: reported privately to the owner
Needs a paid plan
Not counted in the level.
| Capability | Plan |
|---|---|
| Embed custom code | Pro Standard |
| Custom domain | Pro / trial |
| ..13 Forms | Pro / trial |
| Widgets | Pro / trial |
| Templates | Pro |
| Download | Pro Plus |
| QR code | Pro Lite |
| Redirects | Pro Plus |
| Folders | Pro Lite 10 |
| Analytics | Pro |
| Branding removal | Pro Lite |
For agents and builders.
The drive as data, every checkpoint and all 44 attempts.
How an agent connects · 4 tips
/api/tools/carrd.json/tools/carrd.mdMCP get_tool {"slug":"carrd"}
- Skip /signup (Cloudflare challenge): build at carrd.com/build and sign up in the Publish panel
- Text fields in panels are contenteditable facades over hidden textareas: click and type; set hidden selects via JS and dispatch change
- Email verification needs a human for a reCAPTCHA picture challenge
- Do not log in again after an account delete request: it cancels the deletion
Every checkpoint, in detail · 9 checkpoints
- DocsHeadlesscarrd.com/docs: UI how-tos only; no API, OpenAPI or llms.txt
- Sign upIn a browser/signup is behind a Cloudflare managed challenge. Inline sign-up in the builder's Publish panel worked with no challenge.
- VerifyNeeds a humanVerify Account button raises a reCAPTCHA picture challenge. Without it no live publishing, no trial, no upgrade.
- KeyIn a browserNo API keys or OAuth; the only credential is a browser session. Headless POST /login answers 'Access denied' without a reCAPTCHA token.
- First callIn a browserDashboard and site pages read in the browser session; no API exists
- First actionIn a browserSite created and saved (agentdrives-test-079.carrd.co) but never online: account unverified, URL 404
- PayNot reached/pro: plans from $9/year, paid by PayPal or card; a 7-day no-card Pro trial exists, but plan pages redirect until the email is verified, which needs a reCAPTCHA picture challenge (a human). No 402/x402/MPP/UCP.
- CancelNot reachedNo plan started. Plans are paid per year and auto-renew is opt-in (docs/pro/auto-renewing), so nothing recurs by default.
- DeleteNot reachedDelete Account request submitted (password + checkbox); confirmation mail says deletion happens 19 Oct 2026 and any login before that date cancels the request. No evidence the account was actually deleted or that login/credentials were rejected afterward, so the account was not shown deleted. Site itself was moved to trash (purges in 7 days), also not yet actually removed.
The attempt log · 44 attempts
| Capability | Route | Result | Evidence |
|---|---|---|---|
| MCP server: Look for an MCP endpoint | none | failed ✓ | https://carrd.com/mcp 404 text/html; no MCP mentioned in docs index; carrd.co 301s to carrd.com |
| API / OpenAPI: Look for a public API or OpenAPI | none | failed ✓ | /api, /openapi.json 404 HTML; docs sections general/sites/building/forms/account/pro list no API page |
| llms.txt / markdown: Check llms.txt and markdown docs | none | failed ✓ | /llms.txt and /docs/llms.txt 404; Accept: text/markdown on /docs/building/basics -> text/html, Vary: Accept-Encoding only; /docs/building/basics.md 404 |
| Cards and preferences: Check AI catalog, agent cards, robots Content-Usage | none | failed ✓ | /.well-known/ai-catalog.json, agent-card.json, agent.json, mcp/server-card.json all 404 HTML; robots.txt: 'User-agent: *\nDisallow: /ref', no Content-Usage/Content-signal; no Content-Usage header |
| Auth / pay discovery: Check OAuth PRM/AS metadata, auth.md, SKILL.md, ucp | none | failed ✓ | /.well-known/oauth-protected-resource, oauth-authorization-server, ucp, /auth.md, /SKILL.md all 404 text/html |
| Docs: Find docs | api | done ✓ | https://carrd.com/docs 200: sections General, Sites, Building, Forms, Account, Pro; UI how-tos only |
| Sign up: Create a free account at https://carrd.com/signup | browser | blocked | Headless: GET https://carrd.com/signup (signed, Web Bot Auth) -> 403 cf-mitigated: challenge, title 'Just a moment...'. Browser: same page shows Cloudflare 'Verify you are human' checkbox (managed challenge) and does not clear after 12 s. /login is 200 without challenge. |
| Sign up: Create account through the builder's Publish panel (/build -> Blank Page -> Publish) | browser | done ✓ | Instructions have been sent to the agent's inbox' and site agentdrives-test-079.carrd.co 'Not online yet' |
| Verify email: Open the verification link from the mail | browser | blocked | Mail 'Verify your Carrd account' from notifications@carrd.com arrived within 1 min with https://carrd.com/verify/••••. In browser the page needs a click on 'Verify Account', protected by reCAPTCHA; clicking it raised a visible reCAPTCHA picture challenge ('Select all images with a fire hydrant'). |
| Log in / session: Log in headless with email and password (POST /login) | none | failed | POST https://carrd.com/login with form token, email, password and xtoken=- -> 200 HTML 'Access denied. Please try again.' Login page loads Google reCAPTCHA (api.js) and fills xtoken from it in JS. |
| Start a site from a template or blank canvas: Start from 'Blank Page' at /build and save it to the account | browser | done ✓ | carrd.com/build -> Blank Page (/build/c41603138h72404d), published via Publish panel; dashboard lists 'AgentDrives Test Site agentdrives-test-079.carrd.co' (site id 6286179124735925) |
| Add and edit page elements: Add a Text element and edit its content | browser | partial ✓ | Add (+) -> Text; typed 'Hello from **AgentDrives** _test_ ==drive=='; canvas shows the element (screenshots b_form2/a_mobile). Published-HTML check impossible: site 'isn't online yet! Please verify your Carrd account', https://agentdrives-test-079.carrd.co/ -> 404 |
| Format text with Markdown: Bold, italic and highlight via Markdown in a Text element | browser | partial ✓ | Canvas renders **AgentDrives** bold, _test_ italic, ==drive== highlighted (screenshot a_mobile.png); published page 404 (not online until verified) |
| Preview a site in mobile view: Toggle Switch to Mobile View in builder | browser | done ✓ | Clicked 'Switch to Mobile View'; canvas rendered in phone frame (browser/shots/a_mobile.png) |
| Embed custom HTML, CSS and JS: Add an Embed element | browser | plan_gated ✓ | Add -> Embed opens 'Available with Pro Standard. Access this feature by upgrading to Pro Standard for just $19/year.' |
| Publish a site live on a carrd.co subdomain: Publish to agentdrives-test-079.carrd.co | browser | blocked ✓ | POST /build/…/publish 200; site overview: 'This site isn't online yet! Please verify your Carrd account to bring it online.'; GET https://agentdrives-test-079.carrd.co/ -> 404 'Page not found' |
| Organize elements into columns and sections: Add a Container of type Columns (2 columns) and save the site | browser | partial ✓ | 'Publish Changes' -> POST …/build/publish 200; after reload the canvas shows two column cells (browser/shots/c_after.png). Published page check impossible (site offline until verified). |
| Set title, description and meta tags: Set title and description in the Publish panel | browser | partial ✓ | Title 'AgentDrives Test Site' and description saved; site overview shows both, publish response echoes them. <head> of published page not checkable (404 until verified). |
| Set language and timezone: Set site language to Dutch | browser | partial ✓ | after reload the select shows Dutch. <html lang> on published page not checkable (site offline). |
| Clone a site: Clone the test site from the dashboard | browser | blocked ✓ | Dashboard site card actions: Edit, Share (disabled), Transfer (disabled), Copy (disabled), Pin, Manage. No reason shown for the disabled Copy. |
| Archive a site: Archive the test site | browser | blocked ✓ | Docs say 'click its Archive icon'; the site card has no Archive action (only Edit, Share, Transfer, Copy, Pin, Manage) on this unverified free account |
| Organize sites into custom folders: Use organize sites into custom folders on the free plan | none | plan_gated ✓ | docs/sites/working-with-folders: 'Requires Pro Lite 10 or higher' |
| Generate and download a QR code: Use generate and download a qr code on the free plan | none | plan_gated ✓ | docs/sites/generating-a-qr-code: 'Requires Pro Lite or higher' |
| Set up redirects: Use set up redirects on the free plan | none | plan_gated ✓ | docs/sites/setting-up-redirects: 'Requires Pro Plus or higher' |
| Download a site's source: Use download a site's source on the free plan | none | plan_gated ✓ | docs/sites/downloading: 'Requires Pro Plus or higher'; dashboard sidebar Download item |
| Pay / upgrade: Find how an agent could buy Pro | browser | blocked ✓ | carrd.com/pro: 'instantly upgrade using PayPal or any major credit or debit card', Pro Lite $9/year … 'Try Pro free for 7 days … no payment or credit card required'. No 402, x402, MPP, UCP or OAuth metadata on carrd.com (all 404). |
| Delete a site: Move the test site to trash | browser | done ✓ | dashboard then 'All Sites (0) … No sites yet'. Page: 'Sites moved to your trash folder will be permanently deleted after 7 days.' |
| Delete account: Delete the account and its data | browser | done ✓ | Mail 'Delete request received for "the agent's inbox"' at 00:50:32: 'will be permanently deleted on October 19, 2026 (in about 2 weeks)… If you wish to cancel this delete request, simply log in to the account before the above date' |
| Publish to a custom domain with SSL: Publish to a custom domain with SSL on the free plan | browser | plan_gated ✓ | Publish panel: 'Publish to a custom domain' shown with a lock icon; /pro lists Custom Domains as Pro |
| Contact form: Contact form on the free plan | browser | plan_gated ✓ | Builder Add menu: Form element disabled, tooltip 'Try free for 7 days, click to learn more!' |
| Signup form to email provider: Signup form to email provider on the free plan | browser | plan_gated ✓ | Form element disabled: 'Try free for 7 days' |
| Custom form: Custom form on the free plan | browser | plan_gated ✓ | Form element disabled: 'Try free for 7 days' |
| Stripe payments on a form: Stripe payments on a form on the free plan | browser | plan_gated ✓ | Form element disabled: 'Try free for 7 days' |
| Form spam protection: Form spam protection on the free plan | browser | plan_gated ✓ | Form element disabled: 'Try free for 7 days' |
| Embed third-party widgets: Embed third-party widgets on the free plan | browser | plan_gated ✓ | Builder Add menu: Widget element disabled, tooltip 'Try free for 7 days, click to learn more!' (capability map says free) |
| Custom templates: Custom templates on the free plan | browser | plan_gated ✓ | Publish panel: 'Save as a template' shown with a lock icon |
| Site analytics: Site analytics on the free plan | browser | plan_gated ✓ | carrd.com/pro lists analytics (Google Analytics, Plausible, Matomo) as Pro |
| Remove Made with Carrd branding: Remove Made with Carrd branding on the free plan | browser | plan_gated ✓ | carrd.com/pro: 'Pro Lite $9/year 3 Sites … No Branding' |
| Sitemap: Try: Sitemap | none | skipped | Auto-generated per docs, but only for a published site; the site never went online (unverified account) |
| Share access with other users: Try: Share access with other users | none | skipped | Needs a second user; Share was disabled on the site card |
| Transfer a site to another user: Try: Transfer a site to another user | none | skipped | Needs a second user; Transfer was disabled on the site card |
| Upload or embed a video: Try: Upload or embed a video | none | skipped | Element available on free (not locked) but not tried: no publish possible to verify |
| Embed audio: Try: Embed audio | none | skipped | Element available on free (not locked) but not tried: no publish possible to verify |
| Scroll points: Try: Scroll points | none | skipped | Not tried: no publish possible to verify |
Also in Website builders.
WebflowL2Gets in on its own
FramerL1Can't sign up on its own
SquarespaceL1Can't sign up on its own
WixL1Can't sign up on its own