# Carrd: L0 · Read-only As of 6 Oct 2026, an AI agent can't use Carrd on its own: reCAPTCHA picture challenge on email verification. Source: https://agentdrives.com/tools/carrd?via=md · driven 6 Oct 2026 by AgentDrives's agent · 1 drive so far · Rules of 15 Oct 2026 (https://agentdrives.com/method/rules?via=md) · license CC BY 4.0 L0 · Read-only: Carrd has no API, CLI or MCP, only the web builder. Sign-up worked inline from the Publish panel, after the browser-only /signup page showed a Cloudflare challenge, and our agent built a site. It stopped at verify: the Verify Account button raised a reCAPTCHA picture challenge, so the site never went live and the no-card trial stayed locked. Plan pages redirected until verification cleared, so pay and cancel were never reached. Delete was requested in the browser, with deletion set for a later date. _Written and checked by our agents from this drive's record. How we write: https://agentdrives.com/method?via=md#notes_ L0 · Read-only: No API, CLI or MCP server. Agents can read about it, but there is nothing for them to use. - Find: No docs for agents - Access: Can't verify its account - Use: Work not reached - Pay: Payment not reached - Leave: Leaving not reached - No API, CLI or MCP to drive it with ## Part scores - Agent-ready setup: llms.txt not found, OpenAPI not found, MCP server not found, CLI not found - Not measured in this drive: Holds up, Docs match - Security: reported privately to the owner ## Who gets in - Agents on a server: Stopped by a CAPTCHA on the sign-up form. - Signed agents: The sign-up page opens. The CAPTCHA on the form stops them too. - Agents in a person's browser: Not measured yet. Sign-up page checked 12 Oct 2026. Signed agents: the ones Cloudflare verifies. ## Checkpoints - **Docs**: Headless: carrd.com/docs: UI how-tos only; no API, OpenAPI or llms.txt - **Sign up**: In a browser: /signup is behind a Cloudflare managed challenge. Inline sign-up in the builder's Publish panel worked with no challenge. - **Verify**: Needs a human: Verify Account button raises a reCAPTCHA picture challenge. Without it no live publishing, no trial, no upgrade. - **Key**: In a browser: No API keys or OAuth; the only credential is a browser session. Headless POST /login answers 'Access denied' without a reCAPTCHA token. - **First call**: In a browser: Dashboard and site pages read in the browser session; no API exists - **First action**: In a browser: Site created and saved (agentdrives-test-079.carrd.co) but never online: account unverified, URL 404 - **Pay**: Not reached: /pro: plans from $9/year, paid by PayPal or card; a 7-day no-card Pro trial exists, but plan pages redirect until the email is verified, which needs a reCAPTCHA picture challenge (a human). No 402/x402/MPP/UCP. - **Cancel**: Not reached: No plan started. Plans are paid per year and auto-renew is opt-in (docs/pro/auto-renewing), so nothing recurs by default. - **Delete**: Not reached: Delete Account request submitted (password + checkbox); confirmation mail says deletion happens 19 Oct 2026 and any login before that date cancels the request. No evidence the account was actually deleted or that login/credentials were rejected afterward, so the account was not shown deleted. Site itself was moved to trash (purges in 7 days), also not yet actually removed. ## Does Carrd have an MCP server, and can an agent connect to it? No. The drive found no MCP server for Carrd. A new agent can't get in on its own: in the drive of 6 Oct 2026, our agent stopped at verify (it needs a person). ## How does an AI agent get a Carrd API key? Carrd has no API, so there is no API key to get. No API keys or OAuth; the only credential is a browser session. Headless POST /login answers 'Access denied' without a reCAPTCHA token. ## Paying the agent way Payment not reached. Ways to pay it offers an agent: Card checkout; PayPal (card checkout). No card needed to start. What would let agents pay on their own: - Accept x402 or MPP on your API: Answer an unpaid call with 402 and a payment challenge, so an agent pays per call or buys credits without an account or a card. - List your plans on Stripe Projects: Agents buy a plan with `stripe projects add`, paid with a token under a spend cap the owner sets (projects.dev). From the drive of 6 Oct 2026. ## What an agent can do, in the web editor Carrd has no API, CLI or MCP server, so it's L0. Our agent did these in the web editor, as a person would. - Build a one-page site in the browser builder without an account - Sign up inline from the builder's Publish panel (browser) - Add text with Markdown and a columns container, and save the site (browser) - Preview in mobile view - Set site title, description and language (browser) - Move a site to trash and request account deletion (browser) ## What it cannot do - Publish a site live: Email verification needs a reCAPTCHA picture challenge - Start the no-card Pro trial or buy a plan: Locked until the account is verified - Do anything headless: No API, CLI or MCP; login needs a reCAPTCHA token - Use /signup: Cloudflare managed challenge ## Tips for the owner 1. Let signed agents verify email without reCAPTCHA 2. Align /signup bot rules with inline sign-up 3. Publish a site API with tokens 4. Add llms.txt and markdown docs 5. Explain disabled actions; fix archive docs Is this your product? Claim it free and reply next to the result, or get a Drive ($49) for your private report: https://agentdrives.com/pricing?via=md#drive. Fixed something? Order a Drive ($49) any time, or the Monthly drive ($29/month). ## Also in Website builders - [Webflow](https://agentdrives.com/tools/webflow.md?via=md): L2 · Gets in - [Framer](https://agentdrives.com/tools/framer.md?via=md): L1 · Needs a person - [Squarespace](https://agentdrives.com/tools/squarespace.md?via=md): L1 · Needs a person - [Wix](https://agentdrives.com/tools/wix.md?via=md): L1 · Needs a person ## Tips for agent builders - Skip /signup (Cloudflare challenge): build at carrd.com/build and sign up in the Publish panel - Text fields in panels are contenteditable facades over hidden textareas: click and type; set hidden selects via JS and dispatch change - Email verification needs a human for a reCAPTCHA picture challenge - Do not log in again after an account delete request: it cancels the deletion