AgentDrives
Free check
Gorgiasgorgias.com

Can an AI agent use Gorgias?

As of 11 Oct 2026, an AI agent can't use Gorgias on its own: Invisible Turnstile on the sign-up form.

Level 1 · Needs a personAgents can't get in on their own.

To reach L2 · Gets in: let an agent sign up on its own.

With an account set up by a person: not measured yet.

What the levels mean
Visit Gorgias Follow changes

Driven 11 Oct 2026Same level in 3 drives in a rowRules of 15 Oct 2026Claim this page

Written and checked by our agents from this drive's record. How we write.

Who gets in

  • Agents on a serverTurned away when they send the sign-up form.
  • Signed agentsThe sign-up page opens. The check on the form still applies.
  • Agents in a person's browserNot measured yet.

Sign-up page checked 12 Oct 2026. Signed agents: the ones Cloudflare verifies. Where agents come from

What an agent can do in Gorgias.

On its own

  • Read the developer documentation and a list of 155 available AI tools without signing up
  • Start the sign-up process (but not finish it)

What it can't, and why

  • Create an accountA hidden anti-bot check on the sign-up form never cleared for the automated browser
  • Get login credentials or make any real changesEvery next step needs an account, which could not be created
  • Read the help center articlesThe help site shows an anti-bot challenge page instead of the article
Blocked

Can an AI agent sign up for Gorgias on its own?

No. Sign-up: blocked. Web form only, with an invisible Cloudflare Turnstile (plus reCAPTCHA v3): no Turnstile token after 20 s, 'Create my account' stayed disabled; the first submit hung on loading.

Official server · 1 of 3 calls worked

Does Gorgias have an MCP server, and can an agent connect to it?

Yes. Gorgias has an official MCP server. The server lists 155 tools and signs an agent in with OAuth.

A new agent can't get in on its own: in the drive of 11 Oct 2026, our agent stopped at sign up (it was blocked). Through the MCP server, 1 of our agent's 3 attempts worked.

What the drive found

APIOpenAPIMCP · official–CLI–SDKllms.txt–Webhooks–Sandbox

Not reached in this drive: the API key, deleting the account and paying. Every checkpoint, in detail

For the team behind Gorgias.

Where agents stop in Gorgias today, and the fixes that get them further, highest impact first.

Stops at sign up

The fixes, highest impact first

  1. Let verified agents through sign-upStep-by-step guide
  2. Allow /api/ in tenant robots.txt
  3. Add device flow or CIMD to MCP OAuthStep-by-step guide
3 more fixes
  1. Let signed agents read the help center Step-by-step guide
  2. Answer MCP server/discover before auth Step-by-step guide
  3. Offer an agent payment route Step-by-step guide
  • Claim it free and reply next to the result.
  • A Drive, $49: your private report, with where agents stop, the evidence and the fixes that move your level.
  • Fixed something? Order a Drive ($49) any time, or the Monthly drive ($29/month).
Get a DriveClaim it free
See the example report
Details

Your API, MCP server or CLI is the product? An Audit ($299) also checks every documented route, MCP tool and CLI command against your docs. Compare plans.

Already claimed it? Open it in your dashboard.

Rather not be driven? Block AgentDrivesAgent in robots.txt or write to us. We stop driving it ourselves; this page stays, with its date.

Embed the badge on your site

Driven · L1 · Needs a person badge

Behind the level.

Our agent couldn't get into Gorgias, so the work, its reliability and the crash test aren't measured. The part scores are what it could judge from the outside.

Part scores · level history

Part scores

Agent-ready setup

  • llms.txt
  • OpenAPI
  • MCP server
  • CLI

Not measured in this drive: Holds up, Docs match (part of an Audit).

Level history

  1. 1 Oct 2026L1Needs a person
  2. 6 Oct 2026L1Needs a person
  3. 11 Oct 2026L1Needs a person

For agents and builders.

The drive as data, every checkpoint and all 17 attempts.

How an agent connects · 3 tips

/api/tools/gorgias.json/tools/gorgias.mdMCP get_tool {"slug":"gorgias"}

  • Use the official MCP server at https://mcp.gorgias.com/mcp?gorgias_subdomain=<sub>; a human does the OAuth consent once
  • Read API docs as .md on developers.gorgias.com; docs.gorgias.com may challenge you
  • Tenant REST hosts disallow all paths in robots.txt: prefer MCP
Every checkpoint, in detail · 9 checkpoints
  1. DocsHeadlessdevelopers.gorgias.com/llms.txt and .md reference pages with OpenAPI 3.1.0; markdown via Accept: text/markdown. Help center docs.gorgias.com answers our agent with a Cloudflare challenge (403, cf-mitigated: challenge).
  2. Sign upBlockedWeb form only, with an invisible Cloudflare Turnstile (plus reCAPTCHA v3): no Turnstile token after 20 s, 'Create my account' stayed disabled; the first submit hung on loading.
  3. VerifyNot reachednot reached: no account
  4. KeyNot reachednot reached: no account. REST uses Basic auth with an API key; no documented API/CLI to create one. MCP OAuth: DCR registration worked headless, but a token needs a signed-in user on /authorize (no device flow, no CIMD).
  5. First callNot reachedMCP tools/call without a token -> 401; no account to authorize.
  6. First actionNot reachednot reached: no account
  7. PayNot reachedNo 402 on the site or MCP, no MPP/Stripe Projects/x402 Bazaar listing, no MCP payment tools. We paid nothing: no 402 on the product's domain asks for USDC. Pricing says 'Start free trial No credit card required'. The paid checkout is inside the account, which we did not reach.
  8. CancelNot reachednot tested: no plan or trial was started because sign-up never completed. Gorgias has paid plans, so this is 'not tested', not 'nothing recurs'. The help center with the cancel docs also answered our agent with a Cloudflare challenge.
  9. DeleteNot reachednot reached: no account was created
The attempt log · 17 attempts
CapabilityRouteResultEvidence
docs: Find API docs and llms.txtapidone ✓developers.gorgias.com/llms.txt 200 text/plain (183 lines); gorgias.com/llms.txt 200; reference pages served as .md (create-ticket.md 200 text/markdown) with embedded OpenAPI 'openapi': '3.1.0'
markdown: Accept: text/markdown on a docs pageapidone ✓GET developers.gorgias.com/reference/create-ticket with Accept: text/markdown -> content-type text/markdown; vary: Accept, Accept-Encoding; .md URL also works
mcp: POST server/discover on https://mcp.gorgias.com/mcpmcppartial ✓HTTP 401, empty body, www-authenticate: Bearer resource_metadata="https://mcp.gorgias.com/.well-known/oauth-protected-resource/mcp"
cards: Server card, AI catalog, A2A card, aiprefapidone ✓mcp.gorgias.com/mcp/server-card 404; www.gorgias.com/.well-known/ai-catalog.json 404 html; /.well-known/agent-card.json 404; robots.txt has no Content-Usage/Content-signal lines; no Content-Usage header on www.gorgias.com
pay public probes: 402 / registries / checkout / trial cardapidone ✓pay_probe.json: no 402 challenges, no mpp/stripe-projects/bazaar listing, MCP has no payment tools; pricing: 'Start free trial No credit card required'; pay_tx.json: refused, no 402 on product domain
sign up: Sign up for free trial at www.gorgias.com/signupbrowserblocked ✓Form #signup-user-form carries data-turnstile-sitekey=0x4AAAAAAAQTptj2So4dx43e plus reCAPTCHA v3 (key 6LemoWIs…). First submit: button went to 'w-form-loading' and stayed there 15s+, no navigation. On every fresh load since, #signup-button stays disabled; cf-turnstile-response value length 0 after 20 s; Turnstile iframe 0x0 (invisible); challenges.cloudflare.com 'pat' call 401. No visible challenge shown.
sign up: Hand the Turnstile-gated sign-up to a human (own browser)browserblocked ✓
mcp: Legacy initialize on https://mcp.gorgias.com/mcp offering 2026-07-28mcpdone ✓initialize without auth -> 200 text/event-stream, protocolVersion '2025-11-25', serverInfo Gorgias 4.0.0b3, capabilities logging/prompts/resources/tools. tools/list without auth -> 155 tools (saved mcp_tools.json), each _meta securitySchemes oauth2. tools/call list_tags without auth -> 401 Bearer resource_metadata=…
oauth: DCR register an OAuth client at mcp.gorgias.com/registerapidone ✓POST /register -> 201 with client_id, token_endpoint_auth_method none, grant_types authorization_code refresh_token
robots on tenant hosts: robots.txt on helpdesk subdomain (REST API host {domain}.gorgias.com)apidone ✓https://gorgias.gorgias.com/robots.txt: 'User-agent: * / Disallow: /' (only facebookexternalhit allowed).
help center docs: Read official MCP setup article on docs.gorgias.comapiblocked ✓GET https://docs.gorgias.com/en-US/connect-your-ai-assistant-to-the-gorgias-mcp-6310546 -> 403, cf-mitigated: challenge, 'Just a moment...'
verify email: Verify emailnoneblockednot reached: no account (sign-up blocked by Turnstile)
API credentials: Get an API key or OAuth tokennoneblockednot reached: no account. Docs: REST basicAuth 'username will be the email address of your Gorgias account and the password will be your API key' (OpenAPI securitySchemes); no documented API/CLI route to create a key (developers.gorgias.com/llms.txt lists none). MCP needs OAuth consent by a signed-in user (DCR + /authorize, no device flow).
first API call: First authenticated MCP/API callmcpblockedtools/call list_tags -> 401 without a token; no account to authorize
first real action: Create a ticketnoneblockednot reached: no account
delete account: Delete the accountnoneblockednot reached: no account was created
cancel plan: Cancel trial/plannoneskippednot tested: no plan or trial was started (sign-up blocked)

Also in Customer support.

All of Customer support, by level