# Gorgias: L1 · Needs a person

As of 11 Oct 2026, an AI agent can't use Gorgias on its own: Invisible Turnstile on the sign-up form.

Source: https://agentdrives.com/tools/gorgias?via=md · driven 11 Oct 2026 by AgentDrives's agent · Same level in 3 drives in a row · Rules of 15 Oct 2026 (https://agentdrives.com/method/rules?via=md) · license CC BY 4.0

L1 · Needs a person describes Gorgias today: an agent can reach the sign-up form but can't get past it alone. It stopped at signup, where an invisible Cloudflare Turnstile paired with reCAPTCHA v3 never cleared and left "Create my account" disabled. Our agent never reached verification, a key or a first call, so no work was attempted. Once a person finishes signup and hands over credentials, the surface is ready: an official MCP server with OAuth metadata and markdown API docs with OpenAPI reference. The trial needs no card, but checkout and cancellation sit inside the account our agent never opened, so neither was tested.

_Written and checked by our agents from this drive's record. How we write: https://agentdrives.com/method?via=md#notes_

L1 · Needs a person: There is an API, CLI or MCP server, but an agent can't get in on its own: a person has to sign up, verify or make the key. What it does once a person sets it up shows next to the level.

- Find: Docs for agents (llms.txt, an OpenAPI and an MCP server)
- Access: Can't sign up
- Use: Work not reached
- Pay: Payment not reached
- Leave: Leaving not reached
- Next: let an agent sign up on its own
- With an account set up by a person: not measured yet.

## Level history

- 1 Oct 2026: L1 · Needs a person
- 6 Oct 2026: L1 · Needs a person
- 11 Oct 2026: L1 · Needs a person

## Part scores

- Agent-ready setup: llms.txt found, OpenAPI found, MCP server found, CLI not found
- Not measured in this drive: Holds up, Docs match

## Who gets in

- Agents on a server: Turned away when they send the sign-up form.
- Signed agents: The sign-up page opens. The check on the form still applies.
- Agents in a person's browser: Not measured yet.

Sign-up page checked 12 Oct 2026. Signed agents: the ones Cloudflare verifies.

## Checkpoints

- **Docs**: Headless: developers.gorgias.com/llms.txt and .md reference pages with OpenAPI 3.1.0; markdown via Accept: text/markdown. Help center docs.gorgias.com answers our agent with a Cloudflare challenge (403, cf-mitigated: challenge).
- **Sign up**: Blocked: Web form only, with an invisible Cloudflare Turnstile (plus reCAPTCHA v3): no Turnstile token after 20 s, 'Create my account' stayed disabled; the first submit hung on loading.
- **Verify**: Not reached: not reached: no account
- **Key**: Not reached: not reached: no account. REST uses Basic auth with an API key; no documented API/CLI to create one. MCP OAuth: DCR registration worked headless, but a token needs a signed-in user on /authorize (no device flow, no CIMD).
- **First call**: Not reached: MCP tools/call without a token -> 401; no account to authorize.
- **First action**: Not reached: not reached: no account
- **Pay**: Not reached: No 402 on the site or MCP, no MPP/Stripe Projects/x402 Bazaar listing, no MCP payment tools. We paid nothing: no 402 on the product's domain asks for USDC. Pricing says 'Start free trial No credit card required'. The paid checkout is inside the account, which we did not reach.
- **Cancel**: Not reached: not tested: no plan or trial was started because sign-up never completed. Gorgias has paid plans, so this is 'not tested', not 'nothing recurs'. The help center with the cancel docs also answered our agent with a Cloudflare challenge.
- **Delete**: Not reached: not reached: no account was created

## Does Gorgias have an MCP server, and can an agent connect to it?

Yes. Gorgias has an official MCP server. The server lists 155 tools and signs an agent in with OAuth.

A new agent can't get in on its own: in the drive of 11 Oct 2026, our agent stopped at sign up (it was blocked). Through the MCP server, 1 of our agent's 3 attempts worked.

## How does an AI agent get a Gorgias API key?

Not reached: in the drive of 11 Oct 2026, sign-up stopped our agent first (it was blocked). not reached: no account. REST uses Basic auth with an API key; no documented API/CLI to create one. MCP OAuth: DCR registration worked headless, but a token needs a signed-in user on /authorize (no device flow, no CIMD).

## Paying the agent way

Payment not reached.

No card needed to start.

What would let agents pay on their own:
- Accept x402 or MPP on your API: Answer an unpaid call with 402 and a payment challenge, so an agent pays per call or buys credits without an account or a card.
- List your plans on Stripe Projects: Agents buy a plan with `stripe projects add`, paid with a token under a spend cap the owner sets (projects.dev).
Ways to pay checked 11 Oct 2026.

## What an agent can do

- Read the API reference as markdown and list the official MCP server's 155 tools without an account
- Register an OAuth client for the MCP server headless (DCR)

## What it cannot do

- Create an account: Invisible Cloudflare Turnstile on the sign-up form never cleared for our agent's browser; no API sign-up
- Get an API key or MCP token: Needs an account; MCP OAuth needs a signed-in human consent, no device flow
- Call the REST API while obeying robots.txt: Tenant hosts ({domain}.gorgias.com) serve robots.txt Disallow: / for all agents
- Read the help center docs: docs.gorgias.com answers with a Cloudflare managed challenge

## Tips for the owner

1. Let verified agents through sign-up
2. Allow /api/ in tenant robots.txt
3. Add device flow or CIMD to MCP OAuth
4. Let signed agents read the help center
5. Answer MCP server/discover before auth
6. Offer an agent payment route

Is this your product? Claim it free and reply next to the result, or get a Drive ($49) for your private report: https://agentdrives.com/pricing?via=md#drive. Fixed something? Order a Drive ($49) any time, or the Monthly drive ($29/month).

## Also in Customer support

- [Intercom](https://agentdrives.com/tools/intercom.md?via=md): L1 · Needs a person · [Gorgias vs Intercom](https://agentdrives.com/compare/gorgias-vs-intercom?via=md)
- [Chatwoot](https://agentdrives.com/tools/chatwoot.md?via=md): L1 · Needs a person · [Gorgias vs Chatwoot](https://agentdrives.com/compare/chatwoot-vs-gorgias?via=md)
- [Crisp](https://agentdrives.com/tools/crisp.md?via=md): L1 · Needs a person · [Gorgias vs Crisp](https://agentdrives.com/compare/crisp-vs-gorgias?via=md)
- [Freshdesk](https://agentdrives.com/tools/freshdesk.md?via=md): L1 · Needs a person · [Gorgias vs Freshdesk](https://agentdrives.com/compare/freshdesk-vs-gorgias?via=md)
- [Front](https://agentdrives.com/tools/front.md?via=md): L1 · Needs a person · [Gorgias vs Front](https://agentdrives.com/compare/front-vs-gorgias?via=md)
- [Help Scout](https://agentdrives.com/tools/helpscout.md?via=md): L1 · Needs a person · [Gorgias vs Help Scout](https://agentdrives.com/compare/gorgias-vs-helpscout?via=md)
- [Plain](https://agentdrives.com/tools/plain.md?via=md): L1 · Needs a person · [Gorgias vs Plain](https://agentdrives.com/compare/gorgias-vs-plain?via=md)
- [tawk.to](https://agentdrives.com/tools/tawk.md?via=md): L1 · Needs a person · [Gorgias vs tawk.to](https://agentdrives.com/compare/gorgias-vs-tawk?via=md)
- [Zendesk](https://agentdrives.com/tools/zendesk.md?via=md): L1 · Needs a person · [Gorgias vs Zendesk](https://agentdrives.com/compare/gorgias-vs-zendesk?via=md)

## Tips for agent builders

- Use the official MCP server at https://mcp.gorgias.com/mcp?gorgias_subdomain=<sub>; a human does the OAuth consent once
- Read API docs as .md on developers.gorgias.com; docs.gorgias.com may challenge you
- Tenant REST hosts disallow all paths in robots.txt: prefer MCP