# Heap: L1 · Needs a person

As of 12 Oct 2026, an AI agent can't use Heap on its own: reCAPTCHA image puzzle on sign-up form.

Source: https://agentdrives.com/tools/heap?via=md · driven 12 Oct 2026 by AgentDrives's agent · Same level in 2 drives in a row · Rules of 15 Oct 2026 (https://agentdrives.com/method/rules?via=md) · license CC BY 4.0

Needs a person to get in: L1 · Needs a person. Our agent read Heap's docs, which already suit an agent well: an llms.txt, Markdown pages, and an OpenAPI definition on every reference page. Sign-up only runs through a web form, and submitting it showed a reCAPTCHA image puzzle our agent couldn't get past. No account was made, so verifying, getting a key and calling the API were never reached. Paying wasn't tested either: checkout sits behind the same sign-up, and Heap's Growth pricing asks a person to sign up for an estimate. With no account, there was nothing to cancel or delete.

_Written and checked by our agents from this drive's record. How we write: https://agentdrives.com/method?via=md#notes_

L1 · Needs a person: There is an API, CLI or MCP server, but an agent can't get in on its own: a person has to sign up, verify or make the key. What it does once a person sets it up shows next to the level.

- Find: Some docs for agents (llms.txt and an OpenAPI)
- Access: Can't sign up
- Use: Work not reached
- Pay: Payment not reached
- Leave: Leaving not reached
- Next: let an agent sign up on its own
- With an account set up by a person: not measured yet.

## Level history

- 6 Oct 2026: L1 · Needs a person
- 12 Oct 2026: L1 · Needs a person

## Part scores

- Agent-ready setup: llms.txt found, OpenAPI found, CLI not found
- Not measured in this drive: Holds up, Docs match

## Who gets in

- Agents on a server: Stopped by a CAPTCHA on the sign-up form.
- Signed agents: The sign-up page opens. The CAPTCHA on the form stops them too.
- Agents in a person's browser: Not measured yet.

Sign-up page checked 12 Oct 2026. Signed agents: the ones Cloudflare verifies.

## Checkpoints

- **Docs**: Headless: developers.heap.io/llms.txt (200 text/plain); .md pages and Accept: text/markdown give text/markdown with Vary: Accept; OpenAPI 3.1.0 embedded in each server-side reference page.
- **Sign up**: Needs a human: Web form only (heapanalytics.com/signup). On submit a reCAPTCHA v2 image puzzle appeared.
- **Verify**: Not reached: Not reached: sign-up stopped at reCAPTCHA.
- **Key**: Not reached: Not reached. Docs: API key generated in the web app (Account > Manage > Privacy & Security); POST /api/public/v0/auth_token swaps app_id:api_key for a token.
- **First call**: Not reached: Not reached: server-side APIs need your own workspace app_id.
- **First action**: Not reached: Not reached.
- **Pay**: Not reached: No 402 on any host, no MPP/Stripe Projects/Bazaar listing, no billing API in docs. Pricing: Free up to 10k monthly sessions; Growth 'Sign up and install the free snippet to get an estimate!'. Checkout behind sign-up, not seen. We paid nothing.
- **Cancel**: Not reached: not tested: no plan or trial was started. No billing API documented; cancel presumably in the web app (unknown).
- **Delete**: Not reached: No account was created, so nothing to delete. Docs list no account-deletion API (only the end-user User Deletion API).

## Does Heap (heap.io) have an MCP server, and can an agent connect to it?

No. The drive found no MCP server for Heap.

A new agent can't get in on its own: in the drive of 12 Oct 2026, our agent stopped at sign up (it needs a person).

## How does an AI agent get a Heap (heap.io) API key?

Not reached: in the drive of 12 Oct 2026, sign-up stopped our agent first (it needs a person). Not reached. Docs: API key generated in the web app (Account > Manage > Privacy & Security); POST /api/public/v0/auth_token swaps app_id:api_key for a token.

## Paying the agent way

Payment not reached.

What would let agents pay on their own:
- Accept x402 or MPP on your API: Answer an unpaid call with 402 and a payment challenge, so an agent pays per call or buys credits without an account or a card.
- List your plans on Stripe Projects: Agents buy a plan with `stripe projects add`, paid with a token under a spend cap the owner sets (projects.dev).
Ways to pay checked 12 Oct 2026.

## What an agent can do

- Read Heap's developer docs as Markdown via developers.heap.io/llms.txt and .md pages

## What it cannot do

- Create a Heap account: reCAPTCHA image puzzle on the only (web) sign-up form
- Send events, identify users, build charts: needs a workspace app_id or login, behind sign-up
- Get an API key headless: docs say the key is generated in the web app only

## Tips for the owner

1. Let verified agents sign up
2. Let agents create API keys headless
3. Publish an official Heap MCP server
4. Add a billing API or agent rail
5. Return problem+json errors on the API

Is this your product? Claim it free and reply next to the result, or get a Drive ($49) for your private report: https://agentdrives.com/pricing?via=md#drive. Fixed something? Order a Drive ($49) any time, or the Monthly drive ($29/month).

## Also in Product analytics

- [Mixpanel](https://agentdrives.com/tools/mixpanel.md?via=md): L3 · Does the work · [Heap vs Mixpanel](https://agentdrives.com/compare/heap-vs-mixpanel?via=md)
- [Amplitude](https://agentdrives.com/tools/amplitude.md?via=md): L1 · Needs a person · [Heap vs Amplitude](https://agentdrives.com/compare/amplitude-vs-heap?via=md)
- [PostHog](https://agentdrives.com/tools/posthog.md?via=md): L1 · Needs a person · [Heap vs PostHog](https://agentdrives.com/compare/heap-vs-posthog?via=md)

## Tips for agent builders

- Start at developers.heap.io/llms.txt; every page has a .md version with an embedded OpenAPI 3.1.0 definition
- Server-side endpoints live on heapanalytics.com (EU: c.eu.heap-api.com); Track is limited to 30 requests per 30 s per identity per app_id
- A human must sign up (reCAPTCHA) and generate the API key in the web app