AgentDrives
Free check
Kitkit.com

Can an AI agent use Kit (kit.com)?

As of 6 Oct 2026, an AI agent can't use Kit on its own: Cloudflare challenge on the sign-up page.

Level 1 · Needs a personAgents can't get in on their own.

To reach L2 · Gets in: let an agent sign up on its own.

With an account set up by a person: not measured yet.

What the levels mean
Visit Kit Follow changes

Driven 6 Oct 2026Same level in 3 drives in a rowRules of 15 Oct 2026Claim this page

Written and checked by our agents from this drive's record. How we write.

Who gets in

  • Agents on a serverStopped before the sign-up page.
  • Signed agentsThe sign-up page opens.
  • Agents in a person's browserNot measured yet.

Sign-up page checked 12 Oct 2026. Signed agents: the ones Cloudflare verifies. Where agents come from

What an agent can do in Kit (kit.com).

On its own

  • Read all of Kit's developer documentation and API reference automatically
  • Register itself as a developer app with Kit's system automatically

What it can't, and why

  • Create a Kit accountA human verification checkbox blocked the agent
  • Get an API key to use Kit's featuresKeys are only available after creating an account through the web app
  • Do any real work like sending emails or managing subscribersNo account and no key means every feature was unreachable
Needs a person

Can an AI agent sign up for Kit on its own?

No. Sign-up: needs a human. app.kit.com/users/signup returns 403 cf-mitigated: challenge headless; in the browser it shows 'Are you a robot?' with a Cloudflare 'Verify you are human' checkbox that did not clear.

Official server · 1 of 3 calls worked

Does Kit (kit.com) have an MCP server, and can an agent connect to it?

Yes. Kit has an official MCP server.

A new agent can't get in on its own: in the drive of 6 Oct 2026, our agent stopped at sign up (it needs a person). Through the MCP server, 1 of our agent's 3 attempts worked.

What the drive found

APIOpenAPIMCP · official–CLI–SDKllms.txtWebhooks–Sandbox

Not reached in this drive: the API key, deleting the account and paying. Every checkpoint, in detail

For the team behind Kit.

Where agents stop in Kit (kit.com) today, and the fixes that get them further, highest impact first.

Stops at sign up

The fixes, highest impact first

  1. Let signed agents through to sign-upStep-by-step guide
  2. Open kit.com robots.txt, llms.txt and pricing
  3. Let an agent get a key without the web appStep-by-step guide
3 more fixes
  1. Advertise CIMD and drop DCR-only registration Step-by-step guide
  2. Return problem+json errors
  3. Offer plan upgrade and account delete via API Step-by-step guide
  • Claim it free and reply next to the result.
  • A Drive, $49: your private report, with where agents stop, the evidence and the fixes that move your level.
  • Fixed something? Order a Drive ($49) any time, or the Monthly drive ($29/month).
Get a DriveClaim it free
See the example report
Details

Your API, MCP server or CLI is the product? An Audit ($299) also checks every documented route, MCP tool and CLI command against your docs. Compare plans.

Already claimed it? Open it in your dashboard.

Rather not be driven? Block AgentDrivesAgent in robots.txt or write to us. We stop driving it ourselves; this page stays, with its date.

Embed the badge on your site

Driven · L1 · Needs a person badge

Behind the level.

Our agent couldn't get into Kit (kit.com), so the work, its reliability and the crash test aren't measured. The part scores are what it could judge from the outside.

Part scores · level history

Part scores

Agent-ready setup

  • llms.txt
  • OpenAPI
  • MCP server
  • CLI

Not measured in this drive: Holds up, Docs match (part of an Audit).

Level history

  1. 1 Oct 20262 drivesL1Needs a person
  2. 6 Oct 2026L1Needs a person

For agents and builders.

The drive as data, every checkpoint and all 27 attempts.

How an agent connects · 5 tips

/api/tools/kit.json/tools/kit.mdMCP get_tool {"slug":"kit"}

  • Use developers.kit.com: llms.txt, the .md pages (or Accept: text/markdown) and the OpenAPI at /api-reference/v4.json; kit.com and help.kit.com challenge agents.
  • The Developer Docs MCP at https://developers.kit.com/mcp speaks 2026-07-28 without auth: tools search_kit_developer_documentation and query_docs_filesystem_kit_developer_documentation.
  • You need a human to create the account and the API key; then send X-Kit-Api-Key on api.kit.com (120 requests per 60 s; OAuth 600).
  • Kit's docs say free plans and lapsed trials get 401 on API and webhook endpoints, and the Kit MCP needs a paid plan: check plan_type on GET /v4/account first.
  • Bulk and purchase endpoints need OAuth, not an API key.
Every checkpoint, in detail · 9 checkpoints
  1. DocsHeadlessdevelopers.kit.com is open to our signed agent: llms.txt index of .md pages, Markdown by Accept header and .md URL, OpenAPI 3.0.3 at /api-reference/v4.json, a read-only Developer Docs MCP (the 28 Jul 2026 spec). kit.com itself (robots.txt, llms.txt, pricing) and help.kit.com answer 403 with a Cloudflare challenge.
  2. Sign upNeeds a humanapp.kit.com/users/signup returns 403 cf-mitigated: challenge headless; in the browser it shows 'Are you a robot?' with a Cloudflare 'Verify you are human' checkbox that did not clear.
  3. VerifyNot reachedNot reached: no account was created at sign-up.
  4. KeyNot reachedNo account. V4 API keys are made only in the web app (Settings > Developer). Dynamic Client Registration at app.kit.com/oauth/register worked headless (201, client_id issued), but a token still needs a signed-in creator to approve. Kit's docs say a free plan or lapsed trial gets 401 on API/webhook endpoints, and the Kit MCP is for paid plans only.
  5. First callNot reachedUnauthenticated GET https://api.kit.com/v4/account returns 401 {"errors":["Authentication Failed"]}; no authenticated call was possible without an account.
  6. First actionNot reachedNot reached: no account and no credentials.
  7. PayNot reachedNo 402, x402, MPP, UCP or auth.md on api.kit.com or app.kit.com (401 or 404 JSON); x402./mpp./agents.kit.com answer with a Cloudflare challenge; OpenAPI has no x-payment-info; no Kit entry found in mpp.dev services or the first 1000 x402 Bazaar resources. Plans are bought in the web app after sign-up, and sign-up needs a human past the Cloudflare check. Pricing page not fetchable (Cloudflare challenge), so plan prices and whether a paid-plan trial needs a card are unknown. The developer docs mention a free plan.
  8. CancelNot reachedNo plan was started.
  9. DeleteNot reachedNo account was created, so delete was not tried. The v4 OpenAPI has no account-delete operation.
The attempt log · 27 attempts
CapabilityRouteResultEvidence
robots.txt / llms.txt on kit.comapifailedAll return HTTP 403 cf-mitigated: challenge (Cloudflare managed challenge page), server: cloudflare, cf-ray a46338cffb3ed113-CDG
llms.txt on developers.kit.com: GET https://developers.kit.com/llms.txtapidone ✓200 text/plain, '# Kit Developer Documentation' index of .md pages incl. MCP overview, Kit MCP, API reference
OAuth metadata: GET app.kit.com/.well-known/oauth-protected-resource(/mcp) and /.well-known/oauth-authorization-serverapidone ✓PRM 200 application/json {resource: https://app.kit.com/mcp, authorization_servers:[https://api.kit.com]}; AS metadata: registration_endpoint https://app.kit.com/oauth/register, grants authorization_code+refresh_token, PKCE S256, no client_id_metadata_document_supported, no device_authorization_endpoint
MCP server/discover (Kit MCP): POST https://app.kit.com/mcp server/discover with MCP-Protocol-Version 2026-07-28mcpblockedHTTP 401 application/json {"error":"Bearer token required"}; WWW-Authenticate: Bearer resource_metadata="https://app.kit.com/.well-known/oauth-protected-resource/mcp"
MCP server/discover (Developer Docs MCP): POST https://developers.kit.com/mcp server/discovermcpdone ✓200 application/json result.supportedVersions ["2026-07-28"], capabilities tools+resources
MCP server card: GET https://app.kit.com/mcp/server-cardmcpfailedHTTP 404 text/html
Markdown docs: GET developers.kit.com/api-reference/overview with Accept: text/markdown, and overview.mdapidone ✓Accept: text/markdown -> 200 content-type text/markdown, Vary includes Accept; .md URL -> 200 text/markdown
Find API docs and OpenAPI: GET https://developers.kit.com/llms.txt and /api-reference/v4.jsonapidone ✓llms.txt lists API reference .md pages and 'OpenAPI Specs - v4 (/api-reference/v4.json)'; v4.json fetched
Sign upapiblockedHTTP 403, cf-mitigated: challenge, server: cloudflare (Cloudflare managed challenge) on the signed request
Sign up: Open https://app.kit.com/users/signup in browserbrowserblockedPage title 'Just a moment...', text 'Are you a robot? Hey There! Sorry for the inconvenience, but we need to confirm you're not a robot.' with Cloudflare 'Verify you are human' Turnstile checkbox (screenshot browser/shots/002.png); did not clear after 12 s
Sign upnoneblocked
OAuth client registration (DCR): POST https://app.kit.com/oauth/register (RFC 7591) as an MCP client wouldapidone ✓201 application/json client_id issued, token_endpoint_auth_method none, grant_types [authorization_code] (refresh_token dropped)
API key / OAuth token: Get a V4 API key (Settings > Developer) or an OAuth tokennoneblockedNo Kit account: sign-up blocked by the Cloudflare challenge; API keys are created only in the web app (https://app.kit.com/account_settings/developer_settings per docs/authentication.md)
First API call: GET https://api.kit.com/v4/account without and with an invalid X-Kit-Api-Keyapifailed401 application/json {"errors":["Authentication Failed"]}; invalid key -> 401 {"errors":["The API key is invalid"]}
Create a landing page or embedded form to collect subscribers: Attempt Create a landing page or embedded form to collect subscribers on accountnoneblockedNo account and no credentials: sign-up at app.kit.com/users/signup is behind a Cloudflare 'Verify you are human' challenge
Add a subscriber to a form (grow the list): Attempt Add a subscriber to a form (grow the list) on accountnoneblockedNo account and no credentials: sign-up at app.kit.com/users/signup is behind a Cloudflare 'Verify you are human' challenge
Draft and send a broadcast (newsletter email) to all or a segment of subscribers: Attempt Draft and send a broadcast (newsletter email) to all or a segment of subscribers on accountnoneblockedNo account and no credentials: sign-up at app.kit.com/users/signup is behind a Cloudflare 'Verify you are human' challenge
Schedule a broadcast for future delivery: Attempt Schedule a broadcast for future delivery on accountnoneblockedNo account and no credentials: sign-up at app.kit.com/users/signup is behind a Cloudflare 'Verify you are human' challenge
Publish a post to the creator's Kit website (web + email): Attempt Publish a post to the creator's Kit website (web + email) on accountnoneblockedNo account and no credentials: sign-up at app.kit.com/users/signup is behind a Cloudflare 'Verify you are human' challenge
Build a visual automation (branching workflow triggered by subscriber actions): Attempt Build a visual automation (branching workflow triggered by subscriber actions) on accountnoneblockedNo account and no credentials: sign-up at app.kit.com/users/signup is behind a Cloudflare 'Verify you are human' challenge
Create and run an email sequence (ordered autoresponder series): Attempt Create and run an email sequence (ordered autoresponder series) on accountnoneblockedNo account and no credentials: sign-up at app.kit.com/users/signup is behind a Cloudflare 'Verify you are human' challenge
Enroll (or remove) a subscriber on a sequence: Attempt Enroll (or remove) a subscriber on a sequence on accountnoneblockedNo account and no credentials: sign-up at app.kit.com/users/signup is behind a Cloudflare 'Verify you are human' challenge
Sell a digital product or subscription (creator commerce storefront): Attempt Sell a digital product or subscription (creator commerce storefront) on accountnoneblockedNo account and no credentials: sign-up at app.kit.com/users/signup is behind a Cloudflare 'Verify you are human' challenge
Add, update, or unsubscribe a subscriber: Attempt Add, update, or unsubscribe a subscriber on accountnoneblockedNo account and no credentials: sign-up at app.kit.com/users/signup is behind a Cloudflare 'Verify you are human' challenge
Buy a plan the agent way: Probe 402/x402/MPP/UCP: api.kit.com paths unauthenticated, x402./mpp./agents.kit.com, /.well-known/ucp, /auth.md, OpenAPI x-payment-info, x402 Bazaar (first 1000 of 34835 resources), mpp.dev/api/services (137 services)apifailedapi.kit.com /v4/* -> 401 (no 402); x402./mpp./agents.kit.com -> 403 cf-mitigated: challenge; api.kit.com and app.kit.com /.well-known/ucp, /auth.md -> 404 JSON; v4.json has no x-payment-info; no kit.com/convertkit entry in the Bazaar page fetched or in mpp.dev services; kit.com/pricing -> Cloudflare challenge (headless and browser)
Cancel plan: Cancel or downgrade a plannoneskippedNo plan was started (no account)
Delete account: Delete the account and its datanoneskippedNo account was created. OpenAPI v4 has no account-delete operation (DELETE routes only for broadcasts, custom fields, sequences, tags, webhooks, locations)

Also in Email marketing.

All of Email marketing, by level