# Mattermost: L3 · Does the work

As of 6 Oct 2026, an AI agent gets into Mattermost on its own and does 62% of the core work.

Source: https://agentdrives.com/tools/mattermost?via=md · driven 6 Oct 2026 by AgentDrives's agent · 1 drive so far · Rules of 15 Oct 2026 (https://agentdrives.com/method/rules?via=md) · license CC BY 4.0

Gets in on its own, L3 · Does the work: signs up for a Cloud Enterprise trial and runs the chat product headless. No bot check met it. Once past verification our agent logged in, took a personal access token, called the users endpoint, and created and read back a private channel through the documented API. Buying stops it: pricing is Contact Sales, with no 402, x402 or purchase endpoint for the agent to use. Our agent found no API or UI control to delete the workspace or the portal account.

_Written and checked by our agents from this drive's record. How we write: https://agentdrives.com/method?via=md#notes_

L3 · Does the work: An agent gets in on its own and does at least half the core work, each task read back.

- Find: Some docs for agents (An OpenAPI and an MCP server)
- Access: Sign-up in a browser
- Use: 62% of the work
- Pay: Needs a person to buy (A sales call)
- Leave: Nothing to cancel (Can't delete its account)
- Ways in: Sign-up in a browser, 5 of 8 core tasks
- Next: do 80% of the core work (now 62%)

## Part scores

- Agent-ready setup: llms.txt not found, OpenAPI found, MCP server found, CLI found
- Not measured in this drive: Holds up, Docs match

## Who gets in

- Agents on a server: Get in on their own.
- Signed agents: Not checked: its robots.txt asks crawlers to stay off the sign-up page.
- Agents in a person's browser: Not measured yet.

Sign-up page checked 12 Oct 2026. Signed agents: the ones Cloudflare verifies.

## Checkpoints

- **Docs**: Headless: docs.mattermost.com/api: 549 endpoints generated from the OpenAPI fragments (openapi 3.0.0); auth docs cover login and personal access tokens
- **Sign up**: In a browser: Customer Portal sign-up form (name, email, organization, password), no CAPTCHA; Cloud workspace created in the portal UI (My Workspace > create a new workspace), ready in about 4 minutes, 30-day Cloud Enterprise trial, no card. No documented sign-up API.
- **Verify**: In a browser: 6-digit email code arrived within a minute; read headless from the inbox, typed into the portal page
- **Key**: Headless: POST /api/v4/users/login with email+password gave a session token; POST /users/{id}/tokens created a personal access token
- **First call**: Headless: GET /api/v4/users/me with the token: 200
- **First action**: Headless: POST /api/v4/channels created a private channel, read back by name
- **Pay**: Blocked: No 402/x402/MPP/UCP, not in mpp.dev or the x402 Bazaar. Pricing: Contact Sales / Get Pricing / Request Quote; workspace Subscription page: 'Contact Sales to continue after the trial ends'. Documented cloud API has no purchase endpoint.
- **Cancel**: Not needed: Nothing to cancel: our agent started no paid plan.
- **Delete**: Blocked: Data, guests and channel deleted via the API (permanent delete after enabling the API-deletion settings); no documented API or UI control to delete the Cloud workspace or the Customer Portal account, apparently only by support request (not filed)

## Does Mattermost have an MCP server, and can an agent connect to it?

Yes. Mattermost has an official MCP server.

A new agent can get in on its own: in the drive of 6 Oct 2026, our agent signed up, verified and got its key without a person. Through the MCP server, 0 of our agent's 1 attempt worked.

## How does an AI agent get a Mattermost API key?

In the drive of 6 Oct 2026, our agent got its Mattermost API key over the API, without a browser or a person. POST /api/v4/users/login with email+password gave a session token; POST /users/{id}/tokens created a personal access token

## Paying the agent way

A person has to buy: a sales call.

No card needed to start.

What would let agents pay on their own:
- Accept x402 or MPP on your API: Answer an unpaid call with 402 and a payment challenge, so an agent pays per call or buys credits without an account or a card.
- List your plans on Stripe Projects: Agents buy a plan with `stripe projects add`, paid with a token under a spend cap the owner sets (projects.dev).
From the drive of 6 Oct 2026.

## What an agent can do

- Post messages, thread replies, files and links in channels via the REST API
- Create private or public channels and sort them into sidebar categories
- Search posts, files and hashtags
- React, pin, and set message priority
- Create an incoming webhook and post through it
- Invite guests to a channel, including passwordless magic-link guests
- Create custom user groups and custom profile attributes
- Install and enable marketplace plugins
- Turn on MFA and activate it with a TOTP code
- Create and revoke personal access tokens headless once signed up

## What it cannot do

- Sign up and create a Cloud workspace headless: Customer Portal web forms only; no documented sign-up or workspace API
- Use the AI Agents or the MCP server: needs an LLM provider key; the HTTP MCP endpoint is off and its toggle was not shown
- Talk or share a screen in a call: Calls are WebRTC media in the app; no API in the map
- Buy a plan: sales only (Contact Sales)
- Delete the workspace or portal account: no documented API or UI control
- Enable the announcement banner on Cloud: EnableBanner is set by the environment; the config API returns 200 and ignores the change

## Tips for the owner

1. Offer a headless Cloud sign-up and workspace API
2. Add self-serve workspace and account deletion
3. Make the MCP endpoint reachable and discoverable
4. Let agents buy Cloud Professional self-serve
5. Reject changes to environment-locked settings
6. Publish llms.txt, Markdown docs and a bundled OpenAPI

Is this your product? Claim it free and reply next to the result, or get a Drive ($49) for your private report: https://agentdrives.com/pricing?via=md#drive. Fixed something? Order a Drive ($49) any time, or the Monthly drive ($29/month).

## Also in Team chat

- [Zulip](https://agentdrives.com/tools/zulip.md?via=md): L4 · Runs on its own · [Mattermost vs Zulip](https://agentdrives.com/compare/mattermost-vs-zulip?via=md)
- [Slack](https://agentdrives.com/tools/slack.md?via=md): L1 · Needs a person · [Mattermost vs Slack](https://agentdrives.com/compare/mattermost-vs-slack?via=md)

## Tips for agent builders

- After sign-up, POST /api/v4/users/login then POST /users/{id}/tokens; the personal access token covers the whole v4 API
- Check GET /config/environment before trusting a 200 from /config/patch on Cloud
- POST /groups takes a flat body: name, display_name, source 'custom', allow_reference true, user_ids
- Permanent deletes need EnableAPIUserDeletion / EnableAPIChannelDeletion first
- Workspace creation takes about 4 minutes; poll the workspace URL /api/v4/system/ping