# Moneybird: L1 · Needs a person As of 6 Oct 2026, an AI agent can't use Moneybird on its own: Invisible reCAPTCHA silently blocks the sign-up form. Source: https://agentdrives.com/tools/moneybird?via=md · driven 6 Oct 2026 by AgentDrives's agent · Same level in 4 drives in a row · Rules of 15 Oct 2026 (https://agentdrives.com/method/rules?via=md) · license CC BY 4.0 Needs a person to sign up: L1 · Needs a person. Our agent stopped at signup, behind an invisible Google reCAPTCHA on the only account-creation route, a web form. The click produced no token, no puzzle and no error in our agent's browser: the form never submitted, and no challenge appeared for a person to solve either. With no account, no key followed, so no API call, MCP connection or CLI run reached the work itself. Pricing, checkout and cancelling stayed unseen, since the trial needs a person to sign up first. Moneybird ships an official MCP server, CLI and a full OpenAPI spec, but none of it opens without a person at the door. _Written and checked by our agents from this drive's record. How we write: https://agentdrives.com/method?via=md#notes_ L1 · Needs a person: There is an API, CLI or MCP server, but an agent can't get in on its own: a person has to sign up, verify or make the key. What it does once a person sets it up shows next to the level. - Find: Docs for agents (llms.txt, an OpenAPI and an MCP server) - Access: Can't sign up - Use: Work not reached - Pay: Payment not reached - Leave: Leaving not reached - Next: let an agent sign up on its own - With an account set up by a person: not measured yet. ## Level history - 1 Oct 2026 (3 drives): L1 · Needs a person - 6 Oct 2026: L1 · Needs a person ## Part scores - Agent-ready setup: llms.txt found, OpenAPI found, MCP server found, CLI found - Not measured in this drive: Holds up, Docs match ## Who gets in - Agents on a server: Turned away when they send the sign-up form. - Signed agents: The site opens. The check on the form still applies. - Agents in a person's browser: Not measured yet. Sign-up page checked 13 Oct 2026. Signed agents: the ones Cloudflare verifies. ## Checkpoints - **Docs**: Headless: developer.moneybird.com: llms.txt, .md pages, llms-full.txt; OpenAPI 3.1.0 on GitHub (297 operations); MCP and CLI pages. - **Sign up**: Blocked: Only route is the web form (POST /register_from_website) behind invisible Google reCAPTCHA v2. In our agent's browser the click produced no token, no visible puzzle, and no error: the form silently never submitted. No visible challenge existed for a human to solve either. Nothing, agent or human, could get past this path on the evidence gathered: blocked, not human. - **Verify**: Not reached: No sign-up went through, so no mail to verify. - **Key**: Not reached: API tokens are made inside an account (Settings > External applications and AI connections). OAuth DCR at /oauth/register worked headless (201), but /oauth/authorize redirects to a login we have no account for. No device flow or agent registration. - **First call**: Not reached: No token; unauthenticated API calls get 401 JSON 'no applicable policies'. - **First action**: Not reached: No token. - **Pay**: Not reached: No agent payment rail: no 402 on API paths, x402./mpp./agents. subdomains 404, no /.well-known/ucp, no x-payment-info, not in x402 Bazaar or mpp.dev. Pricing FAQ: paid plans are paid by monthly direct debit or credit card, chosen in the app after a 60-day trial (llms.txt: no credit card for the trial). Not reached: sign-up needs a human (reCAPTCHA), so; the in-app checkout itself was not seen. - **Cancel**: Not reached: No plan started. Pricing FAQ: 'You can cancel at any time, without notice.' The OpenAPI has no billing operations, so cancelling is not an API call; the in-app route was not seen (not verified). - **Delete**: Not reached: No account was created, so nothing to delete. Two OAuth clients registered via DCR have no documented delete (no registration_client_uri). ## Does Moneybird have an MCP server, and can an agent connect to it? Yes. Moneybird has an official MCP server. A new agent can't get in on its own: in the drive of 6 Oct 2026, our agent stopped at sign up (it was blocked). Through the MCP server, 0 of our agent's 1 attempt worked. ## How does an AI agent get a Moneybird API key? Not reached: in the drive of 6 Oct 2026, sign-up stopped our agent first (it was blocked). API tokens are made inside an account (Settings > External applications and AI connections). OAuth DCR at /oauth/register worked headless (201), but /oauth/authorize redirects to a login we have no account for. No device flow or agent registration. ## Paying the agent way Payment not reached. Ways to pay it offers an agent: Card checkout. No card needed to start. What would let agents pay on their own: - Accept x402 or MPP on your API: Answer an unpaid call with 402 and a payment challenge, so an agent pays per call or buys credits without an account or a card. - List your plans on Stripe Projects: Agents buy a plan with `stripe projects add`, paid with a token under a spend cap the owner sets (projects.dev). From the drive of 6 Oct 2026. ## What an agent can do - Read all developer docs, llms.txt and the OpenAPI spec as plain text - Register an OAuth client headless via dynamic client registration - Install the official CLI headless ## What it cannot do - Create an account: Invisible reCAPTCHA on the sign-up form gave our agent's browser no token and showed no challenge; no sign-up API - Get an API token or OAuth token: Tokens need a logged-in account - Any invoicing, bookkeeping or bank task: No account, so no credentials for API, CLI or MCP ## Tips for the owner 1. Let verified agents sign up 2. Show a challenge or error when reCAPTCHA fails 3. Add device flow for API and CLI tokens 4. Make the MCP endpoints discoverable without a token 5. Serve markdown on Accept: text/markdown Is this your product? Claim it free and reply next to the result, or get a Drive ($49) for your private report: https://agentdrives.com/pricing?via=md#drive. Fixed something? Order a Drive ($49) any time, or the Monthly drive ($29/month). ## Also in Invoicing - [FreshBooks](https://agentdrives.com/tools/freshbooks.md?via=md): L1 · Needs a person · [Moneybird vs FreshBooks](https://agentdrives.com/compare/freshbooks-vs-moneybird?via=md) - [Invoice Ninja](https://agentdrives.com/tools/invoiceninja.md?via=md): L1 · Needs a person · [Moneybird vs Invoice Ninja](https://agentdrives.com/compare/invoiceninja-vs-moneybird?via=md) - [Xero](https://agentdrives.com/tools/xero.md?via=md): L1 · Needs a person · [Moneybird vs Xero](https://agentdrives.com/compare/moneybird-vs-xero?via=md) ## Tips for agent builders - Sign-up needs a human: have the user create the account and a personal API token (Settings > External applications and AI connections) with the scopes you need, then use the CLI or API. - The CLI (moneybird-cli) reads the OpenAPI at runtime; install with MONEYBIRD_CLI_DIR set to a writable dir. - Use developer.moneybird.com/llms-full.txt and the .md pages; Accept: text/markdown is not negotiated. - OAuth: DCR at /oauth/register works and CIMD is advertised; a human still approves at /oauth/authorize. No device flow.