# Netlify: L2 · Gets in As of 11 Oct 2026, an AI agent gets into Netlify on its own and does 10% of the core work. Source: https://agentdrives.com/tools/netlify?via=md · driven 11 Oct 2026 by AgentDrives's agent · Same level in 2 drives in a row · Rules of 15 Oct 2026 (https://agentdrives.com/method/rules?via=md) · license CC BY 4.0 L2 · Gets in. Our agent got in on its own: `netlify deploy --allow-anonymous` pushed a static page live with no account, and the docs match the way an agent reads them: llms.txt, every page as Markdown, OpenAPI, and netlify.ai agent instructions. It stopped at sign-up: the email form reset after an invisible reCAPTCHA check, so no token, functions, edge functions or project management followed. Work done stayed at one deploy and one read-back through the CLI. Paying was never reached, and with no account created there was nothing to delete: our agent's own anonymous projects wouldn't delete either, each attempt returning an authentication error. _Written and checked by our agents from this drive's record. How we write: https://agentdrives.com/method?via=md#notes_ L2 · Gets in: An agent gets in on its own, by any way the product offers: its own sign-up, a key by API, pay per call or no key at all. It does less than half the core work, or the work isn't measured yet. - Find: Docs for agents (llms.txt, an OpenAPI and an MCP server) - Access: Try first, claim later (Can't sign up for one) - Use: 10% of the work - Pay: Payment not reached - Leave: Leaves on its own (Nothing to cancel, what it made goes after 1 hour) - Ways in: Try first, claim later, 1 of 10 core tasks - Next: let an agent sign up for an account on its own (without one it does 10% of the core work) - With an account set up by a person: not measured yet. ## Level history - 6 Oct 2026: L2 · Gets in - 11 Oct 2026: L2 · Gets in ## Part scores - Agent-ready setup: llms.txt found, OpenAPI found, MCP server found, CLI found - Not measured in this drive: Holds up, Docs match ## Who gets in - Agents on a server: Get in on their own. - Signed agents: The sign-up page opens. - Agents in a person's browser: Not measured yet. Sign-up page checked 12 Oct 2026. Signed agents: the ones Cloudflare verifies. ## Checkpoints - **Docs**: Headless: docs.netlify.com/llms.txt, every docs page as .md and via Accept: text/markdown, OpenAPI 2.0 at open-api.netlify.com/swagger.json linked from /.well-known/api-catalog, netlify.ai agent instructions. - **Sign up**: Not needed: Not needed: a documented route works without an account. - **Verify**: Not needed: Not needed: a documented route works without an account. - **Key**: Not needed: Not needed: a documented route works without an account. - **First call**: Headless: netlify deploy --allow-anonymous (documented) works with no account: returns site_id, site_url, claim_url, claim_command and a site password. - **First action**: Headless: A static page deployed anonymously and read back at jolly-axolotl-a13c96.netlify.app (password-protected, 200 after the returned password). Functions and edge functions are refused without auth. - **Pay**: Not reached: No 402 anywhere, no x-payment-info, no /.well-known/ucp; we paid nothing. Netlify appears in the Stripe Projects catalog (a listing, not confirmed by the vendor). Paid plans are managed in the team billing UI per the docs; the checkout itself was not reached because sign-up was blocked. - **Cancel**: Not needed: Nothing to cancel: our agent used the free plan. - **Delete**: Blocked: No Netlify account was created (sign-up blocked), so there is no account to delete. `netlify sites:delete --force` on our two anonymous projects (jolly-axolotl-a13c96, polite-caramel-10c81d) returned 'Authentication required': nothing was deleted and the error leaves no rejected-login evidence either way. Docs say unclaimed projects are removed automatically after one hour; that removal was not observed within the drive. ## Does Netlify have an MCP server, and can an agent connect to it? Yes. Netlify has an official MCP server. A new agent can get in on its own: in the drive of 11 Oct 2026, our agent got working access without signing up. Through the MCP server, 0 of our agent's 1 attempt worked. ## How does an AI agent get a Netlify API key? In the drive of 11 Oct 2026, our agent needed no key. Not needed: a documented route works without an account. ## Paying the agent way Payment not reached. Ways to pay it offers an agent: Stripe Projects (on its own domain). It has a free plan. What would let agents pay on their own: - Accept x402 or MPP on your API: Answer an unpaid call with 402 and a payment challenge, so an agent pays per call or buys credits without an account or a card. Ways to pay checked 11 Oct 2026. ## What an agent can do - Deploy a static site with no account through the CLI (netlify deploy --allow-anonymous) and get a live URL plus a claim link - Resize and convert images on its own deployed site through the Image CDN (/.netlify/images) - Read every docs page as Markdown and the full OpenAPI spec ## What it cannot do - Create an account: The email sign-up form silently drops the submit after an invisible reCAPTCHA Enterprise check - Get an API token or use the MCP server: Every token route needs a signed-in account - Deploy functions or edge functions without an account: Anonymous deploy refuses them: 'require authentication' - Manage domains, env vars, rollbacks, forms, build settings: All need a token - Delete its anonymous projects: sites:delete needs auth; they expire after one hour ## Tips for the owner 1. Show an error when sign-up is rejected 2. Let a verified agent sign up headless 3. Let agents claim with a code, not a browser 4. Allow functions in anonymous deploys 5. Document the anonymous site password 6. Serve MCP server/discover and support CIMD 7. Publish OpenAPI 3.x Is this your product? Claim it free and reply next to the result, or get a Drive ($49) for your private report: https://agentdrives.com/pricing?via=md#drive. Fixed something? Order a Drive ($49) any time, or the Monthly drive ($29/month). ## Also in Hosting and deploys - [Railway](https://agentdrives.com/tools/railway.md?via=md): L3 · Does the work · [Netlify vs Railway](https://agentdrives.com/compare/netlify-vs-railway?via=md) - [Fly.io](https://agentdrives.com/tools/fly.md?via=md): L2 · Gets in · [Netlify vs Fly.io](https://agentdrives.com/compare/fly-vs-netlify?via=md) - [Vercel](https://agentdrives.com/tools/vercel.md?via=md): L2 · Gets in · [Netlify vs Vercel](https://agentdrives.com/compare/netlify-vs-vercel?via=md) - [Render](https://agentdrives.com/tools/render.md?via=md): L1 · Needs a person · [Netlify vs Render](https://agentdrives.com/compare/netlify-vs-render?via=md) ## Tips for agent builders - Use `netlify deploy --allow-anonymous --dir --no-build --json` to ship a static site with no account; keep the returned password, the site answers 401 without it, and hand the claim_url to a human within one hour. - Anonymous deploys refuse functions and edge functions; deploy only static files that way. - `netlify login --request --json` gives a URL for a human to approve and a check_command to poll for ten minutes. - Every docs page is Markdown at .md; the OpenAPI is Swagger 2.0 at open-api.netlify.com/swagger.json.