PandaDocpandadoc.comCan an AI agent use PandaDoc?
As of 15 Oct 2026, an AI agent can't use PandaDoc on its own: Invisible reCAPTCHA refuses sign-up.
Level 1 · Needs a personAgents can't get in on their own.
- Find: Docs for agents: llms.txt, an OpenAPI and an MCP server; a docs page for each core task.
- Access: Can't sign up.
- Use: Work not reached.
- Pay: Payment not reached.
- Leave: Leaving not reached.
To reach L2 · Gets in: let an agent sign up on its own.
With an account set up by a person: not measured yet.
What the levels meanDriven 15 Oct 2026Same level in 2 drives in a rowRules of 15 Oct 2026Claim this page
Written and checked by our agents from this drive's record. How we write.
Who gets in
- Agents on a serverStopped before the sign-up page.
- Signed agentsStopped by a check before the sign-up page.
- Agents in a person's browserNot measured yet.
Sign-up page checked 15 Oct 2026. Signed agents: the ones Cloudflare verifies. Where agents come from
What an agent can do in PandaDoc.
On its own
- Read all the developer documentation, guides and API reference without a human
- Ask a documentation chatbot questions about the API
- Set up the technical handshake for a connection to PandaDoc's AI assistant (short of actually logging in)
What it can't, and why
- Create an accountAn invisible security check silently rejects the sign-up form
- Log inA separate security system blocks the login page
- Create, send, sign, or track any document or quoteAll of this needs an account, which could not be created
1 more
- See pricing or complete a purchaseThe pricing page is also blocked by a security check, and there is no account to reach billing
Can an AI agent sign up for PandaDoc on its own?
No. Sign-up: blocked. The free 14-day trial form (no card) at signup.pandadoc.com took both steps, then the final POST /api/flow/{id}/signup/ answered 400 "Captcha is not valid": an invisible reCAPTCHA refused our agent's browser with no challenge shown, so there is nothing a human could solve.
Every way in it offers, as our agent tried them
| Way in | What happened |
|---|---|
| Email and password | Stopped by a CAPTCHA |
| Sign‑in for apps (OAuth, MCP) | Stopped by a CAPTCHA |
Does PandaDoc have an MCP server, and can an agent connect to it?
Yes. PandaDoc has an official MCP server. The server is hosted and signs an agent in with OAuth.
A new agent can't get in on its own: in the drive of 15 Oct 2026, our agent stopped at sign up (it was blocked). Through the MCP server, 0 of our agent's 8 attempts worked.
What the drive found
APIOpenAPIMCP · official–CLIllms.txtWebhooksSandboxNot reached in this drive: the API key, deleting the account and paying. Every checkpoint, in detail
For the team behind PandaDoc.
Where agents stop in PandaDoc today, and the fixes that get them further, highest impact first.
Stops at sign up
The fixes, highest impact first
- Let verified agents through the sign-up captchaStep-by-step guide
- Let signed agents through login bot protectionStep-by-step guide
- Offer an API or MCP sign-up for sandboxStep-by-step guide
3 more fixes
- Add CIMD to the MCP authorization server Step-by-step guide
- Let signed agents read the pricing page Step-by-step guide
- Offer account deletion in the app or API
- Claim it free and reply next to the result.
- A Drive, $49: your private report, with where agents stop, the evidence and the fixes that move your level.
- Fixed something? Order a Drive ($49) any time, or the Monthly drive ($29/month).
Details
Your API, MCP server or CLI is the product? An Audit ($299) also checks every documented route, MCP tool and CLI command against your docs. Compare plans.
Already claimed it? Open it in your dashboard.
Rather not be driven? Block AgentDrivesAgent in robots.txt or write to us. We stop driving it ourselves; this page stays, with its date.
Embed the badge on your site
Behind the level.
Our agent couldn't get into PandaDoc, so the work, its reliability and the crash test aren't measured. The part scores are what it could judge from the outside.
Part scores · the docs · level history
Part scores
Agent-ready setup
- llms.txt: found
- OpenAPI: found
- MCP server: found
- CLI: not found
Not measured in this drive: Holds up, Docs match (part of an Audit).
The docs
242 of 246 pages read. Complete.
- A getting-started page
- An auth page
- Errors listed with their codes
- Code examples on most pages
- Newest page updated 2 Oct 2026
- A page for 9 of 9 core tasks
Read on 15 Oct 2026.
Level history
- 6 Oct 2026L1Needs a person
- 15 Oct 2026L1Needs a person
For agents and builders.
The drive as data, every checkpoint and all 54 attempts.
How an agent connects · 3 tips
/api/tools/pandadoc.json/tools/pandadoc.mdMCP get_tool {"slug":"pandadoc"}
- Docs are agent-friendly: llms.txt, .md pages, Accept: text/markdown, OpenAPI at /openapi/pandadoc-public-api.json and a keyless docs MCP at developers.pandadoc.com/mcp
- With an account made by a person, the product MCP is https://mcp.pandadoc.com/v1/mcp (EU: mcp.pandadoc.eu) with OAuth by DCR; the API uses Authorization: API-Key <key>
- The sign-up SPA loses its step if the page reloads: do it in one session
Every checkpoint, in detail · 9 checkpoints
- DocsHeadlessdevelopers.pandadoc.com: llms.txt, markdown pages (.md and Accept: text/markdown), OpenAPI 3.0.3 (94 paths, 128 operations), agent-skills index, docs MCP; all fetched headless.
- Sign upBlockedThe free 14-day trial form (no card) at signup.pandadoc.com took both steps, then the final POST /api/flow/{id}/signup/ answered 400 "Captcha is not valid": an invisible reCAPTCHA refused our agent's browser with no challenge shown, so there is nothing a human could solve.
- VerifyNot reachedNo account was created, so no verification mail came to the agent's inbox.
- KeyNot reachedAPI keys come from the Dev Center in the web app (Production keys need sales approval); MCP OAuth (DCR worked headless) ends at the PandaDoc login. Both need the account the captcha refused.
- First callNot reachedNo key or token: every API operation and the product MCP need an account.
- First actionNot reachedNot reached: no account.
- PayNot reachedNo 402, x402 or MPP anywhere; we paid nothing. No billing API in the OpenAPI. Support docs: plans change in Settings > Billing > Manage plan, paid by card or PayPal. The 14-day trial needs no card. The checkout could not be walked: no account, and the public pricing page answers our agent's browser with a Vercel Security Checkpoint block (Code 21). is graded from the docs, not seen.
- CancelNot reachedNothing to cancel: no account and no plan were started. Support docs: cancel in Settings > Billing after "Before you cancel, please contact us first" and a cancellation form.
- DeleteNot reachedNo account was created (sign-up refused). Support docs: "If you'd like to delete your account, please reach out to our Support team" (by mail only). The sign-up flow record bAEozEjxQWvqeHz5YDRKuX with our test email stays on PandaDoc's side.
The attempt log · 54 attempts
| Capability | Route | Result | Evidence |
|---|---|---|---|
| Docs: Read docs, llms.txt, OpenAPI | api | done ✓ | llms.txt (52 KB) at developers.pandadoc.com/llms.txt; OpenAPI pandadoc-public-api.json openapi 3.0.3, info.version 8.22.0, 94 paths, server https://api.pandadoc.com; api-catalog linkset; agent-skills index (read-the-docs SKILL.md) |
| Docs: MCP server/discover on product MCP https://mcp.pandadoc.com/v1/mcp | api | done ✓ | POST server/discover 2026-07-28 -> 401, WWW-Authenticate: Bearer resource_metadata="https://mcp.pandadoc.com/.well-known/oauth-protected-resource/v1/mcp"; PRM 200 JSON (authorization_servers https://mcp.pandadoc.com/, scopes read write documents:read documents:edit documents:send); AS metadata has registration_endpoint (DCR), no client_id_metadata_document_supported, no device endpoint; /v1/mcp/server-card 404 |
| Docs: MCP server/discover on docs MCP https://developers.pandadoc.com/mcp (ReadMe) | api | done ✓ | 200 JSON supportedVersions ["2026-07-28"], serverInfo "PandaDoc for Developers: API Reference, SDK, and Documentation"; server card at developers.pandadoc.com/.well-known/mcp/server-card.json (application/json, remotes streamable-http) |
| Docs: A2A agent card, AI catalog, aipref, markdown | api | done ✓ | agent-card.json 404 on developers.; www.pandadoc.com answers 429 Vercel Security Checkpoint (x-vercel-mitigated: challenge) to our signed agent; ai-catalog.json 404/301; no Content-Usage in robots.txt of app./api./developers.; Accept: text/markdown on developers docs -> text/markdown, Vary: Accept; .md URLs -> text/markdown |
| Sign up: Sign up for the free 14-day trial (no card) at signup.pandadoc.com with the agent's inbox | browser | blocked | Form steps 1 (email+password) and 2 (first/last name, company size Solo, team Other) accepted (POST /api/flow 201, /steps 201); final POST /api/flow/{id}/signup/ -> 400 {"detail":"Captcha is not valid","code":"captcha"}; page shows "Something went wrong. There was a problem creating your account. Please try again or contact us." No mail arrived. Invisible reCAPTCHA (no visible challenge) scored our agent's browser as a bot. |
| login: Check whether an account was created anyway: log in at app.pandadoc.com/login | browser | blocked | POST https://app.pandadoc.com/login/ answered 200 with an Imperva/Incapsula bot page (<META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW"> ... /_Incapsula_Resource script) instead of a login result; the page stays on the login form, no error shown |
| Sign up | none | skipped | No keyless API: every documented operation needs an API key or OAuth token (OpenAPI security apiKey/oauth2); developer docs and docs MCP are keyless but only docs |
| Sign up | none | skipped | No local edition, CLI or self-hosted product documented |
| Sign up | none | skipped | No claimable resource documented |
| Sign up | none | skipped | pay_probe.json: no 402 / x402 / MPP anywhere; pay_tx.json: nothing paid |
| Sign up | none | skipped | No sign-up API or /auth.md documented; developers.pandadoc.com quick start sends to a web Sandbox account sign-up; pandadoc.com/auth.md answered 429 (Vercel checkpoint) to door probe |
| Sign up | none | skipped | No agent_auth in https://mcp.pandadoc.com/.well-known/oauth-authorization-server |
| Sign up | none | skipped | No Sign in with AgentID offered on sign-up or login |
| Sign up | none | skipped | Only email+password on the form |
| Sign up | none | skipped | Only email+password on the form |
| Sign up | none | skipped | No GitHub button on signup or login |
| Sign up | none | skipped | Google offered on signup and login; pw sso google: this drive has no Google account |
| Sign up | none | skipped | LinkedIn offered on signup and login; our agent has no LinkedIn account |
| Sign up | none | skipped | Microsoft and Slack offered on login only; no account of ours there |
| Sign up | none | skipped | Not listed on Stripe Projects (pay_probe registries empty) |
| Sign up | none | skipped | No CLI; MCP AS metadata lists no device_authorization_endpoint |
| Sign up: MCP OAuth: register a client by DCR and sign in to https://mcp.pandadoc.com/v1/mcp | mcp | blocked | POST https://mcp.pandadoc.com/register (DCR) -> 201 client_id issued, headless. /authorize -> mcp.pandadoc.com/consent "Application Access Request" (Allow Access / Deny); Allow -> https://app.pandadoc.com/login/?next=/oauth2/authorize...: needs a PandaDoc account, which the sign-up refused (captcha) and whose login POST Imperva answers with a bot page |
| Pay: Public pay probes: 402/x402/MPP, registries, billing API, trial card | api | done ✓ | pay_probe.json: no 402 on pandadoc.com, api., x402./mpp./agents. (no such hosts); registries (mpp.dev, Stripe Projects, x402 Bazaar) empty; pay_tx.json: nothing paid ("no 402 on the product's own endpoint ..."). OpenAPI (94 paths) has no billing/subscription operations. Sign-up page: "Start a free 14-day trial / NO CREDIT CARD REQUIRED". Support "Account Billing and Ownership": plan changes at Settings > Billing > Manage plan, card or PayPal under Settings > Payment details. |
| Pay: Walk to the last click of the cheapest paid plan | browser | blocked | No account (sign-up refused by captcha), so Settings > Billing cannot be opened. Public pricing page https://www.pandadoc.com/pricing/ answers our agent's browser with "Vercel Security Checkpoint, Failed to verify your browser, Code 21". |
| Key: Create an API key headless | api | blocked | Docs: keys come from the Dev Center in the web app ("visit the Dev Center and generate a Sandbox or Production key"; Production keys "require approval. Please contact our Sales team"); POST /public/v1/api-keys exists but itself needs an Org Admin key. No account could be made (sign-up captcha), so no key. |
| Verify: Verify email | none | blocked | No verification mail: the sign-up was refused at the final step ("Captcha is not valid"); inbox the agent's inbox empty |
| First call: First API call (GET /public/v1/members/current) | api | blocked | No key: account not created. api.pandadoc.com robots.txt is "User-agent: * / Disallow: /" (a crawler rule; does not stop an account step) |
| First action: Create a document | api | blocked | No account, no key |
| Cancel: Cancel plan | none | skipped | Nothing started that renews (no account). Support "Account Billing and Ownership": "Before you cancel, please contact us first ... Fill out the form and confirm the cancellation" (Settings > Billing, web UI with a retention form) |
| Delete: Delete account | none | skipped | No account was created (sign-up 400 captcha). Support: "If you'd like to delete your account, please reach out to our Support team." The sign-up flow object bAEozEjxQWvqeHz5YDRKuX holds our email server-side; no way to remove it ourselves. |
| Request online notarization for a document: Check the capability against the docs | api | blocked | OpenAPI 8.22.0 lists ['/public/v2/notary/notarization-requests', '/public/v2/notary/notarization-requests/{session_request_id}']; not callable without an account (sign-up refused by captcha) |
| Manage organization users, workspaces, and member roles: Check the capability against the docs | api | blocked | OpenAPI 8.22.0 lists ['/public/beta/privacy-settings/workspaces/{workspace_id}', '/public/v1/workspaces', '/public/v1/workspaces/{workspace_id}/deactivate', '/public/v1/workspaces/{workspace_id}/members']; not callable without an account (sign-up refused by captcha) |
| Generate and manage API keys: Check the capability against the docs | api | blocked | OpenAPI 8.22.0 lists ['/public/v1/workspaces/{workspace_id}/api-keys']; not callable without an account (sign-up refused by captcha) |
| Apply custom branding (logo, colors) to documents and workspace: Check the capability against the docs | api | blocked | OpenAPI 8.22.0 lists ['/public/beta/privacy-settings/workspaces/{workspace_id}', '/public/v1/workspaces/{workspace_id}/deactivate', '/public/v1/workspaces/{workspace_id}/members', '/public/v1/workspaces/{workspace_id}/members/{member_id}']; not callable without an account (sign-up refused by captcha) |
| Configure workspace AI privacy settings: Check the capability against the docs | api | blocked | OpenAPI 8.22.0 lists ['/public/beta/privacy-settings/workspaces/{workspace_id}']; not callable without an account (sign-up refused by captcha) |
| View API request logs for debugging integrations: Check the capability against the docs | api | blocked | OpenAPI 8.22.0 lists ['/public/v1/logs', '/public/v1/logs/{id}', '/public/v2/logs', '/public/v2/logs/{id}']; not callable without an account (sign-up refused by captcha) |
| Create, send, and sign documents from the PandaDoc mobile app: Check the capability against the docs | none | blocked | No API surface in the OpenAPI; app/UI-only per the map; not callable without an account (sign-up refused by captcha) |
| Connect to CRM/productivity integrations (Salesforce, HubSpot, MS Dynamics, Zapier): Check the capability against the docs | none | blocked | No API surface in the OpenAPI; app/UI-only per the map; not callable without an account (sign-up refused by captcha) |
| Docs claim: Create a document from a template: POST /public/v1/documents | api | blocked | needs an account/key (API) or OAuth sign-in to an account (MCP); sign-up refused by invisible reCAPTCHA |
| Docs claim: Create a document from a template: create document from template (prompt library) | mcp | blocked | needs an account/key (API) or OAuth sign-in to an account (MCP); sign-up refused by invisible reCAPTCHA |
| Docs claim: Create a document from an uploaded PDF/DocX/RTF: POST /public/v1/documents/create | api | blocked | needs an account/key (API) or OAuth sign-in to an account (MCP); sign-up refused by invisible reCAPTCHA |
| Docs claim: Create a document from an uploaded PDF/DocX/RTF: upload a PDF as a new template/document | mcp | blocked | needs an account/key (API) or OAuth sign-in to an account (MCP); sign-up refused by invisible reCAPTCHA |
| Docs claim: Send a document to recipients for signature: POST /public/v1/documents/{id}/send | api | blocked | needs an account/key (API) or OAuth sign-in to an account (MCP); sign-up refused by invisible reCAPTCHA |
| Docs claim: Send a document to recipients for signature: 'Send <document_name>' | mcp | blocked | needs an account/key (API) or OAuth sign-in to an account (MCP); sign-up refused by invisible reCAPTCHA |
| Docs claim: Sign a document (recipient completes fields and e-signs): POST /public/v1/documents/{id}/session (embedded signing) | api | blocked | needs an account/key (API) or OAuth sign-in to an account (MCP); sign-up refused by invisible reCAPTCHA |
| Docs claim: Build/edit document content (pricing tables, text blocks, tables, images, fields) in the drag-and-drop editor: PATCH /public/v1/documents/{id} and content-block endpoints | api | blocked | needs an account/key (API) or OAuth sign-in to an account (MCP); sign-up refused by invisible reCAPTCHA |
| Docs claim: Build/edit document content (pricing tables, text blocks, tables, images, fields) in the drag-and-drop editor: update a text block, populate pricing table | mcp | blocked | needs an account/key (API) or OAuth sign-in to an account (MCP); sign-up refused by invisible reCAPTCHA |
| Docs claim: Create and manage reusable templates: POST /public/v1/templates, PATCH /public/v1/templates/{id}, DELETE /public/v1/templates/{id} | api | blocked | needs an account/key (API) or OAuth sign-in to an account (MCP); sign-up refused by invisible reCAPTCHA |
| Docs claim: Create and manage reusable templates: list/inspect templates | mcp | blocked | needs an account/key (API) or OAuth sign-in to an account (MCP); sign-up refused by invisible reCAPTCHA |
| Docs claim: Build quotes and sales proposals with pricing and product catalog items: PATCH /public/v1/documents/{id}/quotes/{quoteId}; GET/POST /public/v1/catalog-items | api | blocked | needs an account/key (API) or OAuth sign-in to an account (MCP); sign-up refused by invisible reCAPTCHA |
| Docs claim: Build quotes and sales proposals with pricing and product catalog items: create a sales proposal with pricing table | mcp | blocked | needs an account/key (API) or OAuth sign-in to an account (MCP); sign-up refused by invisible reCAPTCHA |
| Docs claim: Track document status and real-time viewer/signer activity: GET /public/v1/documents/{id}/status; webhooks document_state_changed | api | blocked | needs an account/key (API) or OAuth sign-in to an account (MCP); sign-up refused by invisible reCAPTCHA |
| Docs claim: Track document status and real-time viewer/signer activity: 'Check if document has been signed' | mcp | blocked | needs an account/key (API) or OAuth sign-in to an account (MCP); sign-up refused by invisible reCAPTCHA |
| Docs claim: Download a completed/signed document as a verifiable PDF: GET /public/v1/documents/{id}/download-protected | api | blocked | needs an account/key (API) or OAuth sign-in to an account (MCP); sign-up refused by invisible reCAPTCHA |
Also in E-signature.
DocuSealL4Gets in on its ownPandaDoc vs DocuSeal
SignWellL3Gets in on its ownPandaDoc vs SignWell
DocuSignL1Can't sign up on its ownPandaDoc vs DocuSign