# PandaDoc: L1 · Needs a person As of 15 Oct 2026, an AI agent can't use PandaDoc on its own: Invisible reCAPTCHA refuses sign-up. Source: https://agentdrives.com/tools/pandadoc?via=md · driven 15 Oct 2026 by AgentDrives's agent · Same level in 2 drives in a row · Rules of 15 Oct 2026 (https://agentdrives.com/method/rules?via=md) · license CC BY 4.0 Needs a person to get in: PandaDoc sits at L1, stopped before any work could start. Sign-up passes both steps of the free trial form, then the final submit answers "Captcha is not valid": an invisible reCAPTCHA refuses our agent's browser without showing a challenge, so there is no step a human could clear either. The docs open without an account: llms.txt, markdown pages, a full OpenAPI spec and the docs MCP all load headless. Only the key page, the official OAuth MCP login and every API call sit behind the account the captcha refused, so none of the core capabilities could be tried. Paying and cancelling were never reached: no account was created. _Written and checked by our agents from this drive's record. How we write: https://agentdrives.com/method?via=md#notes_ L1 · Needs a person: There is an API, CLI or MCP server, but an agent can't get in on its own: a person has to sign up, verify or make the key. What it does once a person sets it up shows next to the level. - Find: Docs for agents (llms.txt, an OpenAPI and an MCP server; a docs page for each core task) - Access: Can't sign up - Use: Work not reached - Pay: Payment not reached - Leave: Leaving not reached - Next: let an agent sign up on its own - With an account set up by a person: not measured yet. - robots.txt asks crawlers to stay off sign-up and the API. Nothing to fix. It keeps these pages out of search and doesn't stop agents signing up. ## Level history - 6 Oct 2026: L1 · Needs a person - 15 Oct 2026: L1 · Needs a person ## Part scores - Agent-ready setup: llms.txt found, OpenAPI found, MCP server found, CLI not found - Not measured in this drive: Holds up, Docs match ## Who gets in - Agents on a server: Stopped before the sign-up page. - Signed agents: Stopped by a check before the sign-up page. - Agents in a person's browser: Not measured yet. Sign-up page checked 15 Oct 2026. Signed agents: the ones Cloudflare verifies. ## Ways in - Email and password: Stopped by a CAPTCHA - Sign-in for apps (OAuth, MCP): Stopped by a CAPTCHA ## The docs 242 of 246 pages read. Complete. - A getting-started page - An auth page - Errors listed with their codes - Code examples on most pages - Newest page updated 2 Oct 2026 - A page for 9 of 9 core tasks ## Checkpoints - **Docs**: Headless: developers.pandadoc.com: llms.txt, markdown pages (.md and Accept: text/markdown), OpenAPI 3.0.3 (94 paths, 128 operations), agent-skills index, docs MCP; all fetched headless. - **Sign up**: Blocked: The free 14-day trial form (no card) at signup.pandadoc.com took both steps, then the final POST /api/flow/{id}/signup/ answered 400 "Captcha is not valid": an invisible reCAPTCHA refused our agent's browser with no challenge shown, so there is nothing a human could solve. - **Verify**: Not reached: No account was created, so no verification mail came to the agent's inbox. - **Key**: Not reached: API keys come from the Dev Center in the web app (Production keys need sales approval); MCP OAuth (DCR worked headless) ends at the PandaDoc login. Both need the account the captcha refused. - **First call**: Not reached: No key or token: every API operation and the product MCP need an account. - **First action**: Not reached: Not reached: no account. - **Pay**: Not reached: No 402, x402 or MPP anywhere; we paid nothing. No billing API in the OpenAPI. Support docs: plans change in Settings > Billing > Manage plan, paid by card or PayPal. The 14-day trial needs no card. The checkout could not be walked: no account, and the public pricing page answers our agent's browser with a Vercel Security Checkpoint block (Code 21). is graded from the docs, not seen. - **Cancel**: Not reached: Nothing to cancel: no account and no plan were started. Support docs: cancel in Settings > Billing after "Before you cancel, please contact us first" and a cancellation form. - **Delete**: Not reached: No account was created (sign-up refused). Support docs: "If you'd like to delete your account, please reach out to our Support team" (by mail only). The sign-up flow record bAEozEjxQWvqeHz5YDRKuX with our test email stays on PandaDoc's side. ## Does PandaDoc have an MCP server, and can an agent connect to it? Yes. PandaDoc has an official MCP server. The server is hosted and signs an agent in with OAuth. A new agent can't get in on its own: in the drive of 15 Oct 2026, our agent stopped at sign up (it was blocked). Through the MCP server, 0 of our agent's 8 attempts worked. ## How does an AI agent get a PandaDoc API key? Not reached: in the drive of 15 Oct 2026, sign-up stopped our agent first (it was blocked). API keys come from the Dev Center in the web app (Production keys need sales approval); MCP OAuth (DCR worked headless) ends at the PandaDoc login. Both need the account the captcha refused. ## Paying the agent way Payment not reached. The checkout: The checkout wasn't reached; No CAPTCHA at checkout. What would let agents pay on their own: - Accept x402 or MPP on your API: Answer an unpaid call with 402 and a payment challenge, so an agent pays per call or buys credits without an account or a card. - List your plans on Stripe Projects: Agents buy a plan with `stripe projects add`, paid with a token under a spend cap the owner sets (projects.dev). Ways to pay checked 15 Oct 2026. ## What an agent can do - Read the full API docs, OpenAPI and llms.txt as markdown, headless - Query the keyless docs MCP (the 28 Jul 2026 spec) about the API - Register an OAuth client for the PandaDoc MCP by DCR, headless ## What it cannot do - Create an account: Invisible reCAPTCHA on the final sign-up call answers "Captcha is not valid" to our agent's browser - Log in: Imperva answers the login POST with a bot page - Any document, template, signing or quote work (all 9 core capabilities): Every API and MCP call needs an account and key/token - See pricing or walk the checkout: Vercel Security Checkpoint blocks www.pandadoc.com for our agent; no account for Settings > Billing ## Tips for the owner 1. Let verified agents through the sign-up captcha 2. Let signed agents through login bot protection 3. Offer an API or MCP sign-up for sandbox 4. Add CIMD to the MCP authorization server 5. Let signed agents read the pricing page 6. Offer account deletion in the app or API Is this your product? Claim it free and reply next to the result, or get a Drive ($49) for your private report: https://agentdrives.com/pricing?via=md#drive. Fixed something? Order a Drive ($49) any time, or the Monthly drive ($29/month). ## Also in E-signature - [DocuSeal](https://agentdrives.com/tools/docuseal.md?via=md): L4 · Runs on its own · [PandaDoc vs DocuSeal](https://agentdrives.com/compare/docuseal-vs-pandadoc?via=md) - [SignWell](https://agentdrives.com/tools/signwell.md?via=md): L3 · Does the work · [PandaDoc vs SignWell](https://agentdrives.com/compare/pandadoc-vs-signwell?via=md) - [DocuSign](https://agentdrives.com/tools/docusign.md?via=md): L1 · Needs a person · [PandaDoc vs DocuSign](https://agentdrives.com/compare/docusign-vs-pandadoc?via=md) ## Tips for agent builders - Docs are agent-friendly: llms.txt, .md pages, Accept: text/markdown, OpenAPI at /openapi/pandadoc-public-api.json and a keyless docs MCP at developers.pandadoc.com/mcp - With an account made by a person, the product MCP is https://mcp.pandadoc.com/v1/mcp (EU: mcp.pandadoc.eu) with OAuth by DCR; the API uses Authorization: API-Key - The sign-up SPA loses its step if the page reloads: do it in one session