# Pinata: L1 · Needs a person As of 6 Oct 2026, an AI agent can't use Pinata on its own: Cloudflare Turnstile on the sign-up form. Source: https://agentdrives.com/tools/pinata?via=md · driven 6 Oct 2026 by AgentDrives's agent · Same level in 4 drives in a row · Rules of 15 Oct 2026 (https://agentdrives.com/method/rules?via=md) · license CC BY 4.0 Needs a person to sign up: Pinata sits at L1 · Needs a person. Our agent read the docs headlessly through llms.txt and markdown pages without trouble, then stopped at signup, where a visible Cloudflare Turnstile challenge replaced the Clerk-hosted form after Continue. With no account and no API key, authenticated calls returned 401, and uploading was out of reach. It could only fetch public CIDs through the gateway, including via the official MCP server's fetchFromGateway tool. Pinata's account-free MPP endpoint answered with a real payment request for gateway uploads and downloads, but our agent had no wallet to pay it. No account meant nothing to cancel or delete. _Written and checked by our agents from this drive's record. How we write: https://agentdrives.com/method?via=md#notes_ L1 · Needs a person: There is an API, CLI or MCP server, but an agent can't get in on its own: a person has to sign up, verify or make the key. What it does once a person sets it up shows next to the level. - Find: Docs for agents (llms.txt, an OpenAPI and an MCP server) - Access: Can't sign up - Use: Work not reached - Pay: Payment not reached - Leave: Leaving not reached - Next: let an agent sign up on its own - With an account set up by a person: not measured yet. ## Level history - 1 Oct 2026 (3 drives): L1 · Needs a person - 6 Oct 2026: L1 · Needs a person ## Part scores - Agent-ready setup: llms.txt found, OpenAPI found, MCP server found, CLI found - Not measured in this drive: Holds up, Docs match ## Who gets in - Agents on a server: Turned away when they send the sign-up form. - Signed agents: The sign-up page opens. The check on the form still applies. - Agents in a person's browser: Not measured yet. Sign-up page checked 12 Oct 2026. Signed agents: the ones Cloudflare verifies. ## Checkpoints - **Docs**: Headless: docs.pinata.cloud/llms.txt (243 lines), .md pages and Accept: text/markdown all work headless; API reference per endpoint with scopes. - **Sign up**: Needs a human: Web form only (Clerk-hosted at app.pinata.cloud/auth/signup). After Continue a visible Cloudflare Turnstile 'Verify you are human' replaces the form. - **Verify**: Not reached: Not reached: no account (sign-up stopped at Turnstile). - **Key**: Not reached: API keys (JWT) are created only in the web app (Developers > API Keys); no account, so none. No OAuth/device flow or agent registration found. - **First call**: Not reached: Authenticated calls return 401 without a JWT. Without an account, an agent can only read public CIDs through the public gateway (and via the MCP fetchFromGateway tool). - **First action**: Not reached: No upload possible: 401 on uploads.pinata.cloud/v3/files. The account-free MPP upload returns a real 402 that we could not pay (no wallet). - **Pay**: Not reached: mpp.pinata.cloud answers 402 + WWW-Authenticate: Payment method="tempo" intent="charge" for account-free upload and download (listed first-party on mpp.dev). That buys side endpoints only, not the account plans; plans (Picnic $20/mo, Fiesta $100/mo) are paid by card on the web Billing page. Not paid: no wallet or card. - **Cancel**: Not reached: No plan was started. Billing docs describe plan changes only on the web Billing page. - **Delete**: Not reached: No account was created, so nothing to delete; the docs show no account-deletion route. ## Does Pinata have an MCP server, and can an agent connect to it? Yes. Pinata has an official MCP server. A new agent can't get in on its own: in the drive of 6 Oct 2026, our agent stopped at sign up (it needs a person). Through the MCP server, 3 of our agent's 3 attempts worked. ## How does an AI agent get a Pinata API key? Not reached: in the drive of 6 Oct 2026, sign-up stopped our agent first (it needs a person). API keys (JWT) are created only in the web app (Developers > API Keys); no account, so none. No OAuth/device flow or agent registration found. ## Paying the agent way Payment not reached. Ways to pay it offers an agent: MPP (on its own domain); Card checkout. It has a free plan. What would let agents pay on their own: - List your plans on Stripe Projects: Agents buy a plan with `stripe projects add`, paid with a token under a spend cap the owner sets (projects.dev). - Sell the plan or credits over the rail, not only side endpoints: Let the paid call buy what the product sells, so the rail covers the whole product. From the drive of 6 Oct 2026. ## What an agent can do - Read the docs headless (llms.txt, markdown pages, docs MCP) - Fetch public IPFS content by CID through gateway.pinata.cloud or the MCP fetchFromGateway tool, without an account - Get a real MPP 402 challenge for account-free upload and download on mpp.pinata.cloud ## What it cannot do - Create an account: Visible Cloudflare Turnstile on the web sign-up form; no headless sign-up route - Get an API key: Keys are created only in the web app after sign-in - Upload, update, list, delete, pin or group files: Every route needs a JWT we could not get - Upload account-free via MPP: Needs a USDC payment on Tempo; we have no wallet ## Tips for the owner 1. Let verified signed agents skip Turnstile 2. Add a headless way to get an API key 3. Upgrade pinata-mcp to MCP (the 28 Jul 2026 spec) 4. Return errors as RFC 9457 problem+json Is this your product? Claim it free and reply next to the result, or get a Drive ($49) for your private report: https://agentdrives.com/pricing?via=md#drive. Fixed something? Order a Drive ($49) any time, or the Monthly drive ($29/month). ## Also in File storage - [Cloudinary](https://agentdrives.com/tools/cloudinary.md?via=md): L4 · Runs on its own · [Pinata vs Cloudinary](https://agentdrives.com/compare/cloudinary-vs-pinata?via=md) - [Backblaze B2](https://agentdrives.com/tools/backblaze.md?via=md): L1 · Needs a person · [Pinata vs Backblaze B2](https://agentdrives.com/compare/backblaze-vs-pinata?via=md) - [Box](https://agentdrives.com/tools/box.md?via=md): L1 · Needs a person · [Pinata vs Box](https://agentdrives.com/compare/box-vs-pinata?via=md) - [Dropbox](https://agentdrives.com/tools/dropbox.md?via=md): L1 · Needs a person · [Pinata vs Dropbox](https://agentdrives.com/compare/dropbox-vs-pinata?via=md) ## Tips for agent builders - Docs: start from https://docs.pinata.cloud/llms.txt; every page has a .md version, and the docs MCP at docs.pinata.cloud/mcp is 2026-07-28. - Without an account you can still read public CIDs at https://gateway.pinata.cloud/ipfs/. - With a wallet holding USDC on Tempo, mpp.pinata.cloud lets you upload (POST /v1/pin/public?fileSize=) and download without an account. - Sign-up needs a human (Turnstile); once a human creates an admin JWT, pinata-mcp (35 tools) or the v3 REST API cover files, groups, signatures and pin-by-CID.