ReqRes
reqres.inReqRes is a hosted mock backend and test sandbox for developers and AI agents.
Can an AI agent use ReqRes? Yes, without signing up. Our agent got into ReqRes on its own in 3 minutes and did 7 of its 8 core tasks.
Category
API testing and mocking
Connects by
MCP, API
Agent payments
None found
Driven 26 Oct 2026
From finding it to leaving
What an agent managed without a person, at each step.
- On its own
Find
Docs it can act on: llms.txt, an OpenAPI and an MCP server.
9 doc pages read
- On its own
Get in
Got in without signing up. Sign-up by API: stopped by robots.txt; Email and password: stopped by a CAPTCHA.
3 minutes
- On its own
Use
Did: create collections and create, update, list and delete records, each read back; read seeded users and orders from the sandbox with no key.
7 of 8 core tasks
- Not reached
Pay
Paying needs an account.
- On its own
Leave
Nothing to cancel, deletes what it made.
Getting in
3 of 6 ways in worked without a person.
The way that worked
No key needed3 minutes
- An inboxNot needed
- A browserNot needed
- A personNot needed
- Agent on a serverAPI, MCP, CLIPartlyWithout an account (no key needed) it gets an API key, makes its first API call and does 7 of its 8 core tasks. Payment wasn't tried.
- Assistant in its own browserLike ChatGPT agentNoSigning up needs a person: it asks for a bot check.
- Signed agentNot checkedNot checked: its robots.txt asks crawlers to stay off the sign-up page.
Every way in
| Way in | What happened | Why |
|---|---|---|
| No key needed | Worked | |
| Runs locally, no account | Worked | |
| Try first, claim later | Worked | |
| Sign-up by API | Stopped by robots.txt | |
| Email and password | Stopped by a CAPTCHA | |
| Company single sign-on | Not tried | Needs a person's account |
- Crawlersrobots.txt asks crawlers to stay off sign-up and the API. Nothing to fix. It keeps these pages out of search and doesn't stop agents signing up.
What an agent can do with ReqRes
7 of 8 core tasks done, and 3 of 15 others. One task not tried isn't counted.
Core tasks
- done there
- tried, not done
- offered, not tried
| Task | Result | Through |
|---|---|---|
| Create a project (hosted backend) | Done | API: offered, not triedMCP: done there |
| Create a collection | Done | API: offered, not triedMCP: done there |
| Create or update a record in a collection | Done | API: offered, not triedMCP: done there |
| List and read records with filters | Done | API: offered, not triedMCP: done there |
| List deterministic agent sandbox fixture data (users, orders) | Done | API: done there |
| Trigger a deliberate failure scenario | Done | API: done there |
| Simulate a payment (create, confirm, decline, refund) | Done | API: done there |
| Run a scripted multi-step failure chain | Partly | API: tried, not done |
| Read demo fixture users with no signup or key | Blocked | API: tried, not done |
Reliability
90of 100
Core tasks that worked on all 3 runs
Handles mistakes
80of 100
Clear errors, retries without duplicates, honest limits
Surface tested
31of 100
Documented routes, tools and commands run and checked
Docs accuracy
93of 100
Documented operations that behaved as the docs say
Docs completeness
47of 100
How fully the docs describe each operation
What it can't do, and why
- Use the REST API, including the keyless demo users Robots.txt closes /api/ to AI agents.
- Make a dashboard account A visible Cloudflare Turnstile on the sign-up form.
- Filter records, change collections or delete a project Only offered over the closed REST API; MCP has no tool.
- Run chains, trajectories, webhooks and 12 of 15 scenarios They need the $49/mo agent key.
- Pay for a plan Plans are bought in the dashboard, which needs an account.
- Create or revoke API keys Keys are managed only in the dashboard.
3 of 15 other tasks done
- Read a keyless demo trajectory (sample benchmark run)Done
- Download a scenario pack (chains, seeds, expected trajectories)Done
- Complete an MFA challenge in the agent sandbox auth flowDone
- Register a webhook on a sandbox payment event: They need the $49/mo agent key.Paid plan
- List trajectories recorded from agent sandbox callsPaid plan
- Diff two trajectories for divergencePaid plan
- Register and log in a demo userBlocked
- Authenticate an app's end users via magic-link loginBlocked
- Manage app users (create, update, delete)Blocked
- Execute a custom endpoint with a user-defined responseBlocked
- Run automations on collection data changesBlocked
- Browse collections and inspect request logs (Data Explorer)Blocked
- Export stored objects from the Data ExplorerBlocked
- Generate an API from a UI screenshot (Image to API)Blocked
- Create and manage API keys with scoped permissionsBlocked
- Run the sandbox offline via a self-hosted Docker imageBlocked
- License ReqRes for commercial/company-wide useNot tried
- Sponsor a placement on the siteNot tried
The plans they need
- Run a scripted multi-step failure chainAgent Developer ($49/mo)
- List trajectoriesAgent Developer ($49/mo)
- Diff two trajectoriesAgent Developer ($49/mo)
- Register a payments webhookAgent Developer / Agent Platform
- 12 of 15 failure scenariosAgent Developer ($49/mo)
Paid-plan tasks don't count toward the level. The drive used the free plan (no-account MCP project and keyless sandbox).
Surface audit: 87 documented operations, 29 run, 27 passed, 2 not as documented, 58 blocked (sandbox or plan limits).
How an agent connects
MCP, API, OpenAPI and llms.txt found.
MCP server
All testedOfficial server. 7 tools, no auth.
In the MCP registry as
in.reqres/reqres.7 tools across its docs
7 tools listed without signing in
API
20 testedREST, 64 operations in openapi.json; /api/ closed to AI agents by robots.txt.
75 operations across its docs
OpenAPI
Yes3.0.3; payments sandbox routes missing.
CLI
None foundSDK
None foundllms.txt
YesAgent payments
None foundThe checkout wasn't reached: Lite, $5 a month.
Docs
Some gapsCovers getting started, auth, error codes and code examples.
7 of 13 documented ways to do the core work worked when tried.
9 pages read
MCP tools
create_projectlist_collectionscreate_collectionlist_recordscreate_recordupdate_recorddelete_record
Read without signing in on 31 Oct 2026
Tips for agent builders
- Use the MCP server at https://reqres.in/mcp (no auth): create_project returns the keys; pass the manage key as the api_key argument of every tool.
- Wrap fields in {"data": {...}} only on REST; MCP create_record takes the fields in data directly.
- For error-handling tests call /agent/v1/scenarios/rate-limited, validation-error and malformed-json; filter on the X-Agent-Sandbox-Intentional header.
- Agent sandbox calls are byte-deterministic at a given seed and X-World-Version: pin both in assertions.
- Payments sandbox: send an Idempotency-Key on every POST; attach a payment method with POST /sim/payments/v1/payment_intents/{id} before /confirm.
- The free agent sandbox allows 100 calls a day per IP; check /agent/v1/health for remaining_today.
- On x86-64 the self-hosted image has no amd64 build: its app is plain Node (Cmd node selfhosted/server.js in /app, no native modules), so the unpacked layers run with a local node and PORT set; without DATABASE_URL chains and trajectories fail.
- For scripted failure chains without a paid key, run the self-hosted image's app (node selfhosted/server.js) and send X-Agent-Chain: flaky-then-recover with an X-Agent-Run-Id; reset with DELETE /agent/v1/chains/{name}/state.
For the team behind ReqRes
Our agent didn't reach Pay. Prove ReqRes is yours, then see where each issue is, read your safety findings and ask for a free drive after a fix. How to fix each one comes with the Audit.
8 things to fix for agents
Agent blockers: 2 foundAgent surfaces: 10 issues foundSafety review: 2 issues found
- FindClear
- Get inClear
- UseClear
- PayNot reached
- LeaveClear
Where ReqRes fits
- Category
- Tasks
- Vendors
- Cloudflareon one way in
Found an error? Tell us on this page or read how corrections work.
Questions people ask about ReqRes
- Can an AI agent sign up for ReqRes on its own?
- Our agent got into ReqRes without signing up. Its ways in: No key needed, in 3 min; Runs locally, no account, in 4 min; Try first, claim later, in 2 min.
- Does ReqRes have an MCP server, and can an agent connect to it?
- Yes. ReqRes has an official MCP server. The server lists 7 tools. A new agent can get in on its own: in the drive of 26 Oct 2026, our agent got working access without signing up. Through the MCP server, 4 of our agent's 4 attempts worked.
- How does an AI agent get a ReqRes API key?
- In the drive of 26 Oct 2026, our agent got its ReqRes API key over the API, without a browser or a person. No API to create, rotate or revoke keys: dashboard only.
- Can an AI agent delete its ReqRes account?
- Not applicable: our agent used ReqRes without an account, and it deletes what it made.
Cite this page
The page as a reference, in plain text, APA and BibTeX.
Cite this
AgentDrives, “ReqRes: AI agent test drive”, 26 October 2026, https://agentdrives.com/tools/reqres. CC BY 4.0.
AgentDrives. (2026, October 26). ReqRes: AI agent test drive. https://agentdrives.com/tools/reqres
@misc{agentdrives_reqres_2026,
author = {{AgentDrives}},
title = {ReqRes: AI agent test drive},
year = {2026},
month = oct,
url = {https://agentdrives.com/tools/reqres},
note = {Agent test drive, CC BY 4.0},
}Something wrong on this page?
Tell us what's wrong. We check it against the drive and correct the page, with the date.