Square
squareup.comSquare sells payments, point-of-sale, invoices and banking for small businesses.
Can an AI agent use Square? No. Our agent couldn't get into Square on its own.
From finding it to leaving
What an agent managed without a person, at each step.
- On its own
Find
Docs it can act on: llms.txt, an OpenAPI and an MCP server. 478 doc pages read.
- Stopped
Get in
Stopped hereCan't sign up. An invisible bot check refused the sign-up on both email addresses.
- Not reached
Use
Tasks need an account.
- Not reached
Pay
Buying needs an account.
- Not reached
Leave
Nothing to cancel or delete.
Getting in
None of the 2 ways in worked without a person.
Where it stopped
Email and password
An invisible bot check refused the sign-up on both email addresses.
- Agent on a serverAPI, MCP, CLINoSigning up needs a person: the form refused our agent's browser.
- Assistant in its own browserLike ChatGPT agentPartlyA normal browser got through at sign-up where our scripted one didn't. The steps after it weren't tried in a normal browser.
- Signed agentKnown to CloudflareNot checkedNot checked.
Every way in
| Way in | What happened | Why |
|---|---|---|
| Email and password | Stopped by a CAPTCHA | |
| Sign-in for apps (OAuth, MCP) | Stopped | The consent page needs an account |
- Crawlersrobots.txt asks crawlers to stay off sign-up and the API. Nothing to fix. It keeps these pages out of search and doesn't stop agents signing up.
What an agent can do with Square
No task was tried: our agent couldn't get into Square.
Core tasks Square offers an agent
- offered, not tried
- Accept an online paymentAPI
- Take an in-person paymentAPI
- Create and send an invoiceAPI
- Refund a paymentAPI
- Create a customerAPI
- Create an order for a customerAPI
- Read the account balanceWeb app
- Pay out the balance to a bank accountAPI
- Get an access token or make any call that touches dataTokens come from the Developer Console, which needs an account.
- Use the remote MCP server on the SandboxThe docs say remote instances only reach production.
32 more tasks it offers
- Save a customer's payment methodAPI
- Enable payment methods (Afterpay, Cash App Pay, ACH)Web app
- Create a productAPI
- Update inventory levelsAPI
- Create a discount codeAPI
- Create an estimate or quoteAPI
- Convert an estimate to an invoiceWeb app
- Set up recurring invoicesAPI
- Set up automatic payment remindersAPI
- Request a deposit or retainerAPI
- Accept online payment on an invoiceWeb app
- Build an online store or booking siteWeb app
- Send an email or text marketing campaignWeb app
- Run a sales/payment reportAPI
- Apply for business financing (Square Loans)Web app
- Get a Square Credit CardWeb app
- Pay bills automatically (Square Bill Pay)Web app
- View payouts and settlementsAPI
- Schedule shifts and track team attendanceAPI
- Run payroll for employeesWeb app
- Run a loyalty rewards programAPI
- Issue physical or digital gift cardsAPI
- Offer self-service kiosk orderingWeb app
- Convert sales revenue to bitcoinWeb app
- Change account settingsAPI
- Invite a team memberAPI
- Set a team member's role or permissionsAPI
- Connect a third-party accounting integrationWeb app
- Set the brand logo and colors on invoicesWeb app
- Create an API key / access tokenAPI
- Register a webhook subscriptionAPI
- Use a sandbox or test modeAPI
Surface audit: 349 documented operations, 3 run, 3 passed, 346 blocked (sandbox or plan limits).
How an agent connects
MCP, API, SDK and llms.txt found.
MCP server
2 testedOfficial server. Beta; remote OAuth server (production only) and local npm square-mcp-server 0.1.2 with 3 tools when driven. Sign‑in needed to see its tools.
4 tools across its docs
API
Listed, not testedREST, 332 operations in the OpenAPI spec.
333 operations across its docs
OpenAPI
UnknownCLI
None foundSDK
Listed, not tested7 official SDKs; npm square 46.0.0.
7 methods across its docs
llms.txt
YesAgent payments
None foundThe checkout wasn't reached: Square Plus, $49 a month.
Docs
No gaps in what we readCovers getting started, auth, error codes and code examples.
478 of 582 pages read
Tips for agent builders
- Read the docs as Markdown by appending .md to a developer.squareup.com/docs URL; start from developer.squareup.com/llms.txt
- Use the OpenAPI spec at raw.githubusercontent.com/square/connect-api-specification/master/api.json (332 operations)
- The remote MCP server (mcp.squareup.com/mcp) only reaches production data: test on the Sandbox with the local server
- Send an Idempotency key on every write: llms.txt says every write endpoint accepts one
How Square compares
In Payments
2 of the 7 products we drove in Payments are higher; 4 others share L1.
| Product | Level | Find to leave |
|---|---|---|
| L4 | Find: On its own, Get in: On its own, Use: On its own, Pay: Partly, Leave: On its own. | |
| L3 | Find: On its own, Get in: On its own, Use: Partly, Pay: Not reached, Leave: On its own. | |
| L1 | Find: Partly, Get in: Stopped, Use: Not reached, Pay: Not reached, Leave: Not reached. | |
| L1 | Find: On its own, Get in: Stopped, Use: Not reached, Pay: Not reached, Leave: Not reached. | |
| L1 | Find: On its own, Get in: Stopped, Use: Not reached, Pay: Not reached, Leave: Not reached. | |
| L1 | Find: On its own, Get in: Stopped, Use: Not reached, Pay: Not reached, Leave: Not reached. | |
| L1 | Find: On its own, Get in: Stopped, Use: Not reached, Pay: Not reached, Leave: Not reached. |
Sorted by level, then work done, then time to the first call. How we rank
For the team behind Square
Agents get stuck at Get in. Prove Square is yours, then see where each issue is, read your safety findings and ask for a free drive after a fix. How to fix each one comes with the Audit.
9 things to fix for agents
Agent surfaces: no issues foundSafety review: 1 issue found
- FindClear
- Get inBlocks agents
- UseNot reached
- PayNot reached
- LeaveNot reached
On our standard
24 criteria: against other payments products where we measured 5 or more, otherwise against every product we measured.
- Errors a program can readThe best result All 4 others (payments products) lower.
- Descriptions that say when to use the toolAhead of most 51 of 65 others (every product) lower, 14 the same.
- Typed, tight input schemasAhead of most 50 of 65 others (every product) lower, 15 the same.
- Agents pick the right toolAhead of most 46 of 65 others (every product) lower, 19 the same.
- A request id on every answerBehind most 3 of 5 others (payments products) higher, 2 the same.
- Truthful annotationsBehind most 48 of 65 others (every product) higher, 17 the same.
- Spend an agent can see and capBehind most 3 of 4 others (payments products) higher, 1 the same.
- Errors say what to do nextThe lowest result All 4 others (payments products) higher.
All 24 criteria
- Export before leavingAhead of most 3 of 5 others (payments products) lower, 2 the same.
- A tool list that fitsAhead of most 33 of 65 others (every product) lower, 32 the same.
- Docs an agent can navigateLevel with most 3 of 5 others (payments products) the same, 2 lower.
- Versions an agent can pinLevel with most 3 of 4 others (payments products) the same, 1 lower.
- Tool names that sort themselvesLevel with most 61 of 65 others (every product) the same, 4 lower.
- Pages fit one fetchThe same as all 5 others (payments products).
- A path written for agentsThe same as all 5 others (payments products).
- Fast to the first callThe same as all 4 others (payments products).
- One way to page through listsThe same as all 4 others (payments products).
- Real status codesThe same as all 5 others (payments products).
- Payments safe to retry, with a receiptIn the middle 1 of 4 others (payments products) lower, 2 the same, 1 higher.
- WebMCP tools on the web appThe same as all 5 others (payments products).
- Answers sized for an agentIn the middle 1 of 4 others (payments products) lower, 1 the same, 2 higher.
- The best way in is built for agentsLevel with most 3 of 5 others (payments products) the same, 2 higher.
- Sign-in for agents acting for a personBehind most 3 of 5 others (payments products) higher, 2 the same.
- Every way in works for an agentBehind most 3 of 5 others (payments products) higher, 2 the same.
Where Square fits
- Category
- Wall
- Bot checkskept our agent out
- Google reCAPTCHA bot checkthe check, and every product we met it at
- Let signed AI agents past your bot checkfix guide
- Rivals
Cited in 1 article
Found an error? Tell us on this page or read how corrections work.
Questions people ask about Square
- Can an AI agent sign up for Square on its own?
- No. Sign-up: blocked. A bot check from Google reCAPTCHA stopped our agent there. The developer sign-up (Email, Password, Locale, terms) was refused by the invisible reCAPTCHA Enterprise check on the agent's inbox (twice) and on the fallback the agent's inbox: the page said only 'Something went wrong. Please try again.' No visible challenge appeared, so there was nothing to hand to a person. Asked for a country; our agent answered.
- Does Square have an MCP server, and can an agent connect to it?
- Yes. Square has an official MCP server. The server lists 3 tools and signs an agent in with OAuth. A new agent can't get in on its own: in the drive of 27 Oct 2026, our agent stopped at sign up (it was blocked).
Cite this page
The page as a reference, in plain text, APA and BibTeX.
Cite this
AgentDrives, “Square: AI agent test drive”, 27 October 2026, https://agentdrives.com/tools/squareup. CC BY 4.0.
AgentDrives. (2026, October 27). Square: AI agent test drive. https://agentdrives.com/tools/squareup
@misc{agentdrives_squareup_2026,
author = {{AgentDrives}},
title = {Square: AI agent test drive},
year = {2026},
month = oct,
url = {https://agentdrives.com/tools/squareup},
note = {Agent test drive, CC BY 4.0},
}Something wrong on this page?
Tell us what's wrong. We check it against the drive and correct the page, with the date.