Can an AI agent use Taskade?
As of 8 Oct 2026, an AI agent can't use Taskade on its own: Cloudflare Turnstile on the sign-up form.
- Find: Docs for agents: llms.txt, an OpenAPI and an MCP server.
- Access: Can't sign up.
- Use: Work not reached.
- Pay: Payment not reached.
- Leave: Leaving not reached.
To reach L2 · Gets in: let an agent sign up on its own.
With an account set up by a person: not measured yet.
What the levels meanDriven 8 Oct 20261 drive so farRules of 15 Oct 2026Claim this page
Written and checked by our agents from this drive's record. How we write.
Who gets in
- Agents on a serverTurned away when they send the sign-up form.
- Signed agentsThe sign-up page opens. The check on the form still applies.
- Agents in a person's browserNot measured yet.
Sign-up page checked 12 Oct 2026. Signed agents: the ones Cloudflare verifies. Where agents come from
What an agent can do in Taskade.
On its own
- Read all the help and developer documentation on its own
- Register itself as an OAuth app (but still can't get a usable login token without a person)
What it can't, and why
- Create an accounta visible human-verification puzzle on the sign-up page
- Call Taskade's APIthe site's own crawling rules block that part of the site for all automated visitors
- Build an app from a promptit immediately asks you to sign up first
2 more
- Use the AI-agent connector (MCP)only offered on paid plans, which need an account the agent could not create
- Pay for a planupgrading only happens through a web checkout page, which needs an account
Can an AI agent sign up for Taskade on its own?
No. Sign-up: needs a human. Web form only. A visible Cloudflare Turnstile 'Verify you are human' widget sits on the form.
Does Taskade have an MCP server, and can an agent connect to it?
Yes. Taskade has an official MCP server.
A new agent can't get in on its own: in the drive of 8 Oct 2026, our agent stopped at sign up (it needs a person). Through the MCP server, 0 of our agent's 2 attempts worked.
What the drive found
APIOpenAPIMCP · official–CLI–SDKllms.txtWebhooks–SandboxNot reached in this drive: the API key, deleting the account and paying. Every checkpoint, in detail
For the team behind Taskade.
Where agents stop in Taskade today, and the fixes that get them further, highest impact first.
The fixes, highest impact first
- Let verified signed agents pass sign-upStep-by-step guide
- Allow /api/ in robots.txt for agents
- Mint API tokens without a browserStep-by-step guide
2 more fixes
- Open hosted MCP to Free workspaces Step-by-step guide
- Accept an agent payment rail Step-by-step guide
- Claim it free and reply next to the result.
- A Drive, $49: your private report, with where agents stop, the evidence and the fixes that move your level.
- Fixed something? Order a Drive ($49) any time, or the Monthly drive ($29/month).
Details
Your API, MCP server or CLI is the product? An Audit ($299) also checks every documented route, MCP tool and CLI command against your docs. Compare plans.
Already claimed it? Open it in your dashboard.
Rather not be driven? Block AgentDrivesAgent in robots.txt or write to us. We stop driving it ourselves; this page stays, with its date.
Embed the badge on your site
Behind the level.
Our agent couldn't get into Taskade, so the work, its reliability and the crash test aren't measured. The part scores are what it could judge from the outside.
Part scores · paid plans
Part scores
Agent-ready setup
- llms.txt: found
- OpenAPI: found
- MCP server: found
- CLI: not found
Not measured in this drive: Holds up, Docs match (part of an Audit).
Needs a paid plan
Not counted in the level.
| Capability | Plan |
|---|---|
| Inbound webhook trigger | Pro |
| Outbound webhook registration | Pro |
| Custom domain | Business |
| Multi-agent team | paid |
| App users | paid |
| SSO/SCIM | paid |
| Hosted MCP (channel) | Starter and above |
For agents and builders.
The drive as data, every checkpoint and all 29 attempts.
How an agent connects · 4 tips
/api/tools/taskade.json/tools/taskade.mdMCP get_tool {"slug":"taskade"}
- Read docs as Markdown: append .md or send Accept: text/markdown; start at https://www.taskade.com/docs/llms.txt
- Sign-up needs a human (Turnstile); after that, a human must create the personal access token in Settings > API
- The API base is under /api/, which robots.txt disallows: a robots-respecting agent cannot use it
- Hosted MCP (https://www.taskade.com/mcp) takes OAuth with DCR or a personal token, paid workspaces only
Every checkpoint, in detail · 9 checkpoints
- DocsHeadlessllms.txt, /docs/llms.txt and every docs page as Markdown (.md URL and Accept: text/markdown). The OpenAPI specs sit under /api/, which robots.txt disallows, so they were not fetched.
- Sign upNeeds a humanWeb form only. A visible Cloudflare Turnstile 'Verify you are human' widget sits on the form.
- VerifyNot reachedNot reached: no account.
- KeyNot reachedPersonal access tokens are made only in the web UI (Settings > API). OAuth dynamic client registration works headless (POST /oauth2/register 201), but a token needs a signed-in user; no device flow. Also, the documented API base www.taskade.com/api/v1 and /api/v2 is disallowed by robots.txt (Disallow: /api/).
- First callNot reachedNot reached: no account; the REST/Action API base is robots-disallowed, and the hosted MCP needs a paid workspace.
- First actionNot reachedGenerating an app at /create without an account redirects to /signup.
- PayNot reachedNo 402 anywhere, no MPP, Stripe Projects or Bazaar listing, no billing API or MCP billing tool in the docs. Upgrades go through Settings > Billing > 'Manage / Update Plan' to the billing portal (docs). We paid nothing: pay_tx.json 'no 402 on the product's own domain asks for USDC on a network we hold a wallet for'. Not reached in the app: no account.
- CancelNot reachednot tested: no plan or trial was started. Docs: Settings > Billing > Cancel subscription, two retention screens ('Before you go...', 'Before you cancel, one option'), then the Stripe page; web only.
- DeleteNot reachedNo account to delete. Docs: Account settings, type the email, click Delete Account twice; web only, no API route.
The attempt log · 29 attempts
| Capability | Route | Result | Evidence |
|---|---|---|---|
| robots.txt: Read robots.txt and AI preferences | api | done ✓ | GET https://www.taskade.com/robots.txt 200: 'User-Agent: * ... Content-Signal: ai-train=yes, search=yes, ai-input=yes; Allow: /; Disallow: /api/; Disallow: /socket.io/; Disallow: /graphql'. Response header 'content-signal: ai-train=yes, search=yes, ai-input=yes'. No aipref Content-Usage line or header. |
| llms.txt: Fetch llms.txt and docs index | api | done ✓ | https://www.taskade.com/llms.txt 200 (H1 'Taskade: AI App Builder...', Last-Updated 2026-10-07); https://www.taskade.com/docs/llms.txt 200 lists REST v1 (~70 ops), Action v2, MCP, webhooks, SDK pages as .md links |
| openapi: Fetch OpenAPI v1 spec | api | blocked | |
| markdown docs: Accept: text/markdown and .md URL on a docs page | api | done ✓ | GET /docs/getting-started/quickstart with Accept: text/markdown -> 200 content-type text/markdown, vary includes accept; /docs/getting-started/quickstart.md -> 200 text/markdown |
| MCP server/discover: POST server/discover 2026-07-28 to https://www.taskade.com/mcp | mcp | blocked | HTTP 401 content-type application/json {"error":"Unauthorized"}; WWW-Authenticate: Bearer realm="mcp", resource_metadata="https://www.taskade.com/mcp/.well-known/oauth-protected-resource" |
| MCP auth metadata: PRM and AS metadata | api | done ✓ | PRM https://www.taskade.com/mcp/.well-known/oauth-protected-resource and /.well-known/oauth-protected-resource/mcp 200 JSON {resource: https://www.taskade.com/mcp, authorization_servers:[https://www.taskade.com], scopes_supported:[mcp]}; root /.well-known/oauth-protected-resource 404 HTML. AS metadata /.well-known/oauth-authorization-server 200: registration_endpoint /oauth2/register (DCR), code+S256 PKCE, grants authorization_code, refresh_token; no client_id_metadata_document_supported, no device_authorization_endpoint, no agent_auth block |
| cards: Server card, AI catalog, A2A agent card, UCP, auth.md, SKILL.md | api | done ✓ | /mcp/server-card 404 text/plain; /.well-known/ai-catalog.json 404 HTML; legacy /.well-known/mcp/server-card.json 200 application/json {serverInfo:{name:'Taskade MCP',version:'1.0.0'},authentication:{required:true,schemes:['oauth2']}}; /.well-known/agent-card.json 404; /.well-known/agent.json 404; /.well-known/ucp 404; /auth.md 404; /SKILL.md 404 |
| docs: Find developer docs | api | done ✓ | https://www.taskade.com/docs/llms.txt, quickstart.md, hosted-mcp.md, action-api-guide.md fetched as Markdown |
| pay step public probes: Look for agent payment rails, billing API, checkout, trial terms | api | done ✓ | pay_probe.json: no 402 challenges, no MPP/Stripe Projects/Bazaar listings, no MCP payment tools, free_plan true; pay_tx.json: refused 'no 402 on the product's own domain asks for USDC on a network we hold a wallet for'. Docs: /learn/account/upgrade-plan 'Click Manage / Update Plan to open the billing portal ... Follow the payment steps'; /learn/account/cancel-subscription 'click Cancel subscription. Pick a reason, click Continue to Cancel, and finish on the secure Stripe page'. No billing API in REST v1/Action v2 index (docs/llms.txt). /api/ is robots-disallowed so 402 on API paths not probed. |
| sign up: Sign up with email+password at https://www.taskade.com/signup | browser | blocked | Web form only (docs /learn/account/create-account: Google, Apple, SSO, email+password; no API sign-up). Form shows a visible Cloudflare Turnstile widget 'Verify you are human' (iframe challenges.cloudflare.com .../turnstile/.../0x4AAAAAAAc6vdvH5FRycu8l/auto/.../normal). Submitting without the widget token: POST /signup 400 {ok:false, details:'Validation error.', errors:{_:['Please refresh the page and try again.']}} shown as 'Sign Up Error / Please refresh the page and try again.' One retry after a page refresh gave the same 400. Screenshot browser/shots/003.png |
| sign up (human handoff): Ask a human to do the Turnstile-gated sign-up in their own browser | browser | blocked | |
| Generate app without account: Generate an app from /create?input=... without an account | browser | blocked | Submitting the prompt on https://www.taskade.com/create redirects to https://www.taskade.com/signup?redirect=%2Fcreate...&mode=genesis (shots/007.png) |
| OAuth dynamic client registration: Register an OAuth client headless (DCR) for the hosted MCP | api | partial ✓ | POST https://www.taskade.com/oauth2/register 201 {client_id:'X1sWBhnD9ToT5w31', token_endpoint_auth_method:'none', grant_types:[authorization_code, refresh_token]} |
| MCP initialize fallback: initialize offering 2026-07-28 unauthenticated | mcp | blocked | POST https://www.taskade.com/mcp initialize -> 401 {"error":"Unauthorized"} with WWW-Authenticate Bearer resource_metadata |
| verify email: verify email | none | blocked | Not reached: sign-up blocked by Cloudflare Turnstile; also the documented REST/Action API base https://www.taskade.com/api/v1|v2 is disallowed by robots.txt (Disallow: /api/) for all user agents |
| first API/MCP call: first API/MCP call | none | blocked | Not reached: sign-up blocked by Cloudflare Turnstile; also the documented REST/Action API base https://www.taskade.com/api/v1|v2 is disallowed by robots.txt (Disallow: /api/) for all user agents |
| Create and revoke a personal access token: Check against the docs | none | blocked | Documented web-UI only: /docs/getting-started/personal-tokens.md 'Click Create token' at taskade.com/settings/api; revoke in the Personal access tokens list; max 5 tokens. No API/CLI route. Not driven: no account (sign-up behind Cloudflare Turnstile). |
| Upgrade/downgrade plan: Check against the docs | none | blocked | Documented web-UI only: /learn/account/upgrade-plan (Settings > Billing > Manage / Update Plan opens the billing portal), cancel via Stripe page. Not driven: no account (sign-up behind Cloudflare Turnstile). |
| Workspaces and folders: Check against the docs | none | blocked | Documented: GET /workspaces, GET /workspaces/{id}/folders, POST /workspaces/{id}/projects (docs/llms.txt REST section); base URL /api/v1 is robots-disallowed. Not driven: no account (sign-up behind Cloudflare Turnstile). |
| Multi-platform clients: Check against the docs | none | blocked | Documented: /downloads lists iOS, Android, macOS, Windows, Linux and browser extensions (llms.txt). Not driven: no account (sign-up behind Cloudflare Turnstile). |
| Local workspace MCP server: Check against the docs | none | blocked | Documented: npm @taskade/mcp-server run with TASKADE_API_KEY (a personal access token) and it calls REST API v1 (docs/mcp/workspace-mcp.md); needs a token we cannot get, and its calls go to the robots-disallowed /api/v1. Not driven: no account (sign-up behind Cloudflare Turnstile). |
| Connect a custom domain: Check plan and docs | none | plan_gated | /learn/genesis/custom-domains; llms.txt 'Custom domains are Business+.' |
| SSO/SAML and SCIM: Check plan and docs | none | plan_gated | capabilities map plan: paid (Enterprise); learn/account mentions SSO/SAML |
| Inbound webhook trigger: Check plan and docs | none | plan_gated | docs/guides/webhooks.md: 'Webhook triggers run on Pro and above. On Free and Starter, a call returns 402 with code: "PAYMENT_REQUIRED"' |
| Outbound signed webhook subscription: Check plan and docs | none | plan_gated | docs/guides/webhooks.md: 'Webhook triggers and the Webhook Registration API return 402 on Free and Starter' (POST /api/v2/webhooks) |
| Multi-agent team: Check plan and docs | none | plan_gated | capabilities map plan: paid; llms.txt Agent teams |
| App users / email sign-in: Check plan and docs | none | plan_gated | capabilities map plan: paid (App Users beta) |
| cancel plan: Cancel a started plan | none | skipped | No plan or trial started (no account). Docs /learn/account/cancel-subscription: Settings > Billing > Cancel subscription, 'Before you go...' reason screen, 'Before you cancel, one option' screen, then 'finish on the secure Stripe page'. |
| delete account: Delete the account | none | blocked | No account was created (sign-up blocked by Cloudflare Turnstile). Docs /learn/projects/account-deletion: Account settings > type email in Confirm Email > click Delete Account twice; web UI only, no API route in docs/llms.txt. |
Also in Task management.
- TickTickL3Gets in on its ownTaskade vs TickTick
AkiflowL1Can't sign up on its ownTaskade vs Akiflow
TodoistL1Can't sign up on its ownTaskade vs Todoist