Zilliz
zilliz.comZilliz Cloud is a vector database for AI search.
Can an AI agent use Zilliz? Yes, in a browser. Our agent got into Zilliz on its own in 6 minutes and did all 7 of its core tasks.
From finding it to leaving
What an agent managed without a person, at each step.
- On its own
Find
Docs it can act on: llms.txt and an MCP server.
357 doc pages read
- On its own
Get in
Sign-up in a browser.
6 minutes
- On its own
Use
Did: create and delete clusters; create collections and add or change data.
7 of 7 core tasks
- Reaches the checkout
Pay
Stopped at the $99 a month charge.
- On its own
Leave
Nothing to cancel, deletes its account.
Getting in
2 of 8 ways in worked without a person.
The way that worked
Email and password6 minutes
- An inboxNeeded
- A browserNeeded
- A personNot needed
- Agent on a serverAPI, MCP, CLINoStops at sign-up: it works only in a browser.
- Assistant in its own browserLike ChatGPT agentPartlySigns up, confirms its email and does all of the core work. Payment: reaches the checkout, stopped at the $99 a month charge.
- Signed agentKnown to CloudflareYesThe sign-up page opens.
Every way in
| Way in | What happened | Why |
|---|---|---|
| Email and password | Worked | |
| CLI code login | Worked | |
| Runs locally, no account | Not tried | The same as another way |
| Email and code | Not tried | The same as another way |
| Continue with GitHub | Not tried | Not part of this drive |
| Continue with Google | Not tried | Not part of this drive |
| Added by an admin | Not tried | Not part of this drive |
| A key from a person | Not tried | Needs a person's account |
- Crawlersrobots.txt asks crawlers to stay off sign-up and the API. Nothing to fix. It keeps these pages out of search and doesn't stop agents signing up.
- Bot checkGoogle reCAPTCHA (invisible, 'This site is protected by reCAPTCHA') let our agent through at sign up. Our agent signs every request (Web Bot Auth).
What an agent can do with Zilliz
All 7 core tasks done, and 16 of 18 others.
Core tasks
- done there
| Task | Result | Through |
|---|---|---|
| Create a database and collection with a schema | Done | API: done thereMCP: done thereCLI: done there |
| Insert or upsert vector entities into a collection | Done | API: done thereMCP: done there |
| Run a vector similarity search | Done | API: done thereMCP: done thereCLI: done there |
| Run a full-text or keyword search over a collection | Done | API: done there |
| Run a hybrid (dense+sparse) search with reranking | Done | API: done thereMCP: done there |
| Query records with scalar metadata filters | Done | API: done thereMCP: done there |
| Create and manage a dedicated or serverless cluster | Done | API: done thereMCP: done thereCLI: done there |
Reliability
96of 100
Core tasks that worked on all 3 runs
Handles mistakes
54of 100
Clear errors, retries without duplicates, honest limits
Surface tested
60of 100
Documented routes, tools and commands run and checked
Docs accuracy
73of 100
Documented operations that behaved as the docs say
Docs completeness
93of 100
How fully the docs describe each operation
What it can't do, and why
- Create an API key without a browser The documented key endpoints answer 404; keys come from the console or a browser-confirmed login.
- Back up, restore or use on-demand compute These need a payment method on the account.
- Pay without a card No agent payment option; only a card form in the console.
- Delete the organization by API Only the console offers it.
16 of 18 other tasks done
- Delete entities by ID or filterDone
- Manage partitions within a collectionDone
- Manage collection aliasesDone
- Build or configure an index on a fieldDone
- Import bulk data files into a collectionDone
- Suspend or resume a clusterDone
- Query cluster performance metricsDone
- Create a database user and assign a cluster roleDone
- Create a custom cluster role and grant privilegesDone
- Group search results by a fieldDone
- Set a collection's consistency levelDone
- Invite an organization or project memberDone
- Create a personal or cluster API keyDone
- Read the audit logDone
- Set up a private endpoint or VPC peeringDone
- Estimate cost with the pricing calculatorDone
- Schedule automatic recurring backupsPartly
- Back up a cluster or selected collectionsPaid plan
- Restore a cluster or collections from backup: These need a payment method on the account.Paid plan
- Deploy via Bring Your Own Cloud (BYOC)Paid plan
- Run on-demand search/index jobs over external data: These need a payment method on the account.Paid plan
- Provision users via SCIM group syncPaid plan
- Configure SAML SSO for the organization: Only the console offers it.Paid plan
- Run migration from another vector database into Zilliz CloudBlocked
The plans they need
- Restore from backuppayment method on file
- BYOCsales
- On-demand search over external datapayment method on file
- SCIM group syncEnterprise + an identity provider
- SAML SSOEnterprise
Paid-plan tasks don't count toward the level. The drive used the no-card trial (30 days, $100 credits, plus the free cluster).
Surface audit: 390 documented operations, 293 run, 227 passed, 79 not as documented, 84 blocked (sandbox or plan limits), 13 left out to stay safe.
How an agent connects
MCP, API, CLI, SDK and llms.txt found.
MCP server
All testedOfficial server. 16 tools, self-run only.
16 tools across its docs
API
167 testedREST, 229 reference pages (V2 plus deprecated V1); errors come back as HTTP 200 with a code in the body.
227 operations across its docs
OpenAPI
None foundno OpenAPI file published; each reference page embeds a per-operation spec.
CLI
97 testedzilliz 1.5.1, device-code login, --output json.
133 commands across its docs
SDK
All testedpymilvus 3.0.2 (also Go, Java, Node.js, C++)
9 methods across its docs
llms.txt
YesAgent payments
None foundThe checkout: Reached the card form and stopped: Standard / Enterprise pay-as-you-go (Dedicated from $99/mont, $99 a call; Checkout: a Stripe card form; An invisible bot check loaded at checkout.
Docs
Some gapsCovers getting started, auth and code examples.
Errors only mentioned in passing.
14 of 14 documented ways to do the core work worked when tried.
357 of 31,632 pages read
Tips for agent builders
- Read the personal API key once in Console > API Keys (or run 'zilliz login --no-browser' and confirm the device code); everything after that works over REST with 'Authorization: Bearer <key>'.
- Check the JSON 'code' field: the API answers HTTP 200 with a non-zero code on most errors.
- Free clusters only exist in regions that list 'free' in GET /v2/regions (gcp-us-west1); add that region to the project with POST /v2/projects/{id}/regions first.
- Collection DDL on the free cluster can take 30 s or more and return 408/503 while it succeeds: read back with collections/has before retrying.
- Insert does not dedupe primary keys; use upsert for safe retries.
- For the official MCP server, install zilliz-mcp-server with 'mcp<2' pinned.
- Use 'zilliz volume upload --policy overwrite' to stage files for import into a managed volume.
How Zilliz compares
In Vector databases
1st of 3 Vector databases products our agent got into on its own.
| Product | Level | Find to leave |
|---|---|---|
| L4 | Find: On its own, Get in: On its own, Use: On its own, Pay: Stopped, Leave: On its own. | |
| L4 | Find: On its own, Get in: On its own, Use: On its own, Pay: Partly, Leave: On its own. | |
| L4 | Find: On its own, Get in: On its own, Use: On its own, Pay: Partly, Leave: On its own. | |
| L1 | Find: On its own, Get in: Stopped, Use: Not reached, Pay: Not reached, Leave: Not reached. | |
| L1 | Find: On its own, Get in: Partly, Use: Not reached, Pay: Not reached, Leave: Not reached. | |
| L1 | Find: On its own, Get in: Stopped, Use: Not reached, Pay: Partly, Leave: On its own. |
Sorted by level, then work done, then time to the first call. How we rank
For the team behind Zilliz
Our agent got through Pay only in part. Prove Zilliz is yours, then see where each issue is, read your safety findings and ask for a free drive after a fix. How to fix each one comes with the Audit.
9 things to fix for agents
Agent blockers: 2 foundAgent surfaces: 82 issues foundSafety review: 2 issues found
- FindClear
- Get inClear
- UseClear
- PayPartly
- LeaveClear
On our standard
22 criteria: against other vector databases products where we measured 5 or more, otherwise against every product we measured.
- Export before leavingThe best result All 5 others (vector databases products) lower.
- Every way in works for an agentAhead of most 4 of 5 others (vector databases products) lower, 1 the same.
- Errors a program can readAhead of most 3 of 5 others (vector databases products) lower, 2 the same.
- Sign-in for agents acting for a personLevel with most 64 of 119 others (every product) the same, 55 lower.
- Agents pick the right toolBehind most 3 of 4 others (vector databases products) higher, 1 the same.
- Typed, tight input schemasBehind most 3 of 4 others (vector databases products) higher, 1 the same.
- Truthful annotationsBehind most 3 of 4 others (vector databases products) higher, 1 the same.
- Docs an agent can navigateBehind most 4 of 5 others (vector databases products) higher, 1 the same.
All 22 criteria
- Fast to the first callLevel with most 3 of 5 others (vector databases products) the same, 2 lower.
- A request id on every answerLevel with most 3 of 5 others (vector databases products) the same, 2 lower.
- Answers sized for an agentLevel with most 3 of 4 others (vector databases products) the same, 1 lower.
- Prices an agent can readLevel with most 4 of 5 others (vector databases products) the same, 1 lower.
- The best way in is built for agentsAhead of most 3 of 5 others (vector databases products) lower, 2 higher.
- Errors say what to do nextLevel with most 4 of 5 others (vector databases products) the same, 1 lower.
- A path written for agentsLevel with most 3 of 5 others (vector databases products) the same, 1 lower, 1 higher.
- Tool names that sort themselvesThe same as all 4 others (vector databases products).
- A tool list that fitsThe same as all 4 others (vector databases products).
- Real status codesThe same as all 5 others (vector databases products).
- Spend an agent can see and capThe same as all 5 others (vector databases products).
- WebMCP tools on the web appThe same as all 5 others (vector databases products).
- Pages fit one fetchLevel with most 4 of 5 others (vector databases products) the same, 1 higher.
- Descriptions that say when to use the toolBehind most 3 of 4 others (vector databases products) higher, 1 the same.
Where Zilliz fits
Found an error? Tell us on this page or read how corrections work.
Questions people ask about Zilliz
- Can an AI agent sign up for Zilliz on its own?
- Yes, in a browser, without a human. Web form only (Work Email + Password) at cloud.zilliz.com/signup; an invisible reCAPTCHA let our signed agent through. Onboarding asked for a country, a company and a job title; our agent answered. GitHub and Google buttons not used.
- Does Zilliz have an MCP server, and can an agent connect to it?
- Yes. Zilliz has an official MCP server. The server lists 16 tools. A new agent can get in on its own: in the drive of 28 Oct 2026, our agent signed up, verified and got its key without a person.
- How does an AI agent get a Zilliz API key?
- In the drive of 28 Oct 2026, our agent got its Zilliz API key in a browser, without a person. A personal API key exists from sign-up; it is read in Console > API Keys.
- Can an AI agent delete its Zilliz account?
- Yes, in a browser, without a human. Clusters and volume deleted by API; Console > Settings > Delete Organization, then Account Settings > Close Account (survey, emailed one-time code, two checkboxes). Sign-in afterwards was refused: 'Unable to login. This account has been closed already.' Docs: data cleaned after 30 days.
- Can an AI agent pay for Zilliz?
- Partly. Reaches the checkout: stopped at the $99 a month charge. It has a free plan.
Cite this page
The page as a reference, in plain text, APA and BibTeX.
Cite this
AgentDrives, “Zilliz: AI agent test drive”, 28 October 2026, https://agentdrives.com/tools/zilliz. CC BY 4.0.
AgentDrives. (2026, October 28). Zilliz: AI agent test drive. https://agentdrives.com/tools/zilliz
@misc{agentdrives_zilliz_2026,
author = {{AgentDrives}},
title = {Zilliz: AI agent test drive},
year = {2026},
month = oct,
url = {https://agentdrives.com/tools/zilliz},
note = {Agent test drive, CC BY 4.0},
}Something wrong on this page?
Tell us what's wrong. We check it against the drive and correct the page, with the date.