Stripe
stripe.com · General SaaS APIs modeIntegrated
Overall = mean of Interrupt Score 88 and Machine-Readability 31 → 60 / 100. The badge is set by the Interrupt Score alone — how scoring works.
Confidence: Provisional (0.55) — Based on Tier 0/1 evidence only (passive checks, no live transaction attempt) — treat the number as a triage signal, not a verified outcome.
Custody posture hasn't been assessed yet.
What your agent can do here
A plain-English read on the probe evidence — each verdict links to the finding behind it.
- Can your agent sign up on its own?Needs a human at signup — a CAPTCHA blocks it.Signup page embeds a hcaptcha CAPTCHA/bot-challenge (matched: script:https://js.hcaptcha.com/1/api.js?render=explicit&onload=hcaptchaOnLoad&recaptchacompat=off).
- Can your agent read it without a human?Little machine-readable surface.31.44/100
- Can your agent self-serve credentials or a token?Credentials path not yet inspected.
- Can your agent call it without a CAPTCHA?Unknown — live checkout not yet attempted.
Agent-readiness: Partially — an AI agent can use Stripe, but needs a human at signup — a CAPTCHA blocks it; little machine-readable surface.
Machine-Readability Score
Four check groups, equal weight: machine interfaces (OpenAPI, MCP server, llms.txt), browsing efficiency, element discoverability, and discovery/agent access (retrieval-bot robots.txt access, sitemap, schema.org). Each check is tagged with how strong the real-world evidence is that it changes agent behavior — proven, plausible, or emerging — grades are honesty labels, they never weight the score. A separate signal about ease of integration — it never enters the Interrupt Score or badge above.
- llms.txtemergingFound — stripe.com/llms.txt
- llms-full.txtemergingNot provided
- AGENTS.mdemergingNot provided
- A2A agent cardemergingNot provided
- MCP server (well-known or official registry)plausibleNot provided
- OpenAPI/Swagger specplausibleNot provided
- Rate-limit headersplausibleNot provided
- Structured JSON error responsesplausibleNot provided
- OAuth authorization-server metadata (RFC 8414)provenNot provided
- API catalog (RFC 9727)emergingNot provided
- Agent-payment discovery (x402 / UCP)emergingNot provided
- Lean HTML transfer sizeplausibleNot provided
- Manageable DOM sizeplausibleNot provided
- High content-to-markup densityplausibleNot provided
- Content readable without JS executionprovenraw HTML holds 104% of rendered text (12410 vs 11934 chars; threshold 40%)
- Clean-content alternate (RSS/Atom/feed/markdown)plausibleNot provided
- Serves markdown on Accept: text/markdownplausibleNot provided
- Interactive elements are semanticplausible216/216 semantic (100%); 0 div/span click targets
- Form fields have accessible namesplausibleNot checked — no form fields on the representative page
- Inputs carry autocomplete hintsplausibleNot checked — no autocomplete-eligible inputs
- WebMCP tools (modelContext API)emergingNot provided
- AI retrieval/search fetchers allowed (robots.txt)provenno retrieval-fetcher blocks in robots.txt
- Sitemap (indexability)plausibleFound — stripe.com/sitemap/sitemap.xml
- schema.org JSON-LD in raw HTMLplausible1 valid JSON-LD block(s) in raw (pre-JS) HTML
- Content-Signal directives (robots.txt)emergingNot provided
- Web Bot Auth key directoryemergingNot provided
- Discovery Link headers on homepageemergingNot provided
- robots.txt AI-crawler accessplausibleno AI-crawler blocks in robots.txt
- Unauthenticated API error is structured JSONplausibleFound — api.stripe.com/ (HTTP 404)
- Unauthenticated API returns auth guidance (401/403 or documented)plausibleNot provided
- API exposes rate-limit headersplausibleNot provided
- API key obtainable without human interactionplausibleNot checked — no OpenAPI spec found; self-serve API-key path indeterminate from Tier 1
Findings
How scoring works →Interrupt tier: Low-Interrupt — derived from 1 finding; interrupt score 88 / 100. It alone drives the badge above; the headline Overall score blends it 50/50 with Machine-Readability.
Every tool starts at 100. Each interrupt found subtracts a penalty of base weight × timing × hardness × evidence — the multiplier values below come from the same rubric tables the score is computed with, so the arithmetic in this matrix reproduces the number exactly.
| Interrupt found | Base weight | × Timing | × Hardness | × Evidence | = Penalty |
|---|---|---|---|---|---|
| Starting score | 100 | ||||
| CAPTCHA / bot-challengeSignupSignup page embeds a hcaptcha CAPTCHA/bot-challenge (matched: script:https://js.hcaptcha.com/1/api.js?render=explicit&onload=hcaptchaOnLoad&recaptchacompat=off). | 6 | ×1one-time setup | ×2.5hard | ×0.8Tier 1 (unauth probe) | −12 |
| Total penalty | −12 | ||||
| Interrupt Score = 100 − 12 = 88 | 88 | ||||
Checked — nothing found
A check only turns green when a probe tier capable of detecting that interrupt actually ran and found nothing. Not tested ≠ clean.
- Email OTP verificationNone found — checked at Tier 1 (unauth probe)
- SMS / phone OTP verificationNone found — checked at Tier 1 (unauth probe)
- Mandatory phone verification callNone found — checked at Tier 1 (unauth probe)
- Mailed physical code (postal)None found — checked at Tier 1 (unauth probe)
- “Contact sales” wall (no self-serve path)None found — checked at Tier 0 (passive scan) + Tier 1 (unauth probe)
- Manual approval queueNone found — checked at Tier 1 (unauth probe)
- ToS clause banning automated/bot accessNone found — checked at Tier 0 (passive scan)
- Mandatory redirect to vendor’s own siteNone found — checked at Tier 1 (unauth probe)
- SSO-only signup, no API-key issuanceNone found — checked at Tier 1 (unauth probe)
- Rate-limit-triggered manual reviewNone found — checked at Tier 1 (unauth probe)
- One-time account / payment-method provisioningNone found — checked at Tier 1 (unauth probe)
- Identity / KYC verificationNone found — checked at Tier 0 (passive scan) + Tier 1 (unauth probe)
- Crypto wallet / key-custody setupNone found — checked at Tier 1 (unauth probe)
Less-interrupting alternatives
Other General SaaS APIs tools in the same mode (integrated), ranked by Overall LLM-Friendliness — comparable to this listing because they share its usage mode.