{"title":"The Agent Signup Index","question":"Can an AI agent with only its own email inbox — no phone, no card, no existing Google/GitHub account, no CAPTCHA solving — sign up and get a working API key today?","checked_at":"2026-07-03","source":"https://talkshi.com/signups","verdicts":{"yes":"email is enough","maybe":"possible, but risk-based gates can block it","no":"a hard gate stops it"},"services":[{"name":"OpenAI","domain":"platform.openai.com","category":"AI & inference","verdict":"no","phone":"required","captcha":"risk","card":"usage","review":"none","blocker":"SMS to a non-VoIP number is mandatory before the first API key — documented policy, not risk-based.","confidence":"high"},{"name":"Anthropic","domain":"platform.claude.com","category":"AI & inference","verdict":"no","phone":"required","captcha":"risk","card":"usage","review":"none","blocker":"Passwordless magic-link auth is the most agent-friendly design anywhere — then SMS verification (no skip, no VoIP) gates actually using the account.","confidence":"medium"},{"name":"Google Gemini API","domain":"aistudio.google.com","category":"AI & inference","verdict":"no","phone":"required","captcha":"risk","card":"none","review":"none","blocker":"The free key itself needs no card ever — but it needs a Google account, and fresh automated signups near-always get forced into phone/QR verification.","confidence":"high"},{"name":"xAI (Grok)","domain":"console.x.ai","category":"AI & inference","verdict":"maybe","phone":"none","captcha":"risk","card":"none","review":"none","blocker":"Email signup, $25 starter credits, no phone — but Cloudflare Turnstile fingerprints automated browsers, and the AUP explicitly bans bot access.","confidence":"high"},{"name":"DeepSeek","domain":"platform.deepseek.com","category":"AI & inference","verdict":"maybe","phone":"none","captcha":"risk","card":"usage","review":"none","blocker":"Email-code signup with a 5M-token free grant; a GeeTest-style slider CAPTCHA fires on new or datacenter IPs.","confidence":"medium"},{"name":"ElevenLabs","domain":"elevenlabs.io","category":"AI & inference","verdict":"maybe","phone":"none","captcha":"risk","card":"none","review":"none","blocker":"Email path with free monthly credits; hidden hCaptcha + reCAPTCHA can escalate to a challenge on suspicious signups.","confidence":"high"},{"name":"Deepgram","domain":"deepgram.com","category":"AI & inference","verdict":"maybe","phone":"none","captcha":"risk","card":"none","review":"none","blocker":"$200 free credit, no card, no phone — if the invisible reCAPTCHA passes silently.","confidence":"high"},{"name":"Replicate","domain":"replicate.com","category":"AI & inference","verdict":"no","phone":"none","captcha":"always","card":"usage","review":"none","blocker":"GitHub is the only way in, so it inherits GitHub's Arkose CAPTCHA and human-only ToS.","confidence":"high"},{"name":"Hugging Face","domain":"huggingface.co","category":"AI & inference","verdict":"yes","phone":"none","captcha":"risk","card":"none","review":"none","blocker":"Email+password, confirmation link, free tokens. AWS WAF runs a JS challenge — a real browser passes, a bare HTTP client doesn't.","confidence":"medium"},{"name":"OpenRouter","domain":"openrouter.ai","category":"AI & inference","verdict":"maybe","phone":"none","captcha":"risk","card":"none","review":"none","blocker":"Email+password (phone isn't even possible in their auth config), free models right away — Cloudflare Turnstile smart-mode is the only gate.","confidence":"high"},{"name":"Together AI","domain":"together.ai","category":"AI & inference","verdict":"no","phone":"none","captcha":"none","card":"usage","review":"none","blocker":"SSO-only: Google, GitHub, or enterprise SAML. There is no email path at all — the login wall is the whole story.","confidence":"high"},{"name":"Mistral AI","domain":"console.mistral.ai","category":"AI & inference","verdict":"no","phone":"required","captcha":"none","card":"none","review":"none","blocker":"No CAPTCHA at signup, but API keys stay inert until a plan is activated — and activating any plan, even the free one, demands SMS verification.","confidence":"high"},{"name":"Cohere","domain":"cohere.com","category":"AI & inference","verdict":"maybe","phone":"none","captcha":"risk","card":"none","review":"none","blocker":"A Trial key is auto-generated the moment email verifies — but the register call itself requires a reCAPTCHA Enterprise token a bot score can deny.","confidence":"high"},{"name":"Groq","domain":"console.groq.com","category":"AI & inference","verdict":"yes","phone":"none","captcha":"risk","card":"none","review":"none","blocker":"Passwordless email code straight to a free API key — no card, no phone, no visible CAPTCHA. Device fingerprinting runs in observation mode.","confidence":"medium"},{"name":"Fireworks AI","domain":"fireworks.ai","category":"AI & inference","verdict":"yes","phone":"none","captcha":"none","card":"none","review":"none","blocker":"Email+password with zero CAPTCHA vendor scripts, $1 starter credit, instant key. The form is even server-rendered — visible without JS.","confidence":"high"},{"name":"AssemblyAI","domain":"assemblyai.com","category":"AI & inference","verdict":"yes","phone":"none","captcha":"none","card":"none","review":"none","blocker":"Passwordless magic link: submit email, click the link in the inbox, copy the API key. $50 free credits, no card, no phone.","confidence":"high"},{"name":"Stability AI","domain":"platform.stability.ai","category":"AI & inference","verdict":"maybe","phone":"none","captcha":"risk","card":"none","review":"none","blocker":"Email+password with 25 free credits and an instant key — behind Cloudflare bot management, and a ToS that bans 'non-human means' outright.","confidence":"medium"},{"name":"AWS","domain":"aws.amazon.com","category":"Cloud & infra","verdict":"no","phone":"required","captcha":"always","card":"required","review":"none","blocker":"Phone, card, and CAPTCHA are all mandatory at signup. The hardest front door on this list.","confidence":"high"},{"name":"Google Cloud","domain":"cloud.google.com","category":"Cloud & infra","verdict":"no","phone":"required","captcha":"risk","card":"required","review":"none","blocker":"Double gate: a Google account (phone + reCAPTCHA) and then a card for the free trial.","confidence":"high"},{"name":"Cloudflare","domain":"cloudflare.com","category":"Cloud & infra","verdict":"maybe","phone":"none","captcha":"risk","card":"none","review":"none","blocker":"No card, no phone, instant API tokens — guarded by Cloudflare's own Turnstile, naturally.","confidence":"medium"},{"name":"Vercel","domain":"vercel.com","category":"Cloud & infra","verdict":"maybe","phone":"none","captcha":"risk","card":"none","review":"none","blocker":"Hobby tier + tokens with no card; risk-based anti-abuse checks, and email-only accounts re-verify on every login.","confidence":"medium"},{"name":"Netlify","domain":"netlify.com","category":"Cloud & infra","verdict":"maybe","phone":"none","captcha":"risk","card":"none","review":"none","blocker":"Free plan with no card; reCAPTCHA Enterprise scores every signup and can demand a challenge.","confidence":"medium"},{"name":"Fly.io","domain":"fly.io","category":"Cloud & infra","verdict":"no","phone":"none","captcha":"risk","card":"required","review":"none","blocker":"The account is free; running anything isn't. No lasting free tier — a card is required to deploy.","confidence":"high"},{"name":"DigitalOcean","domain":"digitalocean.com","category":"Cloud & infra","verdict":"no","phone":"risk","captcha":"always","card":"required","review":"none","blocker":"A payment method is mandatory to activate — DO states outright it's an anti-bot measure. hCaptcha and risk-based SMS on top.","confidence":"high"},{"name":"Modal","domain":"modal.com","category":"Cloud & infra","verdict":"no","phone":"none","captcha":"none","card":"none","review":"none","blocker":"SSO-only: GitHub or Google, no email field at all. Modal itself would be frictionless — the front door belongs to someone else.","confidence":"high"},{"name":"Railway","domain":"railway.com","category":"Cloud & infra","verdict":"maybe","phone":"none","captcha":"none","card":"usage","review":"none","blocker":"Email-code signup works, but with no aged GitHub account the trial is databases-only. A card — or GitHub reputation — unlocks real deploys.","confidence":"medium"},{"name":"Render","domain":"render.com","category":"Cloud & infra","verdict":"maybe","phone":"none","captcha":"risk","card":"none","review":"none","blocker":"Email+password, free tier, no baseline card — a signup CAPTCHA (plus the occasional risk-based card demand) makes the call.","confidence":"medium"},{"name":"Supabase","domain":"supabase.com","category":"Databases","verdict":"maybe","phone":"none","captcha":"risk","card":"none","review":"none","blocker":"Free project + keys with no card; the dashboard's own bot protection (hCaptcha/Turnstile) is the only gate.","confidence":"medium"},{"name":"Neon","domain":"neon.tech","category":"Databases","verdict":"yes","phone":"none","captcha":"risk","card":"none","review":"none","blocker":"Email+password, verify link, instant free Postgres with a connection string. Cleanest flow surveyed.","confidence":"high"},{"name":"Upstash","domain":"upstash.com","category":"Databases","verdict":"yes","phone":"none","captcha":"none","card":"none","review":"none","blocker":"No CAPTCHA, phone, or card observed anywhere in the flow. Email+password straight to a Redis database.","confidence":"medium"},{"name":"MongoDB Atlas","domain":"mongodb.com","category":"Databases","verdict":"no","phone":"none","captcha":"risk","card":"none","review":"none","blocker":"Agent-friendly in every dimension except reCAPTCHA Enterprise on registration, which reliably challenges automated traffic.","confidence":"high"},{"name":"Pinecone","domain":"pinecone.io","category":"Databases","verdict":"yes","phone":"none","captcha":"none","card":"none","review":"none","blocker":"Email+password via Auth0, instant free Starter keys. One quirk: the API refuses until ToS is accepted in the console.","confidence":"medium"},{"name":"Algolia","domain":"algolia.com","category":"Databases","verdict":"maybe","phone":"none","captcha":"risk","card":"none","review":"none","blocker":"Instant free-tier keys, but the whole dashboard sits behind a Cloudflare managed challenge.","confidence":"medium"},{"name":"Resend","domain":"resend.com","category":"Email & messaging","verdict":"yes","phone":"none","captcha":"none","card":"none","review":"none","blocker":"Email+password, one verify link, instant API key, and it can send immediately from the shared test domain.","confidence":"high"},{"name":"Postmark","domain":"postmarkapp.com","category":"Email & messaging","verdict":"maybe","phone":"none","captcha":"risk","card":"none","review":"manual","blocker":"Signup is agent-passable; sending to external recipients waits on a human account review (days, sometimes declined).","confidence":"high"},{"name":"Twilio","domain":"twilio.com","category":"Email & messaging","verdict":"no","phone":"required","captcha":"risk","card":"none","review":"none","blocker":"SMS verification is a mandatory step before Console access — and the AUP explicitly bans bot signups.","confidence":"high"},{"name":"SendGrid","domain":"sendgrid.com","category":"Email & messaging","verdict":"no","phone":"required","captcha":"always","card":"usage","review":"manual","blocker":"Always-on CAPTCHA, then mandatory phone verification, then possible compliance review. Three walls deep.","confidence":"high"},{"name":"Mailgun","domain":"mailgun.com","category":"Email & messaging","verdict":"no","phone":"required","captcha":"risk","card":"usage","review":"none","blocker":"SMS one-time password is required to activate the account at all; card-less accounts are throttled to near-uselessness.","confidence":"high"},{"name":"Stripe","domain":"stripe.com","category":"Payments & fintech","verdict":"maybe","phone":"none","captcha":"risk","card":"none","review":"manual","blocker":"Test-mode keys are reachable email-only (TOTP for 2FA, no phone). Live mode is hard-gated behind business KYC and a real phone.","confidence":"high"},{"name":"Plaid","domain":"plaid.com","category":"Payments & fintech","verdict":"maybe","phone":"none","captcha":"risk","card":"none","review":"manual","blocker":"Free Sandbox key is plausible email-only; Production needs a reviewed business application, and the Developer Policy bans automated account creation.","confidence":"high"},{"name":"GitHub","domain":"github.com","category":"Dev platforms","verdict":"no","phone":"risk","captcha":"always","card":"none","review":"none","blocker":"Arkose FunCaptcha on effectively every signup, and the ToS says it plainly: 'You must be a human to create an Account.'","confidence":"high"},{"name":"Sentry","domain":"sentry.io","category":"Dev platforms","verdict":"maybe","phone":"none","captcha":"risk","card":"none","review":"none","blocker":"Free tier with an instant DSN and no card; an invisible reCAPTCHA score decides whether the signup goes through.","confidence":"high"},{"name":"WorkOS","domain":"workos.com","category":"Dev platforms","verdict":"maybe","phone":"none","captcha":"risk","card":"none","review":"none","blocker":"No CAPTCHA, phone, or card — but signups run through WorkOS Radar, their own anti-bot product, which advertises detecting AI agents.","confidence":"medium"},{"name":"Mapbox","domain":"mapbox.com","category":"Dev platforms","verdict":"no","phone":"none","captcha":"risk","card":"required","review":"none","blocker":"Card collection is now embedded in the signup flow itself, with a mandatory CAPTCHA token on the register call.","confidence":"medium"},{"name":"Clerk","domain":"clerk.com","category":"Dev platforms","verdict":"maybe","phone":"none","captcha":"risk","card":"none","review":"none","blocker":"Email code, free 10k-MAU plan, no phone — Clerk dogfoods its own smart Turnstile on its dashboard signup.","confidence":"high"},{"name":"Auth0","domain":"auth0.com","category":"Dev platforms","verdict":"maybe","phone":"none","captcha":"risk","card":"none","review":"none","blocker":"No CAPTCHA widget on the page at all; Okta's server-side bot detection — tuned specifically for automated signup traffic — is the wildcard.","confidence":"medium"},{"name":"Exa","domain":"exa.ai","category":"Agent tools","verdict":"maybe","phone":"none","captcha":"risk","card":"none","review":"none","blocker":"Email-OTP flow with $10 credits an inbox agent can do — if it gets past Turnstile and the Vercel bot challenge fronting the dashboard.","confidence":"high"},{"name":"Firecrawl","domain":"firecrawl.dev","category":"Agent tools","verdict":"yes","phone":"none","captcha":"risk","card":"none","review":"none","blocker":"Built for this: agent-onboarding docs, an agent-facing SKILL.md, and a keyless free tier that needs no account at all.","confidence":"high"},{"name":"Browserbase","domain":"browserbase.com","category":"Agent tools","verdict":"no","phone":"required","captcha":"risk","card":"none","review":"none","blocker":"The signup form demands an SMS-verified phone number — from the company that sells headless browsers to agents.","confidence":"medium"},{"name":"Tavily","domain":"tavily.com","category":"Agent tools","verdict":"maybe","phone":"none","captcha":"risk","card":"none","review":"none","blocker":"1,000 free credits/month and an instant key, but an Auth0-hosted Turnstile widget is always rendered on signup.","confidence":"high"}]}