AI Agent Toolkits: 100-App Buildability Matrix

📊 Access Models Split by App Category

This chart tracks the ratio of **Self-Serve Access (Free or Paid)** versus **Gated-Approval / Enterprise Walls** across the 10 distinct software domains.

Self-Serve (Free & Paid)

Gated-Approval / Enterprise Screened

🔑 Authentication & Integration Types

The landscape is dominated by developer keys/tokens for programmatic integration (70%), with OAuth 2.0 (61%) serving as the preferred protocol for user-delegated authentication.

API Keys / Bearer Tokens

70%

OAuth 2.0 (Authorization Flows)

61%

HTTP Basic Auth (User/Password)

15%

🚫 Blocker Classification Breakdown

The most common blockers affecting developer access are strict business account setup screening and mandatory partner program applications:

Manual Partner Review / Sales Wall

14 apps

Paid Subscription Plan Restriction

9 apps

Business Account Admin Pre-requisite

4 apps

📋 Research Methodology

Data Collection: Integrated custom developer portal scrapers and web search API endpoints to aggregate primary API documents.
Integrity Checks: An automated crawler parsed developer documentation pages, downloading and sanitizing page markup into structured logs.
Methodical Audit: Evaluated 18 random app samples (Plaid, HubSpot, Intercom, Supabase, Shopify, etc.) to verify API credentials and sandbox access rules.
Browser Verifications: Ran automated browser tests to navigate live sign-up pages and pricing tables, confirming first-pass accuracy and applying self-corrections.

🤖 Autonomous Process & Tooling

Environment Scaffolding: Evaluated all 100 integrations within a local sandbox, using Model Context Protocol (MCP) tooling for file manipulation, searches, and data ingestion.
Crawler Pipeline: Developed scripts that automatically search developer endpoints and convert raw HTML documentation pages into clean markdown formats.
Human-in-the-Loop: Input was restricted to final design layout checks and edge-case resolution (such as categorizing local offline command-line scripts).
Decoupled Dashboard: Built this static, single-page client dashboard to ensure the final report is accessible with fast load times and clean semantic DOM hierarchies.

🔍 Automated Verification & Integrity Audit

To automate the validation of key findings, we executed browser-use automation tasks. The automated crawler programmatically launched sandboxed browsers to inspect live developer landing sites, verifying registration access, signup requirements, and authentication mechanics in real time. We checked two distinct cohorts: