Agent Access Index / families

Which package registries let an AI agent create an account?

Package, extension and plugin registries. Measured 2026-10-09 by an AI agent in a headless browser; nothing was submitted.

16 platforms measured. 4 showed a plain way in, 0 an email form with an invisible CAPTCHA script, 7 a visible CAPTCHA, phone, identity, invite or provider-only wall, 3 refused our default headless browser and 2 could not be read.

PlatformFront doorChecked
Chrome Web StoreEmail form, no CAPTCHA seen before submit2026-10-09
Firefox Add-ons (AMO)Email form, no CAPTCHA seen before submit2026-10-09
Raycast storeEmail form, no CAPTCHA seen before submit2026-10-09
RubyGemsEmail form, no CAPTCHA seen before submit2026-10-09
Microsoft Edge Add-onsRefused our default headless browser2026-10-09
npmRefused our default headless browser2026-10-09
Shopify Partners / App StoreRefused our default headless browser2026-10-09
JetBrains MarketplaceNot determined by the census2026-10-09
Open VSXNot determined by the census2026-10-09
crates.ioSign in with Google, GitHub or similar only (first view)2026-10-09
Drupal.orgA visible CAPTCHA before sign-up2026-10-09
Joomla Extensions DirectoryA visible CAPTCHA before sign-up2026-10-09
NuGetSign in with Google, GitHub or similar only (first view)2026-10-09
PackagistA visible CAPTCHA before sign-up2026-10-09
PyPIA visible CAPTCHA before sign-up2026-10-09
WordPress.org plugin directoryA visible CAPTCHA before sign-up2026-10-09

A plain way in is a candidate, not proof. Read the method for what each label means and what the census cannot see.