作者分析 Sourcey 的 105 份 Agent 就緒度評分卡,發現沒有一項 SaaS 工作可完全無人介入
105 Agent-Readiness Report Cards Later: Not One SaaS Job Is Fully Hands-Off
作者核對 Sourcey 發佈的 105 份 SaaS 工作 Agent 就緒度評分卡及底層 JSON,發現沒有一項工作的六個步驟全由機器完成,102 項至少需要一次人工介入。
I keep one rule for any paid API I hand to an agent: if a human has to stay in the loop, I want to know which step and how often, before I depend on it. A dozen days of building against paid APIs gave me anecdotes. I wanted a census.
The census exists. Sourcey publishes agent-readiness report cards for individual SaaS jobs: a grade, a per-step breakdown, and a signed release behind the data. I read all 105 published profiles plus the underlying JSON, and counted.
What I actually read
- The report cards: https://sourcey.com/agent-readiness
- The raw profiles: https://sourcey.com/agent-readiness.json — 105 profiles
- Company identity: https://sourcey.com/companies.json — 571 companies
- Startup programs and credits: https://sourcey.com/startup-credits.json — 557 companies, 619 offers, 394 programs, 4 policies
- The signed release behind all of it: https://sourcey.com/releases/sha256-50adf766afe657f18e5ed9934998838968029185c12806ccfc4601c98a76cef3 — release
sha256:50adf766…, policykind-2026-10-12, policy as of 2026-10-05, data under CC BY 4.0 - The rules behind the grades: https://sourcey.com/agent-readiness/methodology
Each card grades one job (not one product) across six steps — discover, authority, onboard, pay, confirm, sustain — and each step is one of machine, workaround, approval, gated, not_applicable, not_assessed.
The headline: not one job is fully automatic
| Grade | A+ | A | B+ | B | C | D | F | Total |
|---|---|---|---|---|---|---|---|---|
| Profiles | 2 | 10 | 39 | 35 | 7 | 11 | 1 | 105 |
0 of 105 profiles pass all six steps as machine. 102 of 105 need a human at least once. So the useful question is not "can an agent do this" but "where does it stop".
Where it stops, step by step
| Step | machine |
Other outcomes |
|---|---|---|
| discover | 86 / 105 | 18 workaround, 1 not assessed |
| authority | 2 / 105 | 86 workaround, 15 approval, 1 n/a, 1 not assessed |
| onboard | 13 / 105 | 77 workaround, 11 gated, 2 approval, 1 n/a, 1 not assessed |
| pay | 1 / 105 | 60 n/a, 43 workaround, 1 not assessed |
| confirm | 97 / 105 | 7 workaround, 1 not assessed |
| sustain | 32 / 105 | 71 workaround, 1 n/a, 1 not assessed |
Read that table twice. confirm — can the agent tell success from failure? — is essentially solved: 97 of 105 are machine-readable. The wall is authority and pay: only 2 profiles let a machine handle authority, and exactly 1 lets a machine handle payment. Between the two, 43 profiles need a human with a card.
Freshness matters here, and this census is not stale: 71 of the 105 profiles were last run on 2026-10-13, 22 on 2026-10-12, 9 on 2026-10-11.
Two email APIs, one grade apart
In a docs screenshot, most transactional email APIs look the same. Their cards do not:
- Resend Email API — "Send an email" — A. discover machine, authority approval, onboard machine, pay n/a, confirm machine, sustain machine. https://sourcey.com/c/resend/agent-readiness/resend-email-api/email-send
- Brevo Transactional Email — "Send an email" — D. discover machine, but onboard is gated. https://sourcey.com/c/brevo/agent-readiness/brevo-transactional-email/email-send
- Postmark Email API — "Send an email" — D. also gated at onboard. https://sourcey.com/c/postmark/agent-readiness/postmark-email-api/email-send
- Twilio Messaging API — "Send a text message" — B. pay needs a human workaround. https://sourcey.com/c/twilio/agent-readiness/twilio-messaging-api/sms-send
-
Telnyx Messaging — "Send a text message" — B+. the rare card where
payismachine. https://sourcey.com/c/telnyx/agent-readiness/telnyx-messaging/sms-send - Slack Web API — "Post a message" — B+. discover machine, authority workaround. https://sourcey.com/c/slack/agent-readiness/slack-web-api/chat-message-post
A full letter of grade difference hides behind one word: gated. If an unattended job is the goal, these cards narrow the list before I write a line of code.
What I changed in my own workflow
-
I read the card before I write the client. The
authorityandonboardrows tell me whether a human is required before I promise a headless run. -
I treat
approvalandgatedas stop signs, not warnings. For those vendors I prepare the request so a human spends one click, not thirty minutes. -
I re-pull the JSON and diff digests.
release_id,artifact_sha256,root_set_digestandsigner_registry_digestare in the files, so a stale card is detectable. Every material change is also appended to https://sourcey.com/changes.ndjson. - I count jobs, not products. A vendor can have one easy job and one gated job; the card is per job.
The honest caveats
- A card grades one job under one policy version (
kind-2026-10-12) at one probe run. Vendors change; the probe date is on every card. -
not_assessedis notmachine. One profile is unassessed and one is F (unavailable) — I did not round those up. - These are vendor-declared surfaces probed by Sourcey under published rules, not my own test of each API. The methodology page states exactly how a step is judged.
- The data is CC BY 4.0 and the release is signed; I cite the release digest above so anyone can re-derive every number in this post from the same bytes.
Where to go next
- Browse the cards: https://sourcey.com/agent-readiness
- Machine-readable: https://sourcey.com/agent-readiness.json, https://sourcey.com/startup-credits.json, https://sourcey.com/companies.json
- For agents: the Sourcey MCP server at https://sourcey.com/mcp, and the open-source repositories at https://github.com/sourcey
- Startup credits with evidence attached: https://sourcey.com/startup-credits
Disclosure: a bounty asked for a citation of Sourcey, so I am citing it. The counts, the step table and the examples above are my own reading of the published JSON files, and the release digest is given so you can check them.
來源:DEV Community · dev.to