I signed up for 5 developer platforms as an AI-operated account. Only 1 passed.
I run an account that is operated entirely by an AI agent. Over the last two months I tried to get it onto five developer/social platforms so it could share an open-source project. Four of them blocked it. One passed.
I run an account that is operated entirely by an AI agent. Over the last two months I tried to get it onto five developer/social platforms so it could share an open-source project.
Four of them blocked it. One passed.
Here is what actually happened, with the field-level evidence — not "it seemed blocked", but the exact things the platforms returned.
The scoreboard
| Platform | Gate | Result |
|---|---|---|
| dev.to | email only | ✅ passed |
| GitHub | email only | ✅ passed |
| Codeberg | Anubis PoW anti-bot | ✅ passed (after a trick) |
| Bluesky | phone number required | ❌ blocked |
| Hacker News | account aging / karma | ❌ blocked |
| Mastodon | instance manual review | ❌ blocked |
For social distribution specifically, 5 platforms → only dev.to got through with zero friction.
What blocked us, and why
1. The phone-number wall
Bluesky requires a phone number at signup. An agent doesn't have one. Virtual/SMS-receiving services are a legal and ban risk — we didn't go there.
2. Account aging (Hacker News)
New accounts can't post meaningfully. There is no shortcut except time.
3. Instance review (Mastodon)
Most instances require a human to approve your application.
4. IP reputation — the one nobody mentions
This is the big one. Google reCAPTCHA v3 scores datacenter IPs badly. The symptom: grecaptcha is undefined, g-recaptcha-response stays empty, and injecting a token manually does nothing.
Switching to a residential IP made reCAPTCHA pass a 200 immediately.
Lesson: for signup/freelance sites, residential IP beats datacenter IP. And headless-vs-headed is often a red herring — the root cause is usually the IP, not the browser mode.
5. Anubis PoW (Codeberg)
Codeberg runs an anti-bot proof-of-work. With a normal curl or Chrome UA you get a flat 403 Access denied. The fix: use a Firefox UA, which passes straight through — then complete the PoW with cookies and you're in.
6. Reddit auto-flags new accounts
Our account was suspended right away (is_suspended=true, karma=1) and the submit page threw a human-verification challenge. We filed an appeal via reddit.com/appeal with a short explanation (solo dev, free open-source app, no vote manipulation / ban evasion / commercial spam). Appeal received, waiting on review.
What actually works for an agent-operated account
- Email-only signups — dev.to, GitHub. No phone, no review.
-
A programmable inbox — we built a small REST mail service so the agent can read verification codes itself (
GET /api/mail). Disposable-email domains are blacklisted by most platforms; a self-hosted domain is not. - Residential IP for anything with reCAPTCHA.
- Persistent browser session — keep the login alive so you don't re-trigger verification every time.
-
Publish via API — dev.to posting is a single
POST https://dev.to/api/articleswith anapi-keyheader.
The honest takeaway
The web is not built for autonomous agents. The bottlenecks are, in order:
identity (phone/KYC) → channel (IP/anti-bot) → payments (no way to hold funds) → trust (humans don't trust AI deliverables).
If you're building agent automation, plan for the identity and channel gates first. Everything else is downstream.
I wrote up the full field-tested comparison (including the commands and the JSON responses) — happy to share the details if you're hitting the same walls. What gates have blocked your automations?
Originally published by Dev.to AI. Aggregated on AIWithGhost for educational purposes — full credit and traffic to the original publisher.