Blog · 14 October 2026
The tools personal assistants will reach for, and where they get stuck
Personal assistants are starting to run errands for people, and most of the tools those errands need were built for a person with a phone and a card. We reviewed the categories to see where agents stall.
Assistants such as Claude, ChatGPT and Meta's Muse now connect to outside services. Asmi, an errand service, runs a separate MCP endpoint for each of the three, so a person can ask any of them to book an appointment or chase a refund [1]. That is the shape of what is coming. A person asks for something in plain words, and the assistant has to find a tool that can do it.
Today most of those tools were made for a person. They expect someone to download an app, make an account, type a code from a text message and enter a card. In my view, assistants will meet these tools more and more as they take on errands, and without a route built for them they will either fail or spend a lot of tokens finding a way round.
On 14 October we added seven categories of everyday tools to the directory [2]. This post reviews them alongside the other categories an assistant needs, and draws the workflows where agents stall.
The errand categories score lowest
We grade every listing out of 100 against the same checklist, and the average across the directory is 57.7 [3]. The categories that serve developers (email, messaging, maps) score close to that or above it. The categories that serve a household score well below it [3].
Average score
- Email64
- Messaging64
- Maps62
- Scheduling59
- Contacts57
- Health data57
- Bank data54
- Travel49
- Shopping48
- Restaurant and local bookings35
- Subscriptions and personal finance23
- Home services22
Bars start at zero. Values are labelled in each panel.
The pattern is in who the vendor sells to. Email and messaging companies sell to developers, so their APIs are self-serve and documented. A restaurant network or a budgeting app sells to diners and households through an app, and the API, where there is one, serves the venue or a partner [3].
How an outside agent gets in
For each listing we record whether a developer can sign up and get a key, whether access goes through a partnership or a sales call, or whether there is no route for an outside agent at all. That last group is tagged "not for agents" [3].
Self-serve
- Email14
- Messaging14
- Bank data8
- Health data7
- Travel6
- Shopping5
- Home services2
- Restaurant and local bookings1
- Subscriptions and personal finance1
Partner or sales
- Email0
- Messaging0
- Bank data7
- Health data5
- Travel5
- Shopping0
- Home services1
- Restaurant and local bookings4
- Subscriptions and personal finance0
Not for agents
- Email0
- Messaging0
- Bank data0
- Health data0
- Travel0
- Shopping0
- Home services7
- Restaurant and local bookings4
- Subscriptions and personal finance9
Bars start at zero. Values are labelled in each panel. Each panel has its own scale.
Shopping looks open in that chart, but none of the five shopping listings lets an agent place an order through a self-serve API. Amazon's Creators API and Walmart's affiliate API search the catalogue and return affiliate links [4] [5]. Best Buy keeps ordering in a Commerce API that is invite-only [6]. Etsy's API has no cart or checkout for buyers [7].
MCP servers follow the same line. Most email and messaging listings have one. None of the ten personal finance listings does [3].
Listings
- Messaging14
- Email14
- Maps13
- Health data12
- Travel11
- Scheduling10
- Restaurant and local bookings9
- Home services10
- Shopping5
- Subscriptions and personal finance10
With an MCP server
- Messaging11
- Email10
- Maps9
- Health data5
- Travel4
- Scheduling5
- Restaurant and local bookings3
- Home services2
- Shopping1
- Subscriptions and personal finance0
Bars start at zero. Values are labelled in each panel. Each panel has its own scale.
The categories, one by one
Restaurant and local bookings. Square Appointments is the one self-serve booking API in the category, and it acts for the venue, not the customer [8]. OpenTable documents a full diner booking flow, but access needs partner approval and a contract [9]. Resy has an MCP endpoint that accepts only clients American Express has registered [10].
Home services. Seven of ten listings are not for agents, among them Angi, whose terms forbid access by robots and other automatic devices [11]. Taskrabbit covers the whole booking flow in its Partner API, with keys from a partnership manager [12]. Checkatrade is the exception, with a keyless MCP server that searches UK trades and books fixed-price jobs [13].
Subscriptions and personal finance. Nine of ten are apps with no API an outside agent can call. Rocket Money cancels subscriptions and negotiates bills for people in its app, and its terms forbid automated access without written consent [14]. YNAB is the one with a public API, with OAuth and a read-only scope [15].
Shopping. Catalogue search works. Buying does not, for the reasons above. Instacart turns a shopping list into a cart page, then the person picks a store and checks out [16].
Travel. Duffel lets a developer sign up and book flights in test mode with no card or contract [17]. Booking.com's Demand API needs Managed Affiliate Partner status [18]. The Kiwi.com MCP server searches flights, and booking and payment happen on kiwi.com through a link [19].
Health data, contacts and desktop automation. These lean towards developers and score near the directory average [3]. Terra reads wearable data through an MCP server, from $499 a month [20]. The Google People API reads and writes a person's contacts under OAuth scopes [21]. UiPath exposes desktop robots as MCP tools, which is how an assistant could drive an app that has no API [22].
The assistants themselves are graded too. The personal assistants category averages 33.5, and most of its 41 listings are consumer apps another agent can't call [23].
Where agents stall
The same few steps stop an agent across every category. They are the steps that check a person is present, which is the point of them, and that is why I think they need a second route built for agents, not a workaround.
Signing in
A consumer app assumes a person will make the account and prove who they are. This is the route into a typical budgeting app.
- Agent can do it
- Needs the person
- Blocked
YNAB shows the other route. A person still starts it, but once, and the agent gets a token it can use with a limit on what it can do.
- Sign upNeeds the person
A person signs up in a browser [15]
- Approve the assistantNeeds the person
The person creates a token or approves an OAuth app, and can choose a read-only scope [15]
- Read and edit the budgetAgent can do it
The agent calls the REST API with the token [15]
- Stay within the limitCosts tokens
Each token gets 200 requests an hour, and a 429 response doesn't say how long to wait [15]
- Agent can do it
- Costs tokens
- Needs the person
Some services built for agents shorten even the first step. AgentMail lets an agent sign itself up by API and get a key, with full access after a person confirms a six-digit code [25].
Booking
Booking a table shows how much of a flow can be ready for agents and still be closed to a new assistant.
- Get accessBlocked
An assistant needs approval as an OpenTable partner and an agreement first [9]
- Search availabilityAgent can do it
Availability search covers a window of up to 720 minutes [9]
- Check the policyAgent can do it
Policy endpoints return deposits, card holds and cancellation cut-offs before booking [9]
- Ask the personNeeds the person
Any deposit, hold or service fee should go to the diner before the agent commits [9]
- Lock the slotCosts tokens
The lock expires within 5 minutes, so a slow confirmation means searching again [9]
- Pay the holdNeeds the person
Card details are tokenised with Spreedly or Stripe, from the diner's card [9]
- Make the bookingAgent can do it
A unique X-Request-Id stops a retried booking being made twice [9]
- Agent can do it
- Costs tokens
- Needs the person
- Blocked
Checkout and payment
Buying something is where every route we read hands back to a person. This is grocery shopping through the one shopping listing with an MCP server.
- Turn the list into a cartAgent can do it
Two MCP tools turn a recipe or list into an Instacart page [16]
- Choose products and pricesBlocked
There is no product search or price endpoint [16]
- Pick a store and payNeeds the person
The person picks a store and checks out on Instacart [16]
- Track the orderBlocked
There is no order or order status endpoint [16]
- Agent can do it
- Needs the person
- Blocked
Checkatrade's booking flow ends the same way, at a payment link the person completes [13]. Handing payment to the person is a reasonable default. What I'd like to see is a route where the person sets the limits once and the agent pays inside them.
- Set the limitsNeeds the person
Under AP2 the person signs a mandate in advance, bound to the agent's key [26]
- Get the priceAgent can do it
Under x402 the server answers with status 402 and what the request costs [27]
- Get the resultAgent can do it
The agent sends the request again with proof of payment [27]
- Agent can do it
- Needs the person
The protocols exist, but they are early. Google has named no production deployment of AP2 [26], and ACP has had no release since 17 April 2026 [28]. Fifteen of the tools we list accept x402, and none of them is in the errand categories [3] [27].
Cancelling
Cancelling a subscription has no API route among the listings we read. Rocket Money does it for people inside its app [14]. Asmi does it by calling, texting and emailing the business, at $10 a month for 20 tasks [1].
- Find the chargeAgent can do it
A budgeting API such as YNAB's lists a person's transactions [15]
- Reach the merchantBlocked
The finance apps we list cancel only inside their own apps [14]
- Call or write insteadCosts tokens
An errand service such as Asmi calls, texts or emails the business as a paid task [1]
- Allow the outreachNeeds the person
The person grants the scope that lets Asmi contact people on their behalf [1]
- Agent can do it
- Costs tokens
- Needs the person
- Blocked
Where the tokens go
When there is no API, an assistant can still open a browser or drive a desktop app. That is what the browser and desktop automation categories are for [22]. In my experience it is also the most expensive way to do an errand, because the model reads pages and screenshots to do what one API call would. Some vendors don't want it either. Resy describes blocking bots at scale [10], and the terms of Angi, Emma and Rocket Money forbid automated access [11] [24] [14].
Tools that do have an MCP server can cost tokens another way. Every tool's name, description and schema is text the model reads, and some servers load a great many of them.
Tools
- Courier170
- MailerSend127
- LiteAPI111
- Redox107
- Cal.com63
- AgentMail36
- Checkatrade2
- Instacart2
Bars start at zero. Values are labelled in each panel.
AgentMail loads all 38 of its hosted tools at once [25], and LiteAPI's hosted MCP exposes 111 generated tools [29]. Our counts for the others come from each listing [3]. Checkatrade and Instacart do their jobs with two tools each [13] [16]. For an assistant that may connect dozens of services, I think a short tool list is a feature in its own right.
What would help
Most of this is in reach of the companies that already have APIs. From the listings above, the parts that make the difference are these.
- A key or an OAuth app a developer can get without a sales call, as Square, YNAB and Duffel allow [8] [15] [17].
- A read-only scope, so a person can let an assistant look without letting it act, as YNAB has [15].
- An idempotency key on every booking or payment, as OpenTable's X-Request-Id and Square's idempotency keys are [9] [8].
- Policies and prices returned before the commitment, as OpenTable's policy endpoints do [9].
- A payment step an agent can finish within limits the person set, or at least a payment link it can hand over, as Checkatrade returns [13].
- A clear rule for agents. Amazon's Agent Terms require agents to identify themselves, which at least says where the line is [4].
The apps we tagged "not for agents" are graded on the same checklist as everything else, so the day one of them opens a route, its score will show it.
How we counted
Counts and averages come from the directory as built on 14 October 2026. A category's average is the mean score of its graded listings. "Not for agents" means we found no public API or MCP server an outside agent can call. "Partner or sales" means a listing tagged partner-only or sales-led, and "self-serve" is the rest. Tool counts are as recorded on each listing [3].
References
Listings read from the directory on 14 October 2026. Each listing carries the vendor sources it was graded from.
- [1]Anchor Terminal, Asmi listing. Source for the MCP endpoints for Claude, ChatGPT and Muse, the errands Asmi runs, its outreach scope and its prices. anchorterminal.com
- [2]Anchor Terminal, changelog, 14 October 2026. Source for the seven categories added that day. anchorterminal.com
- [3]Anchor Terminal, tool rankings and category pages, 14 October 2026. Source for listing counts, average scores, access routes, MCP counts, tool counts, x402 counts and "not for agents" tags. anchorterminal.com
- [4]Anchor Terminal, Amazon Creators API listing. Source for catalogue search with affiliate links, no ordering, and the Agent Terms. anchorterminal.com
- [5]Anchor Terminal, Walmart Affiliate Marketing API listing. Source for read-only catalogue search with no ordering. anchorterminal.com
- [6]Anchor Terminal, Best Buy Developer API listing. Source for the invite-only Commerce API. anchorterminal.com
- [7]Anchor Terminal, Etsy Open API v3 listing. Source for the absence of buyer cart and checkout endpoints. anchorterminal.com
- [8]Anchor Terminal, Square Appointments listing. Source for the self-serve Bookings API acting for the venue, and its idempotency keys. anchorterminal.com
- [9]Anchor Terminal, OpenTable APIs listing. Source for partner approval, the booking flow, slot locks, policy endpoints, card tokenisation and X-Request-Id. anchorterminal.com
- [10]Anchor Terminal, Resy listing. Source for the pre-registered MCP endpoint and bot blocking. anchorterminal.com
- [11]Anchor Terminal, Angi listing. Source for the terms forbidding automated access. anchorterminal.com
- [12]Anchor Terminal, Taskrabbit Partner API listing. Source for the booking flow and partner-issued keys. anchorterminal.com
- [13]Anchor Terminal, Checkatrade listing. Source for the keyless MCP server, its two tools, fixed-price bookings and the payment link. anchorterminal.com
- [14]Anchor Terminal, Rocket Money listing. Source for in-app cancellation, account and bank connection, the absence of an API and the terms on automated access. anchorterminal.com
- [15]Anchor Terminal, YNAB listing. Source for the REST API, sign-up, tokens, the read-only scope and the rate limit. anchorterminal.com
- [16]Anchor Terminal, Instacart Developer Platform listing. Source for the cart page, its two MCP tools and the missing search, price and order endpoints. anchorterminal.com
- [17]Anchor Terminal, Duffel listing. Source for self-serve sign-up and test mode with no card or contract. anchorterminal.com
- [18]Anchor Terminal, Booking.com Demand API listing. Source for Managed Affiliate Partner status. anchorterminal.com
- [19]Anchor Terminal, Kiwi.com MCP Server listing. Source for search only, with booking on kiwi.com. anchorterminal.com
- [20]Anchor Terminal, Terra API listing. Source for the MCP server and the $499 starting price. anchorterminal.com
- [21]Anchor Terminal, Google People API listing. Source for contact access under OAuth scopes. anchorterminal.com
- [22]Anchor Terminal, UiPath listing. Source for desktop robots exposed as MCP tools. anchorterminal.com
- [23]Anchor Terminal, personal assistants category, 14 October 2026. Source for the category's listings and average score. anchorterminal.com
- [24]Anchor Terminal, Emma listing. Source for account creation, Open Banking, the absence of an API and the terms on bots. anchorterminal.com
- [25]Anchor Terminal, AgentMail listing. Source for agent sign-up by API with a six-digit code, and its 38 hosted tools. anchorterminal.com
- [26]Anchor Terminal, Agent Payments Protocol (AP2) listing. Source for user-signed mandates and the absence of a named production deployment. anchorterminal.com
- [27]Anchor Terminal, x402 at Anchor Terminal. Source for how an x402 payment goes, the 402 response with its price and the list of tools that accept x402. anchorterminal.com
- [28]Anchor Terminal, Agentic Commerce Protocol (ACP) listing. Source for vaulted card tokens and the last release date. anchorterminal.com
- [29]Anchor Terminal, LiteAPI listing. Source for the 111 generated tools on its hosted MCP. anchorterminal.com