Gusto — can an agent use it?
Gusto is one of the most agent-ready HR platforms scored so far: an official remote MCP server, 200+ API endpoints, explicit llms.txt for AI agents, and OAuth2 with documented rate limits. The main site blocking all automated access (403 on everything) is a contradictory signal that drags down the surface and retrieval scores.
FIND & RETRIEVE · 6.7
ACT & TRANSACT · 6.7
TRUST & DURABILITY · 6.8
FIND & RETRIEVE6.7/10Can an agent get correct information?
Machine-readable surface7.5/10
docs.gusto.com explicitly directs AI agents to llms.txt for markdown-formatted pages and OpenAPI endpoint listings. Status page is rich and machine-readable. However, gusto.com itself returns 403 on every path (home, pricing, terms, robots.txt, sitemap). The agent-aware docs surface is excellent; the main site is a wall. source
Information retrieval quality4/10
gusto.com/pricing returns 403. Pricing is publicly known ($49/mo base + $6/person as of March 2026) but only through third-party sources, not from the site itself. An agent cannot retrieve pricing, plan comparisons, or feature details from gusto.com directly. source
Documentation for machines8.5/10
Comprehensive developer documentation across two products (Embedded Payroll and App Integrations). 200+ endpoints documented with per-field reference. Authentication guides, webhook event coverage (25+ types), demo environment actions, Postman collections. llms.txt index with markdown versions of all pages. Among the best-documented HR APIs scored. source
ACT & TRANSACT6.7/10Can an agent do the job?
Action coverage8.5/10
200+ endpoints covering company creation, employee management (onboarding, tax config, I-9, termination/rehire), payroll processing (regular, off-cycle, contractor), benefits, banking, forms, time-off, and contractor payments. Demo environment mirrors production. Core HR actions (run payroll, hire/fire, manage benefits) are all API-accessible. source
Agent protocol support8.5/10
Official remote MCP server hosted by Gusto at mcp.api.gusto.com/anthropic — a first-party, hosted endpoint that works with Claude Code, Codex, Cursor, and VS Code without local installation. Covers payroll and people data from the system of record. Additionally, StackOne offers a 72-action MCP server with managed auth and prompt injection defence. source
Access & auth friction7.5/10
OAuth2 with system-level and company-level access tokens via self-serve developer portal. Tokens expire in 2 hours with refresh mechanism. Scoped permissions. Demo environment available immediately on registration. No manual approval needed for development access. source
Agent payment capability3/10
The API processes real payroll (ACH payments to employees and contractors) under programmatic control, which is closer to agent payment than most HR tools. However, no explicit agent payment protocol support (ACP, AP2, MPP, x402). The money movement is employer-to-employee, not agent-to-service. source
Cost & rate fairness6/10
Rate limits documented: 200 requests per minute per OAuth grant, 60-second rolling window, 429 on excess. Numeric limits are public and reasonable for integration use. API access pricing is not publicly documented — requires partner program discussion. source
TRUST & DURABILITY6.8/10Will it still work next quarter?
Permission & ToS stance5.5/10
gusto.com returns 403 on /terms, /robots.txt, and /legal/terms — the terms themselves are inaccessible to automated readers. However, docs.gusto.com explicitly welcomes AI agents (llms.txt reference on landing page). The contradiction is notable: the docs invite agents while the main site blocks them. No explicit anti-bot enforcement history found. source
Reliability & continuity8/10
Public status page with granular component breakdown (website, payroll, benefits, HR, phone, email, chat, API, mobile, 2FA). Provider-level transparency (AWS, Cloudflare sub-components). No incidents reported in the last 20 days. API versioned (v2024-04-01 current). Deprecated partner tokens have a migration path to system access tokens. source
Sources
Point-in-time assessment — services change terms, prices and APIs often. That volatility is itself scored under Reliability & continuity. Re-verified at least quarterly.
- docs.gusto.com — developer docs landing — explicit llms.txt reference for AI agents (accessed 2026-09-21)
- docs.gusto.com/embedded-payroll/docs/getting-started — Embedded Payroll quickstart — OAuth2, demo env, company creation (accessed 2026-09-21)
- docs.gusto.com/embedded-payroll/docs/authentication — authentication — system tokens, company tokens, refresh flow (accessed 2026-09-21)
- docs.gusto.com/app-integrations/docs/rate-limits — rate limits — 200/min per grant, 429 on excess (accessed 2026-09-21)
- status.gusto.com — status page — all systems operational, granular components (accessed 2026-09-21)
- mcpservers.org/remote-mcp-servers/gusto — official remote MCP server at mcp.api.gusto.com/anthropic (accessed 2026-09-21)
- gusto.com — home — returns 403 to automated requests (accessed 2026-09-21)
- gusto.com/pricing — pricing — returns 403 (accessed 2026-09-21)
- embedded.gusto.com/product/payroll-api — embedded payroll product page (accessed 2026-09-21)