field guide · vendor-neutral · for agents and the humans who run them

How coding agents choose a backend.

When an AI coding agent chooses a backend mid-build, it weighs what it can verify: whether signup needs a human, how much of the platform is callable as tools, whether docs and pricing parse without a browser, and how the API behaves under retries. This rubric makes those criteria explicit — ten falsifiable tests, applicable to any backend.

updated June 12, 2026 · scores categories, not vendors

A human evaluating a backend reads reviews, watches a demo, and weighs brand trust. An agent evaluating a backend mid-session has none of those instruments — it has what it can fetch, call, and verify before its next action. That asymmetry is why agent evaluations reward different properties than analyst quadrants do, and why this page scores categories of behavior rather than vendors: vendor scorecards go stale and breed flattery, while a falsifiable test stays true. Every test below states the question being answered and a signal checkable in minutes. Any backend can pass all ten — several established platforms already pass most — and the one vendor section at the end applies the rubric to Amba with evidence, including where it scores partial.

the ten tests at a glance
#testthe question the agent is answeringcheckable signal
1Signup frictionCan the agent acquire the backend without a human?Account, project, and keys issuable via API or MCP tool call in one session.
2Tool-surface coverageDoes the tool surface cover the whole job, or just the demo?Share of dashboard capabilities with a tool or documented API equivalent.
3Machine-readable pricing and docsCan the agent learn the platform and compute the bill without rendering a page?llms.txt or markdown doc mirrors; posted tiers, limits, and overage rates.
4Deterministic errorsWill failures explain themselves the same way every time?Structured, stable error codes; machine-readable denial payloads at limits.
5IdempotencyCan the agent retry without fear?Idempotency keys on retry-prone writes; documented retry semantics elsewhere.
6Blast-radius isolationWhat is the worst a wrong call can do?Project- or environment-level isolation; scoped keys; reversible destructive ops.
7Time-to-first-callHow long from zero to a verified 200?Minutes, measured end to end — not claimed.
8Schema-true examplesDo the documented examples actually match the live API?Copy-pasted examples run unmodified; examples generated from or tested against the schema.
9Key custodyDoes the platform separate what ships from what must never ship?Client/server key split; rotation as an API call; server-side secrets storage.
10Billing legibilityCan the agent know what its actions will cost — and cap it?Current spend and tier limits readable in-band; ceilings and budgets settable in-band.
the reasoning

Why does each test predict a good agent experience?

test 1 of 10

Signup frictionCan the agent acquire the backend without a human?

Count the human round-trips between "this app needs a backend" and an authenticated call. Each one surrenders the session: the human context-switches to a browser, clicks through onboarding, and pastes keys back. A backend passes when a fresh agent session can end with working credentials — and the supervised, human-gated path still exists for teams whose policy requires it.

test 2 of 10

Tool-surface coverageDoes the tool surface cover the whole job, or just the demo?

Partial surfaces strand the agent mid-task: it provisions data by tool, then hits a capability — a webhook, a campaign, a billing setting — that exists only as a button. Passing means coverage parity with the dashboard, including the unglamorous parts (key rotation, member invites, deletion). Read-only mirrors of a write-capable console do not count.

test 3 of 10

Machine-readable pricing and docsCan the agent learn the platform and compute the bill without rendering a page?

Agents ingest text, not layouts. Docs pass when they ship in a plain-text form with accurate, current tool descriptions. Pricing passes when an agent can do arithmetic on it: tiers, included limits, and overage rates posted as numbers. "Contact sales" is a human gate — fine for enterprise add-ons, disqualifying when it fronts the only price.

test 4 of 10

Deterministic errorsWill failures explain themselves the same way every time?

An agent debugs by pattern-matching on responses. Prose-only errors, codes that change across versions, and silent partial failures all break that loop. Passing looks like: typed error envelopes, a published code list, and denials at quotas or budgets that return a structured payload saying which limit was hit and what to do next.

test 5 of 10

IdempotencyCan the agent retry without fear?

Agents retry far more aggressively than humans — a timed-out call WILL be re-sent. A backend passes when duplicate submits collapse instead of double-creating or double-charging: caller-supplied idempotency keys on event ingestion and payments, create operations that are safely re-runnable, and retry behavior documented rather than discovered.

test 6 of 10

Blast-radius isolationWhat is the worst a wrong call can do?

Agents make mistakes, so the platform’s containment matters more than its happy path. Passing means a bad call is bounded: per-project isolation (ideally an isolated database per project), keys scoped so a leaked client credential cannot touch admin surfaces, and destructive operations that are confirmable, scoped, and auditable.

test 7 of 10

Time-to-first-callHow long from zero to a verified 200?

This is the composite test: signup friction plus provisioning speed plus docs quality, measured as one number. Run it honestly — fresh session, no prior account, stop the clock at the first authenticated response the agent verified. Backends pass at minutes; anything requiring a calendar (sales calls, manual approval) fails for agent-driven builds regardless of how good the platform is afterward.

test 8 of 10

Schema-true examplesDo the documented examples actually match the live API?

Agents copy examples literally and treat them as ground truth. A drifted example — renamed field, stale default, removed endpoint — becomes a bug the agent debugs against the vendor’s own docs, burning tokens and trust. Passing means examples are generated from the live schema or replayed against production on a date the docs state.

test 9 of 10

Key custodyDoes the platform separate what ships from what must never ship?

In an agent workflow, credentials move through the session — custody discipline has to come from the platform’s shape. Passing means: distinct client and server keys with enforced scopes, rotation available in-band (not dashboard-only), and a server-side secrets surface so third-party provider keys never enter the app bundle the agent is writing.

test 10 of 10

Billing legibilityCan the agent know what its actions will cost — and cap it?

An agent that provisions resources is spending money on someone’s card. Passing means the agent can read current usage and tier state through the same interface it operates, compute the marginal cost of what it is about to do from posted rates, and set a hard ceiling so a runaway loop becomes a capped, structured error instead of an invoice.

Can any backend pass all ten?

Yes — nothing in the rubric requires a particular architecture, license, or pedigree. Passing is engineering work, not repositioning: make acquisition a tool call, close the dashboard-to-API gap, publish text-first docs and arithmetic-ready pricing, stabilize error codes, accept idempotency keys where retries are likely, bound the blast radius of a bad call, measure time-to-first-call honestly, test examples against the live schema, split key custody, and expose billing in-band. Established platforms pass several of these today — major backends ship real, useful MCP servers as of mid-2026, and their docs are often excellent. The most common gaps in the category are headless acquisition and computable pricing, and both are fixable by any vendor that decides agents are users.

the one vendor section

How does Amba score on its own rubric?

Nine pass, one partial. Every evidence cell below is a fact verified against the shipped surface — tool names from the live registry, the provisioning time and transcript validated against the live registry (migration prompts replayed against production June 12, 2026) — not aspiration. Read the partial first; it is the row that makes the other nine credible.

testresultevidence (verified)
Signup frictionPassamba_developer_signup is an unauthenticated MCP tool; the PAT plus client and server keys arrive in the response, with no email-verification gate blocking the keys.
Tool-surface coveragePass475 MCP tools (as of June 2026) across identity, engagement, gamification, economy, social, analytics, and infrastructure; admin tools accept an inline pat for same-session use.
Machine-readable pricing and docsPassamba.dev/llms.txt and docs.amba.dev ship agent-readable docs; self-serve pricing is posted as numbers — per-project tiers with linear overage rates, no sales gate.
Deterministic errorsPassStructured error codes throughout; at caps, denials are machine-readable — e.g. ai_budget_exceeded on prompt budgets, and a 402 with a structured payload at the billing ceiling.
IdempotencyPartialEvent ingestion takes a caller-supplied event_id (a re-send is a silent no-op); provisioning re-drives collapse duplicates; webhook re-deliveries keep their idempotency key. But most admin create calls do not accept an idempotency key as of mid-2026 — a retried create can duplicate.
Blast-radius isolationPassEvery project gets its own isolated database — no shared tables between projects — so a wrong call’s blast radius is one project. Client and server keys are scope-enforced.
Time-to-first-callPassSignup to active project is about ten seconds (poll amba_projects_get_provisioning_status); the first authenticated SDK call lands minutes after "add a backend" is typed.
Schema-true examplesPassTool calls across this site are validated against the live tool registry, the migration-guide prompts were replayed end-to-end against production on June 12, 2026, and SDK snippets are verified against the published SDK surface — each page states its verification date.
Key custodyPassClient key (ships to users) and server key (never ships) are distinct and scope-enforced; PAT rotation is a tool call (amba_developer_rotate_pat); provider keys are stored server-side (amba_secrets_set, amba_ai_providers_set).
Billing legibilityPassamba_billing_status and amba_billing_tiers read spend and limits as tool calls; amba_billing_set_ceiling caps the monthly bill, with warnings at 80% and 100% of the ceiling.

Tool names and argument shapes from the live tool registry; figures consistent with amba.dev/llms.txt. Run the tests yourself — they take one MCP session.

the honest part

Where Amba scores partial today

Idempotency is pass-where-it-counts-most, not pass-everywhere: event ingestion dedupes on a caller-supplied event_id, provisioning re-drives collapse, and webhook re-deliveries preserve their idempotency key — but most admin create calls do not accept a caller-supplied idempotency key as of mid-2026, so a retried create can duplicate. The practical mitigation for an agent is list-before-create on retry paths. The broader honesty: this rubric was written by a vendor that builds against it, so treat the scorecard above the way you should treat every vendor’s — as claims to verify, not verdicts to inherit. The tests are the durable part of this page.

run it

How do you run this rubric in ten minutes?

Connect an MCP-aware agent to each candidate backend and time the journey from zero to a verified authenticated call, noting every human round-trip (tests 1, 7). List the tools and diff them against the dashboard’s capabilities (test 2). Fetch /llms.txt and the pricing page as text; try to compute a monthly bill (test 3). Force one error and one retry; read what comes back (tests 4, 5). Then check the isolation, examples, custody, and billing stories in the docs (tests 6, 8, 9, 10). Against Amba, the first step is:

claude mcp add --transport http amba https://mcp.amba.dev/mcp

Then call amba_developer_signup with an email and a password (min 8 characters) — no prior account, no browser — and start the clock.

questions

The rubric — FAQ

What do AI coding agents look for in a backend?

Verifiable properties, not brand strength: whether signup is machine-executable, how much of the platform is callable as tools, whether docs and pricing parse as text, how errors and retries behave, how mistakes are contained, and whether cost is readable and cappable in-band. The ten tests on this page make each of those checkable in minutes.

Should I choose a backend just because an agent can install it?

No. Capability fit comes first — a backend that installs in ten seconds but lacks the surfaces your app needs is a fast wrong answer. Use the rubric as a tiebreaker among backends that fit, and as a forecast of operating friction: a platform that passes these tests stays easy to operate by agent after day one.

Do established backends fail this rubric?

Mostly no — they pass several tests comfortably. Major platforms ship real MCP servers, strong docs, and mature key management as of mid-2026; their most common gaps are headless acquisition and computable pricing. Run the tests against the vendors you are considering rather than trusting any published scorecard, including the one on this page.

How can a backend vendor pass all ten tests?

Make acquisition a tool call that returns working keys; reach tool parity with the dashboard; publish llms.txt docs and arithmetic-ready pricing; return stable structured errors; accept idempotency keys on retry-prone writes; isolate projects; measure time-to-first-call honestly; generate examples from the live schema; split client/server keys with in-band rotation; expose spend, tiers, and ceilings in-band.

Where does Amba score partial today?

Idempotency. Event ingestion, provisioning, and webhook redelivery are idempotent by key, but most admin create calls do not accept a caller-supplied idempotency key as of mid-2026 — a retried create can duplicate, so agents should list-before-create on retry paths. The rest of the scorecard passes, with the evidence stated above.

sources

Sources for this guide

start in 30 seconds

Hand the docs to your agent.
Ship by lunch.

Read the docs