Can an agent create a feature flag with Statsig Feature Gates?

A person has to keep checking whether it worked. A person also decides once at Authority. Job reachable, not yet run.

observedProbed 13 Octrevision sha256:0cc8b7d83985…

Who does each step

how grades work →

Whether the agent handles it alone or a person has to step in.

01
Discover
Machine
The vendor's own machine-readable documents lead an agent to the job's interface.
02
Authority
Approval · setup
You consent once to the agent's own client.
03
Onboard
Machine
The agent can register itself with no person.
04
Pay
Not applicable
Nothing to pay for the job.
05
Confirm
Workaround · recurring
Nothing typed tells an agent a failure from a success, so a person has to check the results.
06
Sustain
Machine
The agent can renew and revoke its own access.

You, once, at Authority: consenting to the agent's access.

A person again and again, at Confirm: checking whether it worked.

Not A+ yet: typed errors would let an agent tell a failure from a success.

Agent surfaces

2 kinds · 6 entries

OAuth

statsigapi.net2 more

api.statsig.com api.statsig.com/v3/mcp

Names the job's endpoint

For agents

statsigapi.net2 more

api.statsig.com docs.statsig.com/llms.txt

Names the job's endpoint

The probe

13 Oct 2026 · 09:30 UTC · 87.19 s

Each request it sent and what came back; the descriptors it read, counted, with what they named.

Discover44 descriptor reads11 facts

Found: OAuthapi.statsig.com/v3/mcpFor agentsapi.statsig.comFor agentsstatsigapi.netFor agentsstatsigapi.netFor agentsstatsigapi.netFor agentsapi.statsig.comFor agentsapi.statsig.comFor agentsapi.statsig.comFor agentsdocs.statsig.com/llms.txtFor agentsstatsigapi.netFor agentsapi.statsig.com
From: api.statsig.com/.well-known/oauth-protected-resource/v3/mcp · statsigapi.net/.well-known/oauth-authorization-server · statsigapi.net/.well-known/oauth-protected-resource · api.statsig.com/.well-known/oauth-authorization-server · api.statsig.com/.well-known/oauth-protected-resource · docs.statsig.com/llms.txt · docs.statsig.com/console-api/introduction
This endpoint: statsigapi.net is named by a descriptor it read

Job requestPOST statsigapi.net/console/v1/gates40194 ms

Request: POST https://statsigapi.net/console/v1/gates
Response: 401 · application/octet-stream · 12 bytes
Body: sha256:d089c8a9fc28e4e50223eb38c9409e362521be9380a37341304fbac7a4cd9e5f
Exchange: sha256:eadf9bcf87e37a51e89107e962a1ee7f621e48e7b4d09d6ac5aff97d0be501bf

Resource metadataGET statsigapi.net/.well-known/oauth-protected-resource/console/v1/gates404100 ms

Request: GET https://statsigapi.net/.well-known/oauth-protected-resource/console/v1/gates
Response: 404 · application/json · 116 bytes
Body: sha256:a5c5308a34f67d5bb270944ea3fa5baa31315911483842e3652af23211b16096
Exchange: sha256:446155068cd1623c075122b24407658d6dbbfcbe96f9332d3dfb6bac145b6d55

Resource metadataGET statsigapi.net/.well-known/oauth-protected-resource200104 ms

Request: GET https://statsigapi.net/.well-known/oauth-protected-resource
Response: 200 · application/json · 90 bytes
Body: sha256:d69722352a0529b1386cb0a820c8f9342612c96cde9e883d66a38b3c3225766b
Exchange: sha256:dd8d66af1f5f8a60ce4506e26a23d871c6fd49f390a0f1702d4837f803311bb7

Authorization serverGET statsigapi.net/.well-known/oauth-authorization-server200115 ms

Request: GET https://statsigapi.net/.well-known/oauth-authorization-server
Response: 200 · application/json · 479 bytes
Body: sha256:3a018275aa9b00b02d3603e09a110f046a2da255eedd6e2481157109501cf8b1
Exchange: sha256:cc0ab5fadf64ee248b9e2221ad2b31f1b43b50d9b7f66cc951b63d569ac8edb1

Client registrationPOST statsigapi.net/v1/oauth/register201106 ms

Request: POST https://statsigapi.net/v1/oauth/register
Response: 201 · application/json · 369 bytes
Body: sha256:e59a4a1665abc437bc834fc32bb60e20949476e2698f5ea3393fccdd207d4b3a
Exchange: sha256:e57f0d26c3b34bd07f9c3966bed593ba17f6256722e595893e3dba81f87191f9

AuthorizationGET statsigapi.net/v1/oauth/authorize?response_type=code&client_id=oauth-sJiWT0mvIBk8TYjDw7U1UZjgtxLUTewdqGoyQQ8YQyQ&redirect_uri=https%3A%2F%2Fapi.sourcey.com%2F.well-known%2Fagent-readiness%2Fcallback&state=6efb89b0275558868221ccef41b71c02&code_challenge=t2zT13TnkfYBqHSNMCxOOVmUdEMW0rtSR92rYzb_Sxk&code_challenge_method=S256&resource=https%3A%2F%2Fstatsigapi.net%2Fconsole%2Fv1%2Fgates302153 ms

Request: GET https://statsigapi.net/v1/oauth/authorize?response_type=code&client_id=oauth-sJiWT0mvIBk8TYjDw7U1UZjgtxLUTewdqGoyQQ8YQyQ&redirect_uri=https%3A%2F%2Fapi.sourcey.com%2F.well-known%2Fagent-readiness%2Fcallback&state=6efb89b0275558868221ccef41b71c02&code_challenge=t2zT13TnkfYBqHSNMCxOOVmUdEMW0rtSR92rYzb_Sxk&code_challenge_method=S256&resource=https%3A%2F%2Fstatsigapi.net%2Fconsole%2Fv1%2Fgates
Response: 302 · application/octet-stream · 0 bytes
Body: sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Exchange: sha256:3e1258f05b07eef36b2a53ed8ad9253f70631fa37674ab836ab882bfd505bf53

Job requestsession openedPOST api.statsig.com/v3/mcp401105 ms

Request: POST https://api.statsig.com/v3/mcp
Response: 401 · application/json · 138 bytes
Body: sha256:8740b4ecfc1a3497945abf3e5654ec1e6eb2d6bbacfc4a58435d854c5388bee8
Exchange: sha256:5967f126ddfb0c1e7f80b5cfcc7b8d7d9213f704acd53a1458fb42ca66bcfa94

Resource metadataGET api.statsig.com/.well-known/oauth-protected-resource/v3/mcp200112 ms

Request: GET https://api.statsig.com/.well-known/oauth-protected-resource/v3/mcp
Response: 200 · application/json · 97 bytes
Body: sha256:a2d1985c7d8bad0419d41d91ee2822d2521374bc7dd1e27449f1e56ac83161e8
Exchange: sha256:c52956270ab0808e17f430ba95fb28d6ac35e4821b4da9045788806ce1022dba

Authorization serverGET api.statsig.com/.well-known/oauth-authorization-server20096 ms

Request: GET https://api.statsig.com/.well-known/oauth-authorization-server
Response: 200 · application/json · 483 bytes
Body: sha256:12bb6419a6591b63e152dd06ac846bbb142b7bf2304338b6b7628ef3f31e1eeb
Exchange: sha256:6114f806190335c643a5e1872c29bc6cabf85ba38d067dcce7edb9f0f994414e

Client registrationPOST api.statsig.com/v1/oauth/register201168 ms

Request: POST https://api.statsig.com/v1/oauth/register
Response: 201 · application/json · 369 bytes
Body: sha256:f7f0c6f67cc678184980f2c5285c268c01dba7662367ae4d64c3ed9a0c54f526
Exchange: sha256:051ec5de69059c1f88b5696429435961c55806a1416052bd2d10dc94a148df73

AuthorizationGET api.statsig.com/v1/oauth/authorize?response_type=code&client_id=oauth-8ge3iZIj8VOedhzIqMbLMCDQNG3O5YKuWKCIo7bzbhD&redirect_uri=https%3A%2F%2Fapi.sourcey.com%2F.well-known%2Fagent-readiness%2Fcallback&state=6efb89b0275558868221ccef41b71c02&code_challenge=t2zT13TnkfYBqHSNMCxOOVmUdEMW0rtSR92rYzb_Sxk&code_challenge_method=S256&resource=https%3A%2F%2Fapi.statsig.com%2Fv3%2Fmcp302371 ms

Request: GET https://api.statsig.com/v1/oauth/authorize?response_type=code&client_id=oauth-8ge3iZIj8VOedhzIqMbLMCDQNG3O5YKuWKCIo7bzbhD&redirect_uri=https%3A%2F%2Fapi.sourcey.com%2F.well-known%2Fagent-readiness%2Fcallback&state=6efb89b0275558868221ccef41b71c02&code_challenge=t2zT13TnkfYBqHSNMCxOOVmUdEMW0rtSR92rYzb_Sxk&code_challenge_method=S256&resource=https%3A%2F%2Fapi.statsig.com%2Fv3%2Fmcp
Response: 302 · application/octet-stream · 0 bytes
Body: sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Exchange: sha256:e0c7c987b758ca1e793dd291ba7e8d0ab03d9c91a041de4024e71363795126e2

Declared pageGET console.statsig.com307117 ms

Request: GET https://console.statsig.com
Response: 307 · application/octet-stream · 0 bytes
Body: sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Exchange: sha256:7c98bcdace2990da0b7c4a629be66ca4db79e3acd961b520394144a4ce93a36a

Statsig on the startup-offers board

catalog record →

At least $50,000 in creditsStatsig Startup Program

The grade’s badge

One image that keeps itself current, linking here.

[![agent grade](https://sourcey.com/badges/agent-readiness/arp_01m4t9k0v96vpehg1q7hqa5ztg.svg)](https://sourcey.com/c/statsig/agent-readiness/statsig-feature-gates/feature-flag-create)

Improve the report

Correct it, probe it again, or improve the path.

Report outdated evidence Request reassessment Claim this record

Profile: arp_01m4t9k0v96vpehg1q7hqa5ztg
Revision: sha256:0cc8b7d83985d49030d04bd8d6fa33402f67304eadd189d6e5b69d943e295e1f
Projection: sha256:7d010d0d587accd91b984009fdb967e87611c7f0c7d9f7a86053e6c789a75945
Policy: kind-2026-10-12.2 · sha256:b612172aad277b54461de84e006815126f2df566563954b02f4432a39cad89ac
Base release: sha256:b8d2307bdb2bd192cdb6e4a0586bf54e4c306eb8bae6a6f3c48ddff04bcdcee1

A report or a reassessment request names this profile, its revision and its projection. How report cards are assessed →View the exact declaration

Who does each step

Discover

Authority

Onboard

Pay

Confirm

Sustain

Agent surfaces

The probe

Statsig on the startup-offers board

The grade’s badge

Correct it, probe it again, or improve the path.