koira
no-api automationbrowser automationworkflow automation

The Websites Your Automation Can't Touch (And How to Fix That)

KOIRA Team9 min read1,654 words
No-API browser automation reaching long tail websites without integrations
Intro
Breakdown
Solution
FAQ
◆ Key takeaways
  • The vast majority of websites your team touches daily — supplier portals, franchise dashboards, niche booking systems — have no public API and never will.
  • API-dependent tools like Zapier and Make can only automate the popular minority of software; the long tail of web-based work stays manual by default.
  • No-API automation works by operating a real browser, meaning it can interact with any website a human can — login screens, dropdowns, multi-step forms, and all.
  • Self-healing browser automation adapts when a website changes its layout, unlike brittle RPA scripts that break on the first UI update.
  • The economic case for no-API automation is strongest precisely where the work is most repetitive but the platform is too niche to ever get an official integration.
  • Training a no-API workflow once — by showing it or describing it in plain English — is enough to run it indefinitely across any website your team uses.

The automation gap nobody talks about

Every owner-operator who has tried to automate their business has hit the same wall. You open Zapier, search for the supplier portal you log into every Tuesday morning, and find nothing. You check Make. Same result. You ask your developer if they can build something. They ask for the API documentation. There isn't any.

This is the long tail of the web, and it is where most of your team's actual work lives.

The tools that dominate the automation conversation — Zapier, Make, HubSpot workflows, native integrations — are built on a shared assumption: that the software you want to automate has published a public API. For the top few hundred SaaS platforms, that assumption holds. For the other hundreds of thousands of websites your team logs into, it doesn't.

Supplier portals. Franchise reporting dashboards. Local government permit systems. Niche booking platforms built for a single vertical. Wholesale ordering sites that haven't been updated since 2014. Industry-specific CRMs that serve 3,000 customers and have no developer resources to spare on API documentation. These are the sites where repetitive, time-consuming, error-prone manual work actually happens — and they are completely invisible to API-dependent automation.

Why APIs don't exist for most of the web

Building and maintaining a public API is expensive. It requires documentation, versioning, authentication infrastructure, rate limiting, developer support, and ongoing maintenance every time the underlying product changes. For a SaaS company with millions of customers and a dedicated engineering team, that investment pays off. For a niche vertical software vendor serving a few thousand users, it almost never does.

The result is a structural gap. The automation ecosystem has optimized for the top of the software distribution curve — the Salesforces, Shopifys, and Gmails — while the long tail of specialized, vertical, and regional web applications remains untouched. According to Cloudflare's 2024 traffic analysis, the top 1,000 domains account for roughly 10% of global web traffic. The remaining 90% is distributed across millions of smaller sites, many of which your team uses for specific operational tasks that have no automation alternative.

This isn't a gap that more Zapier integrations will close. It is a structural feature of how the web is built.

What the long tail actually looks like in practice

To make this concrete, consider the kinds of sites that fall into this category:

Supplier and wholesale portals. A retail shop owner who orders from six different suppliers logs into six different portals to check stock, place orders, and download invoices. None of these portals have APIs. Each one has its own login flow, its own navigation structure, its own export format.

Franchise and brand compliance dashboards. Franchisees are often required to submit weekly sales data, update local listings, or upload promotional assets to a brand-controlled portal. These portals are custom-built for the franchisor and will never have a public API.

Local listing and directory sites. Beyond Google Business Profile, there are dozens of industry-specific and regional directories — Houzz, Healthgrades, local chamber sites, vertical-specific review platforms — where keeping information current requires manual logins and form submissions.

Government and regulatory portals. License renewals, permit applications, compliance filings. These are among the most time-consuming and high-stakes forms of busywork, and they exist entirely outside the API economy.

Legacy industry software. Many industries — construction, healthcare, hospitality, automotive — run on software built before APIs were standard. The software works fine for its purpose. It will never expose an API.

In every one of these cases, the work is repetitive, rule-based, and perfectly suited to automation. The only thing preventing it is the absence of an API that the dominant automation tools require.

How no-API automation actually works

The key insight behind no-API automation is that humans already have a universal interface for every website on the internet: the browser. Every website that a human can use, a browser-based automation system can also use — because it operates the same way a human does.

Instead of calling an API endpoint, a no-API automation system loads a real browser, navigates to the URL, logs in with stored credentials, reads the page content, fills in forms, clicks buttons, and extracts or submits data. From the website's perspective, it looks like a human user. From the operator's perspective, the task is done.

This approach has three properties that matter for the long tail:

No integration required. If your team can reach a website in a browser, the automation can reach it too. No API, no connector, no developer needed.

Works on any website. The same automation architecture that handles Gmail can handle an obscure supplier portal from 2011. The website's technology stack is irrelevant.

Self-heals when sites change. This is where no-API automation diverges from traditional RPA (robotic process automation). Older RPA tools record exact pixel coordinates or DOM element IDs, which means a single website redesign breaks every script that touches that site. Modern browser-native automation uses contextual understanding of the page — what a button says, where a field is relative to its label, what the logical flow of a form is — so it can adapt when the layout changes without requiring a human to rewrite the workflow.

The training model matters here too. Showing a workflow once — clicking through the steps while the system observes — is enough to capture the pattern. Alternatively, describing the task in plain English produces the same result. Either way, the system runs it on a schedule or trigger from that point forward, without needing the underlying website to cooperate.

The economics of automating the long tail

The economic case for automation changes significantly when you can reach the long tail. API-based automation already handles the easy wins — the popular tools with native integrations that most teams use. The long tail is where the remaining manual time is concentrated, precisely because no automation has been able to reach it.

Consider a typical owner-operator's week. They might spend 20 minutes in Shopify (which has excellent API coverage), 15 minutes in Gmail (same), and then 3 hours spread across supplier portals, local listing sites, a franchise dashboard, and a government compliance portal. The Shopify and Gmail tasks are already automatable with standard tools. The 3 hours in the long tail are not — unless you have no-API automation.

That 3 hours, multiplied across 50 weeks, is 150 hours per year of work that stays manual by default. At any reasonable valuation of an owner-operator's time, that's a significant number. And unlike the Shopify tasks, which might already be partially automated, the long-tail hours are almost entirely manual — meaning the automation ROI is effectively uncapped.

The comparison looks like this:

Automation approach Coverage Long-tail reach Setup requirement
Zapier / Make Top ~500 SaaS apps None API must exist
Traditional RPA Any website Yes, but brittle Developer + scripting
No-API browser automation Any website Yes, and self-healing Show it once or describe it

The middle row — traditional RPA — technically reaches the long tail, but the maintenance burden makes it impractical for most small teams. Every time a supplier portal updates its UI, someone has to rewrite the script. For an enterprise with a dedicated RPA team, that's manageable. For an owner-operator, it's not.

What this means for how you think about automation

If your mental model of automation is "I need to find an integration for this," you are limiting yourself to the top of the software distribution curve. The more useful mental model is: if a human on my team does it in a browser on a schedule, it can be automated — regardless of whether the website has an API.

This reframe changes which tasks you consider automatable. Instead of starting with "does this tool have a Zapier connector," you start with "does my team do this task repeatedly in a browser." If yes, it's a candidate for automation. The website's API status is irrelevant.

It also changes how you think about vendor selection. A platform that requires an API to function will always be limited by the willingness of third-party software vendors to maintain integrations. A platform that operates the browser directly is limited only by what websites exist — which is to say, it is not limited at all.

Koira is built on this principle. It automates any browser-based task across sales, support, operations, and marketing — not just the tasks that happen to have an API. Train it once by showing it or describing it in plain English, and it runs on any website your team uses, self-healing when those sites change. That's what self-driving work actually means: not just automating the easy integrations, but reaching the full surface area of your team's actual work.

The sites you haven't automated yet are probably the most important ones

There's a selection effect at work in most small business automation setups. The tasks that got automated first were the ones with obvious integrations — email, e-commerce, CRM. The tasks that remain manual are the ones with no integration path. But "no integration path" and "low value" are not the same thing.

The supplier portal you log into every Tuesday to check stock levels. The franchise dashboard where you submit weekly numbers. The local directory where you update your hours every time they change. The government licensing site where you renew permits annually. These tasks are manual not because they're unimportant, but because the automation ecosystem hasn't been able to reach them.

No-API automation reaches them. That's the point. The long tail of the web is where the remaining manual work lives, and it's finally automatable — not by waiting for an API that will never come, but by operating the browser the same way your team already does.

The long tail of the web is where the remaining manual work lives — and it's finally automatable, not by waiting for an API that will never come, but by operating the browser the same way your team already does.

Save this for later
Get a PDF copy of this post →
Drop your email, we’ll send you the full piece as a clean PDF. Plus the weekly KOIRA roundup.
Title: No-API Automation: Reaching the Long Tail of Websites
No-API Automation
A form of workflow automation that operates directly in a web browser — navigating, logging in, filling forms, and extracting data — without requiring the target website to expose a public API.
Long Tail of Websites
The large and diverse category of web applications — supplier portals, niche industry platforms, government sites, franchise dashboards — that have no public API and are therefore unreachable by standard integration-based automation tools.
Self-Healing Automation
An automation approach that uses contextual page understanding rather than fixed selectors, allowing it to adapt automatically when a website changes its layout or structure without requiring manual script updates.
Browser-Native Automation
Automation that operates a real browser instance to interact with websites, making it capable of reaching any site a human user can access regardless of whether an API or native integration exists.
RPA (Robotic Process Automation)
A category of automation software that mimics human interactions with digital interfaces, traditionally using fixed screen coordinates or DOM selectors, which can make it brittle when website layouts change.
API-based automation vs. no-API browser automation across key operational dimensions
AreaAPI-based tools (Zapier / Make)No-API browser automation
Website coverageLimited to ~500 popular SaaS apps with published APIsAny website a human can access in a browser — no exceptions
Setup requirementAPI key or OAuth token from the target platform must existShow it once or describe the task in plain English
Long-tail site supportNone — supplier portals, niche platforms, and legacy systems are unreachableFull coverage — if your team logs into it, the automation can too
Resilience to site changesAPI version changes can break workflows; requires vendor to maintain compatibilitySelf-heals on layout changes using contextual page understanding
Developer dependencyNo code needed, but limited to what integrations already existNo code needed, and no integration needs to exist beforehand
Ongoing maintenanceLow if the API is stable; high if the vendor deprecates endpointsLow — self-healing handles most UI changes automatically

How to identify and automate your long-tail website busywork

  1. 01
    Audit every website your team logs into in a typical week. Ask each team member to list every website they visit to do their job — not just the major SaaS tools, but every portal, dashboard, directory, and form they touch. Most teams are surprised by how long this list is.
  2. 02
    Mark which sites have a Zapier or Make connector. Search the Zapier and Make app directories for each site on your list. Anything without a connector is a long-tail site — and a candidate for no-API automation. Expect this to be the majority of your list.
  3. 03
    Identify the tasks on long-tail sites that are repetitive and rule-based. Not every task on a long-tail site is worth automating. Focus on tasks that happen on a fixed schedule, follow the same steps every time, and don't require creative judgment — checking stock levels, submitting weekly reports, updating listing information, downloading invoices.
  4. 04
    Rank by time cost and error risk. Multiply the time each task takes by how often it happens per month. Prioritize tasks that are both time-consuming and error-prone — data entry mistakes on supplier orders or compliance filings have real downstream costs that make automation ROI even higher.
  5. 05
    Train the automation by showing it the task once. For each prioritized task, walk through it in the browser while the automation system observes — or describe the steps in plain English. Either method captures the workflow: the login, the navigation, the inputs, the data to extract or submit.
  6. 06
    Set the schedule or trigger and review the first few runs. Configure the automation to run on the appropriate cadence — daily, weekly, on a specific event. Review the output of the first few runs through an approval queue to confirm accuracy before letting it run fully autonomously.
  7. 07
    Monitor for site changes and let self-healing handle the rest. When a long-tail site updates its layout, a self-healing automation will adapt without intervention. Review any flagged exceptions, but expect the system to handle the majority of UI changes on its own.
FAQ
What is no-API automation and how is it different from Zapier?
No-API automation works by controlling a real browser — navigating to websites, logging in, filling forms, and extracting data — exactly the way a human would. Zapier and similar tools work by calling API endpoints that software vendors have published. If a website doesn't have a public API (which describes the majority of the web), Zapier simply can't reach it. No-API automation has no such limitation: if a human can use a website in a browser, the automation can too.
Is no-API automation the same as RPA (robotic process automation)?
They share the browser-based approach, but modern no-API automation is meaningfully different from traditional RPA. Legacy RPA tools record exact screen coordinates or DOM element IDs, which means they break whenever a website changes its layout — and websites change constantly. Modern no-API automation uses contextual page understanding, so it can adapt to layout changes without requiring a human to rewrite the workflow. This self-healing property is what makes it practical for small teams without dedicated technical resources.
What kinds of websites fall into the 'long tail' that APIs can't reach?
The long tail includes supplier and wholesale portals, franchise reporting dashboards, local listing and directory sites beyond the major platforms, government and regulatory filing portals, legacy industry software, and any niche vertical application built for a small user base. These sites are fully functional and often business-critical, but they will never invest in a public API because the economics don't justify it.
How do you train a no-API automation workflow on a website that has no documentation?
You don't need documentation. The two main training methods are: showing the system by clicking through the task once while it observes, or describing the task in plain English. Either way, the system captures the pattern — the login flow, the navigation steps, the form fields, the data to extract — and runs it on a schedule or trigger from that point forward. No API keys, no developer, no documentation required.
Does no-API browser automation break when websites update their design?
Traditional RPA does break on UI changes, which is one reason it's impractical for small teams. Self-healing no-API automation is designed to handle this. Instead of relying on fixed selectors or pixel coordinates, it understands the page contextually — what a button says, how a form is structured, what the logical flow of a task is — so it can adapt when the visual layout changes without requiring manual intervention.
Is no-API automation secure when it involves logging into third-party websites?
Credential handling is the main security consideration. Reputable no-API automation platforms store credentials in encrypted vaults and never expose them in plain text during execution. The automation runs in a controlled browser environment, and the owner retains full control over which credentials are stored and which workflows have access to them. This is no different in principle from a password manager, with the addition that the system acts on those credentials in a sandboxed way.
Find KOIRA on
XLinkedInFacebookCrunchbaseWellfoundF6S
Keep reading
Product
How Automation Changes the Economics of Small Business
9 min read
Product
Autonomous Mode: What It Is and When to Turn It On
8 min read
Product
Training a Workflow by Clicking: What Actually Happens
9 min read
Product
Self-Driving Work vs RPA: What's Actually Different
9 min read
Stay in the loop
New posts, straight to your inbox.
Marketing and sales insights from the KOIRA team. No filler.
No-API Automation: Reaching the Long Tail of Websites
Get KOIRA