Auto-bidder

Upwork has no help page titled "auto-bidder". The rule that applies is its automation article, which defines a bot as any script, program, browser extension or third-party service that sends requests, collects data or acts "faster or more frequently than a human could". A tool that claims to be made for Upwork is not, for that reason, approved. Unapproved automation leads to a temporary restriction or a permanent block, and Upwork says it makes no exceptions for productivity tools.

The same article names the compliant route: an approved Upwork API key, reviewed against your account and your stated use case. Even with a key, spamming proposals or invites is off-limits, and Upwork's MCP server asks a person to confirm each proposal before it is submitted.

Tools sold as auto-bidders work in one of three ways, and the route decides the risk:

• On your session. An extension or script drives the website while you are signed in. This is the pattern Upwork's article describes.
• On your login, hosted. A service signs in as you from its own servers. Upwork tells agency members that sign-in details must not be shared with any other party.
• Through the API. The service submits with a key issued to your account, within the limits and use case Upwork approved.

Before buying, ask which route a tool uses, whose key or login it holds, whether a person sees each letter, and what it does when a send fails. Volume is the second risk: a letter that reads like spam can be flagged by the client.

How Upsight uses it. Upsight is an auto-bidder that sends through Upwork's official API: where a workspace has connected its own Upwork API key, its proposals are filed with that key, and the key files only that workspace's proposals. Any campaign can instead require a person to approve every proposal before it is sent.