{ "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-08", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "tool": { "slug": "capsule-crm", "name": "Capsule CRM", "vendor": "Zestia Limited", "vendorUrl": "https://capsulecrm.com", "kind": "http-api", "category": "crm", "summary": "Capsule is a hosted CRM for small businesses from Zestia Limited in Manchester. Agents reach contacts, opportunities, projects, tasks and notes through REST API v2, or through a hosted MCP server on the Growth plan and above.", "url": "https://www.anchorterminal.com/tools/capsule-crm", "markdownUrl": "https://www.anchorterminal.com/tools/capsule-crm.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/capsule-crm.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/capsule-crm.json", "license": "Proprietary service under Capsule's Customer Terms", "transports": [ "http" ], "remoteUrl": "https://api.capsulecrm.com/api/v2", "packages": [], "auth": "mixed", "authNotes": "Every call takes a bearer token in the `Authorization` header. A user can create a personal token under My Preferences, API Authentication Tokens, with no review. Apps for other people use OAuth 2 (authorisation code grant) with the scopes `read`, `read write` or `read write user_preference`, refresh tokens and a revocation endpoint. Registering an OAuth app is self-serve in the developer hub and needs a GitHub sign-in. The MCP server accepts only OAuth with a pre-registered client ID and secret, and acts with the connecting user's own access.", "pricing": "freemium", "pricingNotes": "Free plan for up to two users and 250 contacts, and a 14-day trial of paid plans with no card, so an agent's owner can start without a contract. Paid plans are per user per month (Starter, Growth, Advanced, Ultimate). The pricing page draws its numbers by script and we could not read them. Capsule's comparison pages give Starter as $18 a month and the range as $0 to $72 (https://capsulecrm.com/crm-comparisons/copper/). The API has no separate charge in the reviewed pages. The MCP server needs Growth or above. Whether the Free plan includes API access was not found (checked 2026-10-08).", "priceSummary": "$18 / seat-mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the developer docs, the pricing page or the terms (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://developer.capsulecrm.com", "capabilities": [ "crm.records", "crm.pipeline", "crm.activities", "crm.search", "crm.webhooks" ], "tags": [ "hosted", "closed-source", "mcp", "oauth", "webhooks", "free-tier", "no-card", "status-page" ], "lastRelease": "2026-09-25", "graded": true, "anchor": { "graded": true, "score": 55.7, "grade": "C", "agentReady": false, "rank": 504, "ranked": true, "rankOf": 722, "categoryRank": 11, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 59, "maintenance": 38, "payments": 30, "reliability": 83, "schema": 48, "security": 46, "transparency": 75 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 83, "points": 16.6, "reason": "Graded on REST API v2, with the hosted lines. Status page at status.capsulecrm.com on Statuspage with two components and history back to 2016 (20). No incident between 10 July and 8 October 2026. The last, a minor delay to reports and dashboards, ran from 6 to 8 July 2026, and a major outage of about 15 hours fell on 27 March 2026, both outside the 90 days (30). Limit published, 4,000 requests an hour per user (15). A 429 carries `X-RateLimit-Reset` and the docs say to wait until that time and suggest one second between calls, but there is no Retry-After header, no idempotency key and no safe-retry advice for writes (10 of 15). No SLA found, and the Customer Terms disclaim liability for unavailability (0). The REST API is generally available. The MCP server was announced on 25 September 2026 and the Claude connector is labelled beta on one support page (8 of 10)." }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 48, "points": 7.8, "reason": "No OpenAPI or other machine-readable contract was found. Four likely paths on developer.capsulecrm.com returned 404 and the docs link none. The MCP server's tool schemas sit behind OAuth and were not read (0 of 25). No llms.txt on either domain (0). Each of the 132 operations has a short description, and some say when to prefer another endpoint, such as filters over search (12 of 20). Parameter tables give types, ranges and defaults, and each resource has a model page, with filter conditions as JSON bodies (10 of 15). Request and response examples on every operation, and an errors page with bodies for 400, 401, 403, 422 and 429 (13 of 15). A `/api/v2` path and a dated changelog with five entries in the last 12 months (13 of 15)." }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 59, "points": 9.59, "reason": "Lists return a default record and take `embed` to add tags, custom fields and related data, with `perPage` from 1 to 100. There is no field selection. The MCP reference lists 37 tools, which is above the 30-tool line (15 of 25). `page`, `perPage` and a `Link` header, `since` on lists, `/search` endpoints, structured filters and lists of deleted records (18 of 20). Errors are JSON, a 422 names the resource and field, and 403 states the missing scope (16 of 20). No idempotency keys. Updates are partial PUTs, which are safe to repeat, and MCP tool annotations were not readable (4 of 20). Few required fields and sensible defaults, but no official SDK in any language (6 of 15)." }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 46, "points": 8.05, "reason": "OAuth 2 authorisation code grant with scopes `read`, `write` and `user_preference`, access tokens of about seven days, refresh tokens, a revocation endpoint and S256 PKCE in the server metadata. Personal tokens are also accepted on the REST API, and their scope is not documented. Tokens travel only in the header (24 of 30). A `read` scope exists, and the MCP server acts with the connecting user's access controls. No server-side confirmation for writes was found, and the AI Terms put review of each tool call on the customer (12 of 20). Notes and stored emails reach the model, and no injection guidance was found (2 of 15). No API audit log was found, and the support page says MCP update tools keep no change history of their own (2 of 15). A reporting address (support+sensitive@capsulecrm.com), regular penetration tests by outside specialists per the security page and PCI-DSS for card collection. No security.txt, no bug bounty and no certification named on the pages read. The trust centre at trust.zestia.com is drawn by script and was not read (6 of 20)." }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 30, "points": 3.75, "reason": "No x402, MPP or L402 (0). Plans are public but priced per user, with nothing per call, and the pricing page draws the numbers by script. The Starter price of $18 and the $0 to $72 range came from Capsule's comparison pages (10). A Free plan for two users and 250 contacts and a 14-day trial with no card. Whether the Free plan includes the API was not found (20). A person signs up in a browser and creates the token, and registering an OAuth app needs a GitHub sign-in (0)." }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 38, "points": 3.33, "reason": "Last change on 25 September 2026, the hosted MCP server, 13 days before the check (30). Two dated entries in the last 90 days, 19 August and 25 September 2026, which is short of three (0). A public changelog, a support address and a Google group for API questions. We did not test support (8 of 15). No official SDK, and the MCP server is not in the official MCP registry (0). No packages to judge (0)." }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 75, "points": 6.56, "note": "editorial 64, provenance 86", "reason": "Closed service with Customer Terms naming Zestia Limited, registered in England (15). The privacy policy of 21 August 2025, the DPA and the terms agree on a 14-day restore window after cancellation, deletion after that and backups for up to 50 days, with hosting on AWS in the United States. The AI Terms say inputs are not used to train models. The Claude connector page calls Anthropic a sub-processor, while the sub-processor list names OpenAI and not Anthropic (24 of 30). No deprecation policy. The changelog says Capsule tries to avoid breaking changes without notice, and the 19 August 2026 entry on the `pictureURL` change gives no date for the switch (8 of 20). Eleven sub-processors listed with location, transfer mechanism and safeguards, and 30 days' notice of changes in the DPA (17 of 20)." } ], "assessment": { "date": "2026-10-08", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "Lists return a default record and take `embed` to add tags, custom fields and related data, with `perPage` from 1 to 100. There is no field selection. The MCP reference lists 37 tools, which is above the 30-tool line (15 of 25). `page`, `perPage` and a `Link` header, `since` on lists, `/search` endpoints, structured filters and lists of deleted records (18 of 20). Errors are JSON, a 422 names the resource and field, and 403 states the missing scope (16 of 20). No idempotency keys. Updates are partial PUTs, which are safe to repeat, and MCP tool annotations were not readable (4 of 20). Few required fields and sensible defaults, but no official SDK in any language (6 of 15).", "maintenance": "Last change on 25 September 2026, the hosted MCP server, 13 days before the check (30). Two dated entries in the last 90 days, 19 August and 25 September 2026, which is short of three (0). A public changelog, a support address and a Google group for API questions. We did not test support (8 of 15). No official SDK, and the MCP server is not in the official MCP registry (0). No packages to judge (0).", "payments": "No x402, MPP or L402 (0). Plans are public but priced per user, with nothing per call, and the pricing page draws the numbers by script. The Starter price of $18 and the $0 to $72 range came from Capsule's comparison pages (10). A Free plan for two users and 250 contacts and a 14-day trial with no card. Whether the Free plan includes the API was not found (20). A person signs up in a browser and creates the token, and registering an OAuth app needs a GitHub sign-in (0).", "reliability": "Graded on REST API v2, with the hosted lines. Status page at status.capsulecrm.com on Statuspage with two components and history back to 2016 (20). No incident between 10 July and 8 October 2026. The last, a minor delay to reports and dashboards, ran from 6 to 8 July 2026, and a major outage of about 15 hours fell on 27 March 2026, both outside the 90 days (30). Limit published, 4,000 requests an hour per user (15). A 429 carries `X-RateLimit-Reset` and the docs say to wait until that time and suggest one second between calls, but there is no Retry-After header, no idempotency key and no safe-retry advice for writes (10 of 15). No SLA found, and the Customer Terms disclaim liability for unavailability (0). The REST API is generally available. The MCP server was announced on 25 September 2026 and the Claude connector is labelled beta on one support page (8 of 10).", "schema": "No OpenAPI or other machine-readable contract was found. Four likely paths on developer.capsulecrm.com returned 404 and the docs link none. The MCP server's tool schemas sit behind OAuth and were not read (0 of 25). No llms.txt on either domain (0). Each of the 132 operations has a short description, and some say when to prefer another endpoint, such as filters over search (12 of 20). Parameter tables give types, ranges and defaults, and each resource has a model page, with filter conditions as JSON bodies (10 of 15). Request and response examples on every operation, and an errors page with bodies for 400, 401, 403, 422 and 429 (13 of 15). A `/api/v2` path and a dated changelog with five entries in the last 12 months (13 of 15).", "security": "OAuth 2 authorisation code grant with scopes `read`, `write` and `user_preference`, access tokens of about seven days, refresh tokens, a revocation endpoint and S256 PKCE in the server metadata. Personal tokens are also accepted on the REST API, and their scope is not documented. Tokens travel only in the header (24 of 30). A `read` scope exists, and the MCP server acts with the connecting user's access controls. No server-side confirmation for writes was found, and the AI Terms put review of each tool call on the customer (12 of 20). Notes and stored emails reach the model, and no injection guidance was found (2 of 15). No API audit log was found, and the support page says MCP update tools keep no change history of their own (2 of 15). A reporting address (support+sensitive@capsulecrm.com), regular penetration tests by outside specialists per the security page and PCI-DSS for card collection. No security.txt, no bug bounty and no certification named on the pages read. The trust centre at trust.zestia.com is drawn by script and was not read (6 of 20).", "transparency": "Closed service with Customer Terms naming Zestia Limited, registered in England (15). The privacy policy of 21 August 2025, the DPA and the terms agree on a 14-day restore window after cancellation, deletion after that and backups for up to 50 days, with hosting on AWS in the United States. The AI Terms say inputs are not used to train models. The Claude connector page calls Anthropic a sub-processor, while the sub-processor list names OpenAI and not Anthropic (24 of 30). No deprecation policy. The changelog says Capsule tries to avoid breaking changes without notice, and the 19 August 2026 entry on the `pictureURL` change gives no date for the switch (8 of 20). Eleven sub-processors listed with location, transfer mechanism and safeguards, and 30 days' notice of changes in the DPA (17 of 20)." }, "sources": [ { "what": "developer docs home and operation list", "url": "https://developer.capsulecrm.com/", "seen": "2026-10-08" }, { "what": "authentication and OAuth 2", "url": "https://developer.capsulecrm.com/v2/overview/authentication", "seen": "2026-10-08" }, { "what": "rate limits and error responses", "url": "https://developer.capsulecrm.com/v2/overview/handling-api-responses", "seen": "2026-10-08" }, { "what": "pagination and embed", "url": "https://developer.capsulecrm.com/v2/overview/reading-from-the-api", "seen": "2026-10-08" }, { "what": "REST hooks", "url": "https://developer.capsulecrm.com/v2/overview/avoid-polling-with-rest-hooks", "seen": "2026-10-08" }, { "what": "changelog", "url": "https://developer.capsulecrm.com/v2/overview/announcements-and-changes", "seen": "2026-10-08" }, { "what": "custom MCP connections", "url": "https://developer.capsulecrm.com/v2/overview/custom-mcp-connections", "seen": "2026-10-08" }, { "what": "MCP tool reference", "url": "https://capsulecrm.com/support/integrations/capsule-mcp-integration-tool-reference/", "seen": "2026-10-08" }, { "what": "AI connectors support page", "url": "https://capsulecrm.com/support/integrations/ai-connectors/", "seen": "2026-10-08" }, { "what": "Claude connector support page", "url": "https://capsulecrm.com/support/integrations/capsule-mcp-integration/", "seen": "2026-10-08" }, { "what": "MCP protected-resource metadata", "url": "https://mcp-server.capsulecrm.com/.well-known/oauth-protected-resource", "seen": "2026-10-08" }, { "what": "OAuth server metadata", "url": "https://api.capsulecrm.com/.well-known/oauth-authorization-server", "seen": "2026-10-08" }, { "what": "status incident history", "url": "https://status.capsulecrm.com/api/v2/incidents.json", "seen": "2026-10-08" }, { "what": "pricing page", "url": "https://capsulecrm.com/signup/", "seen": "2026-10-08" }, { "what": "comparison page with prices", "url": "https://capsulecrm.com/crm-comparisons/copper/", "seen": "2026-10-08" }, { "what": "Customer Terms", "url": "https://capsulecrm.com/terms/", "seen": "2026-10-08" }, { "what": "privacy policy", "url": "https://capsulecrm.com/privacy/", "seen": "2026-10-08" }, { "what": "AI Terms", "url": "https://capsulecrm.com/ai-terms/", "seen": "2026-10-08" }, { "what": "Data Processing Agreement", "url": "https://capsulecrm.com/dpa/", "seen": "2026-10-08" }, { "what": "sub-processor list", "url": "https://capsulecrm.com/dpa/subprocessors/", "seen": "2026-10-08" }, { "what": "security page", "url": "https://capsulecrm.com/security/", "seen": "2026-10-08" }, { "what": "GDPR page", "url": "https://capsulecrm.com/gdpr/", "seen": "2026-10-08" }, { "what": "official MCP registry search", "url": "https://registry.modelcontextprotocol.io/v0/servers?search=capsule", "seen": "2026-10-08" } ], "openQuestions": [ "unchecked: plan prices on https://capsulecrm.com/signup/, which the page draws by script. Growth and Advanced prices and the monthly-billing prices were not read", "unchecked: certifications in the trust centre at https://trust.zestia.com/, which is drawn by script", "unchecked: the MCP server's tool definitions, annotations and exact tool count, which need an OAuth sign-in on a Growth plan", "Whether the Free plan includes API access was not found in the reviewed pages", "Whether personal API tokens can be limited to read access or revoked one by one is not documented", "Capsule's pages disagree on what the MCP server can write, and on whether the Claude connector is in the directory or in beta", "The Customer Terms carry no date on the page", "No official GitHub organisation or SDK was found. github.com/capsulecrm returned 404" ] }, "negative": 0, "verdict": "REST API v2 covers the whole record with OAuth scopes, a 4,000 requests an hour limit and a status page with no incident in the last 90 days. There is no OpenAPI file, llms.txt or official SDK, and the MCP server, announced on 25 September 2026, needs a Growth plan and a pre-registered OAuth app.", "bestFor": "Small teams already on Capsule who want an agent to read and write contacts, opportunities, projects and tasks over REST with a read-only scope available.", "strengths": [ "132 documented operations across 25 resources, with request and response examples and typed parameter tables", "OAuth 2 with `read` and `write` scopes, refresh tokens, a revocation endpoint and S256 PKCE in the server metadata", "4,000 requests an hour per user, with `X-RateLimit-*` headers on every successful response", "No incident on status.capsulecrm.com between 10 July and 8 October 2026", "Free plan for two users and 250 contacts, and a 14-day trial of paid plans with no card" ], "weaknesses": [ "No OpenAPI file, llms.txt or official SDK was found", "The MCP server needs the Growth plan or above, and clients that only support dynamic client registration can't connect", "Capsule's own pages disagree on what the MCP tools can write, and the tool reference lists only custom-field updates", "No idempotency keys, and no Retry-After header on 429", "The pricing page draws its numbers by script. Only the Starter price and the top of the range were readable" ], "agentNotes": [ "Send `Authorization: Bearer \u003ctoken\u003e` to `https://api.capsulecrm.com/api/v2`. Projects use the old name in paths, `/kases`", "Follow the `Link` header for the next page. `perPage` goes up to 100 and the default is 50", "On 429, wait until the epoch time in `X-RateLimit-Reset`. The docs suggest one second between calls", "Ask for the `read` scope when the task only reads. A write with a read-only token answers 403 with `insufficient_scope`", "For MCP, register an OAuth app in the developer hub first (GitHub sign-in needed) and give the client its ID and secret. Personal API tokens are refused" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 55.7 } ], "editorialScores": { "ergonomics": 59, "maintenance": 38, "payments": 30, "reliability": 83, "schema": 48, "security": 46, "transparency": 64 }, "provenanceScore": 86 }, "connect": { "http": "curl -H \"Authorization: Bearer $CAPSULE_TOKEN\" -H \"Accept: application/json\" https://api.capsulecrm.com/api/v2/parties" }, "letme": { "capability": "https://letme.dev/crm.records", "tool": "https://letme.dev/capsule-crm" }, "notable": [ "The hosted MCP server at `https://mcp-server.capsulecrm.com/mcp` was announced on 25 September 2026 for the Growth plan and above. It is OAuth only, and the client must accept a pre-registered client ID and secret (https://developer.capsulecrm.com/v2/overview/custom-mcp-connections)", "An unauthenticated POST to the MCP endpoint answered 401 with a `resource_metadata` pointer, and the protected-resource document lists the scopes `read` and `write` with `https://api.capsulecrm.com` as authorisation server (checked 2026-10-08)", "The MCP tool reference lists 37 tools, 34 of them reads, and says the three `update_*` tools change only custom-field values (https://capsulecrm.com/support/integrations/capsule-mcp-integration-tool-reference/)", "Capsule's pages disagree on MCP writes. The changelog and the AI connectors page say the server can create contacts, opportunities, projects, tasks and notes, while the Claude connector page says write access is limited to custom fields (https://capsulecrm.com/support/integrations/ai-connectors/)", "A local read-only MCP server in a Docker container was announced as a private beta on 15 April 2026 (https://developer.capsulecrm.com/v2/overview/announcements-and-changes)", "REST hooks cover parties, projects, opportunities, tasks and users, with at most 20 subscriptions an account, admin rights and a registered OAuth app required (https://developer.capsulecrm.com/v2/overview/avoid-polling-with-rest-hooks)", "The OAuth docs give the revocation URL as `/oauth/token/revoke`, while the server's metadata document gives `/oauth/revoke` (https://api.capsulecrm.com/.well-known/oauth-authorization-server)" ], "area": "business", "details": [ { "label": "API", "value": "REST API v2 at `https://api.capsulecrm.com/api/v2`, JSON, 132 documented operations across 25 resources (parties, opportunities, projects, tasks, entries, tracks, pipelines, milestones, boards, stages, tags, custom fields, users, teams, goals, REST hooks and others)" }, { "label": "MCP server", "value": "Hosted at `https://mcp-server.capsulecrm.com/mcp`, announced 25 September 2026, Growth plan and above. OAuth with a pre-registered client ID and secret. No dynamic client registration and no API tokens. 37 tools in the published reference" }, { "label": "Credentials", "value": "OAuth 2 authorisation code grant with scopes `read`, `read write` and `read write user_preference`, access tokens of about seven days (`expires_in` 604799 in the example), refresh tokens and a revocation endpoint. Personal bearer tokens from My Preferences, API Authentication Tokens" }, { "label": "Rate limits", "value": "4,000 requests an hour per user. `X-RateLimit-Limit`, `X-RateLimit-Remaining` and `X-RateLimit-Reset` on successful responses, 429 with `{\"error\":\"rate limit reached\"}` once exceeded" }, { "label": "Pagination and search", "value": "`page` and `perPage` (1 to 100, default 50) with a `Link` header, `since` on list endpoints, `/search` endpoints with `q`, structured filters at `/api/v2/{entity}/filters/results`, and lists of deleted records" }, { "label": "Errors", "value": "JSON bodies for 400, 401, 403, 422 and 429. A 422 names the resource and field that failed, and 401 and 403 carry a `WWW-Authenticate` header" }, { "label": "Webhooks", "value": "REST hooks for party, kase, opportunity, task and user events. 20 subscriptions an account, managed by an administrator through a registered OAuth app. Five retries over about 36 minutes, then the hook is removed" }, { "label": "Plans", "value": "Free (2 users, 250 contacts), Starter (30,000 contacts), Growth (60,000), Advanced (120,000), Ultimate. 14-day trial of paid plans with no card" }, { "label": "Hosting", "value": "Amazon Web Services in the United States, per the GDPR page and the sub-processor list" }, { "label": "Data deletion", "value": "A cancelled account can be restored for 14 days, then is deleted, with partial data in backups for up to 50 days. Deleted contacts sit in the trash for 30 days" }, { "label": "Status", "value": "status.capsulecrm.com on Statuspage, two components (Capsule, Drop Box). Last incidents 6 to 8 July 2026 (minor, reports and dashboards delays) and 27 March 2026 (major, about 15 hours, unable to access Capsule)" }, { "label": "SDKs", "value": "None official. The docs list third-party wrappers (Ampersand, Merge, Truto) and say Capsule has not fully reviewed them" } ], "unitPrices": [ { "item": "Starter", "unit": "seat-month", "usd": 18, "note": "per Capsule's comparison page, billing period not stated there. Growth and Advanced prices were not readable" }, { "item": "Ultimate", "unit": "seat-month", "usd": 72, "note": "top of the $0 to $72 range on Capsule's comparison page ($432 for six users)" } ], "provenance": { "legalEntity": "Zestia Limited", "domain": "capsulecrm.com", "domainRegistered": "2010-01-11", "endpointOnVendorDomain": true, "terms": "https://capsulecrm.com/terms/", "privacy": "https://capsulecrm.com/privacy/", "statusPage": "https://status.capsulecrm.com", "changelog": "https://developer.capsulecrm.com/v2/overview/announcements-and-changes", "securityTxt": "none", "checked": "2026-10-08", "notes": [ "The Customer Terms name Zestia Limited, registered in England with number 06418281, 20 Dale St, Manchester, M1 1EZ, and are governed by the laws of England and Wales. They cover the service and the API. No date was found on the page.", "The privacy policy was last updated on 21 August 2025. It names Zestia Limited as controller and says Capsulecrm Inc. is certified under the EU-U.S. Data Privacy Framework.", "AI Terms at https://capsulecrm.com/ai-terms/ form part of the agreement and cover the MCP server. A Data Processing Agreement is at https://capsulecrm.com/dpa/.", "The API answers at api.capsulecrm.com and the MCP server at mcp-server.capsulecrm.com.", "capsulecrm.com/.well-known/security.txt and /security.txt return 404. The security page gives support+sensitive@capsulecrm.com for reports.", "RDAP for capsulecrm.com gives a registration date of 2010-01-11." ], "score": 86, "checks": [ { "check": "Legal entity named", "value": "Zestia Limited", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "capsulecrm.com, registered 2010-01-11 (16 years)", "points": 15, "max": 15, "state": "ok" }, { "check": "Endpoint on the vendor's domain", "value": "api.capsulecrm.com", "points": 15, "max": 15, "state": "ok" }, { "check": "Terms of service", "value": "read, states 5 of the 7 things a reader expects, and has 1 clause that costs points", "points": 6.3, "max": 10, "state": "part" }, { "check": "Privacy policy", "value": "read, states 8 of the 8 things a reader expects", "points": 10, "max": 10, "state": "ok" }, { "check": "Status page", "value": "status.capsulecrm.com", "points": 10, "max": 10, "state": "ok" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "not found", "points": 0, "max": 10, "state": "no" } ], "policies": [ { "kind": "terms", "url": "https://capsulecrm.com/terms/", "state": "read", "readAt": "2026-10-08", "words": 7963, "points": 6.3, "max": 10, "expected": [ { "key": "terms.date", "label": "Gives the date it was last updated", "found": false }, { "key": "terms.law", "label": "Names the governing law or courts", "found": true, "quote": "These Customer Terms shall be governed by the laws of England and Wales.", "says": "The law of England and Wales" }, { "key": "terms.liability", "label": "States a limit on its liability", "found": true, "quote": "…Website or Service under these Customer Terms including any claim for indemnity or contribution shall not exceed one hundred (100) per cent of the total amount (excluding any VAT, duty, sales or similar taxes) paid by you to us during the preceding twelve (12) month period.", "says": "Capped at the fees paid in the 12 months before the claim" }, { "key": "terms.termination", "label": "Says how the agreement or account can be ended", "found": true, "quote": "Use of your account shall commence after signup and shall continue until terminated by either party in accordance with the provisions of these Customer Terms." }, { "key": "terms.changes", "label": "Says how changes to the terms are announced", "found": true, "quote": "We reserve the right to modify the fees for any plan at any time after the commencement of the term, with at least 30 days prior notice to the Customer.", "says": "Gives 30 days of notice before a change" }, { "key": "terms.use", "label": "Lists what users may not do", "found": true, "quote": "If you do not agree with these Customer Terms, Data Processing Agreement or Privacy Policy, you may not use the Service." }, { "key": "terms.sla", "label": "Refers to a service level or uptime commitment", "found": false } ], "toKnow": [ { "key": "terms.nonotice", "label": "Says the terms or the service can change without notice", "found": true, "quote": "We may make changes to the material on the Website or to the Service, or to the products and prices described on the Website, at any time without notice.", "costsPoints": true }, { "key": "terms.cutoff", "label": "Says access can be ended without notice or for any reason", "found": true, "quote": "We may terminate these Customer Terms for any other reason upon giving you 30 days written notice." } ], "notes": [ { "date": "2026-10-08", "text": "The customer grants Capsule a perpetual right to use customer data in anonymised form.", "quote": "You grant us the perpetual right to use Customer Data in an anonymized format." }, { "date": "2026-10-08", "text": "Capsule may suspend API access when a third party integration sends excessive requests to the account, and says it will attempt to email first.", "quote": "If you choose to use any third party integration and we become aware of excessive requests to your account via the API we reserve the right to suspend access to the API." }, { "date": "2026-10-08", "text": "Customer data is permanently deleted 14 days after an account is cancelled, and partial data may stay in backups for up to 50 days.", "quote": "After this period, your account and all Customer Data contained within it will be permanently deleted and the agreement between us as set out in these Customer Terms will automatically terminate." } ] }, { "kind": "privacy", "url": "https://capsulecrm.com/privacy/", "state": "read", "readAt": "2026-10-08", "statedDate": "2025-08-21", "words": 6262, "points": 10, "max": 10, "expected": [ { "key": "privacy.date", "label": "Gives the date it was last updated", "found": true, "quote": "We reserve the right to change this Privacy Policy at any time and any amended Privacy Policy will be posted on our websites and notified to you by email, where appropriate. Please check back frequen…", "says": "Last updated 2025-08-21" }, { "key": "privacy.collected", "label": "Says what personal data is collected", "found": true, "quote": "We collect and use the personal data described below in order to provide you with access to our Service in a reliable and secure manner." }, { "key": "privacy.retention", "label": "Says how long data is kept", "found": true, "quote": "If none of these obligations apply we will delete Personal Data within 12 months of your account being closed.", "says": "Names a period of 12 months" }, { "key": "privacy.processors", "label": "Says who else receives the data", "found": true, "quote": "We may share your Personal Data with the following third parties:" }, { "key": "privacy.sale", "label": "Says whether personal data is sold or shared for advertising", "found": true, "quote": "We will not sell or rent your Personal Data to anyone.", "says": "Says it does not sell personal data" }, { "key": "privacy.rights", "label": "Says what rights people have over their data", "found": true, "quote": "You have the right to access information held about you." }, { "key": "privacy.contact", "label": "Gives a privacy contact", "found": true, "quote": "If you have any queries regarding our privacy practices in relation to our DPF certification, please contact us at: info@zestia.com.", "says": "info@zestia.com" }, { "key": "privacy.transfers", "label": "Says where data is transferred or stored", "found": true, "quote": "As described in our Data Privacy Framework Certification, Capsulecrm Inc.", "says": "Relies on the Data Privacy Framework" } ], "notes": [ { "date": "2026-10-08", "text": "Capsule combines personal data from public sources and social media profiles with data users supply, and uses it for targeted advertising and profiling.", "quote": "We also use this for the purposes of targeted advertising, delivering relevant email content, event promotion and profiling, determining eligibility and verifying contact information." } ] } ] }, "pageJsonUrl": "https://www.anchorterminal.com/tools/capsule-crm.json", "live": { "slug": "capsule-crm", "probe": { "target": "https://api.capsulecrm.com/api/v2", "method": "get", "lastAt": "2026-10-08T21:12:07.04188748Z", "lastOk": true, "lastStatus": 200, "lastMs": 419, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 430, "p95ms24h": 472, "samples24h": 21, "samples30d": 21, "days": [ { "date": "2026-10-08", "probes": 21, "ok": 21 } ] }, "vendorStatus": { "page": "https://status.capsulecrm.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-08T21:05:53.545019567Z" }, "updatedAt": "2026-10-08T21:12:07.04188748Z" } } }