{ "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-09", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "tool": { "slug": "higgsfield", "name": "Higgsfield API", "vendor": "Higgsfield Inc.", "vendorUrl": "https://higgsfield.ai", "kind": "http-api", "category": "video-generation", "summary": "Higgsfield's API for generating images and video from its own models (Genjutsu, Soul, Cinema Studio) and hosted ones such as Kling, Seedance and Wan. Requests are asynchronous, with polling or webhooks, and Python and TypeScript SDKs.", "url": "https://www.anchorterminal.com/tools/higgsfield", "markdownUrl": "https://www.anchorterminal.com/tools/higgsfield.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/higgsfield.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/higgsfield.json", "repo": "https://github.com/higgsfield-ai/higgsfield-client", "license": "Proprietary service under the Higgsfield API Terms of Service. The Python SDK repository is Apache-2.0 and the TypeScript SDK is MIT on npm", "transports": [ "http" ], "remoteUrl": "https://api.higgsfield.ai", "packages": [ { "registry": "pypi", "name": "higgsfield-client" }, { "registry": "npm", "name": "@higgsfield/client" } ], "auth": "api-key", "authNotes": "Self-serve. A person signs up at open.higgsfield.ai (email and password, or SSO) and creates a key ID and secret in the console. Send them as `Authorization: Key \u003ckey_id\u003e:\u003ckey_secret\u003e`. The legacy `hf-api-key` and `hf-secret` headers still work. Keys belong to a workspace and carry no scopes. Some endpoints that depict a real person's face or voice can need identity or business verification under the API terms.", "pricing": "usage", "pricingNotes": "Pay as you go from a prepaid balance, priced per second of video or per image, with list prices public at open.higgsfield.ai/pricing. No free credits or free tier were found, and no sandbox. Kling 3.0 lists from $0.084 a second and Seedance 2.5 from $0.206. A lower max-discount price is shown beside each, and a cashback scheme starts at $5,000 of spend in 30 days. Credits expire after a year (checked 2026-10-08).", "priceSummary": "Pay per use", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the API docs, the OpenAPI file, llms.txt or the pricing page (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 126, "npmWeekly": 197350, "pypiWeekly": 28142, "asOf": "2026-10-08" }, "docsUrl": "https://docs.higgsfield.ai/docs", "llmsTxt": "https://docs.higgsfield.ai/docs/llms.txt", "openapi": "https://docs.higgsfield.ai/docs/openapi.json", "capabilities": [ "video.generate", "video.image-to-video", "video.edit", "video.audio", "image.generate", "image.edit" ], "tags": [ "official", "hosted", "closed-source", "model-platform", "card-required", "openapi", "llms-txt", "async-jobs", "webhooks", "idempotency", "python", "typescript", "status-page" ], "lastRelease": "2026-09-17", "graded": true, "anchor": { "graded": true, "score": 63.5, "grade": "B", "agentReady": false, "rank": 356, "ranked": true, "rankOf": 842, "categoryRank": 3, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 77, "maintenance": 75, "payments": 20, "reliability": 85, "schema": 69, "security": 48, "transparency": 61 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 85, "points": 17, "reason": "Hosted reading. status.higgsfield.ai on Instatus with API and Cloud Console components and a notice history (20). No notices from August to October 2026 and 100.0 per cent shown for both components (30). Concurrency limits are published with numbers, 2 for a new account and 10, 20 and 40 at $25, $100 and $1,000 of funds added in 28 days (15). The docs give backoff with jitter, a retry table and idempotency keys for submissions, but reaching the limit returns 400 and no `Retry-After` or rate-limit headers are sent (10 of 15). The API terms say self-serve customers get no uptime commitment and an SLA exists only under an order form, with none published (0). No beta or preview label on the API (10)." }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 69, "points": 11.21, "reason": "`/docs/openapi.json` is public OpenAPI 3.1 but covers 8 paths, and llms.txt calls it supplementary. Each model page carries its own full JSON Schema (15 of 25). llms.txt, llms-full.txt and Markdown twins of every page (10). Model pages state the endpoint, usage notes and limits, with little on when to pick one model over another (14 of 20). Schemas have enums, length and item limits, required fields and `additionalProperties: false` (14 of 15). cURL, Python and TypeScript examples on each page and a status-code table, but errors are a FastAPI `detail` string with no machine codes (11 of 15). Endpoints carry a version segment, and no changelog was found in the docs or sitemap (5 of 15)." }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 77, "points": 12.51, "reason": "Submissions return a small JSON handle, results are URLs, and webhooks replace polling (20 of 25). Resolution, duration and aspect ratio set output size per model. No endpoint to list requests was found in the docs (10 of 20). The error page says which statuses to retry, but the concurrency limit arrives as a 400 with a message string and the docs warn against parsing messages (12 of 20). `Idempotency-Key` on every generation endpoint, with a 422 on a reused key with different parameters, plus cancel for queued requests (20). Few required parameters, sensible defaults, and official Python and TypeScript SDKs (15)." }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 48, "points": 8.4, "reason": "Hosted reading. A key ID and secret pair created and managed in the console, scoped to a workspace, with rotation advised and no permission scopes. Secrets travel in a header, not the URL (20). No read-only or restricted keys and no confirmation step. Organisations have admin and member roles, and an estimate call shows cost before spending (3 of 20). The API returns generated media and no third-party text (10). Request history and usage analytics in the console and an `X-Correlation-ID` on every response, no audit log found (8 of 15). A valid security.txt with a PGP key, expiring 12 September 2027, and a disclosure clause in the terms. No bug bounty found. The trust centre at trust.higgsfield.ai is drawn by script and was unread, so certifications are unchecked (7 of 20). No webhook signature is documented." }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 20, "points": 2.5, "reason": "No x402, MPP or L402 (0). Per-second and per-image list prices for each model are public at open.higgsfield.ai/pricing without a login (20). No free credits or card-free trial were found. A new account gets sign-up discounts and 2 concurrent generations, and usage draws on a prepaid balance (0). A person signs up in a browser and creates the key in the console (0)." }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 75, "points": 6.56, "reason": "The docs sitemap shows pages changed on 7 October 2026, and the SDKs were last released on 17 September 2026 (30). `@higgsfield/client` 0.2.4 and 0.2.6 and `higgsfield-client` 0.2.0 all shipped in September 2026 (20). No public changelog. Support is by Discord and email, and the SDK repositories have 5 and 14 open issues whose replies we couldn't read (6 of 15 for a closed service). Official Python and TypeScript SDKs are current (15). The TypeScript repository has a publish workflow and the Python one has tests but no CI workflow (4 of 10)." }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 61, "points": 5.34, "note": "editorial 45, provenance 77", "reason": "Closed service with API terms dated 2 September 2026 that are specific on licence, resale and outputs. SDKs are MIT and Apache-2.0 (15). The API terms state training on inputs and outputs by default with a workspace opt-out, request records kept while the account is active, media kept at least seven days and zero retention only by enterprise addendum. The privacy policy agrees on training. The DPA the terms incorporate was not found (20 of 30). The terms promise commercially reasonable efforts to announce model removals through a changelog, no changelog or dated notice was found, and legacy endpoints are labelled in the docs (5 of 20). Partner models are named by vendor in the catalogue. The subprocessor list is said to sit in the trust centre, which was unread, and no data locations were found (5 of 20)." } ], "assessment": { "date": "2026-10-08", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "Submissions return a small JSON handle, results are URLs, and webhooks replace polling (20 of 25). Resolution, duration and aspect ratio set output size per model. No endpoint to list requests was found in the docs (10 of 20). The error page says which statuses to retry, but the concurrency limit arrives as a 400 with a message string and the docs warn against parsing messages (12 of 20). `Idempotency-Key` on every generation endpoint, with a 422 on a reused key with different parameters, plus cancel for queued requests (20). Few required parameters, sensible defaults, and official Python and TypeScript SDKs (15).", "maintenance": "The docs sitemap shows pages changed on 7 October 2026, and the SDKs were last released on 17 September 2026 (30). `@higgsfield/client` 0.2.4 and 0.2.6 and `higgsfield-client` 0.2.0 all shipped in September 2026 (20). No public changelog. Support is by Discord and email, and the SDK repositories have 5 and 14 open issues whose replies we couldn't read (6 of 15 for a closed service). Official Python and TypeScript SDKs are current (15). The TypeScript repository has a publish workflow and the Python one has tests but no CI workflow (4 of 10).", "payments": "No x402, MPP or L402 (0). Per-second and per-image list prices for each model are public at open.higgsfield.ai/pricing without a login (20). No free credits or card-free trial were found. A new account gets sign-up discounts and 2 concurrent generations, and usage draws on a prepaid balance (0). A person signs up in a browser and creates the key in the console (0).", "reliability": "Hosted reading. status.higgsfield.ai on Instatus with API and Cloud Console components and a notice history (20). No notices from August to October 2026 and 100.0 per cent shown for both components (30). Concurrency limits are published with numbers, 2 for a new account and 10, 20 and 40 at $25, $100 and $1,000 of funds added in 28 days (15). The docs give backoff with jitter, a retry table and idempotency keys for submissions, but reaching the limit returns 400 and no `Retry-After` or rate-limit headers are sent (10 of 15). The API terms say self-serve customers get no uptime commitment and an SLA exists only under an order form, with none published (0). No beta or preview label on the API (10).", "schema": "`/docs/openapi.json` is public OpenAPI 3.1 but covers 8 paths, and llms.txt calls it supplementary. Each model page carries its own full JSON Schema (15 of 25). llms.txt, llms-full.txt and Markdown twins of every page (10). Model pages state the endpoint, usage notes and limits, with little on when to pick one model over another (14 of 20). Schemas have enums, length and item limits, required fields and `additionalProperties: false` (14 of 15). cURL, Python and TypeScript examples on each page and a status-code table, but errors are a FastAPI `detail` string with no machine codes (11 of 15). Endpoints carry a version segment, and no changelog was found in the docs or sitemap (5 of 15).", "security": "Hosted reading. A key ID and secret pair created and managed in the console, scoped to a workspace, with rotation advised and no permission scopes. Secrets travel in a header, not the URL (20). No read-only or restricted keys and no confirmation step. Organisations have admin and member roles, and an estimate call shows cost before spending (3 of 20). The API returns generated media and no third-party text (10). Request history and usage analytics in the console and an `X-Correlation-ID` on every response, no audit log found (8 of 15). A valid security.txt with a PGP key, expiring 12 September 2027, and a disclosure clause in the terms. No bug bounty found. The trust centre at trust.higgsfield.ai is drawn by script and was unread, so certifications are unchecked (7 of 20). No webhook signature is documented.", "transparency": "Closed service with API terms dated 2 September 2026 that are specific on licence, resale and outputs. SDKs are MIT and Apache-2.0 (15). The API terms state training on inputs and outputs by default with a workspace opt-out, request records kept while the account is active, media kept at least seven days and zero retention only by enterprise addendum. The privacy policy agrees on training. The DPA the terms incorporate was not found (20 of 30). The terms promise commercially reasonable efforts to announce model removals through a changelog, no changelog or dated notice was found, and legacy endpoints are labelled in the docs (5 of 20). Partner models are named by vendor in the catalogue. The subprocessor list is said to sit in the trust centre, which was unread, and no data locations were found (5 of 20)." }, "sources": [ { "what": "API docs index and llms.txt", "url": "https://docs.higgsfield.ai/docs/llms.txt", "seen": "2026-10-08" }, { "what": "full docs text (authentication, errors, idempotency, polling, rate limits, billing, webhooks, model pages)", "url": "https://docs.higgsfield.ai/docs/llms-full.txt", "seen": "2026-10-08" }, { "what": "OpenAPI file", "url": "https://docs.higgsfield.ai/docs/openapi.json", "seen": "2026-10-08" }, { "what": "docs sitemap (page dates, no changelog page)", "url": "https://docs.higgsfield.ai/docs/sitemap.xml", "seen": "2026-10-08" }, { "what": "pricing and concurrency limits", "url": "https://open.higgsfield.ai/pricing", "seen": "2026-10-08" }, { "what": "model catalogue with prices", "url": "https://open.higgsfield.ai/explore", "seen": "2026-10-08" }, { "what": "cashback scheme", "url": "https://open.higgsfield.ai/cashback", "seen": "2026-10-08" }, { "what": "API Terms of Service, 2 September 2026", "url": "https://open.higgsfield.ai/terms-of-service", "seen": "2026-10-08" }, { "what": "Terms of Use Agreement, 26 July 2026 (section 11, developer terms)", "url": "https://higgsfield.ai/terms-of-use-agreement", "seen": "2026-10-08" }, { "what": "privacy policy, 26 July 2026", "url": "https://higgsfield.ai/privacy-policy", "seen": "2026-10-08" }, { "what": "status page and notice history", "url": "https://status.higgsfield.ai/history/1", "seen": "2026-10-08" }, { "what": "security.txt", "url": "https://higgsfield.ai/.well-known/security.txt", "seen": "2026-10-08" }, { "what": "trust centre (script-drawn, unread)", "url": "https://trust.higgsfield.ai/", "seen": "2026-10-08" }, { "what": "MCP page", "url": "https://higgsfield.ai/mcp", "seen": "2026-10-08" }, { "what": "npm registry, @higgsfield/client", "url": "https://registry.npmjs.org/@higgsfield/client", "seen": "2026-10-08" }, { "what": "PyPI, higgsfield-client", "url": "https://pypi.org/pypi/higgsfield-client/json", "seen": "2026-10-08" }, { "what": "Python SDK repository", "url": "https://github.com/higgsfield-ai/higgsfield-client", "seen": "2026-10-08" }, { "what": "TypeScript SDK repository", "url": "https://github.com/higgsfield-ai/higgsfield-js", "seen": "2026-10-08" }, { "what": "RDAP for higgsfield.ai", "url": "https://rdap.org/domain/higgsfield.ai", "seen": "2026-10-08" } ], "openQuestions": [ "unchecked: trust.higgsfield.ai is drawn by script, so certifications, the subprocessor list and security practices were unread", "unchecked: the FAQ answers on open.higgsfield.ai/pricing (launch discount, agent use, spending controls) load by script, so the conditions for the max-discount prices weren't read", "unchecked: the DPA that the API terms incorporate. No public link to it was found", "unchecked: reply times on the SDK repositories' open issues (5 on higgsfield-client, 14 on higgsfield-js)", "Whether a new account receives any free credits, and whether a card is needed before a first call. Neither was stated on the pages read", "The API terms say requests over the concurrency limit are queued or rejected with a retryable error, and the docs say the API returns 400", "The API terms mention a changelog, test keys that run in dry-run mode and a `/v1/` version prefix. None of the three was found in the docs", "The lead named the vendor Higgsfield AI. The legal entity in the terms is Higgsfield Inc. The rest of the lead held" ] }, "negative": 0, "verdict": "One asynchronous API for 67 video and 17 image catalogue entries, with idempotency keys, per-second list prices public without a login, and failed or moderated jobs not charged. API inputs and outputs train Higgsfield's models unless the workspace opts out, and the docs carry no changelog. The API returns 400 at the concurrency limit, with no Retry-After.", "bestFor": "An agent that wants several vendors' video models behind one key, one request lifecycle and safe retries, at published per-second prices.", "strengths": [ "Per-second list prices for each model on open.higgsfield.ai/pricing without a login, and an `/estimate/...` call that returns the cost before submitting", "`Idempotency-Key` on every generation endpoint, with replays returning the original `request_id` and no second charge", "Requests ending `failed` or `nsfw` aren't charged, and a queued request cancelled before it starts is refunded", "Each model page carries a full JSON Schema with enums, limits and `additionalProperties: false`, and llms.txt and Markdown twins exist", "status.higgsfield.ai shows no notices and 100.0 per cent for the API from August to October 2026" ], "weaknesses": [ "API inputs and outputs can train Higgsfield's models by default. The opt-out is a workspace setting, processed within 10 business days", "Reaching the concurrency limit returns `400 Bad Request` with a message string, and the docs say no rate-limit headers or `Retry-After` are sent", "No changelog was found in the docs, although the API terms name one as the channel for deprecations and removals", "Keys have no scopes or read-only mode, and no webhook signature is documented", "No free credits were found, and a new account starts at 2 concurrent generations until it adds $25", "`/docs/openapi.json` covers 8 paths of an 84-entry catalogue, and llms.txt calls it supplementary" ], "agentNotes": [ "Send `Authorization: Key \u003ckey_id\u003e:\u003ckey_secret\u003e` to https://api.higgsfield.ai. A Bearer token is rejected", "Send a fresh `Idempotency-Key` with every generation. After a timeout or 5xx, repeat the same request with the same key, then read `status_url`", "Treat a 400 whose `detail` mentions concurrent requests as a limit, not a bad request. Wait for a running job to finish before submitting more", "Poll `status_url` from 2 seconds up to 10 with jitter, and stop on `completed`, `failed`, `nsfw` or `canceled`", "Download output within seven days. Media files may be deleted after that", "Read the model's own docs page for its schema. The OpenAPI file lists only a few models" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 63.5 } ], "editorialScores": { "ergonomics": 77, "maintenance": 75, "payments": 20, "reliability": 85, "schema": 69, "security": 48, "transparency": 45 }, "provenanceScore": 77 }, "connect": { "install": "pip install higgsfield-client", "http": "curl --request POST \\\n --url https://api.higgsfield.ai/higgsfield/genjutsu/motion-transfer/v1.0 \\\n --header \"Authorization: Key ${HF_API_KEY_ID}:${HF_API_KEY_SECRET}\" \\\n --header \"Content-Type: application/json\" \\\n --data '{\"video_url\": \"https://example.com/input.mp4\", \"image_urls\": [\"https://example.com/input.jpg\"]}'" }, "letme": { "capability": "https://letme.dev/video.generate", "tool": "https://letme.dev/higgsfield" }, "notable": [ "The docs catalogue lists 84 entries, 67 video and 17 image, across 22 video model families (https://docs.higgsfield.ai/docs/models)", "API inputs and outputs may be used to train Higgsfield's models unless the workspace turns off the training setting, which takes up to 10 business days to apply (https://open.higgsfield.ai/terms-of-service, section 7.2)", "Content sent to a partner model is transferred to the third party that hosts it, and the training opt-out doesn't apply to models marked excluded (https://open.higgsfield.ai/terms-of-service, sections 5.2 and 7.2)", "Concurrency is 2 for a new account and rises to 10, 20 and 40 at $25, $100 and $1,000 of funds added in the past 28 days (https://open.higgsfield.ai/pricing)", "The docs say the API sends no rate-limit headers or `Retry-After`, and returns 400 when the concurrency limit is reached (https://docs.higgsfield.ai/docs/concepts/rate-limits)", "The API terms give no uptime commitment to self-serve customers. An SLA is available only under an order form (https://open.higgsfield.ai/terms-of-service, section 11.1)", "The security.txt file ends with a comment block of instructions addressed to AI agents and automated security tools. We recorded it as a fact and did not act on it (https://higgsfield.ai/.well-known/security.txt)", "llms.txt tells agents to treat the OpenAPI file as supplementary and to read each model's own page for its schema (https://docs.higgsfield.ai/docs/llms.txt)" ], "area": "content", "details": [ { "label": "Surface graded", "value": "The REST API at https://api.higgsfield.ai. A hosted MCP server at https://mcp.higgsfield.ai/mcp (OAuth) belongs to the consumer product and was not graded" }, { "label": "Catalogue", "value": "84 entries per the docs, 67 video in 22 families and 17 image. Higgsfield's own Genjutsu, Cinema Studio 4.0 and Soul, plus Kling, Seedance, Wan, Happy Horse, MiniMax, LTX, PixVerse and Grok" }, { "label": "Request lifecycle", "value": "POST to a model endpoint returns `request_id`, `status_url` and `cancel_url`. States are `queued`, `in_progress`, `completed`, `failed`, `nsfw` and `canceled`" }, { "label": "Max clip length", "value": "Up to 30 seconds on Seedance 2.5, Wan 3.0, Cinema Studio 4.0 and Genjutsu, 15 seconds on Kling 3.0, per the console's model cards" }, { "label": "Resolution", "value": "480p to 1080p on most models, 2K on MiniMax H3, 4K on Kling 3.0 4K, Seedance 2.0 and LTX 2.5 Fast" }, { "label": "Audio", "value": "Optional generated audio on Kling 3.0, Seedance 2.5, Wan 3.0, LTX 2.5 and others, per the model cards" }, { "label": "Rate limits", "value": "Concurrency by funds added in the past 28 days. 2 for a new account, 10 from $25, 20 from $100, 40 from $1,000. Over the limit returns 400, with no `Retry-After`" }, { "label": "Webhooks", "value": "`hf_webhook` query parameter on submit. Retries on network failure and 5xx for up to two hours, duplicates possible, no signature documented" }, { "label": "Billing", "value": "Prepaid balance, credits expire after one year. `failed` and `nsfw` requests aren't charged. Invoicing under a committed-use contract" }, { "label": "Data use", "value": "API inputs and outputs may train Higgsfield's models unless the workspace turns the setting off. Content sent to a partner model goes to that third party" }, { "label": "Retention", "value": "Media files kept at least seven days. Request records kept while the account is active. Zero retention only under an enterprise addendum" }, { "label": "SDKs", "value": "Python `higgsfield-client` 0.2.0 (Apache-2.0 repository) and TypeScript `@higgsfield/client` 0.2.6 (MIT), both released 17 September 2026" }, { "label": "Status", "value": "status.higgsfield.ai on Instatus, two components (API, Cloud Console), no notices from August to October 2026" } ], "unitPrices": [ { "item": "Kling 3.0, list price from", "unit": "video-second", "usd": 0.084, "note": "The pricing page also shows a max-discount price from $0.042. The discount's conditions weren't readable" }, { "item": "Seedance 2.5, list price from", "unit": "video-second", "usd": 0.206, "note": "Max-discount price from $0.144" }, { "item": "Wan 3.0 Prime, list price from", "unit": "video-second", "usd": 0.068, "note": "Max-discount price from $0.041" }, { "item": "Genjutsu 480p, list price", "unit": "video-second", "usd": 0.318, "note": "Per second of source video, rounded up. 720p $0.681 and 1080p $1.632 per the docs. Max-discount price from $0.159" }, { "item": "Kling 2.5, list price from", "unit": "video-second", "usd": 0.042, "note": "Max-discount price from $0.021" } ], "provenance": { "legalEntity": "Higgsfield Inc.", "domain": "higgsfield.ai", "domainRegistered": "2023-06-07", "endpointOnVendorDomain": true, "terms": "https://open.higgsfield.ai/terms-of-service", "privacy": "https://higgsfield.ai/privacy-policy", "statusPage": "https://status.higgsfield.ai", "changelog": "", "securityTxt": "valid", "checked": "2026-10-08", "notes": [ "The API Terms of Service (last updated 2 September 2026) name Higgsfield Inc., 535 Mission St, 14th Floor, San Francisco, CA 94105, and are supplemental to the Terms of Use Agreement of 26 July 2026 at https://higgsfield.ai/terms-of-use-agreement.", "The privacy policy (last updated 26 July 2026, effective 27 August 2026) says it covers the website, applications and APIs. The API terms incorporate a DPA where Higgsfield processes personal data on a customer's behalf. We found no public link to it.", "The API answers at https://api.higgsfield.ai and the console at https://open.higgsfield.ai (console.higgsfield.ai redirects there).", "https://higgsfield.ai/.well-known/security.txt has a contact, a PGP key and an expiry of 12 September 2027. Its comment block is a set of instructions addressed to AI agents and automated security tools about testing scope. We recorded it and did not act on it.", "No changelog page is in the docs sitemap. The API terms list a changelog as part of the documentation.", "RDAP for higgsfield.ai gives a registration date of 2023-06-07." ], "score": 77, "checks": [ { "check": "Legal entity named", "value": "Higgsfield Inc.", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "higgsfield.ai, registered 2023-06-07 (3 years)", "points": 7, "max": 15, "state": "part" }, { "check": "Endpoint on the vendor's domain", "value": "api.higgsfield.ai", "points": 15, "max": 15, "state": "ok" }, { "check": "Terms of service", "value": "read, states 6 of the 7 things a reader expects, and has 1 clause that costs points", "points": 7.1, "max": 10, "state": "part" }, { "check": "Privacy policy", "value": "read, states 8 of the 8 things a reader expects, and has 1 clause that costs points", "points": 8, "max": 10, "state": "part" }, { "check": "Status page", "value": "status.higgsfield.ai", "points": 10, "max": 10, "state": "ok" }, { "check": "Changelog", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "security.txt", "value": "valid", "points": 10, "max": 10, "state": "ok" } ], "policies": [ { "kind": "terms", "url": "https://open.higgsfield.ai/terms-of-service", "state": "read", "readAt": "2026-10-08", "statedDate": "2026-09-02", "words": 4812, "points": 7.1, "max": 10, "expected": [ { "key": "terms.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last updated: September 2, 2026", "says": "Last updated 2026-09-02" }, { "key": "terms.law", "label": "Names the governing law or courts", "found": true, "quote": "…and 19 (General Provisions) of the Terms of Use apply to these API Terms, including California governing law (Section 19.8), exclusive San Francisco venue where litigation is permitted (Section 19.7), and the Arbitration Agreement’s class action and jury trial waiver and 30-day opt-out (Sections 18.4 and 18.10)." }, { "key": "terms.liability", "label": "States a limit on its liability", "found": true, "quote": "Sections 13 (Disclaimer of Warranties) and 14 (Limitation of Liability) of the Terms of Use apply in full to the API Service, including Section 13.7 (Third-Party Infrastructure) and Section 13.8 (Developer Access and Supercomputer Agent)." }, { "key": "terms.termination", "label": "Says how the agreement or account can be ended", "found": true, "quote": "You shall use commercially reasonable efforts to enforce your end-user agreements against End Users whose violations may adversely affect Company or the API Service, and shall suspend or terminate an End User’s access promptly upon Company’s reasonable request." }, { "key": "terms.changes", "label": "Says how changes to the terms are announced", "found": false }, { "key": "terms.use", "label": "Lists what users may not do", "found": true, "quote": "Without limiting those Sections, you shall not embed API Keys in client-side or publicly accessible code;" }, { "key": "terms.sla", "label": "Refers to a service level or uptime commitment", "found": true, "quote": "Service level agreements are available only under an Order Form for customers meeting Company’s then-current eligibility criteria." } ], "toKnow": [ { "key": "training.optout", "label": "Says it may use customer content to train or improve models, and gives an opt-out", "found": true, "quote": "Notwithstanding Section 4.4 of the Terms of Use, for Inputs submitted to and Outputs generated by the API Service: Company may use such content to train, develop, and improve its AI models and related technology unless you opt out." }, { "key": "terms.benchmark", "label": "Restricts benchmarking or competitive use", "found": true, "quote": "You shall not use the API Service or any Output to train, fine-tune, distill, or otherwise develop or improve any artificial intelligence model that competes with the API Service or any Model", "costsPoints": true }, { "key": "terms.cutoff", "label": "Says access can be ended without notice or for any reason", "found": true, "quote": "Company may suspend your access to the API Service immediately and without prior notice where reasonably necessary to address a breach of Section 4, 6, or 8 of these API Terms, a security risk, legal or regulatory exposure, upstream provider requirements, or non-payment." }, { "key": "terms.arbitration", "label": "Requires arbitration or waives class actions", "found": true, "quote": "SECTION 18 OF THE TERMS OF USE (ARBITRATION AGREEMENT) GOVERNS HOW DISPUTES UNDER THESE API TERMS ARE RESOLVED, INCLUDING ITS MANDATORY BINDING ARBITRATION PROVISIONS, CLASS ACTION AND JURY TRIAL WAIVER, AND THIRTY (30) DAY RIGHT TO OPT OUT." } ], "notes": [ { "date": "2026-10-08", "text": "Content submitted to a model run by a third-party partner is transferred to that third party.", "quote": "You acknowledge that Your Content submitted to a Partner Model (or to any third-party Model accessed via a third party’s API) will be transferred to that third party." }, { "date": "2026-10-08", "text": "Generated media files are kept for at least seven days, after which Higgsfield may delete them permanently.", "quote": "Generated media files are available for at least seven (7) days from generation, but Company may permanently delete media files after that period." }, { "date": "2026-10-08", "text": "Prepaid units bought for API use expire one year after purchase.", "quote": "Purchased Units expire one year after purchase." } ] }, { "kind": "privacy", "url": "https://higgsfield.ai/privacy-policy", "state": "read", "readAt": "2026-10-08", "statedDate": "2026-07-26", "words": 7667, "points": 8, "max": 10, "expected": [ { "key": "privacy.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last updated: July 26, 2026", "says": "Last updated 2026-07-26" }, { "key": "privacy.collected", "label": "Says what personal data is collected", "found": true, "quote": "This Privacy Policy describes how Higgsfield processes personal information that we collect through our digital properties that link to this Privacy Policy, including our website (higgsfield.ai), our applications, APIs, and related tools, and our social media pages (collectively, the “Service”), as well as our marketi…" }, { "key": "privacy.retention", "label": "Says how long data is kept", "found": true, "quote": "We retain personal information for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, to establish or defend legal claims, or for the ‘Compliance and protection’ purposes outlined above.", "says": "For as long as needed, with no period named" }, { "key": "privacy.processors", "label": "Says who else receives the data", "found": true, "quote": "Service providers that provide services on our behalf or help us operate the Service or our business." }, { "key": "privacy.sale", "label": "Says whether personal data is sold or shared for advertising", "found": true, "quote": "2.1 Service delivery and operations2.2 Service personalization2.3 Service improvement and analytics2.4 Marketing2.5 Compliance and protection2.6 Aggregated, de-identified and anonymized data2.7 Interest-based advertising" }, { "key": "privacy.rights", "label": "Says what rights people have over their data", "found": true, "quote": "We have appointed the following representatives in Europe as required by the GDPR – you can contact them directly should you wish:" }, { "key": "privacy.contact", "label": "Gives a privacy contact", "found": true, "quote": "For any questions about your biometric information, or to withdraw any consent you have given, you may contact us at privacy@higgsfield.ai, after which we stop processing your biometric information.", "says": "privacy@higgsfield.ai" }, { "key": "privacy.transfers", "label": "Says where data is transferred or stored", "found": true, "quote": "we seek to use specific appropriate safeguards, which are designed to give personal information effectively the same protection it has in Europe – for example, standard-form contracts approved by relevant authorities for this purpose (e.g., Standard Contractual Clauses/ ‘SCCs’ as approved by the European Commission);", "says": "Relies on standard contractual clauses" } ], "toKnow": [ { "key": "training", "label": "Says it may use customer content to train or improve models, and no opt-out was found", "found": true, "quote": "…multimedia data, query and prompt data, and Inputs and Outputs (each as defined in our Terms of Use) to train and improve our (and our affiliates') AI models and algorithms, and for content moderation and safety purposes), improve the rest of our business, help us understand user activity on the Service, including whi…", "costsPoints": true }, { "key": "privacy.sells", "label": "Says it sells personal data or shares it for advertising", "found": true, "quote": "We, our service providers, and our advertising partners use cookies and similar technologies to collect online activity and device data in order to deliver advertising tailored to your interests and to measure its effectiveness, including by sharing this information with advertising partners." } ], "notes": [ { "date": "2026-10-08", "text": "The policy says use of content for model training can be stopped going forward by deleting the content or the account.", "quote": "You can stop this going forward by deleting your content or account; see the 'Delete your content or account' section below." }, { "date": "2026-10-08", "text": "Content already used in trained models cannot be removed from them after deletion, and deleted content is not used for later training.", "quote": "Content already incorporated into our AI models before deletion cannot feasibly be removed from models that are already trained; going forward, we will not use deleted content to train our AI models, as described in our Terms of Use." } ] } ] }, "pageJsonUrl": "https://www.anchorterminal.com/tools/higgsfield.json", "live": { "slug": "higgsfield", "probe": { "target": "https://api.higgsfield.ai", "method": "get", "lastAt": "2026-10-09T10:42:45.243005389Z", "lastOk": true, "lastStatus": 405, "lastMs": 205, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 162, "p95ms24h": 264, "samples24h": 33, "samples30d": 33, "days": [ { "date": "2026-10-09", "probes": 33, "ok": 33 } ] }, "vendorStatus": { "page": "https://status.higgsfield.ai", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-09T07:58:03.234604982Z" }, "updatedAt": "2026-10-09T10:42:45.243005389Z" } } }