{
  "meta": {
    "attribution": "Anchor Terminal (https://www.anchorterminal.com)",
    "attributionRequired": true,
    "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)",
    "docs": "https://www.anchorterminal.com/docs/",
    "generatedAt": "2026-11-13",
    "license": "CC-BY-4.0",
    "method": "https://www.anchorterminal.com/benchmark/",
    "methodology": "0.8",
    "openapi": "https://www.anchorterminal.com/openapi.json",
    "preview": false,
    "run": "2026-10-01",
    "runLabel": "October 2026 research run",
    "terms": "https://www.anchorterminal.com/terms/#data"
  },
  "tool": {
    "slug": "pamba",
    "name": "Pamba",
    "vendor": "Pamba",
    "vendorUrl": "https://pamba.app",
    "kind": "http-api",
    "category": "social-media",
    "summary": "Pamba makes AI avatar short-form videos and posts them to TikTok, Instagram and Facebook, through an app, a REST API and a remote MCP server. It also sells accounts it runs on its own iPhones, which those platforms forbid.",
    "url": "https://www.anchorterminal.com/tools/pamba",
    "markdownUrl": "https://www.anchorterminal.com/tools/pamba.md",
    "slimMarkdownUrl": "https://www.anchorterminal.com/tools/pamba.min.md",
    "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/pamba.json",
    "dns": "pamba.grade.anchorterminal.com",
    "license": "Closed service. No terms of service or privacy policy published; an acceptable use policy only",
    "transports": [
      "http",
      "streamable-http"
    ],
    "remoteUrl": "https://api.pamba.app/mcp",
    "packages": [],
    "auth": "oauth",
    "authNotes": "OAuth 2.1 with PKCE and dynamic client registration on api.pamba.app, scope pamba:projects, choosing up to 50 workspaces at approval; or a workspace API key in X-API-Key, which carries the user's rights over their keys and the workspaces they administer.",
    "pricing": "freemium",
    "pricingNotes": "Credits: free 300, Hobby $16 for 1,600 and Pro $100 for 10,000 a month; top-ups $12.50 per 1,000. Managed TikTok or Instagram accounts $100 a month each. Fully managed from $7,500 a month. Per-model credit rates at GET /usage/pricing without auth. Read 11 November 2026.",
    "priceSummary": "$0.0125 / credit",
    "where": "hosted",
    "x402": {
      "level": "no",
      "evidence": "No x402, MPP or L402 in Pamba's pricing, API or MCP pages, 11 November 2026. Billing is through Stripe.",
      "endpoints": []
    },
    "toolCount": 407,
    "popularity": {
      "githubStars": null,
      "npmWeekly": null,
      "pypiWeekly": null,
      "asOf": "2026-11-11"
    },
    "docsUrl": "https://pamba.app/help/mcp-server",
    "mcpTools": {
      "url": "https://api.pamba.app/mcp?readonly=true",
      "checkedAt": "2026-11-13T03:13:09.042103119Z",
      "status": "auth",
      "note": "asks for credentials before listing its tools",
      "changedAt": "2026-11-13T03:13:09.042103119Z"
    },
    "llmsTxt": "https://pamba.app/llms.txt",
    "capabilities": [
      "social.post",
      "social.schedule",
      "social.analytics",
      "social.comments",
      "social.media-upload",
      "video.generate"
    ],
    "tags": [
      "hosted",
      "mcp",
      "oauth",
      "llms-txt",
      "closed-source",
      "freemium",
      "usage-priced",
      "tiktok",
      "instagram",
      "no-status-page",
      "platform-rules"
    ],
    "lastRelease": "2026-11-11",
    "graded": true,
    "anchor": {
      "graded": true,
      "score": 41.2,
      "grade": "E",
      "agentReady": false,
      "rank": 1334,
      "ranked": true,
      "rankOf": 1524,
      "categoryRank": 17,
      "methodology": "0.8",
      "run": "2026-10-01",
      "scores": {
        "ergonomics": 75,
        "maintenance": 70,
        "payments": 53,
        "reliability": 45,
        "schema": 84,
        "security": 35,
        "transparency": 28
      },
      "pending": [
        "performance",
        "tasks"
      ],
      "breakdown": [
        {
          "key": "reliability",
          "name": "Reliability",
          "weight": 16,
          "effectiveWeight": 20,
          "score": 45,
          "points": 9,
          "reason": "Graded as a hosted service. No status page found: none is linked, and status.pamba.app didn't answer (0). With no page there's no incident history to read (5 of 30). Limits are published per route and tool: 1,000 renders a day and 25 at once for a paid workspace, upload and message caps, live-search budgets (15). 429s come with Retry-After and tools answer rate_limited with retry_at (15). The fully managed plan lists \"SLA guarantees\" at $7,500 a month, with no SLA document found (0). Self-serve and live (10). 0 + 5 + 15 + 15 + 0 + 10 = 45.",
          "checked": "2026-11-11"
        },
        {
          "key": "performance",
          "name": "Performance",
          "weight": 10,
          "effectiveWeight": 0,
          "pending": true,
          "points": 0,
          "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes."
        },
        {
          "key": "schema",
          "name": "Schema \u0026 documentation",
          "weight": 13,
          "effectiveWeight": 16.25,
          "score": 84,
          "points": 13.65,
          "reason": "No OpenAPI file found. The MCP tool reference is generated from the server's own tool listing, with every parameter, side effect and credit cost for 407 tools, and the REST reference documents each route's request, response and error codes (15 of 25). llms.txt with the docs corpus (10). The guides say what each toolset does, what waits, what costs credits and the ordering rules, and the API page says media must be uploaded to Pamba first (18 of 20). Parameters are typed with required flags; a few lists are documented as replaced whole (12 of 15). Examples throughout, and refusals are named statuses (too_large, error and others) with a message for a person and a next call (14 of 15). A dated API and MCP changelog marks each entry new, improved, changed, deprecated or removed, and flags breaking changes (15). 15 + 10 + 18 + 12 + 14 + 15 = 84.",
          "checked": "2026-11-11"
        },
        {
          "key": "ergonomics",
          "name": "Agent ergonomics",
          "weight": 13,
          "effectiveWeight": 16.25,
          "score": 75,
          "points": 12.19,
          "reason": "Read on the MCP server. 407 tools is a large surface, but the URL takes toolsets= for a subset and readonly=true for reads only, enforced by the server (15 of 25). Lists that page or take a limit are named, and the rest say to narrow with filters (15 of 20). Refusals are results with a status, a message and a next field, and only status error sets isError (18 of 20). Some tools are marked idempotent and posting to several destinations is all or nothing, but there's no general idempotency key (12 of 20). Connector guides for Claude, ChatGPT, Grok and Gemini, and four workflow prompts (15 of 15). 15 + 15 + 18 + 12 + 15 = 75.",
          "checked": "2026-11-11"
        },
        {
          "key": "security",
          "name": "Security \u0026 auth",
          "weight": 14,
          "effectiveWeight": 17.5,
          "score": 35,
          "points": 6.13,
          "reason": "OAuth 2.1 with PKCE and dynamic client registration on Pamba's own authorisation server, with one scope, pamba:projects, covering everything, and a workspace choice at approval; or a workspace API key that, per the docs, has the user's own rights, can manage their keys everywhere and delete workspaces they administer (15 of 30). readonly=true is enforced, and every tool carries readOnlyHint or destructiveHint so clients can ask first; credit costs are estimated in chat when confirmation is on (15 of 20). Tools return comments from strangers on posted videos to the agent, and the MCP guide carries no prompt-injection warning that was found (5 of 15). No privacy policy: /privacy answered 404, and the managed-account seats hold TikTok and Instagram logins, recovery emails and 2-step codes (0 of 15). No security.txt (404) and no disclosure programme found (0 of 20). 15 + 15 + 5 + 0 + 0 = 35.",
          "checked": "2026-11-11"
        },
        {
          "key": "payments",
          "name": "Payments \u0026 pricing",
          "weight": 10,
          "effectiveWeight": 12.5,
          "score": 53,
          "points": 6.63,
          "reason": "No x402, MPP or L402 (0). Prices are public without a login: free, $16 and $100 a month for credits, $100 a month per managed account, top-ups at $12.50 per 1,000 credits, and per-model credit rates at GET /usage/pricing without auth (20). A free plan of 300 credits; whether it needs a card isn't stated (15 of 20). A person signs up in a browser before a key or an OAuth approval (0). 0 + 20 + 15 + 0 = 35. Re-scored on 13 November 2026 for the new payments rubric (protocol 10, the other three lines 30 each): 35 is 53.",
          "checked": "2026-11-11"
        },
        {
          "key": "tasks",
          "name": "Task success",
          "weight": 10,
          "effectiveWeight": 0,
          "pending": true,
          "points": 0,
          "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored."
        },
        {
          "key": "maintenance",
          "name": "Maintenance \u0026 community",
          "weight": 7,
          "effectiveWeight": 8.75,
          "score": 70,
          "points": 6.13,
          "reason": "Closed service. The changelog has entries on 9, 10 and 11 November 2026 (30). Breaking API changes are flagged in the changelog, with no notice period stated (6 of 12). Changed and removed entries appear; no removal of a whole route was checked (4 of 8). Dated changelog with an Atom feed (15). Support goes to the founders, who say they usually reply within a business day; not sampled (5 of 10). No SDK; MCP and REST only (5 of 15). Runtimes not applicable; nothing to install (5 of 10). 30 + 6 + 4 + 15 + 5 + 5 + 5 = 70.",
          "checked": "2026-11-11"
        },
        {
          "key": "transparency",
          "name": "Transparency \u0026 trust",
          "weight": 7,
          "effectiveWeight": 8.75,
          "score": 28,
          "points": 2.45,
          "note": "editorial 18, provenance 37",
          "reason": "Closed service with no terms of service: /terms answered 404, and only an acceptable use policy (dated 6 July 2026) is published, with no legal entity named anywhere read (5 of 30). No privacy policy, no retention statement and no DPA, on a service that holds social logins and recovery access (0 of 30). The changelog dates deprecations and removals; no policy (10 of 20). The team says it's in San Francisco and posts from iPhones with US SIM cards; where data is processed and who processes it isn't stated (3 of 20). 5 + 0 + 10 + 3 = 18. It does publish its own results, including that 42% of 6,678 videos it measured never reached 1,000 views.",
          "checked": "2026-11-11"
        }
      ],
      "assessment": {
        "date": "2026-11-11",
        "basis": "public evidence",
        "confidence": "medium",
        "notes": {
          "ergonomics": "Read on the MCP server. 407 tools is a large surface, but the URL takes toolsets= for a subset and readonly=true for reads only, enforced by the server (15 of 25). Lists that page or take a limit are named, and the rest say to narrow with filters (15 of 20). Refusals are results with a status, a message and a next field, and only status error sets isError (18 of 20). Some tools are marked idempotent and posting to several destinations is all or nothing, but there's no general idempotency key (12 of 20). Connector guides for Claude, ChatGPT, Grok and Gemini, and four workflow prompts (15 of 15). 15 + 15 + 18 + 12 + 15 = 75.",
          "maintenance": "Closed service. The changelog has entries on 9, 10 and 11 November 2026 (30). Breaking API changes are flagged in the changelog, with no notice period stated (6 of 12). Changed and removed entries appear; no removal of a whole route was checked (4 of 8). Dated changelog with an Atom feed (15). Support goes to the founders, who say they usually reply within a business day; not sampled (5 of 10). No SDK; MCP and REST only (5 of 15). Runtimes not applicable; nothing to install (5 of 10). 30 + 6 + 4 + 15 + 5 + 5 + 5 = 70.",
          "payments": "No x402, MPP or L402 (0). Prices are public without a login: free, $16 and $100 a month for credits, $100 a month per managed account, top-ups at $12.50 per 1,000 credits, and per-model credit rates at GET /usage/pricing without auth (20). A free plan of 300 credits; whether it needs a card isn't stated (15 of 20). A person signs up in a browser before a key or an OAuth approval (0). 0 + 20 + 15 + 0 = 35. Re-scored on 13 November 2026 for the new payments rubric (protocol 10, the other three lines 30 each): 35 is 53.",
          "reliability": "Graded as a hosted service. No status page found: none is linked, and status.pamba.app didn't answer (0). With no page there's no incident history to read (5 of 30). Limits are published per route and tool: 1,000 renders a day and 25 at once for a paid workspace, upload and message caps, live-search budgets (15). 429s come with Retry-After and tools answer rate_limited with retry_at (15). The fully managed plan lists \"SLA guarantees\" at $7,500 a month, with no SLA document found (0). Self-serve and live (10). 0 + 5 + 15 + 15 + 0 + 10 = 45.",
          "schema": "No OpenAPI file found. The MCP tool reference is generated from the server's own tool listing, with every parameter, side effect and credit cost for 407 tools, and the REST reference documents each route's request, response and error codes (15 of 25). llms.txt with the docs corpus (10). The guides say what each toolset does, what waits, what costs credits and the ordering rules, and the API page says media must be uploaded to Pamba first (18 of 20). Parameters are typed with required flags; a few lists are documented as replaced whole (12 of 15). Examples throughout, and refusals are named statuses (too_large, error and others) with a message for a person and a next call (14 of 15). A dated API and MCP changelog marks each entry new, improved, changed, deprecated or removed, and flags breaking changes (15). 15 + 10 + 18 + 12 + 14 + 15 = 84.",
          "security": "OAuth 2.1 with PKCE and dynamic client registration on Pamba's own authorisation server, with one scope, pamba:projects, covering everything, and a workspace choice at approval; or a workspace API key that, per the docs, has the user's own rights, can manage their keys everywhere and delete workspaces they administer (15 of 30). readonly=true is enforced, and every tool carries readOnlyHint or destructiveHint so clients can ask first; credit costs are estimated in chat when confirmation is on (15 of 20). Tools return comments from strangers on posted videos to the agent, and the MCP guide carries no prompt-injection warning that was found (5 of 15). No privacy policy: /privacy answered 404, and the managed-account seats hold TikTok and Instagram logins, recovery emails and 2-step codes (0 of 15). No security.txt (404) and no disclosure programme found (0 of 20). 15 + 15 + 5 + 0 + 0 = 35.",
          "transparency": "Closed service with no terms of service: /terms answered 404, and only an acceptable use policy (dated 6 July 2026) is published, with no legal entity named anywhere read (5 of 30). No privacy policy, no retention statement and no DPA, on a service that holds social logins and recovery access (0 of 30). The changelog dates deprecations and removals; no policy (10 of 20). The team says it's in San Francisco and posts from iPhones with US SIM cards; where data is processed and who processes it isn't stated (3 of 20). 5 + 0 + 10 + 3 = 18. It does publish its own results, including that 42% of 6,678 videos it measured never reached 1,000 views."
        },
        "sources": [
          {
            "what": "About page: team, iPhones with US SIMs, published results",
            "url": "https://pamba.app/about",
            "seen": "2026-11-11"
          },
          {
            "what": "Managed accounts page: real iPhones, US SIMs, run hundreds of accounts, replacements when banned",
            "url": "https://pamba.app/accounts",
            "seen": "2026-11-11"
          },
          {
            "what": "Account warming help: so the account reads as a real person",
            "url": "https://pamba.app/help/account-warming",
            "seen": "2026-11-11"
          },
          {
            "what": "Account ownership and transfer help: logins, recovery and 2-step handover",
            "url": "https://pamba.app/help/tiktok-account-ownership-and-transfer",
            "seen": "2026-11-11"
          },
          {
            "what": "Pricing",
            "url": "https://pamba.app/pricing",
            "seen": "2026-11-11"
          },
          {
            "what": "MCP server guide",
            "url": "https://pamba.app/help/mcp-server",
            "seen": "2026-11-11"
          },
          {
            "what": "MCP tool reference",
            "url": "https://pamba.app/help/mcp-tool-reference",
            "seen": "2026-11-11"
          },
          {
            "what": "API reference",
            "url": "https://pamba.app/api",
            "seen": "2026-11-11"
          },
          {
            "what": "API keys and agents help",
            "url": "https://pamba.app/help/api-and-agents",
            "seen": "2026-11-11"
          },
          {
            "what": "Changelog",
            "url": "https://pamba.app/changelog",
            "seen": "2026-11-11"
          },
          {
            "what": "Acceptable use policy",
            "url": "https://pamba.app/acceptable-use-policy",
            "seen": "2026-11-11"
          },
          {
            "what": "Protected-resource metadata",
            "url": "https://api.pamba.app/.well-known/oauth-protected-resource/mcp",
            "seen": "2026-11-11"
          },
          {
            "what": "Authorisation server metadata",
            "url": "https://api.pamba.app/.well-known/oauth-authorization-server",
            "seen": "2026-11-11"
          }
        ],
        "openQuestions": [
          "unchecked: TikTok's community guidelines and Instagram's terms read first-hand; both hosts close robots.txt to our reader, so the rules are linked from search.",
          "unchecked: whether the free plan needs a card.",
          "No terms, privacy policy or legal entity found on 11 November 2026 (/terms and /privacy answered 404). The acceptable use policy tells customers to follow each platform's terms.",
          "Whether the videos Pamba posts are labelled as AI on TikTok and Instagram wasn't checked; Pamba's own site says its creators are AI."
        ]
      },
      "negative": -15,
      "warnings": [
        {
          "kind": "platform-rules",
          "name": "Breaks the rules of the platforms it acts on",
          "text": "Pamba sells TikTok and Instagram accounts it creates on its own iPhones and warms so each 'reads as a real person', pitches running 'hundreds of accounts' and replaces banned ones. TikTok's guidelines and Instagram's terms forbid that.",
          "deduct": -15,
          "since": "2026-11-11",
          "sources": [
            "https://pamba.app/accounts",
            "https://pamba.app/help/account-warming",
            "https://www.tiktok.com/community-guidelines/en/integrity-authenticity/",
            "https://help.instagram.com/581066165581870"
          ]
        }
      ],
      "verdict": "Pamba sells TikTok and Instagram accounts it creates and warms on its own iPhones so each reads as a real person, which those platforms' rules forbid. Its MCP server and API are well documented and drive that too. No terms of service or privacy policy is published.",
      "bestFor": "Not recommended for the managed accounts. The avatar video tools fit agents making short-form marketing video for accounts their boss owns and runs by the platforms' rules.",
      "strengths": [
        "A remote MCP server with 407 tools in nine toolsets, a server-enforced read-only mode and readOnlyHint or destructiveHint on every tool",
        "OAuth 2.1 with PKCE and dynamic client registration, with protected-resource metadata on its own domain",
        "A tool reference generated from the server, and a dated API changelog that flags breaking changes",
        "Prices public without a login, including per-model credit rates from an unauthenticated route",
        "Publishes its own poor results: 42% of 6,678 videos it measured never reached 1,000 views"
      ],
      "weaknesses": [
        "Sells and runs TikTok and Instagram accounts made to pass as people, against those platforms' rules, and replaces them when banned",
        "No terms of service and no privacy policy (both 404), and no legal entity named",
        "Managed seats hold account logins, recovery emails and 2-step codes with no published data policy",
        "One OAuth scope covers everything, and an API key can manage the user's keys and delete workspaces",
        "No status page and no security contact"
      ],
      "agentNotes": [
        "Tell your boss before using the accounts toolset: the managed accounts break TikTok's and Instagram's rules and can be banned",
        "Connect with ?readonly=true or a toolsets= subset; the full server is 407 tools",
        "Upload media to Pamba first and pass the returned URL; links to other hosts are refused with 400",
        "Read status and next on every result: refusals are results, not MCP errors",
        "Check credit costs before generation calls; 38 tools spend credits"
      ],
      "metrics": {
        "kind": "remote",
        "measured": false
      },
      "reviewCount": 0,
      "avgRating": 0,
      "history": [
        {
          "basis": "public evidence",
          "confidence": "medium",
          "grade": "E",
          "methodology": "0.8",
          "pending": [
            "performance",
            "tasks"
          ],
          "run": "2026-10-01",
          "runLabel": "October 2026 research run",
          "score": 41.2
        }
      ],
      "editorialScores": {
        "ergonomics": 75,
        "maintenance": 70,
        "payments": 53,
        "reliability": 45,
        "schema": 84,
        "security": 35,
        "transparency": 18
      },
      "provenanceScore": 37,
      "checked": {
        "categories": {
          "ergonomics": "2026-11-11",
          "maintenance": "2026-11-11",
          "payments": "2026-11-11",
          "reliability": "2026-11-11",
          "schema": "2026-11-11",
          "security": "2026-11-11",
          "transparency": "2026-11-11"
        },
        "last": "2026-11-11",
        "lastMoved": "2026-11-13",
        "oldest": "2026-11-11",
        "stale": false,
        "staleAfterDays": 90
      },
      "scoreHistory": [
        {
          "causes": [
            "method"
          ],
          "changes": [
            {
              "cause": "method",
              "from": 35,
              "key": "payments",
              "name": "Payments \u0026 pricing",
              "source": "https://www.anchorterminal.com/benchmark/#checklist-payments",
              "to": 53,
              "why": "The payments checklist changed on 13 November 2026 (methodology v0.8): a machine payment protocol is worth 10 points instead of 40, and public prices, a free tier without a card and onboarding without a person 30 each instead of 20. The protocol's points were divided by four and the other lines' multiplied by one and a half."
            }
          ],
          "date": "2026-11-13",
          "from": {
            "grade": "E",
            "score": 38.9
          },
          "grade": "E",
          "kind": "move",
          "method": "0.8",
          "score": 41.2
        },
        {
          "causes": [
            "method"
          ],
          "changes": [
            {
              "cause": "method",
              "from": -10,
              "key": "negative",
              "name": "Negative events",
              "source": "https://www.anchorterminal.com/benchmark/#warnings",
              "to": -15,
              "why": "The 10-point deduction for breaking TikTok's and Instagram's rules became a warning of 15 points, when warnings were introduced on 13 November 2026."
            }
          ],
          "date": "2026-11-13",
          "from": {
            "grade": "E",
            "score": 43.9
          },
          "grade": "E",
          "kind": "move",
          "method": "0.7",
          "score": 38.9
        },
        {
          "date": "2026-11-11",
          "grade": "E",
          "kind": "listed",
          "method": "0.7",
          "score": 43.9
        }
      ]
    },
    "connect": {
      "http": "curl https://api.pamba.app/usage/pricing",
      "claudeCode": "claude mcp add pamba --transport http \"https://api.pamba.app/mcp?readonly=true\"",
      "config": {
        "mcpServers": {
          "pamba": {
            "url": "https://api.pamba.app/mcp?readonly=true"
          }
        }
      }
    },
    "letme": {
      "capability": "https://letme.dev/social.post",
      "tool": "https://letme.dev/pamba"
    },
    "notable": [
      "Managed accounts: TikTok and Instagram accounts on physical iPhones with US SIM cards, warmed daily, 'run hundreds of accounts', replaced if restricted or banned, at $100 a month each (https://pamba.app/accounts)",
      "Warming browses each account's phone 'like a person would' so that 'the account reads as a real person' (https://pamba.app/help/account-warming)",
      "MCP server at api.pamba.app/mcp with 407 tools in nine toolsets, 142 read-only, 227 that change data and 38 that spend credits, generated into a public reference (https://pamba.app/help/mcp-tool-reference)",
      "Three people in San Francisco, building since June 2025; says 110+ AI creator accounts run, 6,678+ videos posted and 500M+ views, and that 42% of those videos never reached 1,000 views (https://pamba.app/about)",
      "Its acceptable use policy tells customers to comply with the terms of every platform they publish to (https://pamba.app/acceptable-use-policy)"
    ],
    "area": "communication",
    "details": [
      {
        "label": "Surface graded",
        "value": "The remote MCP server at api.pamba.app/mcp and the REST API at api.pamba.app, read from Pamba's docs, pricing and about pages and its OAuth metadata on 11 November 2026. One unauthenticated GET to the MCP endpoint answered 401 with resource metadata. No account was made and nothing was called"
      },
      {
        "label": "Platform rules",
        "value": "Pamba creates, warms and posts from TikTok and Instagram accounts on its own phones so they pass as people, and replaces banned ones. TikTok's guidelines bar accounts that manipulate the platform and the trade of engagement-inflating services; Instagram's terms bar selling or buying accounts and automated account creation. Listed with a warning that takes 15 points for it (docs/design/listing-policy.md)"
      },
      {
        "label": "Toolsets",
        "value": "videos, editing, avatars, accounts (90 tools: fleet, seats, warming, health, comments, posting queue), ideas, discover, content, automation, workspace. ?toolsets= for a subset, ?readonly=true for reads only"
      },
      {
        "label": "Auth",
        "value": "OAuth 2.1 with PKCE (S256), dynamic client registration and revocation, one scope pamba:projects; or X-API-Key per workspace"
      },
      {
        "label": "Who",
        "value": "Eric Owusu Sekyere (cofounder and CEO), Karol Zdebel (cofounder and CTO), Victor Batirow (founding systems analyst), San Francisco. No legal entity named"
      },
      {
        "label": "Missing",
        "value": "Terms of service, privacy policy, status page, security contact"
      }
    ],
    "unitPrices": [
      {
        "item": "Managed TikTok or Instagram account",
        "unit": "account-month",
        "usd": 100,
        "note": "Per account; no credits needed"
      },
      {
        "item": "Credits top-up",
        "unit": "credit",
        "usd": 0.0125,
        "note": "$12.50 per 1,000; plans work out at $10 per 1,000"
      }
    ],
    "provenance": {
      "legalEntity": "",
      "domain": "pamba.app",
      "domainRegistered": "2025-06-05",
      "endpointOnVendorDomain": true,
      "terms": "",
      "privacy": "",
      "statusPage": "",
      "changelog": "https://pamba.app/changelog",
      "securityTxt": "none",
      "checked": "2026-11-11",
      "notes": [
        "/terms and /privacy answered 404 on 11 November 2026; only an acceptable use policy, dated 6 July 2026, is published, and it names no company.",
        "RDAP gives pamba.app a registration date of 5 June 2025 through Namecheap, with no registrant shown.",
        "robots.txt on pamba.app allows ClaudeBot on public pages and disallows app paths; api.pamba.app has no robots.txt (404).",
        "No entry in the official MCP registry for 'pamba' on 11 November 2026."
      ],
      "score": 37,
      "checks": [
        {
          "check": "Legal entity named",
          "value": "not found",
          "points": 0,
          "max": 20,
          "state": "no"
        },
        {
          "check": "Domain age",
          "value": "pamba.app, registered 2025-06-05 (1 year)",
          "points": 3,
          "max": 15,
          "state": "part"
        },
        {
          "check": "Endpoint on the vendor's domain",
          "value": "api.pamba.app",
          "points": 15,
          "max": 15,
          "state": "ok"
        },
        {
          "check": "Terms of service",
          "value": "not found",
          "points": 0,
          "max": 10,
          "state": "no"
        },
        {
          "check": "Privacy policy",
          "value": "not found",
          "points": 0,
          "max": 10,
          "state": "no"
        },
        {
          "check": "Status page",
          "value": "not found",
          "points": 0,
          "max": 10,
          "state": "no"
        },
        {
          "check": "Changelog",
          "value": "published",
          "points": 10,
          "max": 10,
          "state": "ok"
        },
        {
          "check": "security.txt",
          "value": "not found",
          "points": 0,
          "max": 10,
          "state": "no"
        },
        {
          "check": "People named",
          "value": "3 named with their role, 3 with a public profile",
          "points": 10,
          "max": 10,
          "state": "ok"
        },
        {
          "check": "Support route",
          "value": "help pages",
          "points": 5,
          "max": 5,
          "state": "ok"
        }
      ]
    },
    "humans": {
      "slug": "pamba",
      "checked": "2026-11-11",
      "company": "Pamba",
      "people": [
        {
          "name": "Eric Owusu Sekyere",
          "role": "Cofounder and CEO",
          "founder": true,
          "linkedin": "https://www.linkedin.com/in/erickjos/",
          "x": "https://x.com/thechidwi",
          "page": "/people/eric-owusu-sekyere/"
        },
        {
          "name": "Karol Zdebel",
          "role": "Cofounder and CTO",
          "founder": true,
          "linkedin": "https://www.linkedin.com/in/karol-zdebel-962729106/",
          "x": "https://x.com/karolzdeb",
          "page": "/people/karol-zdebel/"
        },
        {
          "name": "Victor Batirow",
          "role": "Founding Systems Analyst",
          "linkedin": "https://www.linkedin.com/in/victor-batirow-b74a5313a/",
          "x": "https://x.com/victorbatirow",
          "page": "/people/victor-batirow/"
        }
      ],
      "peopleNote": "Pamba's about page, read on 11 November 2026, names three people in San Francisco with their LinkedIn and X links, and says the founders read every message. No investors were looked for in this pass, and no legal entity is named on the site.",
      "companySocial": {},
      "support": {
        "urls": [
          "https://pamba.app/contact",
          "https://pamba.app/help"
        ]
      },
      "sources": [
        "https://pamba.app/about",
        "https://pamba.app/contact"
      ]
    },
    "pageJsonUrl": "https://www.anchorterminal.com/tools/pamba.json",
    "live": {
      "slug": "pamba",
      "probe": {
        "target": "https://api.pamba.app/mcp",
        "method": "get",
        "lastAt": "2026-11-13T23:53:31.137128287Z",
        "lastOk": true,
        "lastStatus": 401,
        "lastMs": 253,
        "lastNote": "asks for credentials",
        "authRequired": true,
        "uptime24h": 100,
        "uptime30d": 100,
        "p50ms24h": 299,
        "p95ms24h": 391,
        "samples24h": 238,
        "samples30d": 318,
        "days": [
          {
            "date": "2026-11-12",
            "probes": 81,
            "ok": 81
          },
          {
            "date": "2026-11-13",
            "probes": 237,
            "ok": 237
          }
        ],
        "since": "2026-11-12T16:06:25.231802453Z"
      },
      "securityTxt": {
        "url": "https://pamba.app/.well-known/security.txt",
        "state": "none",
        "checkedAt": "2026-11-13T16:15:01.559101993Z"
      },
      "llmsTxt": {
        "url": "https://pamba.app/llms.txt",
        "ok": true,
        "status": 200,
        "checkedAt": "2026-11-13T15:55:36.94769184Z"
      },
      "pages": [
        {
          "url": "https://pamba.app/changelog",
          "kind": "changelog",
          "status": 200,
          "checkedAt": "2026-11-13T18:26:24.542486652Z",
          "changedAt": "2026-11-13T18:26:24.542486652Z",
          "fingerprint": "a0b9ef3713fa"
        }
      ],
      "mcpTools": {
        "url": "https://api.pamba.app/mcp?readonly=true",
        "checkedAt": "2026-11-13T03:13:09.042103119Z",
        "status": "auth",
        "note": "asks for credentials before listing its tools",
        "changedAt": "2026-11-13T03:13:09.042103119Z"
      },
      "updatedAt": "2026-11-13T23:53:31.137128287Z"
    },
    "streak": {
      "days": 1,
      "from": "2026-11-12",
      "sinceWatching": true,
      "best": 1
    }
  }
}
