{ "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-30", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "tool": { "slug": "scrapeatlas", "name": "ScrapeAtlas", "vendor": "OD. Media \u0026 Technology LLC", "vendorUrl": "https://scrapeatlas.com", "kind": "http-api", "category": "web-scrapers", "summary": "ScrapeAtlas is a hosted API that returns public profiles, posts, comments, videos, ads, products and market data from 49 social, video, forum, marketplace and prediction-market platforms as JSON, with a CLI, an n8n node and a hosted MCP server.", "url": "https://www.anchorterminal.com/tools/scrapeatlas", "markdownUrl": "https://www.anchorterminal.com/tools/scrapeatlas.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/scrapeatlas.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/scrapeatlas.json", "license": "Proprietary service under ScrapeAtlas's Terms of Service. The @scrapeatlas/cli package on npm is MIT with no public source repository", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://api.scrapeatlas.com", "packages": [ { "registry": "npm", "name": "@scrapeatlas/cli" }, { "registry": "npm", "name": "n8n-nodes-scrapeatlas" } ], "auth": "mixed", "authNotes": "A customer API key (prefix `sa_live_`) created on the account page, sent as `x-api-key` or `Authorization: Bearer` to https://api.scrapeatlas.com. Several keys share one credit balance, keys carry an expiry date, and revocation takes effect within 60 seconds per the authentication page. No scopes or per-platform keys. The hosted MCP server at https://api.scrapeatlas.com/mcp takes the same key as a Bearer token, or an OAuth authorization-code flow with PKCE S256, dynamic client registration at /oauth/register and one scope, `scrapeatlas`; the MCP page calls OAuth-only connectors unsupported in the preview. Keys can't buy credits or manage the account, which need a dashboard session.", "pricing": "usage", "pricingNotes": "100 free credits at signup with no card, then one-time credit packs of 10,000 for $19 ($1.90 per 1,000), 50,000 for $89 ($1.78) and 200,000 for $249 ($1.25) on the home page (30 October 2026). One credit per successful request, partial results and valid empty collections included, 2 credits on LinkedIn post search, the six Quora search endpoints and Threads user search. Failed requests, account utilities and internal retries cost 0. Credits never expire, and there are no subscriptions. Eight Actors on the Apify Store cost $1.98 per 1,000 successful requests with no ScrapeAtlas account.", "priceSummary": "$1.90 / 1k req", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 on scrapeatlas.com, in the docs, llms.txt or the OpenAPI file (checked 2026-10-30). Credit packs are bought through a hosted Stripe Checkout from a dashboard session. The only route without a ScrapeAtlas account is the vendor's eight Actors on the Apify Store, paid through Apify.", "endpoints": [] }, "toolCount": 373, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-30" }, "docsUrl": "https://scrapeatlas.com/docs/", "llmsTxt": "https://scrapeatlas.com/docs/llms.txt", "openapi": "https://scrapeatlas.com/docs/openapi.json", "registryName": "io.github.OnlineDopamine/scrapeatlas", "capabilities": [ "web.extract", "social.analytics", "data.markets" ], "tags": [ "hosted", "official", "closed-source", "openapi", "llms-txt", "mcp", "cli", "free-tier", "no-card", "prepaid", "usage-priced", "new" ], "lastRelease": "2026-10-28", "graded": true, "anchor": { "graded": true, "score": 63, "grade": "B", "agentReady": false, "rank": 481, "ranked": true, "rankOf": 1226, "categoryRank": 12, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 76, "maintenance": 70, "payments": 55, "reliability": 42, "schema": 88, "security": 55, "transparency": 61 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 42, "points": 8.4, "reason": "Hosted reading, for the REST API with the MCP server described. No public status page was found. https://scrapeatlas.com/status/ answers 404 and neither the docs nor the footer links one (0). No readable incident history, so 5 by the rubric (5). Limits are published with numbers on the authentication page, 120 requests a minute and 4 concurrent requests per account, with per-worker deadlines and byte caps on the platform pages (15). A 429 is documented for account and upstream limits with a retry-after to respect, 503 busy for full capacity, and the responses page says to retry only on upstream_rate_limited, timeout or busy. No Retry-After header is declared in the OpenAPI file and the CLI does no automatic retries. Writes don't exist, the 12 POST operations are batch reads, so idempotency keys aren't needed (12 of 15). No SLA. The terms (29 September 2026) say no particular uptime, throughput or continued availability is promised unless a separate signed agreement says otherwise (0). The API is sold and listed as available on every platform page, with 15 of 386 operations saying preview in their descriptions; the MCP server is labelled Preview and scored under the API (10). 0+5+15+12+0+10 = 42.", "checked": "2026-10-30" }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 88, "points": 14.3, "reason": "An OpenAPI 3.1.0 file (version 0.1.0, 34 MB) is public at scrapeatlas.com/docs/openapi.json with 384 paths and 386 operations, a per-platform x-api-key security scheme on each, response schemas for 200 and every documented error, and 931 component schemas (25). llms.txt at scrapeatlas.com/docs/llms.txt lists all 373 endpoints with one-line descriptions and schema links, and endpoint pages carry a copy-as-Markdown action (10). 386 operations have a summary and 373 a description, median 39 words, saying what public page is read, what the response holds, how to page and what it costs. llms.txt says not to assume one normalised JSON shape. Guidance on when not to call an endpoint is thin, with 9 descriptions using only and 2 instead (14 of 20). 1,390 parameters, 304 with enums, most with minLength, maxLength or a pattern, 232 operations needing one required parameter and 143 none; the 12 POST bodies are typed (14 of 15). A response example on 373 operations and examples on 508 parameters, HTTP 400 to 504 mapped to one failure object with 33 codes, per-endpoint error tables and code samples in six languages; no Retry-After header declared (14 of 15). Paths are under /v1 and a dated public changelog started on 24 September 2026 with 58 updates, but nothing is marked deprecated in the file, breaking changes aren't flagged, and the 14 October GitHub entry says former paths keep working without saying for how long (11 of 15). 25+10+14+14+14+11 = 88.", "checked": "2026-10-30" }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 76, "points": 12.35, "reason": "API reading. Responses are bounded by limit on 93 operations, by per-body caps, by format on 19 and view on 14 operations, and by since and until on about 60; Instagram and Twitch have reduced basic-profile endpoints. No field selection was found. The MCP server loads 373 tool definitions with no documented subset, which on the MCP reading would score 5 (15 of 25). Cursor pagination on 130 operations, sort on 28, date windows, and coverage.order reported on every list since 2 October 2026 (20). One failure object with code and message, a requestId on every response, retryable codes named, and an HTTP status table (19 of 20). All data reads are GET, failed requests aren't charged, and the docs say which codes to retry; no idempotency key on the 12 POST batch reads and MCP annotations weren't read (14 of 20). Median one required parameter and defaults on limits, but no official SDK in any language. The npm CLI, the n8n node and six-language samples stand in (8 of 15). 15+20+19+14+8 = 76.", "checked": "2026-10-30" }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 55, "points": 9.63, "reason": "Customer keys with prefix sa_live_, several per account, each with an expiry date, revoked within 60 seconds and stored as hashes per the privacy policy, and keys can't start a checkout or create keys. No scopes or per-platform keys. The MCP server adds an authorization-code flow with PKCE S256, dynamic client registration, refresh-token rotation and revocation, but a single scope, scrapeatlas. No documented option to send a secret in a query string, and the MCP page says never to put the key in a prompt, argument or URL (22 of 30). The whole surface is read-only retrieval of public pages with no destructive action, and an OAuth grant covers retrieval plus the account's usage records only; nothing restricts a key to some platforms (16 of 20). Every response is third-party page content, and the only guidance found concerns keeping secrets out of tool arguments, nothing on treating returned text as untrusted (2 of 15). GET /v1/activity returns per-request metadata (endpoint, time, status, duration) newest first with filters, GET /v1/usage daily totals, responses carry x-credits-charged and x-credits-remaining, and the dashboard shows a credit history (13 of 15). No security.txt (404), no disclosure policy, bug bounty, SOC 2 or ISO 27001; the privacy policy describes access controls and incident notices and gives an abuse address (2 of 20). 22+16+2+13+2 = 55.", "checked": "2026-10-30" }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 55, "points": 6.88, "reason": "No x402, MPP or L402 on ScrapeAtlas's own endpoints. The vendor's eight Actors on the Apify Store, covering TikTok, Instagram, Meetup and Couchsurfing at $1.98 per 1,000 successful requests, can be paid through Apify, whose prepaid token is sold over x402, so partial credit for a third-party route on part of the catalogue (10 of 40). Per-unit prices are on the home page without a login, 1 credit per successful request and packs at $1.90, $1.78 and $1.25 per 1,000, with the 2-credit endpoints named (20). 100 free credits at signup, no card (20). A person signs up in a browser and creates a key; the Apify route reaches four platforms without a ScrapeAtlas account (5 of 20). 10+20+20+5 = 55.", "checked": "2026-10-30" }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 70, "points": 6.13, "reason": "The newest change is CLI 0.26.0 on 28 October 2026, after the StockX endpoints on 27 October (30). 15 dated release days between 21 September and 27 October, 58 updates (20). Closed service with a public changelog. Support in the dashboard is for customers with a credit purchase, the contact form takes buying questions and privacy requests, and no Discord, forum or issue tracker was found; the careers page lists a customer support role (7 of 15). io.github.OnlineDopamine/scrapeatlas is in the official MCP registry under a GitHub-verified personal namespace, at 1.0.0 since 5 October and describing about 40 platforms against 49 now. The CLI is current on npm and an n8n node exists, but there are no SDKs (10 of 15). The CLI package has no repository field, no public source and no visible CI; it needs Node 22 or newer (3 of 10). 30+20+7+10+3 = 70.", "checked": "2026-10-30" }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 61, "points": 5.34, "note": "editorial 54, provenance 67", "reason": "Closed service with clear terms dated 29 September 2026 naming the legal entity, governing law and liability cap; the CLI is MIT on npm with no source published (15 of 30). The privacy policy (19 October 2026) gives retention periods, 90 days for raw usage records, 30 days for inactive key metadata, 10 minutes to 30 days for OAuth artefacts, and says workers keep no archive of results, which the terms and the Public Data Notice repeat. Providers are named with their roles. No DPA is published; the terms say to arrange one before submitting such a workload (22 of 30). The terms promise reasonable notice of material changes when practicable, and the changelog records a Reddit retirement on 29 September and kept paths on 14 October, but there is no deprecation policy with periods and nothing in the OpenAPI file is marked deprecated (7 of 20). Supabase, Tinybird, PostHog, Stripe, Google, OpenAI and Affonso are named with purposes, but the only location statement is that the operator is in the UAE and infrastructure can process in other countries (10 of 20). 15+22+7+10 = 54.", "checked": "2026-10-30" } ], "assessment": { "date": "2026-10-30", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "API reading. Responses are bounded by limit on 93 operations, by per-body caps, by format on 19 and view on 14 operations, and by since and until on about 60; Instagram and Twitch have reduced basic-profile endpoints. No field selection was found. The MCP server loads 373 tool definitions with no documented subset, which on the MCP reading would score 5 (15 of 25). Cursor pagination on 130 operations, sort on 28, date windows, and coverage.order reported on every list since 2 October 2026 (20). One failure object with code and message, a requestId on every response, retryable codes named, and an HTTP status table (19 of 20). All data reads are GET, failed requests aren't charged, and the docs say which codes to retry; no idempotency key on the 12 POST batch reads and MCP annotations weren't read (14 of 20). Median one required parameter and defaults on limits, but no official SDK in any language. The npm CLI, the n8n node and six-language samples stand in (8 of 15). 15+20+19+14+8 = 76.", "maintenance": "The newest change is CLI 0.26.0 on 28 October 2026, after the StockX endpoints on 27 October (30). 15 dated release days between 21 September and 27 October, 58 updates (20). Closed service with a public changelog. Support in the dashboard is for customers with a credit purchase, the contact form takes buying questions and privacy requests, and no Discord, forum or issue tracker was found; the careers page lists a customer support role (7 of 15). io.github.OnlineDopamine/scrapeatlas is in the official MCP registry under a GitHub-verified personal namespace, at 1.0.0 since 5 October and describing about 40 platforms against 49 now. The CLI is current on npm and an n8n node exists, but there are no SDKs (10 of 15). The CLI package has no repository field, no public source and no visible CI; it needs Node 22 or newer (3 of 10). 30+20+7+10+3 = 70.", "payments": "No x402, MPP or L402 on ScrapeAtlas's own endpoints. The vendor's eight Actors on the Apify Store, covering TikTok, Instagram, Meetup and Couchsurfing at $1.98 per 1,000 successful requests, can be paid through Apify, whose prepaid token is sold over x402, so partial credit for a third-party route on part of the catalogue (10 of 40). Per-unit prices are on the home page without a login, 1 credit per successful request and packs at $1.90, $1.78 and $1.25 per 1,000, with the 2-credit endpoints named (20). 100 free credits at signup, no card (20). A person signs up in a browser and creates a key; the Apify route reaches four platforms without a ScrapeAtlas account (5 of 20). 10+20+20+5 = 55.", "reliability": "Hosted reading, for the REST API with the MCP server described. No public status page was found. https://scrapeatlas.com/status/ answers 404 and neither the docs nor the footer links one (0). No readable incident history, so 5 by the rubric (5). Limits are published with numbers on the authentication page, 120 requests a minute and 4 concurrent requests per account, with per-worker deadlines and byte caps on the platform pages (15). A 429 is documented for account and upstream limits with a retry-after to respect, 503 busy for full capacity, and the responses page says to retry only on upstream_rate_limited, timeout or busy. No Retry-After header is declared in the OpenAPI file and the CLI does no automatic retries. Writes don't exist, the 12 POST operations are batch reads, so idempotency keys aren't needed (12 of 15). No SLA. The terms (29 September 2026) say no particular uptime, throughput or continued availability is promised unless a separate signed agreement says otherwise (0). The API is sold and listed as available on every platform page, with 15 of 386 operations saying preview in their descriptions; the MCP server is labelled Preview and scored under the API (10). 0+5+15+12+0+10 = 42.", "schema": "An OpenAPI 3.1.0 file (version 0.1.0, 34 MB) is public at scrapeatlas.com/docs/openapi.json with 384 paths and 386 operations, a per-platform x-api-key security scheme on each, response schemas for 200 and every documented error, and 931 component schemas (25). llms.txt at scrapeatlas.com/docs/llms.txt lists all 373 endpoints with one-line descriptions and schema links, and endpoint pages carry a copy-as-Markdown action (10). 386 operations have a summary and 373 a description, median 39 words, saying what public page is read, what the response holds, how to page and what it costs. llms.txt says not to assume one normalised JSON shape. Guidance on when not to call an endpoint is thin, with 9 descriptions using only and 2 instead (14 of 20). 1,390 parameters, 304 with enums, most with minLength, maxLength or a pattern, 232 operations needing one required parameter and 143 none; the 12 POST bodies are typed (14 of 15). A response example on 373 operations and examples on 508 parameters, HTTP 400 to 504 mapped to one failure object with 33 codes, per-endpoint error tables and code samples in six languages; no Retry-After header declared (14 of 15). Paths are under /v1 and a dated public changelog started on 24 September 2026 with 58 updates, but nothing is marked deprecated in the file, breaking changes aren't flagged, and the 14 October GitHub entry says former paths keep working without saying for how long (11 of 15). 25+10+14+14+14+11 = 88.", "security": "Customer keys with prefix sa_live_, several per account, each with an expiry date, revoked within 60 seconds and stored as hashes per the privacy policy, and keys can't start a checkout or create keys. No scopes or per-platform keys. The MCP server adds an authorization-code flow with PKCE S256, dynamic client registration, refresh-token rotation and revocation, but a single scope, scrapeatlas. No documented option to send a secret in a query string, and the MCP page says never to put the key in a prompt, argument or URL (22 of 30). The whole surface is read-only retrieval of public pages with no destructive action, and an OAuth grant covers retrieval plus the account's usage records only; nothing restricts a key to some platforms (16 of 20). Every response is third-party page content, and the only guidance found concerns keeping secrets out of tool arguments, nothing on treating returned text as untrusted (2 of 15). GET /v1/activity returns per-request metadata (endpoint, time, status, duration) newest first with filters, GET /v1/usage daily totals, responses carry x-credits-charged and x-credits-remaining, and the dashboard shows a credit history (13 of 15). No security.txt (404), no disclosure policy, bug bounty, SOC 2 or ISO 27001; the privacy policy describes access controls and incident notices and gives an abuse address (2 of 20). 22+16+2+13+2 = 55.", "transparency": "Closed service with clear terms dated 29 September 2026 naming the legal entity, governing law and liability cap; the CLI is MIT on npm with no source published (15 of 30). The privacy policy (19 October 2026) gives retention periods, 90 days for raw usage records, 30 days for inactive key metadata, 10 minutes to 30 days for OAuth artefacts, and says workers keep no archive of results, which the terms and the Public Data Notice repeat. Providers are named with their roles. No DPA is published; the terms say to arrange one before submitting such a workload (22 of 30). The terms promise reasonable notice of material changes when practicable, and the changelog records a Reddit retirement on 29 September and kept paths on 14 October, but there is no deprecation policy with periods and nothing in the OpenAPI file is marked deprecated (7 of 20). Supabase, Tinybird, PostHog, Stripe, Google, OpenAI and Affonso are named with purposes, but the only location statement is that the operator is in the UAE and infrastructure can process in other countries (10 of 20). 15+22+7+10 = 54." }, "sources": [ { "what": "home page with pricing and FAQ", "url": "https://scrapeatlas.com/", "seen": "2026-10-30" }, { "what": "docs overview and platform index", "url": "https://scrapeatlas.com/docs/", "seen": "2026-10-30" }, { "what": "OpenAPI 3.1 file", "url": "https://scrapeatlas.com/docs/openapi.json", "seen": "2026-10-30" }, { "what": "llms.txt", "url": "https://scrapeatlas.com/docs/llms.txt", "seen": "2026-10-30" }, { "what": "authentication, limits and credit headers", "url": "https://scrapeatlas.com/docs/authentication/", "seen": "2026-10-30" }, { "what": "errors and responses", "url": "https://scrapeatlas.com/docs/responses/", "seen": "2026-10-30" }, { "what": "CLI guide", "url": "https://scrapeatlas.com/docs/cli/", "seen": "2026-10-30" }, { "what": "n8n guide", "url": "https://scrapeatlas.com/docs/n8n/", "seen": "2026-10-30" }, { "what": "MCP page", "url": "https://scrapeatlas.com/mcp/", "seen": "2026-10-30" }, { "what": "LinkedIn platform page (worker limits)", "url": "https://scrapeatlas.com/docs/platforms/linkedin/", "seen": "2026-10-30" }, { "what": "LinkedIn post search endpoint (2 credits)", "url": "https://scrapeatlas.com/docs/platforms/linkedin/search-posts/", "seen": "2026-10-30" }, { "what": "TikTok profile endpoint", "url": "https://scrapeatlas.com/docs/platforms/tiktok/profile/", "seen": "2026-10-30" }, { "what": "playground", "url": "https://scrapeatlas.com/playground/", "seen": "2026-10-30" }, { "what": "changelog", "url": "https://scrapeatlas.com/changelog/", "seen": "2026-10-30" }, { "what": "about page", "url": "https://scrapeatlas.com/about/", "seen": "2026-10-30" }, { "what": "contact page", "url": "https://scrapeatlas.com/contact/", "seen": "2026-10-30" }, { "what": "careers page", "url": "https://scrapeatlas.com/careers/", "seen": "2026-10-30" }, { "what": "affiliate page", "url": "https://scrapeatlas.com/affiliate/", "seen": "2026-10-30" }, { "what": "Terms of Service", "url": "https://scrapeatlas.com/terms/", "seen": "2026-10-30" }, { "what": "privacy policy", "url": "https://scrapeatlas.com/privacy/", "seen": "2026-10-30" }, { "what": "Public Data Notice", "url": "https://scrapeatlas.com/public-data-notice/", "seen": "2026-10-30" }, { "what": "sitemap", "url": "https://scrapeatlas.com/sitemap.xml", "seen": "2026-10-30" }, { "what": "OAuth protected resource metadata", "url": "https://api.scrapeatlas.com/.well-known/oauth-protected-resource/mcp", "seen": "2026-10-30" }, { "what": "OAuth authorization server metadata", "url": "https://api.scrapeatlas.com/.well-known/oauth-authorization-server", "seen": "2026-10-30" }, { "what": "npm, @scrapeatlas/cli", "url": "https://registry.npmjs.org/@scrapeatlas%2Fcli", "seen": "2026-10-30" }, { "what": "npm search, n8n node", "url": "https://registry.npmjs.org/-/v1/search?text=scrapeatlas", "seen": "2026-10-30" }, { "what": "official MCP registry", "url": "https://registry.modelcontextprotocol.io/v0/servers?search=scrapeatlas", "seen": "2026-10-30" }, { "what": "Apify Store profile", "url": "https://apify.com/scrape-atlas", "seen": "2026-10-30" }, { "what": "RDAP for scrapeatlas.com", "url": "https://rdap.org/domain/scrapeatlas.com", "seen": "2026-10-30" }, { "what": "Wayback Machine capture of 11 September 2026", "url": "https://web.archive.org/web/20260911040018/https://scrapeatlas.com/", "seen": "2026-10-30" } ], "openQuestions": [ "unchecked: MCP tool annotations (readOnlyHint and the rest), the tool list's size in tokens and whether tools/list is paged. No MCP session was opened, so the 373-tool count is the MCP page's figure, which matches the 371 platform and 2 account operations in the OpenAPI file.", "unchecked: whether the Apify Store Actors are Pay Per Event Actors payable by direct x402, and whether Apify's prepaid token covers them. The payments score gives 10 of 40 for that third-party route on the vendor's own Apify profile, which says no ScrapeAtlas account or key is needed.", "unchecked: the OAuth consent flow in practice. The MCP page says OAuth-only connectors are unsupported in the preview, while llms.txt and the privacy policy describe browser OAuth consent for ChatGPT and other clients, and the authorization server metadata publishes registration, authorization, token and revocation endpoints with PKCE S256.", "The 200,000-credit pack at $249 is on the home page, but the OpenAPI checkout operation and the affiliate page name only the 10,000 and 50,000 packs. Recorded, not deducted.", "No Retry-After header is declared in the OpenAPI file; the docs say to respect retry-after and the CLI envelope has a retryAfter field. Whether the header is sent wasn't observed.", "The Apify profile reports 15 total users and 84.9 per cent of runs succeeded, read on 30 October 2026; no success rate for the API itself is published.", "The vendor's 373 endpoint tools and 50 catalogued platforms on the MCP page count the two account operations and the account-usage group; the home page says 49 platforms and 371 endpoints, and both agree with the OpenAPI file. The registry entry's 'about 40 platforms' is stale.", "firstReleased is set to 21 September 2026, the changelog's first entry and the day CLI 0.10.0 shipped every endpoint as a command and an MCP tool. The domain was registered on 10 September and the 11 September capture says self-service access wasn't open, so a signup date between 11 and 21 September is possible but not shown.", "The product is about five weeks old, so the maintenance and transparency scores rest on a short record by the checklist, not on guesswork about where it goes.", "The MCP registry namespace and the npm packages are published from a personal GitHub account rather than a company organisation. Recorded in provenance notes; no deduction.", "ScrapeAtlas doesn't do LocalGhost's or letme's job. It returns platform data for an agent to use; it neither hides an agent's identity nor chooses tools for a task." ] }, "negative": 0, "verdict": "An OpenAPI 3.1 file with 386 operations, typed parameters and a uniform failure object, published limits of 120 requests a minute and 4 concurrent, and 1 credit per successful request with failed calls free. No status page, security.txt or SDKs, the MCP server is a preview with 373 tools, and the product is five weeks old.", "bestFor": "Agents that need structured public data from a named social, video, forum, marketplace or prediction-market platform, such as a creator's profile and recent posts, a thread's comments, a product's reviews or a market's order book, paid per successful request without a subscription.", "strengths": [ "A public OpenAPI 3.1 file with 386 operations, enums or patterns on most parameters, a response example on 373 operations and error responses on every data endpoint", "One response envelope on every endpoint, with `status`, `coverage.warnings`, `requestId` and `accounting`, and 33 failure codes the docs sort into retryable and not", "Limits published as 120 requests a minute and 4 concurrent per account, with a `retry-after` on 429 and `x-credits-charged` and `x-credits-remaining` headers", "One credit per successful request, failed requests and internal retries free, 100 credits at signup without a card, and packs from $1.25 to $1.90 per 1,000", "Account usage and activity endpoints at 0 credits, with per-request metadata filterable by platform, operation and status" ], "weaknesses": [ "No status page or incident history was found, and the terms promise no uptime, throughput or continued availability of an endpoint", "API keys have no scopes, and the MCP OAuth flow has a single scope, `scrapeatlas`", "No security.txt, disclosure policy, bug bounty or certification was found; keys are stored hashed per the privacy policy", "The MCP server is a preview that loads 373 tool definitions with no documented subset, and the registry entry under a personal GitHub namespace is at 1.0.0 from 5 October", "No official SDKs; the npm CLI has no public source repository, and support in the dashboard is for customers with a credit purchase", "Every response is third-party page content and the docs carry no guidance on treating it as untrusted" ], "agentNotes": [ "Send the key as `x-api-key` on https://api.scrapeatlas.com and check `status` on every HTTP 200; `partial` is usable data with `coverage.warnings`, `failed` and `challenged` carry `failure.code`.", "Retry only on `upstream_rate_limited`, `timeout` and `busy`, after the `retry-after` on a 429. Stay under 120 requests a minute and 4 concurrent per account.", "Pass the returned `cursor` back unchanged for the next page, and use `since` and `until` (ISO 8601 or Unix seconds) where listed; each page costs another credit.", "Each platform has its own response schema, so read the endpoint's response fields before mapping; unknown values are `null`, never 0.", "For MCP, connect to https://api.scrapeatlas.com/mcp over Streamable HTTP with `Authorization: Bearer` and expect 373 tools; the two account tools and failed calls cost 0 credits." ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 63 } ], "editorialScores": { "ergonomics": 76, "maintenance": 70, "payments": 55, "reliability": 42, "schema": 88, "security": 55, "transparency": 54 }, "provenanceScore": 67, "checked": { "categories": { "ergonomics": "2026-10-30", "maintenance": "2026-10-30", "payments": "2026-10-30", "reliability": "2026-10-30", "schema": "2026-10-30", "security": "2026-10-30", "transparency": "2026-10-30" }, "last": "2026-10-30", "oldest": "2026-10-30", "stale": false, "staleAfterDays": 90 }, "scoreHistory": [ { "date": "2026-10-30", "grade": "B", "kind": "listed", "method": "0.7", "score": 63 } ] }, "connect": { "install": "npm install -g @scrapeatlas/cli", "http": "curl \"https://api.scrapeatlas.com/v1/bluesky/profile?handle=bsky.app\" -H \"x-api-key: $SCRAPEATLAS_API_KEY\"" }, "letme": { "capability": "https://letme.dev/web.extract", "tool": "https://letme.dev/scrapeatlas" }, "notable": [ "The OpenAPI 3.1 file has 384 paths and 386 operations, 374 GET and 12 POST. 371 read platform data across 49 platforms, 2 report account usage and activity, 10 describe the MCP OAuth flow and 3 the dashboard. Each platform has its own `x-api-key` security scheme (https://scrapeatlas.com/docs/openapi.json)", "Every response carries `success`, `status` (success, partial, failed or challenged), `requestId`, `accounting` (upstream requests, bytes, milliseconds) and `coverage` with warnings, and failures share one `failure.code` vocabulary of 33 codes (https://scrapeatlas.com/docs/responses/)", "Limits are 120 requests a minute and 4 concurrent requests per account, with 429 and a `retry-after` to respect, and 503 `busy` when capacity or a platform is unavailable. Responses carry `x-credits-charged` and `x-credits-remaining` (https://scrapeatlas.com/docs/authentication/)", "`GET /v1/usage` and `GET /v1/activity` return daily totals and per-request metadata (endpoint, time, status) for the account at 0 credits, filterable by window, platform, operation and status (https://scrapeatlas.com/docs/openapi.json)", "The hosted MCP server at api.scrapeatlas.com/mcp is labelled Preview and lists 373 tools, one per endpoint plus the two account tools, each with inputSchema and outputSchema; no toolsets or subsets are documented (https://scrapeatlas.com/mcp/)", "The changelog runs from 21 September to 27 October 2026, 58 updates on 15 release days, and the domain was registered on 10 September 2026, so the product is about five weeks old (https://scrapeatlas.com/changelog/)", "No status page was found (/status answers 404 and none is linked), no security.txt, and the terms promise no uptime, throughput or continued availability of an endpoint (https://scrapeatlas.com/terms/)", "The privacy policy (19 October 2026) keeps raw usage records at most 90 days and no archive of retrieved content, and names Supabase, Tinybird, PostHog, Stripe, Google, OpenAI and Affonso as providers (https://scrapeatlas.com/privacy/)" ], "area": "web-data", "details": [ { "label": "Surface listed", "value": "The REST API at https://api.scrapeatlas.com, the @scrapeatlas/cli command-line tool and the hosted MCP server at https://api.scrapeatlas.com/mcp, read from the docs, the OpenAPI file, llms.txt, the MCP page, the changelog, the legal pages, npm, the MCP registry and the Apify Store on 30 October 2026. No account was created, no API call or MCP session was made, and the OAuth metadata on api.scrapeatlas.com was the only thing read from that host" }, { "label": "API", "value": "OpenAPI 3.1.0, version 0.1.0, 384 paths and 386 operations (374 GET, 12 POST). 371 platform data operations across 49 platforms, from 18 on TikTok and 17 on YouTube to 1 each on Kick, Komi, Linkme, Lnk.Bio and Pillar; 2 account operations; 10 MCP OAuth and 3 dashboard operations. The file is 34 MB" }, { "label": "Response envelope", "value": "`success`, `status` (success, partial, failed, challenged), `requestId`, `accounting` {upstreamRequests, responseBytes, durationMs}, `sourceUrl`, `fetchedAt` and `coverage` {source, complete, warnings, order, window}. Unknown metrics are `null`" }, { "label": "Credentials", "value": "Customer key with prefix `sa_live_` in `x-api-key` or `Authorization: Bearer`. Several keys per account on one balance, expiry dates, revocation within 60 seconds, stored as hashes. No scopes. Keys can't start a checkout or create keys. MCP also takes OAuth authorization code with PKCE S256, dynamic client registration, refresh-token rotation, revocation, scope `scrapeatlas`; access tokens last one hour and grants 30 days per the privacy policy" }, { "label": "Rate limits", "value": "120 requests a minute and 4 concurrent requests per account. 429 with `retry-after` when the account or a source platform rate-limits; 503 `busy` when retrieval slots are full or a platform is unavailable. Per-worker caps such as a 60-second deadline and 24 MiB of decoded responses per operation on LinkedIn, 90 seconds on TikTok" }, { "label": "Pagination", "value": "`cursor` on 130 operations, `limit` on 93, `since` on 60 and `until` on 57, `sort` on 28, `format` on 19 and `view` on 14. Platform-native tokens elsewhere (`pageToken`, `next_max_id`, `pagination_token`). Lists report `coverage.order` since 2 October 2026" }, { "label": "Errors", "value": "HTTP 400, 401, 402, 403, 404, 408, 413, 422, 429, 502, 503 and 504 mapped to one `failure` {code, message} object with 33 codes, 13 of them on every worker. The docs say to retry only on `upstream_rate_limited`, `timeout` and `busy`. No Retry-After header is declared in the OpenAPI file" }, { "label": "MCP", "value": "Streamable HTTP at https://api.scrapeatlas.com/mcp, labelled Preview. 373 tools generated from the endpoint catalogue, each with inputSchema and outputSchema; results carry httpStatus, the endpoint body and credit metadata in structuredContent and text. Listed in the official MCP registry as io.github.OnlineDopamine/scrapeatlas 1.0.0 (5 October 2026). Tool annotations not checked" }, { "label": "CLI and integrations", "value": "@scrapeatlas/cli 0.26.0 on npm (28 October 2026, MIT, Node 22 or newer), 18 versions since 0.1.0 on 12 September. `scrapeatlas \u003cplatform\u003e \u003caction\u003e` or `scrapeatlas call \u003coperationId\u003e`, a bundled endpoint catalogue with `list --json`, no automatic retries or pagination, keys stored in plaintext in the config file. n8n-nodes-scrapeatlas 0.1.0 (30 September). Eight Actors on the Apify Store (TikTok, Instagram, Meetup, Couchsurfing). No SDKs; code samples in six languages" }, { "label": "Credits", "value": "100 free at signup, no card. Packs of 10,000 for $19, 50,000 for $89 and 200,000 for $249, one-time, never expiring. 1 credit per successful request including partial results and valid empty collections; 2 on `/v1/linkedin/search/posts`, the six Quora search endpoints and `/v1/threads/search/users`. Failed requests, account utilities and internal retries cost 0. The OpenAPI checkout operation and the affiliate page name only the 10,000 and 50,000 packs" }, { "label": "SLA", "value": "None. The terms (29 September 2026) say ScrapeAtlas does not promise a particular uptime, throughput, response time, data accuracy or continued availability of an endpoint unless a separate signed agreement says otherwise" }, { "label": "Data handling", "value": "Retrieval workers keep no cache or archive of results. Raw usage, activity and proxy-performance records expire within 90 days, inactive key metadata 30 days after expiry or revocation. Usage records exclude search text, handles, URLs and response content. Providers named are Supabase, Tinybird, PostHog, Stripe, Google (fonts, analytics), OpenAI (ad measurement) and Affonso (referrals). The operator is in the UAE and infrastructure can process in other countries; no DPA is published" }, { "label": "Status", "value": "No status page found. https://scrapeatlas.com/status/ answers 404 and the docs and footer link none" } ], "unitPrices": [ { "item": "10,000-credit pack", "unit": "1k-requests", "usd": 1.9, "note": "$19 one-time, 1 credit per successful request, home page checked 30 October 2026" }, { "item": "50,000-credit pack", "unit": "1k-requests", "usd": 1.78, "note": "$89 one-time" }, { "item": "200,000-credit pack", "unit": "1k-requests", "usd": 1.25, "note": "$249 one-time; not named in the OpenAPI checkout operation or on the affiliate page" }, { "item": "Apify Store Actors", "unit": "1k-requests", "usd": 1.98, "note": "successful requests, paid through Apify, no ScrapeAtlas account; TikTok, Instagram, Meetup and Couchsurfing only" } ], "provenance": { "legalEntity": "OD. Media \u0026 Technology LLC", "domain": "scrapeatlas.com", "domainRegistered": "2026-09-10", "endpointOnVendorDomain": true, "terms": "https://scrapeatlas.com/terms/", "privacy": "https://scrapeatlas.com/privacy/", "statusPage": "", "changelog": "https://scrapeatlas.com/changelog/", "securityTxt": "none", "checked": "2026-10-30", "notes": [ "The Terms of Service (last updated 29 September 2026), the privacy policy (19 October 2026) and the Public Data Notice (29 September 2026) name OD. Media \u0026 Technology LLC, License No. 2431901.01, Sharjah Media City, Sharjah, United Arab Emirates, governed by UAE and Sharjah law. The contact address on all three is on a different domain, fddigital.net.", "RDAP for scrapeatlas.com gives a registration date of 2026-09-10 through NameCheap. The earliest Wayback Machine capture, 11 September 2026, lists ten platforms as live private services and says public self-service access is not open yet.", "firstReleased is the changelog's first entry, 21 September 2026, which also records CLI 0.10.0 with every endpoint as a CLI command and an MCP tool. The npm CLI's 0.1.0 is dated 12 September 2026, before self-service access opened. The changelog itself was published on 24 September.", "https://scrapeatlas.com/.well-known/security.txt and https://scrapeatlas.com/status/ answer 404. api.scrapeatlas.com answers robots.txt with a JSON error per the 30 October listing check, so only its two OAuth metadata documents were read.", "The MCP registry entry io.github.OnlineDopamine/scrapeatlas sits under a personal GitHub namespace, the account that also publishes the npm packages, not under a company organisation." ], "score": 67, "checks": [ { "check": "Legal entity named", "value": "OD. Media \u0026 Technology LLC", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "scrapeatlas.com, registered 2026-09-10 (under a year)", "points": 0, "max": 15, "state": "no" }, { "check": "Endpoint on the vendor's domain", "value": "api.scrapeatlas.com", "points": 15, "max": 15, "state": "ok" }, { "check": "Terms of service", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "Privacy policy", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "Status page", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "People named", "value": "2 named with their role, none with a public profile", "points": 7, "max": 10, "state": "part" }, { "check": "Support route", "value": "a support address, help pages, a community", "points": 5, "max": 5, "state": "ok" } ] }, "humans": { "slug": "scrapeatlas", "checked": "2026-10-30", "company": "OD. Media \u0026 Technology LLC (ScrapeAtlas)", "people": [ { "name": "Viktor", "role": "Co-founder", "founder": true, "bio": "Viktor is one of the two founders of ScrapeAtlas named on its about page, which says the pair spent the previous two years building GenViral and its social media scraping systems. The careers page asks applicants to write to him, and the home page asks customers to send testimonials to him.", "bioSources": [ "https://scrapeatlas.com/about/", "https://scrapeatlas.com/careers/" ], "page": "/people/viktor/" }, { "name": "Fekri", "role": "Co-founder", "founder": true, "bio": "Fekri is one of the two founders of ScrapeAtlas named on its about page, which signs off from Ghent and Ciudad de México and says the pair built GenViral for the previous two years.", "bioSources": [ "https://scrapeatlas.com/about/" ], "page": "/people/fekri/" } ], "peopleNote": "The about page names the founders as Viktor and Fekri, first names only, and no page on scrapeatlas.com gives a surname, so none is recorded. The careers page gives a scrapeatlas.com mailbox for Viktor for job applications, not listed here. No LinkedIn or X account for either person is linked from the site. The npm packages (@scrapeatlas/cli, n8n-nodes-scrapeatlas) and the official MCP registry entry are published from a personal GitHub account whose profile name is Viktor and which holds a ScrapeAtlas example repository, but the site doesn't link it, so it isn't attached to a person. genviral.io's home page names nobody. No company LinkedIn, X or GitHub organisation was found; the site links a YouTube channel. Investors were looked for on scrapeatlas.com (about, careers, affiliate, contact, changelog, terms, privacy, the sitemap, which has no blog or press section), on genviral.io's home page, and in web searches for ScrapeAtlas funding and for the legal entity, which returned only directory pages and nothing on a round. The roster of two founders comes from the company's own page and may be complete; the careers page lists three open roles.", "companySocial": {}, "support": { "emails": [ "admin@fddigital.net" ], "urls": [ "https://scrapeatlas.com/contact/", "https://scrapeatlas.com/docs/" ], "community": [ { "label": "YouTube channel", "url": "https://www.youtube.com/@ScrapeAtlas", "kind": "link" } ], "contactEmails": [ "admin@fddigital.net" ], "contactUrls": [ "https://scrapeatlas.com/contact/" ] }, "sources": [ "https://scrapeatlas.com/about/", "https://scrapeatlas.com/careers/", "https://scrapeatlas.com/contact/", "https://scrapeatlas.com/terms/", "https://scrapeatlas.com/privacy/", "https://scrapeatlas.com/affiliate/", "https://scrapeatlas.com/sitemap.xml", "https://scrapeatlas.com/", "https://www.genviral.io/", "https://registry.npmjs.org/@scrapeatlas%2Fcli", "https://registry.modelcontextprotocol.io/v0/servers?search=scrapeatlas" ], "ownership": { "status": "private", "checked": "2026-10-30", "sources": [ "https://scrapeatlas.com/terms/", "https://scrapeatlas.com/about/" ] } }, "pageJsonUrl": "https://www.anchorterminal.com/tools/scrapeatlas.json", "live": { "slug": "scrapeatlas", "probe": { "target": "https://api.scrapeatlas.com", "method": "get", "lastAt": "2026-10-30T13:20:35.331161564Z", "lastOk": true, "lastStatus": 404, "lastMs": 159, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 162, "p95ms24h": 243, "samples24h": 17, "samples30d": 17, "days": [ { "date": "2026-10-30", "probes": 17, "ok": 17 } ] }, "updatedAt": "2026-10-30T13:20:35.331161564Z" } } }