{ "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-02", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "tool": { "slug": "surgepix", "name": "SurgePix API", "vendor": "SurgePix", "vendorUrl": "https://surgepix.ai", "kind": "http-api", "category": "image-generation", "summary": "SurgePix is a web design workspace that generates and edits images, posters and slide decks. A REST API with API keys, async tasks and file upload is called through MIT-licensed agent skills for coding agents.", "url": "https://www.anchorterminal.com/tools/surgepix", "markdownUrl": "https://www.anchorterminal.com/tools/surgepix.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/surgepix.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/surgepix.json", "dns": "surgepix.grade.anchorterminal.com", "repo": "https://github.com/SurgePix/agent-skills", "license": "Proprietary hosted service under the Surgepix User Agreement, which names no company and restricts commercial use without SurgePix's permission. The agent skills repository is MIT", "transports": [ "http" ], "remoteUrl": "https://api.surgepix.ai/api", "packages": [], "auth": "api-key", "authNotes": "An API key starting `sk-`, created and managed in the account's settings on surgepix.ai, sent as the raw value of the `authorization` header with no `Bearer` prefix. The docs say a leaked key can be revoked and reset. No scopes, read-only keys or spend caps were found. The skills read the key from `SURGEPIX_API_KEY` and also need `SURGEPIX_BASE_URL` set to https://api.surgepix.ai/api (https://surgepix.ai/blog/developer-guides/api-keys-reference, https://surgepix.ai/blog/developer-guides/install-skills).", "pricing": "freemium", "pricingNotes": "Free plan with 25 credits a day that don't roll over. Basic is $9.90 a month (2,000 credits) or $95.04 a year, and Pro $24.90 a month (11,500 credits) or $239.04 a year, with introductory prices of $0.99 and $4.99 a month for three months. Credits are spent on input and output tokens, and a failed generation charges the input only. No per-call API price is published, and the changelog says skills calling SurgePix's own models don't use credits (9 July 2026) and that some models are billed per generation (9 September 2026) (https://surgepix.ai/blog/introduction/credit-subscription/plans-pricing, https://surgepix.ai/blog/introduction/credit-subscription/how-credits-work, https://surgepix.ai/blog/whats-new/updates).", "priceSummary": "$9.90 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the API reference, the skills, the pricing pages or the terms. Access is by an API key from a browser account, and the privacy policy names Alipay and WeChat Pay for payments (checked 2026-11-02).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-02" }, "docsUrl": "https://surgepix.ai/blog/developer-guides/api-keys-reference", "capabilities": [ "image.generate", "image.edit" ], "tags": [ "hosted", "closed-source", "agent-skills", "async-jobs", "freemium", "free-tier", "no-status-page", "new" ], "lastRelease": "2026-10-23", "graded": true, "anchor": { "graded": true, "score": 36, "grade": "F", "agentReady": false, "rank": 1173, "ranked": true, "rankOf": 1266, "categoryRank": 14, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 53, "maintenance": 66, "payments": 20, "reliability": 15, "schema": 40, "security": 41, "transparency": 28 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 15, "points": 3, "reason": "Read with the hosted lines. No status page was found on surgepix.ai or in the docs, and status.surgepix.ai doesn't resolve (0). With no history to read, the incident line takes the floor (5). No rate limits with numbers are documented. The terms say \"non-human continuous or frequent query operations\" lead to automatic account suspension, with no threshold given (0). No 429 or backoff guidance. The skill scripts poll every 2 seconds for up to 5 to 15 minutes, but that is client code, not a documented policy (0). No SLA, and the terms disclaim uninterrupted service (0). The API isn't labelled beta or preview, and API keys have been self-serve since 2 June 2026 per the changelog (10). 0+5+0+0+0+10 = 15.", "checked": "2026-11-02" }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 40, "points": 6.5, "reason": "No OpenAPI or other machine-readable contract was found (0). surgepix.ai/llms.txt returns 404. The docs are HTML pages, but the 15 SKILL.md files in the MIT repository are Markdown written for agents, so half (5). The API reference states the purpose of each of its five operations and the async and session model. The SKILL.md files add trigger phrases and explicit do-not-use routing between skills, but 11 of the task endpoints the skills call appear only in their scripts, with no reference (10). Parameter tables give type and required for the documented operations, with no enums or limits, and the undocumented endpoints have no schema at all (7). JSON examples for every documented operation and an error table with 401, 404 and `error.file.sensitive_content` (10). A dated public changelog from 11 March 2026, but no version in the API path and no API-specific change notes (8). 0+5+10+7+10+8 = 40.", "checked": "2026-11-02" }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 53, "points": 8.61, "reason": "Every task returns one download URL, or one ZIP for an image set, and status responses are a few fields, so little enters context (18). Nothing to paginate. `noWait` chooses sync or async, and the skills pass size, aspect ratio, count and language, but none of these are in the public reference (10). Errors come back as a JSON `code` and `msg`, with 401 and 404 documented and an NSFW error on upload, but a failure can arrive as HTTP 200 with a non-zero `code` and failed task states carry no documented reason (12). Upload deduplicates by MD5 and returns the existing URL. Tasks have no idempotency key, and a retried task is a new task that spends credits again (5). Few required parameters (`fileUrl` for background removal). No official SDK, only the Node scripts inside the skills (8). 18+10+12+5+8 = 53.", "checked": "2026-11-02" }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 41, "points": 7.18, "reason": "Plain API keys created in the account settings, which the docs say can be revoked and reset. The key goes in the `authorization` header, never in a URL. No scopes found (20). No read-only key or spend cap. The plan's credit allowance bounds spend. Every uploaded file becomes a publicly accessible URL on Tencent Cloud storage, which counts against least privilege (3). The API returns image and file URLs, not untrusted text (10). The billing page's credit statement lists each request with its model and token counts, and sessions group calls in the web app, per the docs (8). No security.txt, disclosure policy, bug bounty or certification was found (0). 20+3+10+8+0 = 41.", "checked": "2026-11-02" }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 20, "points": 2.5, "reason": "No x402, MPP or L402 (0). Plan prices and monthly credits are public, but credits are spent per token with no per-call price for any API task, so plan-only pricing (10). A free plan with 25 credits a day. The pages don't say whether a card is needed or whether a free account can create API keys, so half, a judgement call (10). A person signs up in a browser and creates the key in settings (0). 0+10+10+0 = 20.", "checked": "2026-11-02" }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 66, "points": 5.78, "reason": "The last dated change is GPT-Image-2.5 on 23 October 2026, 10 days before the check (30). Changelog entries on 15, 22 and 23 October, 16, 9 and 2 September 2026, more than three in 90 days (20). For a closed service, a dated changelog, a Discord server and a contact email. We didn't open Discord or the GitHub issues, so answering isn't confirmed (8). No official SDK. The skills are maintained client scripts with tags from v1.0.0 (4 June 2026) to v1.5.0 (2 September 2026), a judgement call (5). The repository's CI checks SKILL.md front matter only, with no tests, and the skills aren't published as a package (3). 30+20+8+5+3 = 66.", "checked": "2026-11-02" }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 28, "points": 2.45, "note": "editorial 14, provenance 41", "reason": "The editorial half. A closed service whose terms name no company or address. They restrict any commercial use of what the service produces without SurgePix's permission, and contain clauses from an unrelated product (a \"big data\" query platform and \"non-resume content\"). The skills are MIT. Unclear terms, with a little credit for the open skills (5). The privacy policy is dated both 10 June 2026 and 1 July 2022, describes WeChat and phone registration and \"domestic servers\", and gives no retention periods. The API reference says uploads go to Tencent Cloud storage in Seoul as public URLs. No DPA. The statements don't agree (5). No deprecation policy or notices, and the terms let changes take effect on publication without notice (0). Tencent Cloud Object Storage in ap-seoul is named in the API reference, and Alipay and WeChat Pay in the privacy policy. No subprocessor list or stated data location (4). 5+5+0+4 = 14.", "checked": "2026-11-02" } ], "assessment": { "date": "2026-11-02", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "Every task returns one download URL, or one ZIP for an image set, and status responses are a few fields, so little enters context (18). Nothing to paginate. `noWait` chooses sync or async, and the skills pass size, aspect ratio, count and language, but none of these are in the public reference (10). Errors come back as a JSON `code` and `msg`, with 401 and 404 documented and an NSFW error on upload, but a failure can arrive as HTTP 200 with a non-zero `code` and failed task states carry no documented reason (12). Upload deduplicates by MD5 and returns the existing URL. Tasks have no idempotency key, and a retried task is a new task that spends credits again (5). Few required parameters (`fileUrl` for background removal). No official SDK, only the Node scripts inside the skills (8). 18+10+12+5+8 = 53.", "maintenance": "The last dated change is GPT-Image-2.5 on 23 October 2026, 10 days before the check (30). Changelog entries on 15, 22 and 23 October, 16, 9 and 2 September 2026, more than three in 90 days (20). For a closed service, a dated changelog, a Discord server and a contact email. We didn't open Discord or the GitHub issues, so answering isn't confirmed (8). No official SDK. The skills are maintained client scripts with tags from v1.0.0 (4 June 2026) to v1.5.0 (2 September 2026), a judgement call (5). The repository's CI checks SKILL.md front matter only, with no tests, and the skills aren't published as a package (3). 30+20+8+5+3 = 66.", "payments": "No x402, MPP or L402 (0). Plan prices and monthly credits are public, but credits are spent per token with no per-call price for any API task, so plan-only pricing (10). A free plan with 25 credits a day. The pages don't say whether a card is needed or whether a free account can create API keys, so half, a judgement call (10). A person signs up in a browser and creates the key in settings (0). 0+10+10+0 = 20.", "reliability": "Read with the hosted lines. No status page was found on surgepix.ai or in the docs, and status.surgepix.ai doesn't resolve (0). With no history to read, the incident line takes the floor (5). No rate limits with numbers are documented. The terms say \"non-human continuous or frequent query operations\" lead to automatic account suspension, with no threshold given (0). No 429 or backoff guidance. The skill scripts poll every 2 seconds for up to 5 to 15 minutes, but that is client code, not a documented policy (0). No SLA, and the terms disclaim uninterrupted service (0). The API isn't labelled beta or preview, and API keys have been self-serve since 2 June 2026 per the changelog (10). 0+5+0+0+0+10 = 15.", "schema": "No OpenAPI or other machine-readable contract was found (0). surgepix.ai/llms.txt returns 404. The docs are HTML pages, but the 15 SKILL.md files in the MIT repository are Markdown written for agents, so half (5). The API reference states the purpose of each of its five operations and the async and session model. The SKILL.md files add trigger phrases and explicit do-not-use routing between skills, but 11 of the task endpoints the skills call appear only in their scripts, with no reference (10). Parameter tables give type and required for the documented operations, with no enums or limits, and the undocumented endpoints have no schema at all (7). JSON examples for every documented operation and an error table with 401, 404 and `error.file.sensitive_content` (10). A dated public changelog from 11 March 2026, but no version in the API path and no API-specific change notes (8). 0+5+10+7+10+8 = 40.", "security": "Plain API keys created in the account settings, which the docs say can be revoked and reset. The key goes in the `authorization` header, never in a URL. No scopes found (20). No read-only key or spend cap. The plan's credit allowance bounds spend. Every uploaded file becomes a publicly accessible URL on Tencent Cloud storage, which counts against least privilege (3). The API returns image and file URLs, not untrusted text (10). The billing page's credit statement lists each request with its model and token counts, and sessions group calls in the web app, per the docs (8). No security.txt, disclosure policy, bug bounty or certification was found (0). 20+3+10+8+0 = 41.", "transparency": "The editorial half. A closed service whose terms name no company or address. They restrict any commercial use of what the service produces without SurgePix's permission, and contain clauses from an unrelated product (a \"big data\" query platform and \"non-resume content\"). The skills are MIT. Unclear terms, with a little credit for the open skills (5). The privacy policy is dated both 10 June 2026 and 1 July 2022, describes WeChat and phone registration and \"domestic servers\", and gives no retention periods. The API reference says uploads go to Tencent Cloud storage in Seoul as public URLs. No DPA. The statements don't agree (5). No deprecation policy or notices, and the terms let changes take effect on publication without notice (0). Tencent Cloud Object Storage in ap-seoul is named in the API reference, and Alipay and WeChat Pay in the privacy policy. No subprocessor list or stated data location (4). 5+5+0+4 = 14." }, "sources": [ { "what": "API reference", "url": "https://surgepix.ai/blog/developer-guides/api-keys-reference", "seen": "2026-11-02" }, { "what": "install skills guide", "url": "https://surgepix.ai/blog/developer-guides/install-skills", "seen": "2026-11-02" }, { "what": "use skills guide", "url": "https://surgepix.ai/blog/developer-guides/call-skills", "seen": "2026-11-02" }, { "what": "plans and pricing", "url": "https://surgepix.ai/blog/introduction/credit-subscription/plans-pricing", "seen": "2026-11-02" }, { "what": "how credits work", "url": "https://surgepix.ai/blog/introduction/credit-subscription/how-credits-work", "seen": "2026-11-02" }, { "what": "changelog", "url": "https://surgepix.ai/blog/whats-new/updates", "seen": "2026-11-02" }, { "what": "terms of service", "url": "https://surgepix.ai/blog/legal/terms-of-service", "seen": "2026-11-02" }, { "what": "privacy policy", "url": "https://surgepix.ai/blog/legal/privacy-policy", "seen": "2026-11-02" }, { "what": "agent skills repository, main and dev branches (bare clone, read as text)", "url": "https://github.com/SurgePix/agent-skills", "seen": "2026-11-02" }, { "what": "skills library page", "url": "https://surgepix.ai/skills", "seen": "2026-11-02" }, { "what": "Tate-A-Tate terms naming its provider", "url": "https://www.tate-a-tate.com/docs/terms-and-policies/", "seen": "2026-11-02" }, { "what": "RDAP for surgepix.ai", "url": "https://rdap.org/domain/surgepix.ai", "seen": "2026-11-02" }, { "what": "MCP registry search", "url": "https://registry.modelcontextprotocol.io/v0/servers?search=surgepix", "seen": "2026-11-02" } ], "openQuestions": [ "Who operates SurgePix. The terms and privacy policy name no company. The contact email is at tate-a-tate.com, whose terms name Torsi Information Technology Co., Ltd., and the domain's registrant is in Beijing, but no SurgePix page names Torsi, so legalEntity is left empty.", "The terms restrict any commercial use of what the service produces without permission, while paid plans are sold for marketing work. No separate licence for generated outputs was found. Whether that is a misleading claim or generic terms copied from another product is for the founder; not deducted.", "Whether a free account can create API keys, and whether a card is needed for the free plan. Not stated on the pages read, and we don't sign up.", "unchecked: surgepix.ai's home and for-agents pages render by script and our fetch got only the shell; WebFetch on them was refused for provenance, so any claims there weren't read.", "unchecked: GitHub issues, pull requests and stars for SurgePix/agent-skills, since github.com pages and the API were blocked. History is from a bare clone (68 commits on main, two committers).", "unchecked: the Product Hunt page answered 403 to our fetch, so the launch date and \"Day Rank #2\" stay the vendor's badge. The badge image URL carries a timestamp of 28 October 2026.", "What \"GPT-Image-2.5\" is. The changelog names it on 23 October 2026 without saying whose model it is." ] }, "negative": 0, "verdict": "A small, readable API with async tasks and MIT skill scripts that cover posters, decks, edits and translation. Only background removal is documented, the terms name no company and restrict commercial use and automated querying, and uploaded files become public URLs.", "bestFor": "An agent that needs finished marketing assets, such as posters, slide decks, Xiaohongshu carousels, logos and translated images, as one file from a short request.", "strengths": [ "The API reference gives request tables, JSON examples and an error table for upload, background removal and task polling", "Every task returns one download URL, or one ZIP for a set, so responses stay small", "The MIT skill scripts show the request bodies for 11 undocumented generation and edit endpoints", "Free plan with 25 credits a day, and a failed generation charges only the input tokens", "Dated public changelog with entries on 15, 22 and 23 October 2026" ], "weaknesses": [ "Only background removal and upload are in the public API reference, with no OpenAPI file or llms.txt", "No status page, rate limits, 429 guidance or SLA was found", "The terms and privacy policy name no company or address, and the terms restrict commercial use without permission", "Uploaded files become publicly accessible URLs on Tencent Cloud storage in Seoul, and no retention period is given", "No scopes, read-only keys, security.txt or disclosure policy was found" ], "agentNotes": [ "Send the key as the raw `authorization` header value, with no `Bearer` prefix", "Don't upload confidential files. The upload flow returns a public URL for every file", "Check `code` in the JSON body as well as the HTTP status, since failures come back as a non-zero `code` with a `msg`", "Poll `GET /tasks/{taskId}` within 24 hours, after which the task returns 404", "Get written permission before using outputs commercially, since the terms restrict commercial use" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "F", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 36 } ], "editorialScores": { "ergonomics": 53, "maintenance": 66, "payments": 20, "reliability": 15, "schema": 40, "security": 41, "transparency": 14 }, "provenanceScore": 41, "checked": { "categories": { "ergonomics": "2026-11-02", "maintenance": "2026-11-02", "payments": "2026-11-02", "reliability": "2026-11-02", "schema": "2026-11-02", "security": "2026-11-02", "transparency": "2026-11-02" }, "last": "2026-11-02", "oldest": "2026-11-02", "stale": false, "staleAfterDays": 90 }, "scoreHistory": [ { "date": "2026-11-02", "grade": "F", "kind": "listed", "method": "0.7", "score": 36 } ] }, "connect": { "install": "npx skills add SurgePix/agent-skills", "http": "curl --request POST \\\n --url https://api.surgepix.ai/api/tasks/remove-background \\\n --header 'authorization: sk-YOUR_API_KEY' \\\n --header 'Content-Type: application/json' \\\n --data '{\"fileUrl\": \"\u003cURL from the upload flow\u003e\", \"noWait\": true}'" }, "letme": { "capability": "https://letme.dev/image.generate", "tool": "https://letme.dev/surgepix" }, "notable": [ "The public API reference documents five endpoints, a three-step chunked upload (`/upload/chat-init`, `/upload/chunk`, `/upload/chat-complete`), `POST /tasks/remove-background` and `GET /tasks/{taskId}` (https://surgepix.ai/blog/developer-guides/api-keys-reference)", "The skills on the main branch call 11 more task endpoints that the reference doesn't document, for presentations, posters, Xiaohongshu carousels, illustrations, logos, storyboards, image edits, two restyles, image translation and PPT translation. The dev branch adds four more, for logo, watermark, brand placement and crop packs (https://github.com/SurgePix/agent-skills)", "Uploaded files go to Tencent Cloud Object Storage in the Seoul region and come back as publicly accessible URLs, and images are checked for NSFW content on upload (https://surgepix.ai/blog/developer-guides/api-keys-reference)", "Image generation runs on GPT Image 2 since 11 May 2026 and on what SurgePix calls GPT-Image-2.5 since 23 October 2026, per the changelog (https://surgepix.ai/blog/whats-new/updates)", "No MCP server. surgepix.ai/mcp and api.surgepix.ai/mcp return 404, and there's no entry in the official MCP registry and no surgepix package on npm (https://registry.modelcontextprotocol.io/v0/servers?search=surgepix)", "The terms and privacy policy name no company, and the privacy policy gives the service provider as \"Surgepix.ai\". The contact address on every page is on tate-a-tate.com, whose terms name Torsi Information Technology Co., Ltd. as Tate-A-Tate's provider. SurgePix doesn't state that link (https://surgepix.ai/blog/legal/privacy-policy, https://www.tate-a-tate.com/docs/terms-and-policies/)", "The terms bar \"non-human continuous or frequent query operations\" with automatic account suspension, and commercial use of anything obtained through the service without SurgePix's permission (https://surgepix.ai/blog/legal/terms-of-service)" ], "area": "content", "details": [ { "label": "Surface", "value": "REST API at `https://api.surgepix.ai/api` with an async task model (`POST /tasks/\u003ctask\u003e`, then `GET /tasks/{taskId}`, or `noWait: true` to wait). Sessions group iterations and show in the web app. No MCP server, SDK or OpenAPI file" }, { "label": "Documented endpoints", "value": "`/upload/chat-init`, `/upload/chunk`, `/upload/chat-complete`, `/tasks/remove-background`, `/tasks/{taskId}`" }, { "label": "Endpoints in the skills only", "value": "Main branch: `generate-presentation`, `generate-poster`, `generate-xhs-images`, `generate-illustrations`, `generate-logo`, `generate-storyboard`, `image-edit`, `generate-photo-poetic-editorial`, `generate-restaged-cinematic`, `image-translate`, `ppt-translate`. Dev branch: `add-logo`, `add-watermark`, `generate-brand-placement`, `generate-channel-crop-pack`. All under `/tasks/`" }, { "label": "Agent skills", "value": "15 SKILL.md skills with Node scripts on the main branch (github.com/SurgePix/agent-skills, MIT), for Claude Code, Codex CLI, Cursor, Gemini CLI and OpenClaw. Installed with `npx skills add` or a clone. Named here, not graded as their own listing" }, { "label": "Uploads", "value": "Chunked, 5 MB parts recommended, with an MD5 that returns the existing URL for a file already uploaded. JPEG, PNG, WEBP and GIF images are checked for NSFW content. Files land on Tencent Cloud Object Storage (ap-seoul) as public URLs" }, { "label": "Outputs", "value": "One download URL per task, a ZIP for image sets. PNG for images (transparent for background removal), PPTX for presentations. Task status is kept for 24 hours" }, { "label": "Models", "value": "GPT Image 2 from 11 May 2026 and GPT-Image-2.5 from 23 October 2026, per the changelog. The free plan gets the full model line-up, per the pricing page" }, { "label": "Free tier", "value": "25 credits a day, reset daily, about five image generations a day per the pricing page. Whether a card is needed, and whether a free account can create API keys, isn't stated" }, { "label": "Terms", "value": "Chinese law, courts where \"Surgepix's limited company\" is located, changes effective on publication without notice, no refunds once a membership is active. No company or address named" }, { "label": "Web app", "value": "Layer-based canvas with inpainting, text extraction into editable layers, a chat assistant with web search, templates and PPTX or PDF export. Not reachable through the API" } ], "unitPrices": [ { "item": "Basic plan, 2,000 credits", "unit": "month", "usd": 9.9, "note": "$0.99 a month for the first three months; about 130 image generations a month per the pricing page" }, { "item": "Pro plan, 11,500 credits", "unit": "month", "usd": 24.9, "note": "$4.99 a month for the first three months; about 750 image generations a month per the pricing page" } ], "provenance": { "legalEntity": "", "domain": "surgepix.ai", "domainRegistered": "2025-11-06", "endpointOnVendorDomain": true, "terms": "https://surgepix.ai/blog/legal/terms-of-service", "privacy": "https://surgepix.ai/blog/legal/privacy-policy", "statusPage": "", "changelog": "https://surgepix.ai/blog/whats-new/updates", "securityTxt": "none", "checked": "2026-11-02", "notes": [ "The Surgepix User Agreement names no company or address. It applies the laws of the People's Republic of China, sends disputes to the court where \"Surgepix's limited company\" is located, and refers to users outside mainland China.", "The privacy policy, dated 10 June 2026 at the top and 1 July 2022 near the end, gives the service provider as \"Surgepix.ai\" and says information is stored on \"domestic servers\".", "The contact email on every surgepix.ai page is at tate-a-tate.com. Tate-A-Tate's terms name Torsi Information Technology Co., Ltd. as its provider, and surgepix.ai's footer links Tate-A-Tate and Surgeflow. SurgePix's own pages don't name Torsi.", "RDAP for surgepix.ai gives a registration date of 6 November 2025 through Aceville Pte. Ltd., Cloudflare name servers and a registrant in Beijing, China.", "surgepix.ai/.well-known/security.txt and /security.txt return 404. status.surgepix.ai doesn't resolve and no status page is linked.", "The API answers at api.surgepix.ai under the product's own domain. Uploads and outputs are served from Tencent Cloud Object Storage buckets in ap-seoul." ], "score": 41, "checks": [ { "check": "Legal entity named", "value": "not found", "points": 0, "max": 20, "state": "no" }, { "check": "Domain age", "value": "surgepix.ai, registered 2025-11-06 (under a year)", "points": 0, "max": 15, "state": "no" }, { "check": "Endpoint on the vendor's domain", "value": "api.surgepix.ai", "points": 15, "max": 15, "state": "ok" }, { "check": "Terms of service", "value": "read, states 3 of the 7 things a reader expects, and has 1 clause that costs points", "points": 4.6, "max": 10, "state": "part" }, { "check": "Privacy policy", "value": "read, states 6 of the 8 things a reader expects", "points": 8.5, "max": 10, "state": "part" }, { "check": "Status page", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "People named", "value": "not researched yet", "points": 0, "max": 0, "state": "na" }, { "check": "Support route", "value": "a support address, help pages, a community", "points": 5, "max": 5, "state": "ok" } ], "policies": [ { "kind": "terms", "url": "https://surgepix.ai/blog/legal/terms-of-service", "state": "read", "readAt": "2026-11-02", "words": 4291, "points": 4.6, "max": 10, "expected": [ { "key": "terms.date", "label": "Gives the date it was last updated", "found": false }, { "key": "terms.law", "label": "Names the governing law or courts", "found": true, "quote": "10.1 The formation, implementation, interpretation, and dispute resolution of this Agreement shall be governed by the laws of the People's Republic of China.", "says": "The law of People" }, { "key": "terms.liability", "label": "States a limit on its liability", "found": false }, { "key": "terms.termination", "label": "Says how the agreement or account can be ended", "found": true, "quote": "otherwise, our backend system will automatically suspend your account with no liability to you." }, { "key": "terms.changes", "label": "Says how changes to the terms are announced", "found": false }, { "key": "terms.use", "label": "Lists what users may not do", "found": true, "quote": "(5) You may not use the service information obtained through Surgepix services or products, or the services themselves, for any commercial purpose unless you have obtained Surgepix's permission." }, { "key": "terms.sla", "label": "Refers to a service level or uptime commitment", "found": false } ], "toKnow": [ { "key": "terms.automated", "label": "Restricts automated access", "found": true, "quote": "…data, information, or materials (including but not limited to in unreasonable or unlawful ways such as crawling, copying, distributing, displaying, mirroring, uploading, or downloading other than through purchasing from Surgepix), or otherwise affect Surgepix's normal services in an improper manner.", "costsPoints": true } ] }, { "kind": "privacy", "url": "https://surgepix.ai/blog/legal/privacy-policy", "state": "read", "readAt": "2026-11-02", "statedDate": "2026-06-10", "words": 2021, "points": 8.5, "max": 10, "expected": [ { "key": "privacy.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last Updated: June 10, 2026", "says": "Last updated 2026-06-10" }, { "key": "privacy.collected", "label": "Says what personal data is collected", "found": true, "quote": "In order to provide you with basic services and various optimized services, we may collect two categories of information." }, { "key": "privacy.retention", "label": "Says how long data is kept", "found": false }, { "key": "privacy.processors", "label": "Says who else receives the data", "found": true, "quote": "We will share your username, the corresponding third-party payment platform account name, order payment-related information, order security-related device information, and other information required by anti-money-laundering laws with the third-party payment platform through an embedded SDK." }, { "key": "privacy.sale", "label": "Says whether personal data is sold or shared for advertising", "found": true, "quote": "Surgepix solemnly commits that it will never sell any user information and will protect the basic and sensitive personal information, including your email address, mobile phone number, and full name.", "says": "Says it does not sell personal data" }, { "key": "privacy.rights", "label": "Says what rights people have over their data", "found": true, "quote": "We will take strict measures to protect your privacy and ensure that your privacy rights are not violated in any way." }, { "key": "privacy.contact", "label": "Gives a privacy contact", "found": true, "quote": "Surgepix respects the privacy of its users, and we understand that your decision to share information with Surgepix is founded on complete trust." }, { "key": "privacy.transfers", "label": "Says where data is transferred or stored", "found": false } ] } ] }, "humans": { "slug": "surgepix", "checked": "2026-11-02", "company": "SurgePix", "peopleNote": "No first-hand page names SurgePix's people with roles. surgepix.ai has no about or team page in its sitemap (207 URLs), the terms and privacy policy name no company or person, and the docs carry no bylines. The agent skills repository's commits come from two GitHub accounts, trswangxu (June to September 2026, skill code) and Cicily-008 (October 2026, README), but neither profile was read (github.com was blocked) and no page gives either a role, so neither is listed. The listing check saw three makers named on Product Hunt; that page answered 403 to our fetch today and a maker credit isn't a role, so nobody is taken from it. The domain's RDAP registrant is a private individual in Beijing and isn't used. Ownership is unknown because no SurgePix page names a legal entity. The contact email on every page is on tate-a-tate.com, whose terms name Torsi Information Technology Co., Ltd. as Tate-A-Tate's provider, and surgepix.ai's footer links Tate-A-Tate and Surgeflow, but SurgePix doesn't state that Torsi runs it. Investors were looked for on surgepix.ai (sitemap, blog, changelog, terms, privacy), tate-a-tate.com's homepage and terms, and three web searches for SurgePix, Tate-A-Tate and Torsi with funding terms, which returned only directory pages and unrelated companies named Surge. LinkedIn, X, Crunchbase and similar databases weren't read.", "companySocial": { "x": "https://x.com/surgepix_AI", "github": "https://github.com/SurgePix" }, "support": { "emails": [ "contact@tate-a-tate.com" ], "urls": [ "https://surgepix.ai/blog", "https://surgepix.ai/blog/developer-guides/call-skills" ], "community": [ { "label": "SurgePix Discord", "url": "https://discord.gg/wC5XeHN6fR", "kind": "discord" }, { "label": "Agent skills repository", "url": "https://github.com/SurgePix/agent-skills", "kind": "github" } ], "contactEmails": [ "contact@tate-a-tate.com" ], "contactUrls": [ "https://surgepix.ai/blog/legal/privacy-policy" ] }, "sources": [ "https://surgepix.ai/sitemap.xml", "https://surgepix.ai/skills", "https://surgepix.ai/blog/legal/terms-of-service", "https://surgepix.ai/blog/legal/privacy-policy", "https://surgepix.ai/blog/developer-guides/api-keys-reference", "https://www.tate-a-tate.com/docs/terms-and-policies/", "https://github.com/SurgePix/agent-skills" ], "ownership": { "status": "unknown", "checked": "2026-11-02", "sources": [ "https://surgepix.ai/blog/legal/terms-of-service", "https://surgepix.ai/blog/legal/privacy-policy" ] } }, "pageJsonUrl": "https://www.anchorterminal.com/tools/surgepix.json", "live": { "slug": "surgepix", "probe": { "target": "https://api.surgepix.ai/api", "method": "get", "lastAt": "2026-11-02T14:19:58.721567408Z", "lastOk": true, "lastStatus": 401, "lastMs": 1370, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 1194, "p95ms24h": 1264, "samples24h": 33, "samples30d": 33, "days": [ { "date": "2026-11-02", "probes": 33, "ok": 33 } ] }, "updatedAt": "2026-11-02T14:19:58.721567408Z" } } }