Alibaba Wan (Model Studio) vs sync. labs MCP server

Alibaba Wan (Model Studio) 80

Model reading of the checklist (credential, training, retention, operator visibility, programme). API keys belong to a workspace, can be limited to up to 30 models and an IP allow-list of 20 entries, can be reset, and temporary keys last at most 1,800 seconds (30). The Model Studio privacy notice (updated 11 October 2026, re-read on 2 November) says Alibaba Cloud will never use customer data for model training (20). Result URLs and task ids expire after 24 hours (5). We found no deletion call and no retention period for prompts and inputs (0). Audit logs record every model call by default (request id, model, latency, status) and monitoring filters by API key (15). SOC 2 named in the Model Studio privacy notice (5) and a compliance repository linked from it (5). No security.txt on alibabacloud.com (the path answers an HTML page on 2 November), and we didn't find a bug bounty page for Model Studio (0). 30+20+5+0+15+5+5+0 = 80.

sync. labs MCP server 38

OAuth per organisation, or an API key in the environment (22 of 30). No read-only mode (3 of 20). Media in and out, no third-party text (10). No audit log found (0). No security programme found (3 of 20). 22 + 3 + 10 + 0 + 3 = 38.

Alibaba Wan (Model Studio) 78

The API models are closed under Alibaba Cloud's product terms. Wan 2.1 and 2.2 weights are Apache 2.0 on GitHub, so part of the family can be self-hosted (20). The privacy notice and FAQ both say customer data is never used for training (10). Result retention is stated (24 hours), input retention isn't (5). The notice, FAQ and API reference agree, but we didn't find a DPA in this run (5). A decommissioning policy with notice periods by model type, 3 months for stable and 14 days for preview models (20). Six regional hosts are documented with separate keys and prices. We found no subprocessor list (10). 20+10+5+5+20+10 = 70.

sync. labs MCP server 44

MIT open source (30). Data handling not read (5 of 30). No deprecation policy; earlier tool names documented as superseded (5 of 20). Subprocessors not found (0). 30 + 5 + 5 + 0 = 40.

Alibaba Wan (Model Studio) 70

Alibaba Cloud runs its own status page at status.alibabacloud.com with per-product components (20). The page renders in the browser only (re-read on 2 November, robots.txt a plain 404), so we couldn't read its incident history (5). The 1 October note also cited a third-party status monitor; that reading is struck, since such copies aren't a vendor record, and no points rested on it. The wan3.0-video and wan3.0-video-prime model pages list 300 requests a minute in every region, per the 1 October check, and the rate-limit page (updated 29 October 2026, re-read on 2 November) caps wan3.0-video and wan3.0-video-prime at 5 requests a second and 5 concurrent requests in Singapore (15). The rate-limit guide documents 429 for bursts and says limits usually recover within a minute, with no Retry-After header, and the pricing page says failed requests aren't billed (10). The Model Studio inference SLA promises 99.9 per cent monthly uptime with service credits on paid inference, per the 1 October check (10). Wan 3.0 carries no preview label in the docs (10). 20+5+15+10+10+10 = 70.

sync. labs MCP server 43

Status page at status.sync.so with maintenance and previous incidents (20). History not read (5). No MCP limits found (0). The source has abort-signal handling and recovery guidance for long jobs (8 of 15). No SLA found (0). Version 0.2.4, not labelled beta (10). 20 + 5 + 0 + 8 + 0 + 10 = 43.

Alibaba Wan (Model Studio) 67

No OpenAPI or other machine-readable contract for the DashScope video endpoints (0). llms.txt at docs.modelstudio.console.alibabacloud.com links Markdown copies of the Wan guides and references, Wan 3.0 among them (re-read on 2 November) (10). The Wan 3.0 reference says which model to pick and which inputs combine, and older pages point readers to newer models, but there's little on when not to use a mode (14). Typed parameters with enums for resolution and ratio, ranges for duration (2 to 30, or -1 for a smart duration the model picks) and seed, a 20,000 character prompt cap and stated defaults. input takes either a prompt or a media array, which a schema can't express (13). Six curl examples on the Wan 3.0 reference and an error-code page with HTTP status, code, message and a fix for each entry, including video checks such as InvalidFile.FPS (15). Dated snapshots such as wan2.7-t2v-2026-06-12 and a dated model release page (15). 0+10+14+13+15+15 = 67.

sync. labs MCP server 81

Tools generated from the public API specification plus workflow tools, with typed schemas in the source (25). llms.txt and .md pages (10). Tool table with descriptions (14 of 20). Typed from the API spec (12 of 15). Examples and an estimates tool; errors not documented (8 of 15). Tags v0.2.2 to v0.2.4 and dated commits (12 of 15). 25 + 10 + 14 + 12 + 8 + 12 = 81.

Alibaba Wan (Model Studio) 20

No x402, MPP or L402 (0). Per-second prices for every Wan model are published per region without a login, $0.05 to $0.20 a second for wan3.0-video in Singapore, still marked limited-time 30 per cent off on 2 November (20). A free quota of 30 seconds for wan3.0-video exists in Singapore for 90 days, but the international sign-up asks for payment details first, per the 1 October check (0). A person signs up in a browser and creates the key (0). 0+20+0+0 = 20.

sync. labs MCP server 30

No machine payment protocol (0). Per-second prices published (20). A free try for short videos (10 of 20). A person signs up (0). 0 + 20 + 10 + 0 = 30.

Alibaba Wan (Model Studio) 63

Create and query calls return small JSON objects with a task id and a video URL (15). No webhook or callback is documented, so an agent polls, every 15 seconds per the docs (0 of the 10 for callbacks). Resolution, ratio and duration control output size (10). We found no task list endpoint in the video docs (0 of 10). The error page gives a code and a fix an agent can act on, though 429 guidance stops at retry later (18). No idempotency key, and the docs say not to resubmit but to keep polling. Failed calls aren't billed, so a retry after a failure is safe (10). Every parameter except the prompt or media has a default (5). The official Python SDK dashscope is current. We didn't confirm a second official SDK for video in this run (5). 15+0+10+0+18+10+5+5 = 63.

sync. labs MCP server 55

A generated catalogue filtered by client profile, curated for ChatGPT (15). Project history and estimates (12 of 20). Recovery tools; errors not documented (8 of 20). Annotations not read (5 of 20). OAuth or a key, npm package and library use (15). 15 + 12 + 8 + 5 + 15 = 55.