Alpha Vantage vs TickerLayer

Alpha Vantage 30

No x402, MPP or L402 (0). Five monthly plans are public with prices, $49.99 for 75 requests a minute to $249.99 for 1,200, sold by rate and not by call (10). A free key gives 25 requests a day with no card (20). The key comes from a browser form that asks for a name and an email address, and no key API was found (0). 0 + 10 + 20 + 0 = 30.

TickerLayer 92

x402 on the vendor's own gateway, x402.tickerlayer.com, for 41 GET routes. That is six routes for each of stocks, forex, crypto, indices, ETFs and commodities, plus bond yields and four market-calendar routes. Perpetuals, Futures CFDs, the add-ons, the symbol catalogue and WebSocket need a key. Between massive's 30 for US stock routes only and financial-datasets' 35 for every documented data endpoint (32 of 40). Per-call x402 prices from 0.01 to 0.10 USDC in the catalogue and docs, and plan prices per feed on the pricing page, all without a login (20). A Free plan of 3,000 REST calls every 30 days with 'no card', per llms.txt (20). An agent with a funded Base wallet pays per call with no account or key (20). 32+20+20+20 = 92.

Alpha Vantage 33

The MCP server repository, which a workflow deploys to the hosted server, had its last commit on 3 October 2026, an OAuth redirect fix merged as pull request 18, 38 days before this check, and nothing newer on the documentation page (20). Since 12 August the repository has commits on 20 and 25 August, 18 September and 2 October 2026 with no tag, version or changelog entry, and the changelog still stops at 0.3.2 with later changes under Unreleased. Commits without a version aren't releases, so there are no dated releases in the last 90 days (0). Pull requests 14 and 18 were merged within a day and issue 16 closed in a day, while issue 17, a reported startup crash, was open from 4 September, per the 8 October check. Support is by email (10 of 25). The official MCP registry entry rested on the registry's v0 API, which we no longer read, and no official SDK was found (0 of 15). The published package leaves its mcp dependency unpinned (mcp>=1.12.3), and the deploy and publish workflows run no tests (3 of 10). 20 + 0 + 10 + 0 + 3 = 33.

TickerLayer 79

Read as a closed service. The newest changelog entry is 6 November 2026, a bond yield curve endpoint (30). 50 dated changelog entries from 8 September to 6 November 2026 (20). A public changelog, a consultation form, info@tickerlayer.com and a support chat, all untested, with no community channel and no issues on the plugin repository read. Massive and twelve-data took 10 (9 of 15). Official clients for JavaScript or TypeScript (npm) and Python (PyPI), both 0.1.0 from 20 October 2026, and an MCP registry entry under the verified namespace com.tickerlayer (15). The npm package has no dependencies or install hooks but no repository field, the clients' source isn't public and no CI is visible (5 of 10). 30+20+9+15+5 = 79.

Alpha Vantage 46

The surface graded is the REST API, with the official MCP server noted. No OpenAPI document was found for the API. The MCP server's tools carry typed inputs generated from Python signatures (10 of 25). /llms.txt still returns 404 (10 November), and the only Markdown is the MCP README (3 of 10). Each function has a purpose statement, a parameter list and a premium marker, with little on when not to use it (13 of 20). Required and optional parameters are marked and allowed values listed in prose, while MCP inputs such as interval are plain strings with no enums (8 of 15). Every function has demo URLs and code in four languages, but no error responses are documented (8 of 15). The API has no version and no changelog. The MCP repository's changelog stops at 0.3.2 on 27 February 2026 with later changes under Unreleased (4 of 15). 10 + 3 + 13 + 8 + 8 + 4 = 46.

TickerLayer 88

OpenAPI 3.1 at tickerlayer.com/openapi.json (TickerLayer Market Data API 1.0.0, about 386,000 characters), read in its first 100,000 and last 96,000 characters, with summaries, descriptions, tags and examples on the operations read and shared 400, 401, 403, 404, 429 and 503 responses. The WebSocket is described in prose only and the hosted MCP tool schemas weren't read (23 of 25). llms.txt, llms-full.txt and a Markdown twin of every docs page (10). Operation descriptions state purpose and plan gating, and the vendor's skill says which MCP tool to use for each question and when not to, such as get_quote not being the tool for a price. Financial-datasets took 17 (17 of 20). Enums on interval, multiplier, timespan and sort, format: date on dates, bounded limit, required path parameters, as for massive (13 of 15). Examples on most parameters and responses, one Error schema with ten fields and documented codes, but the codes appear only as example values with no enum or table (13 of 15). A dated changelog of the last 50 changes, 8 September to 6 November 2026, but no version in the REST paths ('no /v1/') and the spec at 1.0.0. Above twelve-data's 10 for monthly updates and below massive's 15 for versioned paths (12 of 15). 23+10+17+13+13+12 = 88.

Alpha Vantage 30

Graded as a hosted service. No status page was found. The site links none, and status.alphavantage.co had no valid certificate per the 8 October check (0). With no page there is no incident history to read (5). Limits are published with numbers, 25 requests a day on a free key and 75 to 1,200 a minute on premium plans (15). No 429, Retry-After or backoff guidance was found in the documentation. The vendor's own client code says failures and limit notices come back as HTTP 200 with an Error Message, Information or Note key, and its MCP error text says only to wait and retry (0). No SLA was found, and the terms supply the service as is (0). The REST API is generally available (10). 0 + 5 + 15 + 0 + 0 + 10 = 30.

TickerLayer 70

Read with the hosted lines, on the REST API. status.tickerlayer.com is an UptimeRobot page linked from the site header (20). Its monitors and history load by script from /api/, which its robots.txt disallows, so no incident record was read, as for eodhd and apitemplate-io (5). Limits are published with numbers, 10 requests a second per account on Free and Individual, 100 on Business, and monthly call quotas per feed (15). The OpenAPI file's 429 carries Retry-After and a body with retryAfterMs, resetsAt and a code that separates the per-second limit from the monthly quota, and every response has carried X-RateLimit-Limit and X-RateLimit-Remaining since 14 September 2026. Every data operation is a GET, and x402 retries with the same payment identifier return the stored response (15). An SLA is named only for Enterprise under a written agreement and as 'partially available' on Business, with no published terms or figure, and the terms of use promise no uptime. Financial-datasets took 10 for SLAs listed on a self-serve plan, so this is half (5 of 10). No beta or preview label on the REST API, the MCP server or the x402 gateway (10). 20+5+15+15+5+10 = 70.

Alpha Vantage 54

outputsize=compact returns the latest 100 points, datatype=csv shortens long series, and the MCP server previews anything over 32,000 tokens with a link to the full data. No field selection (15 of 25). limit and time filters on news and a month parameter for intraday history, with no pagination elsewhere (10 of 20). Errors and limit notices arrive as HTTP 200 with free text under Error Message, Information or Note. The API documentation doesn't describe them, while the vendor's client code in the MCP repository maps them to invalid_api_key, invalid_request and rate_limit errors (5 of 20). Every call is a GET read, and all MCP tools carry readOnlyHint true and destructiveHint false (16 of 20). Few required parameters and sensible defaults. No official SDK, only a Python CLI and community libraries (8 of 15). 15 + 10 + 5 + 16 + 8 = 54.

TickerLayer 79

Read on the REST API, with the MCP server where a line covers it. Responses are sized by limit (bars up to 5,000, catalogue up to 1,000), sort, date ranges and batch calls for futures quotes and market status, with no field selection. The MCP server has 12 tools, 11 shown to the model. Massive and financial-datasets took 15 (15 of 25). limit, offset and next_offset, cursors on fundamentals and economic events, total_count on bars, search on symbols and updated_since on signals (18 of 20). Errors carry statusCode, message, a code, retryAfterMs, resetsAt, limitRps, plansUrl and the missing product or market, and the skill gives an action per status. Above financial-datasets' 16 (17 of 20). Every data call is a GET, and x402 settles only after a valid response with payment identifiers bound to the request, but no readOnlyHint or other annotation was found for the MCP tools. Financial-datasets took 14 without annotations (15 of 20). Data tools need only asset_class and symbol, with defaults for limit and sort, and official clients exist for JavaScript or TypeScript and Python, both at 0.1.0 from 20 October 2026. Stocks need the COUNTRY:TICKER form (14 of 15). 15+18+17+15+14 = 79.

Alpha Vantage 32

One key per account with no scopes, documented only as apikey= in the query string, and replaced by emailing support. The hosted MCP server adds OAuth 2 with PKCE, dynamic client registration and one read scope (20 less 10 for the query string, so 10). Every function is read-only (15 of 20). News, sentiment and earnings transcripts are third-party text, and no guidance on treating them as untrusted was found (5 of 15). No usage log or per-call record for the key holder was found (0 of 15). security.txt returned 404 per the 8 October check, and no disclosure policy, bug bounty or certification was found. A report of keys in plain-text logs, GitHub issue 13, was closed within three days in April 2026 (2 of 20). The server source still writes the key and tool arguments into its own analytics records. 10 + 15 + 5 + 0 + 2 = 32.

TickerLayer 49

A plain account key with no scopes, shown once and replaced by regenerating it in the dashboard (20). The OpenAPI file defines an apiKey query parameter as a 'compatibility fallback', and the WebSocket takes the key only in its URL, so 10 off. The MCP server adds OAuth 2.1 with PKCE S256, dynamic registration, refresh tokens, a revocation endpoint and one scope, market.read. Twelve-data took 18 on the same pattern, one less here because the WebSocket has no header option (17 of 30). Every operation reads data, and the OAuth scope is read-only, as for twelve-data and financial-datasets (15 of 20). Responses are prices, bars, symbols, calendars and yields. There is no news feed, and SignalPoint signals are structured fields, so no untrusted text reaches the agent (10 of 15). Rate-limit headers on every response, quota 429s that state the limit and when it renews, and a dashboard list of WebSocket connections with source IP, key and how each ended (24 October 2026). No per-call REST log for the key holder was found, though the privacy policy says request logs are kept (7 of 15). security.txt answered a client error, and no disclosure policy, bug bounty, SOC 2 or ISO 27001 was found (0 of 20). 17+15+10+7+0 = 49.