APITemplate.io vs DynaPictures

APITemplate.io 5

APITemplate.io's terms bar robots and other automatic devices on any portion of the Site or Service, so its sites were not re-read on 5 November, and the OpenAPI file's storage host answers robots.txt with an access-denied error, so readings of that file are struck. The REST guide links an OpenAPI 3.0.0 description for Postman or code generators, but every reading of the file is struck and none can be taken today (0). No llms.txt (404) and no Markdown docs for agents (0). The operation and parameter descriptions, types, enums, request samples and error schema were read from the file (0, 0 and 0). A /v2 path in the guides, with no changelog (5). 0+0+0+0+0+5 = 5.

DynaPictures 82

OpenAPI 3.1 at dynapictures.com/openapi.json with 20 paths (25). llms.txt, auth.md and an agent skill in Markdown (10). llms.txt says when to use the product and when it's a poor fit, and the skill gives call order for each job (17 of 20). Enums for formats and options, with layer overrides keyed by layer name (12 of 15). Request examples throughout and a status table in the skill, but the API reference's Errors section is unedited Slate template text about kittens (9 of 15). No URL version, additive changes, removals announced six months ahead with Deprecation and Sunset headers, and no changelog (9 of 15). 25 + 10 + 17 + 12 + 9 + 9 = 82.

APITemplate.io 48

APITemplate.io's terms bar robots and other automatic devices on any portion of the Site or Service, so its sites were not re-read on 5 November, and the OpenAPI file's storage host answers robots.txt with an access-denied error, so readings of that file are struck. Per the 9 October check. One API key per account, regenerable in the console, with a separate key per team (20). The Direct URL auth code travels in a query string by design. It is tied to one template with a quota and an expiry and is not the API key, so we took no 10-point deduction. That is a judgement call. No scopes or read-only key; the Direct URL code is the only narrow credential (5). Calls return status and URLs, not third-party content (10). Request logs kept two weeks, visible in the console and switchable off (8). The site states a completed SOC 2 Type II audit with no auditor, period or report shown, plus a security policy page and 2FA. No security.txt (404), disclosure policy or bug bounty found, the value for a bare SOC 2 claim with no report or disclosure route (5). 20+5+10+8+5 = 48.

DynaPictures 26

One API key per user with the user's full access, not limited to workspaces or actions; a new key is requested by email to support, with no rotation in the account (10 of 30). No read-only mode, and the MCP server can author and change designs (3 of 20). Tools return the account's own templates and renders; image layers accept outside URLs (10 of 15). A list of generated images, with no audit log documented (3 of 15). No security.txt, disclosure policy, bug bounty or certification found (0). 10 + 3 + 10 + 3 + 0 = 26.

APITemplate.io 24

APITemplate.io's terms bar robots and other automatic devices on any portion of the Site or Service, so its sites were not re-read on 5 November, and the OpenAPI file's storage host answers robots.txt with an access-denied error, so readings of that file are struck. Per the 9 October check except where struck. export_type=file returns bytes rather than a stored file and expiration sets how long a download URL lasts, per the secure PDF FAQ (15 of 25, an earlier partial kept). Pagination and filters, the error object and the meta reference were read from the struck file (0, 0 and 0). Calls are synchronous by default, and the five SDK repositories are generated clients from September 2023 with placeholder install commands, confirmed from clones on 5 November (9 of 15, an earlier partial kept). 15+0+0+0+9 = 24.

DynaPictures 45

The MCP tool definitions weren't read (listing them needs a session), and llms.txt describes groups that include layer-by-layer design authoring, so the count is unknown. REST responses are small objects with image URLs (12 of 25). Template and generated-image listings, with no field selection documented (10 of 20). Errors are JSON with a message and documented statuses, without codes (12 of 20). Requests aren't idempotent, by the vendor's own note, though identical image URLs are served from cache without a credit (6 of 20). An Editor SDK for embedding the editor, and no API client SDKs (5 of 15). 12 + 10 + 12 + 6 + 5 = 45.

APITemplate.io 11

APITemplate.io's terms bar robots and other automatic devices on any portion of the Site or Service, so its sites were not re-read on 5 November, and the OpenAPI file's storage host answers robots.txt with an access-denied error, so readings of that file are struck. Per the 9 October check. No changelog or release notes exist, and the file's Last-Modified header was metadata, not a dated release (0). No dated changelog entries in the last 90 days (0). Support by email with a stated reply within 24 hours and response times in the SLA, with no public changelog (6). Five SDK repositories, each a generated client committed on 17 September 2023; the Python and JavaScript clones on 5 November show no later commit (3). No tags, CI results or licence files in those repositories (2). 0+0+6+3+2 = 11.

DynaPictures 4

No changelog, release notes or dated API change was found, and the MCP server card gives version 1.0.0 with no date (0). No dated changes since 8 August (0). Support by email and contact form, not tested (4 of 15). Not in the official MCP registry and no API SDKs (0). No public package or repository (0). 0 + 0 + 4 + 0 + 0 = 4.