APITemplate.io vs Pixelixe

APITemplate.io 5

APITemplate.io's terms bar robots and other automatic devices on any portion of the Site or Service, so its sites were not re-read on 5 November, and the OpenAPI file's storage host answers robots.txt with an access-denied error, so readings of that file are struck. The REST guide links an OpenAPI 3.0.0 description for Postman or code generators, but every reading of the file is struck and none can be taken today (0). No llms.txt (404) and no Markdown docs for agents (0). The operation and parameter descriptions, types, enums, request samples and error schema were read from the file (0, 0 and 0). A /v2 path in the guides, with no changelog (5). 0+0+0+0+0+5 = 5.

Pixelixe 66

OpenAPI 3.1 (version 2.0.0) at pixelixe.com/pixelixe-openapi.json, but it covers four endpoints, authentication, document search, graphic automation and photo effects, and leaves out the JSON-to-graphic and image processing APIs (18 of 25). llms.txt exists but routes readers to marketing pages; the MCP reference is written for LLMs (7 of 10). The MCP reference says what each of the seven tools maps to, that pixelixe_generate_graphic_variant 'is not a free-form layout API', lists common mistakes and how to present outputs (17 of 20). The MCP layer documents canonical field names and refuses legacy aliases; the REST modifications are open structures keyed by element name (10 of 15). Request examples throughout, but errors are one table of message strings all returning 400 (8 of 15). /v2 paths and a deprecated V1, with no changelog (6 of 15). 18 + 7 + 17 + 10 + 8 + 6 = 66.

APITemplate.io 45

APITemplate.io's terms bar robots and other automatic devices on any portion of the Site or Service, so its sites were not re-read on 5 November, and the OpenAPI file's storage host answers robots.txt with an access-denied error, so readings of that file are struck. Hosted lines, per the 9 October check except where struck. The UptimeRobot status page at status.apitemplate.io draws its monitors by script from a path its robots.txt disallows, so no component reading remains (0). Its 90-day history was never read (5). Rate limits are published as 100 requests per 10 seconds per IP address and 100 concurrent synchronous PDF requests per account (15). HTTP 429 is documented with advice to pause before retrying, but no Retry-After, backoff interval or idempotency key (5). The SLA page commits to 99.9 per cent monthly availability with service credits (10). Nothing on the guides read labels the generation API beta (10). 0+5+15+5+10+10 = 45.

Pixelixe 15

Hosted lines. No status page found on the site or in the docs (0). No readable incident history (5). No rate limit is published; the terms only forbid circumventing them (0). No 429, Retry-After or backoff guidance. Every error, a wrong key and exhausted credits included, is a 400 with a message (0). No SLA found; the terms supply the service as is (0). API v2 is current and not labelled beta (10). 0 + 5 + 0 + 0 + 0 + 10 = 15.

APITemplate.io 24

APITemplate.io's terms bar robots and other automatic devices on any portion of the Site or Service, so its sites were not re-read on 5 November, and the OpenAPI file's storage host answers robots.txt with an access-denied error, so readings of that file are struck. Per the 9 October check except where struck. export_type=file returns bytes rather than a stored file and expiration sets how long a download URL lasts, per the secure PDF FAQ (15 of 25, an earlier partial kept). Pagination and filters, the error object and the meta reference were read from the struck file (0, 0 and 0). Calls are synchronous by default, and the five SDK repositories are generated clients from September 2023 with placeholder install commands, confirmed from clones on 5 November (9 of 15, an earlier partial kept). 15+0+0+0+9 = 24.

Pixelixe 49

Seven compact MCP tools (25). Document and design-set search filters, with no pagination documented (10 of 20). All errors are 400 with free-text messages, so an agent can't branch on a code (6 of 20). No idempotency keys, and annotations couldn't be read on the closed server. The MCP tools only read and create, with nothing that deletes (5 of 20). Few required fields, but no official SDK (3 of 15). 25 + 10 + 6 + 5 + 3 = 49.

APITemplate.io 60

APITemplate.io's terms bar robots and other automatic devices on any portion of the Site or Service, so its sites were not re-read on 5 November, and the OpenAPI file's storage host answers robots.txt with an access-denied error, so readings of that file are struck. Per the 9 October check. Closed service under terms of use dated 8 April 2022, which can change without prior notice. The SDK repositories have no licence file (13). Privacy policy dated 21 January 2024 and a public DPA with standard contractual clauses. Request logs are kept two weeks, account data is deleted within 30 days of cancellation, and free accounts' files are purged after one year. Retention of personal data is otherwise stated only as long as reasonably needed (22). Clause 15.8 of the terms promises 60 days' written notice before a service is withdrawn, while clause 2.24 reserves the right to modify or discontinue any part with or without notice. No dated deprecation notices found (6, an earlier partial kept). Eleven sub-processors named with purpose and country, 14 days' notice of new ones in the DPA, and four storage regions listed (17). 13+22+6+17 = 58.

Pixelixe 41

Closed service under terms of 19 March 2026 that choose French law but name no company (12 of 30). The privacy policy of 7 April 2026 keeps account data while the account is active and 'as long as reasonably necessary' after, with no periods, and says nothing about AI processing or training (10 of 30). V1 is marked deprecated in the docs with no dates or notice period (5 of 20). Processors are described only by category, with Google Analytics named, and data processed in France, the EEA and other vendor countries (5 of 20). 12 + 10 + 5 + 5 = 32.

APITemplate.io 48

APITemplate.io's terms bar robots and other automatic devices on any portion of the Site or Service, so its sites were not re-read on 5 November, and the OpenAPI file's storage host answers robots.txt with an access-denied error, so readings of that file are struck. Per the 9 October check. One API key per account, regenerable in the console, with a separate key per team (20). The Direct URL auth code travels in a query string by design. It is tied to one template with a quota and an expiry and is not the API key, so we took no 10-point deduction. That is a judgement call. No scopes or read-only key; the Direct URL code is the only narrow credential (5). Calls return status and URLs, not third-party content (10). Request logs kept two weeks, visible in the console and switchable off (8). The site states a completed SOC 2 Type II audit with no auditor, period or report shown, plus a security policy page and 2FA. No security.txt (404), disclosure policy or bug bounty found, the value for a bare SOC 2 claim with no report or disclosure route (5). 20+5+10+8+5 = 48.

Pixelixe 38

A bearer API key per account, plus a public key for the embedded editor. The MCP server accepts the key or an OAuth token from studio.pixelixe.com/oauth/mcp with one pixelixe.mcp scope. No key scopes, rotation or revocation documented (18 of 30). No read-only mode, though the MCP tools can't delete or change account settings (10 of 20). Tools return the account's own templates and renders (10 of 15). No audit log or per-call record documented (0). No security.txt, disclosure policy, bug bounty or certification found (0). 18 + 10 + 10 + 0 + 0 = 38.

APITemplate.io 11

APITemplate.io's terms bar robots and other automatic devices on any portion of the Site or Service, so its sites were not re-read on 5 November, and the OpenAPI file's storage host answers robots.txt with an access-denied error, so readings of that file are struck. Per the 9 October check. No changelog or release notes exist, and the file's Last-Modified header was metadata, not a dated release (0). No dated changelog entries in the last 90 days (0). Support by email with a stated reply within 24 hours and response times in the SLA, with no public changelog (6). Five SDK repositories, each a generated client committed on 17 September 2023; the Python and JavaScript clones on 5 November show no later commit (3). No tags, CI results or licence files in those repositories (2). 0+0+6+3+2 = 11.

Pixelixe 19

No dated release or API change was found. The newest dated items are the MCP registry entry of 26 March 2026 and the privacy policy of 7 April 2026, more than 180 days before this check (0). No three dated changes since 8 August (0). No changelog. Support by email at inquiries@pixelixe.com, not tested (4 of 15). com.pixelixe/pixelixe-mcp is in the official MCP registry under a domain-verified namespace; there are no official SDKs (15). No public package or repository (0). 0 + 0 + 4 + 15 + 0 = 19.