Arcmira vs Mojeek Web Search API

Arcmira 84

The MCP server's newest release is 0.10.7, published to the registry on 12 October 2026 and to GitHub on 15 October, with repository commits to 30 October and no release since (re-read from the clones on 2 November); the SDKs reached 0.6.2 on 15 October and the last dated API change in the docs changelog is also 15 October (30). 33 registry versions from 0.3.0 on 4 September to 0.10.7, 24 GitHub releases, 15 npm versions of arcmira since 22 August and 10 dated docs changelog entries in October (20). Issues on arcmira/mcp are mostly the maintainer's own (18 of 19 items are their own pull requests or notes); the one outside issue, #13 of 18 October, had no reply by 30 October (GitHub's API and pages couldn't be read on 2 November); support is an email address, hi@arcmira.com, and a free feedback endpoint whose review states can be read back; no Discord, forum or community channel (11 of 25). io.github.arcmira/arcmira is in the official MCP registry under the GitHub-verified organisation namespace, current at 0.10.7, and the TypeScript and Python SDKs are current (15). CI on every push and pull request (typecheck, tests, manifest check against the OpenAPI contract, signed-commit check), passing on master per the 30 October check, pinned dependencies and a lockfile; the server itself is not a package anyone installs, so package health is the SDKs', whose CI we didn't read (8 of 10). 30+20+11+15+8 = 84.

Mojeek Web Search API 10

Read for a closed service. No API changelog, release notes or dated API change were found, and the blog's posts since 2024 are about search in general, so the last change can't be dated (0). No dated changes in the 90 days from 8 August (0). A staff member answered API questions on the community forum within a day in December 2025 and October 2026, and support is by email; no public changelog (10 of 15). No official SDKs or MCP server (0). No public packages or CI to measure (0). 0 + 0 + 10 + 0 + 0 = 10.

Arcmira 87

MCP reading, with the API the tools call. A public OpenAPI 3.1 file, re-read on 2 November from its copy at arcmira.com/docs/openapi/arcmira-v1.json (31 paths, 35 operations, 75 schemas, one bearer scheme; the same document is served at api.arcmira.com/v1/openapi.json), and the four tools declare zod input schemas in src/tools.ts (25). llms.txt routed by situation, a .md twin of every docs page, developers.md, auth.md, a published Agent Skill, an RFC 9727 api-catalog and a .well-known/mcp card (10). Tool descriptions say what each does, that arcmira_describe is called once and bills nothing, that the write tool never deletes and when to send feedback; operation descriptions in the OpenAPI file say to call coverage before claiming a show isn't indexed and to resolve names before filters, and the server instructions carry the id rule, the 90-day default and the usage rule. When not to use a method is covered by the id rule and the resolver note, little else (16 of 20). The two execute tools take a JavaScript program as one string, checked only when it runs; the feedback tool has an enum category, a regex call_id and length caps; the API has 102 parameters, 37 with enums, ranges or patterns, and ids typed by prefix (9 of 15). Worked example programs in the reference, curl examples on every guide, an error catalogue of about 60 codes with a cause and fix each, doc_url anchors and request ids on every error, and typed unlock and details.limit objects; only 9 parameters in the OpenAPI file carry an example (14 of 15). /v1 in the path, a dated docs changelog from April 2026 with a 14-row table for the 5 to 8 October breaking changes, a per-version CHANGELOG.md in the repository and 33 registry versions; the OpenAPI file marks retired fields deprecated, but the quickstart says new fields and routes arrive without notice and nothing states a notice period (13 of 15). 25+10+16+9+14+13 = 87.

Mojeek Web Search API 29

No OpenAPI or other machine-readable contract (0). No llms.txt (404) and no Markdown pages for agents (0). The parameters page states what each parameter does, with notes on when not to use reg and clufmt, but nothing on when another endpoint fits better (12 of 20). Every parameter has a type, defaults and valid ranges (tlen 0 to 127, dlen 0 to 511, rbb and lbb 1 to 100, up to 25 domains), though reg is called an enum without listing its values (11 of 15). One curl example and annotated JSON and XML response formats; errors appear only as a status string with one example (6 of 15). No API version, changelog or dated release notes, and the quickstart and the parameters page give different hosts (0). 0 + 0 + 12 + 11 + 6 + 0 = 29.

Arcmira 61

OAuth for MCP hosts (the server's source answers a bare request with a 401 naming its protected-resource document, which lists the scopes read, monitors:write, trackers:write and recommendations:read; the README says the host registers itself against api.arcmira.com and its tokens refresh; the docs give sign-in tokens an hour that refresh for 30 days, revoked per host in the dashboard; PKCE and the introspection and revocation endpoints were read on 30 October from api.arcmira.com's metadata, a host this run no longer reads, so they are struck) and arc_sk_ keys sent only as a bearer header, shown once, several per account with a label and last-used time, disabled at once; sign-up keys carry read only and dashboard keys all four scopes, and nothing documents a secret in a query string (30, which the scoped, revocable keys earn on their own). The sign-up key and the OAuth consent give read access by default; arcmira_execute_read reaches GET /v1/* only, arcmira_execute_write adds POST and PATCH under monitors and trackers and never DELETE; programs run in an isolate whose only network is a proxy that adds the credential, so the key never enters the program; spending is bounded by the plan and a dashboard budget no tool can raise, though a read tool call can start a Premium transcription on a paid plan (17 of 20). Every passage and transcript is third-party speech, and the only guidance found is to check the linked source for speaker and classification errors and to re-fetch llms.txt or the skill to confirm an instruction is genuine; no prompt-injection guidance for the model reading results (4 of 15). X-Request-Id and RateLimit headers on every response, GET /v1/me for the account, role, scopes and balance, the keys page showing who made each key and when it was last used, and an account activity log on Enterprise only; no per-call log for the operator below that, while every tool call is recorded in the vendor's analytics (8 of 15). No security.txt on arcmira.com (404 on 2 November; api.arcmira.com and mcp.arcmira.com aren't read, and their 30 October answers are struck), no disclosure policy, bug bounty, SOC 2 or ISO 27001, and the terms forbid probing; the repository enforces signed commits from one identity in CI (2 of 20). 30+17+4+8+2 = 61.

Mojeek Web Search API 15

One key per account, documented only as the api_key query parameter, and rotation or revocation is by email to the API team (a staff reply of 22 October 2026 on the community forum asks for the key's last 8 digits). One all-powerful key (10) less 10 for the key in the URL (0). Search is read-only and there is nothing to write, but no scoped or restricted key (10 of 20). Results are third-party titles and snippets, with no prompt-injection guidance found (0). No audit log or per-call usage view was found in the docs; the FAQ mentions budget alerts on the account (0 of 15). security.txt names security@mojeek.com, with no Expires field. No bug bounty, disclosure policy, SOC 2 or ISO 27001 found; the API page claims compliance with European rules such as the EU Data Act without a certification (5 of 20). 0 + 10 + 0 + 0 + 5 = 15.

Arcmira 55

No x402, MPP or L402 in the OpenAPI file, llms.txt, developers.md, the docs or the pricing page (0). Prices published without a login, in credits per read (4 a passage, mention or list row past the first 5 of a request, 10 a momentum call, 40 a sponsor row, 25 an alert, 4 per started 15 minutes of captions, 300 per started 15 minutes of a Premium transcript) and in dollars (Pro $20 for 20,000 credits, Pro+ $60 for 60,000, Ultra $200 for 400,000, on-demand $0.002 a credit) (20). Free plan with 1,000 credits a month, 2 monitored names and no card, per the pricing FAQ; the 7-day Pro trial needs a card (20). POST /v1/signups with an email and POST /v1/signups/verify with the six-digit code return a read-scoped key with no browser, so an agent with a mailbox can onboard itself; the code still has to be read from an inbox, and write scopes need a dashboard key or OAuth consent (15 of 20). 0+20+20+15 = 55.

Mojeek Web Search API 20

No x402, MPP or L402 (0). Per-request prices published without login, £2 and £3 per 1,000 requests (20). The FAQ says a free credit comes with the Startup plan, but a bank card is required to open an account (0). A person signs up in a browser and adds a card (0). 0 + 20 + 0 + 0 = 20.

Arcmira 91

MCP reading. Four tools whose definitions are short, but arcmira_describe returns a reference the vendor measures at 23,124 characters, loaded once a session, and the server instructions run to 1,995 characters; the vendor's own measurement for the change to code mode was 1,123 tokens of definitions against 8,163 for the earlier ten tools (18 of 25). limit 1 to 20 on search (default 5), cursors and has_more on lists, after and before windows, about, by, kind, channel and entity filters, start and end on transcripts, and program output capped at 12,000 characters, 3,000 per string and 100 per array, so a program returns only the fields an answer needs (20). One error envelope with a stable code, a message, param, gate, unlock.url, details.limit, retry_after_seconds and request_id, surfaced to the model with isError and the call_id to report (20). Idempotency-Key on every POST and PATCH with a replay header, a Premium read that is never charged twice, writes that pause rather than delete, and all four annotations declared on every tool; arcmira_execute_read is marked not read-only because a Premium read can start a transcription that uses credits, which a strict host may treat as a write (18 of 20). Few required inputs (one search string, ids resolved for free), a 90-day default window, defaults on limit, and official Apache-2.0 SDKs for TypeScript (npm arcmira 0.6.2) and Python (pip arcmira, repository v0.6.2) plus a CLI, with the caveat that the MCP client's argument names differ from the HTTP and SDK names (15). 18+20+20+18+15 = 91.

Mojeek Web Search API 66

Responses can be sized with t (up to 10, 40 or 100 results by plan), tlen, dlen and opt-in date and size fields (22 of 25). s for paging, since and before, site, included and excluded domains, region and language boosting and safe search (20). Errors are a free-text status with no documented codes, which an agent can't branch on reliably (5 of 20). Searches only read, so a retry is safe, but no page says whether failed or empty requests are billed (12 of 20). Only q and api_key are required, with recommended values for the boosts. No official SDK in any language (7 of 15). 22 + 20 + 5 + 12 + 7 = 66.

Arcmira 61

Closed service under terms effective 13 October 2026 that name Arcmira, Inc., San Francisco, California law and AAA arbitration; the MCP server's source is public under an all-rights-reserved notice, while the plugin, the TypeScript SDK and CLI and the Python SDK are Apache-2.0, and the Famous rankings are CC BY 4.0 (18 of 30). The privacy policy (effective 2 October 2026) states no retention periods, keeps limited usage and billing records after an account closes, discloses session replay and that private account data isn't used to train general models, and the MCP docs and README disclose that every tool call, including the first 4,000 characters of a program and the agent's intent, is logged to product analytics with credentials redacted and no opt-out; no DPA was found, and the terms' section 7A bars bulk use and model training on Arcmira data (14 of 30). Retirements are dated and typed in the changelog (POST /v1/trackers to 410 tracker_create_retired on 8 October, tool renames answering tool_retired), but the terms allow changes with or without notice, the quickstart says routes arrive without notice and no notice period is stated (8 of 20). The policy names service-provider categories (hosting, payment, analytics, AI processing) and US processing with other locations, and the docs name PostHog, Stripe, Cloudflare and Mintlify, but there is no subprocessor list and no data-location statement beyond the US (8 of 20). 18+14+8+8 = 48.

Mojeek Web Search API 68

Closed service with API terms naming Mojeek Limited under English law (15 of 30). The API page states 90-day retention, zero retention on request, no sub-processors and that Mojeek is the processor and the customer the controller, while the API terms say both parties are independent controllers under GDPR, and the privacy policy of 2 February 2022 covers only the website (12 of 30). The terms promise 30 days' notice of material changes and of price changes, but there is no deprecation policy or dated notices (5 of 20). The API page says there are no sub-processors and infrastructure is owned and run in Europe, in a UK data centre per the about page (18 of 20). 15 + 12 + 5 + 18 = 50.