Axiom MCP Server vs Causely MCP server

Axiom MCP Server 72

Scored as a hosted MCP server. status.axiom.co is an incident.io page with six US and six EU components (API, ingest, querying, alerting, endpoints, app) and uptime per component for August to November 2026, with no MCP component (20). feed.rss holds nine incidents in the 90 days to 3 November 2026, among them elevated query errors in the US from 18:05 to 19:15 UTC on 14 October with missed monitor runs, a metrics ingestion and query disruption on 15 October, elevated query errors after a deployment on 21 October, metrics query error rates on 25 October, query errors and monitor delays on 27 October, metrics ingest on 30 October, EU monitor alerting degraded on 7 October, and console authentication through GitHub degraded on 12 August. US querying shows 99.90 per cent uptime. One incident over an hour on the query path and several shorter ones, so one major (10). Rate limits are published as headers (X-RateLimit-Scope, -Limit, -Remaining, -Reset) and plan limits on the limits page, but the per-minute numbers aren't printed (12). 429 with a message and reset headers, query cost caps that answer 429 with the reset time, and provisioning 429 with backoff guidance; no idempotency keys for the write tools (10). A published SLA of 99.9 per cent monthly uptime for Axiom Cloud with 10 and 25 per cent credits (10). Not marked beta; registry version 1.0.0 (10). 20 + 10 + 12 + 10 + 10 + 10 = 72.

Causely MCP server 12

Graded with the hosted lines, on the remote MCP server at api.causely.app/mcp. No public status page was found. The docs, site and llms.txt link none, and status.causely.ai and status.causely.app didn't answer (0). With no history to read, the incident record scores 5. No rate limit for the MCP server or API is published with numbers (0), and no 429, Retry-After or backoff guidance was found in the full docs corpus (0). The Professional plan promises best-effort response times and Enterprise an "option for custom SLAs" with no figure (0). The server isn't labelled beta and its registry entry is 1.0.1, but the Issues objects behind get_issues and get_issue_details, which the docs call the starting point, are an early access release per v1.0.135 (7 of 10).

Axiom MCP Server 60

No x402, MPP or L402 (0). The pricing page states the platform fee, the free allowances, add-on prices and that usage carries volume discounts, with a calculator rather than a printed per-unit rate (20). The Personal plan is free with no card (20). POST /v2/orgs/provision needs no authentication and returns a working token, so an agent can start without a person, though a person must claim the organisation within 24 hours for it to persist (20). 0 + 20 + 20 + 20 = 60.

Causely MCP server 20

No x402, MPP or L402 (0). Plan prices are public, with Professional at $2,000 a month for up to 500 services, Enterprise on request, with the MCP server included and no per-call price (10). A free 30-day trial starts from a self-serve sign-up page. That page is drawn by script and the host blocked our reader, so whether it asks for a card is unchecked (10 of 20). A person signs up in a browser and installs the Mediator in their own environment before an agent has anything to query (0).

Axiom MCP Server 63

31 tools in the reference, 28 without service map, so the 11-to-30 band with no toolset switch (15). APL queries take their own limits and time ranges, and the REST API documents timestamp pagination; nothing documents page sizes for the list tools (15). 429 bodies state the limit and reset, the REST docs describe error shapes, and a sendFeedback tool reports unclear descriptions to Axiom (12). Reads and writes are labelled in the docs, but delete tools have no confirmation step, no idempotency keys exist for writes, and annotations weren't confirmed (8). One-command setup for 16 clients with OAuth, a setup prompt for agents, and official SDKs in eight languages for the API behind it (13). 15 + 15 + 12 + 8 + 13 = 63.

Causely MCP server 42

46 tools is above the 30 line (5). No toolsets, dynamic loading or read-only subset on the server; the skills choose tools on the client side and the configuration tools refuse callers below the Developer role, but stay loaded, so nothing is added back. Filters by cluster, namespace, entity, label and date, limit on listing tools, summary tools split from detail tools since v1.0.133, up to 20 services per fleet_reliability_delta call and logs grouped by signature with counts. No pagination cursor is documented (15 of 20). Explicit errors when a cluster or namespace matches nothing and a not-found error for an unknown entity ID (v1.0.141), but no documented codes (8 of 20). Most tools read, and set_service_tier and the ignore_issue pair set a state, but annotations couldn't be read and no idempotency guidance exists for create_threshold_configuration (5 of 20). get_symptoms needs no filters and get_alerts matches alert names by substring. No official SDK for the MCP server; the API has a shell client and examples (9 of 15).

Axiom MCP Server 72

Browser OAuth creates a session the agent uses as the signed-in user, listed and revocable under Settings > Profile, and the docs say agents never see tokens; the header route uses a personal access token with full account rights, and the organisation id, not a secret, may go in the URL (26). Query cost limits on roles cap what an OAuth session can spend, scoped API tokens with expiry exist for the REST API, but the MCP server runs with the user's whole role and lists delete tools with no confirmation, and the AI agents page's read-only description contradicts the tools reference (12). Log, trace and event content is untrusted text and no injection guidance was found (2). An audit log on every organisation for 30 days, full history as an add-on, and session listing (12). ISO 27001, SOC 2 Type II, a security.txt on app.axiom.co, a bug bounty policy at axiom.co/security and annual penetration tests (20). 26 + 12 + 2 + 12 + 20 = 72.

Causely MCP server 59

Browser OAuth with PKCE S256 (enforced since v1.0.140), dynamic client registration and refresh tokens, header only. The only scopes are openid profile email, so permissions come from the user's or token's role. Personal and tenant-wide tokens take an expiry and can be deleted; tenant tokens carry a role an Administrator assigns. Client secrets travel in a Basic header, never a URL (24 of 30). The eleven configuration tools need the Developer or Administrator role, and no MCP tool changes infrastructure. No confirmation step is documented, and the Claude plugin README still says all tools are read-only (13 of 20). get_logs, get_alerts and diagnosis evidence return text from the monitored systems. Log excerpts are scrubbed of personal data and secrets before they leave, and since v1.0.140 observed Signals and generated summaries are separate parts of the response, but no injection guidance was found (4 of 15). Admin Portal audit logs cover invitations, role changes, SSO and token events. Per-call MCP visibility is described only in the 22 October release, and the in-product MCP Inspector is early access (7 of 15). SOC 2 per the security page, with the report behind a request form, and a disclosure address with a two-business-day acknowledgement. No security.txt (404 on three hosts), bug bounty or public advisories (11 of 20).

Axiom MCP Server 70

Closed service with clear terms naming Axiom, Inc. (15). A privacy policy with retention by data category, a DPA that names the sub-processor page and US or EU processing, and per-plan retention on the pricing page; the sub-processor list itself renders through a script and the terms carry no date (20). The changelog has a deprecation category and the docs mark the legacy query endpoint, but no notice period is written down (10). US and EU edge deployments are documented and the DPA says data may be processed in either, with the sub-processor list unread (12). 15 + 20 + 10 + 12 = 57.

Causely MCP server 57

The editorial half. A closed hosted service under Terms of Service naming Causely, Inc. and New York law. The website section is dated 5 June 2023 and the Platform Terms & Conditions on the same page are undated. Skills, prompts and client code are Apache-2.0 (17). The security docs say what leaves the customer's environment, what is scrubbed and that customer data never trains shared or foundational models, and the plan states 30 days of retention. The Privacy Policy (7 May 2026) gives no retention periods for the service, no DPA was found, and the security page's "No sensitive data or PII is stored or processed" is stronger than the docs' "filtered out to the extent possible" (15 of 30). No deprecation policy. Tool replacements are dated in the changelog, on the day they shipped (3 of 20). No subprocessor list; the terms mention unnamed vendors and hosting partners, the privacy policy says data is processed in the United States, and a BYOC deployment keeps the backend in the customer's network (6 of 20).