{ "data": { "a": { "slug": "blotato", "name": "Blotato", "vendor": "Blotato Inc.", "vendorUrl": "https://www.blotato.com", "kind": "http-api", "category": "social-media", "summary": "Blotato is a hosted service for publishing and scheduling posts on nine social networks, with analytics on eight and comments and direct messages on Instagram and Facebook. Agents use a REST API or a remote MCP server with 35 tools.", "url": "https://www.anchorterminal.com/tools/blotato", "markdownUrl": "https://www.anchorterminal.com/tools/blotato.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/blotato.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/blotato.json", "dns": "blotato.grade.anchorterminal.com", "repo": "https://github.com/Blotato-Inc/n8n-nodes-blotato", "license": "Proprietary hosted service under Blotato's Terms of Use. The n8n node is MIT", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://backend.blotato.com/v2", "packages": [ { "registry": "npm", "name": "@blotato/n8n-nodes-blotato" } ], "auth": "mixed", "authNotes": "REST takes the account's API key in the `blotato-api-key` header. The MCP server takes OAuth through a browser flow, or the same key as `blotato-api-key` or `Authorization: Bearer`. Access is self-serve on any paid plan. Each account has one key with full access, copied from Settings \u003e API and replaced by regenerating it. No scopes are documented.", "pricing": "paid", "pricingNotes": "Starter $29 a month (20 connected accounts), Creator $97 (40) and Agency $499 (100), each with API and MCP access and no fee per post. No free plan or sandbox. The 7-day trial needs a card and excludes the API and MCP, and generating a key starts the paid Starter plan. AI image and video credits cost $6 per 1,000 beyond the plan allowance (https://www.blotato.com/pricing.md).", "priceSummary": "$29 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the OpenAPI document, llms.txt, the help pages or the pricing rate card (checked 2026-10-08).", "endpoints": [] }, "toolCount": 35, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-05" }, "docsUrl": "https://help.blotato.com", "llmsTxt": "https://help.blotato.com/llms.txt", "openapi": "https://backend.blotato.com/openapi.json", "registryName": "com.blotato/mcp", "capabilities": [ "social.post", "social.schedule", "social.analytics", "social.comments", "social.media-upload" ], "tags": [ "hosted", "mcp", "oauth", "openapi", "llms-txt", "closed-source", "n8n" ], "lastRelease": "2026-08-07", "graded": true, "anchor": { "graded": true, "score": 44.7, "grade": "E", "agentReady": false, "rank": 1263, "ranked": true, "rankOf": 1524, "categoryRank": 13, "methodology": "0.8", "run": "2026-10-01", "scores": { "ergonomics": 57, "maintenance": 30, "payments": 15, "reliability": 42, "schema": 82, "security": 29, "transparency": 47 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-05" }, "negative": 0, "verdict": "One paid account gives an agent a REST API with a public OpenAPI document and an MCP server with 35 tools, with request limits and error codes documented in detail. No status page, changelog, security contact or free API access was found, and each account has a single key with full access.", "bestFor": "A solo builder or small agency that wants an agent to publish to nine networks and answer Instagram and Facebook comments and messages for a flat price.", "strengths": [ "Public OpenAPI 3.0.3 document, linked from the help centre, plus `llms.txt`, a full Markdown export and a Markdown twin of every help page", "Request limits are published per route, such as 30 a minute for creating posts and 60 a minute for status reads", "Errors carry a numeric code, a request ID, a message and a suggested action, and a help page maps each code to a fix", "The MCP server accepts OAuth or the API key in a header and is listed in ChatGPT's plugin directory", "Flat plan prices from $29 a month with API and MCP access on every paid plan and no fee per post" ], "weaknesses": [ "No status page, incident history or SLA was found, and the help pages send users to a third-party outage site", "Each account has one API key with full access. There are no scopes, no read-only key and no team logins", "The 7-day trial needs a card and excludes the API and MCP. Generating a key starts the paid Starter plan at once", "No changelog, deprecation policy, security.txt or disclosure route was found, and the terms allow changes without notice. The MCP tool count changed with no dated note", "The privacy policy gives no retention period or sub-processor list, and the terms take a perpetual, irrevocable licence to user content", "No idempotency key for creating posts, which the help pages state plainly" ], "agentNotes": [ "Call `blotato_list_accounts` or `GET /v2/users/me/accounts` first, and fetch `pageId` or `boardId` before posting to a Facebook Page, LinkedIn company Page or Pinterest", "Keep the `postSubmissionId` and poll the status until `published`, `scheduled` or `failed`. It is a receipt, not proof of publication", "After a timeout on a create call, list existing posts before sending again, because there is no idempotency key", "Do not generate an API key on a trial account unless the owner accepts the Starter charge", "Keep REST bodies and MCP arguments apart. REST nests `post.content` and `post.target`, and the MCP tool takes flat arguments" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 3.8, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "E", "methodology": "0.8", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 44.7 } ], "editorialScores": { "ergonomics": 57, "maintenance": 30, "payments": 15, "reliability": 42, "schema": 82, "security": 29, "transparency": 27 }, "provenanceScore": 67, "checked": { "categories": { "ergonomics": "2026-11-05", "maintenance": "2026-11-05", "payments": "2026-11-05", "reliability": "2026-11-05", "schema": "2026-11-05", "security": "2026-11-05", "transparency": "2026-11-05" }, "last": "2026-11-05", "lastMoved": "2026-11-13", "oldest": "2026-11-05", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl https://backend.blotato.com/v2/users/me/accounts -H \"blotato-api-key: YOUR_API_KEY\"", "claudeCode": "claude mcp add --transport http blotato https://mcp.blotato.com/mcp", "config": { "mcpServers": { "blotato": { "headers": { "blotato-api-key": "YOUR_API_KEY" }, "url": "https://mcp.blotato.com/mcp" } } } }, "letme": { "capability": "https://letme.dev/social.post", "tool": "https://letme.dev/blotato" }, "area": "communication", "unitPrices": [ { "item": "Starter", "unit": "month", "usd": 29, "note": "20 connected accounts, 1,250 credits, API and MCP included" }, { "item": "Creator", "unit": "month", "usd": 97, "note": "40 connected accounts, 5,000 credits" }, { "item": "Agency", "unit": "month", "usd": 499, "note": "100 connected accounts, 28,000 credits" }, { "item": "AI generation credit", "unit": "credit", "usd": 0.006, "note": "$6 per 1,000 extra credits, spent only on AI images and video" } ], "provenance": { "legalEntity": "Blotato Inc.", "domain": "blotato.com", "domainRegistered": "2020-08-08", "endpointOnVendorDomain": true, "terms": "https://www.blotato.com/terms-of-service", "privacy": "https://www.blotato.com/privacy-policy", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-11-05", "notes": [ "The Terms of Use, dated 18 May 2026, name Blotato Inc. and cover the website and hosted applications. No separate API terms or DPA were found.", "The privacy policy names Blotato Inc. at 50 W Broadway Ste 333, PMB 617067, Salt Lake City, Utah. It shows 18 May 2026 at the top and an effective date of 17 October 2024 at the foot.", "No status page was found. status.blotato.com had no DNS record on 5 November 2026 and the help pages link none.", "No changelog was found on the site or in the help centre.", "www.blotato.com/.well-known/security.txt and /security.txt return 404.", "The MCP server's OAuth metadata names an authorisation server on supabase.co, and uploads go to database.blotato.io.", "The AI info page says the company was founded in 2024." ], "score": 67 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/blotato.json", "live": { "slug": "blotato", "probe": { "target": "https://backend.blotato.com/v2", "method": "get", "lastAt": "2026-11-13T23:58:33.913626329Z", "lastOk": true, "lastStatus": 404, "lastMs": 254, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 274, "p95ms24h": 378, "samples24h": 239, "samples30d": 7892, "days": [ { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 256, "ok": 256 }, { "date": "2026-10-19", "probes": 255, "ok": 255 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 252 }, { "date": "2026-10-27", "probes": 249, "ok": 249 }, { "date": "2026-10-28", "probes": 251, "ok": 251 }, { "date": "2026-10-29", "probes": 249, "ok": 249 }, { "date": "2026-10-30", "probes": 248, "ok": 248 }, { "date": "2026-10-31", "probes": 251, "ok": 251 }, { "date": "2026-11-01", "probes": 249, "ok": 249 }, { "date": "2026-11-02", "probes": 250, "ok": 250 }, { "date": "2026-11-03", "probes": 248, "ok": 248 }, { "date": "2026-11-04", "probes": 246, "ok": 246 }, { "date": "2026-11-05", "probes": 185, "ok": 185 }, { "date": "2026-11-06", "probes": 241, "ok": 241 }, { "date": "2026-11-07", "probes": 243, "ok": 243 }, { "date": "2026-11-08", "probes": 243, "ok": 243 }, { "date": "2026-11-09", "probes": 243, "ok": 243 }, { "date": "2026-11-10", "probes": 244, "ok": 244 }, { "date": "2026-11-11", "probes": 244, "ok": 244 }, { "date": "2026-11-12", "probes": 245, "ok": 245 }, { "date": "2026-11-13", "probes": 238, "ok": 238 } ], "since": "2026-10-09T00:00:00Z" }, "versions": [ { "registry": "mcp-registry", "name": "com.blotato/mcp", "version": "1.0.0", "seenAt": "2026-11-13T20:30:05.021626978Z" }, { "registry": "npm", "name": "@blotato/n8n-nodes-blotato", "version": "1.0.10", "seenAt": "2026-11-13T08:20:31.614009571Z" } ], "githubStars": 46, "npmWeekly": 525, "securityTxt": { "url": "https://blotato.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-13T16:16:07.331072179Z" }, "llmsTxt": { "url": "https://help.blotato.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-13T15:53:28.729681351Z" }, "domain": { "domain": "blotato.com", "registered": "2020-08-08", "source": "https://rdap.verisign.com/com/v1/domain/blotato.com", "checkedAt": "2026-11-08T14:55:33.213735596Z" }, "pages": [ { "url": "https://www.blotato.com/pricing.md", "kind": "pricing", "status": 304, "checkedAt": "2026-11-13T18:36:27.634838591Z", "changedAt": "2026-10-21T01:00:09.754224859Z", "fingerprint": "ce0889735553" }, { "url": "https://www.blotato.com/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-13T18:36:29.665797035Z", "changedAt": "2026-11-13T18:36:29.665797035Z", "fingerprint": "30f48135a717" }, { "url": "https://www.blotato.com/terms-of-service", "kind": "terms", "status": 200, "checkedAt": "2026-11-13T18:36:31.987556786Z", "changedAt": "2026-11-13T18:36:31.987556786Z", "fingerprint": "2028c486e42d" } ], "mcpTools": { "url": "https://mcp.blotato.com/mcp", "checkedAt": "2026-11-13T03:08:03.027351587Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-07T01:42:51.891313071Z" }, "github": { "repo": "blotato-inc/n8n-nodes-blotato", "checkedAt": "2026-11-09T10:11:49.607665801Z", "stars": 46, "archived": false, "issuesEnabled": true, "pushedAt": "2026-01-29T21:34:29Z", "openIssues": 4, "openPRs": 0, "issuesOpened90d": 1, "issuesClosed90d": 0, "prsMerged90d": 0, "replies": { "sampled": 11, "unanswered": 4, "medianDays": 6.2 } }, "updatedAt": "2026-11-13T23:58:33.913626329Z" }, "streak": { "days": 36, "from": "2026-10-09", "sinceWatching": true, "best": 36 } }, "answer": "Blotato scores 44.7 (E) on agent readiness against Pamba's 41.2 (E), and leads in 1 of 7 scored categories. Pamba leads on agent ergonomics, security \u0026 auth, payments \u0026 pricing and maintenance \u0026 community.", "b": { "slug": "pamba", "name": "Pamba", "vendor": "Pamba", "vendorUrl": "https://pamba.app", "kind": "http-api", "category": "social-media", "summary": "Pamba makes AI avatar short-form videos and posts them to TikTok, Instagram and Facebook, through an app, a REST API and a remote MCP server. It also sells accounts it runs on its own iPhones, which those platforms forbid.", "url": "https://www.anchorterminal.com/tools/pamba", "markdownUrl": "https://www.anchorterminal.com/tools/pamba.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/pamba.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/pamba.json", "dns": "pamba.grade.anchorterminal.com", "license": "Closed service. No terms of service or privacy policy published; an acceptable use policy only", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://api.pamba.app/mcp", "packages": [], "auth": "oauth", "authNotes": "OAuth 2.1 with PKCE and dynamic client registration on api.pamba.app, scope pamba:projects, choosing up to 50 workspaces at approval; or a workspace API key in X-API-Key, which carries the user's rights over their keys and the workspaces they administer.", "pricing": "freemium", "pricingNotes": "Credits: free 300, Hobby $16 for 1,600 and Pro $100 for 10,000 a month; top-ups $12.50 per 1,000. Managed TikTok or Instagram accounts $100 a month each. Fully managed from $7,500 a month. Per-model credit rates at GET /usage/pricing without auth. Read 11 November 2026.", "priceSummary": "$0.0125 / credit", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in Pamba's pricing, API or MCP pages, 11 November 2026. Billing is through Stripe.", "endpoints": [] }, "toolCount": 407, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-11" }, "docsUrl": "https://pamba.app/help/mcp-server", "llmsTxt": "https://pamba.app/llms.txt", "capabilities": [ "social.post", "social.schedule", "social.analytics", "social.comments", "social.media-upload", "video.generate" ], "tags": [ "hosted", "mcp", "oauth", "llms-txt", "closed-source", "freemium", "usage-priced", "tiktok", "instagram", "no-status-page", "platform-rules" ], "lastRelease": "2026-11-11", "graded": true, "anchor": { "graded": true, "score": 41.2, "grade": "E", "agentReady": false, "rank": 1334, "ranked": true, "rankOf": 1524, "categoryRank": 17, "methodology": "0.8", "run": "2026-10-01", "scores": { "ergonomics": 75, "maintenance": 70, "payments": 53, "reliability": 45, "schema": 84, "security": 35, "transparency": 28 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-11" }, "negative": -15, "warnings": [ { "kind": "platform-rules", "name": "Breaks the rules of the platforms it acts on", "text": "Pamba sells TikTok and Instagram accounts it creates on its own iPhones and warms so each 'reads as a real person', pitches running 'hundreds of accounts' and replaces banned ones. TikTok's guidelines and Instagram's terms forbid that.", "deduct": -15, "since": "2026-11-11", "sources": [ "https://pamba.app/accounts", "https://pamba.app/help/account-warming", "https://www.tiktok.com/community-guidelines/en/integrity-authenticity/", "https://help.instagram.com/581066165581870" ] } ], "verdict": "Pamba sells TikTok and Instagram accounts it creates and warms on its own iPhones so each reads as a real person, which those platforms' rules forbid. Its MCP server and API are well documented and drive that too. No terms of service or privacy policy is published.", "bestFor": "Not recommended for the managed accounts. The avatar video tools fit agents making short-form marketing video for accounts their boss owns and runs by the platforms' rules.", "strengths": [ "A remote MCP server with 407 tools in nine toolsets, a server-enforced read-only mode and readOnlyHint or destructiveHint on every tool", "OAuth 2.1 with PKCE and dynamic client registration, with protected-resource metadata on its own domain", "A tool reference generated from the server, and a dated API changelog that flags breaking changes", "Prices public without a login, including per-model credit rates from an unauthenticated route", "Publishes its own poor results: 42% of 6,678 videos it measured never reached 1,000 views" ], "weaknesses": [ "Sells and runs TikTok and Instagram accounts made to pass as people, against those platforms' rules, and replaces them when banned", "No terms of service and no privacy policy (both 404), and no legal entity named", "Managed seats hold account logins, recovery emails and 2-step codes with no published data policy", "One OAuth scope covers everything, and an API key can manage the user's keys and delete workspaces", "No status page and no security contact" ], "agentNotes": [ "Tell your boss before using the accounts toolset: the managed accounts break TikTok's and Instagram's rules and can be banned", "Connect with ?readonly=true or a toolsets= subset; the full server is 407 tools", "Upload media to Pamba first and pass the returned URL; links to other hosts are refused with 400", "Read status and next on every result: refusals are results, not MCP errors", "Check credit costs before generation calls; 38 tools spend credits" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "E", "methodology": "0.8", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 41.2 } ], "editorialScores": { "ergonomics": 75, "maintenance": 70, "payments": 53, "reliability": 45, "schema": 84, "security": 35, "transparency": 18 }, "provenanceScore": 37, "checked": { "categories": { "ergonomics": "2026-11-11", "maintenance": "2026-11-11", "payments": "2026-11-11", "reliability": "2026-11-11", "schema": "2026-11-11", "security": "2026-11-11", "transparency": "2026-11-11" }, "last": "2026-11-11", "lastMoved": "2026-11-13", "oldest": "2026-11-11", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl https://api.pamba.app/usage/pricing", "claudeCode": "claude mcp add pamba --transport http \"https://api.pamba.app/mcp?readonly=true\"", "config": { "mcpServers": { "pamba": { "url": "https://api.pamba.app/mcp?readonly=true" } } } }, "letme": { "capability": "https://letme.dev/social.post", "tool": "https://letme.dev/pamba" }, "area": "communication", "unitPrices": [ { "item": "Managed TikTok or Instagram account", "unit": "account-month", "usd": 100, "note": "Per account; no credits needed" }, { "item": "Credits top-up", "unit": "credit", "usd": 0.0125, "note": "$12.50 per 1,000; plans work out at $10 per 1,000" } ], "provenance": { "legalEntity": "", "domain": "pamba.app", "domainRegistered": "2025-06-05", "endpointOnVendorDomain": true, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://pamba.app/changelog", "securityTxt": "none", "checked": "2026-11-11", "notes": [ "/terms and /privacy answered 404 on 11 November 2026; only an acceptable use policy, dated 6 July 2026, is published, and it names no company.", "RDAP gives pamba.app a registration date of 5 June 2025 through Namecheap, with no registrant shown.", "robots.txt on pamba.app allows ClaudeBot on public pages and disallows app paths; api.pamba.app has no robots.txt (404).", "No entry in the official MCP registry for 'pamba' on 11 November 2026." ], "score": 37 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/pamba.json", "live": { "slug": "pamba", "probe": { "target": "https://api.pamba.app/mcp", "method": "get", "lastAt": "2026-11-13T23:58:54.025134635Z", "lastOk": true, "lastStatus": 401, "lastMs": 248, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 299, "p95ms24h": 391, "samples24h": 239, "samples30d": 319, "days": [ { "date": "2026-11-12", "probes": 81, "ok": 81 }, { "date": "2026-11-13", "probes": 238, "ok": 238 } ], "since": "2026-11-12T16:06:25.231802453Z" }, "securityTxt": { "url": "https://pamba.app/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-13T16:15:01.559101993Z" }, "llmsTxt": { "url": "https://pamba.app/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-13T15:55:36.94769184Z" }, "pages": [ { "url": "https://pamba.app/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-11-13T18:26:24.542486652Z", "changedAt": "2026-11-13T18:26:24.542486652Z", "fingerprint": "a0b9ef3713fa" } ], "mcpTools": { "url": "https://api.pamba.app/mcp?readonly=true", "checkedAt": "2026-11-13T03:13:09.042103119Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-13T03:13:09.042103119Z" }, "updatedAt": "2026-11-13T23:58:54.025134635Z" }, "streak": { "days": 2, "from": "2026-11-12", "sinceWatching": true, "best": 2 } }, "edges": [ { "by": 40, "category": "maintenance", "leads": "pamba", "name": "Maintenance \u0026 community", "reasons": { "a": "No changelog, release notes or versioned package release in the 90 days. The newest dated change to the API is the comments and messaging API post of 7 August 2026, 90 days before this check (20). The 8 October recency rested on the official MCP registry entry of 10 September, read from the registry's JSON API, which this run doesn't use, so it is struck. The site `llms.txt` (updated 20 October) and the 4 November post on the ChatGPT plugin directory record no change to the API or its tools. Only one dated change falls in the 90 days from 7 August, so the line scores 0. Support is in-app chat and email, weekly office hours have ended, and no public issue tracker for the API was read (6). The registry entry `com.blotato/mcp` couldn't be read on a registry page, and there is no SDK (0). The n8n node `@blotato/n8n-nodes-blotato` 1.0.10 dates from 29 January 2026, per its repository's last commit (4). Total 30.", "b": "Closed service. The changelog has entries on 9, 10 and 11 November 2026 (30). Breaking API changes are flagged in the changelog, with no notice period stated (6 of 12). Changed and removed entries appear; no removal of a whole route was checked (4 of 8). Dated changelog with an Atom feed (15). Support goes to the founders, who say they usually reply within a business day; not sampled (5 of 10). No SDK; MCP and REST only (5 of 15). Runtimes not applicable; nothing to install (5 of 10). 30 + 6 + 4 + 15 + 5 + 5 + 5 = 70." }, "scores": { "a": 30, "b": 70 } }, { "by": 38, "category": "payments", "leads": "pamba", "name": "Payments \u0026 pricing", "reasons": { "a": "No x402, MPP or L402 (0). Plan prices are public without a login at $29, $97 and $499 a month, and extra credits cost $6 per 1,000. The API has no price per call, so this is plan pricing (10). The 7-day trial needs a card and excludes the API and MCP, and generating a key starts the paid plan (0). A person signs up in a browser and copies the key from settings (0). Re-scored on 13 November 2026 for the new payments rubric (protocol 10, the other three lines 30 each): 10 is 15.", "b": "No x402, MPP or L402 (0). Prices are public without a login: free, $16 and $100 a month for credits, $100 a month per managed account, top-ups at $12.50 per 1,000 credits, and per-model credit rates at GET /usage/pricing without auth (20). A free plan of 300 credits; whether it needs a card isn't stated (15 of 20). A person signs up in a browser before a key or an OAuth approval (0). 0 + 20 + 15 + 0 = 35. Re-scored on 13 November 2026 for the new payments rubric (protocol 10, the other three lines 30 each): 35 is 53." }, "scores": { "a": 15, "b": 53 } }, { "by": 19, "category": "transparency", "leads": "blotato", "name": "Transparency \u0026 trust", "reasons": { "a": "Closed service under Terms of Use dated 18 May 2026 that name Blotato Inc. and Utah law. The terms take a perpetual, irrevocable, sub-licensable licence to user content (15). The privacy policy names Blotato Inc. with a Salt Lake City address and says data from third-party APIs is not used to train general models. It gives no retention period, repeats sections 8 to 15 of the terms inside it, and shows both 18 May 2026 and an effective date of 17 October 2024. No DPA was found (8). No deprecation policy, and the terms allow changes or discontinuation with or without notice (0). The help pages name Stripe for payments and ElevenLabs for voices, and the policy says the company is based in the United States. No sub-processor list or data locations were found (4).", "b": "Closed service with no terms of service: /terms answered 404, and only an acceptable use policy (dated 6 July 2026) is published, with no legal entity named anywhere read (5 of 30). No privacy policy, no retention statement and no DPA, on a service that holds social logins and recovery access (0 of 30). The changelog dates deprecations and removals; no policy (10 of 20). The team says it's in San Francisco and posts from iPhones with US SIM cards; where data is processed and who processes it isn't stated (3 of 20). 5 + 0 + 10 + 3 = 18. It does publish its own results, including that 42% of 6,678 videos it measured never reached 1,000 views." }, "scores": { "a": 47, "b": 28 } }, { "by": 18, "category": "ergonomics", "leads": "pamba", "name": "Agent ergonomics", "reasons": { "a": "35 MCP tools (36 on 8 October) with no toolsets or read-only subset found. REST and MCP lists take a `limit` with a default of 50 and a maximum of 250, with no field selection (8). Cursor pagination with `since`, `until`, `status` and `platform` filters on posts (20). Errors carry `code`, `reqId`, `message`, `action` and `details`, and the error reference gives a fix for each code (17). No idempotency key. DM automations start as inactive drafts, and MCP tool annotations were not read (5). `blotato_create_post` needs three arguments. There are official n8n and Make nodes and no SDK in any language (7).", "b": "Read on the MCP server. 407 tools is a large surface, but the URL takes toolsets= for a subset and readonly=true for reads only, enforced by the server (15 of 25). Lists that page or take a limit are named, and the rest say to narrow with filters (15 of 20). Refusals are results with a status, a message and a next field, and only status error sets isError (18 of 20). Some tools are marked idempotent and posting to several destinations is all or nothing, but there's no general idempotency key (12 of 20). Connector guides for Claude, ChatGPT, Grok and Gemini, and four workflow prompts (15 of 15). 15 + 15 + 18 + 12 + 15 = 75." }, "scores": { "a": 57, "b": 75 } }, { "by": 6, "category": "security", "leads": "pamba", "name": "Security \u0026 auth", "reasons": { "a": "The MCP server takes OAuth through a browser flow, and its protected-resource metadata names a Supabase authorisation server. No scopes are documented. REST takes one key per account in a header, with full access, revoked only by regenerating it (15). No read-only key, scope or approval step enforced by the server. The help pages tell agents to get the user's approval before activating an automation or sending, and automations start as drafts (5). Tools return comments and direct messages from strangers and text extracted from URLs, and no injection guidance was found (0). A Logs page in the dashboard shows each request's payload, response and error, and responses carry a request ID. Team access means sharing the owner's login code, which the help page says leaves no audit trail (9). No security.txt, disclosure route, bug bounty or certification was found (0). Automation webhooks reject private and loopback addresses, which is noted and not scored.", "b": "OAuth 2.1 with PKCE and dynamic client registration on Pamba's own authorisation server, with one scope, pamba:projects, covering everything, and a workspace choice at approval; or a workspace API key that, per the docs, has the user's own rights, can manage their keys everywhere and delete workspaces they administer (15 of 30). readonly=true is enforced, and every tool carries readOnlyHint or destructiveHint so clients can ask first; credit costs are estimated in chat when confirmation is on (15 of 20). Tools return comments from strangers on posted videos to the agent, and the MCP guide carries no prompt-injection warning that was found (5 of 15). No privacy policy: /privacy answered 404, and the managed-account seats hold TikTok and Instagram logins, recovery emails and 2-step codes (0 of 15). No security.txt (404) and no disclosure programme found (0 of 20). 15 + 15 + 5 + 0 + 0 = 35." }, "scores": { "a": 29, "b": 35 } } ], "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Blotato Inc.", "b": "Pamba", "name": "Vendor" }, { "a": "https://backend.blotato.com/v2", "b": "https://api.pamba.app/mcp", "name": "Hosted endpoint" }, { "a": "HTTP, Streamable HTTP", "b": "HTTP, Streamable HTTP", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth", "name": "Auth" }, { "a": "Paid", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Proprietary hosted service under Blotato's Terms of Use. The n8n node is MIT", "b": "Closed service. No terms of service or privacy policy published; an acceptable use policy only", "name": "Licence" }, { "a": "35", "b": "407", "name": "Tools exposed" }, { "a": "no", "b": "yes", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "com.blotato/mcp", "b": "not listed", "name": "MCP registry" }, { "a": "2026-08-07", "b": "2026-11-11", "name": "Last release" }, { "a": "2026-05-18", "b": "no document linked", "name": "Terms last updated" }, { "a": "2026-05-18", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not read yet", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "not read yet", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "not read yet", "name": "Terms restrict benchmarking" }, { "a": "yes", "b": "not read yet", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "not read yet", "name": "Arbitration or class-action waiver" }, { "a": "3.8/5 (4)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "Blotato scores 44.7 (E) on agent readiness against Pamba's 41.2 (E), and leads in 1 of 7 scored categories. Pamba leads on agent ergonomics, security \u0026 auth, payments \u0026 pricing and maintenance \u0026 community.", "question": "Which is better for AI agents, Blotato or Pamba?" }, { "answer": "Blotato takes an API key or an OAuth sign-in. Pamba uses an OAuth sign-in.", "question": "Do Blotato and Pamba need an API key?" }, { "answer": "Yes. Blotato has a hosted endpoint at https://backend.blotato.com/v2 and Pamba at https://api.pamba.app/mcp.", "question": "Can an agent call Blotato and Pamba without installing anything?" } ], "goodFor": [ { "aheadOn": [ "Transparency \u0026 trust, 47 against 28" ], "also": [ "No incidents deducted, where Pamba loses 15 points for them" ], "goodFor": "A solo builder or small agency that wants an agent to publish to nine networks and answer Instagram and Facebook comments and messages for a flat price.", "slug": "blotato", "watchFor": "No status page, incident history or SLA was found, and the help pages send users to a third-party outage site" }, { "aheadOn": [ "Agent ergonomics, 75 against 57", "Security \u0026 auth, 35 against 29", "Payments \u0026 pricing, 53 against 15", "Maintenance \u0026 community, 70 against 30" ], "also": null, "goodFor": "Not recommended for the managed accounts. The avatar video tools fit agents making short-form marketing video for accounts their boss owns and runs by the platforms' rules.", "slug": "pamba", "watchFor": "Sells and runs TikTok and Instagram accounts made to pass as people, against those platforms' rules, and replaces them when banned" } ], "history": { "blotato": [ { "causes": [ "method" ], "date": "2026-11-13", "delta": 0.6, "from": 44.1, "fromGrade": "E", "to": 44.7, "toGrade": "E" }, { "causes": [ "correction" ], "date": "2026-11-05", "delta": -2.2, "from": 46.3, "fromGrade": "D", "to": 44.1, "toGrade": "E" }, { "causes": [ "method" ], "date": "2026-10-27", "delta": 0.2, "from": 46.1, "fromGrade": "D", "to": 46.3, "toGrade": "D" } ], "pamba": [ { "causes": [ "method" ], "date": "2026-11-13", "delta": 2.3, "from": 38.9, "fromGrade": "E", "to": 41.2, "toGrade": "E" }, { "causes": [ "method" ], "date": "2026-11-13", "delta": -5, "from": 43.9, "fromGrade": "E", "to": 38.9, "toGrade": "E" } ] }, "job": { "capability": "social.post", "name": "Social posting" }, "others": [ { "json": "https://www.anchorterminal.com/compare/ayrshare-vs-blotato.json", "title": "Ayrshare API + MCP vs Blotato", "url": "https://www.anchorterminal.com/compare/ayrshare-vs-blotato" }, { "json": "https://www.anchorterminal.com/compare/ayrshare-vs-pamba.json", "title": "Ayrshare API + MCP vs Pamba", "url": "https://www.anchorterminal.com/compare/ayrshare-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/blotato-vs-buffer.json", "title": "Blotato vs Buffer API + MCP", "url": "https://www.anchorterminal.com/compare/blotato-vs-buffer" }, { "json": "https://www.anchorterminal.com/compare/blotato-vs-bundle-social.json", "title": "Blotato vs bundle.social", "url": "https://www.anchorterminal.com/compare/blotato-vs-bundle-social" }, { "json": "https://www.anchorterminal.com/compare/blotato-vs-late.json", "title": "Blotato vs Zernio (formerly Late) API + MCP", "url": "https://www.anchorterminal.com/compare/blotato-vs-late" }, { "json": "https://www.anchorterminal.com/compare/blotato-vs-metricool.json", "title": "Blotato vs Metricool API + MCP", "url": "https://www.anchorterminal.com/compare/blotato-vs-metricool" }, { "json": "https://www.anchorterminal.com/compare/blotato-vs-mixpost.json", "title": "Blotato vs Mixpost API + MCP", "url": "https://www.anchorterminal.com/compare/blotato-vs-mixpost" }, { "json": "https://www.anchorterminal.com/compare/blotato-vs-oneup.json", "title": "Blotato vs OneUp API + MCP", "url": "https://www.anchorterminal.com/compare/blotato-vs-oneup" }, { "json": "https://www.anchorterminal.com/compare/blotato-vs-post-bridge.json", "title": "Blotato vs Post Bridge API + MCP", "url": "https://www.anchorterminal.com/compare/blotato-vs-post-bridge" }, { "json": "https://www.anchorterminal.com/compare/blotato-vs-postiz.json", "title": "Blotato vs Postiz API + MCP", "url": "https://www.anchorterminal.com/compare/blotato-vs-postiz" }, { "json": "https://www.anchorterminal.com/compare/blotato-vs-publer.json", "title": "Blotato vs Publer API + MCP", "url": "https://www.anchorterminal.com/compare/blotato-vs-publer" }, { "json": "https://www.anchorterminal.com/compare/blotato-vs-repostit.json", "title": "Blotato vs Repostit", "url": "https://www.anchorterminal.com/compare/blotato-vs-repostit" }, { "json": "https://www.anchorterminal.com/compare/blotato-vs-typefully.json", "title": "Blotato vs Typefully", "url": "https://www.anchorterminal.com/compare/blotato-vs-typefully" }, { "json": "https://www.anchorterminal.com/compare/blotato-vs-upload-post.json", "title": "Blotato vs Upload-Post API + MCP", "url": "https://www.anchorterminal.com/compare/blotato-vs-upload-post" }, { "json": "https://www.anchorterminal.com/compare/buffer-vs-pamba.json", "title": "Buffer API + MCP vs Pamba", "url": "https://www.anchorterminal.com/compare/buffer-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-pamba.json", "title": "bundle.social vs Pamba", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/late-vs-pamba.json", "title": "Zernio (formerly Late) API + MCP vs Pamba", "url": "https://www.anchorterminal.com/compare/late-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/metricool-vs-pamba.json", "title": "Metricool API + MCP vs Pamba", "url": "https://www.anchorterminal.com/compare/metricool-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/mixpost-vs-pamba.json", "title": "Mixpost API + MCP vs Pamba", "url": "https://www.anchorterminal.com/compare/mixpost-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/oneup-vs-pamba.json", "title": "OneUp API + MCP vs Pamba", "url": "https://www.anchorterminal.com/compare/oneup-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-post-bridge.json", "title": "Pamba vs Post Bridge API + MCP", "url": "https://www.anchorterminal.com/compare/pamba-vs-post-bridge" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-postiz.json", "title": "Pamba vs Postiz API + MCP", "url": "https://www.anchorterminal.com/compare/pamba-vs-postiz" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-publer.json", "title": "Pamba vs Publer API + MCP", "url": "https://www.anchorterminal.com/compare/pamba-vs-publer" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-repostit.json", "title": "Pamba vs Repostit", "url": "https://www.anchorterminal.com/compare/pamba-vs-repostit" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-typefully.json", "title": "Pamba vs Typefully", "url": "https://www.anchorterminal.com/compare/pamba-vs-typefully" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-upload-post.json", "title": "Pamba vs Upload-Post API + MCP", "url": "https://www.anchorterminal.com/compare/pamba-vs-upload-post" }, { "json": "https://www.anchorterminal.com/compare/blotato-vs-sprout-social.json", "title": "Blotato vs Sprout Social API", "url": "https://www.anchorterminal.com/compare/blotato-vs-sprout-social" }, { "json": "https://www.anchorterminal.com/compare/blotato-vs-twitterapi-io-mcp.json", "title": "Blotato vs TwitterAPI.io MCP", "url": "https://www.anchorterminal.com/compare/blotato-vs-twitterapi-io-mcp" }, { "json": "https://www.anchorterminal.com/compare/blotato-vs-x-mcp.json", "title": "Blotato vs X MCP", "url": "https://www.anchorterminal.com/compare/blotato-vs-x-mcp" }, { "json": "https://www.anchorterminal.com/compare/blotato-vs-xpoz-mcp.json", "title": "Blotato vs Xpoz MCP", "url": "https://www.anchorterminal.com/compare/blotato-vs-xpoz-mcp" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-sprout-social.json", "title": "Pamba vs Sprout Social API", "url": "https://www.anchorterminal.com/compare/pamba-vs-sprout-social" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-twitterapi-io-mcp.json", "title": "Pamba vs TwitterAPI.io MCP", "url": "https://www.anchorterminal.com/compare/pamba-vs-twitterapi-io-mcp" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-x-mcp.json", "title": "Pamba vs X MCP", "url": "https://www.anchorterminal.com/compare/pamba-vs-x-mcp" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-xpoz-mcp.json", "title": "Pamba vs Xpoz MCP", "url": "https://www.anchorterminal.com/compare/pamba-vs-xpoz-mcp" }, { "json": "https://www.anchorterminal.com/compare/blotato-vs-socialcannon.json", "title": "Blotato vs SocialCannon", "url": "https://www.anchorterminal.com/compare/blotato-vs-socialcannon" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-socialcannon.json", "title": "Pamba vs SocialCannon", "url": "https://www.anchorterminal.com/compare/pamba-vs-socialcannon" } ], "panel": null, "scores": [ { "blotato": 42, "by": 3, "edge": "pamba", "key": "reliability", "name": "Reliability", "pamba": 45, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "blotato": 82, "by": 2, "edge": "pamba", "key": "schema", "name": "Schema \u0026 documentation", "pamba": 84, "weight": 13 }, { "blotato": 57, "by": 18, "edge": "pamba", "key": "ergonomics", "name": "Agent ergonomics", "pamba": 75, "weight": 13 }, { "blotato": 29, "by": 6, "edge": "pamba", "key": "security", "name": "Security \u0026 auth", "pamba": 35, "weight": 14 }, { "blotato": 15, "by": 38, "edge": "pamba", "key": "payments", "name": "Payments \u0026 pricing", "pamba": 53, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "blotato": 30, "by": 40, "edge": "pamba", "key": "maintenance", "name": "Maintenance \u0026 community", "pamba": 70, "weight": 7 }, { "blotato": 47, "by": 19, "edge": "blotato", "key": "transparency", "name": "Transparency \u0026 trust", "pamba": 28, "weight": 7 } ], "summary": "Blotato scores 44.7 (E) on agent readiness against Pamba's 41.2 (E), and leads in 1 of 7 scored categories. Pamba leads on agent ergonomics, security \u0026 auth, payments \u0026 pricing and maintenance \u0026 community. Both do social posting.", "tasks": null, "tutorials": [], "verdicts": { "blotato": "One paid account gives an agent a REST API with a public OpenAPI document and an MCP server with 35 tools, with request limits and error codes documented in detail. No status page, changelog, security contact or free API access was found, and each account has a single key with full access.", "pamba": "Pamba sells TikTok and Instagram accounts it creates and warms on its own iPhones so each reads as a real person, which those platforms' rules forbid. Its MCP server and API are well documented and drive that too. No terms of service or privacy policy is published." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/blotato-vs-pamba", "json": "https://www.anchorterminal.com/compare/blotato-vs-pamba.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/blotato-vs-pamba.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/blotato-vs-pamba.min.md" }, "markdown": "Blotato scores 44.7 (E) on agent readiness against Pamba's 41.2 (E), and leads in 1 of 7 scored categories. Pamba leads on agent ergonomics, security \u0026 auth, payments \u0026 pricing and maintenance \u0026 community. Both do social posting.\n\n- Blotato: grade E, 44.7/100, rank #1263 of 1524. Markdown https://www.anchorterminal.com/tools/blotato.md · JSON https://www.anchorterminal.com/api/v1/tools/blotato.json\n- Pamba: grade E, 41.2/100, rank #1334 of 1524. Markdown https://www.anchorterminal.com/tools/pamba.md · JSON https://www.anchorterminal.com/api/v1/tools/pamba.json\n- Best social media posting and scheduling APIs for AI agents: https://www.anchorterminal.com/best/social-media/index.md\n- All 182 social comparisons: https://www.anchorterminal.com/compare/social-media/index.md\n\n## Which one, for what\n\n### Blotato (E)\n\nGood for: A solo builder or small agency that wants an agent to publish to nine networks and answer Instagram and Facebook comments and messages for a flat price.\n\nAhead on:\n- Transparency \u0026 trust, 47 against 28\n\nAlso in its favour:\n- No incidents deducted, where Pamba loses 15 points for them\n\nWatch for: No status page, incident history or SLA was found, and the help pages send users to a third-party outage site\n\n### Pamba (E)\n\nGood for: Not recommended for the managed accounts. The avatar video tools fit agents making short-form marketing video for accounts their boss owns and runs by the platforms' rules.\n\nAhead on:\n- Agent ergonomics, 75 against 57\n- Security \u0026 auth, 35 against 29\n- Payments \u0026 pricing, 53 against 15\n- Maintenance \u0026 community, 70 against 30\n\nWatch for: Sells and runs TikTok and Instagram accounts made to pass as people, against those platforms' rules, and replaces them when banned\n\n\n## Why the edge\n\n### Maintenance \u0026 community: Pamba +40\n\n- Blotato (30): No changelog, release notes or versioned package release in the 90 days. The newest dated change to the API is the comments and messaging API post of 7 August 2026, 90 days before this check (20). The 8 October recency rested on the official MCP registry entry of 10 September, read from the registry's JSON API, which this run doesn't use, so it is struck. The site `llms.txt` (updated 20 October) and the 4 November post on the ChatGPT plugin directory record no change to the API or its tools. Only one dated change falls in the 90 days from 7 August, so the line scores 0. Support is in-app chat and email, weekly office hours have ended, and no public issue tracker for the API was read (6). The registry entry `com.blotato/mcp` couldn't be read on a registry page, and there is no SDK (0). The n8n node `@blotato/n8n-nodes-blotato` 1.0.10 dates from 29 January 2026, per its repository's last commit (4). Total 30.\n- Pamba (70): Closed service. The changelog has entries on 9, 10 and 11 November 2026 (30). Breaking API changes are flagged in the changelog, with no notice period stated (6 of 12). Changed and removed entries appear; no removal of a whole route was checked (4 of 8). Dated changelog with an Atom feed (15). Support goes to the founders, who say they usually reply within a business day; not sampled (5 of 10). No SDK; MCP and REST only (5 of 15). Runtimes not applicable; nothing to install (5 of 10). 30 + 6 + 4 + 15 + 5 + 5 + 5 = 70.\n\n### Payments \u0026 pricing: Pamba +38\n\n- Blotato (15): No x402, MPP or L402 (0). Plan prices are public without a login at $29, $97 and $499 a month, and extra credits cost $6 per 1,000. The API has no price per call, so this is plan pricing (10). The 7-day trial needs a card and excludes the API and MCP, and generating a key starts the paid plan (0). A person signs up in a browser and copies the key from settings (0). Re-scored on 13 November 2026 for the new payments rubric (protocol 10, the other three lines 30 each): 10 is 15.\n- Pamba (53): No x402, MPP or L402 (0). Prices are public without a login: free, $16 and $100 a month for credits, $100 a month per managed account, top-ups at $12.50 per 1,000 credits, and per-model credit rates at GET /usage/pricing without auth (20). A free plan of 300 credits; whether it needs a card isn't stated (15 of 20). A person signs up in a browser before a key or an OAuth approval (0). 0 + 20 + 15 + 0 = 35. Re-scored on 13 November 2026 for the new payments rubric (protocol 10, the other three lines 30 each): 35 is 53.\n\n### Transparency \u0026 trust: Blotato +19\n\n- Blotato (47): Closed service under Terms of Use dated 18 May 2026 that name Blotato Inc. and Utah law. The terms take a perpetual, irrevocable, sub-licensable licence to user content (15). The privacy policy names Blotato Inc. with a Salt Lake City address and says data from third-party APIs is not used to train general models. It gives no retention period, repeats sections 8 to 15 of the terms inside it, and shows both 18 May 2026 and an effective date of 17 October 2024. No DPA was found (8). No deprecation policy, and the terms allow changes or discontinuation with or without notice (0). The help pages name Stripe for payments and ElevenLabs for voices, and the policy says the company is based in the United States. No sub-processor list or data locations were found (4).\n- Pamba (28): Closed service with no terms of service: /terms answered 404, and only an acceptable use policy (dated 6 July 2026) is published, with no legal entity named anywhere read (5 of 30). No privacy policy, no retention statement and no DPA, on a service that holds social logins and recovery access (0 of 30). The changelog dates deprecations and removals; no policy (10 of 20). The team says it's in San Francisco and posts from iPhones with US SIM cards; where data is processed and who processes it isn't stated (3 of 20). 5 + 0 + 10 + 3 = 18. It does publish its own results, including that 42% of 6,678 videos it measured never reached 1,000 views.\n\n### Agent ergonomics: Pamba +18\n\n- Blotato (57): 35 MCP tools (36 on 8 October) with no toolsets or read-only subset found. REST and MCP lists take a `limit` with a default of 50 and a maximum of 250, with no field selection (8). Cursor pagination with `since`, `until`, `status` and `platform` filters on posts (20). Errors carry `code`, `reqId`, `message`, `action` and `details`, and the error reference gives a fix for each code (17). No idempotency key. DM automations start as inactive drafts, and MCP tool annotations were not read (5). `blotato_create_post` needs three arguments. There are official n8n and Make nodes and no SDK in any language (7).\n- Pamba (75): Read on the MCP server. 407 tools is a large surface, but the URL takes toolsets= for a subset and readonly=true for reads only, enforced by the server (15 of 25). Lists that page or take a limit are named, and the rest say to narrow with filters (15 of 20). Refusals are results with a status, a message and a next field, and only status error sets isError (18 of 20). Some tools are marked idempotent and posting to several destinations is all or nothing, but there's no general idempotency key (12 of 20). Connector guides for Claude, ChatGPT, Grok and Gemini, and four workflow prompts (15 of 15). 15 + 15 + 18 + 12 + 15 = 75.\n\n### Security \u0026 auth: Pamba +6\n\n- Blotato (29): The MCP server takes OAuth through a browser flow, and its protected-resource metadata names a Supabase authorisation server. No scopes are documented. REST takes one key per account in a header, with full access, revoked only by regenerating it (15). No read-only key, scope or approval step enforced by the server. The help pages tell agents to get the user's approval before activating an automation or sending, and automations start as drafts (5). Tools return comments and direct messages from strangers and text extracted from URLs, and no injection guidance was found (0). A Logs page in the dashboard shows each request's payload, response and error, and responses carry a request ID. Team access means sharing the owner's login code, which the help page says leaves no audit trail (9). No security.txt, disclosure route, bug bounty or certification was found (0). Automation webhooks reject private and loopback addresses, which is noted and not scored.\n- Pamba (35): OAuth 2.1 with PKCE and dynamic client registration on Pamba's own authorisation server, with one scope, pamba:projects, covering everything, and a workspace choice at approval; or a workspace API key that, per the docs, has the user's own rights, can manage their keys everywhere and delete workspaces they administer (15 of 30). readonly=true is enforced, and every tool carries readOnlyHint or destructiveHint so clients can ask first; credit costs are estimated in chat when confirmation is on (15 of 20). Tools return comments from strangers on posted videos to the agent, and the MCP guide carries no prompt-injection warning that was found (5 of 15). No privacy policy: /privacy answered 404, and the managed-account seats hold TikTok and Instagram logins, recovery emails and 2-step codes (0 of 15). No security.txt (404) and no disclosure programme found (0 of 20). 15 + 15 + 5 + 0 + 0 = 35.\n\n## Score by category\n\n| Category | Weight | Blotato | Pamba | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 42 | 45 | Pamba +3 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 82 | 84 | Pamba +2 |\n| Agent ergonomics | 13% (16.2 this run) | 57 | 75 | Pamba +18 |\n| Security \u0026 auth | 14% (17.5 this run) | 29 | 35 | Pamba +6 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 15 | 53 | Pamba +38 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 30 | 70 | Pamba +40 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 47 | 28 | Blotato +19 |\n| Negative events | ≤15 | 0 | -15 | |\n| **Total** | | **44.7 · E** | **41.2 · E** | |\n\n## Facts side by side\n\n| Fact | Blotato | Pamba |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Blotato Inc. | Pamba |\n| Hosted endpoint | `https://backend.blotato.com/v2` | `https://api.pamba.app/mcp` |\n| Transports | HTTP, Streamable HTTP | HTTP, Streamable HTTP |\n| Auth | OAuth or key | OAuth |\n| Pricing | Paid | Freemium |\n| x402 | no | no |\n| Licence | Proprietary hosted service under Blotato's Terms of Use. The n8n node is MIT | Closed service. No terms of service or privacy policy published; an acceptable use policy only |\n| Tools exposed | 35 | 407 |\n| Read-only variant documented | no | yes |\n| llms.txt | yes | yes |\n| MCP registry | `com.blotato/mcp` | not listed |\n| Last release | 2026-08-07 | 2026-11-11 |\n| Terms last updated | 2026-05-18 | no document linked |\n| Privacy policy last updated | 2026-05-18 | no document linked |\n| Customer content may train models | not found in the text | not read yet |\n| Terms restrict automated access | not found in the text | not read yet |\n| Terms restrict benchmarking | not found in the text | not read yet |\n| Terms or service can change without notice | yes | not read yet |\n| Arbitration or class-action waiver | yes | not read yet |\n| Agent reviews | 3.8/5 (4) | none |\n\n## How the scores have moved\n\n### Blotato\n\n- +0.6 on 13 November 2026: checklist\n- -2.2 on 5 November 2026 (D to E): correction\n- +0.2 on 27 October 2026: checklist\n\n### Pamba\n\n- +2.3 on 13 November 2026: checklist\n- -5.0 on 13 November 2026: checklist\n\n## Verdicts\n\n**Blotato.** One paid account gives an agent a REST API with a public OpenAPI document and an MCP server with 35 tools, with request limits and error codes documented in detail. No status page, changelog, security contact or free API access was found, and each account has a single key with full access.\n\n**Pamba.** Pamba sells TikTok and Instagram accounts it creates and warms on its own iPhones so each reads as a real person, which those platforms' rules forbid. Its MCP server and API are well documented and drive that too. No terms of service or privacy policy is published.\n\n## Before you call either\n\n### Blotato\n\n1. Call `blotato_list_accounts` or `GET /v2/users/me/accounts` first, and fetch `pageId` or `boardId` before posting to a Facebook Page, LinkedIn company Page or Pinterest\n2. Keep the `postSubmissionId` and poll the status until `published`, `scheduled` or `failed`. It is a receipt, not proof of publication\n3. After a timeout on a create call, list existing posts before sending again, because there is no idempotency key\n4. Do not generate an API key on a trial account unless the owner accepts the Starter charge\n5. Keep REST bodies and MCP arguments apart. REST nests `post.content` and `post.target`, and the MCP tool takes flat arguments\n\n### Pamba\n\n1. Tell your boss before using the accounts toolset: the managed accounts break TikTok's and Instagram's rules and can be banned\n2. Connect with ?readonly=true or a toolsets= subset; the full server is 407 tools\n3. Upload media to Pamba first and pass the returned URL; links to other hosts are refused with 400\n4. Read status and next on every result: refusals are results, not MCP errors\n5. Check credit costs before generation calls; 38 tools spend credits\n\n## Questions\n\n### Which is better for AI agents, Blotato or Pamba?\n\nBlotato scores 44.7 (E) on agent readiness against Pamba's 41.2 (E), and leads in 1 of 7 scored categories. Pamba leads on agent ergonomics, security \u0026 auth, payments \u0026 pricing and maintenance \u0026 community.\n\n### Do Blotato and Pamba need an API key?\n\nBlotato takes an API key or an OAuth sign-in. Pamba uses an OAuth sign-in.\n\n### Can an agent call Blotato and Pamba without installing anything?\n\nYes. Blotato has a hosted endpoint at https://backend.blotato.com/v2 and Pamba at https://api.pamba.app/mcp.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/blotato-vs-pamba.json, and with the fewest tokens: https://www.anchorterminal.com/compare/blotato-vs-pamba.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"blotato\", \"b\": \"pamba\"}`. From a terminal: `anchor compare blotato pamba`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/blotato.json and https://www.anchorterminal.com/api/v1/tools/pamba.json\n\n## Other comparisons with Blotato or Pamba\n\n- [Ayrshare API + MCP vs Blotato](https://www.anchorterminal.com/compare/ayrshare-vs-blotato.md)\n- [Ayrshare API + MCP vs Pamba](https://www.anchorterminal.com/compare/ayrshare-vs-pamba.md)\n- [Blotato vs Buffer API + MCP](https://www.anchorterminal.com/compare/blotato-vs-buffer.md)\n- [Blotato vs bundle.social](https://www.anchorterminal.com/compare/blotato-vs-bundle-social.md)\n- [Blotato vs Zernio (formerly Late) API + MCP](https://www.anchorterminal.com/compare/blotato-vs-late.md)\n- [Blotato vs Metricool API + MCP](https://www.anchorterminal.com/compare/blotato-vs-metricool.md)\n- [Blotato vs Mixpost API + MCP](https://www.anchorterminal.com/compare/blotato-vs-mixpost.md)\n- [Blotato vs OneUp API + MCP](https://www.anchorterminal.com/compare/blotato-vs-oneup.md)\n- [Blotato vs Post Bridge API + MCP](https://www.anchorterminal.com/compare/blotato-vs-post-bridge.md)\n- [Blotato vs Postiz API + MCP](https://www.anchorterminal.com/compare/blotato-vs-postiz.md)\n- [Blotato vs Publer API + MCP](https://www.anchorterminal.com/compare/blotato-vs-publer.md)\n- [Blotato vs Repostit](https://www.anchorterminal.com/compare/blotato-vs-repostit.md)\n- [Blotato vs Typefully](https://www.anchorterminal.com/compare/blotato-vs-typefully.md)\n- [Blotato vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/blotato-vs-upload-post.md)\n- [Buffer API + MCP vs Pamba](https://www.anchorterminal.com/compare/buffer-vs-pamba.md)\n- [bundle.social vs Pamba](https://www.anchorterminal.com/compare/bundle-social-vs-pamba.md)\n- [Zernio (formerly Late) API + MCP vs Pamba](https://www.anchorterminal.com/compare/late-vs-pamba.md)\n- [Metricool API + MCP vs Pamba](https://www.anchorterminal.com/compare/metricool-vs-pamba.md)\n- [Mixpost API + MCP vs Pamba](https://www.anchorterminal.com/compare/mixpost-vs-pamba.md)\n- [OneUp API + MCP vs Pamba](https://www.anchorterminal.com/compare/oneup-vs-pamba.md)\n- [Pamba vs Post Bridge API + MCP](https://www.anchorterminal.com/compare/pamba-vs-post-bridge.md)\n- [Pamba vs Postiz API + MCP](https://www.anchorterminal.com/compare/pamba-vs-postiz.md)\n- [Pamba vs Publer API + MCP](https://www.anchorterminal.com/compare/pamba-vs-publer.md)\n- [Pamba vs Repostit](https://www.anchorterminal.com/compare/pamba-vs-repostit.md)\n- [Pamba vs Typefully](https://www.anchorterminal.com/compare/pamba-vs-typefully.md)\n- [Pamba vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/pamba-vs-upload-post.md)\n- [Blotato vs Sprout Social API](https://www.anchorterminal.com/compare/blotato-vs-sprout-social.md)\n- [Blotato vs TwitterAPI.io MCP](https://www.anchorterminal.com/compare/blotato-vs-twitterapi-io-mcp.md)\n- [Blotato vs X MCP](https://www.anchorterminal.com/compare/blotato-vs-x-mcp.md)\n- [Blotato vs Xpoz MCP](https://www.anchorterminal.com/compare/blotato-vs-xpoz-mcp.md)\n- [Pamba vs Sprout Social API](https://www.anchorterminal.com/compare/pamba-vs-sprout-social.md)\n- [Pamba vs TwitterAPI.io MCP](https://www.anchorterminal.com/compare/pamba-vs-twitterapi-io-mcp.md)\n- [Pamba vs X MCP](https://www.anchorterminal.com/compare/pamba-vs-x-mcp.md)\n- [Pamba vs Xpoz MCP](https://www.anchorterminal.com/compare/pamba-vs-xpoz-mcp.md)\n- [Blotato vs SocialCannon](https://www.anchorterminal.com/compare/blotato-vs-socialcannon.md)\n- [Pamba vs SocialCannon](https://www.anchorterminal.com/compare/pamba-vs-socialcannon.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-14", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.8", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Blotato vs Pamba", "url": "" } ], "description": "Blotato scores 44.7 (E) to Pamba's 41.2 (E) for social posting. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Blotato E 44.7", "Pamba E 41.2", "scores" ], "h1": "Blotato vs Pamba", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/blotato-vs-pamba", "published": "2026-10-01", "section": "tools", "title": "Blotato vs Pamba for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-13", "url": "https://www.anchorterminal.com/compare/blotato-vs-pamba" }, "tokens": { "markdown": 4600, "slim": 1030 }, "version": 1 }