Blotato vs Repostit

Blotato 82

Public OpenAPI 3.0.3 document at backend.blotato.com/openapi.json with 45 operations. The help pages say account usage and schedule slots are implemented but absent from it (25). llms.txt on both hosts, a 1.3 MB full export, a Markdown twin of every help page and a documentation MCP endpoint (10). The MCP tools reference and the agent workflow pages state purpose, order of calls and what not to do, such as not resubmitting an unresolved post (17). The document has 214 enums and typed targets per platform, though error details is a free-form object. The hosted MCP tool schemas were not read (12). 320 examples in the document, error responses on most operations and an error reference with numeric codes (13). The version is in the path and info.version is 2.0.0, with no changelog found (5).

Repostit 27

MCP reading, since the connector is the only surface an outside agent reaches; no public REST API, developer page, OpenAPI file, SDK or package was found in the help centre, /whats-new/, the sitemap, llms.txt, GitHub, npm or the MCP registry. No tool names or input schemas are published anywhere, and no session was opened to read them (0 of 25). llms.txt exists, but it is a Rank Math index of site URLs that includes theme placeholder entries, and help articles are HTML only (5 of 10). The Claude connector page says what each step is for and when not to use it, list accounts before choosing a destination, a Brief saves a draft and neither publishes nor schedules, publishing applies to every destination in a Brief, Queued is not delivery, future-content workflows publish once active while existing-content ones import for review (8 of 20). Inputs are described in prose only, formats per destination, JPEG, PNG or WebP up to 20 MB, carousel caps of 4, 10 and 20 by network, media at a downloadable HTTPS URL and a timezone with every scheduled time (4 of 15). Plain-language example requests and per-network failure reasons written for people; no example tool call, response or error shape (5 of 15). The endpoint path carries v1.1 and the registry holds 2026.10.17 and 2026.10.23; /whats-new/ is undated and no changelog was found (5 of 15). 0+5+8+4+5+5 = 27.

Blotato 57

36 MCP tools with no toolsets or read-only subset found. REST and MCP lists take a limit with a default of 50 and a maximum of 250, with no field selection (8). Cursor pagination with since, until, status and platform filters on posts (20). Errors carry code, reqId, message, action and details, and the error reference gives a fix for each code (17). No idempotency key. DM automations start as inactive drafts, and MCP tool annotations were not read (5). blotato_create_post needs three arguments. There are official n8n and Make nodes and no SDK in any language (7).

Repostit 25

MCP reading. The tool count is not published. The connector pages describe seven actions (list accounts, create, schedule and publish a Brief, check delivery, create a workflow, send a connection link), which suggests a small set, but the definitions were not read, so a middle reading rather than full marks (10 of 25). No pagination, filtering or output-size controls are documented (0 of 20). Delivery checks report a result per destination with public links when the network gives one, and the help centre lists failure reasons per network, but no error codes or connector error messages are documented (5 of 20). No idempotency key and no readOnlyHint or destructiveHint seen; Briefs start as drafts, queued Briefs are locked against a second send, Manual workflows hold posts for approval and the guidance says to check before retrying (6 of 20). Requests are made in plain language with few stated requirements (an HTTPS media URL, a timezone); no SDK in any language (4 of 15). 10+0+5+6+4 = 25.

Blotato 10

No x402, MPP or L402 (0). Plan prices are public without a login at $29, $97 and $499 a month, and extra credits cost $6 per 1,000. The API has no price per call, so this is plan pricing (10). The 7-day trial needs a card and excludes the API and MCP, and generating a key starts the paid plan (0). A person signs up in a browser and copies the key from settings (0).

Repostit 30

No x402, MPP or L402 on any page read (0). Plan prices are public without a login, Basic $5 a month, Starter $14 or $10 yearly, Influencer $29 or $20, Agency $149 or $99, with no per-call or per-post price (10 of 20). A 14-day trial with no credit card on every plan, stated on the pricing page, the trial article and the refund page (20). A person signs up in a browser, connects each network in Repostit and approves the connector; no keyless or programmatic route (0). 0+10+20+0 = 30.

Blotato 47

Closed service under Terms of Use dated 18 May 2026 that name Blotato Inc. and Utah law. The terms take a perpetual, irrevocable, sub-licensable licence to user content (15). The privacy policy names Blotato Inc. with a Salt Lake City address and says data from third-party APIs is not used to train general models. It gives no retention period, repeats sections 8 to 15 of the terms inside it, and shows both 18 May 2026 and an effective date of 17 October 2024. No DPA was found (8). No deprecation policy, and the terms allow changes or discontinuation with or without notice (0). The help pages name Stripe for payments and ElevenLabs for voices, and the policy says the company is based in the United States. No sub-processor list or data locations were found (4).

Repostit 29

Closed service. The terms of service (effective 7 March 2025, no revision since) name Repostit LLC of Newark, Delaware, with Delaware law and arbitration, take a non-exclusive licence to content only to run the service and say fees are non-refundable; every footer says Repostit, Inc., and the terms do not mention the connector (12 of 30). The privacy policy (29 July 2026) keeps data until the account is deleted or as needed, with no periods, deletes Pinterest credentials on disconnect but says nothing of other networks' tokens, names no DPA, and does not mention the connector or its 90-day offline access; the account deletion article gives no timeline and leaves network-side access to the user (10 of 30). No deprecation policy or dated notices; the terms promise notice of significant changes and the ChatGPT page names a pending version 1.1 without a date (3 of 20). Subprocessors are 'hosting providers, analytics services', unnamed, with transfers outside the user's country and no locations; the Tawk.to chat on the contact page and the Google Cloud Run host of the connector are not named in the policy (2 of 20). 12+10+3+2 = 27.

Blotato 29

The MCP server takes OAuth through a browser flow, and its protected-resource metadata names a Supabase authorisation server. No scopes are documented. REST takes one key per account in a header, with full access, revoked only by regenerating it (15). No read-only key, scope or approval step enforced by the server. The help pages tell agents to get the user's approval before activating an automation or sending, and automations start as drafts (5). Tools return comments and direct messages from strangers and text extracted from URLs, and no injection guidance was found (0). A Logs page in the dashboard shows each request's payload, response and error, and responses carry a request ID. Team access means sharing the owner's login code, which the help page says leaves no audit trail (9). No security.txt, disclosure route, bug bounty or certification was found (0). Automation webhooks reject private and loopback addresses, which is noted and not scored.

Repostit 44

OAuth with dynamic client registration and no client secret, per Repostit's Claude connector page, with offline access that renews for up to 90 days from the first authorisation; social-network sign-ins stay in Repostit and provider tokens are not passed to the assistant. PKCE S256 is stated only in third-party metadata. No scopes are named; the page lists the permissions shown at sign-in (read accounts, create workflows and Briefs, schedule or publish, read delivery status). Revocation is by disconnecting in the client or asking support (18 of 30). A Brief is saved as a draft, Manual workflows wait for approval, and the help article says the assistant shows each step for confirmation before publishing (on ChatGPT 'may ask', depending on the client); no read-only mode, and an activated future-content workflow publishes on its own (8 of 20). Tools return the user's own accounts, Briefs and delivery results and read no comments or messages (10). Assistant-created posts appear under Post with a Comments & Activity log of each step, and Post History shows each network's response; no per-call log for the connector (8 of 15). security.txt did not load through our reader, and no disclosure policy, bug bounty or certification appears on any page read (0 of 20). 18+8+10+8+0 = 44.

Blotato 38

Graded as a hosted service. No status page was found. The help pages link none, status.blotato.com did not connect, and the FAQ points users to downdetector.com for platform outages (0). With no page there is no incident history to read (5). Request limits are published per route, such as 30 a minute for creating posts, 60 for status reads and 120 for upload URLs (15). 429 is documented with a message that gives retry timing and guidance to stop, wait and reduce concurrency, with no Retry-After header documented. The help pages say there is no client idempotency header and describe how to check existing work before repeating a write (8). No SLA was found and the terms supply the service as is (0). The API and MCP server are not labelled beta (10).

Repostit 26

Hosted reading, for the connector and the service behind it. No status page was found. None is linked from the help centre, the contact page, the footer or the troubleshooting articles, and https://repostit.io/status/ did not load through our reader, which also fails on the home page (0). No readable incident history, so the floor (5). Repostit publishes posting quotas rather than request limits, 10 posts on the trial, 10 video posts a month on Basic, existing-content workflows up to 5 posts a day, plus per-network rules and 20 MB images through the connector; no request rate for the connector, and the terms only bar automated access faster than a human (6 of 15). No 429 or overload handling is documented. The Claude connector page says Queued means accepted, not delivered, and to check the existing result before retrying to avoid duplicate posts, and Brief locks queued posts against a second send; no idempotency key and no page says failed posts are retried (5 of 15). No SLA; the terms (7 March 2025) let Repostit modify or discontinue the service at any time and say nothing on uptime (0). The connector carries no beta label and its registry entry is active (10). 0+5+6+5+0+10 = 26.