# Blotato vs Xpoz MCP (slim)

> Blotato scores 44.1 (E) to Xpoz MCP's 39.6 (E) for social analytics. Prices, MCP, x402, uptime and agent notes side by side.

- Full: https://www.anchorterminal.com/compare/blotato-vs-xpoz-mcp.md (~4,100 tokens) · this version ~2,280 tokens · JSON https://www.anchorterminal.com/compare/blotato-vs-xpoz-mcp.json · canonical https://www.anchorterminal.com/compare/blotato-vs-xpoz-mcp
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · MCP: https://www.anchorterminal.com/mcp · Updated: 2026-11-07
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)

Blotato scores 44.1 (E) on agent readiness against Xpoz MCP's 39.6 (E), and leads in 4 of 7 scored categories. Xpoz MCP leads on agent ergonomics, security & auth and payments & pricing. Both do social analytics.

- Blotato: E 44.1, rank #1232 of 1510 · https://www.anchorterminal.com/tools/blotato.min.md
- Xpoz MCP: E 39.6, rank #1339 of 1510 · https://www.anchorterminal.com/tools/xpoz-mcp.min.md
- Blotato, good for A solo builder or small agency that wants an agent to publish to nine networks and answer Instagram and Facebook comments and messages for a flat price. Ahead on Reliability, 42 against 20; Schema & documentation, 82 against 64; Maintenance & community, 30 against 25; Transparency & trust, 47 against 29.
- Xpoz MCP, good for Agents doing social listening and brand monitoring across several networks, where a third-party source is acceptable. Ahead on Agent ergonomics, 63 against 57; Security & auth, 37 against 29; Payments & pricing, 30 against 10.

| Category | Blotato | Xpoz MCP |
| --- | --- | --- |
| Reliability (16%) | 42 | 20 |
| Performance (10%) | pending | pending |
| Schema & documentation (13%) | 82 | 64 |
| Agent ergonomics (13%) | 57 | 63 |
| Security & auth (14%) | 29 | 37 |
| Payments & pricing (10%) | 10 | 30 |
| Task success (10%) | pending | pending |
| Maintenance & community (7%) | 30 | 25 |
| Transparency & trust (7%) | 47 | 29 |

| Fact (where they differ) | Blotato | Xpoz MCP |
| --- | --- | --- |
| Kind | HTTP API | MCP server |
| Vendor | Blotato Inc. | XPOZ |
| Hosted endpoint | `https://backend.blotato.com/v2` | `https://mcp.xpoz.ai/mcp` |
| Transports | HTTP, Streamable HTTP | Streamable HTTP |
| Auth | OAuth or key | API key |
| Pricing | Paid | Freemium |
| Licence | Proprietary hosted service under Blotato's Terms of Use. The n8n node is MIT | none |
| Tools exposed | 35 | 52 |
| Read-only variant documented | no | yes |
| llms.txt | yes | no |
| MCP registry | `com.blotato/mcp` | `ai.xpoz/social-insights` |
| Last release | 2026-08-07 | none |
| Terms last updated | 2026-05-18 | not read yet |
| Privacy policy last updated | 2026-05-18 | no document linked |
| Customer content may train models | not found in the text | not read yet |
| Terms restrict automated access | not found in the text | not read yet |
| Terms restrict benchmarking | not found in the text | not read yet |
| Terms or service can change without notice | yes | not read yet |
| Arbitration or class-action waiver | yes | not read yet |
| Agent reviews | 3.8/5 (4) | none |

Why the edge:
- Reliability, Blotato +22: Blotato 42 (Graded as a hosted service. No status page was found. The help pages link none and `status.blotato.com` had no DNS record on 5 November (0). With no page there is no incident history to read (5). Request limits are published per route, such as 30 a minute for creating posts, 60 for status reads and 120 for upload URLs (15). After a 429 the help pages say to stop requests to that route, wait for the retry interval when one is given and reduce concurrency, with no `Retry-After` header documented. They also say there is no client idempotency header for creating posts and that a timed-out create should be checked against existing posts and schedules before another is sent. Backoff with safe-retry guidance and no idempotency key (12). No SLA was found and the terms supply the service as is (0). The API and MCP server are not labelled beta (10). Total 42.); Xpoz MCP 20 (No status page found (0). No history (5). Credit allowances, no rate limits found (5 of 15). No retry guidance (0). No SLA (0). Not labelled beta (10). 0 + 5 + 5 + 0 + 0 + 10 = 20.)
- Payments & pricing, Xpoz MCP +20: Blotato 10 (No x402, MPP or L402 (0). Plan prices are public without a login at $29, $97 and $499 a month, and extra credits cost $6 per 1,000. The API has no price per call, so this is plan pricing (10). The 7-day trial needs a card and excludes the API and MCP, and generating a key starts the paid plan (0). A person signs up in a browser and copies the key from settings (0).); Xpoz MCP 30 (No machine payment protocol (0). Plan prices public (10). Free 500 credits (20). A person signs in for a key (0). 0 + 10 + 20 + 0 = 30.)
- Schema & documentation, Blotato +18: Blotato 82 (Public OpenAPI 3.0.3 document at `backend.blotato.com/openapi.json`, linked from the help centre's OpenAPI Reference page, with 45 operations per the 8 October check. The help pages say account usage and schedule slots are implemented but absent from it (25). `llms.txt` on both hosts, a full export, a Markdown twin of every help page and a documentation MCP endpoint (10). The MCP tools reference and the agent workflow pages state purpose, order of calls and what not to do, such as not resubmitting an unresolved post (17). The document has 214 enums and typed targets per platform, though error `details` is a free-form object. The hosted MCP tool schemas were not read (12). 320 examples in the document, error responses on most operations and an error reference with numeric codes (13). The version is in the path and `info.version` is 2.0.0, with no changelog found (5). Total 82.); Xpoz MCP 64 (52 tools read from tools/list with JSON Schema inputs and 42 enums (25). No llms.txt read (0). Server instructions explain paging and field selection (16 of 20). Typed inputs with enums (15). Examples on the home page (5 of 15). Registry 1.4.1 from July, server 3.0.0; no changelog (3 of 15). 25 + 0 + 16 + 15 + 5 + 3 = 64.)
- Transparency & trust, Blotato +18: Blotato 47 (Closed service under Terms of Use dated 18 May 2026 that name Blotato Inc. and Utah law. The terms take a perpetual, irrevocable, sub-licensable licence to user content (15). The privacy policy names Blotato Inc. with a Salt Lake City address and says data from third-party APIs is not used to train general models. It gives no retention period, repeats sections 8 to 15 of the terms inside it, and shows both 18 May 2026 and an effective date of 17 October 2024. No DPA was found (8). No deprecation policy, and the terms allow changes or discontinuation with or without notice (0). The help pages name Stripe for payments and ElevenLabs for voices, and the policy says the company is based in the United States. No sub-processor list or data locations were found (4).); Xpoz MCP 29 (Closed service; terms of use read without a legal entity (10 of 30). Data handling not read (5 of 30). No deprecation policy (0). Where the social data comes from isn't stated beyond 'no platform API keys' (0). 10 + 5 + 0 + 0 = 15.)
- Security & auth, Xpoz MCP +8: Blotato 29 (The MCP server takes OAuth through a browser flow, and its protected-resource metadata names a Supabase authorisation server. No scopes are documented. REST takes one key per account in a header, with full access, revoked only by regenerating it (15). No read-only key, scope or approval step enforced by the server. The help pages tell agents to get the user's approval before activating an automation or sending, and automations start as drafts (5). Tools return comments and direct messages from strangers and text extracted from URLs, and no injection guidance was found (0). A Logs page in the dashboard shows each request's payload, response and error, and responses carry a request ID. Team access means sharing the owner's login code, which the help page says leaves no audit trail (9). No security.txt, disclosure route, bug bounty or certification was found (0). Automation webhooks reject private and loopback addresses, which is noted and not scored.); Xpoz MCP 37 (One API key (20 of 30). 49 of 52 tools read-only (15 of 20). Posts and profiles are third-party text; the server says all tools are 'safe and read-only' but gives no injection guidance (0). No audit log (0). No security programme found (2 of 20). 20 + 15 + 0 + 0 + 2 = 37.)
- Agent ergonomics, Xpoz MCP +6: Blotato 57 (35 MCP tools (36 on 8 October) with no toolsets or read-only subset found. REST and MCP lists take a `limit` with a default of 50 and a maximum of 250, with no field selection (8). Cursor pagination with `since`, `until`, `status` and `platform` filters on posts (20). Errors carry `code`, `reqId`, `message`, `action` and `details`, and the error reference gives a fix for each code (17). No idempotency key. DM automations start as inactive drafts, and MCP tool annotations were not read (5). `blotato_create_post` needs three arguments. There are official n8n and Make nodes and no SDK in any language (7).); Xpoz MCP 63 (52 tools totalling about 238 KB (5). A fields parameter to select only needed fields, and paged results via a tableName (20). No documented errors (3 of 20). All annotated, 49 read-only (20). SDKs and a CLI (15). 5 + 20 + 3 + 20 + 15 = 63.)