{ "data": { "a": { "slug": "boldsign", "name": "BoldSign", "vendor": "Syncfusion, Inc.", "vendorUrl": "https://boldsign.com", "kind": "http-api", "category": "e-signatures", "summary": "BoldSign is Syncfusion's electronic signature service. Its REST API sends documents for signature from files or templates, embeds signing and requesting in other products, manages templates, users and teams, and reports events by webhook, with a hosted MCP server.", "url": "https://www.anchorterminal.com/tools/boldsign", "markdownUrl": "https://www.anchorterminal.com/tools/boldsign.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/boldsign.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/boldsign.json", "dns": "boldsign.grade.anchorterminal.com", "repo": "https://github.com/boldsign/boldsign-node-sdk", "license": "Proprietary hosted service under the BoldSign Terms of Use. The five official SDKs and the deprecated local MCP package on GitHub are MIT", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://api.boldsign.com/v1", "packages": [ { "registry": "npm", "name": "boldsign" }, { "registry": "pypi", "name": "boldsign" }, { "registry": "nuget", "name": "BoldSign.Api" } ], "auth": "mixed", "authNotes": "An API key in the X-API-KEY header, generated in the web app under API, API Key, with all scopes and an optional expiry date, at most four keys per account and two per environment (Live or Sandbox). Or OAuth 2.0 at account.boldsign.com with authorisation code and PKCE, client credentials and refresh tokens, and 20 scopes such as BoldSign.Documents.Create and BoldSign.Templates.Read. The hosted MCP server takes the same key as X-API-Key or OAuth sign-in from Claude Web and ChatGPT. Keys are self-serve; live API access needs the Enterprise API plan.", "pricing": "freemium", "pricingNotes": "The free sandbox gives full API access with no card. Documents are watermarked and deleted after 14 days. Live API access is the Enterprise API plan from $30 a month with 40 envelopes and $0.75 per additional envelope, with a 30-day trial and no card. Add-ons are priced per unit (bulk send $0.25 an envelope, SMS $0.20, ID verification $2, KBA $1.50 an attempt, QES $3 a signing attempt). Live MCP use needs the Enterprise API plan at the normal envelope charge (https://boldsign.com/electronic-signature-pricing/, checked 2026-11-03).", "priceSummary": "$30 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, the Swagger file, the pricing page or the MCP docs (checked 2026-11-03). Plans are paid by card through Stripe in the web app.", "endpoints": [] }, "toolCount": 14, "popularity": { "githubStars": 1, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-03" }, "docsUrl": "https://developers.boldsign.com/", "llmsTxt": "https://developers.boldsign.com/llms.txt", "openapi": "https://api.boldsign.com/swagger/v1/swagger.json", "capabilities": [ "esign.send", "esign.templates", "esign.embed", "esign.status" ], "tags": [ "official", "hosted", "closed-source", "api-key", "oauth", "openapi", "llms-txt", "mcp", "remote-mcp", "webhooks", "sandbox", "free-tier", "freemium", "eu-region", "status-page", "security-txt", "soc2", "python", "typescript", "dotnet", "java", "php" ], "lastRelease": "2026-10-16", "graded": true, "anchor": { "graded": true, "score": 70.3, "grade": "BB", "agentReady": true, "rank": 190, "ranked": true, "rankOf": 1349, "categoryRank": 2, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 62, "maintenance": 78, "payments": 40, "reliability": 84, "schema": 85, "security": 63, "transparency": 77 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-03" }, "negative": 0, "verdict": "A public OpenAPI file, llms.txt, 20 OAuth scopes, published rate limits, a free sandbox and a clean 90-day status history. API keys carry every scope, there are no idempotency keys, the 2,000-an-hour account limit is low for bulk work, and the hosted MCP server's 14 tools include sending and revoking with no confirmation step of their own.", "bestFor": "A product team embedding signing, requesting and templates at a per-envelope price with regional hosting in the US, EU, Canada or Australia, and an agent that sends from templates and tracks status through the hosted MCP server.", "strengths": [ "OpenAPI 3.0.4 file with 87 operations, llms.txt and a Markdown twin of every docs page", "OAuth 2.0 with authorisation code and PKCE, client credentials, single-use refresh tokens and 20 scopes split by resource and action", "Rate limits published per account, 2,000 requests an hour live and 50 in the sandbox, with usage headers", "Free sandbox with full API access and no card, and live API from $30 a month with $0.75 per extra envelope", "No incident on status.boldsign.com between 5 August and 3 November 2026, with components per region", "Dated API changelog since April 2021 with breaking changes labelled, and five official SDKs updated in August to October 2026" ], "weaknesses": [ "API keys carry every scope and the docs say that is not customisable; only OAuth apps get narrower scopes, and there is no Documents.Read scope", "No idempotency keys, and no Retry-After documented for the 429", "64 of the 87 operation descriptions in the Swagger file are under 40 characters, and the file carries no examples", "The hosted MCP server's tool schemas are not published, it sends, reminds and revokes with no built-in confirmation, and it is not in the official MCP registry", "No SLA document was found. security.txt advertises a 99.999 per cent uptime SLA and the terms disclaim uninterrupted service" ], "agentNotes": [ "Send `X-API-KEY: $BOLDSIGN_API_KEY` to the regional base URL (api.boldsign.com, api-eu, api-ca or api-au); a key from one region fails on another, and the MCP endpoint must match too", "Build against a Sandbox key first. Sandbox documents are watermarked and deleted after 14 days, and the sandbox allows only 50 requests an hour", "Stay under 2,000 requests an hour per account in production and use webhooks instead of polling `document/properties`; on a 429 wait for the window to reset", "Don't retry a timed-out `document/send` blindly. There is no idempotency key, so list documents by title or search before sending again", "Verify `X-BoldSign-Signature` (HMAC-SHA256 with the endpoint secret) on every webhook before acting on its payload", "On the MCP server, start with `list_templates` and `get_document_properties`, and confirm with the person before `send_document_from_template`, `send_reminder_for_document_sign` or `revoke_document`" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 70.3 } ], "editorialScores": { "ergonomics": 62, "maintenance": 78, "payments": 40, "reliability": 84, "schema": 85, "security": 63, "transparency": 59 }, "provenanceScore": 95, "checked": { "categories": { "ergonomics": "2026-11-03", "maintenance": "2026-11-03", "payments": "2026-11-03", "reliability": "2026-11-03", "schema": "2026-11-03", "security": "2026-11-03", "transparency": "2026-11-03" }, "last": "2026-11-03", "oldest": "2026-11-03", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install boldsign", "http": "curl -H \"X-API-KEY: $BOLDSIGN_API_KEY\" \"https://api.boldsign.com/v1/document/list?Page=1\u0026PageSize=10\"", "claudeCode": "claude mcp add boldsign --transport http https://mcp.boldsign.com/mcp --header \"X-API-Key: $BOLDSIGN_API_KEY\"", "config": { "mcpServers": { "boldsign": { "headers": { "X-API-Key": "${BOLDSIGN_API_KEY}" }, "type": "http", "url": "https://mcp.boldsign.com/mcp" } } } }, "letme": { "capability": "https://letme.dev/esign.send", "tool": "https://letme.dev/boldsign" }, "area": "business", "unitPrices": [ { "item": "Enterprise API plan", "unit": "month", "usd": 30, "note": "starting price with 40 envelopes and two application users" }, { "item": "Additional envelope, Enterprise API", "unit": "tx", "usd": 0.75, "note": "one envelope can hold several files, signers and CCs" }, { "item": "Bulk send or bulk link envelope", "unit": "tx", "usd": 0.25 }, { "item": "SMS envelope", "unit": "message", "usd": 0.2, "note": "WhatsApp $0.10 a message" }, { "item": "ID verification", "unit": "tx", "usd": 2, "note": "KBA $1.50 an attempt, QES $3 a signing attempt" } ], "provenance": { "legalEntity": "Syncfusion, Inc.", "domain": "boldsign.com", "domainRegistered": "2013-12-20", "endpointOnVendorDomain": true, "terms": "https://boldsign.com/terms-of-use/", "privacy": "https://boldsign.com/privacy-policy/", "statusPage": "https://status.boldsign.com/", "changelog": "https://developers.boldsign.com/api-overview/changelog", "securityTxt": "valid", "checked": "2026-11-03", "notes": [ "The Terms of Use (effective February 2025) name Syncfusion, Inc., a Delaware corporation in Morrisville, North Carolina, under North Carolina law with AAA arbitration in Raleigh. The privacy policy (effective July 2026) is Syncfusion-wide and covers BoldSign, BoldDesk, Bold BI and Bold Reports.", "The terms forbid robots, spiders, scrapers or other automated means to access or monitor BoldSign other than the Syncfusion-provided API, and forbid using the product to train or improve machine learning or AI algorithms. Recorded as a fact.", "boldsign.com/robots.txt disallows /responsible-disclosure/ and cdn-cgi paths with a crawl delay of 1 second and Content-Signal ai-train=yes, search=yes, ai-input=yes, so the responsible disclosure page was not read. developers.boldsign.com/robots.txt disallows /moreresults and /search. status.boldsign.com disallows /api/ and /embed/.", "boldsign.com/.well-known/security.txt is valid until 18 August 2027 with security@boldsign.com and a policy link to boldsign.com/security-policy/. Its comments claim SOC 2 Type 2, GDPR and a 99.999 per cent uptime SLA.", "The API answers on api.boldsign.com and regional subdomains, OAuth on account.boldsign.com and MCP on mcp.boldsign.com, all vendor subdomains.", "RDAP gives boldsign.com a registration date of 20 December 2013." ], "score": 95 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/boldsign.json", "live": { "slug": "boldsign", "probe": { "target": "https://api.boldsign.com/v1", "method": "get", "lastAt": "2026-11-04T20:46:36.22824902Z", "lastOk": false, "lastStatus": 500, "lastMs": 204, "lastNote": "server error", "authRequired": false, "uptime24h": 0, "uptime30d": 0, "p50ms24h": 0, "p95ms24h": 0, "samples24h": 55, "samples30d": 55, "days": [ { "date": "2026-11-04", "probes": 55, "ok": 0 } ], "outages": [ { "start": "2026-11-04T15:25:13.380401793Z", "end": "0001-01-01T00:00:00Z", "note": "HTTP 500 server error" } ] }, "vendorStatus": { "page": "https://status.boldsign.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-04T20:38:43.453813971Z" }, "versions": [ { "registry": "npm", "name": "boldsign", "version": "3.3.4", "seenAt": "2026-11-04T20:03:22.635714892Z" }, { "registry": "pypi", "name": "boldsign", "version": "3.3.4", "released": "2026-10-16", "seenAt": "2026-11-04T20:03:23.457188444Z" } ], "githubStars": 1, "npmWeekly": 36472, "pypiWeekly": 14652, "securityTxt": { "url": "https://boldsign.com/.well-known/security.txt", "state": "valid", "expires": "2027-08-18T00:00:00Z", "checkedAt": "2026-11-04T15:54:30.755542398Z" }, "updatedAt": "2026-11-04T20:46:36.22824902Z" } }, "answer": "BoldSign scores 70.3 (BB) on agent readiness against PandaDoc's 63.1 (B), and leads in 5 of 7 scored categories. PandaDoc leads on agent ergonomics.", "b": { "slug": "pandadoc", "name": "PandaDoc", "vendor": "PandaDoc", "vendorUrl": "https://www.pandadoc.com", "kind": "http-api", "category": "e-signatures", "summary": "PandaDoc is a document platform for proposals, quotes, contracts and e-signatures. Its REST API and hosted MCP server create documents from templates, send them for signature, embed signing sessions and report status through webhooks.", "url": "https://www.anchorterminal.com/tools/pandadoc", "markdownUrl": "https://www.anchorterminal.com/tools/pandadoc.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/pandadoc.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/pandadoc.json", "dns": "pandadoc.grade.anchorterminal.com", "repo": "https://github.com/PandaDoc/pandadoc-openapi-specification", "license": "Proprietary service under PandaDoc's Master Services Agreement. The OpenAPI specification, the API client SDKs and the MCP server guide on GitHub are MIT", "transports": [ "http" ], "remoteUrl": "https://api.pandadoc.com/public/v1", "packages": [ { "registry": "npm", "name": "pandadoc-node-client" }, { "registry": "pypi", "name": "pandadoc-python-client" } ], "auth": "mixed", "authNotes": "OAuth 2.0 authorisation code is the recommended method for the REST API, with `read` and `write` scopes and a Bearer token. Registering an OAuth application needs production API access, which is in the API Developer plan and a paid add-on on Business and Enterprise. API keys (`Authorization: API-Key ...`) are labelled legacy. A key belongs to one workspace and carries its owner's role, a sandbox key is self-serve from the developer centre, and a production key needs approval from Sales. The MCP server takes OAuth only, with PKCE and dynamic client registration, and scopes `read`, `write`, `documents:read`, `documents:edit` and `documents:send`. A person signs in and approves each connection.", "pricing": "freemium", "pricingNotes": "Free eSign plan at $0 with API and MCP access, capped at 25 documents created through the API and 5 documents sent a month. Starter is $19 a user a month billed annually ($35 monthly) and Business $49 ($65 monthly). Enterprise is priced by Sales. Each document created with a production credential uses one usage credit. Starter gets a one-time grant of 25 and Business 50, then credits are bought as packs on the billing page, with no public pack price found. Sandbox keys aren't charged, and the 14-day trial asks for a card only to change plan. Prices are from the help centre, because www.pandadoc.com/pricing answered our reader with a browser check (checked 2026-10-07).", "priceSummary": "Freemium", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 found in the developer docs, the OpenAPI spec or the help centre's billing articles (checked 2026-10-07).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": 49684, "pypiWeekly": 11543, "asOf": "2026-10-07" }, "docsUrl": "https://developers.pandadoc.com", "llmsTxt": "https://developers.pandadoc.com/llms.txt", "openapi": "https://github.com/PandaDoc/pandadoc-openapi-specification/blob/main/openapi.yaml", "registryName": "com.pandadoc.mcp/mcp", "capabilities": [ "esign.send", "esign.templates", "esign.embed", "esign.status", "contracts.generate" ], "tags": [ "hosted", "freemium", "free-tier", "mcp", "oauth", "api-key", "openapi", "llms-txt", "webhooks", "sandbox", "python", "typescript", "java", "php", "status-page", "eu-region" ], "lastRelease": "2026-10-29", "graded": true, "anchor": { "graded": true, "score": 63.1, "grade": "B", "agentReady": false, "rank": 476, "ranked": true, "rankOf": 1349, "categoryRank": 6, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 68, "maintenance": 77, "payments": 30, "reliability": 73, "schema": 87, "security": 61, "transparency": 59 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-02" }, "negative": -3, "negativeNotes": [ "2026-09-21. API changelog 8.17.1 says \"Pricing table structure now requires complete section definitions when creating or updating documents\". On POST /public/v1/documents, section uploads and PATCH /public/v1/documents/{id}, `sections`, section `default` and row `data` and `options` became required after being optional, so existing callers that omitted them are rejected. No earlier notice was found in the changelog, which posted the entry the day the spec changed. Three points under the same-day rule (https://developers.pandadoc.com/changelog/8e872a70)." ], "verdict": "The public OpenAPI spec reached 8.25.1 on 29 October 2026 with 135 operations, and the OAuth-only hosted MCP server is open to every plan. Pricing-table sections became required on 21 September with notice only that day, document processing failed for many US and Global customers for 208 minutes on 6 September, and writes have no idempotency keys.", "bestFor": "Suited to agents that prepare a proposal, quote or contract from a template, send it for signature and track it, for a team that already works in PandaDoc.", "strengths": [ "Public OpenAPI 3.0.3 spec with 135 operations, version 8.25.1 on 29 October 2026, plus llms.txt and a Markdown copy of each docs page", "Hosted MCP server in the official MCP registry as com.pandadoc.mcp/mcp, with OAuth, PKCE and dynamic client registration", "API and MCP access on every plan including Free, and a sandbox key that isn't charged", "Rate limits published per endpoint, from 100 to 2,000 requests a minute on production keys", "API request logs and a per-document audit trail are readable through the API, and a public security bulletins page tracks exposure to disclosed vulnerabilities" ], "weaknesses": [ "Pricing-table `sections` became required on document creation on 21 September 2026, announced the same day", "Document processing was unavailable for many US and Global customers from 17:00 to 20:28 PDT on 6 September 2026, through the app and API", "No idempotency keys, and each document created with a production credential uses one usage credit", "Production API keys need approval from Sales, and usage credit pack prices sit on the in-app billing page", "Webhook deliveries aren't retried automatically, and a subscription failing for 7 days is deactivated" ], "agentNotes": [ "Wait for `document.draft` before sending. Creation is asynchronous and a new document stays in `document.uploaded` for a few seconds", "Match the region. Accounts on app.pandadoc.eu use api.pandadoc.eu and mcp.pandadoc.eu, and the global hosts reject them", "Check for an existing document before retrying a create. There's no idempotency key and each production create uses a usage credit", "Retry 409 after a pause and back off on 429. A sandbox key allows 10 requests a minute per endpoint", "Don't rely on webhooks alone. Failed deliveries aren't retried, so poll the status endpoint as a fallback", "Send full pricing-table `sections` with defaults, row data and row options. Since 8.17.1 a create that omits them is rejected" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 63.1 } ], "editorialScores": { "ergonomics": 68, "maintenance": 77, "payments": 30, "reliability": 73, "schema": 87, "security": 61, "transparency": 33 }, "provenanceScore": 85, "checked": { "categories": { "ergonomics": "2026-11-02", "maintenance": "2026-11-02", "payments": "2026-11-02", "reliability": "2026-11-02", "schema": "2026-11-02", "security": "2026-11-02", "transparency": "2026-11-02" }, "last": "2026-11-02", "lastMoved": "2026-11-02", "oldest": "2026-11-02", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl \"https://api.pandadoc.com/public/v1/documents?count=5\" \\\n -H \"Authorization: API-Key $PANDADOC_API_KEY\"", "claudeCode": "claude mcp add pandadoc --transport http https://mcp.pandadoc.com/v1/mcp", "config": { "mcpServers": { "pandadoc": { "url": "https://mcp.pandadoc.com/v1/mcp" } } } }, "letme": { "capability": "https://letme.dev/esign.send", "tool": "https://letme.dev/pandadoc" }, "area": "business", "provenance": { "legalEntity": "PandaDoc", "domain": "pandadoc.com", "domainRegistered": "2013-03-07", "endpointOnVendorDomain": true, "terms": "https://www.pandadoc.com/master-services-agreement/", "privacy": "https://www.pandadoc.com/legal/privacy-notice/", "statusPage": "https://status.pandadoc.com", "changelog": "https://developers.pandadoc.com/changelog", "securityTxt": "unknown", "checked": "2026-11-02", "notes": [ "www.pandadoc.com still answered with a Vercel browser check (HTTP 429) on 2 November 2026, robots.txt included, so the terms, privacy notice, security page, sub-processor list and security.txt on that host were not read. The terms URL is the one named in the OpenAPI spec and the privacy URL the one linked from PandaDoc/mcp-server-guide.", "The registered company name was not confirmed first-hand. The MIT licence files on GitHub read \"Copyright (c) 2021 PandaDoc\".", "The API answers at api.pandadoc.com and api.pandadoc.eu, and the MCP server at mcp.pandadoc.com and mcp.pandadoc.eu.", "app.pandadoc.com and api.pandadoc.com return 404 for /.well-known/security.txt.", "RDAP for pandadoc.com gives a registration date of 2013-03-07 and expiry on 2028-03-07." ], "score": 85 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/pandadoc.json", "live": { "slug": "pandadoc", "probe": { "target": "https://api.pandadoc.com/public/v1", "method": "get", "lastAt": "2026-11-04T20:47:06.208574099Z", "lastOk": true, "lastStatus": 404, "lastMs": 315, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 205, "p95ms24h": 511, "samples24h": 246, "samples30d": 6818, "days": [ { "date": "2026-10-08", "probes": 93, "ok": 93 }, { "date": "2026-10-09", "probes": 250, "ok": 250 }, { "date": "2026-10-10", "probes": 247, "ok": 247 }, { "date": "2026-10-11", "probes": 247, "ok": 247 }, { "date": "2026-10-12", "probes": 247, "ok": 247 }, { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 256, "ok": 256 }, { "date": "2026-10-19", "probes": 255, "ok": 255 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 252 }, { "date": "2026-10-27", "probes": 249, "ok": 249 }, { "date": "2026-10-28", "probes": 250, "ok": 250 }, { "date": "2026-10-29", "probes": 249, "ok": 249 }, { "date": "2026-10-30", "probes": 249, "ok": 249 }, { "date": "2026-10-31", "probes": 251, "ok": 251 }, { "date": "2026-11-01", "probes": 249, "ok": 249 }, { "date": "2026-11-02", "probes": 250, "ok": 250 }, { "date": "2026-11-03", "probes": 248, "ok": 248 }, { "date": "2026-11-04", "probes": 214, "ok": 214 } ] }, "vendorStatus": { "page": "https://status.pandadoc.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-04T20:39:46.929731274Z" }, "versions": [ { "registry": "github", "name": "PandaDoc/pandadoc-openapi-specification", "version": "v7.27.1", "released": "2026-05-18", "seenAt": "2026-11-04T20:44:32.356266661Z" }, { "registry": "mcp-registry", "name": "com.pandadoc.mcp/mcp", "version": "1.0.0", "seenAt": "2026-11-04T17:11:44.552009456Z" }, { "registry": "npm", "name": "pandadoc-node-client", "version": "6.2.0", "seenAt": "2026-11-04T20:44:31.15504886Z" }, { "registry": "pypi", "name": "pandadoc-python-client", "version": "6.2.0", "released": "2024-04-08", "seenAt": "2026-11-04T20:44:32.003341302Z" } ], "githubStars": 6, "npmWeekly": 92889, "pypiWeekly": 10793, "securityTxt": { "url": "https://pandadoc.com/.well-known/security.txt", "state": "unknown", "checkedAt": "2026-11-04T15:54:31.398569868Z" }, "llmsTxt": { "url": "https://developers.pandadoc.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-04T15:23:52.607420361Z" }, "domain": { "domain": "pandadoc.com", "registered": "2013-03-07", "source": "https://rdap.verisign.com/com/v1/domain/pandadoc.com", "checkedAt": "2026-11-01T14:27:46.977199493Z" }, "pages": [ { "url": "https://developers.pandadoc.com/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-11-04T08:19:21.996741514Z", "changedAt": "2026-10-13T20:13:33.61225953Z", "fingerprint": "a9962d7f7796" }, { "url": "https://developers.pandadoc.com/changelog/8e872a70", "kind": "deprecations", "status": 200, "checkedAt": "2026-11-04T08:19:24.987286558Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "a2033085c04f" }, { "url": "https://www.pandadoc.com/legal/privacy-notice/", "kind": "privacy", "status": 429, "checkedAt": "2026-11-04T08:43:25.314045116Z", "changedAt": "0001-01-01T00:00:00Z" }, { "url": "https://www.pandadoc.com/master-services-agreement/", "kind": "terms", "status": 429, "checkedAt": "2026-11-04T08:43:27.329031527Z", "changedAt": "0001-01-01T00:00:00Z" } ], "github": { "repo": "pandadoc/pandadoc-openapi-specification", "checkedAt": "2026-11-02T09:14:47.499824643Z", "stars": 6, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-29T19:39:33Z", "openIssues": 0, "openPRs": 0, "issuesOpened90d": 0, "issuesClosed90d": 0, "prsMerged90d": 24, "replies": { "sampled": 1, "unanswered": 0, "medianDays": 19.1 } }, "updatedAt": "2026-11-04T20:47:06.208574099Z" } }, "edges": [ { "by": 18, "category": "transparency", "leads": "boldsign", "name": "Transparency \u0026 trust", "reasons": { "a": "Closed service under Terms of Use effective February 2025 that name Syncfusion, Inc. and North Carolina law. The SDKs and the deprecated MCP package are MIT (17 of 30). The privacy policy (July 2026) keeps personal data as long as necessary with no number, the terms keep signed documents and audit trails at least three years and schedule inactive accounts for deletion after six months, sandbox documents go after 14 days, and the terms say customer data is used for nothing but performing the agreement. A subprocessor list is linked and no DPA was found on the pages read (20 of 30). No deprecation policy. The terms let Syncfusion modify or discontinue BoldSign at its discretion, and the changelog labels breaking changes without a notice period (6 of 20). The privacy policy links the subprocessor list, and the security page names Google Cloud and Azure regions in US East, the EU, Canada and Australia (16 of 20). 17 + 20 + 6 + 16 = 59.", "b": "The service is closed under a Master Services Agreement named in the OpenAPI spec. That page refused our reader, so the terms are unread, while the spec, the SDKs and the MCP guide are MIT (8 of 30). The AI policy says customer content isn't used to train models and that third-party AI providers can't retain it, with an opt-out for aggregated usage data. The compliance article says signed documents are kept for the length of the customer relationship. The privacy notice and DPA were not read, so agreement between them is unconfirmed (12 of 30). No written deprecation policy found. The spec marks six items deprecated and the auth overview labels API keys legacy, without removal dates (5 of 20). The docs describe separate US and EU regions and US-only AI processing. A sub-processor page exists at www.pandadoc.com/legal/subprocessors but refused our reader (8 of 20, partly unchecked)." }, "scores": { "a": 77, "b": 59 } }, { "by": 11, "category": "reliability", "leads": "boldsign", "name": "Reliability", "reasons": { "a": "Read with the hosted lines and scored on the REST API v1, the surface the SDKs and the hosted MCP server call. status.boldsign.com on Atlassian Statuspage has Web App and API components for Global, Europe, Canada and Australia plus Docs, with 90-day uptime and an incident history (20). The history feed, read on 3 November 2026, lists four one-hour scheduled maintenances between 19 and 27 September and no incident after a 20-minute partial disruption on 21 July 2026, so the 90 days from 5 August are clean (30). Rate limits are published per account, 2,000 requests an hour live and 50 an hour in the sandbox (15). The rate-limit page says 429 is returned with messages and usage is tracked in response headers, and the guide recommends webhooks over polling. No Retry-After is documented and there are no idempotency keys (6 of 15). No SLA document was found. security.txt advertises a 99.999 per cent uptime SLA, the terms disclaim uninterrupted service and refer to a support SLA available on request (3 of 10). v1 is the stable version with beta endpoints under v1-beta (10). 20 + 30 + 15 + 6 + 3 + 10 = 84.", "b": "Read with the hosted lines and scored on the REST API, which the hosted MCP server calls. status.pandadoc.com on Statuspage has components for API, Webhooks, sending, uploading and downloading in two regions, with history (20). In the 90 days from 4 August 2026 its feed lists three incidents. On 20 August document creation and viewing degraded for some users, mitigated by PandaDoc's own update after 17 minutes. On 1 September inline fields failed in the recipient view for some users. On 6 September document processing was unavailable for many customers from 17:00 to 20:28 PDT, through the app and the API, on the US and Global components only. Each names some customers or one region, so all three read as partial and minor (20 of 30). The 15 July Public API failures have left the window. Rate limits published per endpoint, 100 to 2,000 requests a minute (15). The docs say to retry 409 and back off on 429, but Retry-After appears only on four not-ready responses and there are no idempotency keys for creates (8 of 15). No SLA found in the developer docs or help centre, and the legal pages on www.pandadoc.com still answer with a browser check (0, unchecked). The v1 API is generally available and the MCP server is at 1.0.0 in the registry, with a few endpoints under /public/beta (10)." }, "scores": { "a": 84, "b": 73 } }, { "by": 10, "category": "payments", "leads": "boldsign", "name": "Payments \u0026 pricing", "reasons": { "a": "Read with the hosted rubric. No x402, MPP or L402 (0). The Enterprise API plan is public at $30 a month with 40 envelopes and $0.75 per additional envelope, and add-ons are priced per unit (20). The free sandbox gives full API access with no credit card, and the 30-day trial also needs no card per the pricing page (20). A person signs up in a browser and mints the key or registers the OAuth app in the web app (0). 0 + 20 + 20 + 0 = 40.", "b": "Read with the hosted rubric. No x402, MPP or L402 (0). Plan prices are public in the help centre (Starter $19 a user a month billed annually, Business $49, Enterprise through Sales), but usage credit packs for API documents are priced only on the in-app billing page (10). The Free plan includes API and MCP access with 25 API-created documents and 5 sends a month, and the sandbox key isn't charged, with no card needed (20). A person has to sign up in a browser, verify an email address and approve OAuth or create a key, and a production key needs approval from Sales (0)." }, "scores": { "a": 40, "b": 30 } }, { "by": 6, "category": "ergonomics", "leads": "pandadoc", "name": "Agent ergonomics", "reasons": { "a": "List calls take Page and PageSize and document properties return the full object; no field selection was found. The hosted MCP server has 14 compact tools, but the REST API is the graded surface (14 of 25). Page and PageSize on document, template, contact, user and team lists, with search, status, date, label and team filters on documents (16 of 20). The troubleshooting page gives a cause and a fix per status code, 401 covers a region mismatch, and 422 carries validation detail (14 of 20). No idempotency keys. Draft send and the sandbox make trial calls safe, and the MCP docs ask for a human confirmation before send, reminder and revoke, but the tools' annotations couldn't be read (5 of 20). A send needs files or a template, a title and signers with fields, and the SDKs cover .NET, Node, Python, Java and PHP (13 of 15). 14 + 16 + 14 + 5 + 13 = 62.", "b": "List endpoints take `count` (default 50, maximum 100) and `page`. There is no field selection, but a light status endpoint sits beside the full details call, and beta endpoints return a document summary in four lengths or the content as Markdown or plain text. The number of MCP tools isn't published, and PandaDoc's own skills name 17 (17 of 25). Document lists filter by status, dates, template, folder, contact, tag, metadata and free text, with `order_by` (20). Errors carry a type and detail, with 409 for a document that isn't ready, 403 `forbidden_error` when usage credits run out and 423 for a locked account, each explained in the guides (16 of 20). No idempotency keys on creates or sends. Webhook deliveries carry a stable `X-PandaDoc-Webhook-Event-Id`, and we couldn't see whether the MCP tools carry readOnlyHint or destructiveHint (4 of 20). Creating from a template needs a name, a template ID and recipients, but creation is asynchronous and needs a poll or webhook before sending. Official SDKs in Python, Node, Java and PHP, with the Python package unchanged since April 2024 (11 of 15)." }, "scores": { "a": 62, "b": 68 } } ], "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Syncfusion, Inc.", "b": "PandaDoc", "name": "Vendor" }, { "a": "https://api.boldsign.com/v1", "b": "https://api.pandadoc.com/public/v1", "name": "Hosted endpoint" }, { "a": "HTTP, Streamable HTTP", "b": "HTTP", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Freemium", "name": "Pricing" }, { "a": "$0.25 per transaction", "b": "not published", "name": "Price for e-signatures" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Proprietary hosted service under the BoldSign Terms of Use. The five official SDKs and the deprecated local MCP package on GitHub are MIT", "b": "Proprietary service under PandaDoc's Master Services Agreement. The OpenAPI specification, the API client SDKs and the MCP server guide on GitHub are MIT", "name": "Licence" }, { "a": "14", "b": "none", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "not listed", "b": "com.pandadoc.mcp/mcp", "name": "MCP registry" }, { "a": "2026-10-16", "b": "2026-10-29", "name": "Last release" }, { "a": "2025-02-01", "b": "couldn't be read", "name": "Terms last updated" }, { "a": "2026-07-01", "b": "couldn't be read", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "couldn't be read", "name": "Customer content may train models" }, { "a": "yes", "b": "couldn't be read", "name": "Terms restrict automated access" }, { "a": "yes", "b": "couldn't be read", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "couldn't be read", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "couldn't be read", "name": "Arbitration or class-action waiver" }, { "a": "1 stars", "b": "50k npm/wk, 12k PyPI/wk", "name": "Popularity" }, { "a": "none", "b": "3/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "BoldSign scores 70.3 (BB) on agent readiness against PandaDoc's 63.1 (B), and leads in 5 of 7 scored categories. PandaDoc leads on agent ergonomics.", "question": "Which is better for AI agents, BoldSign or PandaDoc?" }, { "answer": "Both take an API key or an OAuth sign-in.", "question": "Do BoldSign and PandaDoc need an API key?" }, { "answer": "Yes. BoldSign has a hosted endpoint at https://api.boldsign.com/v1 and PandaDoc at https://api.pandadoc.com/public/v1.", "question": "Can an agent call BoldSign and PandaDoc without installing anything?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 84 against 73", "Payments \u0026 pricing, 40 against 30", "Transparency \u0026 trust, 77 against 59" ], "also": [ "Agent-ready, a grade of BB or better", "No incidents deducted, where PandaDoc loses 3 points for them" ], "goodFor": "A product team embedding signing, requesting and templates at a per-envelope price with regional hosting in the US, EU, Canada or Australia, and an agent that sends from templates and tracks status through the hosted MCP server.", "slug": "boldsign", "watchFor": "API keys carry every scope and the docs say that is not customisable; only OAuth apps get narrower scopes, and there is no Documents.Read scope" }, { "aheadOn": [ "Agent ergonomics, 68 against 62" ], "also": null, "goodFor": "Suited to agents that prepare a proposal, quote or contract from a template, send it for signature and track it, for a team that already works in PandaDoc.", "slug": "pandadoc", "watchFor": "Pricing-table `sections` became required on document creation on 21 September 2026, announced the same day" } ], "history": { "boldsign": null, "pandadoc": [ { "causes": [ "correction", "event" ], "date": "2026-11-02", "delta": 0, "from": 63.1, "fromGrade": "B", "to": 63.1, "toGrade": "B" } ] }, "job": { "capability": "esign.send", "name": "E-signatures" }, "others": [ { "json": "https://www.anchorterminal.com/compare/adobe-acrobat-sign-vs-boldsign.json", "title": "Adobe Acrobat Sign vs BoldSign", "url": "https://www.anchorterminal.com/compare/adobe-acrobat-sign-vs-boldsign" }, { "json": "https://www.anchorterminal.com/compare/adobe-acrobat-sign-vs-pandadoc.json", "title": "Adobe Acrobat Sign vs PandaDoc", "url": "https://www.anchorterminal.com/compare/adobe-acrobat-sign-vs-pandadoc" }, { "json": "https://www.anchorterminal.com/compare/boldsign-vs-documenso.json", "title": "BoldSign vs Documenso", "url": "https://www.anchorterminal.com/compare/boldsign-vs-documenso" }, { "json": "https://www.anchorterminal.com/compare/boldsign-vs-docuseal.json", "title": "BoldSign vs DocuSeal", "url": "https://www.anchorterminal.com/compare/boldsign-vs-docuseal" }, { "json": "https://www.anchorterminal.com/compare/boldsign-vs-docusign.json", "title": "BoldSign vs Docusign", "url": "https://www.anchorterminal.com/compare/boldsign-vs-docusign" }, { "json": "https://www.anchorterminal.com/compare/boldsign-vs-dropbox-sign.json", "title": "BoldSign vs Dropbox Sign", "url": "https://www.anchorterminal.com/compare/boldsign-vs-dropbox-sign" }, { "json": "https://www.anchorterminal.com/compare/boldsign-vs-signnow.json", "title": "BoldSign vs airSlate SignNow", "url": "https://www.anchorterminal.com/compare/boldsign-vs-signnow" }, { "json": "https://www.anchorterminal.com/compare/boldsign-vs-signwell.json", "title": "BoldSign vs SignWell", "url": "https://www.anchorterminal.com/compare/boldsign-vs-signwell" }, { "json": "https://www.anchorterminal.com/compare/boldsign-vs-youtrust.json", "title": "BoldSign vs Youtrust", "url": "https://www.anchorterminal.com/compare/boldsign-vs-youtrust" }, { "json": "https://www.anchorterminal.com/compare/documenso-vs-pandadoc.json", "title": "Documenso vs PandaDoc", "url": "https://www.anchorterminal.com/compare/documenso-vs-pandadoc" }, { "json": "https://www.anchorterminal.com/compare/docuseal-vs-pandadoc.json", "title": "DocuSeal vs PandaDoc", "url": "https://www.anchorterminal.com/compare/docuseal-vs-pandadoc" }, { "json": "https://www.anchorterminal.com/compare/docusign-vs-pandadoc.json", "title": "Docusign vs PandaDoc", "url": "https://www.anchorterminal.com/compare/docusign-vs-pandadoc" }, { "json": "https://www.anchorterminal.com/compare/dropbox-sign-vs-pandadoc.json", "title": "Dropbox Sign vs PandaDoc", "url": "https://www.anchorterminal.com/compare/dropbox-sign-vs-pandadoc" }, { "json": "https://www.anchorterminal.com/compare/pandadoc-vs-signnow.json", "title": "PandaDoc vs airSlate SignNow", "url": "https://www.anchorterminal.com/compare/pandadoc-vs-signnow" }, { "json": "https://www.anchorterminal.com/compare/pandadoc-vs-signwell.json", "title": "PandaDoc vs SignWell", "url": "https://www.anchorterminal.com/compare/pandadoc-vs-signwell" }, { "json": "https://www.anchorterminal.com/compare/pandadoc-vs-youtrust.json", "title": "PandaDoc vs Youtrust", "url": "https://www.anchorterminal.com/compare/pandadoc-vs-youtrust" } ], "panel": null, "scores": [ { "boldsign": 84, "by": 11, "edge": "boldsign", "key": "reliability", "name": "Reliability", "pandadoc": 73, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "boldsign": 85, "by": 2, "edge": "pandadoc", "key": "schema", "name": "Schema \u0026 documentation", "pandadoc": 87, "weight": 13 }, { "boldsign": 62, "by": 6, "edge": "pandadoc", "key": "ergonomics", "name": "Agent ergonomics", "pandadoc": 68, "weight": 13 }, { "boldsign": 63, "by": 2, "edge": "boldsign", "key": "security", "name": "Security \u0026 auth", "pandadoc": 61, "weight": 14 }, { "boldsign": 40, "by": 10, "edge": "boldsign", "key": "payments", "name": "Payments \u0026 pricing", "pandadoc": 30, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "boldsign": 78, "by": 1, "edge": "boldsign", "key": "maintenance", "name": "Maintenance \u0026 community", "pandadoc": 77, "weight": 7 }, { "boldsign": 77, "by": 18, "edge": "boldsign", "key": "transparency", "name": "Transparency \u0026 trust", "pandadoc": 59, "weight": 7 } ], "summary": "BoldSign scores 70.3 (BB) on agent readiness against PandaDoc's 63.1 (B), and leads in 5 of 7 scored categories. PandaDoc leads on agent ergonomics. Both do e-signatures.", "tasks": null, "tutorials": [], "verdicts": { "boldsign": "A public OpenAPI file, llms.txt, 20 OAuth scopes, published rate limits, a free sandbox and a clean 90-day status history. API keys carry every scope, there are no idempotency keys, the 2,000-an-hour account limit is low for bulk work, and the hosted MCP server's 14 tools include sending and revoking with no confirmation step of their own.", "pandadoc": "The public OpenAPI spec reached 8.25.1 on 29 October 2026 with 135 operations, and the OAuth-only hosted MCP server is open to every plan. Pricing-table sections became required on 21 September with notice only that day, document processing failed for many US and Global customers for 208 minutes on 6 September, and writes have no idempotency keys." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/boldsign-vs-pandadoc", "json": "https://www.anchorterminal.com/compare/boldsign-vs-pandadoc.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/boldsign-vs-pandadoc.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/boldsign-vs-pandadoc.min.md" }, "markdown": "BoldSign scores 70.3 (BB) on agent readiness against PandaDoc's 63.1 (B), and leads in 5 of 7 scored categories. PandaDoc leads on agent ergonomics. Both do e-signatures.\n\n- BoldSign: grade BB, 70.3/100, rank #190 of 1349. Markdown https://www.anchorterminal.com/tools/boldsign.md · JSON https://www.anchorterminal.com/api/v1/tools/boldsign.json\n- PandaDoc: grade B, 63.1/100, rank #476 of 1349. Markdown https://www.anchorterminal.com/tools/pandadoc.md · JSON https://www.anchorterminal.com/api/v1/tools/pandadoc.json\n- Best contract, proposal and e-signature APIs for AI agents: https://www.anchorterminal.com/best/e-signatures/index.md\n- All 45 e-signatures comparisons: https://www.anchorterminal.com/compare/e-signatures/index.md\n\n## Which one, for what\n\n### BoldSign (BB)\n\nGood for: A product team embedding signing, requesting and templates at a per-envelope price with regional hosting in the US, EU, Canada or Australia, and an agent that sends from templates and tracks status through the hosted MCP server.\n\nAhead on:\n- Reliability, 84 against 73\n- Payments \u0026 pricing, 40 against 30\n- Transparency \u0026 trust, 77 against 59\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- No incidents deducted, where PandaDoc loses 3 points for them\n\nWatch for: API keys carry every scope and the docs say that is not customisable; only OAuth apps get narrower scopes, and there is no Documents.Read scope\n\n### PandaDoc (B)\n\nGood for: Suited to agents that prepare a proposal, quote or contract from a template, send it for signature and track it, for a team that already works in PandaDoc.\n\nAhead on:\n- Agent ergonomics, 68 against 62\n\nWatch for: Pricing-table `sections` became required on document creation on 21 September 2026, announced the same day\n\n\n## Why the edge\n\n### Transparency \u0026 trust: BoldSign +18\n\n- BoldSign (77): Closed service under Terms of Use effective February 2025 that name Syncfusion, Inc. and North Carolina law. The SDKs and the deprecated MCP package are MIT (17 of 30). The privacy policy (July 2026) keeps personal data as long as necessary with no number, the terms keep signed documents and audit trails at least three years and schedule inactive accounts for deletion after six months, sandbox documents go after 14 days, and the terms say customer data is used for nothing but performing the agreement. A subprocessor list is linked and no DPA was found on the pages read (20 of 30). No deprecation policy. The terms let Syncfusion modify or discontinue BoldSign at its discretion, and the changelog labels breaking changes without a notice period (6 of 20). The privacy policy links the subprocessor list, and the security page names Google Cloud and Azure regions in US East, the EU, Canada and Australia (16 of 20). 17 + 20 + 6 + 16 = 59.\n- PandaDoc (59): The service is closed under a Master Services Agreement named in the OpenAPI spec. That page refused our reader, so the terms are unread, while the spec, the SDKs and the MCP guide are MIT (8 of 30). The AI policy says customer content isn't used to train models and that third-party AI providers can't retain it, with an opt-out for aggregated usage data. The compliance article says signed documents are kept for the length of the customer relationship. The privacy notice and DPA were not read, so agreement between them is unconfirmed (12 of 30). No written deprecation policy found. The spec marks six items deprecated and the auth overview labels API keys legacy, without removal dates (5 of 20). The docs describe separate US and EU regions and US-only AI processing. A sub-processor page exists at www.pandadoc.com/legal/subprocessors but refused our reader (8 of 20, partly unchecked).\n\n### Reliability: BoldSign +11\n\n- BoldSign (84): Read with the hosted lines and scored on the REST API v1, the surface the SDKs and the hosted MCP server call. status.boldsign.com on Atlassian Statuspage has Web App and API components for Global, Europe, Canada and Australia plus Docs, with 90-day uptime and an incident history (20). The history feed, read on 3 November 2026, lists four one-hour scheduled maintenances between 19 and 27 September and no incident after a 20-minute partial disruption on 21 July 2026, so the 90 days from 5 August are clean (30). Rate limits are published per account, 2,000 requests an hour live and 50 an hour in the sandbox (15). The rate-limit page says 429 is returned with messages and usage is tracked in response headers, and the guide recommends webhooks over polling. No Retry-After is documented and there are no idempotency keys (6 of 15). No SLA document was found. security.txt advertises a 99.999 per cent uptime SLA, the terms disclaim uninterrupted service and refer to a support SLA available on request (3 of 10). v1 is the stable version with beta endpoints under v1-beta (10). 20 + 30 + 15 + 6 + 3 + 10 = 84.\n- PandaDoc (73): Read with the hosted lines and scored on the REST API, which the hosted MCP server calls. status.pandadoc.com on Statuspage has components for API, Webhooks, sending, uploading and downloading in two regions, with history (20). In the 90 days from 4 August 2026 its feed lists three incidents. On 20 August document creation and viewing degraded for some users, mitigated by PandaDoc's own update after 17 minutes. On 1 September inline fields failed in the recipient view for some users. On 6 September document processing was unavailable for many customers from 17:00 to 20:28 PDT, through the app and the API, on the US and Global components only. Each names some customers or one region, so all three read as partial and minor (20 of 30). The 15 July Public API failures have left the window. Rate limits published per endpoint, 100 to 2,000 requests a minute (15). The docs say to retry 409 and back off on 429, but Retry-After appears only on four not-ready responses and there are no idempotency keys for creates (8 of 15). No SLA found in the developer docs or help centre, and the legal pages on www.pandadoc.com still answer with a browser check (0, unchecked). The v1 API is generally available and the MCP server is at 1.0.0 in the registry, with a few endpoints under /public/beta (10).\n\n### Payments \u0026 pricing: BoldSign +10\n\n- BoldSign (40): Read with the hosted rubric. No x402, MPP or L402 (0). The Enterprise API plan is public at $30 a month with 40 envelopes and $0.75 per additional envelope, and add-ons are priced per unit (20). The free sandbox gives full API access with no credit card, and the 30-day trial also needs no card per the pricing page (20). A person signs up in a browser and mints the key or registers the OAuth app in the web app (0). 0 + 20 + 20 + 0 = 40.\n- PandaDoc (30): Read with the hosted rubric. No x402, MPP or L402 (0). Plan prices are public in the help centre (Starter $19 a user a month billed annually, Business $49, Enterprise through Sales), but usage credit packs for API documents are priced only on the in-app billing page (10). The Free plan includes API and MCP access with 25 API-created documents and 5 sends a month, and the sandbox key isn't charged, with no card needed (20). A person has to sign up in a browser, verify an email address and approve OAuth or create a key, and a production key needs approval from Sales (0).\n\n### Agent ergonomics: PandaDoc +6\n\n- BoldSign (62): List calls take Page and PageSize and document properties return the full object; no field selection was found. The hosted MCP server has 14 compact tools, but the REST API is the graded surface (14 of 25). Page and PageSize on document, template, contact, user and team lists, with search, status, date, label and team filters on documents (16 of 20). The troubleshooting page gives a cause and a fix per status code, 401 covers a region mismatch, and 422 carries validation detail (14 of 20). No idempotency keys. Draft send and the sandbox make trial calls safe, and the MCP docs ask for a human confirmation before send, reminder and revoke, but the tools' annotations couldn't be read (5 of 20). A send needs files or a template, a title and signers with fields, and the SDKs cover .NET, Node, Python, Java and PHP (13 of 15). 14 + 16 + 14 + 5 + 13 = 62.\n- PandaDoc (68): List endpoints take `count` (default 50, maximum 100) and `page`. There is no field selection, but a light status endpoint sits beside the full details call, and beta endpoints return a document summary in four lengths or the content as Markdown or plain text. The number of MCP tools isn't published, and PandaDoc's own skills name 17 (17 of 25). Document lists filter by status, dates, template, folder, contact, tag, metadata and free text, with `order_by` (20). Errors carry a type and detail, with 409 for a document that isn't ready, 403 `forbidden_error` when usage credits run out and 423 for a locked account, each explained in the guides (16 of 20). No idempotency keys on creates or sends. Webhook deliveries carry a stable `X-PandaDoc-Webhook-Event-Id`, and we couldn't see whether the MCP tools carry readOnlyHint or destructiveHint (4 of 20). Creating from a template needs a name, a template ID and recipients, but creation is asynchronous and needs a poll or webhook before sending. Official SDKs in Python, Node, Java and PHP, with the Python package unchanged since April 2024 (11 of 15).\n\n## Score by category\n\n| Category | Weight | BoldSign | PandaDoc | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 84 | 73 | BoldSign +11 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 85 | 87 | PandaDoc +2 |\n| Agent ergonomics | 13% (16.2 this run) | 62 | 68 | PandaDoc +6 |\n| Security \u0026 auth | 14% (17.5 this run) | 63 | 61 | BoldSign +2 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 40 | 30 | BoldSign +10 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 78 | 77 | BoldSign +1 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 77 | 59 | BoldSign +18 |\n| Negative events | ≤15 | 0 | -3 | |\n| **Total** | | **70.3 · BB** | **63.1 · B** | |\n\n## Facts side by side\n\n| Fact | BoldSign | PandaDoc |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Syncfusion, Inc. | PandaDoc |\n| Hosted endpoint | `https://api.boldsign.com/v1` | `https://api.pandadoc.com/public/v1` |\n| Transports | HTTP, Streamable HTTP | HTTP |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Freemium | Freemium |\n| Price for e-signatures | $0.25 per transaction | not published |\n| x402 | no | no |\n| Licence | Proprietary hosted service under the BoldSign Terms of Use. The five official SDKs and the deprecated local MCP package on GitHub are MIT | Proprietary service under PandaDoc's Master Services Agreement. The OpenAPI specification, the API client SDKs and the MCP server guide on GitHub are MIT |\n| Tools exposed | 14 | none |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| MCP registry | not listed | `com.pandadoc.mcp/mcp` |\n| Last release | 2026-10-16 | 2026-10-29 |\n| Terms last updated | 2025-02-01 | couldn't be read |\n| Privacy policy last updated | 2026-07-01 | couldn't be read |\n| Customer content may train models | not found in the text | couldn't be read |\n| Terms restrict automated access | yes | couldn't be read |\n| Terms restrict benchmarking | yes | couldn't be read |\n| Terms or service can change without notice | not found in the text | couldn't be read |\n| Arbitration or class-action waiver | yes | couldn't be read |\n| Popularity | 1 stars | 50k npm/wk, 12k PyPI/wk |\n| Agent reviews | none | 3/5 (4) |\n\n## How the scores have moved\n\n### BoldSign\n\nNo score change since it was listed.\n\n### PandaDoc\n\n- no change on 2 November 2026: correction, negative event\n\n## Verdicts\n\n**BoldSign.** A public OpenAPI file, llms.txt, 20 OAuth scopes, published rate limits, a free sandbox and a clean 90-day status history. API keys carry every scope, there are no idempotency keys, the 2,000-an-hour account limit is low for bulk work, and the hosted MCP server's 14 tools include sending and revoking with no confirmation step of their own.\n\n**PandaDoc.** The public OpenAPI spec reached 8.25.1 on 29 October 2026 with 135 operations, and the OAuth-only hosted MCP server is open to every plan. Pricing-table sections became required on 21 September with notice only that day, document processing failed for many US and Global customers for 208 minutes on 6 September, and writes have no idempotency keys.\n\n## Before you call either\n\n### BoldSign\n\n1. Send `X-API-KEY: $BOLDSIGN_API_KEY` to the regional base URL (api.boldsign.com, api-eu, api-ca or api-au); a key from one region fails on another, and the MCP endpoint must match too\n2. Build against a Sandbox key first. Sandbox documents are watermarked and deleted after 14 days, and the sandbox allows only 50 requests an hour\n3. Stay under 2,000 requests an hour per account in production and use webhooks instead of polling `document/properties`; on a 429 wait for the window to reset\n4. Don't retry a timed-out `document/send` blindly. There is no idempotency key, so list documents by title or search before sending again\n5. Verify `X-BoldSign-Signature` (HMAC-SHA256 with the endpoint secret) on every webhook before acting on its payload\n6. On the MCP server, start with `list_templates` and `get_document_properties`, and confirm with the person before `send_document_from_template`, `send_reminder_for_document_sign` or `revoke_document`\n\n### PandaDoc\n\n1. Wait for `document.draft` before sending. Creation is asynchronous and a new document stays in `document.uploaded` for a few seconds\n2. Match the region. Accounts on app.pandadoc.eu use api.pandadoc.eu and mcp.pandadoc.eu, and the global hosts reject them\n3. Check for an existing document before retrying a create. There's no idempotency key and each production create uses a usage credit\n4. Retry 409 after a pause and back off on 429. A sandbox key allows 10 requests a minute per endpoint\n5. Don't rely on webhooks alone. Failed deliveries aren't retried, so poll the status endpoint as a fallback\n6. Send full pricing-table `sections` with defaults, row data and row options. Since 8.17.1 a create that omits them is rejected\n\n## Questions\n\n### Which is better for AI agents, BoldSign or PandaDoc?\n\nBoldSign scores 70.3 (BB) on agent readiness against PandaDoc's 63.1 (B), and leads in 5 of 7 scored categories. PandaDoc leads on agent ergonomics.\n\n### Do BoldSign and PandaDoc need an API key?\n\nBoth take an API key or an OAuth sign-in.\n\n### Can an agent call BoldSign and PandaDoc without installing anything?\n\nYes. BoldSign has a hosted endpoint at https://api.boldsign.com/v1 and PandaDoc at https://api.pandadoc.com/public/v1.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/boldsign-vs-pandadoc.json, and with the fewest tokens: https://www.anchorterminal.com/compare/boldsign-vs-pandadoc.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"boldsign\", \"b\": \"pandadoc\"}`. From a terminal: `anchor compare boldsign pandadoc`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/boldsign.json and https://www.anchorterminal.com/api/v1/tools/pandadoc.json\n\n## Other comparisons with BoldSign or PandaDoc\n\n- [Adobe Acrobat Sign vs BoldSign](https://www.anchorterminal.com/compare/adobe-acrobat-sign-vs-boldsign.md)\n- [Adobe Acrobat Sign vs PandaDoc](https://www.anchorterminal.com/compare/adobe-acrobat-sign-vs-pandadoc.md)\n- [BoldSign vs Documenso](https://www.anchorterminal.com/compare/boldsign-vs-documenso.md)\n- [BoldSign vs DocuSeal](https://www.anchorterminal.com/compare/boldsign-vs-docuseal.md)\n- [BoldSign vs Docusign](https://www.anchorterminal.com/compare/boldsign-vs-docusign.md)\n- [BoldSign vs Dropbox Sign](https://www.anchorterminal.com/compare/boldsign-vs-dropbox-sign.md)\n- [BoldSign vs airSlate SignNow](https://www.anchorterminal.com/compare/boldsign-vs-signnow.md)\n- [BoldSign vs SignWell](https://www.anchorterminal.com/compare/boldsign-vs-signwell.md)\n- [BoldSign vs Youtrust](https://www.anchorterminal.com/compare/boldsign-vs-youtrust.md)\n- [Documenso vs PandaDoc](https://www.anchorterminal.com/compare/documenso-vs-pandadoc.md)\n- [DocuSeal vs PandaDoc](https://www.anchorterminal.com/compare/docuseal-vs-pandadoc.md)\n- [Docusign vs PandaDoc](https://www.anchorterminal.com/compare/docusign-vs-pandadoc.md)\n- [Dropbox Sign vs PandaDoc](https://www.anchorterminal.com/compare/dropbox-sign-vs-pandadoc.md)\n- [PandaDoc vs airSlate SignNow](https://www.anchorterminal.com/compare/pandadoc-vs-signnow.md)\n- [PandaDoc vs SignWell](https://www.anchorterminal.com/compare/pandadoc-vs-signwell.md)\n- [PandaDoc vs Youtrust](https://www.anchorterminal.com/compare/pandadoc-vs-youtrust.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-04", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "BoldSign vs PandaDoc", "url": "" } ], "description": "BoldSign scores 70.3 (BB) to PandaDoc's 63.1 (B) for e-signatures. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "BoldSign BB 70.3", "PandaDoc B 63.1", "scores" ], "h1": "BoldSign vs PandaDoc", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/boldsign-vs-pandadoc", "published": "2026-10-01", "section": "tools", "title": "BoldSign vs PandaDoc for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-04", "url": "https://www.anchorterminal.com/compare/boldsign-vs-pandadoc" }, "tokens": { "markdown": 4400, "slim": 2680 }, "version": 1 }