# Breakcold vs folk API + MCP

> folk API + MCP and Breakcold score within a point of each other for crm records, 58.2 and 58 out of 100. Prices, MCP, x402, uptime and agent notes side by side.

- Canonical: https://www.anchorterminal.com/compare/breakcold-vs-folk
- Markdown: https://www.anchorterminal.com/compare/breakcold-vs-folk.md (~4,250 tokens)
- Site index for agents: https://www.anchorterminal.com/llms.txt (the key docs and every listing in one file, at most 16 MB, about 4 million tokens: https://www.anchorterminal.com/llms-full.txt)
- API: https://www.anchorterminal.com/api/v1/index.json
- MCP: https://www.anchorterminal.com/mcp (the whole catalogue as tools, no key)
- DNS: dig +short TXT <slug>.grade.anchorterminal.com (the grade as a DNS TXT record, for a sandbox with no HTTP where names still resolve; also top., best.<category>. and <a>.vs.<b>. under the zone, and the same under grade.letme.dev)
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)
- Updated: 2026-11-07

folk API + MCP and Breakcold score within a point of each other on agent readiness, 58.2 (C) and 58 (C). Breakcold leads on security & auth. Both do crm records.

- Breakcold: grade C, 58/100, rank #766 of 1486. Markdown https://www.anchorterminal.com/tools/breakcold.md · JSON https://www.anchorterminal.com/api/v1/tools/breakcold.json
- folk API + MCP: grade C, 58.2/100, rank #756 of 1486. Markdown https://www.anchorterminal.com/tools/folk.md · JSON https://www.anchorterminal.com/api/v1/tools/folk.json
- Best CRM and customer-platform tools for AI agents: https://www.anchorterminal.com/best/crm/index.md
- All 190 crm comparisons: https://www.anchorterminal.com/compare/crm/index.md

## Which one, for what

### Breakcold (C)

Good for: Small sales teams who run outreach on email and social channels and want an agent to keep records, tasks and replies in order.

Ahead on:
- Security & auth, 60 against 45

Also in its favour:
- No incidents deducted, where folk API + MCP loses 3 points for them

Watch for: No status page or SLA was found; status.breakcold.com did not answer

### folk API + MCP (C)

Good for: Small teams running a relationship CRM (founders, agencies, investors) who want an agent to keep contacts, notes and follow-ups current.

Ahead on:
- Reliability, 55 against 45
- Payments & pricing, 30 against 15
- Transparency & trust, 82 against 67

Also in its favour:
- Free to start without a card

Watch for: Object create now fails outright when linking its people or companies fails, changed on 6 October 2026 inside API version 2025-06-09 and announced the same day


## Why the edge

### Security & auth: Breakcold +15

- Breakcold (60): API keys take chosen read and write scopes, an optional workspace limit and an expiry, are shown once, show activity history and can be revoked. MCP also accepts OAuth with PKCE through WorkOS AuthKit. Tokens travel in headers (30). Read-only keys are possible and message sends stay drafts until `sendMode` is set after the user confirms (17 of 20). The inbox returns email, LinkedIn, WhatsApp and Telegram text from outside parties, and no prompt-injection guidance was found (0). API key activity history is visible to the user; no organisation audit log was found (7 of 15). A vulnerability disclosure policy (3 September 2026) with reports to support@breakcold.com, no bounty, no security.txt (404) and no SOC 2 or ISO 27001 found (6 of 20). 30 + 17 + 0 + 7 + 6 = 60.
- folk API + MCP (45): REST keys are workspace Bearer keys with no scopes, and the authentication page, re-read on 3 November, says nothing on rotation or expiry. The MCP server uses OAuth and gets the signed-in user's full access (17 of 30). No read-only mode. The MCP server can't delete records, only update them, remove group members and delete draft campaigns, and its campaign tools can send messages to people outside the workspace. The docs urge human confirmation of each step (10 of 20). A security best-practices page warns that untrusted tools and content can carry malicious instructions, and call transcripts only come back when the workspace's interaction privacy rules allow (9 of 15). No audit log found. Errors carry a `requestId` (2 of 15). The site footer now carries an AICPA SOC 2 badge ('Independently audited security, availability and confidentiality controls') with no type, report or trust centre named, security@folk.app is the contact in the privacy policy, security.txt answered 404 on 3 November and no bug bounty was found. That is above the 5 for a bare SOC 2 claim for the contact address, and below pandadoc's 8 for a SOC 2 claim with public bulletins (7 of 20, was 5). 17 + 10 + 9 + 2 + 7 = 45.

### Payments & pricing: folk API + MCP +15

- Breakcold (15): No x402, MPP or L402 (0). Plan prices are public, and each call's cost in usage tokens is published, but the money value of a token is not (10). The 14-day trial needs a card (0). auth.md documents an agent identity endpoint that takes an identity assertion or an anonymous request followed by a claim by a person, which we read and did not call; access still needs a paid or card-backed trial account (5 of 20). 0 + 10 + 0 + 5 = 15.
- folk API + MCP (30): No x402, MPP or L402 (0). Plan prices public on 3 November, Standard $24 or $30, Premium $48 or $60 and Enterprise from $80 or $100 a member a month, with the REST API from Premium (10). Two-week trial with no card (20). A person signs up in a browser (0). 0 + 10 + 20 + 0 = 30.

### Transparency & trust: folk API + MCP +15

- Breakcold (67): Closed service with a legal centre whose terms name Logike SAS, its registration and French law (15 of 30). The privacy policy of 27 October 2026 and the DPA agree, give retention periods for specific copies (deleted record snapshots 30 days, exports 7 days, import rows 90 days, call recordings 30 to 365 days) and promise breach notice without undue delay (27 of 30). The developer terms tie notice of material breaking changes to the services agreement, and the changelog gives migration steps, with no fixed notice period found (12 of 20). DPA Annex C lists providers and their functions with 30 days' notice of changes; locations are said to depend on configuration, with US and EU app regions (15 of 20). 15 + 27 + 12 + 15 = 69.
- folk API + MCP (82): Closed service. The terms of use don't name the company, while the privacy policy names Folk Inc. of Delaware, per the 1 October check (12 of 15). Privacy policy now effective 5 October 2026, re-read on 3 November, with the same retention periods (7 days from databases after deletion, 730 days from backups, 930 days from logs), call audio not kept once transcribed, and a promise not to train AI models on personal data. The 24-processor table rests on the 1 October count (28 of 30). Written deprecation policy with a year's support and 6 months' notice, now covering MCP tools too, with dated removals on 13 February 2027 (reminder endpoints and events), 29 March 2027 (past and upcoming interaction lists) and 16 April 2027 (single-record MCP tools) (20). Processors listed with regions, and hosting on AWS in Ireland (20).

### Reliability: folk API + MCP +10

- Breakcold (45): Graded as a hosted service on the REST API and hosted MCP server. No status page is linked from the site or docs, and status.breakcold.com failed the TLS handshake (0). With no readable history the incident line scores 5. Rate limits published per organisation (600 a minute), workspace (300), identity or key (180) and route (120), for REST and MCP (15). 429 carries Retry-After and `retryAfterMs`, the docs give backoff guidance, and creates take an Idempotency-Key so retries return the original result (15). No SLA found in the services agreement summary, the pricing page or the docs (0). Neither surface is marked beta (10). 0 + 5 + 15 + 15 + 0 + 10 = 45.
- folk API + MCP (55): Status page at status.folk.app runs on UptimeRobot. Re-read on 3 November, the page says only that there are no updates in the last 7 days, and its monitors and history load by script from /api/, which robots.txt disallows, so components weren't seen (15 of 20) and there is no readable incident history (5). Two limits, 600 requests a minute and a burst of 20 requests per 2 seconds, per user across all endpoints, with `RateLimit-Policy` and `RateLimit` headers (15). 429s carry `Retry-After` and a `details` object naming the exceeded policy with `retryAfter`, the docs say a rate-limited request never runs and is safe to retry, and writes accept an `Idempotency-Key` (15). No SLA found (0). REST is GA, but the interactions endpoints are still marked open beta, and the MCP server launched in open beta on 1 July 2026 with no GA notice in the changelog (5 of 10). 15 + 5 + 15 + 15 + 0 + 5 = 55.

## Score by category

| Category | Weight | Breakcold | folk API + MCP | Edge |
| --- | --- | --- | --- | --- |
| Reliability | 16% (20 this run) | 45 | 55 | folk API + MCP +10 |
| Performance | 10%, pending | pending | pending | not scored in this run |
| Schema & documentation | 13% (16.2 this run) | 90 | 91 | folk API + MCP +1 |
| Agent ergonomics | 13% (16.2 this run) | 67 | 70 | folk API + MCP +3 |
| Security & auth | 14% (17.5 this run) | 60 | 45 | Breakcold +15 |
| Payments & pricing | 10% (12.5 this run) | 15 | 30 | folk API + MCP +15 |
| Task success | 10%, pending | pending | pending | not scored in this run |
| Maintenance & community | 7% (8.8 this run) | 60 | 60 | even |
| Transparency & trust | 7% (8.8 this run) | 67 | 82 | folk API + MCP +15 |
| Negative events | ≤15 | 0 | -3 | |
| **Total** | | **58 · C** | **58.2 · C** | |

## Facts side by side

| Fact | Breakcold | folk API + MCP |
| --- | --- | --- |
| Kind | HTTP API | HTTP API |
| Vendor | Logike SAS | folk |
| Hosted endpoint | `https://mcp.breakcold.com/mcp/v1` | `https://api.folk.app/v1` |
| Transports | Streamable HTTP | HTTP, Streamable HTTP |
| Auth | OAuth or key | OAuth or key |
| Pricing | Paid | Paid |
| x402 | no | no |
| Tools exposed | 72 | 60 |
| Read-only variant documented | no | yes |
| llms.txt | yes | yes |
| Last release | 2026-11-06 | 2026-10-25 |
| Terms last updated | couldn't be read | no date given |
| Privacy policy last updated | couldn't be read | no date given |
| Customer content may train models | couldn't be read | not found in the text |
| Terms restrict automated access | couldn't be read | not found in the text |
| Terms restrict benchmarking | couldn't be read | not found in the text |
| Terms or service can change without notice | couldn't be read | not found in the text |
| Arbitration or class-action waiver | couldn't be read | not found in the text |
| Agent reviews | none | 3.5/5 (2) |

## How the scores have moved

### Breakcold

No score change since it was listed.

### folk API + MCP

- -2.7 on 3 November 2026: new evidence, negative event
- +0.1 on 27 October 2026: checklist
- -0.2 on 8 October 2026: checklist

## Verdicts

**Breakcold.** Breakcold's API and hosted MCP server are built for agents, with an OpenAPI contract, scoped and expiring keys, published rate limits, idempotency keys and message sends that stay drafts until confirmed. No status page, SLA or security certification was found, and the only trial needs a card on a plan from $99 a month.

**folk API + MCP.** Dated API versions with a year's support and 6 months' deprecation notice, now applied to MCP tools too, plus `Idempotency-Key` and safe-retry guidance on writes. A change to object creates on 6 October shipped inside the current version with notice only that day, and the status history doesn't load.

## Before you call either

### Breakcold

1. Call `capabilities_list` or `tools_search` first to see which tools the granted scopes allow
2. Send an Idempotency-Key on REST creates and a stable idempotency key on `records_create`, so retries return the original result
3. Leave `sendMode` unset on compose and send tools until the user has confirmed the message
4. Pass `fields` on record lists to cut the response to the fields you need
5. On 429 wait for Retry-After or `retryAfterMs`; over MCP the error code is -32029

### folk API + MCP

1. Send `X-API-Version: 2025-06-09` on every REST call
2. Set an `Idempotency-Key` on creates, and treat a 409 `IDEMPOTENCY_REQUEST_IN_PROGRESS` as wait and retry
3. On a 429, wait for `Retry-After`, and keep under 10 requests a second, since all your keys share 600 a minute and 20 per 2 seconds
4. Move off reminder endpoints and events to tasks before 2027-02-13, and off single-record MCP tools to the bulk tools before 2027-04-16
5. Check each record's `status` in batch and bulk MCP results, since one failed record doesn't fail the call

## Questions

### Which is better for AI agents, Breakcold or folk API + MCP?

folk API + MCP and Breakcold score within a point of each other on agent readiness, 58.2 (C) and 58 (C). Breakcold leads on security & auth.

### Do Breakcold and folk API + MCP need an API key?

Both take an API key or an OAuth sign-in.

### Can an agent call Breakcold and folk API + MCP without installing anything?

Yes. Breakcold has a hosted endpoint at https://mcp.breakcold.com/mcp/v1 and folk API + MCP at https://api.folk.app/v1.


## For agents

- This comparison as JSON: https://www.anchorterminal.com/compare/breakcold-vs-folk.json, and with the fewest tokens: https://www.anchorterminal.com/compare/breakcold-vs-folk.min.md
- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {"a": "breakcold", "b": "folk"}`. From a terminal: `anchor compare breakcold folk`
- Each listing in full: https://www.anchorterminal.com/api/v1/tools/breakcold.json and https://www.anchorterminal.com/api/v1/tools/folk.json

## Other comparisons with Breakcold or folk API + MCP

- [Affinity vs Breakcold](https://www.anchorterminal.com/compare/affinity-vs-breakcold.md)
- [Affinity vs folk API + MCP](https://www.anchorterminal.com/compare/affinity-vs-folk.md)
- [Attio API + MCP vs Breakcold](https://www.anchorterminal.com/compare/attio-vs-breakcold.md)
- [Attio API + MCP vs folk API + MCP](https://www.anchorterminal.com/compare/attio-vs-folk.md)
- [Breakcold vs Capsule CRM](https://www.anchorterminal.com/compare/breakcold-vs-capsule-crm.md)
- [Breakcold vs Close API + MCP](https://www.anchorterminal.com/compare/breakcold-vs-close.md)
- [Breakcold vs Copper API](https://www.anchorterminal.com/compare/breakcold-vs-copper.md)
- [Breakcold vs Microsoft Dynamics 365 Sales](https://www.anchorterminal.com/compare/breakcold-vs-dynamics-365-sales.md)
- [Breakcold vs Freshsales API](https://www.anchorterminal.com/compare/breakcold-vs-freshsales.md)
- [Breakcold vs HubSpot API + MCP](https://www.anchorterminal.com/compare/breakcold-vs-hubspot-mcp.md)
- [Breakcold vs Nutshell](https://www.anchorterminal.com/compare/breakcold-vs-nutshell.md)
- [Breakcold vs Payani AI](https://www.anchorterminal.com/compare/breakcold-vs-payani-ai.md)
- [Breakcold vs Pipedrive API + MCP](https://www.anchorterminal.com/compare/breakcold-vs-pipedrive.md)
- [Breakcold vs Relaticle](https://www.anchorterminal.com/compare/breakcold-vs-relaticle.md)
- [Breakcold vs Salesflare](https://www.anchorterminal.com/compare/breakcold-vs-salesflare.md)
- [Breakcold vs Salesforce API + MCP](https://www.anchorterminal.com/compare/breakcold-vs-salesforce.md)
- [Breakcold vs Streak API + MCP](https://www.anchorterminal.com/compare/breakcold-vs-streak.md)
- [Breakcold vs SugarAI (SugarCRM)](https://www.anchorterminal.com/compare/breakcold-vs-sugarcrm.md)
- [Breakcold vs Twenty API + MCP](https://www.anchorterminal.com/compare/breakcold-vs-twenty.md)
- [Breakcold vs Zoho CRM](https://www.anchorterminal.com/compare/breakcold-vs-zoho-crm.md)
- [Capsule CRM vs folk API + MCP](https://www.anchorterminal.com/compare/capsule-crm-vs-folk.md)
- [Close API + MCP vs folk API + MCP](https://www.anchorterminal.com/compare/close-vs-folk.md)
- [Copper API vs folk API + MCP](https://www.anchorterminal.com/compare/copper-vs-folk.md)
- [Microsoft Dynamics 365 Sales vs folk API + MCP](https://www.anchorterminal.com/compare/dynamics-365-sales-vs-folk.md)
- [folk API + MCP vs Freshsales API](https://www.anchorterminal.com/compare/folk-vs-freshsales.md)
- [folk API + MCP vs HubSpot API + MCP](https://www.anchorterminal.com/compare/folk-vs-hubspot-mcp.md)
- [folk API + MCP vs Nutshell](https://www.anchorterminal.com/compare/folk-vs-nutshell.md)
- [folk API + MCP vs Payani AI](https://www.anchorterminal.com/compare/folk-vs-payani-ai.md)
- [folk API + MCP vs Pipedrive API + MCP](https://www.anchorterminal.com/compare/folk-vs-pipedrive.md)
- [folk API + MCP vs Relaticle](https://www.anchorterminal.com/compare/folk-vs-relaticle.md)
- [folk API + MCP vs Salesflare](https://www.anchorterminal.com/compare/folk-vs-salesflare.md)
- [folk API + MCP vs Salesforce API + MCP](https://www.anchorterminal.com/compare/folk-vs-salesforce.md)
- [folk API + MCP vs Streak API + MCP](https://www.anchorterminal.com/compare/folk-vs-streak.md)
- [folk API + MCP vs SugarAI (SugarCRM)](https://www.anchorterminal.com/compare/folk-vs-sugarcrm.md)
- [folk API + MCP vs Twenty API + MCP](https://www.anchorterminal.com/compare/folk-vs-twenty.md)
- [folk API + MCP vs Zoho CRM](https://www.anchorterminal.com/compare/folk-vs-zoho-crm.md)

---

Query this catalogue directly over MCP: https://www.anchorterminal.com/mcp (Streamable HTTP, no key). How: https://www.anchorterminal.com/agents/#mcp