Breakcold vs Streak API + MCP

Breakcold 67

72 MCP tools (5), with tools_search and capabilities_list to find tools by capability or granted scope, and scopes that limit which tools apply (8 back). Cursor pagination, record search and a fields selection on record lists since 3 November (18 of 20). Errors carry a code, message, requestId and retryAfterMs, and the 4 November changelog removed stack frames from messages (17 of 20). Idempotency keys on creates, and compose and send tools return a non-sending draft by default; MCP annotations are not published (14 of 20). No official SDK; setup is one URL with OAuth (5 of 15). 13 + 18 + 17 + 14 + 5 = 67.

Streak API + MCP 21

MCP tool list and count not published, so context cost can't be judged, and the API has few response-size controls (8 of 25). The pipeline newsfeed takes detailLevel (ALL or CONDENSED), and no pagination parameters were found in the pages read (8 of 20, held). Errors are status codes with an unspecified JSON body (5 of 20). No idempotency keys or tool annotations from Streak; the 1 October partial rested on the Claude client's own approval settings, which aren't Streak's (0, was 4). No official SDK and no defaults evidence (0, was 3). 8 + 8 + 5 + 0 + 0 = 21.

Breakcold 60

API changelog entry on 6 November 2026 (30). More than 60 dated entries since 8 August 2026 (20). Closed service with a public API changelog, an RSS feed, a help centre and support by email; no public issue tracker (10 of 15). The CRM MCP server is not in the official MCP registry (the registry's io.github.breakcold/inboxmcp is a separate product at inbox-mcp.com), and no official SDK exists (0). No package to check (0). 30 + 20 + 10 + 0 + 0 = 60.

Streak API + MCP 20

Graded on the API and MCP surface. Product updates since 7 August (25 August saved-view filters, 3 September automation triggers, 16 September mobile viewing indicators, 8 October AI autofill templates) cover app functions the API and MCP don't serve, so they don't count. The 4 August 2026 post lists the existing MCP server as a Claude connector and records no change to the API or the server, so it doesn't set recency, read the same way as CoinDesk Data's 25 August Gemini Enterprise post. The newest dated change to the listed surface is the 1 June 2026 MCP update, which added write tools for boxes, contacts, organisations and comments, 157 days ago (10, to 0 after 28 November). Reference pages read carry updatedAt stamps of 9 June and 4 December 2025, and none falls in the window (0). Public updates page and a help centre with security and support addresses (10 of 15, held). Not in the official MCP registry and no official SDK (0). No packages to judge (0). 10 + 0 + 10 + 0 + 0 = 20.

Breakcold 90

OpenAPI 3.1 contract at docs.breakcold.com/api/openapi.json with 70 operations, each with a description (25). llms.txt and a Markdown copy of each page, plus auth.md and an MCP server card (10). Tool descriptions say how to use them, such as records_create asking for every required field and a stable idempotency key and the send tools saying to send only after the user confirms (17 of 20). 84 enums and 488 required lists, with typed attribute pages for each field type (13 of 15). Every operation documents 400 to 429 responses and the error body is shown, but the spec carries only two examples (10 of 15). /api/v1, and an API changelog with dated entries and migration steps (15). 25 + 10 + 17 + 13 + 10 + 15 = 90.

Streak API + MCP 55

Each API reference page on streak.readme.io carries an OpenAPI 3.1.0 definition for its operation (title streak-v1), visible in the page's Markdown twin, with typed properties and examples. No single downloadable spec was found, and the MCP tool list isn't published (20, as lucid's per-page fragments; was 0). llms.txt on streak.readme.io, indexing nine pages, and Markdown twins of the docs (10). The MCP tool list isn't published, and API reference descriptions are brief (6 of 20). Typed parameters in the reference, few enums (8 of 15). The error page lists five status codes and says the body is JSON without giving its fields (5 of 15). v1 and v2 paths and a product updates page, but no API changelog (6 of 15). 20 + 10 + 6 + 8 + 5 + 6 = 55.

Breakcold 45

Graded as a hosted service on the REST API and hosted MCP server. No status page is linked from the site or docs, and status.breakcold.com failed the TLS handshake (0). With no readable history the incident line scores 5. Rate limits published per organisation (600 a minute), workspace (300), identity or key (180) and route (120), for REST and MCP (15). 429 carries Retry-After and retryAfterMs, the docs give backoff guidance, and creates take an Idempotency-Key so retries return the original result (15). No SLA found in the services agreement summary, the pricing page or the docs (0). Neither surface is marked beta (10). 0 + 5 + 15 + 15 + 0 + 10 = 45.

Streak API + MCP 68

Status page at status.streak.com with a Streak API component beside streak.com, Gmail desktop, Android and iOS, and a history feed back to 2021 (20). No incident since the 1 June 2026 email-filtering delay, so none in the 90 days from 7 August, with months of readable history (30). No hard rate limit. Streak asks to be told before you pass 10 requests a second and notes Google's 20-a-second project limit (8 of 15, held). No 429 behaviour, Retry-After or retry guidance documented (0). No SLA found on the pricing page (0). The MCP server carries no beta label (10). 20 + 30 + 8 + 0 + 0 + 10 = 68.

Breakcold 60

API keys take chosen read and write scopes, an optional workspace limit and an expiry, are shown once, show activity history and can be revoked. MCP also accepts OAuth with PKCE through WorkOS AuthKit. Tokens travel in headers (30). Read-only keys are possible and message sends stay drafts until sendMode is set after the user confirms (17 of 20). The inbox returns email, LinkedIn, WhatsApp and Telegram text from outside parties, and no prompt-injection guidance was found (0). API key activity history is visible to the user; no organisation audit log was found (7 of 15). A vulnerability disclosure policy (3 September 2026) with reports to support@breakcold.com, no bounty, no security.txt (404) and no SOC 2 or ISO 27001 found (6 of 20). 30 + 17 + 0 + 7 + 6 = 60.

Streak API + MCP 49

REST takes an API key over HTTP Basic with all of the user's privileges. Keys can be deleted and recreated. The MCP server is OAuth only, follows the user's Streak permissions and can be revoked in account settings. No OAuth for REST apps found (22 of 30). No scopes or read-only mode on either route (6 of 20). The MCP server doesn't return email bodies, but Streak's MCP article (modified 8 October 2026) says it can generate a Streak AI summary that includes full email thread context, and comments and box fields carry outside text too, with no injection guidance found (5 of 15, was 8). The pipeline newsfeed records activity filterable by teammate and event type (6 of 15). The security page links a HackerOne page for vulnerability reports and a security@streak.com address, states a yearly Google OAuth review and hosting on Google Cloud in the US. No SOC 2 named, and no security.txt per the 30 September check (10 of 20). 22 + 6 + 5 + 6 + 10 = 49.

Breakcold 15

No x402, MPP or L402 (0). Plan prices are public, and each call's cost in usage tokens is published, but the money value of a token is not (10). The 14-day trial needs a card (0). auth.md documents an agent identity endpoint that takes an identity assertion or an anonymous request followed by a claim by a person, which we read and did not call; access still needs a paid or card-backed trial account (5 of 20). 0 + 10 + 0 + 5 = 15.

Streak API + MCP 20

No x402, MPP or L402 (0). Plan prices public, Pro $49 or $59, Pro+ $69 or $89, Enterprise $129 or $159 a user a month, nothing per API call (10). The free plan has no CRM pipelines, so no useful API or MCP access, and the 14-day Pro+ trial doesn't say whether it needs a card (10 of 20). A person signs up through Gmail (0). 0 + 10 + 10 + 0 = 20.