{ "data": { "a": { "slug": "breakcold", "name": "Breakcold", "vendor": "Logike SAS", "vendorUrl": "https://www.breakcold.com", "kind": "http-api", "category": "crm", "summary": "Breakcold is a CRM for small sales teams that syncs email, LinkedIn, WhatsApp and Telegram conversations into one pipeline. Agents reach its records, tasks, notes and inbox through a REST API and a hosted MCP server.", "url": "https://www.anchorterminal.com/tools/breakcold", "markdownUrl": "https://www.anchorterminal.com/tools/breakcold.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/breakcold.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/breakcold.json", "dns": "breakcold.grade.anchorterminal.com", "transports": [ "streamable-http" ], "remoteUrl": "https://mcp.breakcold.com/mcp/v1", "packages": [], "auth": "mixed", "authNotes": "API keys (`bc_live_` prefix) are created in Settings \u003e API keys with chosen scopes (records, tasks, notes, inbox, inbox send, CRM metadata and others, read and write separate), an optional workspace limit and an expiry, shown once and revocable, with activity history. MCP clients can instead sign in by OAuth with PKCE through WorkOS AuthKit and dynamic client registration. Multi-organisation users send `X-Breakcold-Organization-Id`.", "pricing": "paid", "pricingNotes": "One plan in three sizes: X1 $99 a month (1 seat), X5 $199 (5 seats) and X20 $499 (20 seats), each with MCP access, 10% off quarterly and 20% off yearly. Extra seats $10 a month. A 14-day trial needs a card. API and MCP calls draw on a weekly AI usage allowance at 0.2 tokens a read and 0.4 a write; a weekly reset costs $50.", "priceSummary": "$99 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the OpenAPI spec, auth.md, the docs or the pricing page (checked 2026-11-06). Calls draw on a plan's weekly usage allowance.", "endpoints": [] }, "toolCount": 72, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://docs.breakcold.com/api/overview", "llmsTxt": "https://docs.breakcold.com/llms.txt", "openapi": "https://docs.breakcold.com/api/openapi.json", "capabilities": [ "crm.records", "crm.pipeline", "crm.activities", "crm.search", "crm.webhooks", "email.send", "email.threads" ], "tags": [ "official", "hosted", "mcp", "remote-mcp", "oauth", "openapi", "llms-txt", "paid", "trial", "webhooks", "idempotency", "eu" ], "lastRelease": "2026-11-06", "graded": true, "anchor": { "graded": true, "score": 58, "grade": "C", "agentReady": false, "rank": 770, "ranked": true, "rankOf": 1510, "categoryRank": 9, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 67, "maintenance": 60, "payments": 15, "reliability": 45, "schema": 90, "security": 60, "transparency": 67 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": 0, "verdict": "Breakcold's API and hosted MCP server are built for agents, with an OpenAPI contract, scoped and expiring keys, published rate limits, idempotency keys and message sends that stay drafts until confirmed. No status page, SLA or security certification was found, and the only trial needs a card on a plan from $99 a month.", "bestFor": "Small sales teams who run outreach on email and social channels and want an agent to keep records, tasks and replies in order.", "strengths": [ "API keys take scopes, a workspace limit and an expiry, and MCP also accepts OAuth with PKCE", "Compose and send tools draft by default and send only with an explicit `sendMode`", "OpenAPI 3.1 contract of 70 described operations, llms.txt and Markdown docs", "Rate limits published per organisation, workspace, identity and route, with Retry-After and `retryAfterMs`", "Public DPA with a provider inventory and 30 days' notice of new subprocessors" ], "weaknesses": [ "No status page or SLA was found; status.breakcold.com did not answer", "72 MCP tools by default, and their annotations are not published", "The only trial needs a card, and plans start at $99 a month", "No security.txt, bug bounty or security certification found", "No official SDK, and the CRM MCP server is not in the official MCP registry" ], "agentNotes": [ "Call `capabilities_list` or `tools_search` first to see which tools the granted scopes allow", "Send an Idempotency-Key on REST creates and a stable idempotency key on `records_create`, so retries return the original result", "Leave `sendMode` unset on compose and send tools until the user has confirmed the message", "Pass `fields` on record lists to cut the response to the fields you need", "On 429 wait for Retry-After or `retryAfterMs`; over MCP the error code is -32029" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 58 } ], "editorialScores": { "ergonomics": 67, "maintenance": 60, "payments": 15, "reliability": 45, "schema": 90, "security": 60, "transparency": 69 }, "provenanceScore": 64, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl \"https://rest.breakcold.com/api/v1/workspaces\" -H \"Authorization: Bearer YOUR_API_KEY\"", "claudeCode": "claude mcp add --transport http breakcold https://mcp.breakcold.com/mcp/v1", "config": { "mcpServers": { "breakcold": { "url": "https://mcp.breakcold.com/mcp/v1" } } } }, "letme": { "capability": "https://letme.dev/crm.records", "tool": "https://letme.dev/breakcold" }, "area": "business", "unitPrices": [ { "item": "X1 plan (1 seat)", "unit": "month", "usd": 99, "note": "Billed monthly; 10% off quarterly, 20% off yearly" }, { "item": "X5 plan (5 seats)", "unit": "month", "usd": 199, "note": "AI usage five times X1" }, { "item": "X20 plan (20 seats)", "unit": "month", "usd": 499, "note": "AI usage twenty times X1" }, { "item": "Extra seat or connected account", "unit": "seat-month", "usd": 10, "note": "On every plan" } ], "provenance": { "legalEntity": "Logike SAS", "domain": "breakcold.com", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "https://www.breakcold.com/legal/terms-and-conditions", "privacy": "https://www.breakcold.com/legal/privacy", "statusPage": "", "changelog": "https://docs.breakcold.com/api/changelog", "securityTxt": "none", "checked": "2026-11-06", "notes": [ "The terms and conditions (19 October 2026) name Logike SAS, SIREN 902303395, RCS Paris, share capital EUR 1,000, 128 rue de la Boétie, 75008 Paris, under French law. A services agreement, developer terms (3 September 2026), DPA (27 October 2026) and vulnerability disclosure policy (3 September 2026) sit in the legal centre.", "The developer terms ask integrations to respect published rate limits and not rotate keys to evade them; no clause against reading public pages was found.", "www.breakcold.com/robots.txt allows all but /admin and /api with Content-Signal ai-train=no, search=yes, ai-input=yes; docs.breakcold.com allows all; rest.breakcold.com and mcp.breakcold.com carry only content-signal comments. One unauthenticated GET to rest.breakcold.com/api/v1/openapi.json, sent before its robots.txt was read, answered 401.", "/.well-known/security.txt returns 404. status.breakcold.com failed the TLS handshake. Domain registration date not checked.", "WebFetch received 404 for the pricing and legal pages, which answered 200 to a plain request, so those were read with curl." ], "score": 64 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/breakcold.json", "live": { "slug": "breakcold", "probe": { "target": "https://mcp.breakcold.com/mcp/v1", "method": "get", "lastAt": "2026-11-07T22:55:49.47444932Z", "lastOk": true, "lastStatus": 401, "lastMs": 74, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 66, "p95ms24h": 160, "samples24h": 244, "samples30d": 246, "days": [ { "date": "2026-11-06", "probes": 13, "ok": 13 }, { "date": "2026-11-07", "probes": 233, "ok": 233 } ] }, "securityTxt": { "url": "https://breakcold.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:00:18.103639801Z" }, "llmsTxt": { "url": "https://docs.breakcold.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:31:44.782472776Z" }, "pages": [ { "url": "https://docs.breakcold.com/api/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:05:21.53355824Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "f02d2d2285f0" }, { "url": "https://www.breakcold.com/legal/privacy", "kind": "privacy", "status": 404, "checkedAt": "2026-11-07T14:26:05.166026349Z", "changedAt": "0001-01-01T00:00:00Z" }, { "url": "https://www.breakcold.com/legal/terms-and-conditions", "kind": "terms", "status": 404, "checkedAt": "2026-11-07T14:26:07.751718301Z", "changedAt": "0001-01-01T00:00:00Z" } ], "mcpTools": { "url": "https://mcp.breakcold.com/mcp/v1", "checkedAt": "2026-11-07T01:42:53.267576496Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-07T01:42:53.267576496Z" }, "updatedAt": "2026-11-07T22:55:49.47444932Z" } }, "answer": "Breakcold scores 58 (C) on agent readiness against SugarAI (SugarCRM)'s 47.2 (D), and leads in 4 of 7 scored categories. SugarAI (SugarCRM) leads on reliability.", "b": { "slug": "sugarcrm", "name": "SugarAI (SugarCRM)", "vendor": "SugarAI Software Inc.", "vendorUrl": "https://sugarai.com", "kind": "http-api", "category": "crm", "summary": "SugarAI, formerly SugarCRM, sells the Sugar Sell, Serve and Enterprise CRM applications, hosted on SugarCloud or installed on-site. Agents reach records through a versioned REST API (v11.27 in release 26.1) on each customer instance, with a legacy SOAP API.", "url": "https://www.anchorterminal.com/tools/sugarcrm", "markdownUrl": "https://www.anchorterminal.com/tools/sugarcrm.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/sugarcrm.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/sugarcrm.json", "dns": "sugarcrm.grade.anchorterminal.com", "license": "Proprietary service under the SugarAI Customer Terms of Service", "transports": [ "http" ], "packages": [], "auth": "oauth", "authNotes": "Access follows a sales contract. An admin creates a Sugar user, and the caller POSTs that user's username and plaintext password to `/rest/v11_27/oauth2/token` with `grant_type` `password`. The default `client_id` is `sugar` with an empty secret, and an admin can create other OAuth keys. The token goes in the `OAuth-Token` header, lasts 60 minutes by default and is renewed with a refresh token valid for up to two weeks. The reference says there is no scope implementation, so a token has the user's roles and teams. An admin can obtain a token as another user through `/oauth2/sudo/:user_name`. SugarCloud instances must use SugarIdentity.", "pricing": "paid", "pricingNotes": "Sugar Sell costs $68 (Standard+), $98 (Advanced+) or $155 (Premier+) a user a month, billed annually. No free tier or self-serve trial was found, and the site asks visitors to book a demo or contact sales. API calls are not priced separately. Sandboxes are included on Sell Standard and above per the SugarCloud Offerings page, and are provisioned through a support case (https://sugarai.com/pricing, checked 2026-10-09).", "priceSummary": "$68 / seat-mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the Developer Guide, the Postman collection or the pricing page (checked 2026-10-09).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-09" }, "docsUrl": "https://support.sugarai.com/documentation/sugar_developer/sugar_developer_guide_26.1/integration/web_services/", "capabilities": [ "crm.records", "crm.search", "crm.pipeline", "crm.activities" ], "tags": [ "hosted", "on-site", "closed-source", "oauth", "rest", "soap", "sales-led", "status-page", "soc2", "iso27001", "security-txt" ], "graded": true, "anchor": { "graded": true, "score": 47.2, "grade": "D", "agentReady": false, "rank": 1159, "ranked": true, "rankOf": 1510, "categoryRank": 14, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 69, "maintenance": 12, "payments": 10, "reliability": 61, "schema": 40, "security": 51, "transparency": 69 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-04" }, "negative": 0, "verdict": "The REST reference covers 350 endpoint pages with filters, field selection, bulk calls and upsert by `sync_key`. SugarAI's AI Supplemental Terms forbid connecting a customer's or third party's AI agent or MCP connector to the APIs unless Sugar has approved it, tokens carry no scopes, and no OpenAPI file, trial or SLA was found.", "bestFor": "Companies already running Sugar Sell, Serve or Enterprise that want an agent to read and write records under a named user's roles, and that have Sugar's approval for the integration.", "strengths": [ "The 26.1 Developer Guide lists 350 REST endpoint pages, each with argument tables, a request and response example and a per-endpoint change log", "List calls take `fields`, `view`, `max_num` (default 20), `offset`, `order_by` and a filter grammar with 13 operators plus `$and` and `$or`", "`/integrate` endpoints upsert by `sync_key`, and `/bulk` runs a sequence of calls in one request with a status per call", "The Customer Terms of Service, the DPA and the security FAQ agree that customer data stays available for 120 days after termination and is then deleted", "SOC 2 Type II and ISO/IEC 27001:2022 per the trust page, a valid security.txt, and a public sub-processor list with countries" ], "weaknesses": [ "The AI Supplemental Terms forbid connecting customer-owned or third-party AI systems, agents or MCP connectors to the Services or APIs except through functionality Sugar has approved. This matters before any probe is run", "Access tokens come from an OAuth 2.0 password grant with a user's plaintext password, and the reference says there is no scope implementation", "No OpenAPI file or `llms.txt` was found, and no download link for the Postman collection was recorded", "No trial signup, free tier or SLA was found. Sugar Sell starts at $68 a user a month billed annually and other products are quoted by sales", "SugarCloud may block an IP address sending more than 20 requests a second, and no 429 or Retry-After behaviour is documented", "The Customer Terms of Service forbid performing or disclosing benchmarking, availability or performance testing of the Services" ], "agentNotes": [ "Confirm that Sugar has approved the agent integration before connecting. The AI Supplemental Terms forbid unapproved AI agents and MCP connectors on the APIs", "POST to `/rest/v11_27/oauth2/token` with `grant_type` `password` and a `platform` other than `base`, `mobile` or `portal`, or the login can end the user's own session", "Send the access token in the `OAuth-Token` header. It lasts 60 minutes by default, so store the refresh token and not the password", "Stay under 20 requests a second on SugarCloud and reuse one session for batches. Over-limit traffic is blocked by IP address until support lifts it", "Page with `max_num` and `offset` until `next_offset` is -1, and pass `fields` to keep responses small", "Use `PATCH /integrate/:module/:sync_key_field_name/:sync_key_field_value` for writes that may be retried, since it inserts or updates by `sync_key`" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 47.2 } ], "editorialScores": { "ergonomics": 69, "maintenance": 12, "payments": 10, "reliability": 61, "schema": 40, "security": 51, "transparency": 71 }, "provenanceScore": 66, "checked": { "categories": { "ergonomics": "2026-11-04", "maintenance": "2026-11-04", "payments": "2026-11-04", "reliability": "2026-11-04", "schema": "2026-11-04", "security": "2026-11-04", "transparency": "2026-11-04" }, "last": "2026-11-04", "lastMoved": "2026-11-04", "oldest": "2026-11-04", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl -X POST -H Cache-Control:no-cache -H \"Content-Type: application/json\" -d '{\n \"grant_type\":\"password\",\n \"client_id\":\"sugar\",\n \"client_secret\":\"\",\n \"username\":\"\u003cusername\u003e\",\n \"password\":\"\u003cpassword\u003e\",\n \"platform\":\"custom\"\n}' https://\u003csite_url\u003e/rest/\u003cversion\u003e/oauth2/token" }, "letme": { "capability": "https://letme.dev/crm.records", "tool": "https://letme.dev/sugarcrm" }, "area": "business", "unitPrices": [ { "item": "Sugar Sell Standard+", "unit": "seat-month", "usd": 68, "note": "billed annually" }, { "item": "Sugar Sell Advanced+", "unit": "seat-month", "usd": 98, "note": "billed annually" }, { "item": "Sugar Sell Premier+", "unit": "seat-month", "usd": 155, "note": "billed annually" }, { "item": "Sugar Connect+ add-on", "unit": "seat-month", "usd": 20, "note": "billed annually, on top of a Sell plan" } ], "provenance": { "legalEntity": "SugarAI Software Inc.", "domain": "sugarai.com", "domainRegistered": "2018-03-19", "endpointOnVendorDomain": false, "terms": "https://framerusercontent.com/assets/eu2GiGUMAeMAwAn8rqawpURGnP4.pdf", "privacy": "https://sugarai.com/legal/privacy-policy", "statusPage": "https://status.cloud.sugarai.com", "changelog": "", "securityTxt": "valid", "checked": "2026-11-04", "notes": [ "The Customer Terms of Service (published 7 April 2026) name the contracting entity by region. It is SugarAI Software Inc., a Delaware corporation at 548 Market Street PMB 59423, San Francisco, for all regions except Australia and New Zealand (SugarAI Australia Pty Ltd) and new UK customers (SugarAI UK Limited). California law governs outside the listed regions.", "The terms are a PDF on framerusercontent.com, the asset host of the vendor's Framer site, linked from sugarai.com/legal/customers. The same agreements on support.sugarai.com sit under a path robots.txt disallows.", "The API answers on each customer's instance at `https://\u003csite_url\u003e/rest/`. The host name of a SugarCloud instance was not established, so the endpoint is recorded as not on the vendor's domain.", "The privacy policy (effective 7 April 2026) covers the websites and the products and says Customer Data is processed under the subscription agreement.", "sugarai.com/.well-known/security.txt gives security@sugarcrm.com and expires on 1 April 2027.", "No dated API changelog or release notes page was reached. The documentation index lists its topics by script.", "RDAP gives 2018-03-19 for sugarai.com and 2004-03-05 for sugarcrm.com. The rename from SugarCRM to SugarAI was announced on 13 April 2026.", "The website Terms of Use (sugarai.com/legal/terms-of-use, read 4 November 2026) govern all Sugar websites and bar using 'any robot, spider, or other automatic device, process, or means to access the Site for any purpose'. robots.txt on sugarai.com allows ClaudeBot. From 4 November 2026 we read nothing on Sugar hosts beyond robots.txt and that page, including the status page.", "The registration date 2018-03-19 for sugarai.com rests on an earlier registry lookup, not repeated on 4 November 2026." ], "score": 66 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/sugarcrm.json", "live": { "slug": "sugarcrm", "vendorStatus": { "page": "https://status.cloud.sugarai.com", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-11-07T04:48:50.321464475Z" }, "securityTxt": { "url": "https://sugarai.com/.well-known/security.txt", "state": "valid", "expires": "2027-04-01T00:00:00.000Z", "checkedAt": "2026-11-07T16:00:22.302072051Z" }, "domain": { "domain": "sugarai.com", "registered": "2018-03-19", "source": "https://rdap.verisign.com/com/v1/domain/sugarai.com", "checkedAt": "2026-11-01T14:14:50.441227683Z" }, "pages": [ { "url": "https://sugarai.com/pricing", "kind": "pricing", "status": 304, "checkedAt": "2026-11-07T14:21:08.610436131Z", "changedAt": "2026-11-03T07:59:47.547321924Z", "fingerprint": "bfe2c5a7dcd1" }, { "url": "https://sugarai.com/legal/privacy-policy", "kind": "privacy", "status": 304, "checkedAt": "2026-11-07T14:21:06.450319025Z", "changedAt": "2026-11-03T07:59:45.233632156Z", "fingerprint": "4ab7bb5b94f6" } ], "updatedAt": "2026-11-07T16:00:22.302072051Z" } }, "edges": [ { "by": 50, "category": "schema", "leads": "breakcold", "name": "Schema \u0026 documentation", "reasons": { "a": "OpenAPI 3.1 contract at docs.breakcold.com/api/openapi.json with 70 operations, each with a description (25). llms.txt and a Markdown copy of each page, plus auth.md and an MCP server card (10). Tool descriptions say how to use them, such as `records_create` asking for every required field and a stable idempotency key and the send tools saying to send only after the user confirms (17 of 20). 84 enums and 488 required lists, with typed attribute pages for each field type (13 of 15). Every operation documents 400 to 429 responses and the error body is shown, but the spec carries only two examples (10 of 15). /api/v1, and an API changelog with dated entries and migration steps (15). 25 + 10 + 17 + 13 + 10 + 15 = 90.", "b": "SugarAI's website Terms of Use bar any robot or automatic means from accessing Sugar websites, so Sugar pages are per the 9 October check, not re-read on 4 November. No OpenAPI file was found. A Postman collection was read on 9 October behind the viewer page at rest.apidocs.sugarcrm.com, with no download link recorded, so it isn't counted as a published contract. Each instance serves its own reference at `/rest/v{version}/help` and a `/metadata` endpoint, which we could not read without an instance (0). `llms.txt` on support.sugarai.com returned 404 and no Markdown docs were found (0). The 26.1 Developer Guide lists 350 endpoint pages. The five sampled carry an overview and a summary, and the filter page warns about unindexed filters, but none says when not to use an endpoint (11 of 20). Arguments are tabled with type and required flag. Record bodies are described only as `\u003crecord field\u003e`, and filters are a free-form expression (7 of 15). Every sampled page has a request and response example, and a separate page lists 21 exception classes with HTTP codes and error labels. The examples carry dates from 2013 and 2014 (10 of 15). The API is versioned in the path, a table maps each Sugar release to its REST version, and each endpoint page has a change log. No dated API changelog was found (12 of 15). 0 + 0 + 11 + 7 + 10 + 12 = 40." }, "scores": { "a": 90, "b": 40 } }, { "by": 48, "category": "maintenance", "leads": "breakcold", "name": "Maintenance \u0026 community", "reasons": { "a": "API changelog entry on 6 November 2026 (30). More than 60 dated entries since 8 August 2026 (20). Closed service with a public API changelog, an RSS feed, a help centre and support by email; no public issue tracker (10 of 15). The CRM MCP server is not in the official MCP registry (the registry's io.github.breakcold/inboxmcp is a separate product at inbox-mcp.com), and no official SDK exists (0). No package to check (0). 30 + 20 + 10 + 0 + 0 = 60.", "b": "SugarAI's website Terms of Use bar any robot or automatic means from accessing Sugar websites, so Sugar pages are per the 9 October check, not re-read on 4 November. The newest dated evidence of an API release is the 26.1 Developer Guide, whose REST pages are stamped 15 May 2026. A page stamp records no change, and no release note or dated API change was read, so no recency is credited (0). Three releases in the last 90 days were not established (0). The support site and its policy pages are current, with a support portal. The SugarClub community answered with a bot check on 9 October and was not read (7 of 25). No current SDKs in several languages. `ventana`, the JavaScript client, was last tagged 1.1.25 on 16 January 2026 (clone read 4 November), a partial held (5 of 15). No package was checked on a registry (0). 0 + 0 + 7 + 5 + 0 = 12." }, "scores": { "a": 60, "b": 12 } }, { "by": 16, "category": "reliability", "leads": "sugarcrm", "name": "Reliability", "reasons": { "a": "Graded as a hosted service on the REST API and hosted MCP server. No status page is linked from the site or docs, and status.breakcold.com failed the TLS handshake (0). With no readable history the incident line scores 5. Rate limits published per organisation (600 a minute), workspace (300), identity or key (180) and route (120), for REST and MCP (15). 429 carries Retry-After and `retryAfterMs`, the docs give backoff guidance, and creates take an Idempotency-Key so retries return the original result (15). No SLA found in the services agreement summary, the pricing page or the docs (0). Neither surface is marked beta (10). 0 + 5 + 15 + 15 + 0 + 10 = 45.", "b": "SugarAI's website Terms of Use bar any robot or automatic means from accessing Sugar websites, so Sugar pages are per the 9 October check, not re-read on 4 November. Read with the hosted lines, for the SugarCloud REST API. Status page at status.cloud.sugarai.com on Better Stack with more than 100 components by region and cluster, and incident history (20). The RSS feed, read on 9 October, shows about 18 dated incidents between 15 July and 4 October 2026, most of them one to three minutes on a single cluster. The longest were 41 minutes on Sugar Cloud Premium DE 02 on 21 September and 39 minutes on US 02 on 16 July. On 24 July, 15 services including SugarIdentity global login and eight US clusters were down for about 11 minutes. No outage of an hour was found, and the wide one is why this sits below the minor band (14 of 30). The 24 July incident is now outside the 90 days from 6 August, and the window from 5 October is unread, so the line keeps its recorded value as a partial. The SugarCloud Policy Guide gives 20 requests a second as the level above which traffic may be blocked, and ends SELECT queries after 120 seconds. The limit is enforced at Sugar's discretion (12 of 15). No 429 or Retry-After behaviour is documented. Blocked traffic is lifted through a support case. Upsert by `sync_key` and a 409 `edit_conflict` error give some retry safety (5 of 15). No SLA was found in the Customer Terms of Service, which do not warrant uninterrupted service (0). The REST API is GA and versioned (10). 20 + 14 + 12 + 5 + 0 + 10 = 61." }, "scores": { "a": 45, "b": 61 } }, { "by": 9, "category": "security", "leads": "breakcold", "name": "Security \u0026 auth", "reasons": { "a": "API keys take chosen read and write scopes, an optional workspace limit and an expiry, are shown once, show activity history and can be revoked. MCP also accepts OAuth with PKCE through WorkOS AuthKit. Tokens travel in headers (30). Read-only keys are possible and message sends stay drafts until `sendMode` is set after the user confirms (17 of 20). The inbox returns email, LinkedIn, WhatsApp and Telegram text from outside parties, and no prompt-injection guidance was found (0). API key activity history is visible to the user; no organisation audit log was found (7 of 15). A vulnerability disclosure policy (3 September 2026) with reports to support@breakcold.com, no bounty, no security.txt (404) and no SOC 2 or ISO 27001 found (6 of 20). 30 + 17 + 0 + 7 + 6 = 60.", "b": "SugarAI's website Terms of Use bar any robot or automatic means from accessing Sugar websites, so Sugar pages are per the 9 October check, not re-read on 4 November. Tokens come from an OAuth 2.0 password grant that sends a user's username and plaintext password. The default `client_id` is `sugar` with an empty secret, the reference says there is no scope implementation, and an admin can obtain a token as any user through `/oauth2/sudo/:user_name`. Access tokens last 60 minutes and refresh tokens up to two weeks, both configurable in SugarIdentity (12 of 30). A token is limited by the user's roles and teams. No read-only token type or confirmation step for destructive calls was found (10 of 20). Records hold emails, notes and case text, and no prompt-injection guidance was found (3 of 15). SugarIdentity keeps an exportable audit log of logins, record audit endpoints exist (`/:module/:record/audit`), and access logs are available in SugarCloud Insights (10 of 15). security.txt is valid until 1 April 2027. The trust page lists SOC 2 Type II, ISO/IEC 27001:2022 and a CSA STAR listing, and the security FAQ states a bug bounty programme and patch targets of 14 days for critical flaws. The advisories page is closed to us by robots.txt and was not read (16 of 20). 12 + 10 + 3 + 10 + 16 = 51." }, "scores": { "a": 60, "b": 51 } }, { "by": 5, "category": "payments", "leads": "breakcold", "name": "Payments \u0026 pricing", "reasons": { "a": "No x402, MPP or L402 (0). Plan prices are public, and each call's cost in usage tokens is published, but the money value of a token is not (10). The 14-day trial needs a card (0). auth.md documents an agent identity endpoint that takes an identity assertion or an anonymous request followed by a claim by a person, which we read and did not call; access still needs a paid or card-backed trial account (5 of 20). 0 + 10 + 0 + 5 = 15.", "b": "SugarAI's website Terms of Use bar any robot or automatic means from accessing Sugar websites, so Sugar pages are per the 9 October check, not re-read on 4 November. No x402, MPP or L402 (0). Plan prices are public for Sugar Sell, at $68, $98 and $155 a user a month billed annually, with Precision+ bundles quoted by sales and nothing per call (10). No free tier or self-serve trial was found. The site's buttons ask for a demo, and a 30-day Evaluation Agreement exists for evaluations Sugar arranges (0). A person buys through sales and an admin creates the user an agent logs in as (0)." }, "scores": { "a": 15, "b": 10 } } ], "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Logike SAS", "b": "SugarAI Software Inc.", "name": "Vendor" }, { "a": "https://mcp.breakcold.com/mcp/v1", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "Streamable HTTP", "b": "HTTP", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth", "name": "Auth" }, { "a": "Paid", "b": "Paid", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "none", "b": "Proprietary service under the SugarAI Customer Terms of Service", "name": "Licence" }, { "a": "72", "b": "none", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "no", "name": "llms.txt" }, { "a": "2026-11-06", "b": "none", "name": "Last release" }, { "a": "couldn't be read", "b": "not read yet", "name": "Terms last updated" }, { "a": "couldn't be read", "b": "no date given", "name": "Privacy policy last updated" }, { "a": "couldn't be read", "b": "not read yet", "name": "Customer content may train models" }, { "a": "couldn't be read", "b": "not read yet", "name": "Terms restrict automated access" }, { "a": "couldn't be read", "b": "not read yet", "name": "Terms restrict benchmarking" }, { "a": "couldn't be read", "b": "not read yet", "name": "Terms or service can change without notice" }, { "a": "couldn't be read", "b": "not read yet", "name": "Arbitration or class-action waiver" } ], "faq": [ { "answer": "Breakcold scores 58 (C) on agent readiness against SugarAI (SugarCRM)'s 47.2 (D), and leads in 4 of 7 scored categories. SugarAI (SugarCRM) leads on reliability.", "question": "Which is better for AI agents, Breakcold or SugarAI (SugarCRM)?" }, { "answer": "Breakcold takes an API key or an OAuth sign-in. SugarAI (SugarCRM) uses an OAuth sign-in.", "question": "Do Breakcold and SugarAI (SugarCRM) need an API key?" }, { "answer": "Breakcold has a hosted endpoint at https://mcp.breakcold.com/mcp/v1. No hosted endpoint is listed for SugarAI (SugarCRM).", "question": "Can an agent call Breakcold and SugarAI (SugarCRM) without installing anything?" } ], "goodFor": [ { "aheadOn": [ "Schema \u0026 documentation, 90 against 40", "Security \u0026 auth, 60 against 51", "Payments \u0026 pricing, 15 against 10", "Maintenance \u0026 community, 60 against 12" ], "also": [ "A hosted endpoint, with nothing to install" ], "goodFor": "Small sales teams who run outreach on email and social channels and want an agent to keep records, tasks and replies in order.", "slug": "breakcold", "watchFor": "No status page or SLA was found; status.breakcold.com did not answer" }, { "aheadOn": [ "Reliability, 61 against 45" ], "also": null, "goodFor": "Companies already running Sugar Sell, Serve or Enterprise that want an agent to read and write records under a named user's roles, and that have Sugar's approval for the integration.", "slug": "sugarcrm", "watchFor": "The AI Supplemental Terms forbid connecting customer-owned or third-party AI systems, agents or MCP connectors to the Services or APIs except through functionality Sugar has approved. This matters before any probe is run" } ], "history": { "breakcold": null, "sugarcrm": [ { "causes": [ "correction" ], "date": "2026-11-04", "delta": -2.2, "from": 49.4, "fromGrade": "D", "to": 47.2, "toGrade": "D" }, { "causes": [ "method" ], "date": "2026-10-30", "delta": -0.2, "from": 49.6, "fromGrade": "D", "to": 49.4, "toGrade": "D" }, { "causes": [ "correction" ], "date": "2026-10-28", "delta": -0.1, "from": 49.7, "fromGrade": "D", "to": 49.6, "toGrade": "D" } ] }, "job": { "capability": "crm.records", "name": "CRM records" }, "others": [ { "json": "https://www.anchorterminal.com/compare/affinity-vs-breakcold.json", "title": "Affinity vs Breakcold", "url": "https://www.anchorterminal.com/compare/affinity-vs-breakcold" }, { "json": "https://www.anchorterminal.com/compare/affinity-vs-sugarcrm.json", "title": "Affinity vs SugarAI (SugarCRM)", "url": "https://www.anchorterminal.com/compare/affinity-vs-sugarcrm" }, { "json": "https://www.anchorterminal.com/compare/attio-vs-breakcold.json", "title": "Attio API + MCP vs Breakcold", "url": "https://www.anchorterminal.com/compare/attio-vs-breakcold" }, { "json": "https://www.anchorterminal.com/compare/attio-vs-sugarcrm.json", "title": "Attio API + MCP vs SugarAI (SugarCRM)", "url": "https://www.anchorterminal.com/compare/attio-vs-sugarcrm" }, { "json": "https://www.anchorterminal.com/compare/breakcold-vs-capsule-crm.json", "title": "Breakcold vs Capsule CRM", "url": "https://www.anchorterminal.com/compare/breakcold-vs-capsule-crm" }, { "json": "https://www.anchorterminal.com/compare/breakcold-vs-close.json", "title": "Breakcold vs Close API + MCP", "url": "https://www.anchorterminal.com/compare/breakcold-vs-close" }, { "json": "https://www.anchorterminal.com/compare/breakcold-vs-copper.json", "title": "Breakcold vs Copper API", "url": "https://www.anchorterminal.com/compare/breakcold-vs-copper" }, { "json": "https://www.anchorterminal.com/compare/breakcold-vs-dynamics-365-sales.json", "title": "Breakcold vs Microsoft Dynamics 365 Sales", "url": "https://www.anchorterminal.com/compare/breakcold-vs-dynamics-365-sales" }, { "json": "https://www.anchorterminal.com/compare/breakcold-vs-folk.json", "title": "Breakcold vs folk API + MCP", "url": "https://www.anchorterminal.com/compare/breakcold-vs-folk" }, { "json": "https://www.anchorterminal.com/compare/breakcold-vs-freshsales.json", "title": "Breakcold vs Freshsales API", "url": "https://www.anchorterminal.com/compare/breakcold-vs-freshsales" }, { "json": "https://www.anchorterminal.com/compare/breakcold-vs-hubspot-mcp.json", "title": "Breakcold vs HubSpot API + MCP", "url": "https://www.anchorterminal.com/compare/breakcold-vs-hubspot-mcp" }, { "json": "https://www.anchorterminal.com/compare/breakcold-vs-nutshell.json", "title": "Breakcold vs Nutshell", "url": "https://www.anchorterminal.com/compare/breakcold-vs-nutshell" }, { "json": "https://www.anchorterminal.com/compare/breakcold-vs-payani-ai.json", "title": "Breakcold vs Payani AI", "url": "https://www.anchorterminal.com/compare/breakcold-vs-payani-ai" }, { "json": "https://www.anchorterminal.com/compare/breakcold-vs-pipedrive.json", "title": "Breakcold vs Pipedrive API + MCP", "url": "https://www.anchorterminal.com/compare/breakcold-vs-pipedrive" }, { "json": "https://www.anchorterminal.com/compare/breakcold-vs-relaticle.json", "title": "Breakcold vs Relaticle", "url": "https://www.anchorterminal.com/compare/breakcold-vs-relaticle" }, { "json": "https://www.anchorterminal.com/compare/breakcold-vs-salesflare.json", "title": "Breakcold vs Salesflare", "url": "https://www.anchorterminal.com/compare/breakcold-vs-salesflare" }, { "json": "https://www.anchorterminal.com/compare/breakcold-vs-salesforce.json", "title": "Breakcold vs Salesforce API + MCP", "url": "https://www.anchorterminal.com/compare/breakcold-vs-salesforce" }, { "json": "https://www.anchorterminal.com/compare/breakcold-vs-streak.json", "title": "Breakcold vs Streak API + MCP", "url": "https://www.anchorterminal.com/compare/breakcold-vs-streak" }, { "json": "https://www.anchorterminal.com/compare/breakcold-vs-twenty.json", "title": "Breakcold vs Twenty API + MCP", "url": "https://www.anchorterminal.com/compare/breakcold-vs-twenty" }, { "json": "https://www.anchorterminal.com/compare/breakcold-vs-zoho-crm.json", "title": "Breakcold vs Zoho CRM", "url": "https://www.anchorterminal.com/compare/breakcold-vs-zoho-crm" }, { "json": "https://www.anchorterminal.com/compare/capsule-crm-vs-sugarcrm.json", "title": "Capsule CRM vs SugarAI (SugarCRM)", "url": "https://www.anchorterminal.com/compare/capsule-crm-vs-sugarcrm" }, { "json": "https://www.anchorterminal.com/compare/close-vs-sugarcrm.json", "title": "Close API + MCP vs SugarAI (SugarCRM)", "url": "https://www.anchorterminal.com/compare/close-vs-sugarcrm" }, { "json": "https://www.anchorterminal.com/compare/copper-vs-sugarcrm.json", "title": "Copper API vs SugarAI (SugarCRM)", "url": "https://www.anchorterminal.com/compare/copper-vs-sugarcrm" }, { "json": "https://www.anchorterminal.com/compare/dynamics-365-sales-vs-sugarcrm.json", "title": "Microsoft Dynamics 365 Sales vs SugarAI (SugarCRM)", "url": "https://www.anchorterminal.com/compare/dynamics-365-sales-vs-sugarcrm" }, { "json": "https://www.anchorterminal.com/compare/folk-vs-sugarcrm.json", "title": "folk API + MCP vs SugarAI (SugarCRM)", "url": "https://www.anchorterminal.com/compare/folk-vs-sugarcrm" }, { "json": "https://www.anchorterminal.com/compare/freshsales-vs-sugarcrm.json", "title": "Freshsales API vs SugarAI (SugarCRM)", "url": "https://www.anchorterminal.com/compare/freshsales-vs-sugarcrm" }, { "json": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-sugarcrm.json", "title": "HubSpot API + MCP vs SugarAI (SugarCRM)", "url": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-sugarcrm" }, { "json": "https://www.anchorterminal.com/compare/nutshell-vs-sugarcrm.json", "title": "Nutshell vs SugarAI (SugarCRM)", "url": "https://www.anchorterminal.com/compare/nutshell-vs-sugarcrm" }, { "json": "https://www.anchorterminal.com/compare/payani-ai-vs-sugarcrm.json", "title": "Payani AI vs SugarAI (SugarCRM)", "url": "https://www.anchorterminal.com/compare/payani-ai-vs-sugarcrm" }, { "json": "https://www.anchorterminal.com/compare/pipedrive-vs-sugarcrm.json", "title": "Pipedrive API + MCP vs SugarAI (SugarCRM)", "url": "https://www.anchorterminal.com/compare/pipedrive-vs-sugarcrm" }, { "json": "https://www.anchorterminal.com/compare/relaticle-vs-sugarcrm.json", "title": "Relaticle vs SugarAI (SugarCRM)", "url": "https://www.anchorterminal.com/compare/relaticle-vs-sugarcrm" }, { "json": "https://www.anchorterminal.com/compare/salesflare-vs-sugarcrm.json", "title": "Salesflare vs SugarAI (SugarCRM)", "url": "https://www.anchorterminal.com/compare/salesflare-vs-sugarcrm" }, { "json": "https://www.anchorterminal.com/compare/salesforce-vs-sugarcrm.json", "title": "Salesforce API + MCP vs SugarAI (SugarCRM)", "url": "https://www.anchorterminal.com/compare/salesforce-vs-sugarcrm" }, { "json": "https://www.anchorterminal.com/compare/streak-vs-sugarcrm.json", "title": "Streak API + MCP vs SugarAI (SugarCRM)", "url": "https://www.anchorterminal.com/compare/streak-vs-sugarcrm" }, { "json": "https://www.anchorterminal.com/compare/sugarcrm-vs-twenty.json", "title": "SugarAI (SugarCRM) vs Twenty API + MCP", "url": "https://www.anchorterminal.com/compare/sugarcrm-vs-twenty" }, { "json": "https://www.anchorterminal.com/compare/sugarcrm-vs-zoho-crm.json", "title": "SugarAI (SugarCRM) vs Zoho CRM", "url": "https://www.anchorterminal.com/compare/sugarcrm-vs-zoho-crm" } ], "panel": null, "scores": [ { "breakcold": 45, "by": 16, "edge": "sugarcrm", "key": "reliability", "name": "Reliability", "sugarcrm": 61, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "breakcold": 90, "by": 50, "edge": "breakcold", "key": "schema", "name": "Schema \u0026 documentation", "sugarcrm": 40, "weight": 13 }, { "breakcold": 67, "by": 2, "edge": "sugarcrm", "key": "ergonomics", "name": "Agent ergonomics", "sugarcrm": 69, "weight": 13 }, { "breakcold": 60, "by": 9, "edge": "breakcold", "key": "security", "name": "Security \u0026 auth", "sugarcrm": 51, "weight": 14 }, { "breakcold": 15, "by": 5, "edge": "breakcold", "key": "payments", "name": "Payments \u0026 pricing", "sugarcrm": 10, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "breakcold": 60, "by": 48, "edge": "breakcold", "key": "maintenance", "name": "Maintenance \u0026 community", "sugarcrm": 12, "weight": 7 }, { "breakcold": 67, "by": 2, "edge": "sugarcrm", "key": "transparency", "name": "Transparency \u0026 trust", "sugarcrm": 69, "weight": 7 } ], "summary": "Breakcold scores 58 (C) on agent readiness against SugarAI (SugarCRM)'s 47.2 (D), and leads in 4 of 7 scored categories. SugarAI (SugarCRM) leads on reliability. Both do crm records.", "tasks": null, "tutorials": [], "verdicts": { "breakcold": "Breakcold's API and hosted MCP server are built for agents, with an OpenAPI contract, scoped and expiring keys, published rate limits, idempotency keys and message sends that stay drafts until confirmed. No status page, SLA or security certification was found, and the only trial needs a card on a plan from $99 a month.", "sugarcrm": "The REST reference covers 350 endpoint pages with filters, field selection, bulk calls and upsert by `sync_key`. SugarAI's AI Supplemental Terms forbid connecting a customer's or third party's AI agent or MCP connector to the APIs unless Sugar has approved it, tokens carry no scopes, and no OpenAPI file, trial or SLA was found." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/breakcold-vs-sugarcrm", "json": "https://www.anchorterminal.com/compare/breakcold-vs-sugarcrm.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/breakcold-vs-sugarcrm.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/breakcold-vs-sugarcrm.min.md" }, "markdown": "Breakcold scores 58 (C) on agent readiness against SugarAI (SugarCRM)'s 47.2 (D), and leads in 4 of 7 scored categories. SugarAI (SugarCRM) leads on reliability. Both do crm records.\n\n- Breakcold: grade C, 58/100, rank #770 of 1510. Markdown https://www.anchorterminal.com/tools/breakcold.md · JSON https://www.anchorterminal.com/api/v1/tools/breakcold.json\n- SugarAI (SugarCRM): grade D, 47.2/100, rank #1159 of 1510. Markdown https://www.anchorterminal.com/tools/sugarcrm.md · JSON https://www.anchorterminal.com/api/v1/tools/sugarcrm.json\n- Best CRM and customer-platform tools for AI agents: https://www.anchorterminal.com/best/crm/index.md\n- All 190 crm comparisons: https://www.anchorterminal.com/compare/crm/index.md\n\n## Which one, for what\n\n### Breakcold (C)\n\nGood for: Small sales teams who run outreach on email and social channels and want an agent to keep records, tasks and replies in order.\n\nAhead on:\n- Schema \u0026 documentation, 90 against 40\n- Security \u0026 auth, 60 against 51\n- Payments \u0026 pricing, 15 against 10\n- Maintenance \u0026 community, 60 against 12\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n\nWatch for: No status page or SLA was found; status.breakcold.com did not answer\n\n### SugarAI (SugarCRM) (D)\n\nGood for: Companies already running Sugar Sell, Serve or Enterprise that want an agent to read and write records under a named user's roles, and that have Sugar's approval for the integration.\n\nAhead on:\n- Reliability, 61 against 45\n\nWatch for: The AI Supplemental Terms forbid connecting customer-owned or third-party AI systems, agents or MCP connectors to the Services or APIs except through functionality Sugar has approved. This matters before any probe is run\n\n\n## Why the edge\n\n### Schema \u0026 documentation: Breakcold +50\n\n- Breakcold (90): OpenAPI 3.1 contract at docs.breakcold.com/api/openapi.json with 70 operations, each with a description (25). llms.txt and a Markdown copy of each page, plus auth.md and an MCP server card (10). Tool descriptions say how to use them, such as `records_create` asking for every required field and a stable idempotency key and the send tools saying to send only after the user confirms (17 of 20). 84 enums and 488 required lists, with typed attribute pages for each field type (13 of 15). Every operation documents 400 to 429 responses and the error body is shown, but the spec carries only two examples (10 of 15). /api/v1, and an API changelog with dated entries and migration steps (15). 25 + 10 + 17 + 13 + 10 + 15 = 90.\n- SugarAI (SugarCRM) (40): SugarAI's website Terms of Use bar any robot or automatic means from accessing Sugar websites, so Sugar pages are per the 9 October check, not re-read on 4 November. No OpenAPI file was found. A Postman collection was read on 9 October behind the viewer page at rest.apidocs.sugarcrm.com, with no download link recorded, so it isn't counted as a published contract. Each instance serves its own reference at `/rest/v{version}/help` and a `/metadata` endpoint, which we could not read without an instance (0). `llms.txt` on support.sugarai.com returned 404 and no Markdown docs were found (0). The 26.1 Developer Guide lists 350 endpoint pages. The five sampled carry an overview and a summary, and the filter page warns about unindexed filters, but none says when not to use an endpoint (11 of 20). Arguments are tabled with type and required flag. Record bodies are described only as `\u003crecord field\u003e`, and filters are a free-form expression (7 of 15). Every sampled page has a request and response example, and a separate page lists 21 exception classes with HTTP codes and error labels. The examples carry dates from 2013 and 2014 (10 of 15). The API is versioned in the path, a table maps each Sugar release to its REST version, and each endpoint page has a change log. No dated API changelog was found (12 of 15). 0 + 0 + 11 + 7 + 10 + 12 = 40.\n\n### Maintenance \u0026 community: Breakcold +48\n\n- Breakcold (60): API changelog entry on 6 November 2026 (30). More than 60 dated entries since 8 August 2026 (20). Closed service with a public API changelog, an RSS feed, a help centre and support by email; no public issue tracker (10 of 15). The CRM MCP server is not in the official MCP registry (the registry's io.github.breakcold/inboxmcp is a separate product at inbox-mcp.com), and no official SDK exists (0). No package to check (0). 30 + 20 + 10 + 0 + 0 = 60.\n- SugarAI (SugarCRM) (12): SugarAI's website Terms of Use bar any robot or automatic means from accessing Sugar websites, so Sugar pages are per the 9 October check, not re-read on 4 November. The newest dated evidence of an API release is the 26.1 Developer Guide, whose REST pages are stamped 15 May 2026. A page stamp records no change, and no release note or dated API change was read, so no recency is credited (0). Three releases in the last 90 days were not established (0). The support site and its policy pages are current, with a support portal. The SugarClub community answered with a bot check on 9 October and was not read (7 of 25). No current SDKs in several languages. `ventana`, the JavaScript client, was last tagged 1.1.25 on 16 January 2026 (clone read 4 November), a partial held (5 of 15). No package was checked on a registry (0). 0 + 0 + 7 + 5 + 0 = 12.\n\n### Reliability: SugarAI (SugarCRM) +16\n\n- Breakcold (45): Graded as a hosted service on the REST API and hosted MCP server. No status page is linked from the site or docs, and status.breakcold.com failed the TLS handshake (0). With no readable history the incident line scores 5. Rate limits published per organisation (600 a minute), workspace (300), identity or key (180) and route (120), for REST and MCP (15). 429 carries Retry-After and `retryAfterMs`, the docs give backoff guidance, and creates take an Idempotency-Key so retries return the original result (15). No SLA found in the services agreement summary, the pricing page or the docs (0). Neither surface is marked beta (10). 0 + 5 + 15 + 15 + 0 + 10 = 45.\n- SugarAI (SugarCRM) (61): SugarAI's website Terms of Use bar any robot or automatic means from accessing Sugar websites, so Sugar pages are per the 9 October check, not re-read on 4 November. Read with the hosted lines, for the SugarCloud REST API. Status page at status.cloud.sugarai.com on Better Stack with more than 100 components by region and cluster, and incident history (20). The RSS feed, read on 9 October, shows about 18 dated incidents between 15 July and 4 October 2026, most of them one to three minutes on a single cluster. The longest were 41 minutes on Sugar Cloud Premium DE 02 on 21 September and 39 minutes on US 02 on 16 July. On 24 July, 15 services including SugarIdentity global login and eight US clusters were down for about 11 minutes. No outage of an hour was found, and the wide one is why this sits below the minor band (14 of 30). The 24 July incident is now outside the 90 days from 6 August, and the window from 5 October is unread, so the line keeps its recorded value as a partial. The SugarCloud Policy Guide gives 20 requests a second as the level above which traffic may be blocked, and ends SELECT queries after 120 seconds. The limit is enforced at Sugar's discretion (12 of 15). No 429 or Retry-After behaviour is documented. Blocked traffic is lifted through a support case. Upsert by `sync_key` and a 409 `edit_conflict` error give some retry safety (5 of 15). No SLA was found in the Customer Terms of Service, which do not warrant uninterrupted service (0). The REST API is GA and versioned (10). 20 + 14 + 12 + 5 + 0 + 10 = 61.\n\n### Security \u0026 auth: Breakcold +9\n\n- Breakcold (60): API keys take chosen read and write scopes, an optional workspace limit and an expiry, are shown once, show activity history and can be revoked. MCP also accepts OAuth with PKCE through WorkOS AuthKit. Tokens travel in headers (30). Read-only keys are possible and message sends stay drafts until `sendMode` is set after the user confirms (17 of 20). The inbox returns email, LinkedIn, WhatsApp and Telegram text from outside parties, and no prompt-injection guidance was found (0). API key activity history is visible to the user; no organisation audit log was found (7 of 15). A vulnerability disclosure policy (3 September 2026) with reports to support@breakcold.com, no bounty, no security.txt (404) and no SOC 2 or ISO 27001 found (6 of 20). 30 + 17 + 0 + 7 + 6 = 60.\n- SugarAI (SugarCRM) (51): SugarAI's website Terms of Use bar any robot or automatic means from accessing Sugar websites, so Sugar pages are per the 9 October check, not re-read on 4 November. Tokens come from an OAuth 2.0 password grant that sends a user's username and plaintext password. The default `client_id` is `sugar` with an empty secret, the reference says there is no scope implementation, and an admin can obtain a token as any user through `/oauth2/sudo/:user_name`. Access tokens last 60 minutes and refresh tokens up to two weeks, both configurable in SugarIdentity (12 of 30). A token is limited by the user's roles and teams. No read-only token type or confirmation step for destructive calls was found (10 of 20). Records hold emails, notes and case text, and no prompt-injection guidance was found (3 of 15). SugarIdentity keeps an exportable audit log of logins, record audit endpoints exist (`/:module/:record/audit`), and access logs are available in SugarCloud Insights (10 of 15). security.txt is valid until 1 April 2027. The trust page lists SOC 2 Type II, ISO/IEC 27001:2022 and a CSA STAR listing, and the security FAQ states a bug bounty programme and patch targets of 14 days for critical flaws. The advisories page is closed to us by robots.txt and was not read (16 of 20). 12 + 10 + 3 + 10 + 16 = 51.\n\n### Payments \u0026 pricing: Breakcold +5\n\n- Breakcold (15): No x402, MPP or L402 (0). Plan prices are public, and each call's cost in usage tokens is published, but the money value of a token is not (10). The 14-day trial needs a card (0). auth.md documents an agent identity endpoint that takes an identity assertion or an anonymous request followed by a claim by a person, which we read and did not call; access still needs a paid or card-backed trial account (5 of 20). 0 + 10 + 0 + 5 = 15.\n- SugarAI (SugarCRM) (10): SugarAI's website Terms of Use bar any robot or automatic means from accessing Sugar websites, so Sugar pages are per the 9 October check, not re-read on 4 November. No x402, MPP or L402 (0). Plan prices are public for Sugar Sell, at $68, $98 and $155 a user a month billed annually, with Precision+ bundles quoted by sales and nothing per call (10). No free tier or self-serve trial was found. The site's buttons ask for a demo, and a 30-day Evaluation Agreement exists for evaluations Sugar arranges (0). A person buys through sales and an admin creates the user an agent logs in as (0).\n\n## Score by category\n\n| Category | Weight | Breakcold | SugarAI (SugarCRM) | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 45 | 61 | SugarAI (SugarCRM) +16 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 90 | 40 | Breakcold +50 |\n| Agent ergonomics | 13% (16.2 this run) | 67 | 69 | SugarAI (SugarCRM) +2 |\n| Security \u0026 auth | 14% (17.5 this run) | 60 | 51 | Breakcold +9 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 15 | 10 | Breakcold +5 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 60 | 12 | Breakcold +48 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 67 | 69 | SugarAI (SugarCRM) +2 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **58 · C** | **47.2 · D** | |\n\n## Facts side by side\n\n| Fact | Breakcold | SugarAI (SugarCRM) |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Logike SAS | SugarAI Software Inc. |\n| Hosted endpoint | `https://mcp.breakcold.com/mcp/v1` | no (local only) |\n| Transports | Streamable HTTP | HTTP |\n| Auth | OAuth or key | OAuth |\n| Pricing | Paid | Paid |\n| x402 | no | no |\n| Licence | none | Proprietary service under the SugarAI Customer Terms of Service |\n| Tools exposed | 72 | none |\n| Read-only variant documented | no | no |\n| llms.txt | yes | no |\n| Last release | 2026-11-06 | none |\n| Terms last updated | couldn't be read | not read yet |\n| Privacy policy last updated | couldn't be read | no date given |\n| Customer content may train models | couldn't be read | not read yet |\n| Terms restrict automated access | couldn't be read | not read yet |\n| Terms restrict benchmarking | couldn't be read | not read yet |\n| Terms or service can change without notice | couldn't be read | not read yet |\n| Arbitration or class-action waiver | couldn't be read | not read yet |\n\n## How the scores have moved\n\n### Breakcold\n\nNo score change since it was listed.\n\n### SugarAI (SugarCRM)\n\n- -2.2 on 4 November 2026: correction\n- -0.2 on 30 October 2026: checklist\n- -0.1 on 28 October 2026: correction\n\n## Verdicts\n\n**Breakcold.** Breakcold's API and hosted MCP server are built for agents, with an OpenAPI contract, scoped and expiring keys, published rate limits, idempotency keys and message sends that stay drafts until confirmed. No status page, SLA or security certification was found, and the only trial needs a card on a plan from $99 a month.\n\n**SugarAI (SugarCRM).** The REST reference covers 350 endpoint pages with filters, field selection, bulk calls and upsert by `sync_key`. SugarAI's AI Supplemental Terms forbid connecting a customer's or third party's AI agent or MCP connector to the APIs unless Sugar has approved it, tokens carry no scopes, and no OpenAPI file, trial or SLA was found.\n\n## Before you call either\n\n### Breakcold\n\n1. Call `capabilities_list` or `tools_search` first to see which tools the granted scopes allow\n2. Send an Idempotency-Key on REST creates and a stable idempotency key on `records_create`, so retries return the original result\n3. Leave `sendMode` unset on compose and send tools until the user has confirmed the message\n4. Pass `fields` on record lists to cut the response to the fields you need\n5. On 429 wait for Retry-After or `retryAfterMs`; over MCP the error code is -32029\n\n### SugarAI (SugarCRM)\n\n1. Confirm that Sugar has approved the agent integration before connecting. The AI Supplemental Terms forbid unapproved AI agents and MCP connectors on the APIs\n2. POST to `/rest/v11_27/oauth2/token` with `grant_type` `password` and a `platform` other than `base`, `mobile` or `portal`, or the login can end the user's own session\n3. Send the access token in the `OAuth-Token` header. It lasts 60 minutes by default, so store the refresh token and not the password\n4. Stay under 20 requests a second on SugarCloud and reuse one session for batches. Over-limit traffic is blocked by IP address until support lifts it\n5. Page with `max_num` and `offset` until `next_offset` is -1, and pass `fields` to keep responses small\n6. Use `PATCH /integrate/:module/:sync_key_field_name/:sync_key_field_value` for writes that may be retried, since it inserts or updates by `sync_key`\n\n## Questions\n\n### Which is better for AI agents, Breakcold or SugarAI (SugarCRM)?\n\nBreakcold scores 58 (C) on agent readiness against SugarAI (SugarCRM)'s 47.2 (D), and leads in 4 of 7 scored categories. SugarAI (SugarCRM) leads on reliability.\n\n### Do Breakcold and SugarAI (SugarCRM) need an API key?\n\nBreakcold takes an API key or an OAuth sign-in. SugarAI (SugarCRM) uses an OAuth sign-in.\n\n### Can an agent call Breakcold and SugarAI (SugarCRM) without installing anything?\n\nBreakcold has a hosted endpoint at https://mcp.breakcold.com/mcp/v1. No hosted endpoint is listed for SugarAI (SugarCRM).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/breakcold-vs-sugarcrm.json, and with the fewest tokens: https://www.anchorterminal.com/compare/breakcold-vs-sugarcrm.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"breakcold\", \"b\": \"sugarcrm\"}`. From a terminal: `anchor compare breakcold sugarcrm`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/breakcold.json and https://www.anchorterminal.com/api/v1/tools/sugarcrm.json\n\n## Other comparisons with Breakcold or SugarAI (SugarCRM)\n\n- [Affinity vs Breakcold](https://www.anchorterminal.com/compare/affinity-vs-breakcold.md)\n- [Affinity vs SugarAI (SugarCRM)](https://www.anchorterminal.com/compare/affinity-vs-sugarcrm.md)\n- [Attio API + MCP vs Breakcold](https://www.anchorterminal.com/compare/attio-vs-breakcold.md)\n- [Attio API + MCP vs SugarAI (SugarCRM)](https://www.anchorterminal.com/compare/attio-vs-sugarcrm.md)\n- [Breakcold vs Capsule CRM](https://www.anchorterminal.com/compare/breakcold-vs-capsule-crm.md)\n- [Breakcold vs Close API + MCP](https://www.anchorterminal.com/compare/breakcold-vs-close.md)\n- [Breakcold vs Copper API](https://www.anchorterminal.com/compare/breakcold-vs-copper.md)\n- [Breakcold vs Microsoft Dynamics 365 Sales](https://www.anchorterminal.com/compare/breakcold-vs-dynamics-365-sales.md)\n- [Breakcold vs folk API + MCP](https://www.anchorterminal.com/compare/breakcold-vs-folk.md)\n- [Breakcold vs Freshsales API](https://www.anchorterminal.com/compare/breakcold-vs-freshsales.md)\n- [Breakcold vs HubSpot API + MCP](https://www.anchorterminal.com/compare/breakcold-vs-hubspot-mcp.md)\n- [Breakcold vs Nutshell](https://www.anchorterminal.com/compare/breakcold-vs-nutshell.md)\n- [Breakcold vs Payani AI](https://www.anchorterminal.com/compare/breakcold-vs-payani-ai.md)\n- [Breakcold vs Pipedrive API + MCP](https://www.anchorterminal.com/compare/breakcold-vs-pipedrive.md)\n- [Breakcold vs Relaticle](https://www.anchorterminal.com/compare/breakcold-vs-relaticle.md)\n- [Breakcold vs Salesflare](https://www.anchorterminal.com/compare/breakcold-vs-salesflare.md)\n- [Breakcold vs Salesforce API + MCP](https://www.anchorterminal.com/compare/breakcold-vs-salesforce.md)\n- [Breakcold vs Streak API + MCP](https://www.anchorterminal.com/compare/breakcold-vs-streak.md)\n- [Breakcold vs Twenty API + MCP](https://www.anchorterminal.com/compare/breakcold-vs-twenty.md)\n- [Breakcold vs Zoho CRM](https://www.anchorterminal.com/compare/breakcold-vs-zoho-crm.md)\n- [Capsule CRM vs SugarAI (SugarCRM)](https://www.anchorterminal.com/compare/capsule-crm-vs-sugarcrm.md)\n- [Close API + MCP vs SugarAI (SugarCRM)](https://www.anchorterminal.com/compare/close-vs-sugarcrm.md)\n- [Copper API vs SugarAI (SugarCRM)](https://www.anchorterminal.com/compare/copper-vs-sugarcrm.md)\n- [Microsoft Dynamics 365 Sales vs SugarAI (SugarCRM)](https://www.anchorterminal.com/compare/dynamics-365-sales-vs-sugarcrm.md)\n- [folk API + MCP vs SugarAI (SugarCRM)](https://www.anchorterminal.com/compare/folk-vs-sugarcrm.md)\n- [Freshsales API vs SugarAI (SugarCRM)](https://www.anchorterminal.com/compare/freshsales-vs-sugarcrm.md)\n- [HubSpot API + MCP vs SugarAI (SugarCRM)](https://www.anchorterminal.com/compare/hubspot-mcp-vs-sugarcrm.md)\n- [Nutshell vs SugarAI (SugarCRM)](https://www.anchorterminal.com/compare/nutshell-vs-sugarcrm.md)\n- [Payani AI vs SugarAI (SugarCRM)](https://www.anchorterminal.com/compare/payani-ai-vs-sugarcrm.md)\n- [Pipedrive API + MCP vs SugarAI (SugarCRM)](https://www.anchorterminal.com/compare/pipedrive-vs-sugarcrm.md)\n- [Relaticle vs SugarAI (SugarCRM)](https://www.anchorterminal.com/compare/relaticle-vs-sugarcrm.md)\n- [Salesflare vs SugarAI (SugarCRM)](https://www.anchorterminal.com/compare/salesflare-vs-sugarcrm.md)\n- [Salesforce API + MCP vs SugarAI (SugarCRM)](https://www.anchorterminal.com/compare/salesforce-vs-sugarcrm.md)\n- [Streak API + MCP vs SugarAI (SugarCRM)](https://www.anchorterminal.com/compare/streak-vs-sugarcrm.md)\n- [SugarAI (SugarCRM) vs Twenty API + MCP](https://www.anchorterminal.com/compare/sugarcrm-vs-twenty.md)\n- [SugarAI (SugarCRM) vs Zoho CRM](https://www.anchorterminal.com/compare/sugarcrm-vs-zoho-crm.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Breakcold vs SugarAI (SugarCRM)", "url": "" } ], "description": "Breakcold scores 58 (C) to SugarAI's 47.2 (D) for crm records. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Breakcold C 58", "SugarAI (SugarCRM) D 47.2", "scores" ], "h1": "Breakcold vs SugarAI (SugarCRM)", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/breakcold-vs-sugarcrm", "published": "2026-10-01", "section": "tools", "title": "Breakcold vs SugarAI for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/breakcold-vs-sugarcrm" }, "tokens": { "markdown": 5150, "slim": 2980 }, "version": 1 }